dialog
initDialog
show
Overview
overview
7Static
static
340cdf2690c...18.exe
windows7-x64
740cdf2690c...18.exe
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ed.dll
windows7-x64
3$PLUGINSDI...ed.dll
windows10-2004-x64
3$TEMP/Goog...ed.exe
windows7-x64
3$TEMP/Goog...ed.exe
windows10-2004-x64
3KwMusic.exe
windows7-x64
1KwMusic.exe
windows10-2004-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
40cdf2690c4925a9a7c4d930a83f2ae0_JaffaCakes118.exe
Resource
win7-20241010-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
40cdf2690c4925a9a7c4d930a83f2ae0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/gtapi_signed.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/gtapi_signed.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
$TEMP/GoogleToolbarInstaller_download_signed.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
$TEMP/GoogleToolbarInstaller_download_signed.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
KwMusic.exe
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
KwMusic.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
40cdf2690c4925a9a7c4d930a83f2ae0_JaffaCakes118
-
Size
4.0MB
-
MD5
40cdf2690c4925a9a7c4d930a83f2ae0
-
SHA1
22a32eb6c736c093bb9e21dbd588f84031714ddc
-
SHA256
b27be25448f8490efa501fdb5b168784a9b2089d70488ce23f542693c16443cf
-
SHA512
48b14e32cb66d7bc3882820583ce184e6afb4aea7d8b3faf89c88018dca121d9f7c14041ee3e69ecd1647bef40d483b0ec2d10d92cd3b8bc0f2a5f33d0ae3445
-
SSDEEP
98304:AXBE6n0jfqkWGSrVDgHV9pVRyuIZS+XBsTBhDESq4:AJn0bFHZVRsU+XOvDfz
Score
3/10
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource 40cdf2690c4925a9a7c4d930a83f2ae0_JaffaCakes118 unpack001/$PLUGINSDIR/InstallOptions.dll unpack001/$PLUGINSDIR/System.dll unpack001/KwMusic.exe -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_1
Files
-
40cdf2690c4925a9a7c4d930a83f2ae0_JaffaCakes118.exe windows:4 windows x86 arch:x86
237a51742fed62d237b6f1b75452402f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
SetFileTime
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
MulDiv
FindNextFileA
FindFirstFileA
DeleteFileA
CopyFileA
user32
ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
SystemParametersInfoA
RegisterClassA
EndDialog
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CreateDialogParamA
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
LoadImageA
GetDC
EnableWindow
InvalidateRect
CreateWindowExA
GetWindowLongA
DrawFocusRect
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
TrackPopupMenu
wsprintfA
SendMessageA
CallWindowProcA
MapWindowPoints
GetWindowRect
ScreenToClient
PtInRect
LoadCursorA
SetCursor
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetWindowLongA
gdi32
SetBkColor
GetDeviceCaps
GetCurrentObject
GetObjectA
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegEnumKeyA
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$LOCALAPPDATA/Google/Custom Buttons/kuwo_music.xml.xml
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
57354bdeea3dfae6e948101add87501a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc
user32
GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA
gdi32
SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 954B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/KwMusic_google.ini
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
4ec328f99bdd944fc98d8a5cf11f7a62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/gtapi_signed.dll.dll windows:4 windows x86 arch:x86
a1cddef184beba696e690091795eacfd
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16/07/2004, 00:00Not After15/07/2014, 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
31:44:c0:6a:6c:fb:50:76:c1:5d:39:95:72:c6:94:21Certificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before19/06/2007, 00:00Not After18/06/2010, 23:59SubjectCN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
5a:d4:89:1c:dc:a0:67:a5:0d:5f:31:70:c9:f5:1a:18:ad:f2:70:25Signer
Actual PE Digest5a:d4:89:1c:dc:a0:67:a5:0d:5f:31:70:c9:f5:1a:18:ad:f2:70:25Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
gtapi.pdb
Imports
kernel32
GetCurrentProcessId
GetModuleHandleW
LocalFree
OpenProcess
lstrcmpA
GetLocalTime
LoadLibraryW
LoadLibraryA
LocalAlloc
lstrlenA
FreeLibrary
GetFileAttributesW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetVersion
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetProcAddress
lstrcmpiA
CloseHandle
SetLastError
GetLastError
GetVersionExA
TerminateProcess
OutputDebugStringA
user32
CharUpperA
CharNextA
advapi32
RegQueryValueExA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Exports
Exports
CancelToolbarInstall
GetToolbarInstallerProgress
ToolbarCompatibilityCheck
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/t4_zh_cn.bmp
-
$TEMP/GoogleToolbarInstaller_download_signed.exe.exe windows:4 windows x86 arch:x86
e98766cda304a4f46c928a931a1c8967
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16/07/2004, 00:00Not After15/07/2014, 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
31:44:c0:6a:6c:fb:50:76:c1:5d:39:95:72:c6:94:21Certificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before19/06/2007, 00:00Not After18/06/2010, 23:59SubjectCN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
fa:6e:26:b6:b7:8d:a1:49:b2:ba:56:d1:b5:a1:bd:9f:1f:a0:28:ecSigner
Actual PE Digestfa:6e:26:b6:b7:8d:a1:49:b2:ba:56:d1:b5:a1:bd:9f:1f:a0:28:ecDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
EndDialog
crypt32
CertFreeCertificateChain
urlmon
RegisterBindStatusCallback
version
VerQueryValueW
wintrust
WinVerifyTrust
wininet
InternetOpenUrlW
advapi32
GetAce
ole32
CoUninitialize
shell32
ShellExecuteExW
oleaut32
VarUI4FromStr
shlwapi
SHSetValueW
gdi32
CreateRectRgn
userenv
UnloadUserProfile
msi
ord238
Sections
.text Size: 147KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
KwMusic.exe.exe windows:4 windows x86 arch:x86
2f8a852d0d9244523547dd686577f2ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
d:\project\working\2423\MusicBox_V2\dev\bin_r\KwMusic.pdb
Imports
http
?GetHeader@YL_CHTTPRequest@@QAEPAEAAJ@Z
?SendRequest@YL_CHTTPRequest@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4REQUEST_TYPE@1@JPAEI@Z
??1YL_CHTTPDownFile@@QAE@XZ
?GetContent@YL_CHTTPRequest@@QAEPAEAAJ@Z
??0YL_CHTTPRequest@@QAE@XZ
?Disconnect@YL_CHTTPRequest@@QAE_NXZ
?GetRequestTime@YL_CHTTPRequest@@QAEXPAH0@Z
??1YL_CHTTPRequest@@QAE@XZ
?GetHeaderItem@YL_CHTTPRequest@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
??0YL_CHTTPDownFile@@QAE@XZ
?Request@YL_CHTTPRequest@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4REQUEST_TYPE@1@JPAEI@Z
?DownloadFile@YL_CHTTPDownFile@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAI@Z
zlib
?UnCompress@YL_CZlibZip@@SA?AW4ZIP_RESULT@1@PAEPAJPBEJ@Z
dotag
?SaveTag@YL_CTagDealer@@SA_NPBDPBUMusicTag@1@@Z
?GetTag@YL_CTagDealer@@SA_NPBDPAUMusicTag@1@@Z
player
?CreateAudioPlayer@@YAPAVIAudioPlayer@@XZ
?ReleaseVideoPlayer@@YAXPAVIVideoPlayer@@@Z
?CreateVideoPlayer@@YAPAVIVideoPlayer@@XZ
?ReleaseAudioPlayer@@YAXPAVIAudioPlayer@@@Z
pd
StopAll
AttachP2PListener
CloseKWMV
DetachP2PListener
StartKWMV
SetSysMsgWnd
StartDown
StopDown
GetResInfo
DelRes
fzip
?UnCompress@YL_CFileZip@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@_N@Z
?UnCompress@YL_CFileZip@@SA_NPAXIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@_N@Z
reco
?RecoSongByFp@YL_CRecoSong@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAURECO_SONG_INFO@@PAI_N@Z
?SetInfo@YL_CRecoSong@@SAXPBD000@Z
?RecoSongs2@YL_CRecoSong@@SA_NABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AAV?$vector@URECO_SONG_INFO@@V?$allocator@URECO_SONG_INFO@@@std@@@3@PAV?$vector@URECO_RESULT@@V?$allocator@URECO_RESULT@@@std@@@3@@Z
?GetFPTimeAndInfo@YL_CRecoSong@@SAXPAH000PA_N@Z
kwlogsvr
?LogUserActMsg@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?LogRealMsg@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_NPAPAEPAI@Z
?LogInit@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetStartupType@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?LogFunctionalMsg@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?UpdateConfig@@YAXXZ
?YL_Log@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H0PBDZZ
wininet
InternetGetCookieA
cm
??1YL_CPUMem@@QAE@XZ
??0YL_CPUMem@@QAE@XZ
?GetCPUUsage@YL_CPUMem@@QAE_NPBDAAI@Z
?GetMemUsage@YL_CPUMem@@QAE_NPBDAAI@Z
mfc71
ord4394
ord1654
ord1598
ord2876
ord3991
ord3799
ord2884
ord2878
ord3423
ord2086
ord1545
ord4232
ord3164
ord587
ord589
ord330
ord2075
ord4385
ord4400
ord5531
ord2853
ord2942
ord3169
ord468
ord694
ord2787
ord2814
ord3473
ord1279
ord5637
ord2090
ord1637
ord1558
ord4236
ord642
ord6120
ord602
ord6037
ord5642
ord347
ord3651
ord2092
ord1641
ord1571
ord4238
ord2958
ord3230
ord658
ord5866
ord4761
ord2873
ord2794
ord3402
ord326
ord3875
ord2882
ord1728
ord3680
ord3587
ord4350
ord754
ord2527
ord651
ord1564
ord416
ord1198
ord1185
ord3255
ord5331
ord6297
ord5320
ord6286
ord313
ord1482
ord3952
ord5871
ord3795
ord1565
ord1397
ord6266
ord1933
ord1570
ord4237
ord3229
ord657
ord3406
ord4108
ord4100
ord2094
ord3244
ord1955
ord1283
ord3997
ord907
ord5710
ord2292
ord6144
ord2271
ord6179
ord6173
ord1929
ord5523
ord5588
ord3489
ord620
ord3163
ord1554
ord3195
ord3879
ord3337
ord4001
ord5641
ord502
ord1192
ord1160
ord4118
ord5833
ord6168
ord3397
ord3576
ord3989
ord5563
ord2475
ord2263
ord3287
ord5976
ord1968
ord5611
ord6060
ord5608
ord6054
ord4161
ord6057
ord5888
ord5727
ord5647
ord5414
ord5401
ord5921
ord5719
ord3180
ord1161
ord5985
ord3350
ord5622
ord5986
ord3352
ord3302
ord5634
ord2234
ord1071
ord1930
ord3339
ord3503
ord3295
ord530
ord722
ord6005
ord5714
ord1118
ord1091
ord3863
ord4041
ord6062
ord5444
ord751
ord2477
ord1470
ord1595
ord562
ord2938
ord908
ord5529
ord298
ord300
ord2233
ord2469
ord865
ord1092
ord3233
ord423
ord660
ord4063
ord866
ord5466
ord3428
ord590
ord1117
ord331
ord3696
ord6180
ord6174
ord715
ord1643
ord1581
ord3292
ord1395
ord2164
ord1873
ord3760
ord2654
ord4109
ord5868
ord2867
ord2370
ord5377
ord5869
ord1486
ord1024
ord655
ord1443
ord5111
ord421
ord3454
ord4320
ord2866
ord5873
ord3477
ord4298
ord4129
ord4132
ord2008
ord1302
ord4131
ord4961
ord4507
ord4946
ord4649
ord4964
ord5053
ord4805
ord4364
ord4710
ord4796
ord4963
ord4377
ord4376
ord4287
ord4794
ord4948
ord4200
ord4516
ord4971
ord4480
ord4529
ord4970
ord4846
ord4501
ord4368
ord4439
ord5049
ord4559
ord4920
ord4520
ord4519
ord4914
ord3740
ord4444
ord4443
ord4790
ord4204
ord4781
ord4389
ord4980
ord4171
ord4178
ord4587
ord4776
ord4386
ord4401
ord4399
ord4381
ord4384
ord4379
ord4863
ord4860
ord3974
ord5914
ord1619
ord5151
ord5206
ord3344
ord1360
ord5166
ord1562
ord2717
ord4273
ord648
ord2419
ord2420
ord2421
ord2418
ord2417
ord496
ord410
ord6282
ord6288
ord1793
ord3088
ord4674
ord4673
ord1308
ord2176
ord1729
ord591
ord1931
ord1483
ord4098
ord2089
ord1547
ord4234
ord3171
ord4752
ord4928
ord2803
ord4342
ord4927
ord3648
ord3466
ord4250
ord5165
ord4450
ord2246
ord1913
ord2615
ord5009
ord5012
ord4309
ord4135
ord2939
ord4904
ord943
ord5356
ord2992
ord2425
ord2424
ord4019
ord1557
ord3945
ord5148
ord5205
ord2173
ord1306
ord4277
ord4265
ord635
ord395
ord4299
ord1151
ord5625
ord383
ord2308
ord5284
ord5287
ord5661
ord996
ord5107
ord2804
ord2159
ord6280
ord4127
ord6205
ord548
ord675
ord442
ord4044
ord2083
ord2870
ord378
ord5419
ord1646
ord1588
ord3312
ord736
ord1875
ord4564
ord2019
ord333
ord5969
ord739
ord1647
ord1589
ord3315
ord1881
ord4211
ord4734
ord2022
ord2943
ord3205
ord391
ord5746
ord427
ord664
ord3591
ord4067
ord870
ord259
ord1580
ord2346
ord262
ord4065
ord868
ord5526
ord662
ord425
ord6138
ord6178
ord3349
ord3348
ord5055
ord2719
ord3676
ord2098
ord1650
ord1594
ord4243
ord3324
ord748
ord785
ord308
ord1614
ord3908
ord3605
ord6255
ord3934
ord1009
ord1425
ord3761
ord3401
ord2264
ord753
ord563
ord2131
ord741
ord2991
ord3204
ord2368
ord2468
ord5403
ord911
ord5731
ord4123
ord1916
ord2451
ord760
ord572
ord5214
ord3596
ord3684
ord781
ord384
ord5089
ord629
ord2903
ord5323
ord1439
ord2306
ord6017
ord3331
ord2707
ord5493
ord380
ord1917
ord1123
ord1031
ord3514
ord2322
ord2657
ord5613
ord5491
ord6236
ord1794
ord1892
ord3758
ord6063
ord4735
ord4212
ord3317
ord4240
ord1402
ord5915
ord1591
ord2095
ord3441
ord385
ord3056
ord2021
ord3038
ord630
ord265
ord266
ord4580
ord354
ord3182
ord4262
ord4486
ord2862
ord5200
ord1599
ord1655
msvcr71
_strdup
_mbsrev
_mbsnbcpy
strrchr
_stat64
sscanf
vsprintf
_vscprintf
_mbschr
wcschr
fwrite
strncpy
_access
_atoi64
memmove
fopen
fread
fclose
fseek
fprintf
_beginthread
exit
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
__RTDynamicCast
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
strtoul
strtod
tolower
isxdigit
fgets
strncmp
_purecall
time
srand
atoi
_snprintf
rand
strstr
__p___argc
__p___argv
__CxxFrameHandler
sprintf
_mbsstr
ftell
_beginthreadex
wcslen
wcscmp
_mbscmp
_time64
atof
strchr
atol
wcscpy
_except_handler3
free
malloc
floor
tmpfile
_setmbcp
fflush
rewind
isdigit
_ui64toa
_unlink
strftime
_localtime64
_errno
mbstowcs
setlocale
_splitpath
_stricmp
_itoa
_mbsncmp
_mbsnbcmp
_mbccpy
_local_unwind2
_strnicmp
memset
??1type_info@@UAE@XZ
__security_error_handler
__dllonexit
_onexit
?terminate@@YAXXZ
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
ldexp
_strupr
_putw
_strcmpi
memcpy
_CIacos
_finite
_ftol
_CIpow
iswpunct
iswdigit
iswalpha
iswspace
longjmp
_setjmp3
isspace
_mbclen
kernel32
GetProcAddress
FindFirstFileA
FindNextFileA
FindClose
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
LeaveCriticalSection
GetModuleFileNameA
GetExitCodeThread
TerminateThread
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
SetProcessWorkingSetSize
SetUnhandledExceptionFilter
GetCommandLineA
LoadLibraryA
FreeLibrary
OpenProcess
CreateEventA
CreateThread
GetTickCount
SetEvent
GetTempPathA
lstrcatA
CreateToolhelp32Snapshot
Process32First
Process32Next
CreateMutexA
ReleaseMutex
CloseHandle
WaitForSingleObject
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
EnterCriticalSection
GetPrivateProfileStringA
WritePrivateProfileStringA
LockResource
LoadResource
FindResourceA
CreateProcessA
MoveFileExA
RemoveDirectoryA
DeleteFileA
SetFileAttributesA
CreateDirectoryA
GetFileAttributesA
GetSystemDirectoryA
GlobalFree
GlobalUnlock
MapViewOfFile
CreateFileMappingA
CreateFileA
GlobalLock
lstrcpyA
GlobalAlloc
lstrcpynA
MulDiv
GetWindowsDirectoryA
WinExec
ResetEvent
ResumeThread
FreeResource
HeapFree
GetProcessHeap
GetModuleHandleA
HeapAlloc
GetCurrentDirectoryA
FlushInstructionCache
GetCPInfo
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
WritePrivateProfileSectionA
GetPrivateProfileSectionA
WriteFile
SetFilePointer
GetFileSize
InterlockedIncrement
SystemTimeToFileTime
GetSystemTime
WaitForMultipleObjects
GetFileTime
SetFileTime
CopyFileA
ReadFile
LocalFree
LocalAlloc
IsDBCSLeadByte
GetDriveTypeA
GetLogicalDriveStringsA
FileTimeToSystemTime
InterlockedDecrement
ExitProcess
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapDestroy
HeapReAlloc
HeapSize
SetLastError
VirtualProtect
GetSystemInfo
IsProcessorFeaturePresent
OutputDebugStringA
CreateFileW
UnmapViewOfFile
Sleep
user32
UnregisterHotKey
RegisterHotKey
GetWindowRgn
GetAsyncKeyState
wsprintfA
CheckDlgButton
IsDlgButtonChecked
SetCursorPos
mouse_event
ShowCursor
UpdateLayeredWindow
LoadCursorFromFileA
SetLayeredWindowAttributes
wsprintfW
SetActiveWindow
PostQuitMessage
keybd_event
EnumChildWindows
RegisterWindowMessageA
GetDoubleClickTime
GetKeyNameTextA
GetDlgItem
FindWindowExA
MoveWindow
CheckMenuItem
GetMenuItemInfoA
ModifyMenuA
InsertMenuA
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
DestroyIcon
DrawIconEx
GetIconInfo
CallNextHookEx
SetWindowsHookExA
RegisterClassExA
UnhookWindowsHookEx
GrayStringA
TabbedTextOutA
IsRectEmpty
SetRectEmpty
LoadImageA
CallWindowProcA
MapWindowPoints
GetWindowDC
WindowFromDC
FrameRect
GetSysColorBrush
DrawFrameControl
SetPropA
RemovePropA
GetPropA
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
DrawTextW
GetClassInfoA
SetParent
ShowScrollBar
OffsetRect
GetNextDlgGroupItem
DrawEdge
LoadMenuA
GetSubMenu
DrawFocusRect
GetCursorPos
GetFocus
GetUpdateRect
CopyRect
SetRect
CopyImage
FillRect
EqualRect
MessageBeep
GetMessagePos
InflateRect
CopyIcon
GetSysColor
RegisterClassA
SetWindowLongA
BeginPaint
EndPaint
DefWindowProcA
WindowFromPoint
SystemParametersInfoA
CreateWindowExA
GetKeyState
DrawTextA
DestroyWindow
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
UpdateWindow
ScreenToClient
FindWindowA
GetWindowTextA
GetClassNameA
SetWindowPos
PtInRect
GetForegroundWindow
AttachThreadInput
BringWindowToTop
GetDesktopWindow
InvalidateRect
ReleaseCapture
EnableWindow
SetWindowRgn
GetSystemMetrics
LoadIconA
GetWindowLongA
SendMessageTimeoutA
IsWindow
PostMessageA
TranslateAcceleratorA
DrawTextExA
SetForegroundWindow
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
LoadAcceleratorsA
GetWindowThreadProcessId
GetParent
SetCapture
GetCapture
KillTimer
SetTimer
RedrawWindow
IsMenu
ReleaseDC
GetDC
ClientToScreen
GetClientRect
IsIconic
GetSystemMenu
EnableMenuItem
GetWindowRect
LoadCursorA
SetCursor
DrawIcon
LoadBitmapA
IntersectRect
GetWindow
IsWindowVisible
SendMessageA
MessageBoxA
gdi32
GetClipBox
CreatePolygonRgn
EqualRgn
OffsetRgn
FrameRgn
GetBkMode
Ellipse
GetTextExtentPoint32W
MoveToEx
PtInRegion
EnumFontFamiliesExA
GetBkColor
Escape
TextOutA
RectVisible
PtVisible
SetPixel
Polygon
GetObjectW
SetWindowOrgEx
PlayEnhMetaFile
ExtTextOutA
CreatePatternBrush
SetBrushOrgEx
UnrealizeObject
GetTextExtentPointW
CreateRectRgn
CombineRgn
SelectClipRgn
GetPixel
GetCharWidthA
SaveDC
StretchBlt
SetStretchBltMode
RestoreDC
CreateFontA
GetTextColor
GetTextExtentPoint32A
GetStockObject
LineTo
SetBkMode
SetTextColor
CreateBitmap
SetMapMode
BitBlt
SetBkColor
GetDeviceCaps
CreateFontIndirectA
GetTextMetricsA
CreatePen
CreateSolidBrush
GetObjectA
CreateICA
ExtCreateRegion
GetDIBits
CreateDIBitmap
CreateDIBSection
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
SelectPalette
DeleteObject
CreatePalette
PatBlt
GetTextAlign
SetBitmapDimensionEx
GetCharacterPlacementA
GetCharacterPlacementW
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectW
SetTextAlign
ExtTextOutW
IntersectClipRect
GetBitmapDimensionEx
msimg32
TransparentBlt
AlphaBlend
comdlg32
CommDlgExtendedError
advapi32
RegDeleteValueA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExA
shell32
ShellExecuteA
SHChangeNotify
SHGetFolderPathA
DragQueryFileA
SHGetFileInfoA
SHGetSpecialFolderPathA
SHFileOperationA
Shell_NotifyIconA
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
comctl32
ImageList_BeginDrag
ImageList_DragMove
ImageList_EndDrag
ord17
_TrackMouseEvent
ImageList_GetImageCount
ImageList_Remove
ImageList_DragShowNolock
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_SetBkColor
ImageList_Draw
ImageList_GetIcon
ImageList_Add
ImageList_DragEnter
ImageList_DragLeave
InitCommonControlsEx
ImageList_AddMasked
shlwapi
HashData
PathFileExistsA
StrStrIA
PathAddBackslashA
ole32
CoInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
oleaut32
SysAllocString
VariantInit
OleLoadPicturePath
VariantClear
OleLoadPicture
SysAllocStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
msvcp71
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?bad@ios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?exceptions@ios_base@std@@QAEXH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@HH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?unsetf@ios_base@std@@QAEXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
?setf@ios_base@std@@QAEHHH@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??1istrstream@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??7ios_base@std@@QBE_NXZ
??1ostrstream@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?freeze@strstreambuf@std@@QAEX_N@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@strstreambuf@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Bios_base@std@@QBEPAXXZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@XZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@V312@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Viterator@12@0PB_W@Z
??_D?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?to_int_type@?$char_traits@_W@std@@SAGAB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?width@ios_base@std@@QBEHXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?to_int_type@?$char_traits@D@std@@SAHABD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?to_char_type@?$char_traits@_W@std@@SA_WABG@Z
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?eof@?$char_traits@_W@std@@SAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?max_size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?uncaught_exception@std@@YA_NXZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
ex_dll
?RecordExceptionInfo@@YGJPAU_EXCEPTION_POINTERS@@@Z
sensapi
IsNetworkAlive
ws2_32
connect
closesocket
gethostbyname
htons
socket
recv
send
localserver
?SetActiveID@CLocalSvrManage@@QAEXH@Z
?GetActiveID@CLocalSvrManage@@QAEHXZ
??0CLocalSvrManage@@QAE@XZ
?SendByID@CLocalSvrManage@@QAEXPAEHH@Z
?SendToAll@CLocalSvrManage@@QAEXPAEH@Z
?GetConnectionCount@CLocalSvrManage@@QAEHXZ
?Close@CLocalSvrManage@@QAEXXZ
?RemoveFlashMsgReceiver@CLocalSvrManage@@QAEXPAVIFlashMsgReceiver@@@Z
?AddFlashMsgReceiver@CLocalSvrManage@@QAEXPAVIFlashMsgReceiver@@@Z
?SendToAllExceptID@CLocalSvrManage@@QAEXPAEHH@Z
?Create@CLocalSvrManage@@QAEHI@Z
??1CLocalSvrManage@@QAE@XZ
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 476KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SHARED Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 244KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ