CreateWebSocketPlugin
GetChannel
GetMTCode
GetSupportFan
IsSupportKbdLed
IsYOGADevice
Overview
overview
10Static
static
10CommonPlugin.dll
windows7-x64
3CommonPlugin.dll
windows10-2004-x64
3GamePlugin.dll
windows7-x64
3GamePlugin.dll
windows10-2004-x64
3PCM硬件�....0.exe
windows7-x64
1PCM硬件�....0.exe
windows10-2004-x64
1VoiceModeO...LL.dll
windows7-x64
1VoiceModeO...LL.dll
windows10-2004-x64
1WrapPlugin.dll
windows7-x64
3WrapPlugin.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
CommonPlugin.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
CommonPlugin.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
GamePlugin.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
GamePlugin.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
PCM硬件能力判断工具v1.0.exe
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
PCM硬件能力判断工具v1.0.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
VoiceModeOfOnlineClassDLL.dll
Resource
win7-20220901-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
VoiceModeOfOnlineClassDLL.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
WrapPlugin.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
WrapPlugin.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
9239931f6208be5b6e934b6aad575952f28cf90eb8887d9c09c8014f374c0619
-
Size
4.0MB
-
MD5
a429ca279ab06a2e21c77ada2a79ff3e
-
SHA1
a1c23e183b2c43ddcb3ce0ed44a5477834616ef2
-
SHA256
9239931f6208be5b6e934b6aad575952f28cf90eb8887d9c09c8014f374c0619
-
SHA512
d98a0f4ba08af5e588837b13dd285a2fa0eb929b0be000e003a9b0d62e6da12cdc18b3c4c010437ffdd42a370d0456a78d39b76f39131a6d1fe259c773ee57ed
-
SSDEEP
98304:+f1cs1yLtb7BjPG5Yi1N6kZc462W8i5T6UUpdcs:+db1yLR71G51ZDW552/pdL
Score
10/10
Malware Config
Extracted
Family
joker
C2
https://pcsd-pcmgr-ldc.oss-cn-beijing.aliyuncs.com
Signatures
-
Joker family
Files
-
9239931f6208be5b6e934b6aad575952f28cf90eb8887d9c09c8014f374c0619.rar
-
CommonPlugin.dll.dll windows x86
3d4c90de0d9f11e046ffd056f0403354
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
FindFirstFileA
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentProcess
VerifyVersionInfoW
VerSetConditionMask
FindClose
FindNextFileW
FindFirstFileW
CopyFileW
ResetEvent
SetEvent
OpenEventW
DecodePointer
InitializeCriticalSectionEx
WinExec
GlobalMemoryStatusEx
GetSystemPowerStatus
Sleep
DeviceIoControl
GetExitCodeProcess
WTSGetActiveConsoleSessionId
GetCurrentProcessId
ProcessIdToSessionId
ExpandEnvironmentStringsW
GetModuleHandleW
MultiByteToWideChar
GetPrivateProfileStringW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateEventW
SetThreadPriority
RaiseException
ResumeThread
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileIntW
VirtualQuery
GetModuleFileNameW
GetTempPathW
CreateMutexW
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
GetFileSizeEx
DeleteFileW
GetLocalTime
FindResourceExW
FindResourceW
LoadResource
LockResource
SetEndOfFile
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
GetFullPathNameW
GetCurrentDirectoryW
SetStdHandle
GetConsoleCP
GetTimeZoneInformation
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
SizeofResource
SetConsoleTextAttribute
WriteConsoleW
GetStdHandle
WideCharToMultiByte
GetLastError
OutputDebugStringW
GetFileAttributesW
CreateFileW
SetFilePointer
WriteFile
CloseHandle
ReleaseMutex
GetModuleFileNameA
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
SetConsoleCtrlHandler
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
InterlockedFlushSList
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetLocaleInfoW
LCMapStringW
CompareStringW
InitializeCriticalSectionAndSpinCount
GetCPInfo
EncodePointer
GetStringTypeW
IsDebuggerPresent
SetConsoleMode
ReadConsoleW
ReadConsoleA
GetConsoleMode
QueryPerformanceCounter
GetACP
GetModuleHandleExW
GetFileType
FormatMessageA
LoadLibraryA
GetSystemDirectoryA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
AcquireSRWLockShared
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
VirtualAlloc
VirtualFree
GetVersionExW
FlushFileBuffers
GetSystemFirmwareTable
GetSystemTimeAsFileTime
SystemTimeToFileTime
FileTimeToSystemTime
MoveFileW
GetFileSize
SetFileAttributesW
RemoveDirectoryW
GetSystemDirectoryW
GetStartupInfoW
ReadFile
GetLongPathNameW
lstrlenW
TerminateProcess
CreatePipe
GetEnvironmentVariableW
LocalAlloc
FreeResource
OpenProcess
GlobalAlloc
GlobalFree
GetWindowsDirectoryW
LocalFree
CreateProcessW
GetTickCount
LoadLibraryExW
SetLastError
GetNativeSystemInfo
GetSystemTime
user32
FindWindowW
PostMessageW
SendMessageW
GetUserObjectInformationW
GetProcessWindowStation
CharLowerW
CreateWindowExW
RegisterClassW
KillTimer
wsprintfW
MessageBoxW
IsWindow
GetWindowThreadProcessId
GetDC
GetIconInfo
DestroyIcon
comdlg32
GetOpenFileNameW
advapi32
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
GetTokenInformation
OpenProcessToken
QueryServiceStatusEx
RegDeleteKeyW
ControlService
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegOpenCurrentUser
RevertToSelf
ImpersonateLoggedOnUser
DuplicateTokenEx
RegGetValueW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetFileSecurityW
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptSignHashW
RegQueryInfoKeyW
RegEnumValueW
RegFlushKey
RegEnumKeyW
ChangeServiceConfigW
QueryServiceConfigW
RegOpenKeyExA
StartServiceW
RegQueryValueExA
QueryServiceStatus
QueryServiceObjectSecurity
CryptEnumProvidersW
SetServiceObjectSecurity
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityDescriptorDacl
RegCreateKeyW
RegSetValueExA
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegLoadMUIStringW
shell32
SHGetSpecialFolderPathW
SHFileOperationW
SHChangeNotify
CommandLineToArgvW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDataFromIDListW
SHGetDesktopFolder
ShellExecuteExW
ShellExecuteW
ExtractIconExW
SHCreateDirectoryExW
ord727
ole32
CoAllowSetForegroundWindow
CoInitializeEx
CoInitialize
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
oleaut32
VariantInit
VariantClear
SysAllocString
SysFreeString
rpcrt4
UuidFromStringW
ws2_32
WSACleanup
gethostbyname
WSAStartup
inet_ntoa
ioctlsocket
getsockopt
ntohs
WSAGetLastError
htonl
htons
inet_addr
gethostbyaddr
getservbyport
shutdown
socket
setsockopt
getservbyname
connect
closesocket
send
recv
WSASetLastError
gethostname
wrapplugin
GetCPUFrequency
GetNetworkSpeed
ClearMemory
UseSearchPanel
SendNotifyOfTSModeChanged
GetCPUUsage
GetIsSupportSR2
GetIsSupportLogodiy
SMBIOS_GetSysEnclosureType
CallRobot24
GetMemoryRatio
GetCPUThermal
WP_GetSmartHomePath
GetFlipOpenStatus
ContrlTopSpeedMode
shlwapi
PathIsDirectoryA
PathRemoveFileSpecW
PathIsDirectoryW
PathFindFileNameW
PathFileExistsW
PathAppendW
StrCpyNW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
WTSQueryUserToken
crypt32
CertOpenStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CryptBinaryToStringW
CertGetCertificateContextProperty
CryptMsgClose
CertCloseStore
CertFreeCertificateContext
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
powrprof
CallNtPowerInformation
gdiplus
GdipDisposeImage
GdipAlloc
GdipBitmapUnlockBits
GdipCreateBitmapFromHBITMAP
GdipBitmapSetPixel
GdipGetImagePixelFormat
GdipCloneImage
GdipSaveImageToFile
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHICON
GdipBitmapGetPixel
GdipBitmapLockBits
GdipFree
wininet
HttpOpenRequestW
InternetQueryOptionW
InternetQueryDataAvailable
InternetOpenW
HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExW
HttpSendRequestW
InternetWriteFile
InternetCloseHandle
InternetGetConnectedStateExW
InternetConnectW
InternetSetOptionW
InternetAttemptConnect
HttpAddRequestHeadersW
InternetReadFile
fltlib
FilterSendMessage
FilterConnectCommunicationPort
iphlpapi
GetAdaptersInfo
GetAdaptersAddresses
netapi32
NetWkstaUserGetInfo
NetApiBufferFree
wintrust
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
CryptCATCatalogInfoFromContext
WinVerifyTrust
CryptCATAdminEnumCatalogFromHash
CryptCATAdminAcquireContext
ntdll
RtlFormatCurrentUserKeyPath
RtlGetVersion
RtlFreeUnicodeString
bcrypt
BCryptGenRandom
gdi32
GetObjectW
DeleteObject
Exports
Exports
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 795KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
GamePlugin.dll.dll windows x86
a6152d0570bb6f406abfca836df8c3ce
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
06:c2:0b:48:4a:d3:ad:80:5c:63:81:c2:ab:7e:e6:7eCertificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before16-06-2022 00:00Not After22-06-2023 23:59SubjectCN=Lenovo (Beijing) Co.\, Ltd.,OU=G07,O=Lenovo (Beijing) Co.\, Ltd.,ST=Beijing,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before29-03-2022 00:00Not After14-03-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before09-06-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c9:84:8d:ae:95:e6:5e:13:af:d4:5c:d4:c3:ee:95:81:2e:a2:17:9a:cd:e0:8b:69:dd:0d:47:12:8c:36:b0:d6Signer
Actual PE Digestc9:84:8d:ae:95:e6:5e:13:af:d4:5c:d4:c3:ee:95:81:2e:a2:17:9a:cd:e0:8b:69:dd:0d:47:12:8c:36:b0:d6Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedtrueVerification
Signing CertificateCN=Lenovo (Beijing) Co.\, Ltd.,OU=G07,O=Lenovo (Beijing) Co.\, Ltd.,ST=Beijing,C=CN04-07-2022 17:26 Valid: true
Chain 1
CN=Lenovo (Beijing) Co.\, Ltd.,OU=G07,O=Lenovo (Beijing) Co.\, Ltd.,ST=Beijing,C=CN
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
GetPrivateProfileIntW
VirtualQuery
GetTempPathW
CreateMutexW
GetFileSizeEx
DeleteFileW
GetLocalTime
SetConsoleTextAttribute
WriteConsoleW
GetStdHandle
WideCharToMultiByte
OutputDebugStringW
GetFileAttributesW
CreateFileW
SetFilePointer
WriteFile
ReleaseMutex
GetModuleFileNameW
GetModuleHandleExW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
LocalFree
MultiByteToWideChar
GetSystemFirmwareTable
Sleep
CreateThread
CreateEventW
SetEvent
CloseHandle
WaitForSingleObject
LoadLibraryExW
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleW
GetFileSize
ReadFile
CreateToolhelp32Snapshot
FindClose
OpenProcess
GetProcessTimes
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
Process32NextW
DeviceIoControl
K32EnumProcessModules
K32GetModuleFileNameExW
VirtualAlloc
VirtualFree
GetSystemPowerStatus
SetEndOfFile
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetCurrentDirectoryW
SetStdHandle
GetConsoleCP
SetFilePointerEx
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetModuleFileNameA
PeekNamedPipe
GetDriveTypeW
SetConsoleCtrlHandler
ExitProcess
ExitThread
OutputDebugStringA
GetCurrentProcess
CreateProcessW
Process32FirstW
WinExec
RtlUnwind
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
GetCurrentThreadId
ResumeThread
SetThreadPriority
FindResourceExW
InterlockedPopEntrySList
ReleaseSemaphore
FreeLibraryAndExitThread
GetThreadTimes
GetCurrentThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
lstrcmpW
GetModuleHandleA
GetFullPathNameW
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
IsDebuggerPresent
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
InitializeCriticalSectionAndSpinCount
GetStringTypeW
TryEnterCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
SetConsoleMode
ReadConsoleW
ReadConsoleA
GetConsoleMode
HeapSize
InitializeCriticalSectionEx
HeapFree
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetACP
VirtualProtect
GetFileType
FormatMessageA
LoadLibraryA
GetSystemDirectoryA
GetStartupInfoW
TerminateProcess
CreatePipe
GetEnvironmentVariableW
LocalAlloc
GetSystemDirectoryW
DuplicateHandle
FreeResource
GetCurrentProcessId
GetTickCount
GetExitCodeProcess
FindNextFileW
ExpandEnvironmentStringsW
SetLastError
GetPrivateProfileStringW
GetVersionExW
VerSetConditionMask
VerifyVersionInfoW
FlushFileBuffers
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
user32
keybd_event
SetWindowsHookExW
GetUserObjectInformationW
GetProcessWindowStation
CreateWindowExW
RegisterClassW
CallNextHookEx
SendInput
GetKeyState
PostMessageW
FindWindowW
KillTimer
wsprintfW
MessageBoxW
IsWindow
advapi32
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
SetFileSecurityW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenSCManagerW
RegQueryValueExW
OpenServiceW
RegEnumValueW
RegGetValueW
RegSetValueExW
RegCreateKeyExW
RegFlushKey
RegQueryInfoKeyW
RegEnumKeyW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
RegNotifyChangeKeyValue
QueryServiceConfigW
ControlService
DeleteService
ChangeServiceConfigW
CreateServiceW
RegCloseKey
RegOpenKeyExW
StartServiceW
QueryServiceStatus
CloseServiceHandle
CryptGetProvParam
shell32
ShellExecuteExW
SHCreateDirectoryExW
ShellExecuteW
SHGetSpecialFolderPathW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
oleaut32
BSTR_UserMarshal
BSTR_UserUnmarshal
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
BSTR_UserFree
BSTR_UserSize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
SafeArrayCreate
VariantClear
VariantInit
SysAllocString
SysFreeString
rpcrt4
NdrServerCall2
NdrClientCall2
RpcBindingFree
RpcStringFreeW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
ws2_32
ioctlsocket
ntohs
WSACleanup
gethostbyname
WSAStartup
inet_ntoa
WSAGetLastError
htonl
htons
WSASetLastError
inet_addr
gethostbyaddr
getservbyport
getservbyname
shutdown
socket
setsockopt
connect
closesocket
send
recv
getsockopt
wrapplugin
GetCoolQuiteSetting
SetCoolQuiteSetting
shlwapi
PathIsDirectoryW
PathFileExistsW
PathRemoveFileSpecW
StrCpyNW
PathFindFileNameW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
iphlpapi
GetExtendedUdpTable
GetExtendedTcpTable
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
hid
HidD_GetAttributes
HidD_GetPreparsedData
HidP_GetCaps
HidD_SetFeature
HidD_GetHidGuid
HidD_GetFeature
crypt32
CryptMsgClose
CertFreeCertificateContext
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CertGetCertificateContextProperty
CertOpenStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
wintrust
WinVerifyTrust
CryptCATAdminEnumCatalogFromHash
CryptCATAdminAcquireContext
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
CryptCATCatalogInfoFromContext
CryptCATAdminCalcHashFromFileHandle
bcrypt
BCryptGenRandom
Exports
Exports
??0IPlugin@@QAE@$$QAV0@@Z
??0IPlugin@@QAE@ABV0@@Z
??0IPlugin@@QAE@XZ
??4IPlugin@@QAEAAV0@$$QAV0@@Z
??4IPlugin@@QAEAAV0@ABV0@@Z
??_7IPlugin@@6B@
?Cancel@IPlugin@@UAEXXZ
?__autoclassinit2@IPlugin@@QAEXI@Z
AddAccelerateApp
AddGameInfo
AddWhiteListGame
AutoOCByGameProcess
CLedBlink
CLedBreathe
CLedClose
CLedColor
CLedFrequency
CLedGetLight
CLedLight
CLedMix
CLedMusic
CLedTemperature
CLedWave
ConverIntToFloat
ConvertRGBToInt
DeleteAccelerateApp
DisableWinKey
ExecuteAutoOC
FanDriverInit
Fn4BlanceModeCallback
Fn4Monitor
Fn4MsgCallback
Fn4RefreshOCModeCallBack
ForbiddenTouchPad
GetAccelerateApp
GetActiveValue
GetAppsCanAccelerate
GetBIOSOCMode
GetCPUOCPropertyList_NB
GetCPUVersion
GetCueAppDownloadLink
GetCurrentCPUFreq
GetCurrentMemoryFreq
GetDefaultGpuOCData
GetDefaultInRGBLed
GetFanCoolingStatus
GetFn4_BalanceModeAutoOptimization
GetFnq4OcStatus
GetGSyncStatus
GetGameNoDisStatus
GetGameProcessList
GetGamingProductInfo
GetGpuCurrentFrequence
GetGpuMaxFrequence
GetGpuMinFrequence
GetHDDShareStatus
GetInitMemoryInfo
GetIntelligentGameList_NB
GetIntelligentSubMode
GetLedGuiType
GetLightFeature_NB
GetLightingStatus_DT
GetMaxCPUFreq
GetMaxMemoryFreq
GetMemVersion
GetMemoryLEDType
GetMemoryOCStatus
GetMemoryVersion
GetMinCPUFreq
GetMinMemoryFreq
GetNonGameGpuOcStatu
GetNonGamingProductInfo
GetODStatus
GetPowerChargeMode
GetProductName
GetSmartFanCount
GetSmartFanInfo
GetSmartFanMode
GetSmartFanMode_DT
GetSmartFanMode_FNQ3
GetSmartFanSetting
GetSmartFanStatus
GetSupportThermalMode_DT
GetTouchPadStatus
GetWinKeyStatus
InitARGBLed
InitGameZone
InitLED
InitLedByTray
InitNetFilter
InitNonGameGpuOcData
InitNonGameGpuOcData_Tray
InitNonGamingLog
InitOther
IsCueAppInstalled
IsDolbyInstalled
IsForbiddenLED
IsGameSeting
IsNahimicInstalled
IsNeedReboot
IsNewGraphicCardInZ370
IsNonGamingProductInfo
IsNotebook
IsRestoreOCValue
IsSpeakerInstalled
IsSupportBIOSLED
IsSupportCPUOC
IsSupportCpuOCBySMBIOS
IsSupportCueLed
IsSupportDisableWinKey
IsSupportFan
IsSupportForbiddenTouchPad
IsSupportFullSpeedMode_DT
IsSupportGSync
IsSupportGpuOC
IsSupportLightFeature_NB
IsSupportLighting_DT
IsSupportMagicYKey
IsSupportMemoryLED
IsSupportMemoryOC
IsSupportOCByBIOS
IsSupportOD
IsSupportSMFanMode_DT
IsSupportSmartFan
IsSupportSmartfanMode
IsSupportWaterCooling
IsXRiteInstalled
LEDDiverInit
LauchMagicYKey
LaunchDolbySettings
LaunchGameCenter
LaunchNahimicByProtocol
LaunchSmartHome
LaunchXRiteByProtocol
MonitorGameProcess
NonGamePowerStatusChange
OCBindWithThermal
OCDriverInit
RecognizeGameProcess
RecordGameScreen
RecordScreen
RecordScreenSetting
SLEDMode
SetCpuOCStatus_NB
SetFanModeByPowerPlan_FnQ4
SetFn4_BalanceModeAutoOptimization
SetFn4_ModeData
SetGSyncStatus
SetGameNoDisStatus
SetGpuOCAdvanceMemoryClock
SetGpuOCStatusEx
SetGpuTDPWithSMFAN_DT
SetGpuTemperatureWithSMFAN_DT
SetIntelligentSubMode
SetLightApply_DT
SetLightFeatureNotApply_DT
SetLightFeature_DT
SetLightFeature_NB
SetLightingStatus_DT
SetMemoryLED
SetMemoryOCStatus
SetMultiLightFeature_DT
SetNonGameGpuCallBack
SetNonGameGpuOCStatus
SetNonGameItsFanMode
SetOCStatus
SetODStatus
SetSmartFanMode
SetSmartFanMode_DT
SetSmartFanStatus
ShowPCMGame
StartCueApp
StartFan
StopFan
UnInitGame
UnInitGameZone
wmiIsSupportCPUOC_NB
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 689KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PCM硬件能力判断工具v1.0.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
VoiceModeOfOnlineClassDLL.dll.dll windows x86
0c2afaf55f9f1e52d7fb19bcdff2d92f
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
06:c2:0b:48:4a:d3:ad:80:5c:63:81:c2:ab:7e:e6:7eCertificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before16-06-2022 00:00Not After22-06-2023 23:59SubjectCN=Lenovo (Beijing) Co.\, Ltd.,OU=G07,O=Lenovo (Beijing) Co.\, Ltd.,ST=Beijing,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before29-03-2022 00:00Not After14-03-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before09-06-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
03:4f:d5:36:2a:ec:ef:7d:db:65:9b:3b:4c:9e:c4:b6:c0:91:de:90:fb:b8:b4:e4:b0:e2:6c:22:9e:2f:3f:eaSigner
Actual PE Digest03:4f:d5:36:2a:ec:ef:7d:db:65:9b:3b:4c:9e:c4:b6:c0:91:de:90:fb:b8:b4:e4:b0:e2:6c:22:9e:2f:3f:eaDigest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedtrueVerification
Signing CertificateCN=Lenovo (Beijing) Co.\, Ltd.,OU=G07,O=Lenovo (Beijing) Co.\, Ltd.,ST=Beijing,C=CN04-07-2022 17:27 Valid: true
Chain 1
CN=Lenovo (Beijing) Co.\, Ltd.,OU=G07,O=Lenovo (Beijing) Co.\, Ltd.,ST=Beijing,C=CN
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
RpcBindingFree
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
NdrClientCall2
NdrServerCall2
kernel32
QueryDepthSList
InterlockedPopEntrySList
UnregisterWaitEx
Sleep
LoadLibraryW
OutputDebugStringW
GetModuleFileNameW
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
CloseHandle
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetProcAddress
EncodePointer
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetLastError
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
GetACP
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetStdHandle
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
CreateFileW
DecodePointer
CreateTimerQueue
SetEvent
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
ole32
CoCreateInstance
PropVariantClear
CoUninitialize
CoInitialize
oleaut32
LPSAFEARRAY_UserMarshal
BSTR_UserMarshal
BSTR_UserUnmarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserSize
BSTR_UserFree
BSTR_UserSize
SysFreeString
SysAllocString
Exports
Exports
GetActiveProfileDAX
GetLocalMachineReg
IsSupport
IsSupportDAX
IsSupportFMF
IsSupportRPCDAX
IsSupportVersionNumberDAX
SetActiveProfileDAX
SetLocalMachineReg
Sections
.text Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
WrapPlugin.dll.dll windows x86
2d9c8166a5088884950a3902877ce5ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetNamedPipeHandleState
WaitNamedPipeW
OpenEventW
CreateThread
WaitForMultipleObjects
DeviceIoControl
GetSystemFirmwareTable
MoveFileW
SetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
CopyFileW
ExpandEnvironmentStringsW
LoadLibraryW
DecodePointer
RaiseException
InitializeCriticalSectionEx
GetModuleHandleW
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
Sleep
GetExitCodeProcess
WTSGetActiveConsoleSessionId
GetCurrentProcessId
ProcessIdToSessionId
SetLastError
SetEnvironmentVariableW
lstrlenW
GetEnvironmentVariableW
SetEvent
FreeLibrary
LoadLibraryExW
CreateProcessW
CreateEventW
MultiByteToWideChar
GetFirmwareEnvironmentVariableW
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileIntW
VirtualQuery
GetModuleFileNameW
GetTempPathW
CreateMutexW
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
GetFileSizeEx
DeleteFileW
GetLocalTime
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
SetConsoleTextAttribute
WriteConsoleW
GetStdHandle
WideCharToMultiByte
OutputDebugStringW
GetProcessHeap
GetModuleHandleExW
GlobalMemoryStatusEx
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
SetProcessWorkingSetSize
Process32NextW
LoadLibraryExA
LocalAlloc
LocalFree
GetSystemTimes
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetTimeZoneInformation
SetStdHandle
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetModuleFileNameA
SetEnvironmentVariableA
GetFullPathNameW
SetConsoleCtrlHandler
ExitThread
ExitProcess
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
RtlUnwind
UnregisterWaitEx
QueryDepthSList
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetFileAttributesW
CreateFileW
SetFilePointer
WriteFile
CloseHandle
ReleaseMutex
GetModuleHandleA
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
GetCurrentDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
InitializeCriticalSectionAndSpinCount
EncodePointer
GetStringTypeW
OpenFileMappingW
GetSystemDirectoryW
GetWindowsDirectoryW
SetFilePointerEx
SetEndOfFile
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
GetExitCodeThread
GetCurrentThread
WaitForSingleObjectEx
TryEnterCriticalSection
IsDebuggerPresent
GetProcAddress
GetLastError
GetCurrentProcess
SetConsoleMode
ReadConsoleW
ReadConsoleA
GetConsoleMode
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetACP
GetVersionExW
GetStartupInfoW
GetLongPathNameW
TerminateProcess
DuplicateHandle
FreeResource
FormatMessageW
GlobalAlloc
GlobalFree
GetSystemInfo
GetTickCount
QueryDosDeviceW
K32GetModuleFileNameExW
GetSystemPowerStatus
K32GetProcessImageFileNameW
GetLogicalDriveStringsW
lstrcatW
GetNativeSystemInfo
MoveFileExW
lstrcpyW
GetSystemTime
lstrcmpiW
RemoveDirectoryW
GetFileSize
GetCurrentThreadId
SetThreadPriority
ResumeThread
ResetEvent
GetUserDefaultUILanguage
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemDirectoryA
LoadLibraryA
FormatMessageA
GetFileType
FlushFileBuffers
VirtualAlloc
VirtualProtect
VirtualFree
user32
GetDC
ReleaseDC
MessageBoxW
IsWindow
PostMessageW
GetForegroundWindow
WindowFromPoint
GetShellWindow
GetWindowRect
GetClassNameW
RegisterWindowMessageW
GetProcessWindowStation
GetWindowThreadProcessId
GetIconInfo
DestroyIcon
LoadImageW
wsprintfW
FindWindowW
GetUserObjectInformationW
SendMessageW
GetDesktopWindow
CreateWindowExW
RegisterClassW
KillTimer
GetSystemMetrics
advapi32
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
SetFileSecurityW
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
QueryServiceObjectSecurity
SetServiceObjectSecurity
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityDescriptorDacl
RegDeleteValueW
InitializeSecurityDescriptor
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
StartServiceW
QueryServiceStatus
ChangeServiceConfig2W
ChangeServiceConfigW
QueryServiceConfigW
RegFlushKey
RegDeleteKeyExW
CloseServiceHandle
ControlService
OpenServiceW
OpenSCManagerW
RegOpenCurrentUser
RevertToSelf
ImpersonateLoggedOnUser
DuplicateTokenEx
RegGetValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptEnumProvidersW
shell32
ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteExW
SHFileOperationW
ExtractIconExW
SHGetFileInfoW
DragAcceptFiles
SHCreateDirectoryExW
ord727
ole32
CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitialize
CoCreateGuid
CoInitializeEx
OleRun
oleaut32
VariantInit
GetErrorInfo
SysFreeString
VariantClear
SysAllocString
VariantTimeToSystemTime
ws2_32
send
closesocket
WSASetLastError
getservbyname
getservbyport
gethostbyaddr
inet_ntoa
recv
htons
htonl
WSAGetLastError
WSACleanup
WSAStartup
gethostbyname
ntohs
getsockopt
ioctlsocket
connect
setsockopt
socket
gethostname
shutdown
inet_addr
shlwapi
PathIsDirectoryW
StrCpyNW
PathRemoveFileSpecW
PathFileExistsW
PathFindFileNameW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
powrprof
PowerSetActiveScheme
PowerGetActiveScheme
wtsapi32
WTSEnumerateSessionsW
WTSFreeMemory
WTSQueryUserToken
crypt32
CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CertFreeCertificateContext
CertCloseStore
CryptMsgClose
CertGetCertificateContextProperty
CertOpenStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
gdiplus
GdipSaveImageToFile
GdipCreateBitmapFromHICON
GdipGetImageWidth
GdiplusStartup
GdiplusShutdown
GdipGetImageHeight
GdipGetImageEncoders
GdipCloneImage
GdipGetImageEncodersSize
GdipBitmapGetPixel
GdipBitmapLockBits
GdipFree
GdipGetImagePixelFormat
GdipBitmapSetPixel
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipBitmapUnlockBits
GdipDisposeImage
wininet
HttpEndRequestW
InternetReadFile
InternetSetOptionW
InternetConnectW
InternetGetConnectedStateExW
InternetCloseHandle
HttpSendRequestW
HttpSendRequestExW
HttpAddRequestHeadersW
HttpQueryInfoW
InternetOpenW
InternetWriteFile
InternetQueryDataAvailable
InternetQueryOptionW
HttpOpenRequestW
InternetAttemptConnect
iphlpapi
GetAdaptersInfo
GetAdaptersAddresses
netapi32
NetApiBufferFree
NetWkstaUserGetInfo
wintrust
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
CryptCATCatalogInfoFromContext
CryptCATAdminAcquireContext
CryptCATAdminEnumCatalogFromHash
WinVerifyTrust
CryptCATAdminCalcHashFromFileHandle
pdh
PdhCollectQueryDataEx
PdhCloseQuery
PdhOpenQueryW
PdhCollectQueryData
PdhGetFormattedCounterValue
PdhAddCounterW
bcrypt
BCryptGenRandom
gdi32
DeleteObject
GetObjectW
Exports
Exports
??0IPlugin@@QAE@$$QAV0@@Z
??0IPlugin@@QAE@ABV0@@Z
??0IPlugin@@QAE@XZ
??4IPlugin@@QAEAAV0@$$QAV0@@Z
??4IPlugin@@QAEAAV0@ABV0@@Z
??_7IPlugin@@6B@
?Cancel@IPlugin@@UAEXXZ
?__autoclassinit2@IPlugin@@QAEXI@Z
CallOneToOne
CallRobot24
CheckBatteryPlanStatus
CheckCameraStatus
CheckEyeProtectionMode
CheckMicphoneStatus
CheckNetState
CheckSettingHost
ClearMemory
CloseMicphone
CloudInitConfig
CloudSyncDeviceIdLogin
CloudSyncGenDeviceId
ContrlTopSpeedMode
CreateCamera
CreateDirByPath
CreateFileIcon
DecrpyData
DeleteFileEx
DestroyCamera
DisableServiceEx
DoTask
EncrptyData
GarbageStopAnyOperator
GetAPSStatus
GetAllProjectorSettings
GetAppChannel
GetAppVersion
GetAutoDisable
GetAutomaticModeSetting
GetBackCameraFriendlyName
GetBrightness
GetBrightnessRange
GetBrowserPolicy
GetCPUFrequency
GetCPUThermal
GetCPUUsage
GetCallRobotData
GetCallRobotParam
GetCameraAbility
GetColorEffectCapability
GetConfig
GetConfigByKey
GetContrast
GetContrastRange
GetCoolQuiteAbilityBySettingHost
GetCoolQuiteSetting
GetCurrentMode
GetDeviceMac
GetDeviceSN
GetDeviceSNHash
GetDualFanCommand
GetExposure
GetExposureRange
GetFileIcon
GetFileMd5
GetFlipOpenStatus
GetFrontCameraFriendlyName
GetGarbageCleanSize
GetGarbageSize
GetHotWordChannel
GetHotwordUpdateInterval
GetITSAbility
GetITSVersion
GetInputCapility
GetInstallPath
GetIntelligentSmartSettings
GetIsSupportLogodiy
GetIsSupportSR2
GetKeyboardLightCapacity
GetKeyboardLightStatus
GetLUDPMacAddress
GetLastModuleCapility
GetLocalToken
GetMMCCAbility
GetMMCCapableMode
GetMTM
GetMachineType
GetMemoryRatio
GetMicroftAccountId
GetNetworkSpeed
GetNumberofHDDs
GetOLEDCapility
GetOLEDSettings
GetPSensorCapability
GetPSensorSetting
GetPathForLog
GetPenCapability
GetPenDelayTime
GetPenInputSetting
GetPicoPJAbility
GetPicoPJPopupWndCloseOption
GetPicoPJPopupWndOpenOption
GetPicoPJPreventSleepWhenOn
GetPicoProjectorBatteryLevel
GetPicoProjectorBatteryStatus
GetPicoProjectorColorMode
GetPicoProjectorDisplayDimMins
GetPrivacy
GetProgramDataPath
GetRealmKey
GetRealmString
GetSensitivityRange
GetSensitivityRequestLevel
GetSettingsModuleCapility
GetSmartHibernationCommand
GetSnoozeEnableDisable
GetSnoozeTime
GetSpeedBallAPI
GetThermalDownTimeStableToUnstable
GetThermalDownTimeUnstableToStable
GetThermalFeatureAbility
GetThermalFeatureSetting
GetTouchCapability
GetTouchInputSetting
GetUpdateDriver
GetUpdateSoftware
GetWarrantyInfo
GetWidgetDefaultModeChannel
GetXiangxiuPolicy
HttpForSecurity
Initialize
InitializeCancelDelay
InitializeWithContext
IsAPSDriverLoaded
IsAPSEnabled
IsAlwaysOnUsbCapability
IsCameraAccessDenied
IsDictoryExists
IsEMDriverInstalled
IsLenovoAppsChannel
IsLenovoMachine
IsLenovoSignature
IsNoteBookPC
IsPCMParentProcess
IsPCMServerAllowLeWindow
IsPMDriverInstalled
IsPreloadChannel
IsShowAppStoreEntry
IsSupportColorTemperature
IsSupportPen
IsSystemCamera
IsThinkPadComputer
IsThinpadSMB
IsV3Version
IsWelcomeAllowPop
IsWindowsNewOS
IsXiaoXinPC
IsZhengJiuZhePC
JsPluginRequest
LAV_GetLockedPage
LAV_LockedPage
LAV_ShowLav
LanguageGetCurrent
LanguageLoadString
LaunchCPL
LoadAPSDriver
LoadPowerPlugin
MoveCameraArea
OnReceiveGraphEvent
OpenHumanService
OpenMicphone
PCM_HttpsPost
QueryBatteryInfo
QueryBatteryStretch
QueryChargeThreshold
QueryDualFanCapability
QueryGaugeResetCapability
QueryGaugeResetStatus
QuerySmartHibernationCapability
QueryUSB
QuitSettingHost
ResetOLEDsettings
ResetPicoProjectorSettings
RestoreColorEffect
RobotXgjEncodeData
SMBIOS_GetSysEnclosureType
SaveHIconToPngFile
SendNotifyOfTSModeChanged
SetAPSEnableDisable
SetAccessedCamera
SetAutoDisable
SetAutomaticMode
SetBalanceMode
SetBatterySavingMode
SetBatteryStretch
SetBrightness
SetCameraNormalMode
SetCameraPrivacyMode
SetChargeThreshold
SetClickZoneReverse
SetColorEffectState
SetContrast
SetCoolQuiteAbilityBySettingHost
SetCoolQuiteSetting
SetDYTCMode
SetDualFanCommand
SetExposure
SetEyeProtectionMode
SetFlipOpenStatus
SetFnKeyLocation
SetFnLock
SetFnStickKey
SetForceHighPerformanceMode
SetGaugeResetCommand
SetKeyboardLightStatus
SetLastModuleCapility
SetManualModeControlMode
SetManualSensitivitySetting
SetMiddleButtonAction
SetNormalMode
SetOLEDmode
SetOLEDsettings
SetPSensorSetting
SetPenDelayTime
SetPenInputSetting
SetPicoPJPopupWndCloseOption
SetPicoPJPopupWndOpenOption
SetPicoPJPreventSleepWhenOn
SetPicoProjectorColorMode
SetPicoProjectorDisplayDimMins
SetPrimaryFunction
SetPrivacy
SetSettingValueChangedCallback
SetSmartHibernationCommand
SetSmartSenseSettings
SetSnoozeEnableDisable
SetSnoozeTime
SetThermalDownTimeStableToUnstable
SetThermalDownTimeUnstableToStable
SetThermalFeatureSetting
SetTouchEnable
SetTouchInputSetting
SetTouchSpeed
SetTrackPoint
SetTrackPointSpeed
SetUSB
SnoozeNow
StartCapture
StartNetStateMoniter
StartServiceEx
StopCapture
SyncUploadFile
SysGetMachinePenCapability
TakeLocalColorEffect
TestFun
UnloadAPSDriver
UnloadPowerPlugin
UseHotWord
UseLongtimeReminder
UseOfficeReminder
UseSearchPanel
WP_AllowDrag
WP_Auth_IsPCM
WP_DeletePoint
WP_DownloadFile
WP_GetAppName
WP_GetCtsToken
WP_GetGlobalConfigNew
WP_GetGlobalData
WP_GetHardwareInfo
WP_GetLUDPUUID
WP_GetMachineMarketingName
WP_GetMarketingName
WP_GetModuleConfigNew
WP_GetOSName
WP_GetOpenAccessToken
WP_GetRegistryPath
WP_GetSettingsConfig
WP_GetSmartHomePath
WP_GetSoftwareUpdateCount
WP_GetStoragePath
WP_HttpRequest
WP_InitlizeLenovoId
WP_IsOpenServerAlived
WP_IsShowExtendWarranty
WP_LenovoIdLogin
WP_LenovoIdLogout
WP_PCM_Auth
WP_Plugin_Auth
WP_Plugin_Get_Paramter
WP_Plugin_Paramter_Init
WP_RefreshAccessToken
WP_SetGlobalData
WelcomeAllowPopFlag
WrapIsServiceRunning
WrapStartService
isThinkMachine
pcm_plugin_action
pcm_plugin_buffer_allocate
pcm_plugin_buffer_free
pcm_plugin_ininitialize
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ