a1904ecde15337baadae7b2433a92a2b473aab8a762fefb371589cc1a4cf283a

Sharing

Copy URL Twitter E-mail

General

Target

a1904ecde15337baadae7b2433a92a2b473aab8a762fefb371589cc1a4cf283a
Size

11.6MB
MD5

b6c606d6a73993ad2c11b6ee8c8a33a9
SHA1

866b65e1cc01c447add4929bf8990c75ab88114a
SHA256

a1904ecde15337baadae7b2433a92a2b473aab8a762fefb371589cc1a4cf283a
SHA512

3de3fd34329ca343eff280a8a9a096a5bcd8f6dce8873436752c8911ce056d716f9b7f7798cc9952006005ad74863f75f87e3d49b30fed70afbfb9a406460244
SSDEEP

196608:PreO4873bOGgOgzAtrGCTmKrQj4a/mtfUVb2o+nZOqvlTjTSUbjM2dwrk3Gdo6tU:niGjgzWtCKr2jCf+9tqvlfjuIuo6akyB

Score

N/A

Malware Config

Signatures

Files

a1904ecde15337baadae7b2433a92a2b473aab8a762fefb371589cc1a4cf283a
.rar
新服务器优资福1600_CHS_2011-8/Net_DVR/CardConfig.exe
.exe windows x86

be7ef500ed346af4ea51a7bf7be8c0d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord641
ord692
ord616
ord2514
ord2621
ord1134
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord2554
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord6055
ord1776
ord4401
ord5290
ord3402
ord3639
ord1146
ord1168
ord567
ord2302
ord2818
ord823
ord5953
ord800
ord4160
ord540
ord2863
ord2379
ord755
ord470
ord6334
ord4486
ord6375
ord4274
ord6374
ord4673
ord1576

msvcrt

__set_app_type
_except_handler3
_controlfp
??0exception@@QAE@ABQBD@Z
__p__fmode
_CxxThrowException
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
_setmbcp
__p__commode
_adjust_fdiv
__setusermatherr
__dllonexit
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
??1exception@@UAE@XZ

kernel32

GetLastError
GetModuleHandleA
GetStartupInfoA
CreateMutexA

user32

EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
GetSystemMenu
AppendMenuA
SendMessageA
DrawIcon
LoadIconA

msvcp60

??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??_7out_of_range@std@@6B@
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

exp

?JMVSDK_GetCardHWConfig@@YAXHPAU_CARD_HARDWARE_CONFIG@@@Z
?JMVSDK_SetCardHWConfig@@YAXHPAU_CARD_HARDWARE_CONFIG@@@Z
?JMVSDK_GetCardCount@@YAHXZ
?JMVSDK_GetCardInfo@@YAXHPAU_CARD_INFO@@@Z
?JMVSDK_Initial@@YAHXZ

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新服务器优资福1600_CHS_2011-8/Net_DVR/DvrPlayer.exe
.exe windows x86

3a1b1637f9550c267529a3b44020550c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
ExitProcess
HeapSize
GetACP
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapDestroy
GetTickCount
GetStdHandle
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WritePrivateProfileStringA
FileTimeToSystemTime
GetThreadLocale
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GetVersionExA
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
InterlockedIncrement
InterlockedDecrement
WriteFile
SetFilePointer
CreateFileA
ReadFile
GetModuleFileNameA
SetLastError
CreateThread
WaitForSingleObject
CloseHandle
CreateMutexA
Sleep
lstrlenA
CompareStringW
CompareStringA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
HeapCreate
InterlockedExchange

user32

SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
MapDialogRect
SetWindowLongA
IsRectEmpty
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
MessageBoxA
LoadCursorA
GetSystemMetrics
LoadIconA
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
FindWindowA
CharUpperA
DestroyMenu
DestroyCursor
LoadImageA
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
GetSysColor
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
DestroyIcon
DrawStateA
CopyRect
GetDesktopWindow
CreateDialogIndirectParamA
EndDialog
GetWindowThreadProcessId
GetWindowLongA
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
FrameRect
FillRect
CopyAcceleratorTableA
CharNextA
ReleaseCapture
SetCapture
UnregisterClassA
OffsetRect
InflateRect
GetSysColorBrush
SetWindowPos
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
GetCursorPos
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
RemovePropA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
CallWindowProcA
GetPropA
SendDlgItemMessageA

gdi32

SaveDC
RestoreDC
SetBkMode
SetMapMode
GetClipBox
LineTo
MoveToEx
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePen
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetDeviceCaps
CreateSolidBrush
GetObjectA
GetPixel
SetPixel
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
GetStockObject
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
GetBitmapBits
ScaleViewportExtEx
CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegQueryValueA

shell32

DragAcceptFiles
DragQueryFileA
ShellExecuteExA

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantClear
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
VariantChangeType

winmm

waveOutOpen
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader
waveOutClose

ddraw

DirectDrawCreateEx

Sections

.text
Size: 496KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新服务器优资福1600_CHS_2011-8/Net_DVR/Log/2011-08-02/log.ini
新服务器优资福1600_CHS_2011-8/Net_DVR/Log/2011-08-03/log.ini
新服务器优资福1600_CHS_2011-8/Net_DVR/Log/2011-08-17/log.ini
新服务器优资福1600_CHS_2011-8/Net_DVR/Net_DVR.exe
.exe windows x86

481de4587f1baeb51de7fa8ee297f407

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hook

clearMyHook
setMyHook

kernel32

GetFileAttributesA
GetFileTime
GlobalFlags
GetCurrentDirectoryA
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
SetErrorMode
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
ExitProcess
GetCommandLineA
GetStartupInfoA
GetFileType
RtlUnwind
WriteConsoleW
GetStdHandle
GetConsoleCP
GetConsoleMode
RaiseException
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
LoadLibraryW
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetThreadLocale
SetEndOfFile
UnlockFile
LockFile
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
FormatMessageA
MulDiv
GetModuleFileNameW
FreeResource
GlobalAddAtomA
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
PurgeComm
BuildCommDCBA
WaitCommEvent
WaitForMultipleObjects
SetCommMask
GetOverlappedResult
CreateEventA
SetCommTimeouts
SetCommState
GetCommProperties
SetEvent
GetCommState
ClearCommError
SetupComm
FlushFileBuffers
LocalFree
GetExitCodeThread
InterlockedExchangeAdd
WaitForSingleObject
WritePrivateProfileStringA
OutputDebugStringA
TerminateProcess
GetTickCount
InterlockedDecrement
SetFilePointer
GetFileSize
lstrcpynA
FreeLibrary
GlobalUnlock
GlobalLock
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GlobalFree
GlobalAlloc
GetVersionExA
DeviceIoControl
GlobalMemoryStatus
GetPrivateProfileStringA
lstrcpyA
GetACP
CreateThread
DeleteFileA
CloseHandle
GetDiskFreeSpaceExA
GetModuleHandleA
LockResource
LoadLibraryA
RemoveDirectoryA
HeapSize
GetProcAddress
SetLastError
GetLogicalDriveStringsA
ReadFile
CreateProcessA
SizeofResource
GetDriveTypeA
WriteFile
GetProcessHeap
HeapFree
InterlockedIncrement
HeapAlloc
LoadResource
FindResourceA
CreateFileA
GetVersion
CompareStringA
IsDebuggerPresent
CreateMutexA
GetModuleFileNameA
SetFileAttributesA
lstrcmpiA
GetLastError
InterlockedExchange
lstrlenW
MultiByteToWideChar
CompareStringW
Sleep
WideCharToMultiByte
GetPrivateProfileIntA
GetSystemDefaultLCID
GetCurrentProcess
lstrlenA
SetPriorityClass
SetConsoleCtrlHandler

user32

SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
MapWindowPoints
TrackPopupMenu
GetMenu
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
CallWindowProcA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
GetWindowTextLengthA
GetWindowTextA
SetFocus
GetMenuItemID
UnhookWindowsHookEx
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
GetKeyState
PostThreadMessageA
ValidateRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
CheckMenuItem
MessageBeep
GetUpdateRect
IntersectRect
SendNotifyMessageA
MessageBoxA
IsRectEmpty
BringWindowToTop
RegisterWindowMessageA
ShowScrollBar
SetForegroundWindow
KillTimer
GetFocus
DefWindowProcA
GetDesktopWindow
GetClassInfoA
SetCapture
GetCapture
SystemParametersInfoA
ReleaseCapture
GetMessagePos
RedrawWindow
DrawFrameControl
DrawTextA
GrayStringA
DrawTextExA
SetRect
TabbedTextOutA
GetNextDlgTabItem
ClientToScreen
GetSubMenu
WindowFromPoint
CreateIconIndirect
GetIconInfo
RegisterClipboardFormatA
DrawFocusRect
InflateRect
DrawStateA
OffsetRect
TrackPopupMenuEx
DestroyCursor
GetSysColor
FrameRect
GetActiveWindow
DestroyMenu
DestroyIcon
CopyRect
SetCursor
CloseClipboard
EmptyClipboard
OpenClipboard
UnregisterClassA
GetNextDlgGroupItem
SetClipboardData
DispatchMessageA
GetAsyncKeyState
InvalidateRgn
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
PeekMessageA
MoveWindow
LockWindowUpdate
GetParent
LoadCursorA
FillRect
SetTimer
ScreenToClient
GetWindowRect
PostQuitMessage
IsIconic
DeleteMenu
LoadBitmapA
LoadIconA
DrawIcon
GetClientRect
ExitWindowsEx
SendMessageA
PtInRect
GetDC
SetWindowLongA
InvalidateRect
GetWindowLongA
ReleaseDC
EnableMenuItem
GetCursorPos
ShowWindow
CreatePopupMenu
AppendMenuA
GetMenuItemCount
IsWindow
PostMessageA
IsWindowVisible
LoadImageA
UpdateWindow
EnableWindow
GetDlgCtrlID
CharUpperA
GetSystemMetrics
ChangeDisplaySettingsA
GetMenuCheckMarkDimensions

gdi32

SelectClipRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetMapMode
DPtoLP
GetRgnBox
LPtoDP
SetBrushOrgEx
UnrealizeObject
LineTo
MoveToEx
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetBkMode
RestoreDC
SaveDC
DeleteDC
GetDeviceCaps
CreateDCA
CreatePolygonRgn
ExtFloodFill
CreateEllipticRgn
PtInRegion
Ellipse
GetROP2
Polyline
CreateRectRgn
GetCurrentObject
CreateBrushIndirect
GetBkColor
GetTextColor
GetTextExtentPoint32A
Rectangle
PtVisible
Escape
RectVisible
ExtTextOutA
CreateSolidBrush
TextOutA
SetTextColor
SetBkColor
SetPixel
CreateBitmap
GetPixel
GetStockObject
CreateFontIndirectA
GetBitmapBits
SetBitmapBits
StretchBlt
SelectObject
CreateCompatibleBitmap
BitBlt
CreateFontA
CreateCompatibleDC
GetObjectA
DeleteObject
CreatePen
CreateRectRgnIndirect

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueExA
LookupPrivilegeValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
RegOpenKeyA
RegOpenKeyExA
OpenProcessToken
RegCloseKey
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegSetValueA
AdjustTokenPrivileges

shell32

SHGetPathFromIDListA
ShellExecuteA
ShellExecuteExA
SHBrowseForFolderA
SHChangeNotify

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

ws2_32

WSACleanup
gethostname
accept
listen
send
gethostbyname
socket
bind
setsockopt
htons
WSAGetLastError
inet_ntoa
ntohl
closesocket
htonl
inet_addr
connect
recv
sendto
select
WSAStartup

oledlg

ord8

ole32

CoInitialize
CoCreateGuid
CoCreateInstance
CoUninitialize
CoRegisterMessageFilter
OleRun
CLSIDFromProgID
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject

oleaut32

VariantClear
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysStringLen
VariantChangeType
SysAllocString
SafeArrayGetUBound
SysFreeString
SysStringByteLen
VariantInit
SafeArrayDestroy
SysAllocStringByteLen
VariantCopy
SafeArrayCreateVector
GetErrorInfo

winmm

waveInOpen
waveOutClose
waveOutWrite
waveOutUnprepareHeader
waveOutOpen
waveOutPrepareHeader
PlaySoundA
waveInAddBuffer
waveInStart
waveInPrepareHeader

dbghelp

MakeSureDirectoryPathExists

powrprof

ReadPwrScheme
WritePwrScheme
GetActivePwrScheme
SetActivePwrScheme

intfd

ord4
ord2
ord1
ord9
ord46

exp

?JMVSDK_SetUVOffset@@YAHHH@Z
?JMVSDK_UnInitial@@YAHXZ
?JMVSDK_GetDeviceCount@@YAHXZ
?JMVSDK_Initial@@YAHXZ
?JMVSDK_GetDeviceInfo@@YAXHPAU_DEVICE_INFO@@@Z
?JMVSDK_GetChannelIndex@@YAHHHH@Z
?JMVSDK_GetChannelHWConfig@@YAXHPAU_CHANNEL_HARDWARE_CONFIG@@@Z
?JMVSDK_StartChannel@@YAHH@Z
?JMVSDK_SetContrast@@YAXHH@Z
?JMVSDK_CloseChannel@@YAHH@Z
?JMVSDK_StopChannel@@YAHH@Z
?JMVSDK_Cif2Halfd1@@YAXH_N@Z
?JMVSDK_CancelGetVideo@@YAHH@Z
?JMVSDK_SetSaturation@@YAXHH@Z
?JMVSDK_OpenChannel@@YAHH@Z
?JMVSDK_SetHue@@YAXHH@Z
?JMVSDK_GetAudio@@YAHPAEPA_KH@Z
?JMVSDK_GetVideo@@YAHPAEW4COLORFORMAT@@PA_KHPAX@Z
?JMVSDK_CancelGetAudio@@YAHH@Z
?JMVSDK_SetBrightness@@YAXHH@Z
?JMVSDK_ConfigChannel@@YAHW4VIDEOFORMAT@@W4VIDEORESOLUTION@@KHHHHH@Z

d3d9

Direct3DCreate9

ddraw

DirectDrawCreateEx

Sections

.rodata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新服务器优资福1600_CHS_2011-8/Net_DVR/Net_DVR_web.dll
.dll regsvr32 windows x86

5a8c240fb313c1953b9afa573f4e22b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getservbyport
getservbyname
gethostbyaddr
WSASendTo
bind
setsockopt
WSARecvFrom
ntohl
gethostbyname
sendto
socket
connect
htons
htonl
closesocket
ntohs
recv
inet_addr
send

imagehlp

MakeSureDirectoryPathExists

kernel32

FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
FindResourceExA
GetProfileIntA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetProcessHeap
ExitProcess
HeapSize
GetACP
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
SetConsoleCtrlHandler
FindClose
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
LoadLibraryW
SetThreadAffinityMask
QueryPerformanceFrequency
GetSystemDirectoryA
ReleaseMutex
CreateMutexA
OpenThread
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
GetLastError
SizeofResource
LockResource
LoadResource
FindResourceA
GetVersion
lstrlenW
CompareStringA
CompareStringW
lstrlenA
Sleep
CloseHandle
WaitForSingleObject
InterlockedIncrement
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetLastError
LeaveCriticalSection
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WritePrivateProfileStringA
GetThreadLocale
EnterCriticalSection
DeleteCriticalSection
InterlockedDecrement
CreateThread
GetSystemDefaultLCID
InitializeCriticalSection
GetOEMCP
GetCPInfo
GlobalFlags
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
IsDBCSLeadByte
GetUserDefaultLCID
CreateEventA
SetEvent
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
WriteFile
GetCurrentProcessId
GetModuleFileNameA
FileTimeToSystemTime
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
FreeLibrary
GetModuleFileNameW
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetFilePointer
CreateFileA
ReadFile
LCMapStringA

user32

UnregisterClassA
GetSysColorBrush
GetDialogBaseUnits
GetTabbedTextExtentA
GetDCEx
ReleaseCapture
DrawEdge
SetParent
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
GetDesktopWindow
CreateDialogIndirectParamA
EndDialog
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
MessageBoxA
LoadCursorA
PtInRect
SendNotifyMessageA
GetCursorPos
IsWindow
LoadIconA
ScreenToClient
EnableMenuItem
CheckMenuItem
LockWindowUpdate
EnumChildWindows
RegisterClipboardFormatA
SetRect
SetWindowRgn
AppendMenuA
CreatePopupMenu
IsRectEmpty
CreateMenu
SetRectEmpty
SetCapture
GetTopWindow
CharUpperA
DestroyMenu
DestroyCursor
LoadImageA
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
GetSysColor
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
DestroyIcon
GetWindowLongA
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateA
GetClassInfoExA

gdi32

Polyline
CreateSolidBrush
GetDeviceCaps
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetBkMode
SetROP2
SetMapMode
GetClipBox
LineTo
MoveToEx
SelectClipRgn
CreateRectRgn
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
GetObjectA
SetViewportExtEx
ScaleViewportExtEx
GetROP2
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
CreatePatternBrush
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
DPtoLP
LPtoDP
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
GetTextExtentPoint32A
GetTextMetricsA
GetTextAlign
EnumFontFamiliesExA
Rectangle
UnrealizeObject
GetPixel
SetPixel
CreateBitmap
SetBkColor
SetWindowOrgEx
CreatePen
SetTextColor
DeleteDC
GetStockObject
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
OffsetViewportOrgEx
GetBitmapBits
CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegEnumKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ExtractIconA
ShellExecuteExA

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

CreateILockBytesOnHGlobal
StringFromCLSID
StgCreateDocfileOnILockBytes
ReadFmtUserTypeStg
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoRegisterClassObject
CoRevokeClassObject
StringFromGUID2
CreateDataCache
CreateOleAdviseHolder
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleSaveToStream
CreateDataAdviseHolder
CoDisconnectObject
CoCreateInstance
CreateStreamOnHGlobal
ReadClassStm
OleLoadFromStream

oleaut32

VariantCopy
OleCreatePropertyFrame
LoadTypeLi
RegisterTypeLi
SysStringByteLen
OleLoadPicture
SysAllocString
OleCreateFontIndirect
OleCreatePictureIndirect
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
LoadRegTypeLi

wsock32

inet_addr
WSAStartup
WSACleanup
WSAGetLastError
getsockname
WSASetLastError

winmm

waveOutWrite
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutPrepareHeader

ddraw

DirectDrawCreateEx

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 768KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/Net_DVR/Net_DVR_web_setup.exe
.exe windows x86

50610e34092d6ce13e51e7c9d5197081

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

DeleteFileA
DeleteFileW
CreateDirectoryA
CreateDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GlobalAlloc
lstrlenA
GetModuleFileNameA
FindResourceA
GetModuleHandleA
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
CompareStringA
ExitProcess
GetLocaleInfoA
GetNumberFormatA
GetProcAddress
DosDateTimeToFileTime
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
WaitForSingleObject
SetCurrentDirectoryA
Sleep
GetTempPathA
MoveFileExA
GetModuleFileNameW
SetEnvironmentVariableA
GetCommandLineA
LocalFileTimeToFileTime
SystemTimeToFileTime
GetSystemTime
IsDBCSLeadByte
GetCPInfo
FreeLibrary
LoadLibraryA
GetCurrentDirectoryA
GetFullPathNameA
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
WriteFile
GetStdHandle
ReadFile
SetLastError
CreateFileW
CreateFileA
GetFileType
SetEndOfFile
SetFilePointer
MoveFileA
SetFileTime
GetCurrentProcess
CloseHandle
GetLastError
lstrcmpiA

user32

ReleaseDC
GetDC
SendMessageA
wsprintfA
SetDlgItemTextA
EndDialog
DestroyIcon
SendDlgItemMessageA
GetDlgItemTextA
DialogBoxParamA
IsWindowVisible
WaitForInputIdle
GetSysColor
PostMessageA
SetMenu
SetFocus
LoadBitmapA
LoadIconA
CharToOemA
OemToCharA
GetClassNameA
CharUpperA
GetWindowRect
GetParent
MapWindowPoints
CreateWindowExA
UpdateWindow
SetWindowTextA
LoadCursorA
RegisterClassExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
PeekMessageA
GetMessageA
DispatchMessageA
DestroyWindow
GetClientRect
CopyRect
IsWindow
MessageBoxA
ShowWindow
GetDlgItem
EnableWindow
FindWindowExA
wvsprintfA
CharToOemBuffA
LoadStringA
SetWindowPos
GetWindowTextA
GetWindow
GetSystemMetrics
OemToCharBuffA
TranslateMessage

gdi32

GetDeviceCaps
GetObjectA
CreateCompatibleBitmap
SelectObject
StretchBlt
CreateCompatibleDC
DeleteObject
DeleteDC

comdlg32

GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameA

advapi32

LookupPrivilegeValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
SetFileSecurityW
SetFileSecurityA
OpenProcessToken
AdjustTokenPrivileges

shell32

ShellExecuteExA
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
SHChangeNotify

ole32

CreateStreamOnHGlobal
OleInitialize
CoCreateInstance
OleUninitialize
CLSIDFromString

oleaut32

VariantInit

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新服务器优资福1600_CHS_2011-8/Net_DVR/Playback.exe
.exe windows x86

61ab24f9ca77f9e7ede9c1875b932563

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
SetErrorMode
GetTickCount
VirtualProtect
GetSystemInfo
VirtualQuery
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
GetFileType
ExitProcess
SetConsoleCtrlHandler
RtlUnwind
WriteConsoleW
GetStdHandle
GetConsoleCP
GlobalReAlloc
RaiseException
SetStdHandle
HeapDestroy
HeapCreate
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
LoadLibraryW
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
TlsGetValue
LocalAlloc
GetCurrentDirectoryA
GlobalFlags
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetThreadLocale
SetEndOfFile
UnlockFile
LockFile
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
FormatMessageA
MulDiv
GetModuleFileNameW
FreeResource
GlobalFree
WritePrivateProfileStringA
GlobalAddAtomA
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalAlloc
GlobalDeleteAtom
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
VirtualAlloc
VirtualFree
SetFilePointer
InterlockedIncrement
CreateThread
WaitForSingleObject
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FlushFileBuffers
GlobalUnlock
WriteFile
GlobalLock
LocalFree
InterlockedDecrement
lstrcpynA
GetModuleHandleA
SetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpyA
GetACP
CloseHandle
LockResource
HeapSize
GetLogicalDriveStringsA
ReadFile
SizeofResource
GetDriveTypeA
GetProcessHeap
HeapFree
HeapAlloc
LoadResource
FindResourceA
GetFileSize
CreateFileA
GetVersion
CompareStringA
IsDebuggerPresent
CreateMutexA
GetModuleFileNameA
GetLastError
InterlockedExchange
lstrlenW
MultiByteToWideChar
CompareStringW
Sleep
WideCharToMultiByte
GetPrivateProfileIntA
GetSystemDefaultLCID
GetCurrentProcess
lstrlenA
SetPriorityClass
GetConsoleMode

user32

UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetMenu
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
CallWindowProcA
SetWindowLongA
GetWindowPlacement
IntersectRect
EndPaint
BeginPaint
GetWindowTextLengthA
GetWindowTextA
SetFocus
GetMenuItemID
UnhookWindowsHookEx
SetActiveWindow
MessageBeep
DestroyWindow
GetDlgItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
MessageBoxA
SetWindowRgn
GetWindowDC
GetSysColorBrush
IsRectEmpty
DrawTextA
GrayStringA
DrawTextExA
TabbedTextOutA
BringWindowToTop
IsWindow
RegisterWindowMessageA
SetRect
RedrawWindow
ShowScrollBar
SetCapture
ReleaseCapture
ChangeDisplaySettingsA
GetSystemMetrics
CharUpperA
SetForegroundWindow
ScreenToClient
KillTimer
GetFocus
PtInRect
DefWindowProcA
GetDesktopWindow
GetClassInfoA
SystemParametersInfoA
LoadCursorA
DrawFrameControl
GetNextDlgTabItem
ClientToScreen
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
ShowWindow
MoveWindow
SetCursor
FillRect
GetSubMenu
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CreateDialogIndirectParamA
GetDlgCtrlID
EnableWindow
UpdateWindow
LoadImageA
GetMenuItemCount
AppendMenuA
CreatePopupMenu
GetCursorPos
ReleaseDC
LockWindowUpdate
GetDC
SendMessageA
GetClientRect
DrawIcon
LoadIconA
LoadBitmapA
DeleteMenu
IsIconic
GetWindowRect
SetTimer
CopyRect
DestroyIcon
DestroyMenu
PostMessageA
GetActiveWindow
FrameRect
GetSysColor
DestroyCursor
GetWindowLongA
InvalidateRect
TrackPopupMenuEx
OffsetRect
DrawStateA
InflateRect
DrawFocusRect
WindowFromPoint
GetParent

gdi32

GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetMapMode
DPtoLP
GetRgnBox
MoveToEx
LineTo
GetClipBox
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetBitmapBits
GetDIBits
CombineRgn
GetROP2
Polyline
CreateSolidBrush
CreateRectRgn
GetCurrentObject
PtVisible
Escape
RectVisible
ExtTextOutA
TextOutA
GetTextExtentPoint32A
CreateFontIndirectA
Rectangle
GetBkColor
GetTextColor
BitBlt
SetTextColor
SetBkColor
CreateBitmap
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetStockObject
CreateFontA
DeleteObject
CreatePen
CreateDCA
DeleteDC
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey

shell32

SHBrowseForFolderA
ShellExecuteExA
SHGetPathFromIDListA

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

ws2_32

WSACleanup
WSAStartup

oledlg

ord8

ole32

CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleRun
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoUninitialize
CoRevokeClassObject

oleaut32

VariantCopy
SysAllocStringByteLen
SafeArrayDestroy
VariantInit
SysStringByteLen
SysFreeString
SafeArrayGetUBound
SysAllocString
VariantChangeType
SysStringLen
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo
VariantClear

winmm

waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutWrite
waveOutUnprepareHeader

d3d9

Direct3DCreate9

ddraw

DirectDrawCreateEx

dbghelp

MakeSureDirectoryPathExists

intf

ord46
ord1
ord9
ord4
ord2

Sections

.rodata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新服务器优资福1600_CHS_2011-8/Net_DVR/Thumbs.db
新服务器优资福1600_CHS_2011-8/Net_DVR/alarm.wav
新服务器优资福1600_CHS_2011-8/Net_DVR/background.bmp
新服务器优资福1600_CHS_2011-8/Net_DVR/config.dat
新服务器优资福1600_CHS_2011-8/Net_DVR/default.htm
.html
新服务器优资福1600_CHS_2011-8/Net_DVR/dvr.dat
新服务器优资福1600_CHS_2011-8/Net_DVR/exp.dll
.dll windows x86

4760bddb344eed796c66fa8b9955d039

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
DeviceIoControl
CreateEventA
CloseHandle
CreateFileA
lstrcpyA
SetEvent
WaitForSingleObject
ResetEvent
WaitForMultipleObjects
Sleep
LeaveCriticalSection
SetThreadPriority
CreateThread
EnterCriticalSection
TerminateThread
InitializeCriticalSection
DeleteCriticalSection
GetLastError
GetCurrentProcess
GetProcAddress
GetModuleHandleA
ReadFile
VirtualAlloc
VirtualFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
HeapReAlloc
HeapCreate
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
ExitProcess
HeapDestroy

user32

KillTimer
PeekMessageA
GetMessageA
DispatchMessageA
TranslateMessage
SetTimer

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInfoA
SetupDiCreateDeviceInfoList
CM_Get_Device_IDA
CM_Get_Device_ID_Size
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

expt

TwChannelOpen
TwGetChannelDetail
TwSetAudioPara
TwStopVideoCapture
TwSetVideoPara
TwStartVideoCapture
TwRegisterAudioStreamCallback
TwGetSubDeviceDetail
TwUninitSDK
TwEnableVideoInput
TwGetSubDeviceHandle
TwGetDeviceCount
TwGetDeviceHandle
TwGetDeviceDetail
TwI2COpen
TwI2CClose
TwGetChannelCount
TwGetBoardDetail
TwGetBoardHandle
TwGetBoardCount
TwInitSDK
TwStartAudioCapture
TwStopAudioCapture
TwChannelClose
TwGetVideoPara
TwI2CWrite
TwRegisterVideoStreamCallback
TwI2CRead

Exports

Exports

?JMVSDK_CancelGetAudio@@YAHH@Z
?JMVSDK_CancelGetVideo@@YAHH@Z
?JMVSDK_Cif2Halfd1@@YAXH_N@Z
?JMVSDK_CloseChannel@@YAHH@Z
?JMVSDK_ConfigChannel@@YAHW4VIDEOFORMAT@@W4VIDEORESOLUTION@@KHHHHH@Z
?JMVSDK_GetAudio@@YAHPAEPA_KH@Z
?JMVSDK_GetCardCount@@YAHXZ
?JMVSDK_GetCardHWConfig@@YAXHPAU_CARD_HARDWARE_CONFIG@@@Z
?JMVSDK_GetCardInfo@@YAXHPAU_CARD_INFO@@@Z
?JMVSDK_GetChannelCount@@YAHXZ
?JMVSDK_GetChannelHWConfig@@YAXHPAU_CHANNEL_HARDWARE_CONFIG@@@Z
?JMVSDK_GetChannelIndex@@YAHHHH@Z
?JMVSDK_GetDeviceCount@@YAHXZ
?JMVSDK_GetDeviceInfo@@YAXHPAU_DEVICE_INFO@@@Z
?JMVSDK_GetVideo@@YAHPAEW4COLORFORMAT@@PA_KHPAX@Z
?JMVSDK_Initial@@YAHXZ
?JMVSDK_OpenChannel@@YAHH@Z
?JMVSDK_SetBrightness@@YAXHH@Z
?JMVSDK_SetCardHWConfig@@YAXHPAU_CARD_HARDWARE_CONFIG@@@Z
?JMVSDK_SetContrast@@YAXHH@Z
?JMVSDK_SetHue@@YAXHH@Z
?JMVSDK_SetSaturation@@YAXHH@Z
?JMVSDK_SetUVOffset@@YAHHH@Z
?JMVSDK_StartChannel@@YAHH@Z
?JMVSDK_StopChannel@@YAHH@Z
?JMVSDK_UnInitial@@YAHXZ

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/Net_DVR/expt.dll
.dll windows x86

9ead2c2ad4e69f6a723c1f1b3fd290f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
DeviceIoControl
GetPrivateProfileIntA
lstrcpyA
lstrcatA
InterlockedExchange
Sleep
GetSystemTimeAsFileTime
QueryPerformanceFrequency
CreateMutexA
GetTickCount
QueryPerformanceCounter
WaitForSingleObject
ReleaseMutex
WriteFile
CreateFileA
SetEvent
VirtualAlloc
VirtualFree
WaitForMultipleObjects
SetThreadPriority
ResetEvent
CreateEventA
TerminateThread
lstrlenA
GetModuleFileNameA
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
RtlUnwind
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
UnhandledExceptionFilter
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetFilePointer
GetCPInfo
GetACP
GetOEMCP

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInfo

winmm

timeGetTime

Exports

Exports

TwChangeChannelId
TwChannelClose
TwChannelOpen
TwEnableVideoField2
TwEnableVideoInput
TwGPIOClose
TwGPIOEnableOutput
TwGPIOGetBits
TwGPIOOpen
TwGPIOSetBits
TwGetAudioPara
TwGetBoardCount
TwGetBoardDetail
TwGetBoardHandle
TwGetChannelCount
TwGetChannelDetail
TwGetDeviceAudioHandle
TwGetDeviceCount
TwGetDeviceDetail
TwGetDeviceHandle
TwGetDevicePciConfigSpace
TwGetDevicePciConfigSpaceEx
TwGetDeviceRegBYTE
TwGetDeviceRegDWORD
TwGetDeviceRegWORD
TwGetLastError
TwGetSubDeviceCount
TwGetSubDeviceDetail
TwGetSubDeviceHandle
TwGetVideoPara
TwI2CClose
TwI2CLock
TwI2COpen
TwI2CRead
TwI2CSetSpeed
TwI2CUnlock
TwI2CWrite
TwI2CWriteNoStop
TwInitSDK
TwRegisterAudioStreamCallback
TwRegisterVideoStreamCallback
TwSetAudioPara
TwSetDevicePciConfigSpace
TwSetDevicePciConfigSpaceEx
TwSetDeviceRegBYTE
TwSetDeviceRegDWORD
TwSetDeviceRegWORD
TwSetVideoPara
TwStartAudioCapture
TwStartVideoCapture
TwStartVideoField2
TwStopAudioCapture
TwStopVideoCapture
TwStopVideoField2
TwUninitSDK

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/Net_DVR/ext.dll
.exe windows x86

f1ff20f0fea9844750012fbd7d8c6d58

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
ExitThread
CreateThread
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetLocaleInfoW
LCMapStringA
LCMapStringW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CreateFileMappingA
FileTimeToLocalFileTime
OpenEventA
ResetEvent
WaitForMultipleObjects
TerminateThread
MapViewOfFile
UnmapViewOfFile
OutputDebugStringA
CreateProcessA
lstrcatA
GlobalMemoryStatus
lstrcpyA
FileTimeToDosDateTime
ReleaseSemaphore
CreateSemaphoreA
ReleaseMutex
InterlockedCompareExchange
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GlobalFlags
WritePrivateProfileStringA
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GetCurrentProcessId
GlobalAddAtomA
CreateEventA
SetEvent
WaitForSingleObject
SetThreadPriority
FreeResource
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetLastError
GetTickCount
Sleep
GetModuleHandleA
GetProcAddress
FindResourceA
LoadResource
LockResource
SizeofResource
GetACP
GetUserDefaultLangID
CloseHandle
CreateMutexA
OpenFileMappingA
CompareStringA
MultiByteToWideChar
GetVersion
WideCharToMultiByte
InterlockedExchange
GetLastError
CompareStringW
SetStdHandle
lstrlenA

user32

GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CharUpperA
MessageBoxA
RegisterWindowMessageA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetCursor
DestroyMenu
SetWindowsHookExA
CallNextHookEx
InvalidateRgn
IsDialogMessageA
LoadIconA
IsIconic
SendMessageA
GetSystemMetrics
EnableWindow
GetClientRect
GetWindowTextA
PostMessageA
GetSubMenu
GetMenuItemCount
SetWindowTextA
GetMenuItemID
wvsprintfA
wsprintfA
GetMenuState
PostQuitMessage
CheckMenuItem
EnableMenuItem
ModifyMenuA
GetParent
GetFocus
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
SetWindowPos
MapDialogRect
SetWindowContextHelpId
GetWindow
ValidateRect
GetCursorPos
MoveWindow
GetSysColorBrush
LoadCursorA
SetCapture
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRect
PostThreadMessageA
RegisterClipboardFormatA
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow

gdi32

SetMapMode
DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
ScaleWindowExtEx
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

GetUserNameA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA

oledlg

ord8

ole32

OleInitialize
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoCreateGuid
CoTaskMemFree
CoInitializeSecurity
CoFreeUnusedLibraries
CoCreateInstance
CoUninitialize
CoInitialize
CoRegisterMessageFilter
CoTaskMemAlloc

oleaut32

VariantCopy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringByteLen
VariantChangeType
SafeArrayGetElement
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysStringLen
SysAllocString

ws2_32

inet_addr
gethostname

Sections

.text
Size: 308KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/Net_DVR/hook.dll
.dll windows x86

3d7e6a87989b0b792ee4292ddf51c241

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowsHookExA
RegisterWindowMessageA
GetAsyncKeyState
MessageBeep
CallNextHookEx
UnhookWindowsHookEx

kernel32

QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW

Exports

Exports

clearMyHook
setMyHook

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JOE
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/Net_DVR/httpsvr.dll
.exe windows x86

4d28b9bc531f3da8bc3677e4ed3337db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetLocalTime
GetACP
TerminateProcess
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
GetFileType
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetProfileStringA
RaiseException
HeapAlloc
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
SetErrorMode
GetCurrentDirectoryA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GetProcessVersion
FindResourceExA
SizeofResource
MulDiv
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAlloc
GetCurrentThread
SetLastError
FileTimeToLocalFileTime
GetDiskFreeSpaceA
SetFileTime
GetTempFileNameA
lstrcpynA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
FindResourceA
GetFileAttributesA
LoadResource
LockResource
GlobalFree
SetFilePointer
WriteFile
FileTimeToSystemTime
GetSystemTime
lstrcmpA
FindFirstFileA
FindNextFileA
CreateFileA
GetFileSize
GetFileTime
ReadFile
CloseHandle
lstrcpyA
CreateMutexA
GetLastError
SetCurrentDirectoryA
GetComputerNameA
GetModuleFileNameA
GetFullPathNameA
HeapCreate

user32

ValidateRect
TranslateMessage
GetMessageA
CharUpperA
InvalidateRect
ReleaseDC
GetDC
DestroyMenu
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
LoadCursorA
GetSysColorBrush
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
InflateRect
WindowFromPoint
SetRect
GetDCEx
LockWindowUpdate
SetCapture
SetParent
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
EqualRect
SetCursor
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
EndDialog
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetWindowRect
MapDialogRect
SetWindowPos
ShowWindow
PostMessageA
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetFocus
ShowOwnedPopups
PostQuitMessage
LoadStringA
DeferWindowPos
SetFocus
GetDlgItem
IsWindowEnabled
GetParent
KillTimer
SetTimer
ScreenToClient
LoadMenuA
GetSubMenu
GetCursorPos
wsprintfA
GetWindowLongA
SetWindowLongA
IsWindowUnicode
SendMessageA
GetSysColor

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
CreateRectRgn
OffsetViewportOrgEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetRectRgn
CombineRgn
BitBlt
CreateCompatibleDC
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
EnumFontFamiliesExA
GetStockObject
GetDeviceCaps
CreateFontIndirectA
DeleteObject
GetTextMetricsA
SelectObject
GetTextExtentPoint32A
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetFileSecurityA
GetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegSetValueA
RegDeleteValueA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteA
ExtractIconA

comctl32

PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Destroy
ImageList_LoadImageA

wsock32

inet_addr
ntohs
getpeername
accept
ioctlsocket
bind
htons
htonl
closesocket
WSASetLastError
recv
send
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
listen
WSAGetLastError
WSAStartup
WSACleanup
shutdown
gethostname

Sections

.text
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/Net_DVR/intf.dll
.dll windows x86

b561d531d3622ed725e6a5917888409f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
lstrcpynA
lstrcmpiA
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcmpA
GetStringTypeW
lstrcatA
lstrlenA
GetTempFileNameA
lstrcpyA
GetTempPathA
GetProcessHeap
GetSystemTime
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
CreateThread
DeleteFileA
MulDiv
FreeLibrary
CreateFileA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
SetFilePointer
ReadFile
SetUnhandledExceptionFilter
RaiseException
FlushInstructionCache
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
HeapSize
LoadLibraryA
VirtualQuery
InterlockedExchange
RtlUnwind
InitializeCriticalSection
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
EnterCriticalSection
LeaveCriticalSection
WriteFile
UnhandledExceptionFilter
VirtualFree
SetEndOfFile
HeapCreate
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapAlloc
HeapFree
TlsGetValue
TlsSetValue
TlsFree
GetLastError
SetLastError
TlsAlloc
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
ExitProcess
GetVersionExA
GetCommandLineA
GetVersion
GetCurrentThreadId

comctl32

ImageList_AddMasked
ImageList_GetIconSize
ImageList_DrawEx
InitCommonControlsEx
ImageList_GetIcon
ImageList_Draw
_TrackMouseEvent
ImageList_Create

user32

GetScrollRange
SetScrollPos
SetScrollRange
ShowScrollBar
SetScrollInfo
GetWindowTextA
GetWindowPlacement
SubtractRect
FindWindowA
EqualRect
DrawMenuBar
SetMenu
IsMenu
GetMenu
DestroyIcon
DrawStateA
IsWindowEnabled
GetFocus
EnableWindow
SetWindowWord
GetWindowWord
DrawIcon
ValidateRect
DrawFrameControl
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
SetRect
GetSysColorBrush
FrameRect
InflateRect
WindowFromDC
CopyRect
MapWindowPoints
GetMessagePos
SetCursor
SetFocus
GetCapture
EnableScrollBar
SetWindowPos
BeginPaint
EndPaint
DrawEdge
KillTimer
SetTimer
SetForegroundWindow
GetScrollPos
InvalidateRect
UpdateWindow
SetCapture
ReleaseCapture
PtInRect
DestroyWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
CreateWindowExA
SetPropA
RedrawWindow
SetWindowRgn
SetWindowLongA
RemovePropA
GetWindow
GetWindowInfo
CallWindowProcA
MoveWindow
ShowWindow
PostMessageA
GetWindowDC
GetPropA
DefWindowProcA
GetIconInfo
GetDC
ReleaseDC
GetSysColor
CharUpperBuffA
wsprintfA
GetWindowRect
OffsetRect
DrawTextA
GetClassLongA
DrawIconEx
ClientToScreen
ScreenToClient
IsRectEmpty
GetSystemMenu
CreatePopupMenu
IsZoomed
IsIconic
AppendMenuA
GetCursorPos
DestroyMenu
GetMenuItemInfoA
FillRect
GetSystemMetrics
GetDesktopWindow
IsWindowVisible
GetScrollInfo
LockWindowUpdate
GetWindowLongA
SetWindowsHookExA
GetParent
UnhookWindowsHookEx
IsWindow
GetActiveWindow
GetClassNameA
CallNextHookEx
SendMessageA
GetMessageA
DispatchMessageA
GetClientRect

gdi32

CreateICA
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
BitBlt
RealizePalette
SelectPalette
GetDeviceCaps
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
StretchBlt
Polygon
RestoreDC
SetBkMode
SaveDC
CreateDIBitmap
CreateDIBSection
RectVisible
StretchDIBits
SetStretchBltMode
SetDIBitsToDevice
ExtSelectClipRgn
GetDIBits
GetStockObject
CreateFontIndirectA
GetTextExtentPointA
SelectClipRgn
GetRgnBox
IntersectClipRect
ExtFloodFill
LineTo
MoveToEx
CreatePen
ExcludeClipRect
GetPixel
GetTextExtentPoint32A
TextOutA
PtInRegion
UnrealizeObject
PatBlt
SetBrushOrgEx
CreatePatternBrush
ExtTextOutA
PlayEnhMetaFile
SetWindowOrgEx
CreateSolidBrush
DeleteDC
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
GetRegionData
ExtCreateRegion
OffsetRgn
GetClipBox
DeleteObject

shell32

ExtractIconExA

Exports

Exports

CloseSkinData
CreateImageList
CreateSkinImageRectRegion
CreateSkinImageSectionRegion
DisableWindowScrollbarSkin
DrawSkinImageRect
DrawSkinImageSection
DrawSkinTextEffect
EnableCaptionButtons
EnableWindowScrollbarSkin
ExitSkinMagicLib
GetCaptionButtonRect
GetCaptionStaticRect
GetSkinApplication
GetSkinBool
GetSkinColor
GetSkinControlBkColor
GetSkinControlColor
GetSkinControlFont
GetSkinControlID
GetSkinControlRect
GetSkinDWORD
GetSkinFont
GetSkinImageSectionMargins
GetSkinInt
GetSkinString
GetSkinTransparentColor
InitSkinMagicLib
IsRect
IsSection
LoadSkinFile
LoadSkinFromResource
OpenSkinData
RedrawCaptionButton
RedrawCaptionStatic
RegisterSkinWindow
RemoveDLgSkinInConstruct
RemoveDialogSkin
RemoveDlgSkinInDestruct
RemoveWindowSkin
SetButtonSkin
SetCaptionButtonCaption
SetCaptionStaticCaption
SetDialogSkin
SetScrollBarSkin
SetShapeWindowSkin
SetSingleDialogSkin
SetTabSkin
SetWindowMainMenuImage
SetWindowSkin
TrackSkinPopupMenu
TrackSkinPopupMenuEx
UnregisterSkinWindow

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/Net_DVR/intfd.dll
.dll windows x86

d65df8d722350cd14eb034caee6a1923

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
SetFilePointer
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetDateFormatA
GetTimeFormatA
lstrcmpiA
lstrcpynA
lstrcmpA
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcpyA
GetVersion
lstrcatA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateEventA
SetEvent
DeleteFileA
WaitForSingleObject
CreateThread
GetSystemTime
MulDiv
CreateFileW
CreateFileA
IsBadCodePtr
ReadFile
SetUnhandledExceptionFilter
FlushInstructionCache
SetConsoleCtrlHandler
FreeLibrary
CloseHandle
GetProcessHeap
InterlockedExchange
VirtualQuery
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
OutputDebugStringA
InterlockedDecrement
LoadLibraryA
RaiseException
DebugBreak
WriteFile
RtlUnwind
UnhandledExceptionFilter
SetEndOfFile
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapValidate
IsBadReadPtr
IsBadWritePtr
GetCurrentThread
GetLastError
SetLastError
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetModuleHandleA
GetProcAddress
ExitProcess
GetCurrentProcess
TerminateProcess
GetVersionExA
GetCommandLineA
GetCurrentThreadId

comctl32

ImageList_GetIcon
ImageList_Create
ImageList_DrawEx
ImageList_GetIconSize
InitCommonControlsEx
ImageList_Draw
_TrackMouseEvent
ImageList_AddMasked

user32

EndPaint
BeginPaint
DrawEdge
DestroyWindow
ReleaseCapture
SetCapture
IsWindowVisible
SetWindowPos
GetSysColor
CharUpperBuffA
GetIconInfo
GetWindowTextA
DrawFrameControl
IsWindowEnabled
GetFocus
EnableWindow
SetWindowWord
GetWindowWord
DrawIcon
DestroyIcon
DrawStateA
ValidateRect
SetMenu
EqualRect
IsMenu
GetMenu
DrawMenuBar
GetWindowPlacement
SubtractRect
FindWindowA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSysColorBrush
CopyRect
MapWindowPoints
SetRect
FrameRect
InflateRect
WindowFromDC
GetMessagePos
SetCursor
GetCapture
SetFocus
InvalidateRect
SetForegroundWindow
SetTimer
UpdateWindow
UnregisterClassA
PtInRect
RegisterClassExA
CreateWindowExA
wsprintfA
DrawTextA
GetClassLongA
DrawIconEx
ClientToScreen
ScreenToClient
GetSystemMenu
CreatePopupMenu
AppendMenuA
GetCursorPos
DestroyMenu
GetMenuItemInfoA
FillRect
GetSystemMetrics
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
GetDesktopWindow
LockWindowUpdate
GetDC
IsRectEmpty
GetWindowInfo
GetWindow
IsIconic
IsZoomed
MoveWindow
ShowWindow
PostMessageA
ReleaseDC
GetWindowDC
GetWindowRect
SetWindowRgn
RemovePropA
GetWindowLongA
SetPropA
SetWindowLongA
RedrawWindow
GetPropA
GetClientRect
CallWindowProcA
DefWindowProcA
GetMessageA
DispatchMessageA
IsWindow
UnhookWindowsHookEx
LoadCursorA
KillTimer
SetWindowsHookExA
GetParent
GetActiveWindow
GetClassNameA
SendMessageA
CallNextHookEx
OffsetRect

gdi32

GetRegionData
DeleteDC
GetDIBits
CreateICA
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
RealizePalette
SelectPalette
GetDeviceCaps
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
StretchBlt
Polygon
RestoreDC
SetBkMode
SaveDC
CreateFontIndirectA
GetTextExtentPointA
CreateDIBitmap
CreateDIBSection
SetDIBitsToDevice
ExtCreateRegion
ExtSelectClipRgn
GetClipBox
RectVisible
StretchDIBits
PtInRegion
ExcludeClipRect
GetPixel
TextOutA
GetTextExtentPoint32A
IntersectClipRect
ExtFloodFill
LineTo
MoveToEx
CreatePen
SelectClipRgn
GetRgnBox
ExtTextOutA
UnrealizeObject
PatBlt
SetBrushOrgEx
CreatePatternBrush
PlayEnhMetaFile
SetWindowOrgEx
CreateSolidBrush
GetStockObject
DeleteObject
BitBlt
CreateRectRgnIndirect
CreateRectRgn
OffsetRgn
CombineRgn
SetStretchBltMode

shell32

ExtractIconExA

Exports

Exports

CloseSkinData
CreateImageList
CreateSkinImageRectRegion
CreateSkinImageSectionRegion
DisableWindowScrollbarSkin
DrawSkinImageRect
DrawSkinImageSection
DrawSkinTextEffect
EnableCaptionButtons
EnableWindowScrollbarSkin
ExitSkinMagicLib
GetCaptionButtonRect
GetCaptionStaticRect
GetSkinApplication
GetSkinBool
GetSkinColor
GetSkinControlBkColor
GetSkinControlColor
GetSkinControlFont
GetSkinControlID
GetSkinControlRect
GetSkinDWORD
GetSkinFont
GetSkinImageSectionMargins
GetSkinInt
GetSkinString
GetSkinTransparentColor
InitSkinMagicLib
IsRect
IsSection
LoadSkinFile
LoadSkinFromResource
OpenSkinData
RedrawCaptionButton
RedrawCaptionStatic
RegisterSkinWindow
RemoveDLgSkinInConstruct
RemoveDialogSkin
RemoveDlgSkinInDestruct
RemoveWindowSkin
SetButtonSkin
SetCaptionButtonCaption
SetCaptionStaticCaption
SetDialogSkin
SetScrollBarSkin
SetShapeWindowSkin
SetSingleDialogSkin
SetTabSkin
SetWindowMainMenuImage
SetWindowSkin
TrackSkinPopupMenu
TrackSkinPopupMenuEx
UnregisterSkinWindow

Sections

.text
Size: 660KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/Net_DVR/lan/1028.lan
新服务器优资福1600_CHS_2011-8/Net_DVR/lan/1033.lan
新服务器优资福1600_CHS_2011-8/Net_DVR/lan/1037.lan
新服务器优资福1600_CHS_2011-8/Net_DVR/lan/1049.lan
新服务器优资福1600_CHS_2011-8/Net_DVR/lan/2052.lan
新服务器优资福1600_CHS_2011-8/Net_DVR/loader.exe
.exe windows x86

6d9d5da39e2d994df7c1d5d1815caa90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord668
ord1980
ord2770
ord356
ord941
ord4129
ord2915
ord2919
ord641
ord2514
ord800
ord858
ord5710
ord2621
ord2764
ord3922
ord6928
ord860
ord540
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord1146
ord1168
ord5953
ord4160
ord2863
ord6215
ord2379
ord755
ord470
ord3092
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord6930
ord4673
ord1576

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
__CxxFrameHandler
strrchr
_setmbcp
__getmainargs

kernel32

CreateProcessA
GetCommandLineA
GetLastError
CreateMutexA
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA

user32

SendMessageA
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
EnableWindow
LoadIconA
SetTimer

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新服务器优资福1600_CHS_2011-8/Net_DVR/logo.bmp
新服务器优资福1600_CHS_2011-8/Net_DVR/logo_app.bmp
新服务器优资福1600_CHS_2011-8/Net_DVR/mediaplayer.ico
新服务器优资福1600_CHS_2011-8/Net_DVR/nosignal.bmp
新服务器优资福1600_CHS_2011-8/Net_DVR/rec2avi.exe
.exe windows x86

94dd5aa9964ce472a0e2876be6ba5695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetFileTime
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
ExitProcess
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetACP
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GlobalFlags
WritePrivateProfileStringA
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetLastError
WriteFile
SetFilePointer
CloseHandle
CreateFileA
ReadFile
FindResourceA
LoadResource
LockResource
SizeofResource
CreateMutexA
lstrlenA
CompareStringW
CompareStringA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
Sleep
InterlockedExchange
LoadLibraryW

user32

InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
GetWindowPlacement
GetWindowRect
GetSysColor
SystemParametersInfoA
DestroyMenu
UnhookWindowsHookEx
GetWindow
MapDialogRect
SetWindowPos
InvalidateRect
ReleaseDC
GetDC
CopyRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetSystemMetrics
LoadIconA
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
CharUpperA
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
ReleaseCapture
SetCapture
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetMessageTime
SetWindowContextHelpId
GetTopWindow
GetForegroundWindow

gdi32

SetTextColor
SetBkColor
SaveDC
RestoreDC
SetMapMode
DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
GetClipBox
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ExtTextOutA
GetObjectA
CreateRectRgnIndirect
CreateBitmap
OffsetViewportOrgEx
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
SysAllocStringLen

dbghelp

MakeSureDirectoryPathExists

Sections

.text
Size: 556KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新服务器优资福1600_CHS_2011-8/Net_DVR/uninstall.exe
.exe windows x86

e14378c0142df63534fe125f65bdf43d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord641
ord800
ord2514
ord2621
ord1134
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5302
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord1146
ord1168
ord540
ord860
ord5953
ord941
ord2818
ord2919
ord4160
ord2863
ord2379
ord755
ord470
ord1200
ord858
ord924
ord4129
ord535
ord6453
ord1980
ord922
ord4058
ord3178
ord2781
ord668
ord2770
ord356
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord5280
ord4673
ord1576

msvcrt

__set_app_type
_except_handler3
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
sprintf
_mbscmp
__CxxFrameHandler
_setmbcp
__p__fmode

kernel32

DeleteFileA
GetEnvironmentVariableA
SetFileAttributesA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetLastError
CreateProcessA
GetShortPathNameA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
RemoveDirectoryA

user32

GetClientRect
EnableWindow
DrawIcon
GetSystemMenu
AppendMenuA
IsIconic
GetSystemMetrics
LoadIconA
SendMessageA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoInitialize

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

..
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新服务器优资福1600_CHS_2011-8/Net_DVR/welcome.bmp
新服务器优资福1600_CHS_2011-8/decoder/ffdshow.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/driver/32bit/CX25820.inf
新服务器优资福1600_CHS_2011-8/driver/32bit/CX25821.inf
新服务器优资福1600_CHS_2011-8/driver/32bit/NVP1204.inf
新服务器优资福1600_CHS_2011-8/driver/32bit/NVP1204.sys
.exe windows x86

731f6afe820960b25e2ec51f457ea710

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

READ_REGISTER_ULONG
WRITE_REGISTER_ULONG
ObReferenceObjectByHandle
ExEventObjectType
IoAcquireRemoveLockEx
ExSystemTimeToLocalTime
IofCompleteRequest
_aulldiv
_allmul
KeSetEvent
KeInsertQueueDpc
_allshr
_alldiv
IoFreeMdl
MmUnmapLockedPages
MmGetPhysicalAddress
MmMapLockedPages
MmBuildMdlForNonPagedPool
IoAllocateMdl
PsTerminateSystemThread
KeResetEvent
KeWaitForSingleObject
KeSetPriorityThread
IoReleaseRemoveLockEx
KeInitializeDpc
IoInitializeRemoveLockEx
ZwClose
PsCreateSystemThread
KeInitializeEvent
IoDeleteDevice
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCreateDevice
KeInitializeSpinLock
MmUnmapIoSpace
IoDisconnectInterrupt
ExAllocatePoolWithTag
IoConnectInterrupt
IoGetDmaAdapter
MmMapIoSpace
IoDetachDevice
IoReleaseRemoveLockAndWaitEx
IoSetDeviceInterfaceState
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
RtlTimeToTimeFields
READ_REGISTER_UCHAR
WRITE_REGISTER_UCHAR
KeGetCurrentThread
KeQuerySystemTime

hal

KeStallExecutionProcessor
KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 512B - Virtual size: 507B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 768B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/driver/32bit/TW68XX.inf
新服务器优资福1600_CHS_2011-8/driver/32bit/TW68XX.sys
.exe windows x86

005f98a10765a9d2ceeffc94b6aa9c73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeInitializeSpinLock
KefAcquireSpinLockAtDpcLevel
memcpy
KefReleaseSpinLockFromDpcLevel
PoStartNextPowerIrp
IoAllocateMdl
IoFreeMdl
MmMapLockedPagesSpecifyCache
MmBuildMdlForNonPagedPool
MmProbeAndLockPages
MmUnlockPages
MmSizeOfMdl
MmUnmapLockedPages
ObfDereferenceObject
KeSetEvent
KeInitializeDpc
KeInsertQueueDpc
IoGetDmaAdapter
KeSynchronizeExecution
KeCancelTimer
MmUnmapIoSpace
READ_REGISTER_UCHAR
READ_REGISTER_BUFFER_UCHAR
WRITE_REGISTER_UCHAR
WRITE_REGISTER_BUFFER_UCHAR
READ_REGISTER_USHORT
READ_REGISTER_BUFFER_USHORT
WRITE_REGISTER_USHORT
WRITE_REGISTER_BUFFER_USHORT
READ_REGISTER_ULONG
READ_REGISTER_BUFFER_ULONG
WRITE_REGISTER_ULONG
WRITE_REGISTER_BUFFER_ULONG
IofCompleteRequest
PoCallDriver
IofCallDriver
memset
IoGetDeviceProperty
RtlInitUnicodeString
ExSetTimerResolution
KeWaitForSingleObject
PoSetPowerState
KeSetTimer
KeSetTimerEx
KeInitializeTimer
KeTickCount
KeBugCheckEx
ZwClose
RtlUnwind
RtlAppendUnicodeStringToString
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateSymbolicLink
IoDeleteSymbolicLink
IoCreateDevice
ZwOpenKey
ZwCreateKey
memmove
RtlCopyUnicodeString
IoConnectInterrupt
IoDisconnectInterrupt
IoAllocateIrp
IoFreeIrp
IoBuildSynchronousFsdRequest
IoGetAttachedDeviceReference
IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
InterlockedExchange
KeClearEvent
IoDetachDevice
InterlockedIncrement
InterlockedDecrement
ExFreePool
IoCancelIrp
RtlFreeUnicodeString
PoRequestPowerIrp
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
ExQueueWorkItem
KeReleaseMutex
ObReferenceObjectByHandle
KeInitializeEvent
ExAllocatePool
MmMapIoSpace
ZwUnmapViewOfSection
ZwMapViewOfSection
ZwOpenSection
KeInitializeMutex
KeRemoveEntryDeviceQueue

hal

KeGetCurrentIrql
KfLowerIrql
KeQueryPerformanceCounter
KfReleaseSpinLock
KfAcquireSpinLock

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 237B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 128B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.STL
Size: 128B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/driver/32bit/cxathena.sys
.exe windows x86

347f353f3227940fce55c3c4a6d4c5fe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_alldiv
_allmul
READ_REGISTER_ULONG
WRITE_REGISTER_ULONG
ExAllocatePoolWithTag
ObfDereferenceObject
KeWaitForSingleObject
KeSetEvent
PsTerminateSystemThread
KeResetEvent
KeSetPriorityThread
KeGetCurrentThread
ExFreePool
MmFreeContiguousMemory
MmUnmapIoSpace
KeReleaseMutex
KeInitializeMutex
IofCallDriver
IoSetDeviceInterfaceState
MmMapIoSpace
MmGetPhysicalAddress
MmAllocateContiguousMemory
KeInitializeEvent
IoDeleteDevice
IoDetachDevice
RtlFreeUnicodeString
IofCompleteRequest
InterlockedIncrement
MmMapLockedPagesSpecifyCache
PoCallDriver
PoStartNextPowerIrp
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
KeInitializeSpinLock
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCreateDevice
KeQueryInterruptTime
_purecall
KeInsertQueueDpc
KeInitializeDpc
KeClearEvent
IoDisconnectInterrupt
KeSynchronizeExecution
IoConnectInterrupt
KeRemoveQueueDpc
ExSystemTimeToLocalTime
RtlTimeToTimeFields
InterlockedDecrement
KeQuerySystemTime

hal

KeQueryPerformanceCounter
KfAcquireSpinLock
KfReleaseSpinLock
KeStallExecutionProcessor

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/driver/32bit/cxatlas.inf
新服务器优资福1600_CHS_2011-8/driver/32bit/cxatlas.sys
.exe windows x86

f455d4ceb3303090ae4b26f5be63dfe6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_alldiv
_allmul
READ_REGISTER_ULONG
WRITE_REGISTER_ULONG
ObfDereferenceObject
KeWaitForSingleObject
KeSetEvent
PsTerminateSystemThread
KeResetEvent
KeSetPriorityThread
KeGetCurrentThread
MmBuildMdlForNonPagedPool
IoAllocateMdl
ExAllocatePoolWithTag
IoFreeMdl
ExFreePool
MmFreeContiguousMemory
MmUnmapIoSpace
KeReleaseMutex
KeInitializeMutex
IofCallDriver
IoSetDeviceInterfaceState
MmMapIoSpace
MmGetPhysicalAddress
MmAllocateContiguousMemory
KeInitializeEvent
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
InterlockedDecrement
InterlockedIncrement
MmMapLockedPagesSpecifyCache
PoCallDriver
PoStartNextPowerIrp
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
KeInitializeSpinLock
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCreateDevice
KeInsertQueueDpc
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeRemoveQueueDpc
KeInitializeDpc
_purecall
KeClearEvent
IoDisconnectInterrupt
KeSynchronizeExecution
IoConnectInterrupt
ExSystemTimeToLocalTime
RtlTimeToTimeFields
RtlFreeUnicodeString
KeQuerySystemTime

hal

KeQueryPerformanceCounter
KfAcquireSpinLock
KfReleaseSpinLock
KeStallExecutionProcessor

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/driver/32bit/instdrv.exe
.exe windows x86

116a8f4ec7356acc4b5cb832867d91aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord641
ord801
ord2514
ord2621
ord1134
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord2512
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord1146
ord1168
ord541
ord6215
ord3092
ord5953
ord800
ord4160
ord540
ord2863
ord2379
ord755
ord470
ord5861
ord941
ord858
ord4129
ord5683
ord2919
ord1768
ord4299
ord6880
ord2818
ord535
ord2554
ord4486
ord6375
ord4274
ord5241
ord4673
ord1576

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
_onexit
__dllonexit
__CxxFrameHandler
_acmdln
_setmbcp

kernel32

GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
CreateMutexA

user32

SendMessageA
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
GetWindowRect
KillTimer
EnableWindow
SetTimer
LoadIconA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/install.exe
.exe windows x86

57d855c7f153324326b58273e215d26f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
GetFileAttributesA
GetFileTime
GetTickCount
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
CreateFileA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetCurrentDirectoryA
WritePrivateProfileStringA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
FormatMessageA
LocalFree
MulDiv
GlobalUnlock
GlobalFree
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
GlobalLock
lstrcmpA
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
CompareStringW
CompareStringA
GetVersion
InterlockedExchange
lstrlenA
SetLastError
WaitForSingleObject
CloseHandle
DeleteFileA
MultiByteToWideChar
CopyFileA
CreateDirectoryA
SetFileAttributesA
WideCharToMultiByte
GetModuleFileNameA
GetEnvironmentVariableA
CreateProcessA
GetModuleHandleA
GetProcAddress
GetCurrentProcess
TerminateProcess
Sleep
FindResourceA
LoadResource
LockResource
SizeofResource
CreateMutexA
GetStdHandle
GetLastError

user32

RegisterClipboardFormatA
PostThreadMessageA
SetCapture
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
ReleaseCapture
UnhookWindowsHookEx
LoadCursorA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
CharUpperA
GetSystemMetrics
LoadIconA
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
SendMessageA
SetActiveWindow
PostMessageA

gdi32

GetWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetViewportExtEx
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
CreateBitmap
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
SHChangeNotify

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新服务器优资福1600_CHS_2011-8/视频监控软件使用说明书.doc
.doc windows office2003

Sharing

General

Malware Config

Signatures

Files

be7ef500ed346af4ea51a7bf7be8c0d1

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

msvcp60

exp

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 576B

.rsrc Size: 80KB - Virtual size: 78KB

.. Size: 24KB - Virtual size: 24KB

3a1b1637f9550c267529a3b44020550c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

ddraw

Sections

.text Size: 496KB - Virtual size: 492KB

.rodata Size: 12KB - Virtual size: 9KB

.rdata Size: 144KB - Virtual size: 142KB

.data Size: 16KB - Virtual size: 218KB

.rsrc Size: 88KB - Virtual size: 86KB

.. Size: 24KB - Virtual size: 24KB

481de4587f1baeb51de7fa8ee297f407

Headers

File Characteristics

Imports

hook

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ws2_32

oledlg

ole32

oleaut32

winmm

dbghelp

powrprof

intfd

exp

d3d9

ddraw

Sections

.rodata Size: 12KB - Virtual size: 9KB

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 236KB - Virtual size: 234KB

.data Size: 20KB - Virtual size: 305KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.. Size: 24KB - Virtual size: 24KB

5a8c240fb313c1953b9afa573f4e22b9

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 576B

.rsrc
Size: 80KB - Virtual size: 78KB

..
Size: 24KB - Virtual size: 24KB

.text
Size: 496KB - Virtual size: 492KB

.rodata
Size: 12KB - Virtual size: 9KB

.rdata
Size: 144KB - Virtual size: 142KB

.data
Size: 16KB - Virtual size: 218KB

.rsrc
Size: 88KB - Virtual size: 86KB

..
Size: 24KB - Virtual size: 24KB

.rodata
Size: 12KB - Virtual size: 9KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 236KB - Virtual size: 234KB

.data
Size: 20KB - Virtual size: 305KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

..
Size: 24KB - Virtual size: 24KB

.text
Size: 768KB - Virtual size: 766KB

.rodata
Size: 12KB - Virtual size: 9KB

.rdata
Size: 180KB - Virtual size: 178KB

.data
Size: 20KB - Virtual size: 222KB

.rsrc
Size: 92KB - Virtual size: 91KB

.reloc
Size: 60KB - Virtual size: 57KB

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 47KB

.CRT
Size: 512B - Virtual size: 16B

.rsrc
Size: 16KB - Virtual size: 15KB

..
Size: 23KB - Virtual size: 24KB