027bdc8795bcdefe40c7dfcecb81c865_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

027bdc8795bcdefe40c7dfcecb81c865_JaffaCakes118
Size

20.4MB
MD5

027bdc8795bcdefe40c7dfcecb81c865
SHA1

fc1178241784876a6aa1726d879206151149dd26
SHA256

0d7a8553c6535f38aaa3b6007b506ef2df6f211f894ec94ba3b828466590b559
SHA512

56f2060b7e6bb8e5e04078a511fedd6bdc8b08ff95e8c3603b620bc5a4c4c3f87af2eb61879a986036d28d992d1f19a548dadfe346892c20184e5b8d851b017e
SSDEEP

393216:CGyWrXHovqI/+gm+6T8CQnRiWYjveFd8+7I10K/wZ6ajvbQtBZbSznNdKCweOs:2WzoyI7eT8CqRiHjvCd88IuEwwQvby/s

Score

7^/10

aspackv2 upx

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/xianjiantebieban/PlayGame.exe	aspack_v212_v242

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/xianjiantebieban/修改器3.exe	upx
static1/unpack001/安装程序.exe	upx

Unsigned PE 19 IoCs

Checks for missing Authenticode signature.

resource
unpack001/xianjiantebieban/仙剑-战斗即时制.exe
unpack001/xianjiantebieban/仙剑-战斗回合制.exe
unpack001/xianjiantebieban/修改器1.exe
unpack001/xianjiantebieban/修改器2.exe
unpack002/out.upx
unpack001/xianjiantebieban/修改器4.EXE
unpack001/xianjiantebieban/修改器5.exe
unpack001/xianjiantebieban/修改器6.EXE
unpack001/xianjiantebieban/修改器7(推荐).exe
unpack001/xianjiantebieban/修改器7(改存档-推荐).exe
unpack001/xianjiantebieban/切换到简体版.exe
unpack001/xianjiantebieban/切换到繁体版.exe
unpack001/xianjiantebieban/音乐/dos版音乐欣赏/SDL.dll
unpack001/xianjiantebieban/音乐/dos版音乐欣赏/SDL_net.dll
unpack001/xianjiantebieban/音乐/dos版音乐欣赏/dosbox.exe
unpack001/xianjiantebieban/音乐/dos版音乐欣赏/libogg-0.dll
unpack001/xianjiantebieban/音乐/dos版音乐欣赏/libvorbis-0.dll
unpack001/xianjiantebieban/音乐/dos版音乐欣赏/libvorbisfile-3.dll
unpack003/out.upx

Files

027bdc8795bcdefe40c7dfcecb81c865_JaffaCakes118
.rar
xianjiantebieban/0.RPG
xianjiantebieban/1.rpg
xianjiantebieban/2.rpg
xianjiantebieban/3.rpg
xianjiantebieban/ABC.MKF
xianjiantebieban/BALL.MKF
xianjiantebieban/DATA.MKF
xianjiantebieban/F.MKF
xianjiantebieban/FANTI.FON
xianjiantebieban/FBP.MKF
xianjiantebieban/FIRE.MKF
xianjiantebieban/GOP.MKF
xianjiantebieban/InstallCfg.config
xianjiantebieban/M.MSG
xianjiantebieban/MAP.MKF
xianjiantebieban/MGO.MKF
xianjiantebieban/MIDI.MKF
xianjiantebieban/MUS.MKF
xianjiantebieban/PAL.JS3
xianjiantebieban/PAT.MKF
xianjiantebieban/PlayGame.exe
.exe windows:4 windows x86 arch:x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:b1:93:a7:41:09:c3:69:9c:ec:1a:a4:ea:94:38:33
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

07/08/2013, 00:00

Not After

07/08/2015, 23:59

Subject

CN=Wuhan Weijun Technology Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=技术部,O=Wuhan Weijun Technology Co. Ltd.,L=Wuhan,ST=Hubei,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

30:6d:20:74:43:60:3f:cd:67:fb:f3:5f:d5:9f:80:fe:86:09:4b:75
Signer

Actual PE Digest

30:6d:20:74:43:60:3f:cd:67:fb:f3:5f:d5:9f:80:fe:86:09:4b:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 406KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xianjiantebieban/RGM.MKF
xianjiantebieban/RNG.MKF
xianjiantebieban/SSS.MKF
xianjiantebieban/VOC.MKF
xianjiantebieban/WORD.DAT
xianjiantebieban/desc.dat
xianjiantebieban/readme.txt
xianjiantebieban/rungame.ini
xianjiantebieban/wor16.asc
xianjiantebieban/wor16.fon
xianjiantebieban/words.FON
xianjiantebieban/仙剑-战斗即时制.exe
.exe windows:1 windows x86 arch:x86

ca07171499984aeb9298464054874b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

gdi32

BitBlt
ChoosePixelFormat
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreatePalette
DeleteDC
DeleteObject
DescribePixelFormat
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetSystemPaletteEntries
GetSystemPaletteUse
RealizePalette
SelectObject
SelectPalette
SetDIBColorTable
SetDeviceGammaRamp
SetPaletteEntries
SetPixelFormat
SetSystemPaletteUse
SwapBuffers
UnrealizeObject

user32

AdjustWindowRect
AdjustWindowRectEx
BeginPaint
CallWindowProcA
ChangeDisplaySettingsA
CharUpperA
ClientToScreen
ClipCursor
CreateCursor
CreateIconFromResourceEx
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageA
EndPaint
EnumDisplaySettingsA
GetClassInfoA
GetClientRect
GetCursorPos
GetCursor
GetDC
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutNameA
GetKeyboardState
GetMenu
GetMessageA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
InvalidateRect
IsZoomed
KillTimer
LoadImageA
LoadKeyboardLayoutA
MapVirtualKeyA
MapVirtualKeyExA
MapWindowPoints
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
ReleaseCapture
ReleaseDC
ScreenToClient
SetCapture
SetClassLongA
SetCursorPos
SetCursor
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
ToAsciiEx
ToUnicode
TranslateMessage
UnregisterClassA
WindowFromPoint

winmm

joyGetDevCapsA
joyGetNumDevs
joyGetPosEx
mciGetErrorStringA
mciSendCommandA
midiOutPrepareHeader
midiOutSetVolume
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamProperty
midiStreamRestart
midiStreamStop
timeBeginPeriod
timeEndPeriod
timeGetTime
timeKillEvent
timeSetEvent
waveOutClose
waveOutGetErrorTextA
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateMutexA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetCurrentThreadId
GetCurrentThread
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetTimeZoneInformation
GetVersionExA
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleInputA
ReadFile
ReleaseMutex
ReleaseSemaphore
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetFilePointer
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile

Exports

Exports

_SDL_AddTimer
_SDL_AllocRW
_SDL_AudioDriverName
_SDL_AudioInit
_SDL_AudioQuit
_SDL_BuildAudioCVT
_SDL_CDClose
_SDL_CDEject
_SDL_CDName
_SDL_CDNumDrives
_SDL_CDOpen
_SDL_CDPause
_SDL_CDPlay
_SDL_CDPlayTracks
_SDL_CDResume
_SDL_CDStatus
_SDL_CDStop
_SDL_ClearError
_SDL_CloseAudio
_SDL_ConvertAudio
_SDL_ConvertSurface
_SDL_CreateCursor
_SDL_CreateMutex
_SDL_CreateRGBSurface
_SDL_CreateRGBSurfaceFrom
_SDL_CreateSemaphore
_SDL_CreateThread
_SDL_CreateYUVOverlay
_SDL_Delay
_SDL_DestroyMutex
_SDL_DestroySemaphore
_SDL_DisplayFormat
_SDL_DisplayFormatAlpha
_SDL_DisplayYUVOverlay
_SDL_EnableKeyRepeat
_SDL_EnableUNICODE
_SDL_Error
_SDL_EventState
_SDL_FillRect
_SDL_Flip
_SDL_FreeCursor
_SDL_FreeRW
_SDL_FreeSurface
_SDL_FreeWAV
_SDL_FreeYUVOverlay
_SDL_GL_GetAttribute
_SDL_GL_GetProcAddress
_SDL_GL_LoadLibrary
_SDL_GL_Lock
_SDL_GL_SetAttribute
_SDL_GL_SwapBuffers
_SDL_GL_Unlock
_SDL_GL_UpdateRects
_SDL_GetAppState
_SDL_GetAudioStatus
_SDL_GetClipRect
_SDL_GetCursor
_SDL_GetError
_SDL_GetEventFilter
_SDL_GetKeyName
_SDL_GetKeyRepeat
_SDL_GetKeyState
_SDL_GetModState
_SDL_GetMouseState
_SDL_GetRGB
_SDL_GetRGBA
_SDL_GetRelativeMouseState
_SDL_GetThreadID
_SDL_GetTicks
_SDL_GetVideoInfo
_SDL_GetVideoSurface
_SDL_GetWMInfo
_SDL_Has3DNow
_SDL_Has3DNowExt
_SDL_HasAltiVec
_SDL_HasMMX
_SDL_HasMMXExt
_SDL_HasRDTSC
_SDL_HasSSE
_SDL_HasSSE2
_SDL_Init
_SDL_InitSubSystem
_SDL_JoystickClose
_SDL_JoystickEventState
_SDL_JoystickGetAxis
_SDL_JoystickGetBall
_SDL_JoystickGetButton
_SDL_JoystickGetHat
_SDL_JoystickIndex
_SDL_JoystickName
_SDL_JoystickNumAxes
_SDL_JoystickNumBalls
_SDL_JoystickNumButtons
_SDL_JoystickNumHats
_SDL_JoystickOpen
_SDL_JoystickOpened
_SDL_JoystickUpdate
_SDL_KillThread
_SDL_Linked_Version
_SDL_ListModes
_SDL_LoadBMP_RW
_SDL_LoadWAV_RW
_SDL_LockAudio
_SDL_LockSurface
_SDL_LockYUVOverlay
_SDL_LowerBlit
_SDL_MapRGB
_SDL_MapRGBA
_SDL_MixAudio
_SDL_NumJoysticks
_SDL_OpenAudio
_SDL_PauseAudio
_SDL_PeepEvents
_SDL_PollEvent
_SDL_PumpEvents
_SDL_PushEvent
_SDL_Quit
_SDL_QuitSubSystem
_SDL_RWFromConstMem
_SDL_RWFromFP
_SDL_RWFromFile
_SDL_RWFromMem
_SDL_ReadBE16
_SDL_ReadBE32
_SDL_ReadBE64
_SDL_ReadLE16
_SDL_ReadLE32
_SDL_ReadLE64
_SDL_RegisterApp
_SDL_RemoveTimer
_SDL_SaveBMP_RW
_SDL_SemPost
_SDL_SemTryWait
_SDL_SemValue
_SDL_SemWait
_SDL_SemWaitTimeout
_SDL_SetAlpha
_SDL_SetClipRect
_SDL_SetColorKey
_SDL_SetColors
_SDL_SetCursor
_SDL_SetError
_SDL_SetEventFilter
_SDL_SetModState
_SDL_SetModuleHandle
_SDL_SetPalette
_SDL_SetTimer
_SDL_SetVideoMode
_SDL_ShowCursor
_SDL_SoftStretch
_SDL_ThreadID
_SDL_UnlockAudio
_SDL_UnlockSurface
_SDL_UnlockYUVOverlay
_SDL_UnregisterApp
_SDL_UpdateRect
_SDL_UpdateRects
_SDL_UpperBlit
_SDL_VideoDriverName
_SDL_VideoInit
_SDL_VideoModeOK
_SDL_VideoQuit
_SDL_WM_GetCaption
_SDL_WM_GrabInput
_SDL_WM_IconifyWindow
_SDL_WM_SetCaption
_SDL_WM_SetIcon
_SDL_WM_ToggleFullScreen
_SDL_WaitEvent
_SDL_WaitThread
_SDL_WarpMouse
_SDL_WasInit
_SDL_WriteBE16
_SDL_WriteBE32
_SDL_WriteBE64
_SDL_WriteLE16
_SDL_WriteLE32
_SDL_WriteLE64
_SDL_getenv
_SDL_iconv
_SDL_iconv_close
_SDL_iconv_open
_SDL_iconv_string
_SDL_lltoa
_SDL_mutexP
_SDL_mutexV
_SDL_putenv
_SDL_revcpy
_SDL_snprintf
_SDL_strdup
_SDL_strlcat
_SDL_strlcpy
_SDL_strtoull
_SDL_ulltoa
_SDL_vsnprintf

Sections

AUTO
Size: 494KB - Virtual size: 494KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 161KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xianjiantebieban/仙剑-战斗回合制.exe
.exe windows:1 windows x86 arch:x86

ca07171499984aeb9298464054874b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

gdi32

BitBlt
ChoosePixelFormat
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreatePalette
DeleteDC
DeleteObject
DescribePixelFormat
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetSystemPaletteEntries
GetSystemPaletteUse
RealizePalette
SelectObject
SelectPalette
SetDIBColorTable
SetDeviceGammaRamp
SetPaletteEntries
SetPixelFormat
SetSystemPaletteUse
SwapBuffers
UnrealizeObject

user32

AdjustWindowRect
AdjustWindowRectEx
BeginPaint
CallWindowProcA
ChangeDisplaySettingsA
CharUpperA
ClientToScreen
ClipCursor
CreateCursor
CreateIconFromResourceEx
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageA
EndPaint
EnumDisplaySettingsA
GetClassInfoA
GetClientRect
GetCursorPos
GetCursor
GetDC
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutNameA
GetKeyboardState
GetMenu
GetMessageA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
InvalidateRect
IsZoomed
KillTimer
LoadImageA
LoadKeyboardLayoutA
MapVirtualKeyA
MapVirtualKeyExA
MapWindowPoints
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
ReleaseCapture
ReleaseDC
ScreenToClient
SetCapture
SetClassLongA
SetCursorPos
SetCursor
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
ToAsciiEx
ToUnicode
TranslateMessage
UnregisterClassA
WindowFromPoint

winmm

joyGetDevCapsA
joyGetNumDevs
joyGetPosEx
mciGetErrorStringA
mciSendCommandA
midiOutPrepareHeader
midiOutSetVolume
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamProperty
midiStreamRestart
midiStreamStop
timeBeginPeriod
timeEndPeriod
timeGetTime
timeKillEvent
timeSetEvent
waveOutClose
waveOutGetErrorTextA
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateMutexA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetCurrentThreadId
GetCurrentThread
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetTimeZoneInformation
GetVersionExA
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleInputA
ReadFile
ReleaseMutex
ReleaseSemaphore
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetFilePointer
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile

Exports

Exports

_SDL_AddTimer
_SDL_AllocRW
_SDL_AudioDriverName
_SDL_AudioInit
_SDL_AudioQuit
_SDL_BuildAudioCVT
_SDL_CDClose
_SDL_CDEject
_SDL_CDName
_SDL_CDNumDrives
_SDL_CDOpen
_SDL_CDPause
_SDL_CDPlay
_SDL_CDPlayTracks
_SDL_CDResume
_SDL_CDStatus
_SDL_CDStop
_SDL_ClearError
_SDL_CloseAudio
_SDL_ConvertAudio
_SDL_ConvertSurface
_SDL_CreateCursor
_SDL_CreateMutex
_SDL_CreateRGBSurface
_SDL_CreateRGBSurfaceFrom
_SDL_CreateSemaphore
_SDL_CreateThread
_SDL_CreateYUVOverlay
_SDL_Delay
_SDL_DestroyMutex
_SDL_DestroySemaphore
_SDL_DisplayFormat
_SDL_DisplayFormatAlpha
_SDL_DisplayYUVOverlay
_SDL_EnableKeyRepeat
_SDL_EnableUNICODE
_SDL_Error
_SDL_EventState
_SDL_FillRect
_SDL_Flip
_SDL_FreeCursor
_SDL_FreeRW
_SDL_FreeSurface
_SDL_FreeWAV
_SDL_FreeYUVOverlay
_SDL_GL_GetAttribute
_SDL_GL_GetProcAddress
_SDL_GL_LoadLibrary
_SDL_GL_Lock
_SDL_GL_SetAttribute
_SDL_GL_SwapBuffers
_SDL_GL_Unlock
_SDL_GL_UpdateRects
_SDL_GetAppState
_SDL_GetAudioStatus
_SDL_GetClipRect
_SDL_GetCursor
_SDL_GetError
_SDL_GetEventFilter
_SDL_GetKeyName
_SDL_GetKeyRepeat
_SDL_GetKeyState
_SDL_GetModState
_SDL_GetMouseState
_SDL_GetRGB
_SDL_GetRGBA
_SDL_GetRelativeMouseState
_SDL_GetThreadID
_SDL_GetTicks
_SDL_GetVideoInfo
_SDL_GetVideoSurface
_SDL_GetWMInfo
_SDL_Has3DNow
_SDL_Has3DNowExt
_SDL_HasAltiVec
_SDL_HasMMX
_SDL_HasMMXExt
_SDL_HasRDTSC
_SDL_HasSSE
_SDL_HasSSE2
_SDL_Init
_SDL_InitSubSystem
_SDL_JoystickClose
_SDL_JoystickEventState
_SDL_JoystickGetAxis
_SDL_JoystickGetBall
_SDL_JoystickGetButton
_SDL_JoystickGetHat
_SDL_JoystickIndex
_SDL_JoystickName
_SDL_JoystickNumAxes
_SDL_JoystickNumBalls
_SDL_JoystickNumButtons
_SDL_JoystickNumHats
_SDL_JoystickOpen
_SDL_JoystickOpened
_SDL_JoystickUpdate
_SDL_KillThread
_SDL_Linked_Version
_SDL_ListModes
_SDL_LoadBMP_RW
_SDL_LoadWAV_RW
_SDL_LockAudio
_SDL_LockSurface
_SDL_LockYUVOverlay
_SDL_LowerBlit
_SDL_MapRGB
_SDL_MapRGBA
_SDL_MixAudio
_SDL_NumJoysticks
_SDL_OpenAudio
_SDL_PauseAudio
_SDL_PeepEvents
_SDL_PollEvent
_SDL_PumpEvents
_SDL_PushEvent
_SDL_Quit
_SDL_QuitSubSystem
_SDL_RWFromConstMem
_SDL_RWFromFP
_SDL_RWFromFile
_SDL_RWFromMem
_SDL_ReadBE16
_SDL_ReadBE32
_SDL_ReadBE64
_SDL_ReadLE16
_SDL_ReadLE32
_SDL_ReadLE64
_SDL_RegisterApp
_SDL_RemoveTimer
_SDL_SaveBMP_RW
_SDL_SemPost
_SDL_SemTryWait
_SDL_SemValue
_SDL_SemWait
_SDL_SemWaitTimeout
_SDL_SetAlpha
_SDL_SetClipRect
_SDL_SetColorKey
_SDL_SetColors
_SDL_SetCursor
_SDL_SetError
_SDL_SetEventFilter
_SDL_SetModState
_SDL_SetModuleHandle
_SDL_SetPalette
_SDL_SetTimer
_SDL_SetVideoMode
_SDL_ShowCursor
_SDL_SoftStretch
_SDL_ThreadID
_SDL_UnlockAudio
_SDL_UnlockSurface
_SDL_UnlockYUVOverlay
_SDL_UnregisterApp
_SDL_UpdateRect
_SDL_UpdateRects
_SDL_UpperBlit
_SDL_VideoDriverName
_SDL_VideoInit
_SDL_VideoModeOK
_SDL_VideoQuit
_SDL_WM_GetCaption
_SDL_WM_GrabInput
_SDL_WM_IconifyWindow
_SDL_WM_SetCaption
_SDL_WM_SetIcon
_SDL_WM_ToggleFullScreen
_SDL_WaitEvent
_SDL_WaitThread
_SDL_WarpMouse
_SDL_WasInit
_SDL_WriteBE16
_SDL_WriteBE32
_SDL_WriteBE64
_SDL_WriteLE16
_SDL_WriteLE32
_SDL_WriteLE64
_SDL_getenv
_SDL_iconv
_SDL_iconv_close
_SDL_iconv_open
_SDL_iconv_string
_SDL_lltoa
_SDL_mutexP
_SDL_mutexV
_SDL_putenv
_SDL_revcpy
_SDL_snprintf
_SDL_strdup
_SDL_strlcat
_SDL_strlcpy
_SDL_strtoull
_SDL_ulltoa
_SDL_vsnprintf

Sections

AUTO
Size: 491KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 161KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xianjiantebieban/仙剑-战斗回合制.ico
xianjiantebieban/仙剑DOS之51个经典存档.rar/01.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/02.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/03.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/04.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/05.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/06.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/07.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/08.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/09.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/10.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/11.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/12.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/13.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/14.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/15.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/16.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/17.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/18.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/19.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/20.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/21.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/22.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/23.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/24.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/25.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/26.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/27.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/28.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/29.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/30.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/31.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/32.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/33.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/34.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/35.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/36.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/37.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/38.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/39.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/40.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/41.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/42.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/43.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/44.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/45.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/46.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/47.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/48.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/49.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/50.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/51.rpg
xianjiantebieban/仙剑DOS之51个经典存档.rar/存檔內容列表.txt
xianjiantebieban/仙剑奇侠传.url
xianjiantebieban/修改器1.exe
.exe windows:4 windows x86 arch:x86

5aaab6d0ad8ea87b8a9a873624f8b938

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4710
ord2514
ord6052
ord4078
ord1775
ord4998
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord324
ord825
ord641
ord2294
ord2362
ord4234
ord6334
ord6055
ord1776
ord5290
ord3402
ord4424
ord3716
ord567
ord4376
ord4853
ord2302
ord6111
ord4694
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5265
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord656
ord783
ord609
ord800
ord2621
ord1134
ord3711
ord3610
ord2575
ord4396
ord3574
ord1146
ord1168
ord860
ord540
ord2358
ord2370
ord4224
ord4160
ord2863
ord2379
ord755
ord470
ord665
ord6385
ord5773
ord353
ord5442
ord2642
ord2301
ord790
ord5302
ord1576

msvcrt

_exit
_XcptFilter
_onexit
__p__acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
_ftol
__dllonexit
__CxxFrameHandler
_setmbcp
_itoa

kernel32

GetModuleHandleA
GetStartupInfoA

user32

SendMessageA
SetScrollPos
SetScrollRange
AppendMenuA
LoadIconA
GetScrollPos
GetClientRect
GetSystemMetrics
IsIconic
GetSystemMenu
DrawIcon
EnableWindow

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xianjiantebieban/修改器2.exe
.exe windows:4 windows x86 arch:x86

d936bee7c570a4ee3d982f92bd88fa3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2390
ord3059
ord5100
ord2723
ord5103
ord4467
ord4303
ord3350
ord5012
ord975
ord5472
ord3403
ord2879
ord2878
ord4151
ord6055
ord4077
ord1776
ord4407
ord5237
ord2385
ord5163
ord6374
ord4353
ord5282
ord2649
ord1665
ord3798
ord4837
ord4436
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4427
ord366
ord825
ord674
ord5252
ord4612
ord4610
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord4424
ord3738
ord561
ord815
ord2558
ord617
ord5301
ord5214
ord296
ord5503
ord2635
ord986
ord1842
ord4242
ord2621
ord5265
ord4376
ord4853
ord4998
ord4710
ord2514
ord6052
ord4078
ord1775
ord823
ord5280
ord4441
ord5261
ord4425
ord3597
ord324
ord641
ord4234
ord1825
ord4238
ord4696
ord3058
ord3065
ord6336
ord2510
ord2542
ord5243
ord5740
ord1746
ord5577
ord3172
ord5653
ord4420
ord4953
ord4858
ord2399
ord4387
ord3454
ord3198
ord6080
ord6175
ord4623
ord4426
ord338
ord652
ord4823
ord1841
ord4241
ord4589
ord4588
ord4899
ord4370
ord4892
ord4533
ord5076
ord4340
ord4347
ord4720
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord5240
ord5281
ord3748
ord1725
ord2091
ord4432
ord800
ord860
ord540
ord364
ord784
ord2358
ord2370
ord2294
ord2362
ord5260
ord6334
ord665
ord6385
ord5773
ord353
ord5442
ord4159
ord520
ord5241
ord1576
ord1168

msvcrt

__p__acmdln
exit
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__getmainargs
__p__commode
__set_app_type
_exit
_controlfp
_onexit
__dllonexit
__CxxFrameHandler
__p__fmode
_except_handler3
_setmbcp

kernel32

GetModuleHandleA
GetStartupInfoA

user32

EnableWindow

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xianjiantebieban/修改器3.exe
.exe windows:4 windows x86 arch:x86

Code Sign

52:24:9b:f2:0d:e4:ea:e0:d2:e8
Certificate

Issuer

CN=Itol,OU=Free,O=Emu-Zone,C=CN-中国,1.2.840.113549.1.9.1=#130449746f6c

Not Before

31/10/2006, 13:48

Not After

31/10/2011, 13:48

Subject

CN=Itol,OU=Free,O=Emu-Zone,C=CN-中国,1.2.840.113549.1.9.1=#130449746f6c

Key Usages

KeyUsageDigitalSignature
KeyUsageDataEncipherment

70:f9:04:ed:46:60:45:af:0c:9a:89:b0:a4:ac:5c:a4:a3:7c:73:75
Signer

Actual PE Digest

70:f9:04:ed:46:60:45:af:0c:9a:89:b0:a4:ac:5c:a4:a3:7c:73:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xianjiantebieban/修改器4.EXE
.exe windows:4 windows x86 arch:x86

cb07d91a2ed00f106be484f3723f3064

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

ord690
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaPut4
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
__vbaObjSet
__vbaOnError
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaVarTstEq
__vbaGet4
__vbaI2I4
__vbaFpUI1
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaStrUI1
__vbaUI1I4
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaStrVarVal
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord689
__vbaVarAdd
__vbaVarDup
ord613
__vbaFpI2
__vbaFpI4
ord617
_CIatan
__vbaStrMove
ord619
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xianjiantebieban/修改器5.exe
.exe windows:4 windows x86 arch:x86

f52ad798b301abf02407d22d2c449dbe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord593
ord595
ord596
ord631
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord535
ord536
ord572
ord578
ord100
ord689
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 308KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xianjiantebieban/修改器6.EXE
.exe windows:4 windows x86 arch:x86

dc0a286237e10c8e78ae0fa229ae3497

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

__vbaVarTstGt
__vbaVarSub
ord690
__vbaStrI2
ord691
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaPut3
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaPut4
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarForInit
__vbaFileCloseAll
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord304
__vbaFpR8
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaGet3
__vbaStrCmp
__vbaVarTstEq
__vbaCastObjVar
_adj_fpatan
__vbaLateIdCallLd
__vbaStrR8
EVENT_SINK_Release
_CIsqrt
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
ord607
ord608
ord530
__vbaFPException
__vbaStrVarVal
ord534
__vbaI2Var
__vbaFileSeek
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
ord689
__vbaVarAdd
__vbaVarDup
ord613
__vbaVarCopy
ord617
_CIatan
__vbaI2ErrVar
__vbaStrMove
ord619
_allmul
__vbaLateIdSt
_CItan
__vbaVarForNext
_CIexp
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xianjiantebieban/修改器7(推荐).exe
.exe windows:4 windows x86 arch:x86

e5cc61230ea3d1b6d44e99258668e975

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
WriteFile
CreateFileA
SetFilePointer
CloseHandle
ReadFile
GetProcAddress
LoadLibraryA
IsDBCSLeadByte
FreeLibrary
lstrcmpA
GetVersionExA
lstrcpynW
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetCurrentThreadId
OutputDebugStringA
lstrlenW
GetLastError
DebugBreak
FindResourceA
LoadResource
LockResource
lstrcmpiA
GetCurrentProcess
FlushInstructionCache
lstrcatA
GetModuleHandleA
GetStartupInfoA
WideCharToMultiByte
lstrcpynA
lstrcpyA
MultiByteToWideChar
lstrlenA
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement

gdi32

SetBkColor
CreateBitmap
ExtTextOutA
CreateDIBSection
BitBlt
SetBrushOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32A
MoveToEx
LineTo
SetBkMode
Rectangle
CreatePatternBrush
DeleteDC
PatBlt
CreatePen
GetStockObject
DeleteObject
SetTextColor
CreateFontIndirectA
GetObjectA
GetTextMetricsA
SelectObject

user32

InsertMenuA
DeleteMenu
GetMenuStringA
DialogBoxParamA
GetActiveWindow
EnableMenuItem
LoadImageA
LoadBitmapA
CharNextA
wvsprintfA
SendDlgItemMessageA
GetMessageA
PeekMessageA
MoveWindow
WindowFromPoint
GetMessagePos
GetKeyState
GetWindowThreadProcessId
IsWindowEnabled
DispatchMessageA
UnhookWindowsHookEx
LoadAcceleratorsA
TranslateMessage
PostQuitMessage
IsMenu
GetMenuItemCount
UpdateWindow
CharLowerA
FrameRect
CallNextHookEx
IsChild
InflateRect
DrawEdge
ModifyMenuA
TrackPopupMenuEx
GetClassNameA
CreateDialogParamA
EndPaint
BeginPaint
CopyRect
SetDlgItemInt
MessageBeep
GetSysColor
GetDlgItemInt
TranslateAcceleratorA
GetSubMenu
LoadMenuA
IsWindowVisible
GetMenu
RegisterWindowMessageA
DrawFocusRect
SetFocus
SetWindowLongA
SetMenuDefaultItem
GetMenuItemInfoA
SetMenuItemInfoA
LoadStringA
MessageBoxA
EnableWindow
GetDC
ReleaseDC
CreateWindowExA
FillRect
DestroyMenu
SetRectEmpty
GetSysColorBrush
GetWindowDC
LoadStringW
SetWindowsHookExA
GetFocus
SetWindowTextA
GetDlgItem
SendMessageA
EndDialog
GetParent
GetWindowLongA
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgCtrlID
GetCursorPos
ScreenToClient
SetCursor
GetClassInfoExA
LoadCursorA
wsprintfA
RegisterClassExA
CallWindowProcA
InvalidateRect
GetWindowTextLengthA
GetWindowTextA
DrawFrameControl
ShowWindow
IsWindow
DestroyWindow
PostMessageA
GetSystemMetrics
DrawTextA
SetDlgItemTextA
DefWindowProcA
PtInRect
OffsetRect
TrackPopupMenu
SetMenu

comdlg32

GetOpenFileNameA
GetSaveFileNameA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA

shlwapi

PathFindFileNameA
PathCombineA
PathFileExistsA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA

ole32

CoUninitialize
CoInitialize

oleaut32

SysStringLen
VariantChangeType
SysAllocStringLen
VariantCopy
VariantClear
SysFreeString
SysAllocString

comctl32

ImageList_LoadImageA
ord6
ImageList_AddMasked
ord8
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
InitCommonControlsEx
ImageList_Draw

msimg32

TransparentBlt

msvcrt

_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
atoi
_ismbcdigit
wcslen
sprintf
_mbsicmp
wcscmp
_purecall
realloc
memmove
free
??3@YAXPAX@Z
__CxxFrameHandler
_controlfp
??2@YAPAXI@Z
__set_app_type

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xianjiantebieban/修改器7(改存档-推荐).exe
.exe windows:4 windows x86 arch:x86

e5cc61230ea3d1b6d44e99258668e975

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
WriteFile
CreateFileA
SetFilePointer
CloseHandle
ReadFile
GetProcAddress
LoadLibraryA
IsDBCSLeadByte
FreeLibrary
lstrcmpA
GetVersionExA
lstrcpynW
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetCurrentThreadId
OutputDebugStringA
lstrlenW
GetLastError
DebugBreak
FindResourceA
LoadResource
LockResource
lstrcmpiA
GetCurrentProcess
FlushInstructionCache
lstrcatA
GetModuleHandleA
GetStartupInfoA
WideCharToMultiByte
lstrcpynA
lstrcpyA
MultiByteToWideChar
lstrlenA
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement

gdi32

SetBkColor
CreateBitmap
ExtTextOutA
CreateDIBSection
BitBlt
SetBrushOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32A
MoveToEx
LineTo
SetBkMode
Rectangle
CreatePatternBrush
DeleteDC
PatBlt
CreatePen
GetStockObject
DeleteObject
SetTextColor
CreateFontIndirectA
GetObjectA
GetTextMetricsA
SelectObject

user32

InsertMenuA
DeleteMenu
GetMenuStringA
DialogBoxParamA
GetActiveWindow
EnableMenuItem
LoadImageA
LoadBitmapA
CharNextA
wvsprintfA
SendDlgItemMessageA
GetMessageA
PeekMessageA
MoveWindow
WindowFromPoint
GetMessagePos
GetKeyState
GetWindowThreadProcessId
IsWindowEnabled
DispatchMessageA
UnhookWindowsHookEx
LoadAcceleratorsA
TranslateMessage
PostQuitMessage
IsMenu
GetMenuItemCount
UpdateWindow
CharLowerA
FrameRect
CallNextHookEx
IsChild
InflateRect
DrawEdge
ModifyMenuA
TrackPopupMenuEx
GetClassNameA
CreateDialogParamA
EndPaint
BeginPaint
CopyRect
SetDlgItemInt
MessageBeep
GetSysColor
GetDlgItemInt
TranslateAcceleratorA
GetSubMenu
LoadMenuA
IsWindowVisible
GetMenu
RegisterWindowMessageA
DrawFocusRect
SetFocus
SetWindowLongA
SetMenuDefaultItem
GetMenuItemInfoA
SetMenuItemInfoA
LoadStringA
MessageBoxA
EnableWindow
GetDC
ReleaseDC
CreateWindowExA
FillRect
DestroyMenu
SetRectEmpty
GetSysColorBrush
GetWindowDC
LoadStringW
SetWindowsHookExA
GetFocus
SetWindowTextA
GetDlgItem
SendMessageA
EndDialog
GetParent
GetWindowLongA
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgCtrlID
GetCursorPos
ScreenToClient
SetCursor
GetClassInfoExA
LoadCursorA
wsprintfA
RegisterClassExA
CallWindowProcA
InvalidateRect
GetWindowTextLengthA
GetWindowTextA
DrawFrameControl
ShowWindow
IsWindow
DestroyWindow
PostMessageA
GetSystemMetrics
DrawTextA
SetDlgItemTextA
DefWindowProcA
PtInRect
OffsetRect
TrackPopupMenu
SetMenu

comdlg32

GetOpenFileNameA
GetSaveFileNameA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA

shlwapi

PathFindFileNameA
PathCombineA
PathFileExistsA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA

ole32

CoUninitialize
CoInitialize

oleaut32

SysStringLen
VariantChangeType
SysAllocStringLen
VariantCopy
VariantClear
SysFreeString
SysAllocString

comctl32

ImageList_LoadImageA
ord6
ImageList_AddMasked
ord8
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
InitCommonControlsEx
ImageList_Draw

msimg32

TransparentBlt

msvcrt

_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
atoi
_ismbcdigit
wcslen
sprintf
_mbsicmp
wcscmp
_purecall
realloc
memmove
free
??3@YAXPAX@Z
__CxxFrameHandler
_controlfp
??2@YAPAXI@Z
__set_app_type

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xianjiantebieban/切换到简体版.exe
.exe windows:5 windows x86 arch:x86

9402b48d966c911f0785b076b349b5ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

Imports

comctl32

ord17

kernel32

DeleteFileA
DeleteFileW
CreateDirectoryA
CreateDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GlobalAlloc
lstrlenA
GetModuleFileNameA
FindResourceA
GetModuleHandleA
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
CompareStringA
ExitProcess
GetLocaleInfoA
GetNumberFormatA
lstrcmpiA
GetProcAddress
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
WaitForSingleObject
SetCurrentDirectoryA
Sleep
GetTempPathA
MoveFileExA
UnmapViewOfFile
GetCommandLineA
MapViewOfFile
CreateFileMappingA
GetModuleFileNameW
SetEnvironmentVariableA
OpenFileMappingA
LocalFileTimeToFileTime
SystemTimeToFileTime
GetSystemTime
IsDBCSLeadByte
GetCPInfo
FreeLibrary
LoadLibraryA
GetCurrentDirectoryA
GetFullPathNameA
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
WriteFile
SetLastError
GetStdHandle
ReadFile
CreateFileW
CreateFileA
GetFileType
SetEndOfFile
SetFilePointer
MoveFileA
SetFileTime
GetCurrentProcess
CloseHandle
GetLastError
DosDateTimeToFileTime

user32

ReleaseDC
GetDC
SendMessageA
wsprintfA
SetDlgItemTextA
EndDialog
DestroyIcon
SendDlgItemMessageA
GetDlgItemTextA
DialogBoxParamA
IsWindowVisible
WaitForInputIdle
GetSysColor
PostMessageA
SetMenu
SetFocus
LoadBitmapA
LoadIconA
CharToOemA
OemToCharA
GetClassNameA
CharUpperA
GetWindowRect
GetParent
MapWindowPoints
CreateWindowExA
UpdateWindow
SetWindowTextA
LoadCursorA
RegisterClassExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetClientRect
CopyRect
IsWindow
MessageBoxA
ShowWindow
GetDlgItem
EnableWindow
FindWindowExA
wvsprintfA
CharToOemBuffA
LoadStringA
SetWindowPos
GetWindowTextA
GetWindow
GetSystemMetrics
OemToCharBuffA
DestroyWindow

gdi32

GetDeviceCaps
GetObjectA
CreateCompatibleBitmap
SelectObject
StretchBlt
CreateCompatibleDC
DeleteObject
DeleteDC

comdlg32

GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameA

advapi32

LookupPrivilegeValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
SetFileSecurityW
SetFileSecurityA
OpenProcessToken
AdjustTokenPrivileges

shell32

ShellExecuteExA
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
SHChangeNotify

ole32

CreateStreamOnHGlobal
OleInitialize
CoCreateInstance
OleUninitialize
CLSIDFromString

oleaut32

VariantInit

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xianjiantebieban/切换到繁体版.exe
.exe windows:5 windows x86 arch:x86

9402b48d966c911f0785b076b349b5ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

Imports

comctl32

ord17

kernel32

DeleteFileA
DeleteFileW
CreateDirectoryA
CreateDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GlobalAlloc
lstrlenA
GetModuleFileNameA
FindResourceA
GetModuleHandleA
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
CompareStringA
ExitProcess
GetLocaleInfoA
GetNumberFormatA
lstrcmpiA
GetProcAddress
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
WaitForSingleObject
SetCurrentDirectoryA
Sleep
GetTempPathA
MoveFileExA
UnmapViewOfFile
GetCommandLineA
MapViewOfFile
CreateFileMappingA
GetModuleFileNameW
SetEnvironmentVariableA
OpenFileMappingA
LocalFileTimeToFileTime
SystemTimeToFileTime
GetSystemTime
IsDBCSLeadByte
GetCPInfo
FreeLibrary
LoadLibraryA
GetCurrentDirectoryA
GetFullPathNameA
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
WriteFile
SetLastError
GetStdHandle
ReadFile
CreateFileW
CreateFileA
GetFileType
SetEndOfFile
SetFilePointer
MoveFileA
SetFileTime
GetCurrentProcess
CloseHandle
GetLastError
DosDateTimeToFileTime

user32

ReleaseDC
GetDC
SendMessageA
wsprintfA
SetDlgItemTextA
EndDialog
DestroyIcon
SendDlgItemMessageA
GetDlgItemTextA
DialogBoxParamA
IsWindowVisible
WaitForInputIdle
GetSysColor
PostMessageA
SetMenu
SetFocus
LoadBitmapA
LoadIconA
CharToOemA
OemToCharA
GetClassNameA
CharUpperA
GetWindowRect
GetParent
MapWindowPoints
CreateWindowExA
UpdateWindow
SetWindowTextA
LoadCursorA
RegisterClassExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetClientRect
CopyRect
IsWindow
MessageBoxA
ShowWindow
GetDlgItem
EnableWindow
FindWindowExA
wvsprintfA
CharToOemBuffA
LoadStringA
SetWindowPos
GetWindowTextA
GetWindow
GetSystemMetrics
OemToCharBuffA
DestroyWindow

gdi32

GetDeviceCaps
GetObjectA
CreateCompatibleBitmap
SelectObject
StretchBlt
CreateCompatibleDC
DeleteObject
DeleteDC

comdlg32

GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameA

advapi32

LookupPrivilegeValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
SetFileSecurityW
SetFileSecurityA
OpenProcessToken
AdjustTokenPrivileges

shell32

ShellExecuteExA
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
SHChangeNotify

ole32

CreateStreamOnHGlobal
OleInitialize
CoCreateInstance
OleUninitialize
CLSIDFromString

oleaut32

VariantInit

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xianjiantebieban/游戏说明.txt
xianjiantebieban/说明.txt
xianjiantebieban/资料/86首RIX歌曲目录.txt
xianjiantebieban/资料/《仙剑奇侠传》攻略提示.txt
xianjiantebieban/资料/仙98的怪物、环境、法术及其它属性值.txt
xianjiantebieban/资料/仙剑98柔情篇的一些不太注意到的有趣地方.txt
xianjiantebieban/资料/仙剑奇侠传全部对白整理版.txt
xianjiantebieban/资料/秘籍.txt
xianjiantebieban/资料/问答.txt
xianjiantebieban/音乐/98柔情版音乐midi/001.mid
xianjiantebieban/音乐/98柔情版音乐midi/002.mid
xianjiantebieban/音乐/98柔情版音乐midi/003.mid
xianjiantebieban/音乐/98柔情版音乐midi/004.mid
xianjiantebieban/音乐/98柔情版音乐midi/005.mid
xianjiantebieban/音乐/98柔情版音乐midi/006.mid
xianjiantebieban/音乐/98柔情版音乐midi/007.mid
xianjiantebieban/音乐/98柔情版音乐midi/008.mid
xianjiantebieban/音乐/98柔情版音乐midi/009.mid
xianjiantebieban/音乐/98柔情版音乐midi/010.mid
xianjiantebieban/音乐/98柔情版音乐midi/011.mid
xianjiantebieban/音乐/98柔情版音乐midi/012.mid
xianjiantebieban/音乐/98柔情版音乐midi/013.mid
xianjiantebieban/音乐/98柔情版音乐midi/014.mid
xianjiantebieban/音乐/98柔情版音乐midi/015.mid
xianjiantebieban/音乐/98柔情版音乐midi/016.mid
xianjiantebieban/音乐/98柔情版音乐midi/017.mid
xianjiantebieban/音乐/98柔情版音乐midi/018.mid
xianjiantebieban/音乐/98柔情版音乐midi/019.mid
xianjiantebieban/音乐/98柔情版音乐midi/020.mid
xianjiantebieban/音乐/98柔情版音乐midi/021.mid
xianjiantebieban/音乐/98柔情版音乐midi/022.mid
xianjiantebieban/音乐/98柔情版音乐midi/023.mid
xianjiantebieban/音乐/98柔情版音乐midi/024.mid
xianjiantebieban/音乐/98柔情版音乐midi/025.mid
xianjiantebieban/音乐/98柔情版音乐midi/026.mid
xianjiantebieban/音乐/98柔情版音乐midi/027.mid
xianjiantebieban/音乐/98柔情版音乐midi/028.mid
xianjiantebieban/音乐/98柔情版音乐midi/030.mid
xianjiantebieban/音乐/98柔情版音乐midi/031.mid
xianjiantebieban/音乐/98柔情版音乐midi/032.mid
xianjiantebieban/音乐/98柔情版音乐midi/033.mid
xianjiantebieban/音乐/98柔情版音乐midi/034.mid
xianjiantebieban/音乐/98柔情版音乐midi/035.mid
xianjiantebieban/音乐/98柔情版音乐midi/036.mid
xianjiantebieban/音乐/98柔情版音乐midi/037.mid
xianjiantebieban/音乐/98柔情版音乐midi/038.mid
xianjiantebieban/音乐/98柔情版音乐midi/039.mid
xianjiantebieban/音乐/98柔情版音乐midi/040.mid
xianjiantebieban/音乐/98柔情版音乐midi/041.mid
xianjiantebieban/音乐/98柔情版音乐midi/042.mid
xianjiantebieban/音乐/98柔情版音乐midi/043.mid
xianjiantebieban/音乐/98柔情版音乐midi/044.mid
xianjiantebieban/音乐/98柔情版音乐midi/045.mid
xianjiantebieban/音乐/98柔情版音乐midi/046.mid
xianjiantebieban/音乐/98柔情版音乐midi/047.mid
xianjiantebieban/音乐/98柔情版音乐midi/048.mid
xianjiantebieban/音乐/98柔情版音乐midi/049.mid
xianjiantebieban/音乐/98柔情版音乐midi/050.mid
xianjiantebieban/音乐/98柔情版音乐midi/051.mid
xianjiantebieban/音乐/98柔情版音乐midi/052.mid
xianjiantebieban/音乐/98柔情版音乐midi/053.mid
xianjiantebieban/音乐/98柔情版音乐midi/054.mid
xianjiantebieban/音乐/98柔情版音乐midi/055.mid
xianjiantebieban/音乐/98柔情版音乐midi/056.mid
xianjiantebieban/音乐/98柔情版音乐midi/057.mid
xianjiantebieban/音乐/98柔情版音乐midi/058.mid
xianjiantebieban/音乐/98柔情版音乐midi/059.mid
xianjiantebieban/音乐/98柔情版音乐midi/060.mid
xianjiantebieban/音乐/98柔情版音乐midi/061.mid
xianjiantebieban/音乐/98柔情版音乐midi/062.mid
xianjiantebieban/音乐/98柔情版音乐midi/063.mid
xianjiantebieban/音乐/98柔情版音乐midi/064.mid
xianjiantebieban/音乐/98柔情版音乐midi/065.mid
xianjiantebieban/音乐/98柔情版音乐midi/066.mid
xianjiantebieban/音乐/98柔情版音乐midi/067.mid
xianjiantebieban/音乐/98柔情版音乐midi/068.mid
xianjiantebieban/音乐/98柔情版音乐midi/069.mid
xianjiantebieban/音乐/98柔情版音乐midi/070.mid
xianjiantebieban/音乐/98柔情版音乐midi/071.mid
xianjiantebieban/音乐/98柔情版音乐midi/072.mid
xianjiantebieban/音乐/98柔情版音乐midi/073.mid
xianjiantebieban/音乐/98柔情版音乐midi/074.mid
xianjiantebieban/音乐/98柔情版音乐midi/075.mid
xianjiantebieban/音乐/98柔情版音乐midi/076.mid
xianjiantebieban/音乐/98柔情版音乐midi/077.mid
xianjiantebieban/音乐/98柔情版音乐midi/078.mid
xianjiantebieban/音乐/98柔情版音乐midi/079.mid
xianjiantebieban/音乐/98柔情版音乐midi/080.mid
xianjiantebieban/音乐/98柔情版音乐midi/081.mid
xianjiantebieban/音乐/98柔情版音乐midi/082.mid
xianjiantebieban/音乐/98柔情版音乐midi/083.mid
xianjiantebieban/音乐/98柔情版音乐midi/084.mid
xianjiantebieban/音乐/98柔情版音乐midi/085.mid
xianjiantebieban/音乐/98柔情版音乐midi/086.mid
xianjiantebieban/音乐/98柔情版音乐midi/087.mid
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_01.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_02.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_03.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_04.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_05.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_06.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_07.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_08.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_09.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_10.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_11.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_12.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_13.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_14.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_15.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_16.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_17.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_18.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_19.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_20.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_21.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_22.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_23.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_24.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_25.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_26.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_27.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_28.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_29.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_30.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_31.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_32.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_33.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_34.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_35.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_36.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_37.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_38.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_39.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_40.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_41.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_42.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_43.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_44.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_45.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_46.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_47.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_48.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_49.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_50.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_51.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_52.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_53.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_54.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_55.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_56.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_57.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_58.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_59.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_60.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_61.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_62.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_63.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_64.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_65.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_66.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_67.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_68.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_69.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_70.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_71.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_72.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_73.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_74.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_75.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_76.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_77.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_78.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_79.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_80.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_81.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_82.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_83.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_84.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_85.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/MUSIC_86.RIX
xianjiantebieban/音乐/dos版音乐欣赏/86RIX/RIX.EXE
xianjiantebieban/音乐/dos版音乐欣赏/86首RIX歌曲目录.txt
xianjiantebieban/音乐/dos版音乐欣赏/RIX.conf
xianjiantebieban/音乐/dos版音乐欣赏/SDL.dll
.dll windows:4 windows x86 arch:x86

a13d8194acf4d6625eabe28ddb05911c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

gdi32

BitBlt
ChoosePixelFormat
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreatePalette
DeleteDC
DeleteObject
DescribePixelFormat
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetSystemPaletteEntries
RealizePalette
SelectObject
SelectPalette
SetDIBColorTable
SetDeviceGammaRamp
SetPaletteEntries
SetPixelFormat
SwapBuffers

kernel32

AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
CreateThread
FindAtomA
FormatMessageA
FreeLibrary
GetAtomNameA
GetCurrentThread
GetCurrentThreadId
GetDriveTypeA
GetLastError
GetModuleHandleA
GetProcAddress
GetVersionExA
LoadLibraryA
QueryPerformanceCounter
ReleaseMutex
ReleaseSemaphore
SetThreadPriority
Sleep
TerminateThread
WaitForSingleObject

msvcrt

_close
_open
_write
__dllonexit
_assert
_errno
_iob
abort
atoi
exit
fclose
fflush
fopen
fprintf
fputs
fread
free
fseek
ftell
fwrite
getenv
log
malloc
memcpy
memset
pow
qsort
realloc
signal
sprintf
sscanf
strcpy
strerror
strlen
strncmp
strncpy
strstr
strtol

user32

AdjustWindowRect
AdjustWindowRectEx
BeginPaint
CallWindowProcA
ChangeDisplaySettingsA
ClientToScreen
ClipCursor
CreateCursor
CreateIconFromResourceEx
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageA
EndPaint
EnumDisplaySettingsA
GetClientRect
GetCursor
GetCursorPos
GetDC
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetKeyboardState
GetMenu
GetMessageA
GetSystemMetrics
GetWindowLongA
GetWindowRect
InvalidateRect
IsZoomed
KillTimer
LoadImageA
MapVirtualKeyA
MapWindowPoints
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
ReleaseCapture
ReleaseDC
ScreenToClient
SetCapture
SetClassLongA
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
ToAscii
TranslateMessage
WindowFromPoint

winmm

joyGetDevCapsA
joyGetNumDevs
joyGetPosEx
mciGetErrorStringA
mciSendCommandA
timeBeginPeriod
timeEndPeriod
timeGetTime
timeKillEvent
timeSetEvent
waveOutClose
waveOutGetErrorTextA
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite

Exports

Exports

SDL_AddTimer
SDL_AllocRW
SDL_AudioDriverName
SDL_AudioInit
SDL_AudioQuit
SDL_BuildAudioCVT
SDL_CDClose
SDL_CDEject
SDL_CDName
SDL_CDNumDrives
SDL_CDOpen
SDL_CDPause
SDL_CDPlay
SDL_CDPlayTracks
SDL_CDResume
SDL_CDStatus
SDL_CDStop
SDL_ClearError
SDL_CloseAudio
SDL_CondBroadcast
SDL_CondSignal
SDL_CondWait
SDL_CondWaitTimeout
SDL_ConvertAudio
SDL_ConvertSurface
SDL_CreateCond
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateSemaphore
SDL_CreateThread
SDL_CreateYUVOverlay
SDL_Delay
SDL_DestroyCond
SDL_DestroyMutex
SDL_DestroySemaphore
SDL_DisplayFormat
SDL_DisplayFormatAlpha
SDL_DisplayYUVOverlay
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_EventState
SDL_FillRect
SDL_Flip
SDL_FreeCursor
SDL_FreeRW
SDL_FreeSurface
SDL_FreeWAV
SDL_FreeYUVOverlay
SDL_GL_GetAttribute
SDL_GL_GetProcAddress
SDL_GL_LoadLibrary
SDL_GL_Lock
SDL_GL_SetAttribute
SDL_GL_SwapBuffers
SDL_GL_Unlock
SDL_GL_UpdateRects
SDL_GetAppState
SDL_GetAudioStatus
SDL_GetClipRect
SDL_GetCursor
SDL_GetError
SDL_GetEventFilter
SDL_GetGammaRamp
SDL_GetKeyName
SDL_GetKeyState
SDL_GetModState
SDL_GetMouseState
SDL_GetRGB
SDL_GetRGBA
SDL_GetRelativeMouseState
SDL_GetThreadID
SDL_GetTicks
SDL_GetVideoInfo
SDL_GetVideoSurface
SDL_GetWMInfo
SDL_Has3DNow
SDL_Has3DNowExt
SDL_HasAltiVec
SDL_HasMMX
SDL_HasMMXExt
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_Init
SDL_InitSubSystem
SDL_JoystickClose
SDL_JoystickEventState
SDL_JoystickGetAxis
SDL_JoystickGetBall
SDL_JoystickGetButton
SDL_JoystickGetHat
SDL_JoystickIndex
SDL_JoystickName
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickOpened
SDL_JoystickUpdate
SDL_KillThread
SDL_Linked_Version
SDL_ListModes
SDL_LoadBMP_RW
SDL_LoadFunction
SDL_LoadObject
SDL_LoadWAV_RW
SDL_LockAudio
SDL_LockSurface
SDL_LockYUVOverlay
SDL_LowerBlit
SDL_MapRGB
SDL_MapRGBA
SDL_MixAudio
SDL_NumJoysticks
SDL_OpenAudio
SDL_PauseAudio
SDL_PeepEvents
SDL_PollEvent
SDL_PumpEvents
SDL_PushEvent
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromConstMem
SDL_RWFromFP
SDL_RWFromFile
SDL_RWFromMem
SDL_ReadBE16
SDL_ReadBE32
SDL_ReadBE64
SDL_ReadLE16
SDL_ReadLE32
SDL_ReadLE64
SDL_RegisterApp
SDL_RemoveTimer
SDL_SaveBMP_RW
SDL_SemPost
SDL_SemTryWait
SDL_SemValue
SDL_SemWait
SDL_SemWaitTimeout
SDL_SetAlpha
SDL_SetClipRect
SDL_SetColorKey
SDL_SetColors
SDL_SetCursor
SDL_SetError
SDL_SetEventFilter
SDL_SetGamma
SDL_SetGammaRamp
SDL_SetModState
SDL_SetModuleHandle
SDL_SetPalette
SDL_SetTimer
SDL_SetVideoMode
SDL_ShowCursor
SDL_SoftStretch
SDL_ThreadID
SDL_UnloadObject
SDL_UnlockAudio
SDL_UnlockSurface
SDL_UnlockYUVOverlay
SDL_UpdateRect
SDL_UpdateRects
SDL_UpperBlit
SDL_VideoDriverName
SDL_VideoInit
SDL_VideoModeOK
SDL_VideoQuit
SDL_WM_GetCaption
SDL_WM_GrabInput
SDL_WM_IconifyWindow
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WM_ToggleFullScreen
SDL_WaitEvent
SDL_WaitThread
SDL_WarpMouse
SDL_WasInit
SDL_WriteBE16
SDL_WriteBE32
SDL_WriteBE64
SDL_WriteLE16
SDL_WriteLE32
SDL_WriteLE64
SDL_mutexP
SDL_mutexV

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xianjiantebieban/音乐/dos版音乐欣赏/SDL_net.dll
.dll windows:4 windows x86 arch:x86

3cc57266bd582d54c235a7d5207616cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_assert
_errno
abort
fflush
free
malloc
memcpy
memset

wsock32

WSACancelBlockingCall
WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
inet_addr
ioctlsocket
listen
recv
recvfrom
select
send
sendto
setsockopt
socket

sdl

SDL_SetError

Exports

Exports

SDLNet_AddSocket
SDLNet_AllocPacket
SDLNet_AllocPacketV
SDLNet_AllocSocketSet
SDLNet_CheckSockets
SDLNet_DelSocket
SDLNet_FreePacket
SDLNet_FreePacketV
SDLNet_FreeSocketSet
SDLNet_Init
SDLNet_Linked_Version
SDLNet_Quit
SDLNet_Read16
SDLNet_Read32
SDLNet_ResizePacket
SDLNet_ResolveHost
SDLNet_ResolveIP
SDLNet_TCP_Accept
SDLNet_TCP_Close
SDLNet_TCP_GetPeerAddress
SDLNet_TCP_Open
SDLNet_TCP_Recv
SDLNet_TCP_Send
SDLNet_UDP_Bind
SDLNet_UDP_Close
SDLNet_UDP_GetPeerAddress
SDLNet_UDP_Open
SDLNet_UDP_Recv
SDLNet_UDP_RecvV
SDLNet_UDP_Send
SDLNet_UDP_SendV
SDLNet_UDP_Unbind
SDLNet_Write16
SDLNet_Write32

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 208B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 993B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xianjiantebieban/音乐/dos版音乐欣赏/dosbox.exe
.exe windows:4 windows x86 arch:x86

1d6b2b2e69c0176663fb648226875f7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA

kernel32

AddAtomA
AllocConsole
CloseHandle
CreateEventA
CreateFileA
CreateSemaphoreA
DeviceIoControl
ExitProcess
FindAtomA
FreeConsole
FreeLibrary
GetAtomNameA
GetCommModemStatus
GetCommState
GetCommandLineA
GetCurrentProcess
GetDriveTypeA
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExA
GetVolumeInformationA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
ReadFile
ReleaseSemaphore
ResetEvent
SetCommState
SetCommTimeouts
SetEvent
SetFilePointer
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteFile

msvcrt

_access
_chsize
_fdopen
_fstat
_getcwd
_lseek
_mkdir
_read
_rmdir
_stat
_strdup
_strupr
_unlink
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_ctype
_errno
_filbuf
_findclose
_findfirst
_findnext
_flsbuf
_fullpath
_getcwd
_iob
_isctype
_onexit
_pctype
_setjmp
_setmode
_stricmp
_strnicmp
_vsnprintf
abort
atan2
atexit
atof
atoi
ceil
cos
exit
fclose
fflush
fgetc
fgets
floor
fmod
fopen
fprintf
fread
free
freopen
fseek
ftell
fwrite
getenv
gmtime
localeconv
localtime
log
longjmp
malloc
memchr
memcpy
memmove
memset
pow
printf
putchar
puts
rand
realloc
remove
rename
setbuf
setlocale
setvbuf
signal
sin
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strftime
strlen
strncat
strncmp
strncpy
strrchr
strspn
strstr
strtod
strtok
strtol
strxfrm
tan
time
tolower
toupper
ungetc
vsprintf

opengl32

glBegin
glBindTexture
glCallList
glClear
glClearColor
glDeleteLists
glDeleteTextures
glDisable
glEnable
glEnableClientState
glEnd
glEndList
glGenLists
glGenTextures
glGetIntegerv
glGetString
glIsList
glLoadIdentity
glMatrixMode
glNewList
glShadeModel
glTexCoord2f
glTexImage2D
glTexParameteri
glTexSubImage2D
glVertex2f
glViewport
wglGetProcAddress

user32

GetSystemMetrics
wsprintfA

winmm

midiOutClose
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutShortMsg
midiOutUnprepareHeader

sdl

SDL_CDClose
SDL_CDEject
SDL_CDName
SDL_CDNumDrives
SDL_CDOpen
SDL_CDPause
SDL_CDPlay
SDL_CDResume
SDL_CDStatus
SDL_CDStop
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateYUVOverlay
SDL_Delay
SDL_DestroyMutex
SDL_DisplayYUVOverlay
SDL_FillRect
SDL_Flip
SDL_FreeSurface
SDL_FreeYUVOverlay
SDL_GL_SetAttribute
SDL_GL_SwapBuffers
SDL_GetError
SDL_GetKeyName
SDL_GetModState
SDL_GetTicks
SDL_Init
SDL_InitSubSystem
SDL_JoystickEventState
SDL_JoystickName
SDL_JoystickNumAxes
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_LockAudio
SDL_LockSurface
SDL_LockYUVOverlay
SDL_MapRGB
SDL_NumJoysticks
SDL_OpenAudio
SDL_PauseAudio
SDL_PollEvent
SDL_Quit
SDL_RWFromFile
SDL_ReadBE32
SDL_ReadLE32
SDL_SetError
SDL_SetModuleHandle
SDL_SetPalette
SDL_SetVideoMode
SDL_ShowCursor
SDL_ThreadID
SDL_UnlockAudio
SDL_UnlockSurface
SDL_UnlockYUVOverlay
SDL_VideoModeOK
SDL_WM_GrabInput
SDL_WM_SetCaption
SDL_WaitEvent
SDL_mutexP
SDL_mutexV

sdl_net

SDLNet_AddSocket
SDLNet_AllocSocketSet
SDLNet_CheckSockets
SDLNet_DelSocket
SDLNet_Init
SDLNet_ResolveHost
SDLNet_TCP_Accept
SDLNet_TCP_Close
SDLNet_TCP_Open
SDLNet_TCP_Recv
SDLNet_TCP_Send
SDLNet_UDP_Bind
SDLNet_UDP_Close
SDLNet_UDP_Open
SDLNet_UDP_Recv
SDLNet_UDP_Send

libvorbisfile-3

ov_clear
ov_info
ov_open_callbacks
ov_raw_seek
ov_read
ov_time_seek
ov_time_total

Exports

Exports

FreeDLS
FreeRIFF
LoadDLS
LoadRIFF
PrintRIFF

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 25.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xianjiantebieban/音乐/dos版音乐欣赏/libogg-0.dll
.dll windows:4 windows x86 arch:x86

ce65b59bc73da364d17103c0a4a18302

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_assert
_errno
abort
fflush
free
malloc
memchr
memcpy
memmove
memset
realloc

Exports

Exports

ogg_packet_clear
ogg_page_bos
ogg_page_checksum_set
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_init
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
oggpackB_adv
oggpackB_adv1
oggpackB_bits
oggpackB_bytes
oggpackB_get_buffer
oggpackB_look
oggpackB_look1
oggpackB_read
oggpackB_read1
oggpackB_readinit
oggpackB_reset
oggpackB_write
oggpackB_writealign
oggpackB_writeclear
oggpackB_writecopy
oggpackB_writeinit
oggpackB_writetrunc
oggpack_adv
oggpack_adv1
oggpack_bits
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_look1
oggpack_read
oggpack_read1
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writealign
oggpack_writeclear
oggpack_writecopy
oggpack_writeinit
oggpack_writetrunc

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xianjiantebieban/音乐/dos版音乐欣赏/libvorbis-0.dll
.dll windows:4 windows x86 arch:x86

a79d9c901db4532ae2c103f005a046fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_assert
_errno
abort
acos
atan
calloc
ceil
cos
exit
exp
fclose
fflush
floor
fopen
fprintf
free
frexp
ldexp
log
malloc
memcpy
memmove
memset
perror
pow
qsort
realloc
sin
sprintf
sqrt
strcat
strcpy
strlen
toupper

libogg-0

oggpack_adv
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_read
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writeclear
oggpack_writeinit
oggpack_writetrunc

Exports

Exports

_analysis_output
_analysis_output_always
_best
_book_maptype1_quantvals
_book_unquantize
_float32_pack
_float32_unpack
_floor_P
_ilog
_make_words
_mapping_P
_residue_P
_ve_envelope_clear
_ve_envelope_init
_ve_envelope_mark
_ve_envelope_search
_ve_envelope_shift
_vi_gpsy_free
_vi_psy_free
_vorbis_apply_window
_vorbis_block_alloc
_vorbis_block_ripcord
_vorbis_window_get
_vp_ampmax_decay
_vp_couple
_vp_global_free
_vp_global_look
_vp_noise_normalize
_vp_noise_normalize_sort
_vp_noisemask
_vp_offset_and_mix
_vp_psy_clear
_vp_psy_init
_vp_quantize_couple_memo
_vp_quantize_couple_sort
_vp_remove_floor
_vp_tonemask
analysis_noisy
drft_backward
drft_clear
drft_forward
drft_init
floor0_exportbundle
floor1_encode
floor1_exportbundle
floor1_fit
floor1_interpolate_fit
hf_reduction
mapping0_exportbundle
mdct_backward
mdct_clear
mdct_forward
mdct_init
res0_free_info
res0_free_look
res0_inverse
res0_look
res0_pack
res0_unpack
res1_class
res1_forward
res1_inverse
res2_class
res2_forward
res2_inverse
residue0_exportbundle
residue1_exportbundle
residue2_exportbundle
vorbis_analysis
vorbis_analysis_blockout
vorbis_analysis_buffer
vorbis_analysis_headerout
vorbis_analysis_init
vorbis_analysis_wrote
vorbis_bitrate_addblock
vorbis_bitrate_clear
vorbis_bitrate_flushpacket
vorbis_bitrate_init
vorbis_bitrate_managed
vorbis_block_clear
vorbis_block_init
vorbis_book_clear
vorbis_book_codelen
vorbis_book_codeword
vorbis_book_decode
vorbis_book_decodev_add
vorbis_book_decodev_set
vorbis_book_decodevs_add
vorbis_book_decodevv_add
vorbis_book_encode
vorbis_book_encodev
vorbis_book_errorv
vorbis_book_init_decode
vorbis_book_init_encode
vorbis_comment_add
vorbis_comment_add_tag
vorbis_comment_clear
vorbis_comment_init
vorbis_comment_query
vorbis_comment_query_count
vorbis_commentheader_out
vorbis_coslook
vorbis_dsp_clear
vorbis_fromdBlook
vorbis_granule_time
vorbis_info_blocksize
vorbis_info_clear
vorbis_info_init
vorbis_invsq2explook
vorbis_invsqlook
vorbis_lpc_from_data
vorbis_lpc_predict
vorbis_lpc_to_lsp
vorbis_lsp_to_curve
vorbis_packet_blocksize
vorbis_staticbook_clear
vorbis_staticbook_destroy
vorbis_staticbook_pack
vorbis_staticbook_unpack
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_headerin
vorbis_synthesis_init
vorbis_synthesis_lapout
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart
vorbis_synthesis_trackonly
vorbis_window

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xianjiantebieban/音乐/dos版音乐欣赏/libvorbisfile-3.dll
.dll windows:4 windows x86 arch:x86

3ac80087d983656fd633aa4f60f40c29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_assert
_errno
abort
calloc
fclose
fflush
floor
fread
free
fseek
ftell
malloc
memcpy
memset
realloc

libogg-0

ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_serialno
ogg_stream_clear
ogg_stream_init
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_init
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote

libvorbis-0

_analysis_output_always
vorbis_block_clear
vorbis_block_init
vorbis_comment_clear
vorbis_comment_init
vorbis_dsp_clear
vorbis_info_blocksize
vorbis_info_clear
vorbis_info_init
vorbis_packet_blocksize
vorbis_synthesis
vorbis_synthesis_blockin
vorbis_synthesis_halfrate
vorbis_synthesis_halfrate_p
vorbis_synthesis_headerin
vorbis_synthesis_init
vorbis_synthesis_lapout
vorbis_synthesis_pcmout
vorbis_synthesis_read
vorbis_synthesis_restart
vorbis_synthesis_trackonly
vorbis_window

Exports

Exports

ov_bitrate
ov_bitrate_instant
ov_clear
ov_comment
ov_crosslap
ov_halfrate
ov_halfrate_p
ov_info
ov_open
ov_open_callbacks
ov_pcm_seek
ov_pcm_seek_lap
ov_pcm_seek_page
ov_pcm_seek_page_lap
ov_pcm_tell
ov_pcm_total
ov_raw_seek
ov_raw_seek_lap
ov_raw_tell
ov_raw_total
ov_read
ov_read_float
ov_seekable
ov_serialnumber
ov_streams
ov_test
ov_test_callbacks
ov_test_open
ov_time_seek
ov_time_seek_lap
ov_time_seek_page
ov_time_seek_page_lap
ov_time_tell
ov_time_total

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 863B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xianjiantebieban/音乐/dos版音乐欣赏/仙剑DOS86首RIX(直接运行就可收听).bat
安装程序.exe
.exe windows:5 windows x86 arch:x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:b1:93:a7:41:09:c3:69:9c:ec:1a:a4:ea:94:38:33
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

07/08/2013, 00:00

Not After

07/08/2015, 23:59

Subject

CN=Wuhan Weijun Technology Co. Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=技术部,O=Wuhan Weijun Technology Co. Ltd.,L=Wuhan,ST=Hubei,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ae:4e:36:4e:65:9d:9a:2c:f2:9b:10:16:a7:55:08:28:f5:90:ad:19
Signer

Actual PE Digest

ae:4e:36:4e:65:9d:9a:2c:f2:9b:10:16:a7:55:08:28:f5:90:ad:19

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 632KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

6d:b1:93:a7:41:09:c3:69:9c:ec:1a:a4:ea:94:38:33Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

30:6d:20:74:43:60:3f:cd:67:fb:f3:5f:d5:9f:80:fe:86:09:4b:75Signer

Headers

File Characteristics

Sections

CODE Size: 406KB - Virtual size: 1.0MB

DATA Size: 6KB - Virtual size: 16KB

BSS Size: - Virtual size: 8KB

.idata Size: 4KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 76KB

.rsrc Size: 1.9MB - Virtual size: 2.3MB

.aspack Size: 97KB - Virtual size: 100KB

.adata Size: - Virtual size: 4KB

ca07171499984aeb9298464054874b27

Headers

File Characteristics

Imports

advapi32

gdi32

user32

winmm

kernel32

Exports

Exports

Sections

AUTO Size: 494KB - Virtual size: 494KB

.idata Size: 5KB - Virtual size: 5KB

DGROUP Size: 161KB - Virtual size: 264KB

.edata Size: 5KB - Virtual size:

.reloc Size: 26KB - Virtual size:

.rsrc Size: 3KB - Virtual size:

ca07171499984aeb9298464054874b27

Headers

File Characteristics

Imports

advapi32

gdi32

user32

winmm

kernel32

Exports

Exports

Sections

AUTO Size: 491KB - Virtual size: 491KB

.idata Size: 5KB - Virtual size: 5KB

DGROUP Size: 161KB - Virtual size: 264KB

.edata Size: 5KB - Virtual size:

.reloc Size: 26KB - Virtual size:

.rsrc Size: 3KB - Virtual size:

5aaab6d0ad8ea87b8a9a873624f8b938

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

Sections

.text Size: 34KB - Virtual size: 34KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

6d:b1:93:a7:41:09:c3:69:9c:ec:1a:a4:ea:94:38:33
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

30:6d:20:74:43:60:3f:cd:67:fb:f3:5f:d5:9f:80:fe:86:09:4b:75
Signer

CODE
Size: 406KB - Virtual size: 1.0MB

DATA
Size: 6KB - Virtual size: 16KB

BSS
Size: - Virtual size: 8KB

.idata
Size: 4KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 76KB

.rsrc
Size: 1.9MB - Virtual size: 2.3MB

.aspack
Size: 97KB - Virtual size: 100KB

.adata
Size: - Virtual size: 4KB

AUTO
Size: 494KB - Virtual size: 494KB

.idata
Size: 5KB - Virtual size: 5KB

DGROUP
Size: 161KB - Virtual size: 264KB

.edata
Size: 5KB - Virtual size:

.reloc
Size: 26KB - Virtual size:

.rsrc
Size: 3KB - Virtual size:

AUTO
Size: 491KB - Virtual size: 491KB

.idata
Size: 5KB - Virtual size: 5KB

DGROUP
Size: 161KB - Virtual size: 264KB

.edata
Size: 5KB - Virtual size:

.reloc
Size: 26KB - Virtual size:

.rsrc
Size: 3KB - Virtual size:

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 512B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 23KB - Virtual size: 22KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 360B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 136KB - Virtual size: 152KB

52:24:9b:f2:0d:e4:ea:e0:d2:e8
Certificate

70:f9:04:ed:46:60:45:af:0c:9a:89:b0:a4:ac:5c:a4:a3:7c:73:75
Signer

UPX0
Size: - Virtual size: 88KB

UPX1
Size: 25KB - Virtual size: 28KB

.rsrc
Size: 6KB - Virtual size: 8KB

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 36KB - Virtual size: 32KB

.text
Size: 65KB - Virtual size: 64KB

.data
Size: 512B - Virtual size: 8KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB

.text
Size: 308KB - Virtual size: 304KB

.data
Size: - Virtual size: 14KB

.rsrc
Size: 4KB - Virtual size: 3KB

.text
Size: 450KB - Virtual size: 450KB

.data
Size: 512B - Virtual size: 12KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB