SimFlash_New[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SimFlash_New.dll
Size

677KB
MD5

4d8a64af7178da9b6568e68708fbfda1
SHA1

c1bc60d9679d0705894b18f18b0fde2324703544
SHA256

d8ecea38e922d83ddf70e1dd9d6a9cf255e65bccbc43ae61d95189f5c870fef3
SHA512

563794de6774d0a97c3aee02b6d13b8f36ab23ecd4cafd6e8ee855f69020a4bceee67f03e34221745ff0cf8bd4096aa757a168ded7a0e814b18fe3522b73e261
SSDEEP

6144:WB8dQR1gxrHU8jfabkmsigf5fUZktF7Gv/TDNpqLj4aKA7aJ0POyo9tOiH1Mmfn:WB8cInjfaRGSqyvPNpCD5Ctn

Score

1^/10

Malware Config

Signatures

Files

SimFlash_New.dll
.dll windows:5 windows x86 arch:x86

6196d950fc45f2a9143cc1bf0136208f

Code Sign

0e:2b:22:41:f5:a0:16:dc:01:06:27:4a:a1:5e:15:de
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

02/04/2019, 00:00

Not After

05/04/2022, 12:00

Subject

CN=Fujian NetDragon Computer Network Information Technology Co.\,Ltd,OU=Research and development department,O=Fujian NetDragon Computer Network Information Technology Co.\,Ltd,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6f:da:89:8b:1f:4a:e0:d3:2b:56:dc:be:89:c6:b2:33:6f:42:9b:39
Signer

Actual PE Digest

6f:da:89:8b:1f:4a:e0:d3:2b:56:dc:be:89:c6:b2:33:6f:42:9b:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\MyCode\Release\春节嘉年华\VS2008_Proj\Bin\Release_DX9\SimFlash.pdb

Imports

winmm

timeGetTime

wininet

HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile

graphic

?GameCameraSet@CMyBitmap@@SAXMMMK@Z
?GetScreenHeight@CMyBitmap@@SAHXZ
?SetLightColor@CMyBitmap@@SAXHKK@Z
?SetPointLightAttenuation@CMyBitmap@@SAXHMMM@Z
?SetLightPosition@CMyBitmap@@SAXHMMM@Z
?ShowStringEx@CMyBitmap@@SA?AUC3_SIZE@@HHKPBD0H_NW4RENDER_TEXT_STYLE@@KUC3_POS@@@Z
?CalcuTextExtent@CMyBitmap@@SA?AUC3_SIZE@@PBD0HPAUIDataIcon@@H@Z
?SetLightType@CMyBitmap@@SAXHW4C3_RENDER_LIGHT_TYPE@@@Z
?EnableLight@CMyBitmap@@SAXH_N@Z
MyBitmapCreate
?ShowBlock@CMyBitmap@@SAXHHHHK@Z
?ShowLine@CMyBitmap@@SAXHHHHK@Z
?GetDefaultFontName@CMyBitmap@@SAPBDXZ
?IsDBCSLeadByte@CMyBitmap@@SA_NPBDH@Z
?GetFontSize@CMyBitmap@@SAKXZ
?GetScreenWidth@CMyBitmap@@SAHXZ

graphicdata

GameDataSetQuery

basecode

?safestrcat@@YA_NPADHPBD@Z
?safecopy@@YA_NPADHPBD@Z
?IniStrGet@@YAHPBD00PADH@Z
?ErrorOut@@YAXPBDZZ
?Split@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@HV?$allocator@H@std@@@2@D@Z
?SafeStrcpy@@YAXPADPBDH@Z
?GetTimeFromIntervalMin@@YA_JK@Z
?TestSoundFormat@@YA_NPBD@Z
?format@CMyString@@QAAXPBDZZ
?LogMsg@@YAXPBDZZ
?DebugMsg@@YAXPBDZZ
??0Int128@@QAE@_J0@Z
??0IntBuffer@@QAE@AB_J000@Z
??0IntBuffer@@QAE@AB_J0000000@Z
??1Int128@@UAE@XZ
??1IntBuffer@@UAE@XZ
?TimeGet@@YAKXZ
?IniDataGet@@YAHPBD00AAHH@Z
??1CMyString@@UAE@XZ
??4CMyString@@QAEAAV0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0CMyString@@QAE@XZ
?SafeSprintf@@YA_NPADHPBDZZ

ndgui

?MessageMap@CNdDialog@NdGui@@EAEXXZ
?PreInitData@CNdDialog@NdGui@@UAEHXZ
?BringWindowToTop@CNdDialog@NdGui@@QAEXXZ
??1CNdEdit@NdGui@@UAE@XZ
??0CNdEdit@NdGui@@QAE@XZ
?OnKeyDown@CNdEdit@NdGui@@MAEXIII@Z
?OnRButtonDown@CNdEdit@NdGui@@MAEXIUtagPOINT@@@Z
?GetWindowType@CNdEdit@NdGui@@UAE?AW4ND_GUI_WNDTYPE@@XZ
?EnableWindow@CNdEdit@NdGui@@UAEHH@Z
?InitData@CNdEdit@NdGui@@MAEHXZ
?SetFontColor@CNdEdit@NdGui@@UAEXK@Z
?SetWindowTextA@CNdEdit@NdGui@@UAEXPBD@Z
?ShowWindowText@CNdEdit@NdGui@@UAEXXZ
?ShowSingleText@CNdEdit@NdGui@@MAEXXZ
?ShowMutiText@CNdEdit@NdGui@@MAEXXZ
?OnChar@CNdEdit@NdGui@@UAEXIII@Z
?GetCurLineLength@CNdEdit@NdGui@@UAEHXZ
?GetLineMaxLength@CNdEdit@NdGui@@UAEHXZ
?GetSel@CNdEdit@NdGui@@QBEXAAH0@Z
?GetDefaultFontName@CNdEdit@NdGui@@MAEPBDXZ
?OwnerDrawText@CNdEdit@NdGui@@EAEXXZ
?IsNewEmotion@CNdEdit@NdGui@@EAE_NPBDHH@Z
?GetWindowTextA@CNdEdit@NdGui@@QAEHPADH@Z
?GetSel@CNdEdit@NdGui@@QBEKXZ
?PreInitData@CNdEdit@NdGui@@MAEHXZ
?WindowProc@CNdEdit@NdGui@@MAEJIIJ@Z
??1CNdImage@NdGui@@UAE@XZ
??0CNdImage@NdGui@@QAE@XZ
?OnLButtonDown@CNdImage@NdGui@@MAEXIUtagPOINT@@@Z
?OnLButtonUp@CNdImage@NdGui@@MAEXIUtagPOINT@@@Z
?GetWindowType@CNdImage@NdGui@@UAE?AW4ND_GUI_WNDTYPE@@XZ
?Show@CNdImage@NdGui@@UAEHXZ
?WindowProc@CNdCtrl@NdGui@@MAEJIIJ@Z
?AdjustFrame@CNdImage@NdGui@@MAEXXZ
??1CNdList@NdGui@@UAE@XZ
??0CNdList@NdGui@@QAE@XZ
?PreInitData@CNdList@NdGui@@MAEHXZ
?OnLButtonDown@CNdList@NdGui@@MAEXIUtagPOINT@@@Z
?OnLButtonUp@CNdList@NdGui@@MAEXIUtagPOINT@@@Z
?OnLButtonDblClk@CNdList@NdGui@@MAEXIUtagPOINT@@@Z
?OnRButtonDown@CNdList@NdGui@@MAEXIUtagPOINT@@@Z
?GetWindowType@CNdList@NdGui@@UAE?AW4ND_GUI_WNDTYPE@@XZ
?Show@CNdList@NdGui@@UAEHXZ
?WindowProc@CNdList@NdGui@@MAEJIIJ@Z
?DoDataExchange@CNdDialog@NdGui@@UAEXPAX@Z
?ShowToolTip@CNdList@NdGui@@UAEXXZ
??1CNdProgress@NdGui@@UAE@XZ
??0CNdProgress@NdGui@@QAE@XZ
?PreInitData@CNdProgress@NdGui@@MAEHXZ
?GetWindowType@CNdProgress@NdGui@@UAE?AW4ND_GUI_WNDTYPE@@XZ
?Show@CNdProgress@NdGui@@UAEHXZ
?InitData@CNdProgress@NdGui@@MAEHXZ
?SetAlpha@CNdProgress@NdGui@@UAEXE@Z
?Show@CNdProgress@NdGui@@UAEXHHE@Z
?SetWindowPos@CNdBaseWindow@NdGui@@QAE?AUtagRECT@@HH@Z
??1CNdStatic@NdGui@@UAE@XZ
??0CNdStatic@NdGui@@QAE@XZ
?GetWindowType@CNdStatic@NdGui@@UAE?AW4ND_GUI_WNDTYPE@@XZ
?SetFocus@CNdEdit@NdGui@@QAEXXZ
?SetSel@CNdEdit@NdGui@@QAEXHHH@Z
?PreSetParam@CNdEdit@NdGui@@QAEX_NKK0@Z
?WindowProc@CNdDialog@NdGui@@MAEJIIJ@Z
?WindowProc@CNdCheck@NdGui@@MAEJIIJ@Z
?OnInitDialog@CNdDialog@NdGui@@UAEHXZ
?Show@CNdCtrl@NdGui@@UAEHXZ
?SetLimitText@CNdEdit@NdGui@@QAEXI@Z
?DDX_Control@CNdDialog@NdGui@@QAEXPAXIAAVCNdCtrl@2@@Z
?OnProcessMyMsg@CNdDialog@NdGui@@UAEXIJ@Z
?OnNotify@CNdDialog@NdGui@@MAEHII@Z
?OnCommand@CNdDialog@NdGui@@MAEHII@Z
?OnMove@CNdDialog@NdGui@@MAEXHH@Z
?OnSize@CNdDialog@NdGui@@MAEXHH@Z
?OnMouseDrag@CNdDialog@NdGui@@MAEXIHH@Z
?FlushDialog@CNdDialog@NdGui@@UAEXH@Z
?TestFlushType@CNdDialog@NdGui@@UAEHH@Z
?OnConfirmEvent@CNdDialog@NdGui@@UAEXIIK@Z
?OnMouseMsg@CNdDialog@NdGui@@UAEHIIJ@Z
?CloseDialog@CNdDialog@NdGui@@UAEHI@Z
?ShowChildDlg@CNdDialog@NdGui@@UAEXXZ
?ShowFlyTip@CNdDialog@NdGui@@UAEXXZ
?ShowCtrl@CNdDialog@NdGui@@UAEXXZ
?ShowFrontOfDialog@CNdDialog@NdGui@@UAEXXZ
?ReInit@CNdDialog@NdGui@@UAEXW4ND_GUI_REINIT_TYPE@2@@Z
?PreTranslateMessage@CNdDialog@NdGui@@MAEHPAUtagMSG@@@Z
?ShowBackGroundAniGroup@CNdBaseWindow@NdGui@@MAEXPBDHHHH_N@Z
?DeleteEffect@CNdBaseWindow@NdGui@@MAEXPAVCGui3DEffect@@PBD@Z
?AddEffect@CNdBaseWindow@NdGui@@MAEXPAVCGui3DEffect@@PBD_N2@Z
?ShowEffect@CNdBaseWindow@NdGui@@MAEXPAVCGui3DEffect@@HHPBD@Z
?OnTimer@CNdBaseWindow@NdGui@@MAEXI@Z
??0CNdDialog@NdGui@@QAE@KPAVCNdBaseWindow@1@@Z
??1CNdDialog@NdGui@@UAE@XZ
?SetAdjustStatus@CNdCheck@NdGui@@UAEX_N@Z
?ShowSubGround@CNdCtrl@NdGui@@UAEXXZ
?ShowChar@CNdList@NdGui@@UAEXXZ
?AdjustFrame@CNdCheck@NdGui@@MAEXXZ
?InitData@CNdDialog@NdGui@@MAEHXZ
?OnClose@CNdDialog@NdGui@@MAEHI@Z
?OnCloseWindow@CNdBaseWindow@NdGui@@UAEHI@Z
?OnShowWindow@CNdBaseWindow@NdGui@@UAEHI@Z
?Show@CNdDialog@NdGui@@UAEHXZ
?MoveWindow@CNdBaseWindow@NdGui@@UAE?AUtagRECT@@HHIIH@Z
?ChgGuiLogic@CNdDialog@NdGui@@UAEXI@Z
?PostMessageA@CNdDialog@NdGui@@UAEHIIJ@Z
?EnableWindow@CNdBaseWindow@NdGui@@UAEHH@Z
?GetWindowType@CNdDialog@NdGui@@UAE?AW4ND_GUI_WNDTYPE@@XZ
?GetWindowType@CNdCheck@NdGui@@UAE?AW4ND_GUI_WNDTYPE@@XZ
?OnLButtonUp@CNdCheck@NdGui@@MAEXIUtagPOINT@@@Z
?OnLButtonDown@CNdCheck@NdGui@@MAEXIUtagPOINT@@@Z
?PreInitData@CNdCheck@NdGui@@UAEHXZ
??0CNdCheck@NdGui@@QAE@XZ
??1CNdCheck@NdGui@@UAE@XZ
?GameCreateGui3DEffect@@YAPAVCGui3DEffect@@XZ
?SetShowRect@CGui3DEffect@@QAEXABUtagRECT@@@Z
?Add@CGui3DEffect@@QAEHPBD_N1@Z
?EverPlay@CGui3DEffect@@QAEXH@Z
?TestEffect@CGui3DEffect@@QAEHPBD@Z
?Clear@CGui3DEffect@@QAEXXZ
?Delete@CGui3DEffect@@QAEXPBD@Z
?ProcessMouseMove@CNdBaseWindow@NdGui@@IAEHXZ
?ProcessTimer@CNdBaseWindow@NdGui@@IAEXXZ
?Show@CGui3DEffect@@QAEXABUC3_POS@@H@Z
?OnMouseMoveOut@CNdBaseWindow@NdGui@@UAEXXZ
?OnMouseMoveIn@CNdBaseWindow@NdGui@@UAEXXZ
?OnMouseWheel@CNdBaseWindow@NdGui@@UAEXHHHH@Z
?OnMouseMove@CNdBaseWindow@NdGui@@UAEXIUtagPOINT@@@Z
?OnRButtonDblClk@CNdBaseWindow@NdGui@@UAEXIUtagPOINT@@@Z
?OnRButtonUp@CNdBaseWindow@NdGui@@UAEXIUtagPOINT@@@Z
?OnRButtonDown@CNdBaseWindow@NdGui@@UAEXIUtagPOINT@@@Z
?OnLButtonDblClk@CNdBaseWindow@NdGui@@UAEXIUtagPOINT@@@Z
?OnLButtonUp@CNdBaseWindow@NdGui@@UAEXIUtagPOINT@@@Z
?OnLButtonDown@CNdBaseWindow@NdGui@@UAEXIUtagPOINT@@@Z
?OnKeyDown@CNdBaseWindow@NdGui@@UAEXIII@Z
?OnKeyUp@CNdBaseWindow@NdGui@@UAEXIII@Z
?SetCursorTitle@CNdBaseWindow@NdGui@@UAEXPBD@Z
?ProcessEffect@CNdBaseWindow@NdGui@@UAEXXZ
?ShowBgEffect@CNdBaseWindow@NdGui@@UAEXHHPBD@Z
?ShowBgEffect@CNdBaseWindow@NdGui@@UAEXXZ
?ShowFgEffect@CNdBaseWindow@NdGui@@UAEXHHPBD@Z
?ShowFgEffect@CNdBaseWindow@NdGui@@UAEXXZ
?TestBgEffect@CNdBaseWindow@NdGui@@UAEHPBD@Z
?TestFgEffect@CNdBaseWindow@NdGui@@UAEHPBD@Z
?DeleteFgEffect@CNdBaseWindow@NdGui@@UAEXPBD@Z
?DeleteBgEffect@CNdBaseWindow@NdGui@@UAEXPBD@Z
?AddBgEffect@CNdBaseWindow@NdGui@@UAEXPBD_N1@Z
?AddFgEffect@CNdBaseWindow@NdGui@@UAEXPBD_N1@Z
?SetShowDefaultBack@CNdDialog@NdGui@@UAEXH@Z
?ShowBackGround@CNdBaseWindow@NdGui@@UAEXXZ
?GetBackGroundAni@CNdBaseWindow@NdGui@@UBEPBDXZ
?SetBackGroundAni@CNdBaseWindow@NdGui@@UAEXPBD@Z
?PreInitData@CNdCtrl@NdGui@@UAEHXZ
?ShowMutiText@CNdCtrl@NdGui@@MAEXXZ
?ShowSingleText@CNdCtrl@NdGui@@MAEXXZ
?SetMoneyText@CNdCtrl@NdGui@@UAEX_J@Z
?SetShowBG@CNdCtrl@NdGui@@UAEXH@Z
?SetCtrlType@CNdCtrl@NdGui@@UAEXW4ENUM_ND_CTRLTYPE@2@@Z
?SetMutiLine@CNdCtrl@NdGui@@UAEXH@Z
?ZoomCtrl@CNdCtrl@NdGui@@UAEXH@Z
?GetWindowTextA@CNdCtrl@NdGui@@UBEPBDXZ
?ShowWindowText@CNdCtrl@NdGui@@UAEXXZ
?GetWindowTextLengthA@CNdCtrl@NdGui@@UBEHXZ
?SetWindowTextA@CNdCtrl@NdGui@@UAEXPBD@Z
?SetShowStringOffset@CNdCtrl@NdGui@@UAEXABUC3_POS@@@Z
?SetLineHeight@CNdCtrl@NdGui@@UAEXG@Z
?SetFontFormat@CNdCtrl@NdGui@@UAEXI@Z
?GetFontColor@CNdCtrl@NdGui@@UBEKXZ
?SetFontColor@CNdCtrl@NdGui@@UAEXK@Z
?GetFontSize@CNdCtrl@NdGui@@UBEABUC3_SIZE@@XZ
?SetFontSize@CNdCtrl@NdGui@@UAEXGG@Z
?GetOwnerID@CNdCtrl@NdGui@@UBEJXZ
?SetOwnerID@CNdCtrl@NdGui@@UAEXJ@Z
?GetExtIndex@CNdCtrl@NdGui@@UBEJXZ
?SetExtIndex@CNdCtrl@NdGui@@UAEXJ@Z
?GetExtData@CNdCtrl@NdGui@@UBEJXZ
?SetExtData@CNdCtrl@NdGui@@UAEXJ@Z
?GetExtID@CNdCtrl@NdGui@@UBEJXZ
?SetExtID@CNdCtrl@NdGui@@UAEXJ@Z
?GetCheckValue@CNdCtrl@NdGui@@UBEHXZ
?SetChecked@CNdCtrl@NdGui@@UAEXH@Z
?AdjustFrame@CNdCtrl@NdGui@@UAEXXZ
?GetCurFrame@CNdCtrl@NdGui@@UBEGXZ
?SetCurFrame@CNdCtrl@NdGui@@UAEXG@Z
?ShowTip@CNdCtrl@NdGui@@UAEXXZ
?SetTipShow@CNdCtrl@NdGui@@UAEXPBDK0@Z
?PreTranslateMessage@CNdBaseWindow@NdGui@@MAEHPAUtagMSG@@@Z
?WindowProc@CNdButton@NdGui@@MAEJIIJ@Z
?InitData@CNdCtrl@NdGui@@MAEHXZ
?OnClose@CNdBaseWindow@NdGui@@UAEHI@Z
?ChgGuiLogic@CNdBaseWindow@NdGui@@UAEXI@Z
?PostMessageA@CNdCtrl@NdGui@@UAEHIIJ@Z
?EnableWindow@CNdCtrl@NdGui@@UAEHH@Z
?GetWindowType@CNdButton@NdGui@@UAE?AW4ND_GUI_WNDTYPE@@XZ
?OnMouseMoveOut@CNdButton@NdGui@@MAEXXZ
?OnMouseMove@CNdButton@NdGui@@MAEXIUtagPOINT@@@Z
?OnLButtonUp@CNdCtrl@NdGui@@MAEXIUtagPOINT@@@Z
?OnLButtonDown@CNdCtrl@NdGui@@MAEXIUtagPOINT@@@Z
?SetShowDefaultBack@CNdBaseWindow@NdGui@@UAEXH@Z
??0CNdButton@NdGui@@QAE@XZ
??1CNdButton@NdGui@@UAE@XZ
?CreateNewGuiMgr@NdGui@@YAPAUINdGuiMgr@1@XZ
?GetGuiHelper@NdGui@@YAPAVINdGuiHelper@1@XZ
?PreSetParam@CNdProgress@NdGui@@QAEXHHEHPAUtagPOINT@@H0@Z
?SetBackGroundOffset@CNdBaseWindow@NdGui@@QAEXHH@Z
?PreSetParam@CNdSlider@NdGui@@QAEXHH@Z
?SetOwner@CNdSlider@NdGui@@QAEXPAVCNdBaseWindow@2@@Z
?IsWindowVisible@CNdDialog@NdGui@@QBEHXZ
?GetSliderValue@CNdSlider@NdGui@@QAEHXZ
?GetSliderMaxValue@CNdSlider@NdGui@@QAEHXZ
?GetPos@CNdBaseWindow@NdGui@@QBE?AUtagPOINT@@XZ
??0CNdSlider@NdGui@@QAE@XZ
??1CNdSlider@NdGui@@UAE@XZ
?MoveWindow@CNdBaseWindow@NdGui@@QAE?AUtagRECT@@U3@H@Z
?GetCloseRect@CNdList@NdGui@@QAEXAAUtagRECT@@@Z
?GetItemHeight@CNdList@NdGui@@QAEHI@Z
?GetCursorPt@CNdBaseWindow@NdGui@@QAEHPAUtagPOINT@@@Z
?GetItemRect@CNdList@NdGui@@QAEHIPAUtagRECT@@@Z
?GetGuiMgr@CNdBaseWindow@NdGui@@QAEPAVCNdGuiMgr@2@XZ
?GetWindowRect@CNdBaseWindow@NdGui@@QAEXPAUtagRECT@@@Z
?ScreenToClient@CNdBaseWindow@NdGui@@QAEXPAUtagRECT@@@Z
?GetWindowRect@CNdBaseWindow@NdGui@@QAEXAAUtagRECT@@@Z
?GetCurSel@CNdList@NdGui@@QBEHXZ
?GetText@CNdList@NdGui@@QBEIIPAD@Z
?IsWindowVisible@CNdBaseWindow@NdGui@@QBEHXZ
?IsFocus@CNdEdit@NdGui@@QAEHXZ
?ResetContent@CNdList@NdGui@@QAEXXZ
?AddString@CNdList@NdGui@@QAEHPBD@Z
?EnableChinese@CNdEdit@NdGui@@QAEX_N@Z
?PreSetParam@CNdList@NdGui@@QAEXW4ND_LISTTYPE@2@PAVCNdScrollButton@2@1EEPAVCNdSlider@2@@Z
?SetParentCob@CNdList@NdGui@@QAEXPAVCNdBaseWindow@2@@Z
?SetFontColor@CNdList@NdGui@@QAEXKK@Z
?SetMoveClose@CNdList@NdGui@@QAEXHH@Z
?SetCloseTitle@CNdList@NdGui@@QAEXPAD@Z
?SetFontOffSet@CNdList@NdGui@@QAEXHH@Z
?SetItemHeight@CNdList@NdGui@@QAEXI@Z
?PreSetParam@CNdDialog@NdGui@@UAEXXZ
?IsWindowEnabled@CNdBaseWindow@NdGui@@QAEHXZ
?ShowWindow@CNdBaseWindow@NdGui@@QAEXI@Z
?PushMsgMap@CNdDialog@NdGui@@IAEXIIP812@AEXXZ@Z
?OnTextChanged@CNdEdit@NdGui@@MAEXXZ

3drole

?GetFrameIndex@CRole@@QAEHXZ
??0CRole@@QAE@XZ
?IsLoad@CVideoPlayer@@QAE_NXZ
?GetInstance@CVideoPlayer@@SAAAV1@XZ
?SetHeroSelf@CRole@@QAEXH@Z
?Create@CRole@@QAEHIH@Z
?DestoryVideo@CVideoPlayer@@QAEXXZ
?ResetActionData@CRole@@QAEX_N@Z
?Play@CVideoPlayer@@QAEXH@Z
?LoadVideo@CVideoPlayer@@QAE_NPBD@Z
?Show@CVideoPlayer@@QAEXUC3_POS@@UC3_SIZE@@@Z
?ProcessVideo@CVideoPlayer@@QAEHXZ
??1CRole@@UAE@XZ

gamebase

CameraQuery
?SetGameraFov@CCamera@@QAEXH@Z
?SetCameraObj@CCamera@@QAEXI@Z
?SetOblique@CMyGame3DEffectEx@@QAEX_N@Z
?TestEffect@CMyGame3DEffectEx@@QAE_NPBD@Z
?SetCameraObjFrame@CCamera@@QAEXH_N@Z
??1CMyGame3DEffectEx@@UAE@XZ
?Add@CMyGame3DEffectEx@@UAEHPBDHHK_N11MM@Z
?Show@CMyGame3DEffectEx@@UAEXUC3_POS@@PBD@Z
?Show@CMyGame3DEffectEx@@UAEXXZ
?Clear@CMyGame3DEffectEx@@UAEXXZ
?Scale@CMyGame3DEffectEx@@QAEXMMMH_N@Z
??0CMyGame3DEffectEx@@QAE@XZ

gamedata

?RoleDataQuery@@YAAAVC3DRoleData@@XZ
RoleDataQueryEx

mylogic

?GetFrameAmount@CMyAni@@QBEHXZ
?QueryMyAniMgr@@YAPAUIMyAniMgr@@XZ
?Show@CMyAni@@QBEHIHHHK@Z
??1CMyAni@@UAE@XZ
?IsValid@CMyAni@@QAEHXZ

c3sound

?DXPlaySound@@YAPBVCSound@@PBDHHHH0_N@Z
?DXCloseAllSound@@YAXPBD@Z
?DXGetSoundVolume@@YAHXZ
?ProcressSound@@YAXXZ
?DXSetMusicVolume@@YAXHPBD@Z
?DXPlayMedia@@YAPBVCSound@@PBDH0_N@Z
?DXSetSoundVolume@@YAXHPBD@Z

guibase

?ShowStrRes@CGameGraphic@@SA?AUC3_SIZE@@HHPBDI0HKW4RENDER_TEXT_STYLE@@HPAUHWND__@@PAUHIT_LINK_INFO@@K@Z

mfc90

ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord6721
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord589
ord793
ord4029
ord820
ord310
ord5924
ord601
ord798
ord800
ord5533
ord1046
ord4165
ord6018
ord2206
ord2251
ord4733
ord6781
ord4159
ord6783
ord4409
ord4434
ord4197
ord265
ord266
ord2769
ord605
ord1278
ord321
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord1087
ord1094
ord1093
ord392

msvcr90

atof
fseek
ftell
_atoi64
strtod
isspace
strtol
fread
_beginthreadex
_vsnprintf
iswspace
_mbsnbcat
strrchr
_ismbcspace
_ismbcdigit
vsprintf
_mbclen
_mbsupr
_mbslwr
_mbsinc
_mbscoll
_mbsnbcmp
_mbsicmp
_mbscmp
_mbsrev
_mbsstr
_mbsspn
_mbsrchr
_mbspbrk
_mbscspn
_mbschr
_strdup
memmove
calloc
_errno
memcpy
strstr
strncpy
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
strchr
_itoa
_time64
_mktime64
_localtime64
strtoul
memmove_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
malloc
free
fopen
fwrite
fclose
sscanf
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
sprintf
atoi
memset
__CxxFrameHandler3
_decode_pointer
?terminate@@YAXXZ
rand
srand
_filelength
_fileno
_mkdir
_findclose
_findnext64i32
_findfirst64i32
_unlock
_stricmp
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__dllonexit
_encode_pointer
fgets
_onexit
__clean_type_info_names_internal
_lock

kernel32

QueryPerformanceCounter
SetUnhandledExceptionFilter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedDecrement
LocalAlloc
LocalFree
CreateThread
WaitForSingleObject
GetFileAttributesA
RemoveDirectoryA
DeleteFileA
GetLastError
IsBadReadPtr
IsBadCodePtr
GetModuleHandleA
GetProcAddress
lstrcpynA
GetWindowsDirectoryA
GetModuleFileNameA
InterlockedIncrement
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
GetCurrentThreadId
SetThreadPriority
ResumeThread
GetPrivateProfileStringA
IsBadStringPtrA
InterlockedExchange
lstrlenA
GlobalLock
GlobalAlloc
GetTickCount
GetPrivateProfileIntA
WriteFile
CloseHandle
CreateProcessA
CreateFileA

user32

IsWindow
GetKeyboardState
GetAsyncKeyState
GetCursorPos
PtInRect
GetWindowPlacement

shell32

SHFileOperationA
ShellExecuteA

oleaut32

SysFreeString

msvcp90

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

Exports

Exports

FlashSimulatorDestroy
FlashSimulatorQuery

Sections

.text
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6196d950fc45f2a9143cc1bf0136208f

Code Sign

0e:2b:22:41:f5:a0:16:dc:01:06:27:4a:a1:5e:15:deCertificate

Extended Key Usages

Key Usages

6f:da:89:8b:1f:4a:e0:d3:2b:56:dc:be:89:c6:b2:33:6f:42:9b:39Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

wininet

graphic

graphicdata

basecode

ndgui

3drole

gamebase

gamedata

mylogic

c3sound

guibase

mfc90

msvcr90

kernel32

user32

shell32

oleaut32

msvcp90

Exports

Exports

Sections

.text Size: 524KB - Virtual size: 524KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 2KB - Virtual size: 132KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 49KB - Virtual size: 48KB

0e:2b:22:41:f5:a0:16:dc:01:06:27:4a:a1:5e:15:de
Certificate

6f:da:89:8b:1f:4a:e0:d3:2b:56:dc:be:89:c6:b2:33:6f:42:9b:39
Signer

.text
Size: 524KB - Virtual size: 524KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 2KB - Virtual size: 132KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 49KB - Virtual size: 48KB