d:\Svn\cggame\src\platform\Release\Hall.pdb
Overview
overview
3Static
static
3Hall.exe
windows7-x64
1Hall.exe
windows10-2004-x64
1TCA2BMP.dll
windows7-x64
1TCA2BMP.dll
windows10-2004-x64
3avatar/com...��.ps1
windows7-x64
3avatar/com...��.ps1
windows10-2004-x64
3fetchtca.dll
windows7-x64
3fetchtca.dll
windows10-2004-x64
3gamever.dll
windows7-x64
1gamever.dll
windows10-2004-x64
3httpsock.dll
windows7-x64
3httpsock.dll
windows10-2004-x64
3popogame.exe
windows7-x64
1popogame.exe
windows10-2004-x64
1setpath.exe
windows7-x64
1setpath.exe
windows10-2004-x64
1zlib1.dll
windows7-x64
3zlib1.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Hall.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Hall.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
TCA2BMP.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
TCA2BMP.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
avatar/commonprop/animate/献花.ps1
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
avatar/commonprop/animate/献花.ps1
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
fetchtca.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
fetchtca.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
gamever.dll
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
gamever.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
httpsock.dll
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
httpsock.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
popogame.exe
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
popogame.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
setpath.exe
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
setpath.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
zlib1.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
zlib1.dll
Resource
win10v2004-20240611-en
General
-
Target
17fb97508fef5ca44d9222c8cf4eb44a_JaffaCakes118
-
Size
3.6MB
-
MD5
17fb97508fef5ca44d9222c8cf4eb44a
-
SHA1
836cc06f99eceab58b38c1574400c2569e38ef88
-
SHA256
8e9b10b3d2f86039a44d8db1e08d6889d479b644d9da8779474ff84328522520
-
SHA512
806181d65ccb1cd8ac25708d51b5584da8a996573c351fe743115c62775eb74e0e16c2155bf6bffd9f35b2fcb3c7efe5e6e370d1c9e7f99c8b5df1a4ecfff9c7
-
SSDEEP
98304:jM6mqO+DElmVezNKxpw83x+MBCpyt4bJP+RMN6Pu0:Nm3TlmVaNeP+FQmP+ONA
Malware Config
Signatures
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/Hall.exe unpack001/TCA2BMP.dll unpack001/fetchtca.dll unpack001/gamever.dll unpack001/httpsock.dll unpack001/popogame.exe unpack001/setpath.exe unpack001/zlib1.dll
Files
-
17fb97508fef5ca44d9222c8cf4eb44a_JaffaCakes118.rar
-
Hall.exe.exe windows:4 windows x86 arch:x86
1f2bf2333ea28e0edb93234af98d16f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msimg32
TransparentBlt
AlphaBlend
zlib1
gzgetc
gzclose
uncompress
gzopen
gzread
gzeof
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
tca2bmp
TCA2BMP
kernel32
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetOEMCP
FileTimeToSystemTime
SystemTimeToFileTime
LocalUnlock
LocalLock
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
GetDiskFreeSpaceA
SetErrorMode
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetStartupInfoA
ExitProcess
HeapReAlloc
SetStdHandle
GlobalFlags
HeapCompact
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
WriteConsoleA
GetTimeFormatA
GetDateFormatA
GetFileAttributesW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
GetDriveTypeA
GetDriveTypeW
DeleteFileW
CreateFileW
GetFileInformationByHandle
PeekNamedPipe
HeapSize
FatalAppExitA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetCurrentDirectoryA
IsBadCodePtr
SetEnvironmentVariableA
GetLocaleInfoW
GetShortPathNameA
GetVolumeInformationA
UnlockFile
LockFile
FlushFileBuffers
DeleteFileA
MoveFileA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
RaiseException
SuspendThread
SetThreadPriority
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
SetLastError
GlobalSize
FreeResource
GetProcessTimes
GetFullPathNameW
FindFirstFileW
FindNextFileW
FindNextFileA
SetConsoleCtrlHandler
CreatePipe
GetStdHandle
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentProcess
DuplicateHandle
FlushViewOfFile
SetFilePointer
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetSystemInfo
LoadLibraryExA
GetConsoleCP
GetConsoleOutputCP
CreateSemaphoreA
ReleaseSemaphore
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
SetEndOfFile
LocalFree
FindFirstFileA
FindClose
OutputDebugStringA
GetSystemDirectoryA
GetCurrentThreadId
FormatMessageA
GetLocalTime
GetFileSize
GetTempPathA
GetTempFileNameA
DeleteCriticalSection
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TerminateThread
IsBadReadPtr
IsBadWritePtr
lstrcpynA
VerLanguageNameA
CreateMutexA
ReleaseMutex
Sleep
CreateToolhelp32Snapshot
Process32First
Process32Next
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
CreateEventA
GlobalAlloc
SetEvent
WaitForSingleObject
ResetEvent
WritePrivateProfileSectionA
GetSystemTime
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetFullPathNameA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetWindowsDirectoryA
lstrcatA
lstrcpyA
CopyFileA
WinExec
GetTickCount
CreateDirectoryA
GetCommandLineA
CreateFileA
CloseHandle
ReadFile
OpenProcess
TerminateProcess
GetCurrentProcessId
WriteFile
GetModuleFileNameA
ResumeThread
GetCurrentDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateProcessA
SetPriorityClass
GetExitCodeProcess
GetCPInfo
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiW
lstrlenW
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetFileType
RemoveDirectoryA
user32
EndDeferWindowPos
GetTopWindow
GetMessageTime
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
IntersectRect
GetWindowPlacement
GetWindow
EndPaint
BeginPaint
GetMenuStringA
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
LoadStringA
CallWindowProcA
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
SetWindowPos
MoveWindow
GetSystemMenu
SetMenu
GetMenu
wsprintfA
TrackPopupMenu
SetMenuDefaultItem
LoadMenuA
ReleaseCapture
SetCapture
EnumChildWindows
GetClassNameA
GetWindowDC
GetWindowTextA
GetWindowLongA
ValidateRect
SetWindowRgn
DrawFocusRect
DrawStateA
FindWindowExA
ShowWindow
BringWindowToTop
EnumWindows
GetWindowThreadProcessId
UpdateWindow
UnpackDDElParam
MessageBeep
SetWindowLongA
CopyIcon
IsWindow
GetMessagePos
ScreenToClient
InflateRect
PtInRect
LoadImageA
GetCursor
SetCursor
BeginDeferWindowPos
LoadCursorA
SetForegroundWindow
FlashWindow
GetFocus
ShowOwnedPopups
InvalidateRgn
ClientToScreen
IsZoomed
IsIconic
DrawIcon
MessageBoxA
KillTimer
SetTimer
InvalidateRect
GetCursorPos
GetClientRect
EnableMenuItem
GetWindowRect
PostMessageA
GetParent
SendMessageA
GetMenuItemInfoA
GetSystemMetrics
SystemParametersInfoA
GetSysColorBrush
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
GetDialogBaseUnits
IsRectEmpty
FindWindowA
WaitMessage
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetKeyState
MapVirtualKeyA
GetKeyNameTextA
WindowFromPoint
GetSysColor
DrawIconEx
DestroyIcon
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDesktopWindow
ReleaseDC
GetDC
RemoveMenu
ModifyMenuA
InsertMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
DrawEdge
FillRect
GetForegroundWindow
GetWindowTextLengthA
IsChild
PostThreadMessageA
RegisterClipboardFormatA
SetParent
UnionRect
GetNextDlgGroupItem
CopyAcceleratorTableA
LoadBitmapA
CopyRect
SetRect
EnableWindow
CharUpperW
CharUpperA
CharLowerW
CharLowerA
GetLastActivePopup
DispatchMessageA
SetRectEmpty
GetMessageA
TranslateMessage
DestroyMenu
SetMenuItemBitmaps
CheckMenuItem
GetMenuCheckMarkDimensions
ScrollWindowEx
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
CharNextA
GetTabbedTextExtentA
IsClipboardFormatAvailable
LockWindowUpdate
LoadIconA
GetDCEx
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
OffsetRect
SetFocus
gdi32
FrameRgn
CreatePatternBrush
CreateBitmapIndirect
FillRgn
Arc
RoundRect
StretchBlt
GetCurrentObject
SetTextColor
SetBkMode
GetDIBits
SetDIBitsToDevice
StretchDIBits
SetTextAlign
CreateRoundRectRgn
CreateRectRgnIndirect
OffsetRgn
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetBkColor
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextJustification
CombineRgn
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreateBitmap
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
GetDCOrgEx
GetMapMode
DPtoLP
GetCharWidthA
CreateFontA
GetBkColor
CreateEllipticRgn
LPtoDP
GetTextColor
GetRgnBox
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
SetRectRgn
GetTextMetricsA
GetStockObject
PtInRegion
CreateRectRgn
GetTextExtentPoint32W
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
SetPixel
GetPixel
CreateFontIndirectA
BitBlt
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
CreateCompatibleDC
GetObjectA
CreateHatchBrush
CreateSolidBrush
SetTextCharacterExtra
CreatePen
CreateCompatibleBitmap
comdlg32
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
PrintDlgA
ChooseColorA
ReplaceTextA
CommDlgExtendedError
FindTextA
PageSetupDlgA
winspool.drv
GetJobA
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
GetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegConnectRegistryA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegFlushKey
RegLoadKeyA
RegSaveKeyA
RegSetValueA
RegOpenKeyA
IsTextUnicode
RegCloseKey
SetFileSecurityA
shell32
DragQueryFileA
Shell_NotifyIconA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
ExtractIconA
ShellExecuteA
DragFinish
SHGetFileInfoA
comctl32
ImageList_GetImageCount
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
InitializeFlatSB
_TrackMouseEvent
ord17
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_GetImageInfo
ImageList_Draw
ImageList_GetIconSize
FlatSB_ShowScrollBar
FlatSB_EnableScrollBar
shlwapi
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CoFreeUnusedLibraries
CoCreateInstance
StringFromGUID2
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
OleUninitialize
CreateStreamOnHGlobal
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
CoTaskMemAlloc
ReleaseStgMedium
OleDuplicateData
CLSIDFromProgID
CLSIDFromString
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CoGetClassObject
CoDisconnectObject
oleaut32
OleLoadPicture
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SysAllocString
SysReAllocStringLen
VarDateFromStr
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
OleCreateFontIndirect
SafeArrayCreateVector
LoadTypeLi
SystemTimeToVariantTime
ws2_32
getservbyname
inet_ntoa
getpeername
getsockname
inet_addr
gethostbyname
htonl
htons
getsockopt
setsockopt
ioctlsocket
recvfrom
sendto
recv
send
WSAGetLastError
accept
listen
bind
shutdown
connect
closesocket
socket
WSACleanup
WSAStartup
WSAAsyncSelect
ntohl
getprotobyname
gethostname
WSASetLastError
ntohs
getservbyport
gethostbyaddr
__WSAFDIsSet
select
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 988KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
TCA2BMP.dll.dll windows:4 windows x86 arch:x86
c173b96d7246e71d1c379746c7ecb1cc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
RtlUnwind
SetFilePointer
ReadFile
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Exports
Exports
TCA2BMP
convert2file
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
avatar/blank.tca
-
avatar/commonprop/animate/亲吻.tca
-
avatar/commonprop/animate/你真棒.tca
-
avatar/commonprop/animate/彩带.tca
-
avatar/commonprop/animate/我爱你.tca
-
avatar/commonprop/animate/扔番茄.tca
-
avatar/commonprop/animate/拉拉队.tca
-
avatar/commonprop/animate/献花.tca.ps1
-
avatar/commonprop/animate/花瓣雨.tca
-
avatar/commonprop/animate/通缉令.tca
-
avatar/commonprop/animate/闪亮之星上.tca
-
avatar/commonprop/animate/闪亮之星下.tca
-
avatar/commonprop/sample/你真棒.wav
-
avatar/commonprop/sample/我爱你.wav
-
avatar/commonprop/sample/拉拉队.wav
-
avatar/commonprop/sample/热吻.wav
-
avatar/commonprop/sample/热情之星.wav
-
avatar/commonprop/sample/献花.wav
-
avatar/commonprop/sample/西红柿.wav
-
avatar/female.tca
-
avatar/male.tca
-
avatar/下载说明.htm.html .js polyglot
-
config/avatarconfig.ini
-
config/commonprop.ini
-
config/config.ini
-
config/game.ini
-
config/master.ini
-
config/server.ini
-
config/下载说明.htm.html .js polyglot
-
fetchtca.dll.dll windows:4 windows x86 arch:x86
3dbc7150e17f6af5b8c3cded75eb755b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapCreate
GetVersion
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetLastError
CloseHandle
SetFilePointer
ReadFile
InitializeCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
GetCommandLineA
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Exports
Exports
init
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
gamever.dll.dll windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Exports
Exports
game_ident
game_version
resource_version
Sections
.text Size: 26KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
httpsock.dll.dll windows:4 windows x86 arch:x86
3ecf1b55d1f96c65dd439b78203e7f04
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
zlib1
gzgetc
gzopen
gzread
gzeof
gzclose
kernel32
TlsGetValue
CloseHandle
WriteFile
Sleep
CreateFileA
ReadFile
ResumeThread
TerminateThread
UnlockFile
LockFile
FormatMessageA
GetLastError
HeapReAlloc
HeapSize
SetStdHandle
LCMapStringA
GetProcAddress
GetOEMCP
LoadLibraryA
GetStringTypeW
GetStringTypeA
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
DeleteFileA
RtlUnwind
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
GetCommandLineA
GetVersion
HeapFree
RaiseException
ExitProcess
TlsAlloc
TlsFree
SetLastError
LCMapStringW
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapDestroy
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
GetCPInfo
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
ws2_32
send
WSACleanup
recv
connect
gethostbyname
htons
WSAStartup
socket
closesocket
Exports
Exports
init
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
popogame.exe.exe windows:4 windows x86 arch:x86
fdbfec85672f73d2a4d49635454936d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
Exports
Exports
?close@cnetwork@@YAHXZ
?connect@cnetwork@@YAHPBDH@Z
?ioencrypt@cnetwork@@YAHPAXJH@Z
?iorecv@cnetwork@@YAHPAFPAXJ@Z
?iosend@cnetwork@@YAHFPBXJ@Z
?process@cnetwork@@YAHXZ
?recv@cnetwork@@YAHPAXJ@Z
?send@cnetwork@@YAHPBXJ@Z
?status@cnetwork@@YAHXZ
?vchat@cnetwork@@YAHHPADJH@Z
?vlisten@cnetwork@@YAHPADJPAH1@Z
?vlog@cnetwork@@YAHHPADZZ
?vlogin@cnetwork@@YAHJJDDDPAD@Z
?vloginx@cnetwork@@YAHJJDDDPAD0H@Z
?vlogmode@cnetwork@@YAHHH@Z
initcnet
registe_interface
Sections
.text Size: 476KB - Virtual size: 942KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 224KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ANN_DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
res/16.bmp
-
res/32.bmp
-
res/Button/BBSButton.bmp
-
res/Button/CloseButton.bmp
-
res/Button/CoinButton.bmp
-
res/Button/DiamondButton.bmp
-
res/Button/HallButton.bmp
-
res/Button/MaxButton.bmp
-
res/Button/MinButton.bmp
-
res/Button/POPOButton.bmp
-
res/Button/POPOShowButton.bmp
-
res/Button/RestoreButton.bmp
-
res/Button/SplitterHide.bmp
-
res/Button/SplitterShow.bmp
-
res/Edit/Broadcast.bmp
-
res/Edit/Emotes.bmp
-
res/Edit/Mid.bmp
-
res/Edit/Send.bmp
-
res/Edit/Setting.bmp
-
res/GameTree/BottomFrame.bmp
-
res/GameTree/BottomLeftCorner.bmp
-
res/GameTree/BottomRightCorner.bmp
-
res/GameTree/LeftFrame.bmp
-
res/GameTree/RightFrame.bmp
-
res/GameTree/TopFrame.bmp
-
res/GameTree/TopLeftCorner.bmp
-
res/GameTree/TopRightCorner.bmp
-
res/HallTree/TT.bmp
-
res/HallTree/gamehall.bmp
-
res/HallTree/group.bmp
-
res/HallTree/house.bmp
-
res/HallTree/nosetup.bmp
-
res/Hand.cur
-
res/List/DownArrow.bmp
-
res/List/Foot.bmp
-
res/List/Head.bmp
-
res/List/Interval.bmp
-
res/List/LeftFoot.bmp
-
res/List/LeftMid.bmp
-
res/List/LeftTop.bmp
-
res/List/RightFoot.bmp
-
res/List/RightMid.bmp
-
res/List/RightTop.bmp
-
res/List/UpArrow.bmp
-
res/MainWin/CoinTxt.bmp
-
res/MainWin/DiamondTxt.bmp
-
res/MainWin/HallTxt.bmp
-
res/MainWin/HeadLeft.bmp
-
res/MainWin/HeadMiddle.bmp
-
res/MainWin/HeadRight.bmp
-
res/MainWin/POPOShowTxt.bmp
-
res/MainWin/POPOTxt.bmp
-
res/MainWin/bbstxt.bmp
-
res/Room/BottomFrame.bmp
-
res/Room/BottomLeftCorner.bmp
-
res/Room/BottomRightCorner.bmp
-
res/Room/Button/Exit.bmp
-
res/Room/Button/Game.bmp
-
res/Room/Button/Item.bmp
-
res/Room/Button/Join.bmp
-
res/Room/Button/Left.bmp
-
res/Room/Button/Mid.bmp
-
res/Room/Button/POPO.bmp
-
res/Room/Button/Right.bmp
-
res/Room/Button/Search.bmp
-
res/Room/Button/Setting.bmp
-
res/Room/Button/TextLeft.bmp
-
res/Room/Button/TextMid.bmp
-
res/Room/Button/TextRight.bmp
-
res/Room/Button/UserInfo.bmp
-
res/Room/FootLeftGreen.bmp
-
res/Room/FootLeftWhite.bmp
-
res/Room/FootMidGreen.bmp
-
res/Room/FootMidWhite.bmp
-
res/Room/FootRightGreen.bmp
-
res/Room/FootRightWhite.bmp
-
res/Room/LeftBottomFrame.bmp
-
res/Room/LeftTopFrame.bmp
-
res/Room/RightFoot.bmp
-
res/Room/RightFrame.bmp
-
res/Room/RightMid.bmp
-
res/Room/RightMidGreen.bmp
-
res/Room/RightMidWhite.bmp
-
res/Room/RightTop.bmp
-
res/Room/TopLeftCorner.bmp
-
res/Room/TopLeftFrame.bmp
-
res/Room/TopLeftGreen.bmp
-
res/Room/TopLeftWhite.bmp
-
res/Room/TopMidGreen.bmp
-
res/Room/TopMidWhite.bmp
-
res/Room/TopRightCorner.bmp
-
res/Room/TopRightFrame.bmp
-
res/Room/TopRightGreen.bmp
-
res/Room/TopRightWhite.bmp
-
res/ScrollBar/HorzFillLeftGreen.bmp
-
res/ScrollBar/HorzFillLeftWhite.bmp
-
res/ScrollBar/HorzFillMidGreen.bmp
-
res/ScrollBar/HorzFillMidWhite.bmp
-
res/ScrollBar/HorzFillRightGreen.bmp
-
res/ScrollBar/HorzFillRightWhite.bmp
-
res/ScrollBar/HorzFrameLeftGreen.bmp
-
res/ScrollBar/HorzFrameLeftWhite.bmp
-
res/ScrollBar/HorzFrameMid.bmp
-
res/ScrollBar/HorzFrameRightGreen.bmp
-
res/ScrollBar/HorzFrameRightWhite.bmp
-
res/ScrollBar/HorzLeftArrowGreen.bmp
-
res/ScrollBar/HorzLeftArrowWhite.bmp
-
res/ScrollBar/HorzRightArrowGreen.bmp
-
res/ScrollBar/HorzRightArrowWhite.bmp
-
res/ScrollBar/VertDownArrowGreen.bmp
-
res/ScrollBar/VertDownArrowWhite.bmp
-
res/ScrollBar/VertFillFootGreen.bmp
-
res/ScrollBar/VertFillFootWhite.bmp
-
res/ScrollBar/VertFillMidGreen.bmp
-
res/ScrollBar/VertFillMidWhite.bmp
-
res/ScrollBar/VertFillTopGreen.bmp
-
res/ScrollBar/VertFillTopWhite.bmp
-
res/ScrollBar/VertFrameFootGreen.bmp
-
res/ScrollBar/VertFrameFootWhite.bmp
-
res/ScrollBar/VertFrameMid.bmp
-
res/ScrollBar/VertFrameTopGreen.bmp
-
res/ScrollBar/VertFrameTopWhite.bmp
-
res/ScrollBar/VertUpArrowGreen.bmp
-
res/ScrollBar/VertUpArrowWhite.bmp
-
res/Tab/BGBottom.bmp
-
res/Tab/BGMid.bmp
-
res/Tab/BGTop.bmp
-
res/Tab/DarkCloseTop.bmp
-
res/Tab/DarkFoot.bmp
-
res/Tab/DarkHead.bmp
-
res/Tab/DarkMid.bmp
-
res/Tab/DarkOpenTop.bmp
-
res/Tab/LightCloseTop.bmp
-
res/Tab/LightFoot.bmp
-
res/Tab/LightHead.bmp
-
res/Tab/LightMid.bmp
-
res/Tab/LightOpenTop.bmp
-
res/WaitWnd/Left.bmp
-
res/WaitWnd/Mid.bmp
-
res/WaitWnd/Right.bmp
-
res/avarta/avatar.bmp
-
res/avarta/female.bmp
-
res/avarta/male.bmp
-
res/hand.bmp
-
res/littlepopo.ico
-
res/lock.bmp
-
res/number/num.bmp
-
res/play.bmp
-
res/popo.ico
-
res/sitdown.bmp
-
res/watch.bmp
-
res/zs.bmp
-
res/下载说明.htm.html .js polyglot
-
setpath.exe.exe windows:4 windows x86 arch:x86
7a2e33ace71f3dfaf5e1d76d8822c04a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
d:\btwork\SetPathFinal\Release\SetPathFinal.pdb
Imports
kernel32
DeleteFileA
GetModuleFileNameA
ExitProcess
HeapFree
RtlUnwind
RaiseException
GetModuleHandleA
GetCommandLineA
GetVersionExA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
GetCPInfo
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
WriteFile
FlushFileBuffers
GetProcAddress
TerminateProcess
GetCurrentProcess
SetFilePointer
CloseHandle
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
InterlockedExchange
SetStdHandle
ReadFile
GetACP
GetOEMCP
GetLocaleInfoW
CreateFileA
SetEndOfFile
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
skinbmp/bottom.bmp
-
skinbmp/bottom_i.bmp
-
skinbmp/button.bmp
-
skinbmp/button_down.bmp
-
skinbmp/button_over.bmp
-
skinbmp/close_button.bmp
-
skinbmp/close_button_i.bmp
-
skinbmp/close_button_over.bmp
-
skinbmp/combo_disable.bmp
-
skinbmp/combo_drop.bmp
-
skinbmp/combo_normal.bmp
-
skinbmp/combo_over.bmp
-
skinbmp/left.bmp
-
skinbmp/left_bottom.bmp
-
skinbmp/left_bottom_i.bmp
-
skinbmp/left_i.bmp
-
skinbmp/left_top.bmp
-
skinbmp/left_top_i.bmp
-
skinbmp/max_button.bmp
-
skinbmp/max_button_i.bmp
-
skinbmp/max_button_over.bmp
-
skinbmp/min_button.bmp
-
skinbmp/min_button_i.bmp
-
skinbmp/min_button_over.bmp
-
skinbmp/progress.bmp
-
skinbmp/progress_bk.bmp
-
skinbmp/restore_button.bmp
-
skinbmp/restore_button_i.bmp
-
skinbmp/restore_button_over.bmp
-
skinbmp/right.bmp
-
skinbmp/right_bottom.bmp
-
skinbmp/right_bottom_i.bmp
-
skinbmp/right_i.bmp
-
skinbmp/right_top_d.bmp
-
skinbmp/right_top_d_i.bmp
-
skinbmp/right_top_f.bmp
-
skinbmp/right_top_f_i.bmp
-
skinbmp/skin.ini
-
skinbmp/skin1/bottom.bmp
-
skinbmp/skin1/bottom_i.bmp
-
skinbmp/skin1/button.bmp
-
skinbmp/skin1/button_down.bmp
-
skinbmp/skin1/button_over.bmp
-
skinbmp/skin1/close_button.bmp
-
skinbmp/skin1/close_button_i.bmp
-
skinbmp/skin1/close_button_over.bmp
-
skinbmp/skin1/combo_disable.bmp
-
skinbmp/skin1/combo_drop.bmp
-
skinbmp/skin1/combo_normal.bmp
-
skinbmp/skin1/combo_over.bmp
-
skinbmp/skin1/left.bmp
-
skinbmp/skin1/left_bottom.bmp
-
skinbmp/skin1/left_bottom_i.bmp
-
skinbmp/skin1/left_i.bmp
-
skinbmp/skin1/left_top.bmp
-
skinbmp/skin1/left_top_i.bmp
-
skinbmp/skin1/max_button.bmp
-
skinbmp/skin1/max_button_i.bmp
-
skinbmp/skin1/max_button_over.bmp
-
skinbmp/skin1/min_button.bmp
-
skinbmp/skin1/min_button_i.bmp
-
skinbmp/skin1/min_button_over.bmp
-
skinbmp/skin1/progress.bmp
-
skinbmp/skin1/progress_bk.bmp
-
skinbmp/skin1/restore_button.bmp
-
skinbmp/skin1/restore_button_i.bmp
-
skinbmp/skin1/restore_button_over.bmp
-
skinbmp/skin1/right.bmp
-
skinbmp/skin1/right_bottom.bmp
-
skinbmp/skin1/right_bottom_i.bmp
-
skinbmp/skin1/right_i.bmp
-
skinbmp/skin1/right_top_d.bmp
-
skinbmp/skin1/right_top_d_i.bmp
-
skinbmp/skin1/right_top_f.bmp
-
skinbmp/skin1/right_top_f_i.bmp
-
skinbmp/skin1/skin.ini
-
skinbmp/skin1/sys_button.bmp
-
skinbmp/skin1/sys_button_i.bmp
-
skinbmp/skin1/sys_button_over.bmp
-
skinbmp/skin1/title_bar.bmp
-
skinbmp/skin1/title_bar_i.bmp
-
skinbmp/sys_button.bmp
-
skinbmp/sys_button_i.bmp
-
skinbmp/sys_button_over.bmp
-
skinbmp/title_bar.bmp
-
skinbmp/title_bar_i.bmp
-
skinbmp/下载说明.htm.html .js polyglot
-
ui.wdf
-
zlib1.dll.dll windows:4 windows x86 arch:x86
438be7e302b7106cf343660cee1de1f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
fopen
_errno
fprintf
sprintf
fwrite
fread
fclose
_fdopen
malloc
free
fflush
fseek
fputc
clearerr
_initterm
_adjust_fdiv
ftell
_vsnprintf
kernel32
DisableThreadLibraryCalls
Exports
Exports
adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
下载说明.htm.html .js polyglot