4d24b3db4f6341b636e288e97d647e01_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4d24b3db4f6341b636e288e97d647e01_JaffaCakes118
Size

1.1MB
MD5

4d24b3db4f6341b636e288e97d647e01
SHA1

d50e69af032a7adc1a3864f6e3b6bb01c1b37599
SHA256

26c7a769aca5127eb5f5d224fc4805497cf05b3ab3acab3c4ed29eb8c5a89305
SHA512

022648a6614d540c263a8857250c2fdb0ee865a9038fd5bb1a945e6895260a9466e09adac490a6f35e86a27a3a0735a50721c87516850c40d7e55a13d5bfd786
SSDEEP

24576:Q4hM/q74GnCJFUKiI5/9WzdMs3IMiTuFt6bgpHEJXbQi8wXOxr260g1xU:4S7Is0/9nsl16bWgki8wXOxr260g7U

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/关卡编辑器/StageEdit.exe	aspack_v212_v242

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/关卡编辑器/ChartDllTwo.dll
unpack001/关卡编辑器/Msvbvm60.dll
unpack001/关卡编辑器/StageEdit.exe
unpack001/关卡编辑器/vic32.dll
unpack001/关卡编辑器/zip32.dll

Files

4d24b3db4f6341b636e288e97d647e01_JaffaCakes118
.rar
下载说明.htm
.html .js polyglot
关卡编辑器/ChartDllTwo.dll
.dll windows:4 windows x86 arch:x86

1cb4c8cb3273b0dcdd783a92048815ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
RtlUnwind

Exports

Exports

??0CGDI_DLL@@QAE@XZ
??4CGDI_DLL@@QAEAAV0@ABV0@@Z
?fnGDI_DLL@@YAHXZ
?nGDI_DLL@@3HA
ChartToBmp
ClipperRect
Collision
Distance
GDIAdditive_16
GDIAlphaBlendByAlphaChannel2_16
GDIAlphaBlendByAlphaChannel_16
GDIAlphaBlend_16
GDIBltFast_16
GDIBltZoom_16
GDIBlt_16
GDIColorMask_16
GDIGetPixel
GDIHalfBlend_16
GDIMemset
GDISetPixel
GDISubitive_16
GetAngle
Rotation
SetBuf
WaterWave
ZoomThreeLine
ZoomTwoLine
bitsmovl
bitsmovr
color32_16
getbit
myZoom
myZoom3

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 946KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
关卡编辑器/Cursors/1/0.cur
关卡编辑器/Cursors/1/1.cur
关卡编辑器/Cursors/1/2.cur
关卡编辑器/Cursors/1/3.cur
关卡编辑器/Msvbvm60.dll
.dll regsvr32 windows:4 windows x86 arch:x86

479485184984aadb89b6e8cf253117e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

LockFile
UnlockFile
TerminateProcess
MoveFileA
HeapSize
SetHandleCount
GetStdHandle
FlushFileBuffers
GetACP
lstrlenA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetTempFileNameA
lstrcpynA
_lclose
_llseek
CreateDirectoryA
RemoveDirectoryA
lstrcmpiA
GetLastError
GetModuleHandleA
GetSystemDefaultLangID
FormatMessageA
HeapCreate
GetWindowsDirectoryA
GetPrivateProfileStringA
lstrcatA
CreateFileA
ReadFile
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
IsBadReadPtr
TlsGetValue
lstrcpyA
DeleteFileA
lstrcmpA
GetCurrentThreadId
HeapAlloc
HeapFree
ExitThread
CreateThread
GetTimeZoneInformation
SetEnvironmentVariableA
RaiseException
LCMapStringW
GetStringTypeA
GetModuleFileNameW
GetUserDefaultLangID
GetComputerNameA
SetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
SetFileTime
GetLocalTime
SetLocalTime
RtlUnwind
CreateProcessW
FormatMessageW
GetStartupInfoA
UnhandledExceptionFilter
ExitProcess
GetShortPathNameA
SetCurrentDirectoryA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindNextFileA
FindClose
VirtualFree
GetSystemInfo
VirtualAlloc
VirtualProtect
FlushInstructionCache
WinExec
lstrlenW
lstrcpyW
WriteFile
SetEndOfFile
SetFilePointer
GetSystemTime
SystemTimeToFileTime
GetCurrentProcess
DuplicateHandle
ResumeThread
GetCommandLineA
TlsSetValue
TlsFree
TlsAlloc
GetVersion
CompareStringW
lstrcmpiW
MulDiv
CreateProcessA
GetExitCodeProcess
LoadLibraryExA
MultiByteToWideChar
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
GetCurrentProcessId
GetTickCount
GetEnvironmentVariableA
FreeResource
GetSystemDefaultLCID
IsBadCodePtr
GetUserDefaultLCID
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetVersionExA
Sleep
GlobalDeleteAtom
HeapDestroy
SetErrorMode
GlobalAddAtomA
ReleaseSemaphore
LCMapStringA
CreateSemaphoreA
VirtualQuery
GetProfileStringA
WideCharToMultiByte
HeapReAlloc
GetDriveTypeA
CompareStringA
GetFileAttributesA
GetCurrentDirectoryA
GetModuleFileNameA
SetLastError
GetFullPathNameA
SearchPathA
GetFileType
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
SizeofResource
GlobalAlloc
GlobalSize
GlobalHandle
GlobalReAlloc
GlobalLock
_lwrite
_lread
LockResource
GetTempPathA
FreeLibrary
GetLocaleInfoA
GetCPInfo
GetOEMCP

user32

DdeAbandonTransaction
DdeGetLastError
DdeCreateDataHandle
DdeCmpStringHandles
SetCursorPos
EnumClipboardFormats
DestroyCursor
GetAsyncKeyState
WaitForInputIdle
GetForegroundWindow
keybd_event
VkKeyScanW
SetWindowsHookExW
CharUpperBuffW
CharUpperBuffA
CharLowerBuffW
FindWindowW
FindWindowA
MessageBoxIndirectA
DialogBoxParamA
EnumThreadWindows
GetLastActivePopup
SetActiveWindow
LoadImageA
RegisterClassExA
FrameRect
CreateDialogParamA
IsDialogMessageA
EnableMenuItem
ShowCursor
OemToCharA
CharToOemBuffA
GetWindowTextA
EndDialog
DrawTextA
SendDlgItemMessageA
SetDlgItemTextA
GetWindowPlacement
GetSystemMetrics
LoadBitmapA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
WaitMessage
PostQuitMessage
GetKeyboardLayout
UnhookWindowsHookEx
RegisterClipboardFormatA
CreateCursor
CreateIcon
PostMessageW
PeekMessageW
GetPropA
RemovePropA
SetPropA
SetForegroundWindow
ClipCursor
CallWindowProcA
DefFrameProcA
GetKeyState
GetDlgItem
IsWindow
UnregisterClassA
RegisterClassA
AdjustWindowRect
GetTabbedTextExtentA
TabbedTextOutA
FillRect
CharToOemA
MessageBoxA
wsprintfA
WinHelpA
GetDesktopWindow
SetRect
GetWindowDC
DestroyIcon
GetClassInfoA
AdjustWindowRectEx
GetMenuItemCount
RemoveMenu
GetMenuStringA
DdeClientTransaction
DdeGetData
GetCaretPos
CharPrevA
CharNextA
GetUpdateRgn
GetUpdateRect
PtInRect
ChildWindowFromPointEx
ReleaseCapture
SetCapture
InflateRect
GetWindowRect
ClientToScreen
MoveWindow
IsWindowEnabled
IsChild
SetParent
IsIconic
IsZoomed
DefMDIChildProcA
MessageBeep
PeekMessageA
PostMessageA
LoadStringA
AppendMenuA
DestroyMenu
CreatePopupMenu
GetMessageTime
GetMessagePos
DrawFocusRect
CopyAcceleratorTableA
GetWindowRgn
CharUpperA
TranslateMDISysAccel
SubtractRect
IsRectEmpty
InvalidateRgn
InvalidateRect
CopyRect
GetDCEx
IntersectRect
LoadAcceleratorsA
BringWindowToTop
GetWindowThreadProcessId
AttachThreadInput
EqualRect
EnableWindow
SetFocus
SendMessageA
SetWindowsHookExA
GetClassNameA
LoadCursorA
SetCursor
SetWindowLongA
GetWindow
GetParent
GetFocus
GetSystemMenu
CallNextHookEx
DestroyWindow
SetWindowTextA
SetWindowPos
UpdateWindow
CreateWindowExA
SystemParametersInfoA
GetCapture
WindowFromPoint
ScreenToClient
SetTimer
IsWindowVisible
ShowWindow
KillTimer
GetDC
ReleaseDC
MapWindowPoints
GetCursorPos
GetCursor
OffsetRect
GetIconInfo
DefWindowProcA
BeginPaint
GetClientRect
EndPaint
GetSysColor
GetActiveWindow
GetWindowLongA
DdeConnect
DdePostAdvise
DdeDisconnect
DdeCreateStringHandleA
DdeSetUserHandle
DdeNameService
DdeFreeStringHandle
DdeUninitialize
DdeInitializeA
DdeFreeDataHandle
DdeQueryConvInfo
DdeQueryStringA
DrawFrameControl
SetScrollRange
SetScrollPos
IsClipboardFormatAvailable
LockWindowUpdate
CharLowerBuffA
OpenClipboard
SetClipboardData
GetClipboardData
GetCaretBlinkTime
EmptyClipboard
CloseClipboard
CreateCaret
SetCaretPos
GetWindowTextLengthA
DestroyCaret
ShowCaret
HideCaret
DrawTextExA
GetScrollPos
GetClipboardFormatNameA
SetWindowRgn
ToAscii
GetScrollInfo
DestroyAcceleratorTable
ShowScrollBar
SetMenuItemInfoA
SetScrollInfo
GetMenuItemInfoA
GetQueueStatus
SetKeyboardState
GetKeyboardState
TrackPopupMenu
GetDoubleClickTime
SetWindowContextHelpId
DeleteMenu
SetMenuDefaultItem
DrawMenuBar
GetMenuItemID
InsertMenuA
GetSubMenu
CreateMenu
GetMenu
SetMenu
BeginDeferWindowPos
ModifyMenuA
CheckMenuItem
PostThreadMessageA
EndDeferWindowPos
DeferWindowPos
VkKeyScanA
CharLowerA
GetMenuState
DrawIcon
IsCharAlphaA
LoadIconA
GetClassInfoExA
CreateAcceleratorTableA

gdi32

UnrealizeObject
CreatePen
SetBkColor
CreateSolidBrush
DeleteObject
SetTextColor
CreatePatternBrush
CreateBitmap
ExtTextOutA
SelectObject
SetBkMode
GetBitmapBits
GetObjectA
GetTextExtentPointA
CreateFontIndirectA
CombineRgn
SetRectRgn
CreateRectRgn
CreateRectRgnIndirect
ExtSelectClipRgn
OffsetRgn
PtInRegion
CreatePalette
SelectPalette
SelectClipRgn
OffsetWindowOrgEx
IntersectClipRect
DeleteDC
BitBlt
SetViewportOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
RestoreDC
RealizePalette
SetROP2
SaveDC
GetClipBox
SetWindowOrgEx
ExcludeClipRect
CreateHalftonePalette
GetTextMetricsA
PatBlt
EnumFontsA
TranslateCharsetInfo
GetROP2
SetBrushOrgEx
GetDeviceCaps
GetObjectType
CreatePenIndirect
CreateBrushIndirect
Rectangle
GetStockObject
Arc
LineTo
MoveToEx
Pie
Ellipse
SetStretchBltMode
GetPixel
GetTextExtentPoint32A
SetPixelV
StretchDIBits
GetCurrentObject
TextOutA
GetBkColor
StretchBlt
CreateDIBitmap
CloseMetaFile
SetWindowExtEx
CreateMetaFileA
EndDoc
AbortDoc
StartPage
EndPage
StartDocA
CreateDCA
ResetDCA
Escape
ScaleViewportExtEx
SetViewportExtEx
SetMapMode
DeleteMetaFile
PlayMetaFile
SetAbortProc
DeleteEnhMetaFile
PlayEnhMetaFile
CreateICA
GetEnhMetaFileHeader
ScaleWindowExtEx
GetWindowOrgEx
GetPaletteEntries
CreateDIBSection
CloseEnhMetaFile
CreateEnhMetaFileA
LPtoDP
EqualRgn
ExtCreateRegion
GetDIBits
SetTextAlign
GetWindowExtEx
GetViewportExtEx
CopyMetaFileA
CopyEnhMetaFileA
PathToRegion
EndPath
BeginPath
WidenPath
GetTextColor
GetMapMode
SetDIBColorTable
RoundRect
CreateEllipticRgnIndirect
CreateRoundRectRgn
GetSystemPaletteEntries
GetNearestColor
CreateHatchBrush

advapi32

ReportEventA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegisterEventSourceA
DeregisterEventSource
RegQueryInfoKeyA
RegEnumKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExW
RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegEnumValueA
RegQueryValueExW
RegCreateKeyW

ole32

OleCreateLinkToFile
CoTaskMemFree
BindMoniker
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CreateILockBytesOnHGlobal
OleFlushClipboard
OleIsCurrentClipboard
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
CreateDataAdviseHolder
CreateOleAdviseHolder
CoRegisterClassObject
CoRevokeClassObject
CLSIDFromString
OleDoAutoConvert
OleRegGetUserType
OleSaveToStream
ReadClassStg
ReadClassStm
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
StgIsStorageILockBytes
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleCreateFromData
OleCreateLinkFromData
OleGetIconOfClass
OleGetClipboard
OleSetClipboard
OleCreateLink
CoTaskMemAlloc
OleGetAutoConvert
OleCreateFromFile
CoMarshalInterface
CoUnmarshalInterface
CreateStreamOnHGlobal
StringFromCLSID
StringFromGUID2
CLSIDFromProgID
ProgIDFromCLSID
CoGetClassObject
CoCreateInstance
MkParseDisplayName
CoIsOle1Class
OleQueryLinkFromData
OleQueryCreateFromData
GetClassFile
CreateBindCtx
OleDuplicateData
ReleaseStgMedium
OleSetMenuDescriptor
CoRegisterMessageFilter
OleUninitialize
OleInitialize
CoGetMalloc
OleRegGetMiscStatus
CoCreateGuid
IIDFromString
CoFreeUnusedLibraries
CoDisconnectObject
IsAccelerator
OleIsRunning
OleRun
OleLockRunning
StgCreateDocfile
WriteClassStg
OleSave
StgOpenStorage
OleLoad

oleaut32

VariantInit
OleTranslateColor
OleCreatePropertyFrame
SysAllocString
SysFreeString
VariantClear
OleCreatePictureIndirect
SysStringLen
OleCreateFontIndirect
OaBuildVersion
SysAllocStringLen
SysAllocStringByteLen
SetErrorInfo
CreateErrorInfo
VariantChangeType
DispGetParam
LoadTypeLi
GetErrorInfo
LoadRegTypeLi
RegisterTypeLi
SysStringByteLen
UnRegisterTypeLi
LHashValOfNameSys
LoadTypeLibEx
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayCreate
OleLoadPicture
SafeArrayGetDim
VariantCopy
VariantCopyInd
SafeArrayDestroy
VariantChangeTypeEx
CreateDispTypeInfo
SafeArrayDestroyData
DispInvoke
SafeArrayGetUBound
DispGetIDsOfNames
SafeArrayGetElement
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayCopy
OleIconToCursor
SafeArrayRedim
SafeArrayAllocDescriptor
SafeArrayDestroyDescriptor
RevokeActiveObject
SafeArrayLock
SafeArrayUnlock
SafeArrayAllocData
SysReAllocStringLen
GetActiveObject
VarDateFromStr
VarCyFromI4
VarR8FromStr
VarBstrFromI4
VarBstrFromR4
VarBstrFromI2
VarBstrFromDate
VarBstrFromCy
VarBstrFromR8
VarI4FromStr
VarI4FromR8
VarI2FromStr
VarCyFromStr
VarR4FromStr
LHashValOfNameSysA
SysReAllocString

Exports

Exports

BASIC_CLASS_AddRef
BASIC_CLASS_GetIDsOfNames
BASIC_CLASS_Invoke
BASIC_CLASS_QueryInterface
BASIC_CLASS_Release
BASIC_DISPINTERFACE_GetTICount
BASIC_DISPINTERFACE_GetTypeInfo
CopyRecord
CreateIExprSrvObj
DLLGetDocumentation
DllCanUnloadNow
DllFunctionCall
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EVENT_SINK2_AddRef
EVENT_SINK2_Release
EVENT_SINK_AddRef
EVENT_SINK_GetIDsOfNames
EVENT_SINK_Invoke
EVENT_SINK_QueryInterface
EVENT_SINK_Release
EbCreateContext
EbDestroyContext
EbGetErrorInfo
EbGetHandleOfExecutingProject
EbGetObjConnectionCounts
EbGetVBAObject
EbIsProjectOnStack
EbLibraryLoad
EbLibraryUnload
EbLoadRunTime
EbResetProject
EbResetProjectNormal
EbSetContextWorkerThread
GetMem1
GetMem2
GetMem4
GetMem8
GetMemEvent
GetMemNewObj
GetMemObj
GetMemStr
GetMemVar
IID_IVbaHost
MethCallEngine
ProcCallEngine
PutMem1
PutMem2
PutMem4
PutMem8
PutMemEvent
PutMemNewObj
PutMemObj
PutMemStr
PutMemVar
SetMemEvent
SetMemNewObj
SetMemObj
SetMemVar
ThunRTMain
TipCreateInstanceEx
TipCreateInstanceProject2
TipGetAddressOfPredeclaredInstance
TipInvokeMethod
TipInvokeMethod2
TipSetOption
TipUnloadInstance
TipUnloadProject
UserDllMain
VBDllCanUnloadNow
VBDllGetClassObject
VBDllRegisterServer
VBDllUnRegisterServer
VarPtr
Zombie_AddRef
Zombie_GetIDsOfNames
Zombie_GetTypeInfo
Zombie_GetTypeInfoCount
Zombie_Invoke
Zombie_QueryInterface
Zombie_Release
_CIatan
_CIcos
_CIexp
_CIlog
_CIsin
_CIsqrt
_CItan
__vbaAptOffset
__vbaAryConstruct
__vbaAryConstruct2
__vbaAryCopy
__vbaAryDestruct
__vbaAryLock
__vbaAryMove
__vbaAryRebase1Var
__vbaAryRecCopy
__vbaAryRecMove
__vbaAryUnlock
__vbaAryVar
__vbaAryVarVarg
__vbaBoolErrVar
__vbaBoolStr
__vbaBoolVar
__vbaBoolVarNull
__vbaCVarAryUdt
__vbaCastObj
__vbaCastObjVar
__vbaCheckType
__vbaCheckTypeVar
__vbaChkstk
__vbaCopyBytes
__vbaCopyBytesZero
__vbaCyAbs
__vbaCyAdd
__vbaCyErrVar
__vbaCyFix
__vbaCyForInit
__vbaCyForNext
__vbaCyI2
__vbaCyI4
__vbaCyInt
__vbaCyMul
__vbaCyMulI2
__vbaCySgn
__vbaCyStr
__vbaCySub
__vbaCyUI1
__vbaCyVar
__vbaDateR4
__vbaDateR8
__vbaDateStr
__vbaDateVar
__vbaDerefAry
__vbaDerefAry1
__vbaEnd
__vbaErase
__vbaEraseKeepData
__vbaEraseNoPop
__vbaError
__vbaErrorOverflow
__vbaExceptHandler
__vbaExitEachAry
__vbaExitEachColl
__vbaExitEachVar
__vbaExitProc
__vbaFPException
__vbaFPFix
__vbaFPInt
__vbaFailedFriend
__vbaFileClose
__vbaFileCloseAll
__vbaFileLock
__vbaFileOpen
__vbaFileSeek
__vbaFixstrConstruct
__vbaForEachAry
__vbaForEachCollAd
__vbaForEachCollObj
__vbaForEachCollVar
__vbaForEachVar
__vbaFpCDblR4
__vbaFpCDblR8
__vbaFpCSngR4
__vbaFpCSngR8
__vbaFpCmpCy
__vbaFpCy
__vbaFpI2
__vbaFpI4
__vbaFpR4
__vbaFpR8
__vbaFpUI1
__vbaFreeObj
__vbaFreeObjList
__vbaFreeStr
__vbaFreeStrList
__vbaFreeVar
__vbaFreeVarList
__vbaFreeVarg
__vbaGenerateBoundsError
__vbaGet3
__vbaGet4
__vbaGetFxStr3
__vbaGetFxStr4
__vbaGetOwner3
__vbaGetOwner4
__vbaGosub
__vbaGosubFree
__vbaGosubReturn
__vbaHresultCheck
__vbaHresultCheckNonvirt
__vbaHresultCheckObj
__vbaI2Abs
__vbaI2Cy
__vbaI2ErrVar
__vbaI2ForNextCheck
__vbaI2I4
__vbaI2Sgn
__vbaI2Str
__vbaI2Var
__vbaI4Abs
__vbaI4Cy
__vbaI4ErrVar
__vbaI4ForNextCheck
__vbaI4Sgn
__vbaI4Str
__vbaI4Var
__vbaInStr
__vbaInStrB
__vbaInStrVar
__vbaInStrVarB
__vbaInputFile
__vbaLateIdCall
__vbaLateIdCallLd
__vbaLateIdCallSt
__vbaLateIdNamedCall
__vbaLateIdNamedCallLd
__vbaLateIdNamedCallSt
__vbaLateIdNamedStAd
__vbaLateIdSt
__vbaLateIdStAd
__vbaLateMemCall
__vbaLateMemCallLd
__vbaLateMemCallSt
__vbaLateMemNamedCall
__vbaLateMemNamedCallLd
__vbaLateMemNamedCallSt
__vbaLateMemNamedStAd
__vbaLateMemSt
__vbaLateMemStAd
__vbaLbound
__vbaLdZeroAry
__vbaLenBstr
__vbaLenBstrB
__vbaLenVar
__vbaLenVarB
__vbaLineInputStr
__vbaLineInputVar
__vbaLsetFixstr
__vbaLsetFixstrFree
__vbaMidStmtBstr
__vbaMidStmtBstrB
__vbaMidStmtVar
__vbaMidStmtVarB
__vbaNameFile
__vbaNew
__vbaNew2
__vbaNextEachAry
__vbaNextEachCollAd
__vbaNextEachCollObj
__vbaNextEachCollVar
__vbaNextEachVar
__vbaObjAddref
__vbaObjIs
__vbaObjSet
__vbaObjSetAddref
__vbaObjVar
__vbaOnError
__vbaOnGoCheck
__vbaPowerR8
__vbaPrintFile
__vbaPrintObj
__vbaPut3
__vbaPut4
__vbaPutFxStr3
__vbaPutFxStr4
__vbaPutOwner3
__vbaPutOwner4
__vbaR4Cy
__vbaR4ErrVar
__vbaR4ForNextCheck
__vbaR4Sgn
__vbaR4Str
__vbaR4Var
__vbaR8Cy
__vbaR8ErrVar
__vbaR8FixI2
__vbaR8FixI4
__vbaR8ForNextCheck
__vbaR8IntI2
__vbaR8IntI4
__vbaR8Sgn
__vbaR8Str
__vbaR8Var
__vbaRaiseEvent
__vbaRecAnsiToUni
__vbaRecAssign
__vbaRecDestruct
__vbaRecDestructAnsi
__vbaRecUniToAnsi
__vbaRedim
__vbaRedimPreserve
__vbaRedimPreserveVar
__vbaRedimPreserveVar2
__vbaRedimVar
__vbaRedimVar2
__vbaRefVarAry
__vbaResume
__vbaRsetFixstr
__vbaRsetFixstrFree
__vbaSetSystemError
__vbaStopExe
__vbaStr2Vec
__vbaStrAryToAnsi
__vbaStrAryToUnicode
__vbaStrBool
__vbaStrCat
__vbaStrCmp
__vbaStrComp
__vbaStrCompVar
__vbaStrCopy
__vbaStrCy
__vbaStrDate
__vbaStrErrVarCopy
__vbaStrFixstr
__vbaStrI2
__vbaStrI4
__vbaStrLike
__vbaStrMove
__vbaStrR4
__vbaStrR8
__vbaStrTextCmp
__vbaStrTextLike
__vbaStrToAnsi
__vbaStrToUnicode
__vbaStrUI1
__vbaStrVarCopy
__vbaStrVarMove
__vbaStrVarVal
__vbaUI1Cy
__vbaUI1ErrVar
__vbaUI1I2
__vbaUI1I4
__vbaUI1Sgn
__vbaUI1Str
__vbaUI1Var
__vbaUbound
__vbaUdtVar
__vbaUnkVar
__vbaVar2Vec
__vbaVarAbs
__vbaVarAdd
__vbaVarAnd
__vbaVarCat
__vbaVarCmpEq
__vbaVarCmpGe
__vbaVarCmpGt
__vbaVarCmpLe
__vbaVarCmpLt
__vbaVarCmpNe
__vbaVarCopy
__vbaVarDateVar
__vbaVarDiv
__vbaVarDup
__vbaVarEqv
__vbaVarErrI4
__vbaVarFix
__vbaVarForInit
__vbaVarForNext
__vbaVarIdiv
__vbaVarImp
__vbaVarIndexLoad
__vbaVarIndexLoadRef
__vbaVarIndexLoadRefLock
__vbaVarIndexStore
__vbaVarIndexStoreObj
__vbaVarInt
__vbaVarLateMemCallLd
__vbaVarLateMemCallLdRf
__vbaVarLateMemCallSt
__vbaVarLateMemSt
__vbaVarLateMemStAd
__vbaVarLike
__vbaVarLikeVar
__vbaVarMod
__vbaVarMove
__vbaVarMul
__vbaVarNeg
__vbaVarNot
__vbaVarOr
__vbaVarPow
__vbaVarSetObj
__vbaVarSetObjAddref
__vbaVarSetUnk
__vbaVarSetUnkAddref
__vbaVarSetVar
__vbaVarSetVarAddref
__vbaVarSub
__vbaVarTextCmpEq
__vbaVarTextCmpGe
__vbaVarTextCmpGt
__vbaVarTextCmpLe
__vbaVarTextCmpLt
__vbaVarTextCmpNe
__vbaVarTextLike
__vbaVarTextLikeVar
__vbaVarTextTstEq
__vbaVarTextTstGe
__vbaVarTextTstGt
__vbaVarTextTstLe
__vbaVarTextTstLt
__vbaVarTextTstNe
__vbaVarTstEq
__vbaVarTstGe
__vbaVarTstGt
__vbaVarTstLe
__vbaVarTstLt
__vbaVarTstNe
__vbaVarVargNofree
__vbaVarXor
__vbaVarZero
__vbaVargObj
__vbaVargObjAddref
__vbaVargParmRef
__vbaVargUnk
__vbaVargUnkAddref
__vbaVargVar
__vbaVargVarCopy
__vbaVargVarMove
__vbaVargVarRef
__vbaVerifyVarObj
__vbaWriteFile
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_allmul
rtBoolFromErrVar
rtBstrFromErrVar
rtCyFromErrVar
rtDecFromVar
rtI2FromErrVar
rtI4FromErrVar
rtR4FromErrVar
rtR8FromErrVar
rtUI1FromErrVar
rtcAbsVar
rtcAnsiValueBstr
rtcAppActivate
rtcAppleScript
rtcArray
rtcAtn
rtcBeep
rtcBstrFromAnsi
rtcBstrFromByte
rtcBstrFromChar
rtcBstrFromError
rtcBstrFromFormatVar
rtcByteValueBstr
rtcCVErrFromVar
rtcCallByName
rtcChangeDir
rtcChangeDrive
rtcCharValueBstr
rtcChoose
rtcCommandBstr
rtcCommandVar
rtcCompareBstr
rtcCos
rtcCreateObject
rtcCreateObject2
rtcCurrentDir
rtcCurrentDirBstr
rtcDDB
rtcDateAdd
rtcDateDiff
rtcDateFromVar
rtcDatePart
rtcDeleteSetting
rtcDir
rtcDoEvents
rtcEndOfFile
rtcEnvironBstr
rtcEnvironVar
rtcErrObj
rtcExp
rtcFV
rtcFileAttributes
rtcFileCopy
rtcFileDateTime
rtcFileLen
rtcFileLength
rtcFileLocation
rtcFileReset
rtcFileSeek
rtcFileWidth
rtcFilter
rtcFixVar
rtcFormatCurrency
rtcFormatDateTime

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ENGINE
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
关卡编辑器/StageEdit.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 135KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
关卡编辑器/User_Settings.ini
关卡编辑器/ada.ini
关卡编辑器/borders/border0a.bmp
关卡编辑器/borders/border0b.bmp
关卡编辑器/borders/border0c.bmp
关卡编辑器/borders/border0d.gif
.gif
关卡编辑器/borders/border0e.gif
.gif
关卡编辑器/borders/border10a.bmp
关卡编辑器/borders/border10b.bmp
关卡编辑器/borders/border10c.bmp
关卡编辑器/borders/border10d.gif
.gif
关卡编辑器/borders/border10e.gif
.gif
关卡编辑器/borders/border11a.bmp
关卡编辑器/borders/border11b.bmp
关卡编辑器/borders/border11c.bmp
关卡编辑器/borders/border11d.gif
.gif
关卡编辑器/borders/border11e.gif
.gif
关卡编辑器/borders/border12a.bmp
关卡编辑器/borders/border12b.bmp
关卡编辑器/borders/border12c.bmp
关卡编辑器/borders/border12d.gif
.gif
关卡编辑器/borders/border12e.gif
.gif
关卡编辑器/borders/border13a.bmp
关卡编辑器/borders/border13b.bmp
关卡编辑器/borders/border13c.bmp
关卡编辑器/borders/border13d.gif
.gif
关卡编辑器/borders/border13e.gif
.gif
关卡编辑器/borders/border14a.bmp
关卡编辑器/borders/border14b.bmp
关卡编辑器/borders/border14c.bmp
关卡编辑器/borders/border14d.gif
.gif
关卡编辑器/borders/border14e.gif
.gif
关卡编辑器/borders/border15a.bmp
关卡编辑器/borders/border15b.bmp
关卡编辑器/borders/border15c.bmp
关卡编辑器/borders/border15d.gif
.gif
关卡编辑器/borders/border15e.gif
.gif
关卡编辑器/borders/border16a.bmp
关卡编辑器/borders/border16b.bmp
关卡编辑器/borders/border16c.bmp
关卡编辑器/borders/border16d.gif
.gif
关卡编辑器/borders/border16e.gif
.gif
关卡编辑器/borders/border17a.bmp
关卡编辑器/borders/border17b.bmp
关卡编辑器/borders/border17c.bmp
关卡编辑器/borders/border17d.gif
.gif
关卡编辑器/borders/border17e.gif
.gif
关卡编辑器/borders/border18a.bmp
关卡编辑器/borders/border18b.bmp
关卡编辑器/borders/border18c.bmp
关卡编辑器/borders/border18d.gif
.gif
关卡编辑器/borders/border18e.gif
.gif
关卡编辑器/borders/border19a.bmp
关卡编辑器/borders/border19b.bmp
关卡编辑器/borders/border19c.bmp
关卡编辑器/borders/border19d.gif
.gif
关卡编辑器/borders/border19e.gif
.gif
关卡编辑器/borders/border1a.bmp
关卡编辑器/borders/border1b.bmp
关卡编辑器/borders/border1c.bmp
关卡编辑器/borders/border1d.gif
.gif
关卡编辑器/borders/border1e.gif
.gif
关卡编辑器/borders/border20a.bmp
关卡编辑器/borders/border20b.bmp
关卡编辑器/borders/border20c.bmp
关卡编辑器/borders/border20d.gif
.gif
关卡编辑器/borders/border20e.gif
.gif
关卡编辑器/borders/border21a.bmp
关卡编辑器/borders/border21b.bmp
关卡编辑器/borders/border21c.bmp
关卡编辑器/borders/border21d.gif
.gif
关卡编辑器/borders/border21e.gif
.gif
关卡编辑器/borders/border22a.bmp
关卡编辑器/borders/border22b.bmp
关卡编辑器/borders/border22c.bmp
关卡编辑器/borders/border22d.gif
.gif
关卡编辑器/borders/border22e.gif
.gif
关卡编辑器/borders/border23a.bmp
关卡编辑器/borders/border23b.bmp
关卡编辑器/borders/border23c.bmp
关卡编辑器/borders/border23d.gif
.gif
关卡编辑器/borders/border23e.gif
.gif
关卡编辑器/borders/border24a.bmp
关卡编辑器/borders/border24b.bmp
关卡编辑器/borders/border24c.bmp
关卡编辑器/borders/border24d.gif
.gif
关卡编辑器/borders/border24e.gif
.gif
关卡编辑器/borders/border25a.bmp
关卡编辑器/borders/border25b.bmp
关卡编辑器/borders/border25c.bmp
关卡编辑器/borders/border25d.gif
.gif
关卡编辑器/borders/border25e.gif
.gif
关卡编辑器/borders/border26a.bmp
关卡编辑器/borders/border26b.bmp
关卡编辑器/borders/border26c.bmp
关卡编辑器/borders/border26d.gif
.gif
关卡编辑器/borders/border26e.gif
.gif
关卡编辑器/borders/border2a.bmp
关卡编辑器/borders/border2b.bmp
关卡编辑器/borders/border2c.bmp
关卡编辑器/borders/border2d.gif
.gif
关卡编辑器/borders/border2e.gif
.gif
关卡编辑器/borders/border3a.bmp
关卡编辑器/borders/border3b.bmp
关卡编辑器/borders/border3c.bmp
关卡编辑器/borders/border3d.gif
.gif
关卡编辑器/borders/border3e.gif
.gif
关卡编辑器/borders/border4a.bmp
关卡编辑器/borders/border4b.bmp
关卡编辑器/borders/border4c.bmp
关卡编辑器/borders/border4d.gif
.gif
关卡编辑器/borders/border4e.gif
.gif
关卡编辑器/borders/border5a.bmp
关卡编辑器/borders/border5b.bmp
关卡编辑器/borders/border5c.bmp
关卡编辑器/borders/border5d.gif
.gif
关卡编辑器/borders/border5e.gif
.gif
关卡编辑器/borders/border6a.bmp
关卡编辑器/borders/border6b.bmp
关卡编辑器/borders/border6c.bmp
关卡编辑器/borders/border6d.gif
.gif
关卡编辑器/borders/border6e.gif
.gif
关卡编辑器/borders/border7a.bmp
关卡编辑器/borders/border7b.bmp
关卡编辑器/borders/border7c.bmp
关卡编辑器/borders/border7d.gif
.gif
关卡编辑器/borders/border7e.gif
.gif
关卡编辑器/borders/border8a.bmp
关卡编辑器/borders/border8b.bmp
关卡编辑器/borders/border8c.bmp
关卡编辑器/borders/border8d.gif
.gif
关卡编辑器/borders/border8e.gif
.gif
关卡编辑器/borders/border9a.bmp
关卡编辑器/borders/border9b.bmp
关卡编辑器/borders/border9c.bmp
关卡编辑器/borders/border9d.gif
.gif
关卡编辑器/borders/border9e.gif
.gif
关卡编辑器/images/addfile0.gif
.gif
关卡编辑器/images/addfile1.gif
.gif
关卡编辑器/images/addfiles0.gif
.gif
关卡编辑器/images/addfiles1.gif
.gif
关卡编辑器/images/borderleft0.gif
.gif
关卡编辑器/images/borderleft1.gif
.gif
关卡编辑器/images/borderright0.gif
.gif
关卡编辑器/images/borderright1.gif
.gif
关卡编辑器/images/clearpic0.gif
.gif
关卡编辑器/images/clearpic1.gif
.gif
关卡编辑器/images/delpic0.gif
.gif
关卡编辑器/images/delpic1.gif
.gif
关卡编辑器/images/hand.cur
关卡编辑器/images/iclose0.gif
.gif
关卡编辑器/images/iclose1.gif
.gif
关卡编辑器/images/makestage0.gif
.gif
关卡编辑器/images/makestage1.gif
.gif
关卡编辑器/images/min0.gif
.gif
关卡编辑器/images/min1.gif
.gif
关卡编辑器/images/nextcase0.gif
.gif
关卡编辑器/images/nextcase1.gif
.gif
关卡编辑器/images/nextpic0.gif
.gif
关卡编辑器/images/nextpic1.gif
.gif
关卡编辑器/images/nopic.bmp
关卡编辑器/images/preto0.gif
.gif
关卡编辑器/images/preto1.gif
.gif
关卡编辑器/images/prevpic0.gif
.gif
关卡编辑器/images/prevpic1.gif
.gif
关卡编辑器/images/selmus0.gif
.gif
关卡编辑器/images/selmus1.gif
.gif
关卡编辑器/images/selpic0.gif
.gif
关卡编辑器/images/selpic1.gif
.gif
关卡编辑器/images/tbk.gif
.gif
关卡编辑器/images/tit.gif
.gif
关卡编辑器/links/link0.gif
.gif
关卡编辑器/links/link1.gif
.gif
关卡编辑器/links/link10.gif
.gif
关卡编辑器/links/link11.gif
.gif
关卡编辑器/links/link12.gif
.gif
关卡编辑器/links/link13.gif
.gif
关卡编辑器/links/link14.gif
.gif
关卡编辑器/links/link15.gif
.gif
关卡编辑器/links/link16.gif
.gif
关卡编辑器/links/link17.gif
.gif
关卡编辑器/links/link18.gif
.gif
关卡编辑器/links/link19.gif
.gif
关卡编辑器/links/link2.gif
.gif
关卡编辑器/links/link20.gif
.gif
关卡编辑器/links/link21.gif
.gif
关卡编辑器/links/link22.gif
.gif
关卡编辑器/links/link23.gif
.gif
关卡编辑器/links/link24.gif
.gif
关卡编辑器/links/link3.gif
.gif
关卡编辑器/links/link4.gif
.gif
关卡编辑器/links/link5.gif
.gif
关卡编辑器/links/link6.gif
.gif
关卡编辑器/links/link7.gif
.gif
关卡编辑器/links/link8.gif
.gif
关卡编辑器/links/link9.gif
.gif
关卡编辑器/links/linkm0.gif
.gif
关卡编辑器/links/linkm1.gif
.gif
关卡编辑器/links/linkm10.gif
.gif
关卡编辑器/links/linkm11.gif
.gif
关卡编辑器/links/linkm12.gif
.gif
关卡编辑器/links/linkm13.gif
.gif
关卡编辑器/links/linkm14.gif
.gif
关卡编辑器/links/linkm15.gif
.gif
关卡编辑器/links/linkm16.gif
.gif
关卡编辑器/links/linkm17.gif
.gif
关卡编辑器/links/linkm18.gif
.gif
关卡编辑器/links/linkm19.gif
.gif
关卡编辑器/links/linkm2.gif
.gif
关卡编辑器/links/linkm20.gif
.gif
关卡编辑器/links/linkm21.gif
.gif
关卡编辑器/links/linkm22.gif
.gif
关卡编辑器/links/linkm23.gif
.gif
关卡编辑器/links/linkm24.gif
.gif
关卡编辑器/links/linkm3.gif
.gif
关卡编辑器/links/linkm4.gif
.gif
关卡编辑器/links/linkm5.gif
.gif
关卡编辑器/links/linkm6.gif
.gif
关卡编辑器/links/linkm7.gif
.gif
关卡编辑器/links/linkm8.gif
.gif
关卡编辑器/links/linkm9.gif
.gif
关卡编辑器/stageedit.ini
关卡编辑器/vic32.dll
.dll windows:4 windows x86 arch:x86

bccc9c2414227ee28e93b13aaa9d5180

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetModuleFileNameA
IsBadReadPtr
GetVersion
RaiseException
GetTempPathW
GetTempFileNameW
GetTempPathA
GetTempFileNameA
WriteFile
DeleteFileW
DeleteFileA
SetFilePointer
ReadFile
CreateFileW
CreateFileA
CloseHandle
GlobalUnlock
GlobalFree
IsBadHugeReadPtr
GlobalHandle
GlobalSize
GlobalAlloc
GlobalLock
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
HeapFree
HeapAlloc
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
GetProcAddress
WideCharToMultiByte
TlsGetValue
GetStringTypeW
GetLastError
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
GetStartupInfoA
GetFileType
SetHandleCount
GetStdHandle
GetEnvironmentStringsW
GetStringTypeA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings

user32

wsprintfA
DispatchMessageA
TranslateMessage
PeekMessageA
CopyRect
GetWindowTextA
GetWindowTextW
IsWindowUnicode
ReleaseDC
GetDC
GetWindowRect
GetClientRect
ClientToScreen
GetDesktopWindow

gdi32

Escape
CreatePen
GetSystemPaletteEntries
CreateDCA
BitBlt
CreateCompatibleDC
CreateBitmap
DeleteObject
DeleteDC
SetAbortProc
SetStretchBltMode
StretchDIBits
GetDeviceCaps
EndPage
EndDoc
AbortDoc
StartDocW
StartDocA
StartPage
CreateDIBitmap
SetBkMode
GetStockObject
SelectObject
SetMapMode
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
GetTextExtentPointA
TextOutA
Rectangle
SetBitmapBits
CreateHalftonePalette
SetDIBColorTable
SetDIBitsToDevice
CreateDIBSection
GetDIBColorTable
GetPaletteEntries
CreatePalette
CreateCompatibleBitmap
SelectPalette
RealizePalette
GetDIBits
GetObjectA

Exports

Exports

Align1bppBits_
CreateDefaultPalette_
Store1bppBits_
VicAbortProc
Victorversion
Victorversionex
addimage
allocDIB
allocimage
andimage
blur
blurthresh
bmpinfo
bmpinfoW
bmpinfofrombuffer
brightenmidrange
calcavglevel
calchisto
calchistorgb
changebright
checkrange16_
checkrange1_
checkrange_
clienttoimage
colordither
colorscatter
colortogray
convert1bitto8bit
convert1bitto8bitsmooth
convert8bitto1bit
convertgray16to8
convertgray8to16
convertpaltorgb
convertrgbtopal
convertrgbtopalex
copyimage
copyimagebits
copyimagepalette
copyimgdes
cover
coverclear
ddbtoimage
defaultpalette
dibsecttoimage
dibtobitmap
dibtoimage
dilate
divide
drawhisto
erode
exchangelevel
expandcontrast
flipimage
freeimage
gammabrighten
getgifcomment
getgifcommentW
getpixelcolor
getpngcomment
getpngcommentW
gifframecount
gifframecountW
gifframecountfrombuffer
gifinfo
gifinfoW
gifinfoallframes
gifinfoallframesW
gifinfoallframesfrombuffer
gifinfoframe
gifinfoframeW
gifinfoframefrombuffer
gifinfofrombuffer
histobrighten
histoequalize
hsv2rgb
imageareatorect
imagetodib
isgrayscaleimage
jpeggeterror
jpeginfo
jpeginfoW
jpeginfoex
jpeginfoexW
jpeginfofrombuffer
jpeginfofrombufferex
jpegsetthumbnailsize
jpegsetxyresolution
kodalith
limitlevel
loadbif
loadbifW
loadbmp
loadbmpW
loadbmpfrombuffer
loadbmppalette
loadbmppaletteW
loadbmppalettefrombuffer
loadgif
loadgifW
loadgifframe
loadgifframeW
loadgifframefrombuffer
loadgifframepalette
loadgifframepaletteW
loadgifframepalettefrombuffer
loadgiffrombuffer
loadgifglobalpalette
loadgifglobalpaletteW
loadgifglobalpalettefrombuffer
loadgifpalette
loadgifpaletteW
loadgifpalettefrombuffer
loadjpg
loadjpgW
loadjpgfrombuffer
loadjpgthumbnail
loadjpgthumbnailW
loadjpgthumbnailfrombuffer
loadpcx
loadpcxW
loadpcxpalette
loadpcxpaletteW
loadpng
loadpngW
loadpngfrombuffer
loadpngpalette
loadpngpaletteW
loadpngpalettefrombuffer
loadtga
loadtgaW
loadtgapalette
loadtgapaletteW
loadtif
loadtifW
loadtiffrombuffer
loadtifpage
loadtifpageW
loadtifpagebyindex
loadtifpagebyindexW
loadtifpalette
loadtifpaletteW
loadtifpalettefrombuffer
loadtifpalettepage
loadtifpalettepageW
loadtifpalettepagebyindex
loadtifpalettepagebyindexW
matchcolorimage
matchcolorimageex
matrixconv
matrixconvex
medianfilter
mirrorimage
multiply
negative
orimage
outline
pcxinfo
pcxinfoW
pixelcount
pixellize
pnggeterror
pnggetxyresolution
pnggetxyresolutionW
pnginfo
pnginfoW
pnginfofrombuffer
pngsetxyresolution
printimage
printimageenddoc
printimagenoeject
printimagestartdoc
printimagestartdocW
rainbowpalette
recttoimagearea
reduceimagecolors
removenoise
resize
resizeex
rgb2hsv
rotate
rotate90
savebif
savebifW
savebmp
savebmpW
savebmptobuffer
saveeps
saveepsW
savegif
savegifW
savegifex
savegifexW
savegifframe
savegifframeW
savegifframetobuffer
savegiftobufferex
savejpg
savejpgW
savejpgex
savejpgexW
savejpgtobuffer
savejpgtobufferex
savepcx
savepcxW
savepng
savepngW
savepngtobuffer
savetga
savetgaW
savetif
savetifW
savetifpage
savetifpageW
savetiftobuffer
setgifcomment
setimagearea
setpixelcolor
setupimgdes
sharpen
sharpengentle
standardpalette
subimage
tgainfo
tgainfoW
threshold
tiffgeterror
tiffgetpageinfo
tiffgetpageinfoW
tiffgetxyresolution
tiffgetxyresolutionW
tiffgetxyresolutionpagebyindex
tiffgetxyresolutionpagebyindexW
tiffinfo
tiffinfoW
tiffinfofrombuffer
tiffinfopage
tiffinfopageW
tiffinfopagebyindex
tiffinfopagebyindexW
tiffsetxyresolution
unlockLZW
updatebitmapcolortable
usetable
victowinpal
viewimage
viewimageex
windowtoimage
wintovicpal
wtaverage
xorimage
zeroimage
zeroimgdes

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
关卡编辑器/zip32.dll
.dll windows:4 windows x86 arch:x86

00a4a2fc8c7dbf3b1dd6087ef98f034b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDriveTypeA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ReleaseMutex
WaitForSingleObject
CloseHandle
InterlockedExchange
CreateMutexA
HeapFree
HeapAlloc
GetProcessHeap
GetVolumeInformationA
lstrcmpiA
GetCurrentProcess
GetFileAttributesA
FindClose
FindFirstFileA
GetVersion
GetFileType
FindNextFileA
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
lstrcpynA
lstrcpyA
lstrcatA
CreateFileA
GetLastError
HeapCreate
FlushFileBuffers
SetEndOfFile
GetTimeZoneInformation
GetSystemTime
GetLocalTime
MoveFileA
SetStdHandle
HeapReAlloc
GetCommandLineA
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
ExitProcess
TerminateProcess
HeapDestroy
lstrlenA
VirtualFree
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WriteFile
ReadFile
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
RtlUnwind
SetFilePointer
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
CompareStringA
CompareStringW
SetEnvironmentVariableA
LoadLibraryA
PeekNamedPipe
RemoveDirectoryA
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
LCMapStringW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetFileInformationByHandle

user32

wvsprintfA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityDescriptorLength
GetKernelObjectSecurity
OpenProcessToken

Exports

Exports

ZpArchive
ZpGetOptions
ZpInit
ZpSetOptions
ZpVersion

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
关卡编辑器/下载说明.htm
.html .js polyglot
关卡编辑器/请先阅读.txt

Sharing

General

Malware Config

Signatures

Files

1cb4c8cb3273b0dcdd783a92048815ac

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 946KB

.reloc Size: 8KB - Virtual size: 5KB

479485184984aadb89b6e8cf253117e6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

ENGINE Size: 56KB - Virtual size: 52KB

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 196KB - Virtual size: 195KB

.reloc Size: 64KB - Virtual size: 61KB

Headers

File Characteristics

Sections

.text Size: 135KB - Virtual size: 316KB

.data Size: 512B - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 12KB

.aspack Size: 13KB - Virtual size: 16KB

.adata Size: - Virtual size: 4KB

bccc9c2414227ee28e93b13aaa9d5180

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 159KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 904B

.reloc Size: 12KB - Virtual size: 10KB

00a4a2fc8c7dbf3b1dd6087ef98f034b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 93KB - Virtual size: 92KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 19KB - Virtual size: 327KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 764B

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 946KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 1.0MB - Virtual size: 1.0MB

ENGINE
Size: 56KB - Virtual size: 52KB

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 196KB - Virtual size: 195KB

.reloc
Size: 64KB - Virtual size: 61KB

.text
Size: 135KB - Virtual size: 316KB

.data
Size: 512B - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 12KB

.aspack
Size: 13KB - Virtual size: 16KB

.adata
Size: - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 159KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 904B

.reloc
Size: 12KB - Virtual size: 10KB

.text
Size: 93KB - Virtual size: 92KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 19KB - Virtual size: 327KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 764B

.reloc
Size: 8KB - Virtual size: 8KB