Overview
overview
7Static
static
7ZcomClient_Setup.exe
windows7-x64
7ZcomClient_Setup.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$SYSDIR/FL...er.dll
windows7-x64
1$SYSDIR/FL...er.dll
windows10-2004-x64
1$SYSDIR/Pull.dll
windows7-x64
1$SYSDIR/Pull.dll
windows10-2004-x64
1$SYSDIR/Re...er.dll
windows7-x64
1$SYSDIR/Re...er.dll
windows10-2004-x64
1$SYSDIR/asfreader.dll
windows7-x64
1$SYSDIR/asfreader.dll
windows10-2004-x64
1$SYSDIR/flvsource.dll
windows7-x64
1$SYSDIR/flvsource.dll
windows10-2004-x64
1$SYSDIR/pthreadVC.dll
windows7-x64
1$SYSDIR/pthreadVC.dll
windows10-2004-x64
1$TEMP/Simp-CN.exe
windows7-x64
1$TEMP/Simp-CN.exe
windows10-2004-x64
1$TEMP/gtapi.dll
windows7-x64
3$TEMP/gtapi.dll
windows10-2004-x64
3Client/alert/alert.js
windows7-x64
3Client/alert/alert.js
windows10-2004-x64
3Client/ale...t.html
windows7-x64
1Client/ale...t.html
windows10-2004-x64
1Client/com...ent.js
windows7-x64
3Client/com...ent.js
windows10-2004-x64
3Client/com...dar.js
windows7-x64
3Client/com...dar.js
windows10-2004-x64
3Behavioral task
behavioral1
Sample
ZcomClient_Setup.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ZcomClient_Setup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$SYSDIR/FLVSplitter.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
$SYSDIR/FLVSplitter.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
$SYSDIR/Pull.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$SYSDIR/Pull.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
$SYSDIR/RealMediaSplitter.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
$SYSDIR/RealMediaSplitter.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
$SYSDIR/asfreader.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
$SYSDIR/asfreader.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
$SYSDIR/flvsource.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
$SYSDIR/flvsource.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
$SYSDIR/pthreadVC.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
$SYSDIR/pthreadVC.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
$TEMP/Simp-CN.exe
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
$TEMP/Simp-CN.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
$TEMP/gtapi.dll
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
$TEMP/gtapi.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
Client/alert/alert.js
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Client/alert/alert.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
Client/alert/readAlert.html
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Client/alert/readAlert.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Client/common/Zcom.Client.js
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Client/common/Zcom.Client.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
Client/common/calendar.js
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Client/common/calendar.js
Resource
win10v2004-20240709-en
General
-
Target
62fb4f779c9d07ae9c7a901caeb542c9_JaffaCakes118
-
Size
4.6MB
-
MD5
62fb4f779c9d07ae9c7a901caeb542c9
-
SHA1
8aba31983cabaa520affd0ab837281a41b0da81d
-
SHA256
51c582fa181f788dcf7ee56bc430b54186ed8c76ee0885461844a38edf069e79
-
SHA512
646b3f40fd40c0817d019dc483408fcabf329b0236ae0d25ea09c9531f6db605d15b6ef62c4984853b0a065c5bff281ca7859c15b847083fff84c2d8fadc84eb
-
SSDEEP
98304:3TY3+oOW84IAddanhrgBqBXscyIzz8E5Vn81Fr0oC1HFZU/:c3WWTanF2eNVn8coSHFe/
Malware Config
Signatures
-
resource yara_rule static1/unpack002/dat/resume/skin upx static1/unpack002/skin.dll upx -
Unsigned PE 32 IoCs
Checks for missing Authenticode signature.
resource unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/$PLUGINSDIR/KillProcDLL.dll unpack002/$PLUGINSDIR/System.dll unpack002/$SYSDIR/FLVSplitter.ax unpack002/$SYSDIR/Pull.dll unpack002/$SYSDIR/RealMediaSplitter.ax unpack002/$SYSDIR/asfreader.ax unpack002/$SYSDIR/flvsource.ax unpack002/$SYSDIR/pthreadVC.dll unpack002/$TEMP/gtapi.dll unpack002/E-Space.exe unpack002/PlugIns/zface_game.dll unpack002/PlugIns/zface_magaz.dll unpack002/PlugIns/zface_music.dll unpack002/PlugIns/zface_pic.dll unpack002/PlugIns/zface_set.dll unpack002/PlugIns/zface_video.dll unpack002/PlugIns/zfun_FileWatch.dll unpack002/PlugIns/zfun_LogicalDriveScan.dll unpack002/PlugIns/zfun_PlueSearch.dll unpack002/PlugIns/zfun_httpd.dll unpack002/PlugIns/zfun_stat.dll unpack002/PlugIns/zfun_up.dll unpack002/ZComAgent.dll unpack002/ZcomUpdate.exe unpack002/dat/resume/ZComAgent unpack002/dat/resume/ZComAgent.dll unpack002/dat/resume/skin unpack003/out.upx unpack002/skin.dll unpack004/out.upx unpack002/sqlite3.dll -
NSIS installer 1 IoCs
resource yara_rule static1/unpack001/ZcomClient_Setup.exe nsis_installer_1
Files
-
62fb4f779c9d07ae9c7a901caeb542c9_JaffaCakes118.rar
-
ZcomClient_Setup.exe.exe windows:4 windows x86 arch:x86
42134c4fb1b2d3cf6b447e018a5de700
Code Sign
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before29/01/1996, 00:00Not After01/08/2028, 23:59SubjectOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16/07/2004, 00:00Not After15/07/2014, 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
1e:99:1d:83:cd:56:2e:57:13:4c:80:24:dd:d8:bf:14Certificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before03/07/2007, 00:00Not After09/07/2008, 23:59SubjectCN=TREND MEDIA CORPORATION LIMITED,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=marketing,O=TREND MEDIA CORPORATION LIMITED,L=beijing,ST=beijing,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
41:a7:32:87:c9:35:b0:bc:f3:24:50:85:fe:a4:42:a9:08:4b:66:1bSigner
Actual PE Digest41:a7:32:87:c9:35:b0:bc:f3:24:50:85:fe:a4:42:a9:08:4b:66:1bDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
SetFileTime
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
MulDiv
FindNextFileA
FindFirstFileA
DeleteFileA
ExitProcess
user32
ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
SystemParametersInfoA
RegisterClassA
EndDialog
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CreateDialogParamA
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
LoadImageA
GetDC
EnableWindow
InvalidateRect
CreateWindowExA
GetWindowLongA
DrawFocusRect
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
TrackPopupMenu
wsprintfA
SendMessageA
CallWindowProcA
MapWindowPoints
GetWindowRect
ScreenToClient
PtInRect
LoadCursorA
SetCursor
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetWindowLongA
gdi32
SetBkColor
GetDeviceCaps
GetCurrentObject
GetObjectA
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegEnumKeyA
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/Google.ini
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
57354bdeea3dfae6e948101add87501a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc
user32
GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA
gdi32
SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
Exports
Exports
dialog
initDialog
show
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 954B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/KillProcDLL.dll.dll windows:4 windows x86 arch:x86
815c88741b87a0210c457b00b57bf9c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TerminateProcess
CloseHandle
OpenProcess
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
GlobalFree
lstrcpyA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
RtlUnwind
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
Exports
Exports
KillProc
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
4ec328f99bdd944fc98d8a5cf11f7a62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/install.ini"
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-wizard.bmp
-
$SYSDIR/FLVSplitter.ax.dll regsvr32 windows:4 windows x86 arch:x86
03ba91e0efd6363943eeb4802543620f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
c:\stuff\build\guliverkli\src\filters\parser\flvsplitter\release unicode\FLVSplitter.pdb
Imports
kernel32
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameW
GlobalAddAtomW
WritePrivateProfileStringW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalFlags
CompareStringW
GetModuleHandleA
GetVersionExA
LoadLibraryA
GlobalFindAtomW
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetProcessHeap
WriteFile
ExitProcess
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
ReadFile
GetThreadLocale
LocalAlloc
GetFileTime
GetFileSize
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentProcessId
GlobalFree
GlobalUnlock
FormatMessageW
LocalFree
SetLastError
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
DeleteFileW
Sleep
GetVolumeInformationW
GetVersion
FindClose
CreateFileW
GetModuleFileNameW
WideCharToMultiByte
FindFirstFileW
LockResource
RaiseException
SizeofResource
LoadResource
FindResourceW
DisableThreadLibraryCalls
VirtualAlloc
GetCurrentProcess
DuplicateHandle
VirtualFree
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreW
CreateThread
GetVersionExW
GetTickCount
GetCurrentThread
SetThreadPriority
GetCurrentThreadId
lstrcmpW
lstrcpynW
GetModuleHandleW
GetProcAddress
CreateEventW
InterlockedExchange
CloseHandle
ResetEvent
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
GetLastError
lstrlenA
MultiByteToWideChar
lstrlenW
RtlUnwind
user32
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UnregisterClassA
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
DestroyMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
GetWindowTextW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
CharUpperW
GetSystemMetrics
ShowWindow
CallWindowProcW
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
PostMessageW
PostQuitMessage
SetRect
DispatchMessageW
RegisterWindowMessageW
PeekMessageW
UnregisterClassW
gdi32
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SaveDC
SetViewportExtEx
PtVisible
DeleteObject
OffsetViewportOrgEx
CreateBitmap
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RestoreDC
GetDeviceCaps
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RectVisible
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegCreateKeyExW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
shlwapi
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
ole32
StringFromGUID2
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
oleaut32
VariantClear
VariantChangeType
VariantInit
SysAllocString
SysFreeString
SysAllocStringLen
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT64 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$SYSDIR/Pull.dll.dll regsvr32 windows:4 windows x86 arch:x86
77f3a17e274b025edecdfa306615cf76
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalFlags
WritePrivateProfileStringA
GetCurrentDirectoryA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetCPInfo
GetOEMCP
RtlUnwind
GetTimeFormatA
GetDateFormatA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetSystemTimeAsFileTime
GetCommandLineA
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
GlobalHandle
HeapSize
GetTimeZoneInformation
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
SleepEx
GetSystemDirectoryA
GlobalReAlloc
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesA
LocalAlloc
lstrcmpA
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
LoadLibraryA
GetProcAddress
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
UnlockFile
LockFile
FlushFileBuffers
ReadFile
FileTimeToSystemTime
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
GetDiskFreeSpaceExA
FindFirstFileA
FindClose
CompareStringW
CompareStringA
GetVersion
lstrcatA
lstrcpyA
InterlockedExchangeAdd
SetEndOfFile
CreateEventA
GetTickCount
CreateThread
Sleep
WaitForSingleObject
WriteFile
CloseHandle
CreateFileA
SetFilePointer
CreateSemaphoreA
GetModuleHandleA
LoadLibraryExA
FreeLibrary
GetModuleFileNameA
SetEvent
IsDBCSLeadByte
InterlockedIncrement
lstrcpynA
lstrcmpiA
RaiseException
lstrlenW
MoveFileA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DeleteFileA
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
WideCharToMultiByte
LocalFree
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
user32
ShowWindow
SetWindowLongA
GetDlgItem
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
SetWindowTextA
GetClassNameA
LoadCursorA
GetSysColorBrush
UnhookWindowsHookEx
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
CallWindowProcA
SetCursor
PostQuitMessage
GetSysColor
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
wsprintfA
GetSystemMetrics
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
DefWindowProcA
RegisterClassA
ReleaseDC
GetDC
GetClassInfoA
GetWindowTextA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnregisterClassA
CharUpperA
SetWindowPos
CopyRect
CharNextA
MessageBoxA
GetWindowPlacement
IsIconic
SystemParametersInfoA
PostMessageA
DestroyMenu
GetClassInfoExA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
gdi32
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
DeleteDC
CreateBitmap
GetStockObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
ScaleWindowExtEx
GetDeviceCaps
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
comctl32
ord17
shlwapi
PathStripToRootA
PathFindExtensionA
PathIsUNCA
UrlUnescapeA
PathFindFileNameA
ole32
CLSIDFromProgID
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoUninitialize
CoCreateInstance
OleRun
CLSIDFromString
oleaut32
UnRegisterTypeLi
SysStringLen
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VarUdateFromDate
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysAllocString
VarBstrFromCy
GetErrorInfo
RegisterTypeLi
ws2_32
accept
listen
bind
WSAStartup
WSACleanup
getsockname
gethostname
getsockopt
shutdown
sendto
recvfrom
getservbyname
gethostbyaddr
__WSAFDIsSet
select
inet_addr
ntohl
htonl
WSAGetLastError
send
gethostbyname
htons
connect
recv
setsockopt
closesocket
getprotobyname
socket
getpeername
inet_ntoa
getservbyport
ntohs
ioctlsocket
wininet
InternetCanonicalizeUrlA
InternetCrackUrlA
pthreadvc
pthread_mutex_unlock
pthread_mutex_destroy
pthread_mutex_init
pthread_cond_signal
pthread_cond_wait
pthread_cond_timedwait
pthread_cond_destroy
pthread_cond_init
pthread_cond_broadcast
sched_setscheduler
pthread_setschedparam
sched_get_priority_max
sched_get_priority_min
pthread_getschedparam
pthread_self
pthread_detach
pthread_create
pthread_mutex_lock
Exports
Exports
??0CHttpSocket@@QAE@ABV0@@Z
??0CHttpSocket@@QAE@XZ
??1CHttpSocket@@UAE@XZ
??4CHttpSocket@@QAEAAV0@ABV0@@Z
??_7CHttpSocket@@6B@
?CloseSocket@CHttpSocket@@QAEHXZ
?Connect@CHttpSocket@@QAEHPADH@Z
?FormatRequestHeader@CHttpSocket@@QAEPBDPAD0AAJ00JJH@Z
?GetField@CHttpSocket@@QAEHPBDPADH@Z
?GetRequestHeader@CHttpSocket@@QBEHPADH@Z
?GetResponseHeader@CHttpSocket@@QAEPBDAAH@Z
?GetResponseLine@CHttpSocket@@QAEHPADH@Z
?GetServerState@CHttpSocket@@QAEHXZ
?Receive@CHttpSocket@@QAEJPADJ@Z
?SendRequest@CHttpSocket@@QAEHPBDJ@Z
?SetTimeout@CHttpSocket@@QAEHHH@Z
?Socket@CHttpSocket@@QAEHXZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UpnpAcceptSubscription
UpnpAcceptSubscriptionExt
UpnpAddToAction
UpnpAddToActionResponse
UpnpAddToPropertySet
UpnpAddVirtualDir
UpnpCloseHttpGet
UpnpCloseHttpPost
UpnpCreatePropertySet
UpnpDownloadUrlItem
UpnpDownloadXmlDoc
UpnpEnableWebserver
UpnpFinish
UpnpFree
UpnpGetErrorMessage
UpnpGetServerIpAddress
UpnpGetServerPort
UpnpGetServiceVarStatus
UpnpGetServiceVarStatusAsync
UpnpInit
UpnpIsWebserverEnabled
UpnpMakeAction
UpnpMakeActionResponse
UpnpNotify
UpnpNotifyBroadcast
UpnpNotifyExt
UpnpOpenHttpGet
UpnpOpenHttpGetEx
UpnpOpenHttpPost
UpnpReadHttpGet
UpnpRegisterClient
UpnpRegisterMulticast
UpnpRegisterRootDevice
UpnpRegisterRootDevice2
UpnpRemoveAllVirtualDirs
UpnpRemoveVirtualDir
UpnpRenewSubscription
UpnpRenewSubscriptionAsync
UpnpResolveURL
UpnpSearchAsync
UpnpSendAction
UpnpSendActionAsync
UpnpSendActionEx
UpnpSendActionExAsync
UpnpSendAdvertisement
UpnpSetContentLength
UpnpSetMaxSubscriptionTimeOut
UpnpSetMaxSubscriptions
UpnpSetVirtualDirCallbacks
UpnpSetWebServerRootDir
UpnpSubscribe
UpnpSubscribeAsync
UpnpUnRegisterClient
UpnpUnRegisterRootDevice
UpnpUnSubscribe
UpnpUnSubscribeAsync
UpnpWriteHttpPost
getlocalhostname
ixmlAttr_free
ixmlCDATASection_free
ixmlCDATASection_init
ixmlCloneDOMString
ixmlDocument_createAttribute
ixmlDocument_createAttributeEx
ixmlDocument_createAttributeNS
ixmlDocument_createAttributeNSEx
ixmlDocument_createCDATASection
ixmlDocument_createCDATASectionEx
ixmlDocument_createDocument
ixmlDocument_createDocumentEx
ixmlDocument_createElement
ixmlDocument_createElementEx
ixmlDocument_createElementNS
ixmlDocument_createElementNSEx
ixmlDocument_createTextNode
ixmlDocument_createTextNodeEx
ixmlDocument_free
ixmlDocument_getElementById
ixmlDocument_getElementsByTagName
ixmlDocument_getElementsByTagNameNS
ixmlDocument_importNode
ixmlDocument_init
ixmlElement_free
ixmlElement_getAttribute
ixmlElement_getAttributeNS
ixmlElement_getAttributeNode
ixmlElement_getAttributeNodeNS
ixmlElement_getElementsByTagName
ixmlElement_getElementsByTagNameNS
ixmlElement_getTagName
ixmlElement_hasAttribute
ixmlElement_hasAttributeNS
ixmlElement_init
ixmlElement_removeAttribute
ixmlElement_removeAttributeNS
ixmlElement_removeAttributeNode
ixmlElement_setAttribute
ixmlElement_setAttributeNS
ixmlElement_setAttributeNode
ixmlElement_setAttributeNodeNS
ixmlFreeDOMString
ixmlLoadDocument
ixmlLoadDocumentEx
ixmlNamedNodeMap_free
ixmlNamedNodeMap_getLength
ixmlNamedNodeMap_getNamedItem
ixmlNamedNodeMap_item
ixmlNodeList_free
ixmlNodeList_item
ixmlNodeList_length
ixmlNode_appendChild
ixmlNode_cloneNode
ixmlNode_free
ixmlNode_getAttributes
ixmlNode_getChildNodes
ixmlNode_getFirstChild
ixmlNode_getLastChild
ixmlNode_getLocalName
ixmlNode_getNamespaceURI
ixmlNode_getNextSibling
ixmlNode_getNodeName
ixmlNode_getNodeType
ixmlNode_getNodeValue
ixmlNode_getOwnerDocument
ixmlNode_getParentNode
ixmlNode_getPrefix
ixmlNode_getPreviousSibling
ixmlNode_hasAttributes
ixmlNode_hasChildNodes
ixmlNode_insertBefore
ixmlNode_removeChild
ixmlNode_replaceChild
ixmlNode_setNodeValue
ixmlNodetoString
ixmlParseBuffer
ixmlParseBufferEx
ixmlPrintNode
Sections
.text Size: 344KB - Virtual size: 343KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$SYSDIR/RealMediaSplitter.ax.dll regsvr32 windows:4 windows x86 arch:x86
9a126c029018ddbb4b569b54eed56ea5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\Progs\guliverkli\src\filters\parser\realmediasplitter\Release Unicode\RealMediaSplitter.pdb
Imports
kernel32
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetFileAttributesW
GetFileTime
lstrcatW
GetVersionExA
LoadLibraryA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GlobalFlags
ExitProcess
LocalAlloc
HeapAlloc
HeapFree
GetCommandLineA
HeapReAlloc
VirtualProtect
VirtualQuery
SetStdHandle
GetFileType
HeapSize
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
IsBadWritePtr
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
DeleteFileW
Sleep
GetModuleFileNameW
GetVersion
CreateFileW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcessId
CreateThread
GetTickCount
SetThreadPriority
lstrcpyW
GetModuleHandleW
VirtualAlloc
CreateSemaphoreW
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
ResetEvent
SetEvent
CreateEventW
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrcpynW
lstrcmpW
DisableThreadLibraryCalls
GetLastError
lstrlenA
lstrlenW
GetModuleFileNameA
LoadLibraryW
GetProcAddress
FreeLibrary
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
RtlUnwind
user32
SetWindowTextW
ValidateRect
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessagePos
LoadIconW
MapWindowPoints
GetKeyState
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
GetWindowTextW
SendMessageW
MessageBoxW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
LoadCursorW
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
EnableWindow
PostQuitMessage
DestroyMenu
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
GetMessageTime
PostMessageW
CharUpperW
GetSystemMetrics
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetRect
DispatchMessageW
RegisterWindowMessageW
PeekMessageW
wsprintfW
UnregisterClassW
GetDlgCtrlID
TabbedTextOutW
gdi32
DeleteDC
CreateBitmap
GetStockObject
ScaleWindowExtEx
ExtTextOutW
TextOutW
RectVisible
PtVisible
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
Escape
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegCloseKey
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegSetValueW
RegOpenKeyExW
RegCreateKeyW
RegCreateKeyExW
comctl32
ord17
shlwapi
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathRemoveFileSpecA
PathAddBackslashA
ole32
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
oleaut32
SysFreeString
VariantChangeType
SysAllocStringLen
VariantClear
VariantInit
SysAllocString
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 216KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_TEXT64 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$SYSDIR/asfreader.ax.dll regsvr32 windows:4 windows x86 arch:x86
dd84c4a4127f94355b2120ea4706fa8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedDecrement
CreateThread
CreateDirectoryA
GetFileType
GetLastError
CreateFileA
WaitForMultipleObjects
ReadFile
GetTickCount
SetFilePointer
GetFileSize
InterlockedIncrement
GetVersion
LeaveCriticalSection
LocalFree
EnterCriticalSection
FreeLibrary
Sleep
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
SetEvent
ResetEvent
GetCurrentProcessId
OpenProcess
TerminateProcess
WaitForSingleObject
CloseHandle
MultiByteToWideChar
CreateEventA
lstrlenA
InterlockedExchange
DeleteCriticalSection
GetVersionExA
InitializeCriticalSection
WideCharToMultiByte
user32
MessageBoxA
wsprintfA
advapi32
RegSetValueA
RegCreateKeyA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
ole32
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
oleaut32
GetErrorInfo
SysFreeString
SysAllocString
VariantClear
wmvcore
WMCreateSyncReader
ws2_32
WSAStartup
msvcrt
__CxxFrameHandler
strncpy
strstr
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
_strnicmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_strlwr
atoi
strrchr
_purecall
sprintf
printf
_wtoi
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$SYSDIR/btdb.mdb
-
$SYSDIR/flvsource.ax.dll regsvr32 windows:4 windows x86 arch:x86
8fcf0ab4d39a586dd06b891ea4c4392b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
lstrcmpiA
InitializeCriticalSection
TerminateProcess
CreateDirectoryA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
ResetEvent
GetTickCount
DeleteCriticalSection
GetVersion
OpenProcess
GetFileSize
CreateThread
LocalFree
WaitForSingleObject
InterlockedDecrement
CreateFileA
CloseHandle
SetEvent
CreateEventA
ReadFile
SetFilePointer
WaitForMultipleObjects
FreeLibrary
VirtualFree
VirtualAlloc
GetSystemInfo
ReleaseSemaphore
InterlockedIncrement
GetModuleFileNameA
GetCurrentProcessId
CreateSemaphoreA
GetLastError
DisableThreadLibraryCalls
GetVersionExA
user32
MessageBoxA
wsprintfA
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegisterEventSourceA
ReportEventA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegEnumKeyExA
DeregisterEventSource
ole32
CoUninitialize
CoTaskMemFree
CoInitialize
StringFromGUID2
CoTaskMemAlloc
CoFreeUnusedLibraries
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
GetErrorInfo
msvcrt
strncpy
_purecall
sprintf
strstr
strrchr
atoi
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_strnicmp
_strlwr
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$SYSDIR/pthreadVC.dll.dll windows:4 windows x86 arch:x86
e63f63e7cf3464e1b08fe04ed66d36f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
WSAGetLastError
WSASetLastError
kernel32
ExitProcess
GetSystemInfo
VirtualProtect
GetProcessAffinityMask
GetCurrentProcess
LeaveCriticalSection
GetThreadPriority
EnterCriticalSection
Sleep
InterlockedIncrement
CreateEventA
WaitForSingleObject
GetLastError
OpenProcess
GetCurrentProcessId
TlsAlloc
SetLastError
TlsGetValue
DuplicateHandle
GetCurrentThread
GetCurrentThreadId
InterlockedExchange
SetEvent
SetThreadPriority
ReleaseSemaphore
InterlockedDecrement
CloseHandle
CreateSemaphoreA
TlsFree
TlsSetValue
DeleteCriticalSection
GetProcAddress
FreeLibrary
InitializeCriticalSection
ResumeThread
ResetEvent
SetThreadContext
GetThreadContext
SuspendThread
WaitForMultipleObjects
LoadLibraryA
GetExitCodeThread
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetModuleHandleA
TerminateProcess
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
UnhandledExceptionFilter
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetACP
GetOEMCP
GetCPInfo
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Exports
Exports
pthreadCancelableTimedWait
pthreadCancelableWait
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setpshared
pthread_create
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_getconcurrency
pthread_getschedparam
pthread_getspecific
pthread_getw32threadhandle_np
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getkind_np
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setkind_np
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_win32_process_attach_np
pthread_win32_process_detach_np
pthread_win32_test_features_np
pthread_win32_thread_attach_np
pthread_win32_thread_detach_np
ptw32_get_exception_services_code
ptw32_pop_cleanup
ptw32_push_cleanup
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$TEMP/Simp-CN.exe.exe windows:4 windows x86 arch:x86
0ab64d70d2517f9ccf82fe5077c7506f
Code Sign
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before04/12/2003, 00:00Not After03/12/2008, 23:59SubjectCN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16/07/2004, 00:00Not After15/07/2014, 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0aCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before16/07/2004, 00:00Not After15/07/2009, 23:59SubjectCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0f:e7:c5:f7:c1:07:16:f0:a4:eb:0d:4b:4d:58:13:71Certificate
IssuerCN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=USNot Before10/07/2006, 00:00Not After10/07/2007, 23:59SubjectCN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
ea:e9:66:4e:50:ed:21:78:26:c5:53:63:0d:61:af:10:8d:20:fc:e6Signer
Actual PE Digestea:e9:66:4e:50:ed:21:78:26:c5:53:63:0d:61:af:10:8d:20:fc:e6Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
TranslateMessage
advapi32
RegDeleteValueW
ole32
CoInitialize
shell32
ord165
oleaut32
SysStringLen
shlwapi
SHGetValueW
gdi32
DeleteObject
Sections
.text Size: 886KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
$TEMP/google.bmp
-
$TEMP/gtapi.dll.dll windows:4 windows x86 arch:x86
91071b71e06d53c1a5bb85e8a41231c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\build_server\Toolbar_T4_Branch\branches\toolbar_t4_branch\googleclient\bar\build\opt\obj\partner\gtapi\gtapi.pdb
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
kernel32
lstrcmpA
lstrlenA
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
user32
CharUpperA
CharNextA
Exports
Exports
ToolbarCompatibilityCheck
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Client/alert/alert.js.js
-
Client/alert/img/arrowNextNoLink.jpg.jpg
-
Client/alert/img/arrowNextlink.hover.jpg.jpg
-
Client/alert/img/arrowNextlink.jpg.jpg
-
Client/alert/img/arrowPreLink.hover.jpg.jpg
-
Client/alert/img/arrowPreLink.jpg.jpg
-
Client/alert/img/arrowPreNolink.jpg.jpg
-
Client/alert/img/bg.png.png
-
Client/alert/img/nomal.JPG.jpg
-
Client/alert/img/over.JPG.jpg
-
Client/alert/img/preview.bmp
-
Client/alert/img/read.bmp
-
Client/alert/img/read.jpg.jpg
-
Client/alert/readAlert.html.html .js polyglot
-
Client/alert/rss.css
-
Client/alert/unread.xsl.xml
-
Client/common/Zcom.Client.js.js
-
Client/common/calendar.js.js
-
Client/common/common.css
-
Client/common/common.js.js
-
Client/common/config.js.js
-
Client/common/debug.js.js
-
Client/common/extend.js.js
-
Client/common/footer.inc.js
-
Client/common/header.searchbar.inc.js
-
Client/common/header.top.inc.js.js
-
Client/common/headerbar.inc.js
-
Client/common/help.swf
-
Client/common/img/back.png.png
-
Client/common/img/bgmain.png.png
-
Client/common/img/calendar_arrowl.gif.gif
-
Client/common/img/calendar_arrowl2.gif.gif
-
Client/common/img/calendar_arrowr.gif.gif
-
Client/common/img/calendar_arrowr2.gif.gif
-
Client/common/img/calendar_sel.gif.gif
-
Client/common/img/empty_sub.png.png
-
Client/common/img/expand.png.png
-
Client/common/img/feedback.png.png
-
Client/common/img/footer.png.png
-
Client/common/img/header.png.png
-
Client/common/img/header_button_doc.png.png
-
Client/common/img/header_button_help.png.png
-
Client/common/img/header_button_search.png.png
-
Client/common/img/header_button_sub.png.png
-
Client/common/img/headerbar_cal.png.png
-
Client/common/img/headerbar_doc.png.png
-
Client/common/img/help.png.png
-
Client/common/img/hr.png.png
-
Client/common/img/icon_help.png.png
-
Client/common/img/icon_home.png.png
-
Client/common/img/icon_oicq.gif.gif
-
Client/common/img/icon_setting.png.png
-
Client/common/img/icon_topten.png.png
-
Client/common/img/live800.png.png
-
Client/common/img/loading.gif.gif
-
Client/common/img/mag_goodwork.png.png
-
Client/common/img/mag_lasted.png.png
-
Client/common/img/magborder.png.png
-
Client/common/img/magborder_select.png.png
-
Client/common/img/magicon_unread.png.png
-
Client/common/img/magicon_unread_s.png.png
-
Client/common/img/main_lastest.png.png
-
Client/common/img/mainfoot.png.png
-
Client/common/img/mainfoot_backtop.png.png
-
Client/common/img/menu_td_line.png.png
-
Client/common/img/msgwindow_expand.png.png
-
Client/common/img/msgwindow_iron.png.png
-
Client/common/img/msgwindow_unexpand.png.png
-
Client/common/img/net_failure.png.png
-
Client/common/img/oicq.png.png
-
Client/common/img/openmag_bar.gif.gif
-
Client/common/img/openmag_bg.png.png
-
Client/common/img/propertybar_bg.png.png
-
Client/common/img/propertybar_down_A.png.png
-
Client/common/img/propertybar_down_V.png.png
-
Client/common/img/propertybar_normal.png.png
-
Client/common/img/propertybar_over_A.png.png
-
Client/common/img/propertybar_over_V.png.png
-
Client/common/img/quicksetting.png.png
-
Client/common/img/search-left.jpg.jpg
-
Client/common/img/search-middle.jpg.jpg
-
Client/common/img/search-right-down.png.png
-
Client/common/img/search-right-over.png.png
-
Client/common/img/search-right.png.png
-
Client/common/img/small.netFailure.png.png
-
Client/common/img/sousuolinshi.gif.gif
-
Client/common/img/subcate.png.png
-
Client/common/img/subcate_all.png.png
-
Client/common/img/subcate_download.png.png
-
Client/common/img/subcate_sub.png.png
-
Client/common/img/subcate_title.png.png
-
Client/common/img/subscribe_iron.png.png
-
Client/common/img/task_bar_bg.gif.gif
-
Client/common/img/task_bar_bg_st.png.png
-
Client/common/img/task_bar_l.png.png
-
Client/common/img/task_bar_r.png.png
-
Client/common/img/task_bg.png.png
-
Client/common/img/task_bg_full.png.png
-
Client/common/img/top/book-all_01.jpg.jpg
-
Client/common/img/top/book-all_02.jpg.jpg
-
Client/common/img/top/book-all_03.jpg.jpg
-
Client/common/img/top/book-all_04.jpg.jpg
-
Client/common/img/top/book-all_06.jpg.jpg
-
Client/common/img/top/book-all_07.jpg.jpg
-
Client/common/img/top/book-all_08.jpg.jpg
-
Client/common/img/top/book-all_09.jpg.jpg
-
Client/common/img/top/book-all_10.jpg.jpg
-
Client/common/img/top/book-all_11.jpg.jpg
-
Client/common/img/top/book-all_12.jpg.jpg
-
Client/common/img/top/book-all_13.jpg.jpg
-
Client/common/img/top/book-all_14.jpg.jpg
-
Client/common/img/top/book-all_16.jpg.jpg
-
Client/common/img/top/book-all_17.jpg.jpg
-
Client/common/img/top/book-all_19.jpg.jpg
-
Client/common/img/top/book-all_20.jpg.jpg
-
Client/common/img/top/book-all_21.jpg.jpg
-
Client/common/img/top/book-all_29.jpg.jpg
-
Client/common/img/top/book-all_30.jpg.jpg
-
Client/common/img/top/book-all_31.jpg.jpg
-
Client/common/img/top/magall.png.png
-
Client/common/img/top/magrecommend.png.png
-
Client/common/img/top/magsubscribe.png.png
-
Client/common/img/top/topbg.jpg.jpg
-
Client/common/img/top/ָ.gif.gif
-
Client/common/img/top_bg.gif.gif
-
Client/common/img/topbg.png.png
-
Client/common/img/unexpand.png.png
-
Client/common/isonline.js
-
Client/common/item.xsl.xml
-
Client/common/main.leftmenu.inc.js
-
Client/common/main.ostatusbar.inc.js
-
Client/common/online.js.js
-
Client/common/prototype.js.js
-
Client/common/subcategory.xsl.xml
-
Client/common/tpl.leftmenu.inc.js
-
Client/common/zmag.js.js
-
Client/config/another.config.js.js
-
Client/config/config.css
-
Client/config/config.js.js
-
Client/config/img/background.png.png
-
Client/config/img/bg_box1.gif.gif
-
Client/config/img/bg_box3.gif.gif
-
Client/config/img/checkProxy.hover.png.png
-
Client/config/img/checkProxy.png.png
-
Client/config/img/checkbox.check.hover.png.png
-
Client/config/img/checkbox.check.png.png
-
Client/config/img/checkbox.hover.png.png
-
Client/config/img/checkbox.png.png
-
Client/config/img/choice.hover.png.png
-
Client/config/img/choice.png.png
-
Client/config/img/icon.png.png
-
Client/config/img/overlay.png.png
-
Client/config/img/save.hover.png.png
-
Client/config/img/save.png.png
-
Client/config/img/slider.png.png
-
Client/config/img/tip.background.png.png
-
Client/config/img/tip.selected.png.png
-
Client/config/index.html.html .js polyglot
-
Client/config/quicksetting.html.html .js polyglot
-
Client/config/slider.js.js
-
Client/doc/doc.js.js
-
Client/doc/drawitem.xsl.xml
-
Client/doc/img/empty_mag.png.png
-
Client/doc/img/magbar/bg.png.png
-
Client/doc/img/magbar/del.png.png
-
Client/doc/img/magbar/read.png.png
-
Client/doc/img/magbar/sub.png.png
-
Client/doc/img/magbar/unsub.png.png
-
Client/doc/index.html.html .js polyglot
-
Client/doc/left.xsl.xml
-
Client/doc/record.xsl
-
Client/doc/record_main.xsl.xml
-
Client/doc/record_unread.xsl.xml
-
Client/doc/style.css
-
Client/index.html.html
-
Client/portal/goodwork.html.html .js polyglot
-
Client/portal/index.html.html .js polyglot
-
Client/portal/loader.js.js
-
Client/portal/online.js
-
Client/portal/onlineread.html.html .js polyglot
-
Client/portal/portal.css
-
Client/portal/portal.js.js
-
Client/portal/style.css
-
Client/subscribe/images/bar-msgbg.png.png
-
Client/subscribe/images/bar-title-bg-maglist.png.png
-
Client/subscribe/images/bar-title-bg-my.png.png
-
Client/subscribe/images/bar-title-bg.png.png
-
Client/subscribe/images/bar-title-txtbg-maglist.png.png
-
Client/subscribe/images/bar-title-txtbg-my.png.png
-
Client/subscribe/images/bar-title-txtbg.png.png
-
Client/subscribe/images/btn-download.png.png
-
Client/subscribe/images/btn-orderlink.png.png
-
Client/subscribe/images/btn-preview.png.png
-
Client/subscribe/images/btn-subscribe-gray.png.png
-
Client/subscribe/images/btn-subscribe-green.png.png
-
Client/subscribe/images/btn-subscribe.png.png
-
Client/subscribe/images/dot-blue-hor.png.png
-
Client/subscribe/images/dot-blue-sq.png.png
-
Client/subscribe/images/dot-blue-ver.png.png
-
Client/subscribe/images/loading.gif.gif
-
Client/subscribe/images/no-pic-bg.png.png
-
Client/subscribe/index.html.html .js polyglot
-
Client/subscribe/loader.js.js
-
Client/subscribe/style.css
-
Client/subscribe/subscribe.js.js
-
Client/task/img/empty_task.png.png
-
Client/task/img/icon_download.png.png
-
Client/task/img/icon_pause.png.png
-
Client/task/img/item_del.png.png
-
Client/task/img/item_pause.png.png
-
Client/task/img/item_start.png.png
-
Client/task/img/read_button.png.png
-
Client/task/index.html.js
-
Client/task/proclist.xsl.xml
-
Client/task/style.css
-
Client/task/task.js.js
-
DB/GameurlList.xml.xml
-
DB/flash.db
-
DB/music.db
-
DB/music.xml
-
DB/picture.db
-
DB/video.db
-
Data/Image/hongxindazhan.gif
-
Data/Image/internet-fanzhuanqi.gif
-
Data/Image/internet-heitaowang.gif
-
Data/Image/internet-hongxindazhan.gif
-
Data/Image/internet-shuangluqi.gif
-
Data/Image/internet-tiaoqi.gif
-
Data/Image/kongdangjielong.gif
-
Data/Image/sanweitanqiu.gif
-
Data/Image/saolei.gif
-
Data/Image/zhipai.gif
-
Data/Image/zhizhuzhipai.gif
-
E-Space.exe.exe windows:4 windows x86 arch:x86
c07798640b9fe494fedd2aeec3ad3d62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryW
CreateEventW
ResetEvent
SetEvent
WaitForSingleObject
TerminateThread
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
UnmapViewOfFile
HeapFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyW
GetLastError
lstrlenW
lstrcmpW
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
LoadLibraryExW
lstrcmpiW
lstrcpynW
SetCurrentDirectoryW
ReleaseMutex
CreateMutexW
lstrcpynA
ResumeThread
CreateProcessW
lstrlenA
FindFirstFileW
FindNextFileW
FindClose
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetOEMCP
GetStringTypeW
GetStringTypeA
ReadFile
GetCPInfo
IsBadCodePtr
IsBadReadPtr
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
WriteFile
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
GetDateFormatA
GetTimeFormatA
GetModuleFileNameA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetTimeZoneInformation
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
VirtualQuery
GetStartupInfoW
GetModuleHandleA
CreateThread
ExitThread
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
LocalFree
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
TerminateProcess
WritePrivateProfileStringW
GetModuleFileNameW
GetCurrentDirectoryW
GetPrivateProfileStringW
MultiByteToWideChar
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetProcessWorkingSetSize
GetFileAttributesW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
CopyFileW
CreateFileW
GetFileSize
GetFileTime
CloseHandle
CompareFileTime
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentThreadId
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
MulDiv
DeleteCriticalSection
InitializeCriticalSection
RaiseException
user32
LoadIconW
GetCapture
SetCursor
DrawEdge
GetMessagePos
SetForegroundWindow
GetActiveWindow
GetCursorPos
TrackPopupMenu
ClientToScreen
EndDialog
GetWindowLongW
MoveWindow
GetClientRect
GetParent
GetDlgItem
SetWindowPos
RegisterHotKey
SystemParametersInfoW
GetWindowRect
GetWindow
UnregisterClassW
TranslateAcceleratorW
SetWindowLongW
CreateWindowExW
SendMessageW
ScreenToClient
UpdateWindow
RemoveMenu
MonitorFromPoint
GetMonitorInfoW
TrackPopupMenuEx
CreatePopupMenu
GetMenuItemCount
AppendMenuW
MessageBeep
LoadStringA
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
SwitchToThisWindow
DrawTextW
CopyRect
MapWindowPoints
DialogBoxParamW
SetRectEmpty
GetWindowDC
EnumChildWindows
GetSystemMetrics
DrawAnimatedRects
InvalidateRect
ShowWindow
GetClassInfoExW
wsprintfW
LoadCursorW
CallWindowProcW
RegisterClassExW
PostMessageW
MessageBoxW
LoadImageW
ExitWindowsEx
FindWindowW
DestroyWindow
PostQuitMessage
IsWindow
RegisterWindowMessageW
GetForegroundWindow
DefWindowProcW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetSysColor
ReleaseCapture
FrameRect
DestroyMenu
IsWindowVisible
IsZoomed
IsIconic
LoadStringW
LoadMenuW
LoadAcceleratorsW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
DrawTextExW
SetWindowRgn
KillTimer
SetTimer
PtInRect
CreateAcceleratorTableW
CharNextW
GetClassNameW
RedrawWindow
DestroyAcceleratorTable
GetFocus
IsChild
SetFocus
BeginPaint
EndPaint
GetDesktopWindow
InvalidateRgn
ReleaseDC
GetDC
FillRect
SetCapture
gdi32
DeleteObject
GetObjectW
DeleteDC
StretchBlt
CreateBitmap
CreateDIBSection
CreateCompatibleBitmap
GetDeviceCaps
CreateSolidBrush
SetViewportOrgEx
CreateRoundRectRgn
GetTextExtentPoint32W
SetBkMode
ExtTextOutW
CreateFontW
PatBlt
GetStockObject
SetBkColor
SetTextColor
CreateCompatibleDC
SelectObject
CreatePen
BitBlt
CreatePatternBrush
LineTo
MoveToEx
advapi32
RegQueryInfoKeyW
RegDeleteValueW
RegDeleteKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegSetValueExW
RegSetValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
shell32
SHGetPathFromIDListW
SHGetSpecialFolderLocation
Shell_NotifyIconW
ShellExecuteW
ole32
CLSIDFromString
OleRun
CoInitialize
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
IIDFromString
CoCreateInstance
CreateStreamOnHGlobal
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
OleUninitialize
OleInitialize
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
SysStringLen
SysStringByteLen
OleCreateFontIndirect
VariantClear
VariantInit
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VarBstrCmp
SysAllocStringByteLen
VariantCopy
GetErrorInfo
shlwapi
SHDeleteKeyW
StrStrIW
PathFileExistsW
PathFindFileNameW
comctl32
ImageList_GetIconSize
ImageList_Create
ImageList_AddMasked
ImageList_DrawEx
_TrackMouseEvent
urlmon
URLDownloadToFileW
ws2_32
WSAStartup
inet_ntoa
WSACleanup
inet_addr
gethostbyname
socket
ioctlsocket
connect
select
getsockopt
closesocket
send
recv
htons
wininet
InternetGetConnectedState
Sections
.text Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Licence.txt
-
PlugIns/config.ini
-
PlugIns/flvplayer.swf
-
PlugIns/zface_game.dll.dll windows:4 windows x86 arch:x86
47fde1f2a26364b43ddf1bc57b923437
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
sqlite3
sqlite3_column_bytes16
sqlite3_column_text16
sqlite3_column_int
sqlite3_data_count
sqlite3_reset
sqlite3_step
sqlite3_errmsg
sqlite3_busy_timeout
sqlite3_open16
sqlite3_close
sqlite3_bind_int
sqlite3_finalize
sqlite3_prepare16
sqlite3_column_count
kernel32
lstrlenA
HeapFree
GlobalAlloc
lstrcpyW
GlobalUnlock
GlobalLock
lstrlenW
lstrcmpW
GetModuleFileNameW
GetModuleHandleW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
SetLastError
GlobalFree
GlobalHandle
GetTickCount
GetLocalTime
WaitForSingleObject
ResumeThread
WinExec
GetShortPathNameW
WideCharToMultiByte
GetWindowsDirectoryW
DeleteFileW
Sleep
OutputDebugStringW
GetModuleFileNameA
GetCurrentProcessId
QueryPerformanceCounter
GetLastError
CreateThread
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
LocalFree
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
HeapCreate
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCurrentThreadId
MulDiv
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetFilePointer
IsBadReadPtr
IsBadCodePtr
VirtualFree
VirtualAlloc
IsBadWritePtr
GetProcAddress
GetModuleHandleA
TerminateProcess
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetEnvironmentStringsW
WriteFile
LoadLibraryA
SetStdHandle
VirtualProtect
GetSystemInfo
FlushFileBuffers
CloseHandle
VirtualQuery
GetCommandLineA
user32
MapDialogRect
SetWindowContextHelpId
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
SendDlgItemMessageW
GetMenuItemCount
CreatePopupMenu
AppendMenuW
TrackPopupMenu
SetForegroundWindow
EnableWindow
GetKeyState
SetScrollPos
GetAsyncKeyState
SetWindowRgn
RegisterClipboardFormatW
IntersectRect
IsRectEmpty
OffsetRect
GetScrollInfo
SetScrollInfo
GetScrollPos
FrameRect
DrawTextExW
GetCursorPos
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
CreateDialogIndirectParamW
RegisterWindowMessageW
GetWindowTextW
SetWindowTextW
SetCursor
GetWindowDC
GetMessagePos
ScreenToClient
PostMessageW
CheckMenuItem
IsWindowEnabled
DrawEdge
GetSubMenu
LoadMenuW
InflateRect
DrawFocusRect
GetMenu
AdjustWindowRectEx
ClientToScreen
PtInRect
GetDlgCtrlID
GetCapture
KillTimer
SetTimer
UpdateWindow
CreateAcceleratorTableW
CharNextW
GetClassNameW
RedrawWindow
GetDlgItem
SetFocus
GetFocus
IsChild
DestroyAcceleratorTable
GetDesktopWindow
InvalidateRgn
ReleaseDC
GetDC
SetCapture
ReleaseCapture
FillRect
GetSysColor
SetRectEmpty
CallWindowProcW
DefWindowProcW
DestroyCursor
DestroyMenu
CopyRect
MessageBoxW
GetSystemMetrics
CreateWindowExW
FindWindowW
GetActiveWindow
DrawTextW
RegisterClassExW
IsWindowVisible
ShowWindow
EndPaint
BeginPaint
LoadImageW
UnregisterClassW
DestroyWindow
IsWindow
LoadCursorW
wsprintfW
GetClassInfoExW
GetParent
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
SetWindowPos
IsDialogMessageW
SendMessageW
InvalidateRect
GetClientRect
MoveWindow
GetWindowLongW
SetWindowLongW
GetWindowTextLengthW
gdi32
CreatePatternBrush
GetTextColor
GetBkColor
CreatePolygonRgn
CreateRectRgn
CombineRgn
SelectPalette
RealizePalette
GetClipBox
PatBlt
SetBkMode
CreateFontIndirectW
MoveToEx
LineTo
SetTextColor
SetViewportOrgEx
SetBkColor
ExtTextOutW
StretchBlt
CreateSolidBrush
GetStockObject
GetObjectW
GetDeviceCaps
BitBlt
CreateCompatibleDC
SaveDC
RestoreDC
GetTextExtentPoint32W
CreateFontW
TextOutW
DeleteObject
SelectObject
Rectangle
CreatePen
CreateCompatibleBitmap
DeleteDC
CreateBitmap
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
shell32
ShellExecuteW
ole32
ReleaseStgMedium
RegisterDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
CoTaskMemRealloc
CoTaskMemFree
CoGetClassObject
OleDuplicateData
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoCreateInstance
OleRun
DoDragDrop
CreateStreamOnHGlobal
oleaut32
SysStringByteLen
VariantInit
VariantCopy
VariantClear
SysAllocStringLen
SysAllocString
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
OleLoadPicturePath
DispCallFunc
SysFreeString
SysStringLen
GetErrorInfo
shlwapi
StrStrIW
StrRStrIW
PathFileExistsW
comctl32
ImageList_Destroy
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ImageList_LoadImageW
ImageList_Create
msimg32
GradientFill
AlphaBlend
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 276KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zface_magaz.dll.dll windows:4 windows x86 arch:x86
c5f73268c16654868d91d56cbaa5185c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\工作\E-Space\ESpace.root\Trash_Release\MagChildWnd\zface_music.dll.pdb
Imports
kernel32
lstrcpyW
GetLastError
MulDiv
FlushInstructionCache
GetCurrentProcess
HeapAlloc
lstrlenW
lstrcmpW
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetCurrentDirectoryW
GetCurrentThreadId
Sleep
MultiByteToWideChar
lstrlenA
SetLastError
GlobalFree
GlobalHandle
GetModuleHandleW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
LocalFree
CloseHandle
GetSystemInfo
VirtualProtect
FlushFileBuffers
LCMapStringW
GetPrivateProfileStringW
DeleteCriticalSection
GetStringTypeA
SetStdHandle
GetCPInfo
GetOEMCP
SetFilePointer
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcessHeap
HeapFree
FindResourceExW
FindResourceW
LoadResource
LockResource
LCMapStringA
SizeofResource
InitializeCriticalSection
LeaveCriticalSection
InterlockedExchange
EnterCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
GetStringTypeW
VirtualQuery
SetUnhandledExceptionFilter
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
user32
SetWindowLongW
GetWindowLongW
CreateWindowExW
MoveWindow
GetClientRect
GetParent
MessageBoxW
SendMessageW
IsDialogMessageW
UnregisterClassW
DefWindowProcW
SetWindowTextW
MapDialogRect
SetWindowContextHelpId
CreateDialogIndirectParamW
ShowWindow
GetSystemMetrics
LoadImageW
wsprintfW
CreateAcceleratorTableW
CharNextW
GetClassNameW
SetWindowPos
DestroyWindow
RedrawWindow
IsWindow
GetDlgItem
SetFocus
GetFocus
IsChild
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcW
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
FillRect
SetCapture
ReleaseCapture
GetSysColor
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
GetWindowTextLengthW
GetWindowTextW
gdi32
GetStockObject
GetObjectW
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
CreateSolidBrush
advapi32
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
ole32
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
StringFromGUID2
CoTaskMemAlloc
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleRun
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
StringFromIID
oleaut32
SysAllocStringLen
SysAllocString
SysFreeString
SysStringLen
VarBstrCmp
VariantClear
SysStringByteLen
OleCreateFontIndirect
VariantInit
LoadRegTypeLi
LoadTypeLi
SysAllocStringByteLen
VarUI4FromStr
GetErrorInfo
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zface_music.dll.dll windows:4 windows x86 arch:x86
2f3ac5323d664354cbad6772ccbe41f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
InternetCloseHandle
InternetGetConnectedState
InternetOpenW
InternetSetOptionW
InternetOpenUrlW
HttpQueryInfoW
InternetReadFile
sqlite3
sqlite3_column_int64
sqlite3_column_int
sqlite3_data_count
sqlite3_reset
sqlite3_step
sqlite3_errmsg
sqlite3_busy_timeout
sqlite3_open16
sqlite3_close
sqlite3_bind_text16
sqlite3_bind_int
sqlite3_finalize
sqlite3_prepare16
sqlite3_prepare
sqlite3_column_count
sqlite3_column_text16
sqlite3_column_bytes16
wmvcore
WMCreateEditor
kernel32
GetCurrentProcess
HeapAlloc
GetProcessHeap
MulDiv
GetCurrentThreadId
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetLastError
lstrlenA
HeapFree
GlobalAlloc
lstrcpyW
GlobalUnlock
GlobalLock
lstrlenW
lstrcmpW
GetModuleFileNameW
GetModuleHandleW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
SetLastError
GlobalFree
GlobalHandle
ResumeThread
DeleteFileW
WideCharToMultiByte
OutputDebugStringW
WinExec
GetShortPathNameW
Sleep
GetTickCount
FindClose
FindNextFileW
FlushInstructionCache
FindFirstFileW
GetPrivateProfileStringW
GetCurrentDirectoryW
WritePrivateProfileStringW
CreateDirectoryW
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateThread
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
LocalFree
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetFilePointer
CompareStringA
CompareStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetFullPathNameW
GetCurrentDirectoryA
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetModuleFileNameA
VirtualQuery
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetProcAddress
GetModuleHandleA
TerminateProcess
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
VirtualProtect
GetSystemInfo
UnhandledExceptionFilter
CloseHandle
GetEnvironmentStringsW
WriteFile
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetOEMCP
SetStdHandle
ReadFile
CreateFileW
GetLocaleInfoW
CreateFileA
GetDriveTypeA
SetEndOfFile
SetEnvironmentVariableA
QueryPerformanceCounter
GetFileType
GetCurrentProcessId
user32
InflateRect
IsRectEmpty
GetKeyState
SetScrollPos
GetScrollInfo
EnableWindow
SendDlgItemMessageW
EndDialog
MapDialogRect
SetWindowContextHelpId
DialogBoxIndirectParamW
SetScrollInfo
OffsetRect
GetScrollPos
GetActiveWindow
TrackPopupMenu
CreatePopupMenu
AppendMenuW
EnableMenuItem
GetCursorPos
DrawTextW
FrameRect
CreateDialogIndirectParamW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
PostMessageW
DrawFocusRect
SetCursor
DrawEdge
IntersectRect
RegisterClipboardFormatW
SetWindowRgn
GetAsyncKeyState
GetWindowDC
GetMessagePos
DrawTextExW
IsWindowEnabled
GetMenu
AdjustWindowRectEx
ClientToScreen
PtInRect
GetDlgCtrlID
GetCapture
KillTimer
SetTimer
UpdateWindow
CreateAcceleratorTableW
CharNextW
GetClassNameW
RedrawWindow
GetDlgItem
DestroyAcceleratorTable
GetFocus
IsChild
SetFocus
GetDesktopWindow
InvalidateRgn
ReleaseDC
GetDC
SetCapture
ReleaseCapture
FillRect
GetSysColor
SetRectEmpty
CallWindowProcW
DefWindowProcW
DestroyWindow
DestroyCursor
DestroyMenu
GetMenuItemCount
SetMenuItemInfoW
GetMenuItemInfoW
SetMenuDefaultItem
CopyRect
MessageBoxW
GetSystemMetrics
CreateWindowExW
RegisterClassExW
IsWindowVisible
ShowWindow
EndPaint
BeginPaint
LoadImageW
UnregisterClassW
IsWindow
LoadCursorW
wsprintfW
GetClassInfoExW
GetParent
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
SetWindowPos
IsDialogMessageW
SendMessageW
InvalidateRect
GetClientRect
MoveWindow
GetWindowLongW
SetWindowLongW
ScreenToClient
gdi32
GetPixel
CreatePolygonRgn
CreateRectRgn
CombineRgn
RoundRect
GetClipBox
CreatePatternBrush
PatBlt
LineTo
MoveToEx
SetTextColor
SetBkMode
CreateFontIndirectW
SetViewportOrgEx
SetBkColor
ExtTextOutW
StretchBlt
CreateSolidBrush
GetStockObject
GetObjectW
GetDeviceCaps
BitBlt
GetTextExtentPoint32W
SaveDC
RestoreDC
Rectangle
CreatePen
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
CreateBitmap
advapi32
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegSetValueExA
RegCloseKey
shell32
DragQueryFileW
DragFinish
ShellExecuteW
ole32
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoCreateInstance
OleRun
OleInitialize
CoTaskMemRealloc
OleUninitialize
RevokeDragDrop
DoDragDrop
RegisterDragDrop
ReleaseStgMedium
OleDuplicateData
CoInitialize
oleaut32
SysStringByteLen
VariantInit
VariantCopy
VariantClear
SysAllocStringLen
SysAllocStringByteLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VarBstrCmp
SysAllocString
SysFreeString
SysStringLen
GetErrorInfo
shlwapi
PathFindExtensionW
PathIsDirectoryW
StrStrIW
PathFileExistsW
comctl32
ImageList_Destroy
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Create
msimg32
AlphaBlend
GradientFill
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 344KB - Virtual size: 341KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zface_pic.dll.dll windows:4 windows x86 arch:x86
9d305a8ae3359245a4672b4e828906a5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
sqlite3
sqlite3_column_bytes16
sqlite3_column_text16
sqlite3_column_int64
sqlite3_column_int
sqlite3_reset
sqlite3_step
sqlite3_errmsg
sqlite3_busy_timeout
sqlite3_open16
sqlite3_close
sqlite3_finalize
sqlite3_prepare16
sqlite3_column_count
kernel32
MultiByteToWideChar
lstrlenA
CloseHandle
SetEvent
GlobalFree
GlobalHandle
GetModuleHandleW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
ResetEvent
WaitForSingleObject
CreateMutexW
OpenMutexW
ReleaseMutex
OutputDebugStringW
GetShortPathNameW
WideCharToMultiByte
TerminateThread
WinExec
GetProcAddress
LoadLibraryW
GetLocalTime
GetTickCount
TlsFree
TlsAlloc
SetLastError
SetUnhandledExceptionFilter
GetModuleFileNameA
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
CreateThread
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
LocalFree
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
FindResourceExW
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
lstrcmpW
lstrlenW
GetLastError
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
CreateEventW
MulDiv
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetModuleHandleA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
WriteFile
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
SetFilePointer
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsSetValue
VirtualQuery
TlsGetValue
user32
SetScrollInfo
PeekMessageW
TranslateMessage
DispatchMessageW
SetRect
CreateDialogIndirectParamW
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
SendDlgItemMessageW
MapDialogRect
SetWindowContextHelpId
GetKeyState
GetScrollInfo
GetCursorPos
DrawTextW
DestroyMenu
MonitorFromPoint
GetMonitorInfoW
CreatePopupMenu
AppendMenuW
GetMenuItemCount
TrackPopupMenu
MessageBoxW
CopyRect
GetWindowDC
MapWindowPoints
OffsetRect
ScrollWindowEx
SetScrollPos
GetMessagePos
ScreenToClient
GetMenu
AdjustWindowRectEx
IsWindowEnabled
DrawEdge
GetSystemMetrics
DrawFocusRect
ClientToScreen
GetWindowRect
PtInRect
GetDlgCtrlID
GetCapture
KillTimer
SystemParametersInfoW
SetTimer
UpdateWindow
CreateAcceleratorTableW
CharNextW
GetParent
GetClassNameW
RedrawWindow
GetDlgItem
IsWindow
DestroyAcceleratorTable
GetFocus
IsChild
GetWindow
SetFocus
GetDesktopWindow
InvalidateRgn
IsRectEmpty
IntersectRect
GetMessageW
ReleaseDC
GetDC
FillRect
SetCapture
ReleaseCapture
GetSysColor
InflateRect
FrameRect
LoadBitmapW
PostMessageW
SetRectEmpty
EndPaint
BeginPaint
RegisterWindowMessageW
RegisterClassExW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowVisible
CallWindowProcW
SetWindowPos
LoadImageW
DefWindowProcW
UnregisterClassW
LoadCursorW
wsprintfW
GetClassInfoExW
SendMessageW
DestroyWindow
IsDialogMessageW
ShowWindow
InvalidateRect
GetClientRect
MoveWindow
CreateWindowExW
GetWindowLongW
SetWindowLongW
SetCursor
gdi32
CreateRectRgnIndirect
DPtoLP
LPtoDP
CreateRectRgn
SetRectRgn
SelectClipRgn
GetClipBox
SetMapMode
SetWindowExtEx
SetViewportExtEx
GetDIBits
TextOutW
SetDIBits
ExtTextOutW
SelectObject
Rectangle
SaveDC
RestoreDC
DeleteObject
SetBkColor
CreatePen
DeleteDC
CreateSolidBrush
BitBlt
CreateCompatibleDC
SetViewportOrgEx
CreateCompatibleBitmap
CreateDIBSection
CombineRgn
StretchBlt
SetTextColor
CreateFontIndirectW
CreateFontW
MoveToEx
LineTo
GetStockObject
PatBlt
CreatePatternBrush
CreateBitmap
GetDeviceCaps
GetObjectW
SetBkMode
advapi32
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegDeleteKeyW
shell32
ShellExecuteW
SHGetDesktopFolder
SHGetMalloc
ole32
CoTaskMemRealloc
CoTaskMemFree
IIDFromString
CoInitialize
CoUninitialize
OleRun
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
oleaut32
SysFreeString
SysStringLen
SysStringByteLen
OleCreateFontIndirect
VariantClear
SysAllocString
LoadRegTypeLi
LoadTypeLi
SysAllocStringByteLen
VarUI4FromStr
SysAllocStringLen
VariantInit
GetErrorInfo
shlwapi
StrStrIW
PathFileExistsW
PathFindExtensionW
comctl32
_TrackMouseEvent
ImageList_AddMasked
ImageList_Draw
ImageList_Create
ImageList_GetIconSize
ImageList_DrawEx
ImageList_GetImageCount
InitCommonControlsEx
ImageList_SetImageCount
ImageList_Remove
ImageList_Replace
ImageList_Destroy
msimg32
GradientFill
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 240KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zface_set.dll.dll windows:4 windows x86 arch:x86
de4a3654dc0b19b8d26cf3fd10c43827
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wsock32
ioctlsocket
gethostbyname
socket
inet_ntoa
connect
select
getsockopt
closesocket
send
recv
htons
kernel32
GlobalAlloc
lstrcpyW
MulDiv
GlobalUnlock
GlobalLock
lstrlenW
lstrcmpW
GetModuleFileNameW
SetLastError
GetModuleHandleW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
GlobalFree
GlobalHandle
WritePrivateProfileStringW
WaitForSingleObject
ResumeThread
DeleteFileW
Sleep
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
SetFilePointer
LoadLibraryA
WriteFile
GetPrivateProfileIntW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
SetUnhandledExceptionFilter
TerminateProcess
GetModuleHandleA
GetProcAddress
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
VirtualQuery
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
CreateThread
ExitThread
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
lstrlenA
GetLastError
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
FindResourceW
LoadResource
LocalFree
CloseHandle
LockResource
SizeofResource
FindResourceExW
WideCharToMultiByte
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
HeapAlloc
FlushFileBuffers
GetCurrentProcess
FlushInstructionCache
GetPrivateProfileStringW
GetProcessHeap
HeapFree
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetEnvironmentStringsW
user32
FillRect
GetClientRect
BeginPaint
SystemParametersInfoW
SetWindowPos
UnregisterClassW
DrawTextW
EnableWindow
EndPaint
IsDlgButtonChecked
CheckDlgButton
GetDlgItem
PtInRect
MapDialogRect
SetWindowContextHelpId
SetMenuDefaultItem
GetMenuItemInfoW
SendMessageW
SetWindowLongW
SetWindowsHookExW
SetMenuItemInfoW
SendDlgItemMessageW
UnhookWindowsHookEx
CreateDialogIndirectParamW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
CreateAcceleratorTableW
CharNextW
GetClassNameW
RedrawWindow
SetFocus
GetFocus
IsChild
DestroyAcceleratorTable
GetDesktopWindow
InvalidateRgn
ReleaseDC
GetDC
SetCapture
ReleaseCapture
PostMessageW
EndDialog
GetSystemMetrics
IsWindow
SetCursor
DestroyWindow
CallWindowProcW
GetSysColor
CreateDialogParamW
LoadImageW
DefWindowProcW
GetKeyState
IsWindowEnabled
CallNextHookEx
IsDialogMessageW
MessageBoxW
ShowWindow
MoveWindow
SetWindowTextW
GetClassInfoExW
LoadCursorW
wsprintfW
RegisterClassExW
CreateWindowExW
GetWindowLongW
GetWindow
GetWindowRect
MapWindowPoints
GetParent
InvalidateRect
gdi32
StretchBlt
TextOutW
GetObjectW
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
SetViewportOrgEx
ExtTextOutW
DeleteObject
CreateFontW
SelectObject
CreateFontIndirectW
SetTextColor
SetBkMode
CreateSolidBrush
MoveToEx
LineTo
CreatePen
GetDeviceCaps
GetStockObject
BitBlt
SetBkColor
advapi32
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
ole32
OleRun
CoCreateInstance
CoUninitialize
OleUninitialize
OleInitialize
CoTaskMemRealloc
CoTaskMemFree
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
CoInitialize
CLSIDFromString
CLSIDFromProgID
oleaut32
SysStringLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
GetErrorInfo
SysAllocStringLen
VariantClear
VariantInit
SysStringByteLen
SysAllocString
SysFreeString
shlwapi
StrStrIW
PathFileExistsW
comctl32
ord17
ImageList_DrawEx
_TrackMouseEvent
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zface_video.dll.dll windows:4 windows x86 arch:x86
2ad2f8ec1e9ed56be55cee0dd77a9fcd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
sqlite3
sqlite3_column_bytes16
sqlite3_column_text16
sqlite3_column_double
sqlite3_column_int
sqlite3_data_count
sqlite3_reset
sqlite3_step
sqlite3_errmsg
sqlite3_busy_timeout
sqlite3_open16
sqlite3_close
sqlite3_bind_text16
sqlite3_bind_int
sqlite3_finalize
sqlite3_prepare16
sqlite3_prepare
sqlite3_column_count
wmvcore
WMCreateEditor
kernel32
HeapAlloc
GetProcessHeap
lstrlenW
MulDiv
GetCurrentThreadId
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetLastError
lstrlenA
HeapFree
GlobalAlloc
lstrcpyW
GlobalUnlock
GlobalLock
lstrcmpW
GetModuleFileNameW
GetModuleHandleW
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
SetLastError
GlobalFree
GlobalHandle
GetPrivateProfileStringW
GetCurrentDirectoryW
WritePrivateProfileStringW
WinExec
GetShortPathNameW
WideCharToMultiByte
ResumeThread
Sleep
DeleteFileW
GetCurrentProcess
GetModuleFileNameA
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
CreateThread
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
LocalFree
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
FlushInstructionCache
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
LoadLibraryA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
SetHandleCount
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
GetOEMCP
SetFilePointer
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
SetUnhandledExceptionFilter
GetTickCount
VirtualQuery
user32
SetWindowRgn
RegisterClipboardFormatW
IntersectRect
GetKeyState
SetScrollPos
InflateRect
IsRectEmpty
GetScrollInfo
OffsetRect
GetScrollPos
CreatePopupMenu
AppendMenuW
SetScrollInfo
DrawTextW
ModifyMenuW
GetCursorPos
TrackPopupMenu
SendDlgItemMessageW
EndDialog
MapDialogRect
SetWindowContextHelpId
DialogBoxIndirectParamW
GetActiveWindow
SetForegroundWindow
EnableWindow
FindWindowW
FrameRect
CreateDialogIndirectParamW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
DrawTextExW
SetCursor
DrawEdge
GetWindowDC
GetAsyncKeyState
ScreenToClient
GetMenuItemCount
SetMenuItemInfoW
GetMenuItemInfoW
IsWindowEnabled
GetMenu
AdjustWindowRectEx
ClientToScreen
PtInRect
GetDlgCtrlID
GetCapture
KillTimer
SetTimer
UpdateWindow
CreateAcceleratorTableW
CharNextW
GetClassNameW
RedrawWindow
GetDlgItem
SetFocus
GetFocus
IsChild
DestroyAcceleratorTable
GetDesktopWindow
InvalidateRgn
ReleaseDC
GetDC
SetCapture
ReleaseCapture
FillRect
GetSysColor
SetRectEmpty
CallWindowProcW
DefWindowProcW
DestroyCursor
DestroyMenu
DestroyWindow
CopyRect
MessageBoxW
GetSystemMetrics
SetMenuDefaultItem
GetMessagePos
CreateWindowExW
RegisterClassExW
IsWindowVisible
ShowWindow
EndPaint
BeginPaint
UnregisterClassW
LoadImageW
IsWindow
LoadCursorW
wsprintfW
GetClassInfoExW
GetParent
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
SetWindowPos
IsDialogMessageW
SendMessageW
InvalidateRect
GetClientRect
MoveWindow
GetWindowLongW
SetWindowLongW
PostMessageW
gdi32
CreateFontIndirectW
CreatePolygonRgn
CreateRectRgn
CombineRgn
RoundRect
GetClipBox
MoveToEx
LineTo
SetBkMode
SetViewportOrgEx
CreateBitmap
CreatePatternBrush
PatBlt
SetBkColor
ExtTextOutW
StretchBlt
CreateSolidBrush
GetStockObject
GetObjectW
GetDeviceCaps
BitBlt
SaveDC
RestoreDC
GetTextExtentPoint32W
CreatePen
DeleteObject
Rectangle
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SetTextColor
advapi32
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
shell32
DragQueryFileW
ShellExecuteW
ole32
ReleaseStgMedium
RegisterDragDrop
DoDragDrop
RevokeDragDrop
OleUninitialize
OleInitialize
CoTaskMemRealloc
CoTaskMemFree
CoGetClassObject
OleDuplicateData
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoCreateInstance
OleRun
CreateStreamOnHGlobal
oleaut32
SysStringByteLen
VariantInit
VariantClear
SysAllocStringLen
SysAllocStringByteLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VarBstrCmp
SysAllocString
SysFreeString
SysStringLen
GetErrorInfo
shlwapi
StrStrIW
PathFileExistsW
comctl32
ImageList_Destroy
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Create
msimg32
AlphaBlend
GradientFill
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zfun_FileWatch.dll.dll windows:4 windows x86 arch:x86
7af27b5b045a430b4d4dd2f543c4117c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\工作\E-Space\ESpace.root\Trash_Release\FileWatch\FileWatch.pdb
Imports
sqlite3
sqlite3_prepare
sqlite3_column_int64
sqlite3_column_int
sqlite3_column_count
sqlite3_step
sqlite3_errmsg
sqlite3_open16
sqlite3_close
sqlite3_bind_text16
sqlite3_bind_int64
sqlite3_bind_int
sqlite3_reset
sqlite3_finalize
sqlite3_prepare16
wmvcore
WMCreateSyncReader
WMCreateEditor
wininet
FindFirstUrlCacheEntryW
FindCloseUrlCache
InternetOpenA
InternetOpenUrlW
InternetSetOptionW
FindNextUrlCacheEntryW
InternetReadFile
HttpQueryInfoW
InternetGetConnectedState
InternetCloseHandle
urlmon
URLDownloadToFileW
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
WriteFile
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
InterlockedExchange
GetACP
GetLocaleInfoA
LocalFree
GetVersionExW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetExitCodeThread
CloseHandle
TerminateThread
WritePrivateProfileStringW
GetCurrentDirectoryW
GetModuleFileNameW
CopyFileW
CreateDirectoryW
ExitThread
CreateMutexW
OpenMutexW
ReleaseMutex
GetPrivateProfileStringW
Sleep
GetLastError
GetTickCount
FindFirstChangeNotificationW
FileTimeToSystemTime
FileTimeToLocalFileTime
MultiByteToWideChar
ReadFile
SetFilePointer
CreateFileW
lstrlenW
WideCharToMultiByte
GetFileAttributesExW
FindClose
FindFirstFileW
InterlockedIncrement
InterlockedDecrement
lstrlenA
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
RtlUnwind
GetThreadLocale
WaitForSingleObject
GetProcessHeap
HeapSize
SetLastError
TlsAlloc
VirtualQuery
SetUnhandledExceptionFilter
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
GetSystemTimeAsFileTime
CreateThread
user32
MessageBoxW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ole32
CLSIDFromString
CoInitialize
OleRun
CoCreateInstance
CoUninitialize
CLSIDFromProgID
oleaut32
VariantClear
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo
shlwapi
PathFindExtensionW
PathFileExistsW
StrStrIW
PathIsDirectoryW
PathFindFileNameW
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zfun_FileWatch.ini
-
PlugIns/zfun_LogicalDriveScan.dll.dll windows:4 windows x86 arch:x86
e28a725d45fb603c36342783c9853ecc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\工作\E-Space\ESpace.root\Trash_Release\LogicalDriveScan\LogicalDriveScan.pdb
Imports
sqlite3
sqlite3_prepare
sqlite3_column_int64
sqlite3_column_int
sqlite3_column_count
sqlite3_reset
sqlite3_step
sqlite3_errmsg
sqlite3_open16
sqlite3_close
sqlite3_bind_text16
sqlite3_bind_int64
sqlite3_bind_int
sqlite3_finalize
sqlite3_prepare16
wmvcore
WMCreateSyncReader
WMCreateEditor
wininet
InternetOpenUrlW
HttpQueryInfoW
InternetReadFile
InternetSetOptionW
InternetOpenA
InternetCloseHandle
InternetGetConnectedState
urlmon
URLDownloadToFileW
kernel32
ExitThread
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetSystemInfo
VirtualProtect
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
LoadLibraryA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
WriteFile
GetTimeZoneInformation
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
GetExitCodeThread
LocalFree
GetSystemTime
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WaitForSingleObject
CreateMutexW
OpenMutexW
ReleaseMutex
GetPrivateProfileStringW
WritePrivateProfileStringW
Sleep
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetCurrentDirectoryW
GetModuleFileNameW
GetWindowsDirectoryW
GetTickCount
GetDriveTypeW
GetLogicalDriveStringsW
FileTimeToSystemTime
FileTimeToLocalFileTime
MultiByteToWideChar
ReadFile
SetFilePointer
CreateFileW
lstrlenW
WideCharToMultiByte
GetFileAttributesExW
InterlockedIncrement
InterlockedDecrement
GetLastError
lstrlenA
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
HeapCreate
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
ExitProcess
TerminateThread
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
VirtualQuery
GetModuleFileNameA
CreateThread
GetSystemTimeAsFileTime
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcessId
RtlUnwind
user32
MessageBoxW
advapi32
RegQueryValueExW
RegOpenKeyExW
ole32
OleRun
CLSIDFromString
CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromProgID
shell32
SHGetSpecialFolderPathW
oleaut32
VariantClear
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo
shlwapi
PathAppendW
PathFindExtensionW
PathIsDirectoryW
StrStrIW
PathFileExistsW
PathFindFileNameW
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zfun_LogicalDriveScan.ini
-
PlugIns/zfun_PlueSearch.dll.dll windows:4 windows x86 arch:x86
2b49fb96514f0f980f62659740a1d7cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\工作\E-Space\ESpace.root\Trash_Release\PlueSearch\PlueSearch.pdb
Imports
kernel32
GetCurrentProcess
GetCPInfo
GetOEMCP
HeapFree
ExitProcess
RtlUnwind
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapReAlloc
TerminateProcess
ExitThread
CreateThread
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GlobalFlags
WritePrivateProfileStringA
SetErrorMode
lstrcatA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
SetThreadPriority
CloseHandle
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
lstrcmpiA
GetVersion
GetCurrentDirectoryA
GetTickCount
ResumeThread
TerminateThread
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenA
GetLastError
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
InterlockedIncrement
user32
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
SetWindowLongA
GetDlgItem
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
SetWindowTextA
GetClassNameA
MessageBoxA
UnregisterClassA
GetSubMenu
wsprintfA
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
SetMenuItemBitmaps
DestroyMenu
ShowWindow
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageA
SetCursor
SendMessageA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassA
gdi32
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetDeviceCaps
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
SetViewportOrgEx
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
comctl32
ord17
shlwapi
PathFindExtensionA
PathFindFileNameA
ole32
CoUninitialize
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
OleRun
oleaut32
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
VariantCopy
VariantClear
SysAllocStringLen
VariantChangeType
GetErrorInfo
SysAllocString
ws2_32
WSACleanup
WSAStartup
wininet
InternetGetConnectedState
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetSetOptionA
InternetReadFile
InternetCloseHandle
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zfun_httpd.dll.dll windows:4 windows x86 arch:x86
b3451f97662817eef33c1d67a249ef87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
SetFilePointer
FileTimeToSystemTime
GetFileTime
GetFileSize
CreateFileA
GetFileAttributesA
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
CloseHandle
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
GetLastError
lstrlenW
lstrcpyW
GetModuleHandleW
LoadLibraryExW
lstrcmpiW
lstrcpynW
SetLastError
TlsAlloc
LocalFree
SetEnvironmentVariableA
CompareStringW
GetModuleFileNameW
GetCurrentDirectoryW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
FindResourceExW
FindResourceW
LockResource
LoadResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
Sleep
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
TerminateThread
InterlockedExchange
CompareStringA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
WriteFile
GetEnvironmentStringsW
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
VirtualQuery
SetUnhandledExceptionFilter
GetModuleFileNameA
GetCurrentProcessId
GetTickCount
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
GetSystemInfo
VirtualProtect
GetCurrentProcess
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsSetValue
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
ExitProcess
GetSystemTimeAsFileTime
RtlUnwind
ExitThread
CreateThread
GetCommandLineA
QueryPerformanceCounter
TlsFree
user32
LoadImageW
CharNextW
wsprintfW
DestroyWindow
gdi32
CreateDIBSection
SelectObject
DeleteDC
DeleteObject
StretchBlt
BitBlt
GetObjectW
CreateCompatibleDC
advapi32
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExA
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
shell32
SHGetMalloc
SHGetDesktopFolder
ole32
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
oleaut32
VarUI4FromStr
SysAllocStringLen
wininet
InternetTimeFromSystemTimeA
ws2_32
ioctlsocket
connect
select
getsockopt
recv
send
WSAGetLastError
WSACloseEvent
closesocket
socket
gethostbyname
WSAStartup
inet_addr
bind
listen
accept
WSACleanup
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
htons
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zfun_stat.dll.dll windows:4 windows x86 arch:x86
e30d21f371d5cd0557b77c1be71a59e9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\工作\E-Space\ESpace.root\Trash_Release\zface_stat\zfun_stat.pdb
Imports
kernel32
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
GetModuleFileNameW
CloseHandle
ReadFile
GetFileSize
CreateFileW
CreateEventW
ResetEvent
SetEvent
LeaveCriticalSection
SizeofResource
TerminateThread
WaitForSingleObject
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
lstrlenW
lstrcpyW
GetModuleHandleW
GetLastError
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
lstrlenA
DeviceIoControl
GetModuleFileNameA
CreateFileA
IsBadReadPtr
LoadLibraryA
LocalFree
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
EnterCriticalSection
GetFileAttributesW
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCPInfo
GetOEMCP
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemInfo
SetStdHandle
SetFilePointer
VirtualProtect
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetUnhandledExceptionFilter
VirtualQuery
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
IsBadCodePtr
user32
DestroyWindow
CharNextW
MessageBoxW
wsprintfW
advapi32
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExA
RegSetValueExW
ole32
CoTaskMemRealloc
CoTaskMemAlloc
IIDFromString
CoInitialize
CoUninitialize
CoCreateInstance
OleRun
CLSIDFromProgID
CLSIDFromString
CoInitializeSecurity
CoTaskMemFree
oleaut32
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayDestroy
VariantChangeType
SysStringLen
VariantClear
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VarUI4FromStr
SysAllocStringLen
SysFreeString
GetErrorInfo
urlmon
URLDownloadToFileW
netapi32
Netbios
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PlugIns/zfun_up.dll.dll windows:4 windows x86 arch:x86
34a38266eba5c39194cc93a2fe56cbe6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
e:\MyProjects\Zcom客户端工程\zcom.client.vc\zfun_up\Release\zfun_up.pdb
Imports
kernel32
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
GetModuleFileNameW
CloseHandle
ReadFile
GetFileSize
CreateFileW
DeleteFileW
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
lstrlenW
LockResource
GetModuleHandleW
GetLastError
FreeLibrary
LoadLibraryExW
lstrcmpiW
lstrcpynW
lstrlenA
WriteFile
SetFilePointer
Sleep
CopyFileW
TlsFree
SetLastError
LocalFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
SizeofResource
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
lstrcpyW
GetFileAttributesW
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetCPInfo
GetOEMCP
IsBadCodePtr
TlsAlloc
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
VirtualQuery
SetUnhandledExceptionFilter
GetModuleFileNameA
IsBadReadPtr
LoadLibraryA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetCurrentProcess
TerminateProcess
GetTimeZoneInformation
GetSystemInfo
VirtualProtect
GetDateFormatA
GetTimeFormatA
GetModuleHandleA
GetProcAddress
TlsGetValue
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
ExitProcess
GetSystemTimeAsFileTime
RtlUnwind
ExitThread
CreateThread
GetCommandLineA
TlsSetValue
user32
DestroyWindow
MessageBoxW
wsprintfW
KillTimer
SetTimer
CharNextW
advapi32
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExA
RegEnumValueW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
OleRun
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoTaskMemRealloc
oleaut32
VariantClear
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VarUI4FromStr
SysFreeString
GetErrorInfo
shlwapi
SHDeleteKeyW
netapi32
Netbios
wininet
HttpEndRequestW
InternetWriteFile
HttpOpenRequestA
InternetCloseHandle
InternetOpenW
InternetSetOptionW
HttpAddRequestHeadersA
HttpSendRequestExW
InternetConnectW
InternetReadFile
HttpQueryInfoW
urlmon
FindMimeFromData
URLDownloadToFileW
Exports
Exports
zcomGetModuleHeader
Sections
.text Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ZComAgent.dll.dll regsvr32 windows:4 windows x86 arch:x86
f294c1992535f0edf6a7c610846b276d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shell32
SHBrowseForFolderW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
kernel32
CreateFileMappingW
OpenFileMappingW
CloseHandle
UnmapViewOfFile
FormatMessageW
lstrlenW
lstrcpyW
HeapFree
GetProcessHeap
lstrcmpiW
GetFileAttributesW
WideCharToMultiByte
CreateFileW
ReadFile
FlushFileBuffers
GetFileSize
LeaveCriticalSection
EnterCriticalSection
lstrcpynW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentDirectoryW
Sleep
DeleteFileW
GetDiskFreeSpaceW
CopyFileW
SetCurrentDirectoryW
CreateDirectoryW
GetPrivateProfileIntW
MulDiv
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrcatW
GetVersionExA
HeapDestroy
HeapReAlloc
HeapSize
lstrlenA
GetLastError
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetDateFormatA
GetTimeFormatA
SetFilePointer
SetStdHandle
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
WriteFile
GetTimeZoneInformation
GetCPInfo
InterlockedDecrement
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetOEMCP
LCMapStringW
LCMapStringA
GetSystemInfo
GetLocaleInfoA
VirtualProtect
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
TerminateProcess
GetModuleHandleA
GetProcAddress
IsBadWritePtr
VirtualAlloc
GetACP
InterlockedExchange
InterlockedIncrement
MapViewOfFile
LocalFree
RtlUnwind
GetSystemTimeAsFileTime
ExitThread
ResumeThread
CreateThread
GetCommandLineA
ExitProcess
VirtualQuery
HeapCreate
VirtualFree
user32
GetWindowLongW
CallWindowProcW
IsWindow
InvalidateRect
SetWindowLongW
EndPaint
GetClientRect
BeginPaint
IsChild
GetKeyState
LoadCursorW
UnregisterClassW
MessageBoxW
CharNextW
DefWindowProcW
DestroyWindow
wsprintfW
SendMessageW
FindWindowW
PostMessageW
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
ReleaseDC
RegisterClassExW
GetClassInfoExW
GetFocus
CreateWindowExW
GetParent
SetFocus
ShowWindow
GetDC
advapi32
RegSetValueExA
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
ole32
OleRun
CoCreateInstance
CoUninitialize
CLSIDFromProgID
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
OleLoadFromStream
WriteClassStm
OleSaveToStream
StringFromGUID2
CLSIDFromString
oleaut32
RegisterTypeLi
UnRegisterTypeLi
OleCreatePropertyFrame
LoadTypeLi
LoadRegTypeLi
VariantChangeType
VarUI4FromStr
SysAllocStringLen
SysStringLen
VariantClear
VariantCopy
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo
shlwapi
PathFindExtensionW
ws2_32
WSACleanup
closesocket
getsockopt
select
connect
ioctlsocket
socket
inet_addr
htons
WSAStartup
gdi32
CreateRectRgnIndirect
SetTextAlign
TextOutW
CreateDCW
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
GetDeviceCaps
RestoreDC
DeleteDC
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ZcomUpdate.exe.exe windows:4 windows x86 arch:x86
820eb3622a326eee742aa05fb36e6ce0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
d:\工作\E-Space\ESpace.root\Trash_Release\Update\在线升级.pdb
Imports
netapi32
Netbios
kernel32
GetStartupInfoW
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
CreateThread
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetStdHandle
IsBadWritePtr
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTickCount
GlobalFlags
WritePrivateProfileStringW
GetFileTime
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalFindAtomW
GetModuleHandleA
LoadLibraryA
lstrcatW
GetVersionExA
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GlobalAddAtomW
FreeResource
GetCurrentThread
GetCurrentThreadId
lstrcmpW
GlobalDeleteAtom
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
SetLastError
GlobalFree
MulDiv
lstrcpyW
lstrlenW
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
Sleep
CreateMutexW
ReleaseMutex
GetCommandLineW
GetFileAttributesW
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentProcess
CreateDirectoryW
OpenProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CloseHandle
GetModuleHandleW
GetModuleFileNameW
SetCurrentDirectoryW
CopyFileW
MoveFileExW
DeleteFileW
WideCharToMultiByte
CreateProcessW
WaitForSingleObject
FindFirstFileW
FindClose
lstrlenA
GetLastError
InterlockedDecrement
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
InterlockedIncrement
HeapDestroy
user32
PostThreadMessageW
RegisterClipboardFormatW
DestroyMenu
MessageBeep
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
LoadCursorW
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextW
GetForegroundWindow
GetTopWindow
GetMessageTime
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
EqualRect
GetClassInfoW
RegisterClassW
UnregisterClassW
GetDlgCtrlID
DefWindowProcW
SendMessageW
GetWindowThreadProcessId
wsprintfW
EnumWindows
PostQuitMessage
MessageBoxW
ExitWindowsEx
DrawIcon
IsIconic
GetClientRect
EnableWindow
LoadIconW
GetSystemMetrics
CallWindowProcW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
PtInRect
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
SetMenuItemBitmaps
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMessagePos
LoadImageW
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
CharUpperW
PostMessageW
EndDialog
GetNextDlgTabItem
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
GetDesktopWindow
CopyRect
GetDC
ReleaseDC
SetCursor
RegisterWindowMessageW
gdi32
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
Escape
BitBlt
CreateCompatibleDC
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateRectRgnIndirect
GetDeviceCaps
SelectObject
GetObjectW
SetViewportOrgEx
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
shell32
ShellExecuteW
SHFileOperationW
comctl32
ord17
shlwapi
PathIsUNCW
PathFindExtensionW
PathStripToRootW
PathFindFileNameW
oledlg
OleUIBusyW
ole32
CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoCreateInstance
OleRun
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
oleaut32
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocStringLen
VariantChangeType
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo
urlmon
URLDownloadToFileW
Sections
.text Size: 216KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
dat/resume/ZComAgent.dll regsvr32 windows:4 windows x86 arch:x86
f294c1992535f0edf6a7c610846b276d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shell32
SHBrowseForFolderW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
kernel32
CreateFileMappingW
OpenFileMappingW
CloseHandle
UnmapViewOfFile
FormatMessageW
lstrlenW
lstrcpyW
HeapFree
GetProcessHeap
lstrcmpiW
GetFileAttributesW
WideCharToMultiByte
CreateFileW
ReadFile
FlushFileBuffers
GetFileSize
LeaveCriticalSection
EnterCriticalSection
lstrcpynW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentDirectoryW
Sleep
DeleteFileW
GetDiskFreeSpaceW
CopyFileW
SetCurrentDirectoryW
CreateDirectoryW
GetPrivateProfileIntW
MulDiv
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrcatW
GetVersionExA
HeapDestroy
HeapReAlloc
HeapSize
lstrlenA
GetLastError
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetDateFormatA
GetTimeFormatA
SetFilePointer
SetStdHandle
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
WriteFile
GetTimeZoneInformation
GetCPInfo
InterlockedDecrement
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetOEMCP
LCMapStringW
LCMapStringA
GetSystemInfo
GetLocaleInfoA
VirtualProtect
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
TerminateProcess
GetModuleHandleA
GetProcAddress
IsBadWritePtr
VirtualAlloc
GetACP
InterlockedExchange
InterlockedIncrement
MapViewOfFile
LocalFree
RtlUnwind
GetSystemTimeAsFileTime
ExitThread
ResumeThread
CreateThread
GetCommandLineA
ExitProcess
VirtualQuery
HeapCreate
VirtualFree
user32
GetWindowLongW
CallWindowProcW
IsWindow
InvalidateRect
SetWindowLongW
EndPaint
GetClientRect
BeginPaint
IsChild
GetKeyState
LoadCursorW
UnregisterClassW
MessageBoxW
CharNextW
DefWindowProcW
DestroyWindow
wsprintfW
SendMessageW
FindWindowW
PostMessageW
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
ReleaseDC
RegisterClassExW
GetClassInfoExW
GetFocus
CreateWindowExW
GetParent
SetFocus
ShowWindow
GetDC
advapi32
RegSetValueExA
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
ole32
OleRun
CoCreateInstance
CoUninitialize
CLSIDFromProgID
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
OleLoadFromStream
WriteClassStm
OleSaveToStream
StringFromGUID2
CLSIDFromString
oleaut32
RegisterTypeLi
UnRegisterTypeLi
OleCreatePropertyFrame
LoadTypeLi
LoadRegTypeLi
VariantChangeType
VarUI4FromStr
SysAllocStringLen
SysStringLen
VariantClear
VariantCopy
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo
shlwapi
PathFindExtensionW
ws2_32
WSACleanup
closesocket
getsockopt
select
connect
ioctlsocket
socket
inet_addr
htons
WSAStartup
gdi32
CreateRectRgnIndirect
SetTextAlign
TextOutW
CreateDCW
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
GetDeviceCaps
RestoreDC
DeleteDC
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
dat/resume/ZComAgent.dll.dll regsvr32 windows:4 windows x86 arch:x86
f294c1992535f0edf6a7c610846b276d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shell32
SHBrowseForFolderW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
kernel32
CreateFileMappingW
OpenFileMappingW
CloseHandle
UnmapViewOfFile
FormatMessageW
lstrlenW
lstrcpyW
HeapFree
GetProcessHeap
lstrcmpiW
GetFileAttributesW
WideCharToMultiByte
CreateFileW
ReadFile
FlushFileBuffers
GetFileSize
LeaveCriticalSection
EnterCriticalSection
lstrcpynW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentDirectoryW
Sleep
DeleteFileW
GetDiskFreeSpaceW
CopyFileW
SetCurrentDirectoryW
CreateDirectoryW
GetPrivateProfileIntW
MulDiv
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrcatW
GetVersionExA
HeapDestroy
HeapReAlloc
HeapSize
lstrlenA
GetLastError
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetDateFormatA
GetTimeFormatA
SetFilePointer
SetStdHandle
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
WriteFile
GetTimeZoneInformation
GetCPInfo
InterlockedDecrement
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetOEMCP
LCMapStringW
LCMapStringA
GetSystemInfo
GetLocaleInfoA
VirtualProtect
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
TerminateProcess
GetModuleHandleA
GetProcAddress
IsBadWritePtr
VirtualAlloc
GetACP
InterlockedExchange
InterlockedIncrement
MapViewOfFile
LocalFree
RtlUnwind
GetSystemTimeAsFileTime
ExitThread
ResumeThread
CreateThread
GetCommandLineA
ExitProcess
VirtualQuery
HeapCreate
VirtualFree
user32
GetWindowLongW
CallWindowProcW
IsWindow
InvalidateRect
SetWindowLongW
EndPaint
GetClientRect
BeginPaint
IsChild
GetKeyState
LoadCursorW
UnregisterClassW
MessageBoxW
CharNextW
DefWindowProcW
DestroyWindow
wsprintfW
SendMessageW
FindWindowW
PostMessageW
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
ReleaseDC
RegisterClassExW
GetClassInfoExW
GetFocus
CreateWindowExW
GetParent
SetFocus
ShowWindow
GetDC
advapi32
RegSetValueExA
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
ole32
OleRun
CoCreateInstance
CoUninitialize
CLSIDFromProgID
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
OleLoadFromStream
WriteClassStm
OleSaveToStream
StringFromGUID2
CLSIDFromString
oleaut32
RegisterTypeLi
UnRegisterTypeLi
OleCreatePropertyFrame
LoadTypeLi
LoadRegTypeLi
VariantChangeType
VarUI4FromStr
SysAllocStringLen
SysStringLen
VariantClear
VariantCopy
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo
shlwapi
PathFindExtensionW
ws2_32
WSACleanup
closesocket
getsockopt
select
connect
ioctlsocket
socket
inet_addr
htons
WSAStartup
gdi32
CreateRectRgnIndirect
SetTextAlign
TextOutW
CreateDCW
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
GetDeviceCaps
RestoreDC
DeleteDC
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
dat/resume/skin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 719KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Zcom_Init
Zcom_UnInit
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 380KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
downloads/Category.xml.xml
-
downloads/Record.xml
-
downloads/SubCategory.xml.xml
-
oem.xml.xml
-
skin.dll.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 719KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Zcom_Init
Zcom_UnInit
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 380KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
skin/blue/c_bl.bmp
-
skin/blue/c_br.bmp
-
skin/blue/c_close.bmp
-
skin/blue/c_deal.bmp
-
skin/blue/c_help.bmp
-
skin/blue/c_killvirus.bmp
-
skin/blue/c_logo.bmp
-
skin/blue/c_max.bmp
-
skin/blue/c_menu.bmp
-
skin/blue/c_menu_buttons.bmp
-
skin/blue/c_menubk.bmp
-
skin/blue/c_menulbk.bmp
-
skin/blue/c_menurbk.bmp
-
skin/blue/c_min.bmp
-
skin/blue/c_question.bmp
-
skin/blue/c_restore.bmp
-
skin/blue/c_skin_1024.ini
-
skin/blue/c_skin_800.ini
-
skin/blue/c_smallmenu.bmp
-
skin/blue/c_title.bmp
-
skin/blue/c_titlebt.bmp
-
skin/blue/c_tl.bmp
-
skin/blue/c_tr.bmp
-
skin/blue/lock.bmp
-
skin/blue/menu.bmp
-
skin/blue/p_back.bmp
-
skin/blue/p_back_close.bmp
-
skin/blue/p_back_finsh.bmp
-
skin/blue/p_back_schedule.bmp
-
skin/blue/p_back_watch.bmp
-
skin/blue/p_close_down.bmp
-
skin/blue/p_close_normal.bmp
-
skin/blue/p_close_over.bmp
-
skin/blue/p_finsh_more.bmp
-
skin/blue/p_finsh_view.bmp
-
skin/blue/p_quit_false.bmp
-
skin/blue/p_quit_no.bmp
-
skin/blue/p_quit_true.bmp
-
skin/blue/p_quit_yes.bmp
-
skin/blue/p_schedule.bmp
-
skin/blue/p_skin.ini
-
skin/blue/splitter.bmp
-
skin/blue/unlock.bmp
-
skin/default.ini
-
skin/dreamworld/ad/bottom.bmp
-
skin/dreamworld/ad/close1.bmp
-
skin/dreamworld/ad/close2.bmp
-
skin/dreamworld/ad/corner1.bmp
-
skin/dreamworld/ad/corner2.bmp
-
skin/dreamworld/ad/corner3.bmp
-
skin/dreamworld/ad/corner4.bmp
-
skin/dreamworld/ad/head.bmp
-
skin/dreamworld/ad/left.bmp
-
skin/dreamworld/ad/logo.bmp
-
skin/dreamworld/ad/min1.bmp
-
skin/dreamworld/ad/min2.bmp
-
skin/dreamworld/ad/right.bmp
-
skin/dreamworld/flash/close_normal.bmp
-
skin/dreamworld/flash/close_on.bmp
-
skin/dreamworld/flash/delete.bmp
-
skin/dreamworld/flash/empty.bmp
-
skin/dreamworld/flash/full_normal.bmp
-
skin/dreamworld/flash/full_on.bmp
-
skin/dreamworld/flash/game.default.bmp
-
skin/dreamworld/flash/hide.bmp
-
skin/dreamworld/flash/icons.bmp
-
skin/dreamworld/flash/left_normal.bmp
-
skin/dreamworld/flash/left_over.bmp
-
skin/dreamworld/flash/lnk.ico
-
skin/dreamworld/flash/logo.bmp
-
skin/dreamworld/flash/max_normal.bmp
-
skin/dreamworld/flash/max_on.bmp
-
skin/dreamworld/flash/menu_normal.bmp
-
skin/dreamworld/flash/menu_on.bmp
-
skin/dreamworld/flash/min_normal.bmp
-
skin/dreamworld/flash/min_on.bmp
-
skin/dreamworld/flash/play.bmp
-
skin/dreamworld/flash/restore_normal.bmp
-
skin/dreamworld/flash/restore_on.bmp
-
skin/dreamworld/flash/right_normal.bmp
-
skin/dreamworld/flash/right_over.bmp
-
skin/dreamworld/flash/search.bmp
-
skin/dreamworld/music/baidu.bmp
-
skin/dreamworld/music/icons.bmp
-
skin/dreamworld/music/minimode.bmp
-
skin/dreamworld/music/mp3_hotlist.bmp
-
skin/dreamworld/music/player_mainwnd_bk.bmp
-
skin/dreamworld/music/player_next.bmp
-
skin/dreamworld/music/player_order.bmp
-
skin/dreamworld/music/player_order_selected.bmp
-
skin/dreamworld/music/player_pause.bmp
-
skin/dreamworld/music/player_play.bmp
-
skin/dreamworld/music/player_pre.bmp
-
skin/dreamworld/music/player_progress_back.bmp
-
skin/dreamworld/music/player_progress_control.bmp
-
skin/dreamworld/music/player_progress_fill.bmp
-
skin/dreamworld/music/player_radom.bmp
-
skin/dreamworld/music/player_radom_selected.bmp
-
skin/dreamworld/music/player_stop.bmp
-
skin/dreamworld/music/player_volume_back.bmp
-
skin/dreamworld/music/player_volume_control.bmp
-
skin/dreamworld/music/player_volume_fill.bmp
-
skin/dreamworld/music/search.bmp
-
skin/dreamworld/music/setting_cancel.bmp
-
skin/dreamworld/music/setting_next.bmp
-
skin/dreamworld/music/setting_ok.bmp
-
skin/dreamworld/music/setting_pre.bmp
-
skin/dreamworld/music/setting_title.bmp
-
skin/dreamworld/music/webpage_hide.bmp
-
skin/dreamworld/music/webpage_play.bmp
-
skin/dreamworld/music/webpage_reverseselect.bmp
-
skin/dreamworld/music/webpage_selectall.bmp
-
skin/dreamworld/music/webpage_show.bmp
-
skin/dreamworld/set/ItemSel.bmp
-
skin/dreamworld/set/about.bmp
-
skin/dreamworld/set/bk.bmp
-
skin/dreamworld/set/down.bmp
-
skin/dreamworld/set/icons.bmp
-
skin/dreamworld/set/icons2.bmp
-
skin/dreamworld/set/sdown.bmp
-
skin/dreamworld/set/slider.bmp
-
skin/dreamworld/set/sup.bmp
-
skin/dreamworld/set/up.bmp
-
skin/dreamworld/simpleIE/button_back.bmp
-
skin/dreamworld/simpleIE/button_fore.bmp
-
skin/dreamworld/simpleIE/button_refresh.bmp
-
skin/dreamworld/simpleIE/close.bmp
-
skin/dreamworld/simpleIE/close1.bmp
-
skin/dreamworld/simpleIE/combobutton.bmp
-
skin/dreamworld/simpleIE/combox.bmp
-
skin/dreamworld/simpleIE/delete.bmp
-
skin/dreamworld/simpleIE/go.bmp
-
skin/dreamworld/simpleIE/iebar_bk.bmp
-
skin/dreamworld/simpleIE/left.bmp
-
skin/dreamworld/simpleIE/link.bmp
-
skin/dreamworld/simpleIE/link_folder.bmp
-
skin/dreamworld/simpleIE/log.bmp
-
skin/dreamworld/simpleIE/progress.bmp
-
skin/dreamworld/simpleIE/refresh.bmp
-
skin/dreamworld/simpleIE/right.bmp
-
skin/dreamworld/simpleIE/save.bmp
-
skin/dreamworld/simpleIE/search.bmp
-
skin/dreamworld/simpleIE/statusbar_bk.bmp
-
skin/dreamworld/simpleIE/stop.bmp
-
skin/dreamworld/simpleIE/tab.bmp
-
skin/dreamworld/video/button.bmp
-
skin/dreamworld/video/icons.bmp
-
skin/dreamworld/video/logo.bmp
-
skin/dreamworld/video/password_return.bmp
-
skin/dreamworld/video/password_setting.bmp
-
skin/dreamworld/video/search.bmp
-
skin/dreamworld/video/setting_next.bmp
-
skin/dreamworld/video/setting_pre.bmp
-
skin/dreamworld/video/setting_title.bmp
-
skin/imgError.BMP
-
skin/lnk.ico
-
skin/loadmovie.swf
-
skin/noname.BMP
-
skin/noname.JPG.jpg
-
skin/noname.png.png
-
skin/noname2.BMP
-
skin/noname2.JPG.jpg
-
skin/noname2.png.png
-
skin/relate.ico
-
skin/tray.ico
-
sqlite3.dll.dll windows:4 windows x86 arch:x86
40512658f087f2990d621c454c392124
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
EnterCriticalSection
FlushFileBuffers
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetVersionExA
InitializeCriticalSection
InterlockedIncrement
LeaveCriticalSection
LockFile
LockFileEx
MultiByteToWideChar
ReadFile
SetEndOfFile
SetFilePointer
Sleep
UnlockFile
WideCharToMultiByte
WriteFile
msvcrt
_iob
atoi
free
isalnum
isdigit
isspace
isxdigit
localtime
malloc
memcpy
memset
realloc
sprintf
strcat
strcmp
strcpy
strncmp
strncpy
tolower
toupper
Exports
Exports
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_changes
sqlite3_close
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_commit_hook
sqlite3_complete
sqlite3_complete16
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_function
sqlite3_create_function16
sqlite3_data_count
sqlite3_db_handle
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_exec
sqlite3_expired
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_mprintf
sqlite3_open
sqlite3_open16
sqlite3_prepare
sqlite3_prepare16
sqlite3_progress_handler
sqlite3_reset
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_snprintf
sqlite3_step
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_vmprintf
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 416B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
uninst.exe.nsis
-
updateConfig.xml.xml
-
zcom-cfg/zcom-pref.ini
-
新云软件.url.url