ddbf975174e51bd6dea44ad4ce377c90_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ddbf975174e51bd6dea44ad4ce377c90_JaffaCakes118
Size

1.2MB
MD5

ddbf975174e51bd6dea44ad4ce377c90
SHA1

9e2466f6495d4eb6a6aec779e6ff8845775715cf
SHA256

6f8fa12c382a0b50984bc4cde3ff31e2ef74f9cbb57c92f92d0c0573a0d1b152
SHA512

db98fe4b1ac600cba3f1382bc99e4c6530f271aa7de514a21bf0b663dfd7fccc92af1ac1ac8d15cf2f9abc21886960a2555da4a3e13bc3f3826ef83d7871ca47
SSDEEP

24576:7wcOq5DFu7qWQPgC1fDqKxSHpnRpQem/JlNgBgib5RWVG:8heyxgeKxInRieG2xXUG

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/datwjxgq/tools/l2encdec_292/loader.exe	upx
static1/unpack001/datwjxgq/tools/l2encdec_292/loaderCT1++.exe	upx
static1/unpack001/datwjxgq/tools/l2encdec_292/loaderCT1.exe	upx
static1/unpack001/datwjxgq/tools/l2encdec_292/patcher.exe	upx

Unsigned PE 15 IoCs

Checks for missing Authenticode signature.

resource
unpack001/datwjxgq/DAT文件修改器.exe
unpack001/datwjxgq/tools/l2asm-disasm_1093/l2asm.exe
unpack001/datwjxgq/tools/l2asm-disasm_1093/l2disasm.exe
unpack001/datwjxgq/tools/l2asm-disasm_1093/libiconv-2.dll
unpack001/datwjxgq/tools/l2encdec_292/gg-bps.dll
unpack001/datwjxgq/tools/l2encdec_292/l2encdec.exe
unpack001/datwjxgq/tools/l2encdec_292/libgmp-3.dll
unpack001/datwjxgq/tools/l2encdec_292/loader.exe
unpack002/out.upx
unpack001/datwjxgq/tools/l2encdec_292/loaderCT1++.exe
unpack003/out.upx
unpack001/datwjxgq/tools/l2encdec_292/loaderCT1.exe
unpack004/out.upx
unpack001/datwjxgq/tools/l2encdec_292/patcher.exe
unpack005/out.upx

Files

ddbf975174e51bd6dea44ad4ce377c90_JaffaCakes118
.rar
datwjxgq/DAT文件修改器.exe
.exe windows:4 windows x86 arch:x86

61595344ea589be7c7fe9a92274460cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
lstrcpynA
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
MultiByteToWideChar
InterlockedDecrement
WideCharToMultiByte
CreateSemaphoreA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
CompareStringW
CompareStringA
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetACP
HeapSize
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
ReadFile
GetLastError
WaitForMultipleObjects
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetFullPathNameA
FreeLibrary
LoadLibraryA
lstrlenA
GetVersionExA
WritePrivateProfileStringA
CreateThread
CreateEventA
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
FindFirstFileA
FindClose
TerminateProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind
GetStartupInfoA
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
GetFileTime
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
GetFileAttributesA
MoveFileA
CopyFileA
SetCurrentDirectoryA
GetVolumeInformationA
TlsAlloc
LocalAlloc
lstrcmpA
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
SetEndOfFile
UnlockFile
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
CreateProcessA
WaitForSingleObject
CloseHandle
InterlockedIncrement

user32

SetClipboardData
EmptyClipboard
GetSystemMetrics
GetCursorPos
MessageBoxA
SetWindowPos
SendMessageA
DestroyCursor
SetParent
IsWindow
PostMessageA
GetTopWindow
OpenClipboard
GetFocus
GetClientRect
InvalidateRect
ValidateRect
UpdateWindow
GetClipboardData
CloseClipboard
EqualRect
GetWindowRect
SetForegroundWindow
DestroyMenu
IsChild
ReleaseDC
wsprintfA
WaitForInputIdle
GetParent
IsRectEmpty
FillRect
GetDC
SetCursor
LoadCursorA
SetCursorPos
SetActiveWindow
GetSysColor
SetWindowLongA
GetWindowLongA
RedrawWindow
EnableWindow
IsWindowVisible
OffsetRect
PtInRect
DestroyIcon
IntersectRect
SetRect
InflateRect
SetScrollPos
SetScrollRange
GetScrollRange
SetCapture
GetCapture
ReleaseCapture
SetTimer
KillTimer
WinHelpA
SystemParametersInfoA
TranslateMessage
LoadIconA
DrawFrameControl
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetSystemMenu
GetWindowTextA
GetWindowTextLengthA
CharUpperA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
UnregisterClassA
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
GetClassNameA
GetDesktopWindow
LoadStringA
GetSysColorBrush
DeleteMenu
GetClassInfoA
DefWindowProcA
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA

gdi32

DeleteObject
CreateDIBitmap
GetSystemPaletteEntries
CreatePalette
StretchBlt
SelectPalette
RealizePalette
GetDIBits
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBitmap
SelectObject
GetObjectA
CreatePen
SelectClipRgn
FillRgn
CreateRectRgn
CombineRgn
CreateSolidBrush
GetStockObject
CreateFontIndirectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
GetDeviceCaps
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ExcludeClipRect
MoveToEx
LineTo
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
CreateRectRgnIndirect
SetBkColor
PatBlt
GetTextMetricsA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetViewportExtEx
ExtSelectClipRgn

winmm

midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueA
RegCreateKeyExA

shell32

ShellExecuteA
DragQueryFileA
Shell_NotifyIconA

ole32

ReleaseStgMedium
RevokeDragDrop
OleInitialize
CoCreateInstance
OleUninitialize
CLSIDFromString
RegisterDragDrop

oleaut32

UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi

comctl32

ImageList_Destroy
ord17
ImageList_GetIcon
ImageList_Read
ImageList_Duplicate

ws2_32

recvfrom
ioctlsocket
getpeername
accept
recv
WSAAsyncSelect
closesocket
WSACleanup
inet_ntoa

wldap32

ord29

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA
ChooseColorA

Sections

.text
Size: 464KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
datwjxgq/tools/l2asm-disasm_1093/CREDITS
datwjxgq/tools/l2asm-disasm_1093/Changelog
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/actionname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/armorgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/castlename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/chargrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/classinfo-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/commandname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/creditgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/entereventgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/etcitemgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/eula-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/hairaccessorylocgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/hairgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/hennagrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/itemname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/logongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/mobskillanimgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/musicinfo.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/npcgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/npcname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/obscene-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/questname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/recipe-c.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/servername-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/skillgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/skillname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/skillsoundgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/staticobject-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/symbolname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/sysstring-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/systemmsg-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/weapongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C3/zonename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/actionname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/armorgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/castlename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/chargrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/classinfo-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/commandname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/creditgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/entereventgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/etcitemgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/eula-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/hairaccessorylocgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/hairgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/hennagrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/itemname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/logongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/mobskillanimgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/musicinfo.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/npcgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/npcname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/obscene-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/questname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/recipe-c.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/servername-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/skillgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/skillname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/skillsoundgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/staticobject-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/symbolname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/sysstring-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/systemmsg-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/weapongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C4/zonename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/actionname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/armorgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/castlename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/chargrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/classinfo-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/commandname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/creditgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/entereventgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/etcitemgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/eula-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/gametip-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/hairaccessorylocgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/hairgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/hennagrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/huntingzone-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/itemname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/logongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/mobskillanimgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/musicinfo.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/npcgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/npcname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/obscene-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/questname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/raiddata-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/recipe-c.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/servername-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/skillgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/skillname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/skillsoundgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/staticobject-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/symbolname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/sysstring-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/systemmsg-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/weapongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C5/zonename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/actionname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/armorgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/castlename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/chargrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/classinfo-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/clientdata.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/commandname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/creditgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/entereventgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/etcitemgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/eula-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/gametip-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/hairaccessorylocgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/hairgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/hennagrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/huntingzone-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/itemname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/logongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/mobskillanimgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/musicinfo.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/npcgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/npcname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/obscene-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/optiondata_client-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/questname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/raiddata-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/recipe-c.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/servername-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/skillgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/skillname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/skillsoundgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/staticobject-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/symbolname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/sysstring-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/systemmsg-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/variationeffectgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/weapongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/C6/zonename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/actionname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/armorgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/castlename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/chargrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/classinfo-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/commandname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/creditgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/entereventgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/etcitemgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/eula-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/gametip-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/hairaccessorylocgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/hennagrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/huntingzone-e-workaround.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/huntingzone-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/instantzonedata-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/itemname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/logongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/mobskillanimgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/musicinfo.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/npcgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/npcname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/obscene-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/optiondata_client-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/questname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/raiddata-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/recipe-c.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/servername-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/shortcutalias.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/skillgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/skillname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/skillsoundgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/staticobject-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/symbolname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/sysstring-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/systemmsg-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/transformdata.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/variationeffectgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/weapongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1.5/zonename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/actionname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/armorgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/castlename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/chargrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/classinfo-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/commandname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/creditgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/entereventgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/etcitemgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/eula-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/gametip-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/hairaccessorylocgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/hennagrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/huntingzone-e-workaround.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/huntingzone-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/instantzonedata-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/itemname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/logongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/mobskillanimgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/musicinfo.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/npcgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/npcname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/obscene-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/optiondata_client-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/questname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/raiddata-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/recipe-c.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/servername-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/shortcutalias.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/skillgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/skillname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/skillsoundgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/staticobject-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/symbolname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/sysstring-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/systemmsg-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/transformdata.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/variationeffectgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/weapongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT1/zonename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/actionname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/armorgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/castlename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/chargrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/classinfo-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/commandname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/creditgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/entereventgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/etcitemgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/eula-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/gametip-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/hairaccessorylocgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/hennagrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/huntingzone-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/instantzonedata-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/itemname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/logongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/mobskillanimgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/musicinfo.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/npcgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/npcname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/obscene-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/optiondata_client-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/questname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/raiddata-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/recipe-c.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/servername-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/shortcutalias.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/skillgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/skillname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/skillsoundgrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/staticobject-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/symbolname-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/sysstring-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/systemmsg-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/transformdata.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/variationeffectgrp-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/warningnotice-e.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/weapongrp.ddf
datwjxgq/tools/l2asm-disasm_1093/DDF/CT2/zonename-e.ddf
datwjxgq/tools/l2asm-disasm_1093/ISSUES
datwjxgq/tools/l2asm-disasm_1093/MANUAL
datwjxgq/tools/l2asm-disasm_1093/dat转txt.bat
datwjxgq/tools/l2asm-disasm_1093/l2asm.exe
.exe windows:4 windows x86 arch:x86

6b97052355f7989cc3bd1aa1e9a7fd3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libiconv-2

libiconv
libiconv_close
libiconv_open

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_isatty
_unlink
__getmainargs
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_filbuf
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
fwrite
getenv
malloc
memcpy
memset
printf
puts
realloc
signal
strchr
strcmp
strcpy
strlen
strncmp
strncpy
strtod
strtol
strtoul
vfprintf

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
datwjxgq/tools/l2asm-disasm_1093/l2disasm.exe
.exe windows:4 windows x86 arch:x86

968b423df681ee1887a0cceefa68a0ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libiconv-2

libiconv
libiconv_close
libiconv_open

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_isatty
_unlink
__getmainargs
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_filbuf
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fgetc
fopen
fprintf
fputc
fputs
fread
free
fseek
fwrite
getenv
malloc
memcpy
memset
printf
puts
realloc
signal
sprintf
strchr
strcmp
strcpy
strlen
strncmp
strncpy
strtod
strtoul
vfprintf

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
datwjxgq/tools/l2asm-disasm_1093/libiconv-2.dll
.dll windows:4 windows x86 arch:x86

ef47324cae33f2ecfb03504fd029b173

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetACP
GetAtomNameA
GetModuleFileNameA
IsDBCSLeadByteEx
MultiByteToWideChar
WideCharToMultiByte

msvcrt

_strdup
__dllonexit
__lc_codepage
__mb_cur_max
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
qsort
sprintf
strchr
strcmp
strcpy
strlen
strncmp

Exports

Exports

_libiconv_version
aliases2_lookup
aliases_lookup
iconv_canonicalize
libiconv
libiconv_close
libiconv_open
libiconv_relocate
libiconv_set_relocation_prefix
libiconvctl
libiconvlist
locale_charset

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 882KB - Virtual size: 882KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 624B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stab
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_MEM_DISCARDABLE
datwjxgq/tools/l2asm-disasm_1093/linux-dynamic/README
datwjxgq/tools/l2asm-disasm_1093/linux-dynamic/l2asm
.elf linux x86
datwjxgq/tools/l2asm-disasm_1093/linux-dynamic/l2disasm
.elf linux x86
datwjxgq/tools/l2asm-disasm_1093/txt转dat.bat
datwjxgq/tools/l2encdec_292/Changelog
datwjxgq/tools/l2encdec_292/USAGE
datwjxgq/tools/l2encdec_292/gg-bps.dll
.dll windows:4 windows x86 arch:x86

31ef743b9857118763b06b896ce24b1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
Sleep
VirtualProtect

msvcrt

__dllonexit
_assert
_errno
abort
fflush
free
malloc
memcpy
memset

psapi

GetModuleInformation

user32

MessageBoxA

Exports

Exports

KillMe

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 280B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
datwjxgq/tools/l2encdec_292/l2encdec.exe
.exe windows:4 windows x86 arch:x86

710c79c11075f207bafcf2d672e849d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgmp-3

__gmpz_clear
__gmpz_export
__gmpz_import
__gmpz_init
__gmpz_init2
__gmpz_powm
__gmpz_set_ui

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_close
_lseek
_open
_read
_unlink
_write
__getmainargs
__p___argv
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_flsbuf
_iob
_onexit
_setmode
abort
atexit
fprintf
fputc
free
getenv
malloc
memcpy
memmove
memset
printf
puts
signal
strchr
strcmp
strlen
strncmp
strrchr
strtol
vfprintf

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
datwjxgq/tools/l2encdec_292/libgmp-3.dll
.dll windows:4 windows x86 arch:x86

81cfb8b1cdbb1f5dd6398503a69187ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
DeleteCriticalSection
EnterCriticalSection
FindAtomA
GetAtomNameA
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
Sleep

msvcrt

__dllonexit
__mb_cur_max
_assert
_errno
_filbuf
_flsbuf
_iob
_isctype
_pctype
abort
fflush
fgetc
fprintf
fputc
fread
free
fscanf
fwrite
localeconv
malloc
memcpy
memset
printf
putchar
puts
raise
realloc
sscanf
strchr
strcpy
strlen
strtol
ungetc
vfprintf
vsprintf

Exports

Exports

__gmp_0
__gmp_allocate_func
__gmp_asprintf
__gmp_asprintf_final
__gmp_asprintf_funs
__gmp_asprintf_memory
__gmp_asprintf_reps
__gmp_assert_fail
__gmp_assert_header
__gmp_bits_per_limb
__gmp_default_allocate
__gmp_default_fp_limb_precision
__gmp_default_free
__gmp_default_reallocate
__gmp_digit_value_tab
__gmp_divide_by_zero
__gmp_doprnt
__gmp_doprnt_integer
__gmp_doprnt_mpf2
__gmp_doscan
__gmp_errno
__gmp_exception
__gmp_extract_double
__gmp_fib_table
__gmp_fprintf
__gmp_fprintf_funs
__gmp_free_func
__gmp_fscanf
__gmp_fscanf_funs
__gmp_get_memory_functions
__gmp_invalid_operation
__gmp_junk
__gmp_modlimb_invert_table
__gmp_mt_recalc_buffer
__gmp_printf
__gmp_randclear
__gmp_randclear_mt
__gmp_randget_mt
__gmp_randinit
__gmp_randinit_default
__gmp_randinit_lc_2exp
__gmp_randinit_lc_2exp_size
__gmp_randinit_mt
__gmp_randinit_mt_noseed
__gmp_randinit_set
__gmp_randiset_mt
__gmp_rands
__gmp_rands_initialized
__gmp_randseed
__gmp_randseed_ui
__gmp_reallocate_func
__gmp_scanf
__gmp_set_memory_functions
__gmp_snprintf
__gmp_snprintf_funs
__gmp_sprintf
__gmp_sprintf_funs
__gmp_sqrt_of_negative
__gmp_sscanf
__gmp_sscanf_funs
__gmp_tmp_reentrant_alloc
__gmp_tmp_reentrant_free
__gmp_urandomb_ui
__gmp_urandomm_ui
__gmp_vasprintf
__gmp_version
__gmp_vfprintf
__gmp_vfscanf
__gmp_vprintf
__gmp_vscanf
__gmp_vsnprintf
__gmp_vsprintf
__gmp_vsscanf
__gmpf_abs
__gmpf_add
__gmpf_add_ui
__gmpf_ceil
__gmpf_clear
__gmpf_cmp
__gmpf_cmp_d
__gmpf_cmp_si
__gmpf_cmp_ui
__gmpf_div
__gmpf_div_2exp
__gmpf_div_ui
__gmpf_dump
__gmpf_eq
__gmpf_fits_sint_p
__gmpf_fits_slong_p
__gmpf_fits_sshort_p
__gmpf_fits_uint_p
__gmpf_fits_ulong_p
__gmpf_fits_ushort_p
__gmpf_floor
__gmpf_get_d
__gmpf_get_d_2exp
__gmpf_get_default_prec
__gmpf_get_prec
__gmpf_get_si
__gmpf_get_str
__gmpf_get_ui
__gmpf_init
__gmpf_init2
__gmpf_init_set
__gmpf_init_set_d
__gmpf_init_set_si
__gmpf_init_set_str
__gmpf_init_set_ui
__gmpf_inp_str
__gmpf_integer_p
__gmpf_mul
__gmpf_mul_2exp
__gmpf_mul_ui
__gmpf_neg
__gmpf_out_str
__gmpf_pow_ui
__gmpf_random2
__gmpf_reldiff
__gmpf_set
__gmpf_set_d
__gmpf_set_default_prec
__gmpf_set_prec
__gmpf_set_prec_raw
__gmpf_set_q
__gmpf_set_si
__gmpf_set_str
__gmpf_set_ui
__gmpf_set_z
__gmpf_size
__gmpf_sqrt
__gmpf_sqrt_ui
__gmpf_sub
__gmpf_sub_ui
__gmpf_swap
__gmpf_trunc
__gmpf_ui_div
__gmpf_ui_sub
__gmpf_urandomb
__gmpn_add
__gmpn_add_1
__gmpn_add_n
__gmpn_add_nc
__gmpn_addmul_1
__gmpn_addmul_1c
__gmpn_addsub_n
__gmpn_bases
__gmpn_bdivmod
__gmpn_cmp
__gmpn_copyd
__gmpn_copyi
__gmpn_dc_divrem_n
__gmpn_divexact_1
__gmpn_divexact_by3
__gmpn_divexact_by3c
__gmpn_divisible_p
__gmpn_divmod_1
__gmpn_divrem
__gmpn_divrem_1
__gmpn_divrem_1c
__gmpn_divrem_2
__gmpn_dump
__gmpn_fft_best_k
__gmpn_fft_next_size
__gmpn_fib2_ui
__gmpn_gcd
__gmpn_gcd_1
__gmpn_gcdext
__gmpn_get_d
__gmpn_get_str
__gmpn_hamdist
__gmpn_jacobi_base
__gmpn_kara_mul_n
__gmpn_kara_sqr_n
__gmpn_lshift
__gmpn_mod_1
__gmpn_mod_1c
__gmpn_mod_34lsub1
__gmpn_modexact_1_odd
__gmpn_modexact_1c_odd
__gmpn_mul
__gmpn_mul_1
__gmpn_mul_basecase
__gmpn_mul_fft
__gmpn_mul_fft_full
__gmpn_mul_n
__gmpn_mullow_basecase
__gmpn_mullow_n
__gmpn_perfect_square_p
__gmpn_popcount
__gmpn_pow_1
__gmpn_preinv_divrem_1
__gmpn_preinv_mod_1
__gmpn_random
__gmpn_random2
__gmpn_rootrem
__gmpn_rshift
__gmpn_sb_divrem_mn
__gmpn_scan0
__gmpn_scan1
__gmpn_set_str
__gmpn_sqr_basecase
__gmpn_sqr_n
__gmpn_sqrtrem
__gmpn_sub
__gmpn_sub_1
__gmpn_sub_n
__gmpn_sub_nc
__gmpn_submul_1
__gmpn_submul_1c
__gmpn_tdiv_qr
__gmpn_toom3_mul_n
__gmpn_toom3_sqr_n
__gmpn_udiv_qrnnd
__gmpn_umul_ppmm
__gmpq_abs
__gmpq_add
__gmpq_canonicalize
__gmpq_clear
__gmpq_cmp
__gmpq_cmp_si
__gmpq_cmp_ui
__gmpq_div
__gmpq_div_2exp
__gmpq_equal
__gmpq_get_d
__gmpq_get_den
__gmpq_get_num
__gmpq_get_str
__gmpq_init
__gmpq_inp_str
__gmpq_inv
__gmpq_mul
__gmpq_mul_2exp
__gmpq_neg
__gmpq_out_str
__gmpq_set
__gmpq_set_d
__gmpq_set_den
__gmpq_set_f
__gmpq_set_num
__gmpq_set_si
__gmpq_set_str
__gmpq_set_ui
__gmpq_set_z
__gmpq_sub
__gmpq_swap
__gmpz_abs
__gmpz_add
__gmpz_add_ui
__gmpz_addmul
__gmpz_addmul_ui
__gmpz_and
__gmpz_aorsmul_1
__gmpz_array_init
__gmpz_bin_ui
__gmpz_bin_uiui
__gmpz_cdiv_q
__gmpz_cdiv_q_2exp
__gmpz_cdiv_q_ui
__gmpz_cdiv_qr
__gmpz_cdiv_qr_ui
__gmpz_cdiv_r
__gmpz_cdiv_r_2exp
__gmpz_cdiv_r_ui
__gmpz_cdiv_ui
__gmpz_clear
__gmpz_clrbit
__gmpz_cmp
__gmpz_cmp_d
__gmpz_cmp_si
__gmpz_cmp_ui
__gmpz_cmpabs
__gmpz_cmpabs_d
__gmpz_cmpabs_ui
__gmpz_com
__gmpz_combit
__gmpz_congruent_2exp_p
__gmpz_congruent_p
__gmpz_congruent_ui_p
__gmpz_divexact
__gmpz_divexact_gcd
__gmpz_divexact_ui
__gmpz_divisible_2exp_p
__gmpz_divisible_p
__gmpz_divisible_ui_p
__gmpz_dump
__gmpz_export
__gmpz_fac_ui
__gmpz_fdiv_q
__gmpz_fdiv_q_2exp
__gmpz_fdiv_q_ui
__gmpz_fdiv_qr
__gmpz_fdiv_qr_ui
__gmpz_fdiv_r
__gmpz_fdiv_r_2exp
__gmpz_fdiv_r_ui
__gmpz_fdiv_ui
__gmpz_fib2_ui
__gmpz_fib_ui
__gmpz_fits_sint_p
__gmpz_fits_slong_p
__gmpz_fits_sshort_p
__gmpz_fits_uint_p
__gmpz_fits_ulong_p
__gmpz_fits_ushort_p
__gmpz_gcd
__gmpz_gcd_ui
__gmpz_gcdext
__gmpz_get_d
__gmpz_get_d_2exp
__gmpz_get_si
__gmpz_get_str
__gmpz_get_ui
__gmpz_getlimbn
__gmpz_hamdist
__gmpz_import
__gmpz_init
__gmpz_init2
__gmpz_init_set
__gmpz_init_set_d
__gmpz_init_set_si
__gmpz_init_set_str
__gmpz_init_set_ui
__gmpz_inp_raw
__gmpz_inp_str
__gmpz_inp_str_nowhite
__gmpz_invert
__gmpz_ior
__gmpz_jacobi
__gmpz_kronecker_si
__gmpz_kronecker_ui
__gmpz_lcm
__gmpz_lcm_ui
__gmpz_legendre
__gmpz_lucnum2_ui
__gmpz_lucnum_ui
__gmpz_millerrabin
__gmpz_mod
__gmpz_mul
__gmpz_mul_2exp
__gmpz_mul_si
__gmpz_mul_ui
__gmpz_n_pow_ui
__gmpz_neg
__gmpz_nextprime
__gmpz_out_raw
__gmpz_out_str
__gmpz_perfect_power_p
__gmpz_perfect_square_p
__gmpz_popcount
__gmpz_pow_ui
__gmpz_powm
__gmpz_powm_ui
__gmpz_probab_prime_p
__gmpz_random
__gmpz_random2
__gmpz_realloc
__gmpz_realloc2
__gmpz_remove
__gmpz_root
__gmpz_rootrem
__gmpz_rrandomb
__gmpz_scan0
__gmpz_scan1
__gmpz_set
__gmpz_set_d
__gmpz_set_f
__gmpz_set_q
__gmpz_set_si
__gmpz_set_str
__gmpz_set_ui
__gmpz_setbit
__gmpz_si_kronecker
__gmpz_size
__gmpz_sizeinbase
__gmpz_sqrt
__gmpz_sqrtrem
__gmpz_sub
__gmpz_sub_ui
__gmpz_submul
__gmpz_submul_ui
__gmpz_swap
__gmpz_tdiv_q
__gmpz_tdiv_q_2exp
__gmpz_tdiv_q_ui
__gmpz_tdiv_qr
__gmpz_tdiv_qr_ui
__gmpz_tdiv_r
__gmpz_tdiv_r_2exp
__gmpz_tdiv_r_ui
__gmpz_tdiv_ui
__gmpz_tstbit
__gmpz_ui_kronecker
__gmpz_ui_pow_ui
__gmpz_ui_sub
__gmpz_urandomb
__gmpz_urandomm
__gmpz_xor
isascii

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
datwjxgq/tools/l2encdec_292/loader.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 272B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
datwjxgq/tools/l2encdec_292/loaderCT1++.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 272B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
datwjxgq/tools/l2encdec_292/loaderCT1.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 240B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
datwjxgq/tools/l2encdec_292/patcher.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 288B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
datwjxgq/tools/l2encdec_292/加密.bat
datwjxgq/tools/l2encdec_292/解加密.bat
datwjxgq/tools/手动修改教程.txt
使用说明.url
极速软件下载.url
.url
统一解密密码：www.jisuxz.com.txt

Sharing

General

Malware Config

Signatures

Files

61595344ea589be7c7fe9a92274460cf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wldap32

comdlg32

Sections

.text Size: 464KB - Virtual size: 461KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 60KB - Virtual size: 182KB

.rsrc Size: 24KB - Virtual size: 23KB

6b97052355f7989cc3bd1aa1e9a7fd3d

Headers

File Characteristics

Imports

libiconv-2

kernel32

msvcrt

Sections

.text Size: 28KB - Virtual size: 28KB

.data Size: 1024B - Virtual size: 528B

.rdata Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 1.3MB

.idata Size: 1KB - Virtual size: 1KB

968b423df681ee1887a0cceefa68a0ff

Headers

File Characteristics

Imports

libiconv-2

kernel32

msvcrt

Sections

.text Size: 29KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 512B

.rdata Size: 10KB - Virtual size: 9KB

.bss Size: - Virtual size: 1.3MB

.idata Size: 1KB - Virtual size: 1KB

ef47324cae33f2ecfb03504fd029b173

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 90KB - Virtual size: 89KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 882KB - Virtual size: 882KB

.bss Size: - Virtual size: 624B

.edata Size: 512B - Virtual size: 370B

.idata Size: 1024B - Virtual size: 860B

.reloc Size: 3KB - Virtual size: 3KB

.stab Size: 253KB - Virtual size: 252KB

.stabstr Size: 211KB - Virtual size: 210KB

31ef743b9857118763b06b896ce24b1d

Headers

File Characteristics

Imports

kernel32

msvcrt

psapi

user32

Exports

.text
Size: 464KB - Virtual size: 461KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 60KB - Virtual size: 182KB

.rsrc
Size: 24KB - Virtual size: 23KB

.text
Size: 28KB - Virtual size: 28KB

.data
Size: 1024B - Virtual size: 528B

.rdata
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 1.3MB

.idata
Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 512B

.rdata
Size: 10KB - Virtual size: 9KB

.bss
Size: - Virtual size: 1.3MB

.idata
Size: 1KB - Virtual size: 1KB

.text
Size: 90KB - Virtual size: 89KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 882KB - Virtual size: 882KB

.bss
Size: - Virtual size: 624B

.edata
Size: 512B - Virtual size: 370B

.idata
Size: 1024B - Virtual size: 860B

.reloc
Size: 3KB - Virtual size: 3KB

.stab
Size: 253KB - Virtual size: 252KB

.stabstr
Size: 211KB - Virtual size: 210KB

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 52B

.rdata
Size: 1024B - Virtual size: 640B

.bss
Size: - Virtual size: 280B

.edata
Size: 512B - Virtual size: 68B

.idata
Size: 1024B - Virtual size: 696B

.reloc
Size: 512B - Virtual size: 252B

.text
Size: 50KB - Virtual size: 50KB

.data
Size: 5KB - Virtual size: 4KB

.rdata
Size: 18KB - Virtual size: 17KB

.bss
Size: - Virtual size: 10KB

.idata
Size: 1KB - Virtual size: 1KB

.text
Size: 166KB - Virtual size: 165KB

.data
Size: 512B - Virtual size: 144B

.rdata
Size: 15KB - Virtual size: 14KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 10KB - Virtual size: 10KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB

UPX0
Size: - Virtual size: 28KB

UPX1
Size: 6KB - Virtual size: 8KB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 120B

.rdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 272B

.idata
Size: 1KB - Virtual size: 1KB

UPX0
Size: - Virtual size: 24KB

UPX1
Size: 6KB - Virtual size: 8KB

UPX2
Size: 512B - Virtual size: 4KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 124B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 272B

.idata
Size: 1KB - Virtual size: 1KB