fb36e0c564eeee21c727a58827c5527a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fb36e0c564eeee21c727a58827c5527a_JaffaCakes118
Size

8.0MB
MD5

fb36e0c564eeee21c727a58827c5527a
SHA1

fda2fbf57e0d27d0c59a69421fb5078fe150c289
SHA256

64627398fed1434661f4e4c4e58b89d2cf108fc976db92276b9def299ab9d0b9
SHA512

a7788579b1afb3b332b4fd0d062d94ac5b91f340f91e7f7b11271cd6e5f6ce3e6b302122c9c74ed8a5eba8981cacd845309b16db55c20ef8b0a9035472dd954f
SSDEEP

196608:oOYw4LUfcDGiICBWLWRoCJSVhWt3u7YrxrbMELhfdyDzgL/WkS2gfGEo:oCizWLNw3McrzFyPOqGEo

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 2 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/$PLUGINSDIR/GetVersion.dll	acprotect
static1/unpack003/$PLUGINSDIR/GetVersion.dll	acprotect

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/$PLUGINSDIR/GetVersion.dll	upx
static1/unpack003/$PLUGINSDIR/GetVersion.dll	upx

Unsigned PE 25 IoCs

Checks for missing Authenticode signature.

resource
fb36e0c564eeee21c727a58827c5527a_JaffaCakes118
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/GetVersion.dll
unpack002/out.upx
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/rfshdktp.dll
unpack001/GdiPlus.dll
unpack001/HWTool.exe
unpack001/HanWenBook.exe
unpack001/OBCrashReport.exe
unpack001/OBCrashRpt.dll
unpack001/OBModuleDraw.dll
unpack001/OBModuleInfo.dll
unpack001/OBModuleMgr.dll
unpack001/OBModuleTool.dll
unpack001/OBModuleUser.dll
unpack001/Uninstall.exe
unpack003/$PLUGINSDIR/ExecCmd.dll
unpack003/$PLUGINSDIR/FindProcDLL.dll
unpack003/$PLUGINSDIR/GetVersion.dll
unpack004/out.upx
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/inetc.dll
unpack003/$PLUGINSDIR/nsDialogs.dll

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/Uninstall.exe	nsis_installer_1
static1/unpack001/Uninstall.exe	nsis_installer_2

Files

fb36e0c564eeee21c727a58827c5527a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
lstrcmpA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
FreeLibrary
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

FindProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/GetVersion.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

WindowsName
WindowsPlatformArchitecture
WindowsPlatformId
WindowsServerName
WindowsServicePack
WindowsServicePackBuild
WindowsServicePackMajor
WindowsServicePackMinor
WindowsType
WindowsVersion

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/rfshdktp.dll
.dll windows:4 windows x86 arch:x86

042f3c184e7c0923b6325ab1dc09aed7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

SHGetSpecialFolderLocation
SHChangeNotify

Exports

Exports

refreshDesktop

Sections

.text
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GdiPlus.dll
.dll windows:6 windows x86 arch:x86

05d4c65d0c1cdfb83215bd2f69493483

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

MicrosoftWindowsGdiPlus-1.1.7601.17514-gdiplus.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
free
malloc
_XcptFilter
wcsnlen
_vsnprintf
wcscpy_s
_wcsupr_s
_vsnwprintf
_ftol2
_CIatan2
_CIsqrt
_CIsin
_CIcos
_ftol2_sse
wcsncpy_s
memset
memcpy
_assert
_purecall
_CIexp
wcsncmp
_finite
memmove
_stricmp
sprintf_s
_CIatan
memcpy_s
wcsstr
_wtoi
_CIlog

kernel32

GetProfileSectionA
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
HeapFree
HeapReAlloc
LoadLibraryA
GetModuleFileNameA
CompareStringA
FreeLibraryAndExitThread
FreeLibrary
CreateThread
WaitForSingleObject
SetEvent
CloseHandle
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemDefaultLCID
GetACP
GetVersionExA
GetWindowsDirectoryA
GetSystemDirectoryW
GetProcAddress
GetSystemInfo
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
LocalReAlloc
MulDiv
LocalAlloc
LocalFree
lstrcmpiA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
Sleep
GetFileTime
SearchPathW
SearchPathA
GetOEMCP
SetEndOfFile
WriteFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
IsDBCSLeadByteEx
CreateSemaphoreA
CreateFileW
LoadLibraryW
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetFileAttributesW
LoadLibraryExW
VirtualFree
GetLastError
SetLastError
GlobalAlloc
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetModuleHandleW
HeapDestroy

user32

ReleaseDC
GetDC
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterWindowMessageA
RegisterClassA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
CreateIconIndirect
GetIconInfo
GetDCEx
GetWindowLongA
GetClassLongA
SystemParametersInfoA
ClientToScreen
IsRectEmpty
IntersectRect
InflateRect
LoadImageA
LoadImageW
UnionRect
SetRectEmpty
OffsetRect

gdi32

ExtEscape
GetTextCharset
GetCurrentPositionEx
ArcTo
SetArcDirection
GetPath
AbortPath
FlattenPath
WidenPath
Ellipse
AngleArc
RoundRect
PolyDraw
Pie
Chord
Arc
OffsetClipRgn
GetRgnBox
SetPaletteEntries
ResizePalette
ExcludeClipRect
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreateDIBitmap
CreatePen
CreatePatternBrush
ExtCreateRegion
Polyline
PolyPolyline
StrokeAndFillPath
FillPath
SetPolyFillMode
PolyBezier
SelectClipPath
LineTo
GetGraphicsMode
ModifyWorldTransform
BeginPath
PolylineTo
PolyBezierTo
MoveToEx
CloseFigure
EndPath
StrokePath
ExtSelectClipRgn
GetPixel
ExtTextOutA
CreateSolidBrush
SetMiterLimit
FillRgn
GetNearestPaletteIndex
StretchBlt
CreateCompatibleBitmap
GetMiterLimit
GetBkMode
GetTextAlign
GetArcDirection
GetPolyFillMode
GetTextCharsetInfo
TranslateCharsetInfo
CombineRgn
ExtCreatePen
CreateDIBPatternBrushPt
GetWorldTransform
GetROP2
Rectangle
Polygon
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
DPtoLP
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
SetROP2
PolyPolygon
IntersectClipRect
PlayMetaFileRecord
ExtTextOutW
SetDIBColorTable
SetBitmapBits
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetGraphicsMode
SetWorldTransform
RestoreDC
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportOrgEx
SetViewportExtEx
SetWindowOrgEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
EnumEnhMetaFile
PlayEnhMetaFileRecord
GetObjectType
GetMetaFileBitsEx
EnumMetaFile
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
SetDIBits
GdiFlush
CreateBrushIndirect
PatBlt
GetPaletteEntries
RealizePalette
GetObjectW
GetDIBits
CreateDIBSection
CreateCompatibleDC
GetDIBColorTable
GetCurrentObject
GetObjectA
GetDCOrgEx
Escape
SetICMMode
GetMapMode
GetViewportOrgEx
GetWindowOrgEx
GetViewportExtEx
GetWindowExtEx
LPtoDP
GetRandomRgn
CreateRectRgn
CreateICA
CreateDCA
DrawEscape
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC

ole32

PropVariantClear
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapApplyEffect
GdipBitmapConvertFormat
GdipBitmapCreateApplyEffect
GdipBitmapGetHistogram
GdipBitmapGetHistogramSize
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipConvertToEmfPlus
GdipConvertToEmfPlusToFile
GdipConvertToEmfPlusToStream
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateEffect
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteEffect
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageFX
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFindFirstImageItem
GdipFindNextImageItem
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEffectParameterSize
GdipGetEffectParameters
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageItemData
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipGraphicsSetAbort
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipImageSetAbort
GdipInitializePalette
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPlayTSClientRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HWTool.exe
.exe windows:5 windows x86 arch:x86

a26fc8a0e5a3c34dd1dc41d46bd4e118

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN_ROOT\trunk\Reader\HanWenBook_V1_Spread\HanwenBook\Out\HWTool.pdb

Imports

kernel32

GetProcessHeap
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
HeapQueryInformation
GetFileInformationByHandle
PeekNamedPipe
GetStringTypeW
OutputDebugStringW
LCMapStringW
WriteConsoleW
HeapSize
HeapReAlloc
HeapAlloc
HeapFree
GetStdHandle
SetStdHandle
GetDriveTypeW
FindFirstFileExW
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
CreateMutexW
RtlUnwind
RaiseException
GetFullPathNameA
ExitThread
CreateThread
MoveFileExW
AreFileApisANSI
GetModuleHandleExW
ExitProcess
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
GetWindowsDirectoryW
GetTickCount
GetFileType
GetFileTime
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
VirtualQuery
VirtualAlloc
SetEnvironmentVariableA
GetSystemInfo
SleepEx
ExpandEnvironmentStringsA
GetWindowsDirectoryA
GetVersionExA
GetLocalTime
GlobalGetAtomNameW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
CreateDirectoryW
FlushFileBuffers
CreateFileW
GetThreadLocale
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
InterlockedIncrement
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InterlockedDecrement
FileTimeToSystemTime
FindNextFileW
FindFirstFileW
FileTimeToLocalFileTime
CopyFileW
FormatMessageW
LocalFree
GlobalSize
MulDiv
GlobalUnlock
GlobalFindAtomW
LoadLibraryW
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryW
GetVersion
SetLastError
DecodePointer
EncodePointer
OutputDebugStringA
GetFileAttributesW
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
GlobalFree
FreeResource
FindResourceW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThread
InterlockedExchange
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FormatMessageA
GetCurrentThreadId
FindClose
CloseHandle
WaitForSingleObject
TerminateThread
Sleep
DeleteFileW
WinExec
TerminateProcess
OpenProcess
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
GetCommandLineW
GetLastError
GetTimeZoneInformation

user32

CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
LockWindowUpdate
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
GetIconInfo
DrawIconEx
DrawFocusRect
PostThreadMessageW
SetParent
GetSystemMenu
UnionRect
MapVirtualKeyW
GetKeyNameTextW
GetMenuDefaultItem
RegisterClipboardFormatW
ReuseDDElParam
UnpackDDElParam
LoadImageW
SetRectEmpty
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
UnregisterClassW
SendDlgItemMessageA
InflateRect
GetMenuItemInfoW
DestroyMenu
CharUpperW
DestroyIcon
GetSysColorBrush
MessageBeep
GetNextDlgGroupItem
IsRectEmpty
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableW
OffsetRect
CharNextW
RealChildWindowFromPoint
DeleteMenu
SystemParametersInfoW
CopyImage
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
GetDesktopWindow
DestroyAcceleratorTable
EndDialog
CreateDialogIndirectParamW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
FillRect
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
SetCursorPos
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
CharUpperBuffW
FrameRect
DrawMenuBar
GetWindowRgn
DestroyCursor
CreateMenu
GetWindowPlacement
DestroyWindow
IsChild
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
GetNextDlgTabItem
DefFrameProcW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
GetWindowRect
GetSubMenu
LoadMenuW
GetLastActivePopup
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
ShowOwnedPopups
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
MapDialogRect
GetWindow
GetParent
SetWindowContextHelpId
SetWindowPos
PostQuitMessage
PostMessageW
UpdateWindow
IsWindow
SetTimer
GetWindowLongW
SetWindowLongW
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SendMessageW
LoadIconW
CopyRect
InvalidateRect
EnableWindow
MessageBoxW
KillTimer

gdi32

OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileW
CreateDCW
GetBkColor
GetTextColor
SetTextAlign
CreateRectRgnIndirect
GetRgnBox
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
SetWindowOrgEx
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
SetROP2
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
CreatePolygonRgn
CreateSolidBrush
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetDeviceCaps
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
BitBlt
SetBoundsRect
CreateCompatibleBitmap
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteValueW
RegOpenKeyExA
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegQueryValueExA
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExA

shell32

SHGetFolderPathW
SHGetFileInfoW
DragQueryFileW
DragFinish
ShellExecuteW
SHAppBarMessage
SHBrowseForFolderW
CommandLineToArgvW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
SHCreateStreamOnFileEx
StrFormatKBSizeW

uxtheme

GetThemeSysColor
GetCurrentThemeName
GetThemeColor
IsAppThemed
GetThemePartSize
CloseThemeData
OpenThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeText
GetWindowTheme

ole32

OleTranslateAccelerator
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoInitializeEx
CoCreateGuid
CoUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
DoDragDrop
OleDestroyMenuDescriptor
OleLockRunning
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator

oleaut32

SysAllocString
VarBstrFromDate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
OleCreateFontIndirect
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipMeasureString
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawRectangleI
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStream
GdipDrawString
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImagePointRectI
GdipGetImageHeight
GdipDrawImageRectRect
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipCreateSolidFill
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCloneBrush

iphlpapi

GetNetworkParams

ws2_32

closesocket
bind
socket
recv
WSAGetLastError
getpeername
getsockname
getsockopt
setsockopt
htons
WSASetLastError
__WSAFDIsSet
select
htonl
gethostname
ntohs
connect
inet_addr
ioctlsocket
recvfrom
send
WSACleanup
WSAStartup

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HanWenBook.exe
.exe windows:5 windows x86 arch:x86

263cda3c4502e517b92505a779fc1aee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN_ROOT\trunk\Reader\HanWenBook_V1\HanwenBook\Out\HanwenBook.pdb

Imports

obmodulemgr

OBCreateManager

obcrashrpt

ord23
ord9
ord7
ord17
ord15

imm32

ImmGetContext
ImmSetOpenStatus
ImmReleaseContext
ImmGetOpenStatus

kernel32

GetDriveTypeW
SetEnvironmentVariableA
HeapReAlloc
GetModuleHandleExW
AreFileApisANSI
CreateThread
ExitThread
HeapSize
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
HeapFree
GetProcessHeap
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
WriteConsoleW
GetFullPathNameA
RtlUnwind
GetSystemTimeAsFileTime
FindResourceExW
VirtualProtect
GetProfileIntW
GetTempPathW
GetTempFileNameW
SearchPathW
GetWindowsDirectoryW
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
SetErrorMode
GetFileSizeEx
GetFileAttributesExW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
GetPrivateProfileStringW
GetPrivateProfileIntW
FindNextFileW
FileTimeToLocalFileTime
CompareStringA
lstrcmpA
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
IsProcessorFeaturePresent
GetThreadLocale
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
ResumeThread
SuspendThread
SetThreadPriority
CopyFileW
GlobalFree
GlobalSize
MulDiv
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
FreeResource
FreeLibrary
GetSystemDirectoryW
GetVersion
SetLastError
DecodePointer
EncodePointer
OutputDebugStringA
WideCharToMultiByte
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
GetCurrentProcess
SetEvent
ExitProcess
GetCurrentProcessId
DeleteFileA
FileTimeToSystemTime
GetFileTime
GetTickCount
RemoveDirectoryW
GetFileAttributesW
SetFileAttributesW
TerminateProcess
OpenProcess
CreateEventW
GetModuleHandleW
GetLastError
CreateMutexW
GetCommandLineW
DeleteFileW
WaitForSingleObject
CreateProcessW
CloseHandle
WriteFile
CreateFileW
InterlockedExchange
WritePrivateProfileStringW
FindClose
FindFirstFileW
GetModuleFileNameW
LocalFree
FormatMessageW
RaiseException
GetCurrentDirectoryW
MultiByteToWideChar
lstrlenW
FindResourceW
LoadResource
LockResource
SizeofResource
OutputDebugStringW
GetProcAddress
LoadLibraryW
IsDebuggerPresent
GetVersionExW
HeapAlloc
GetStdHandle
CreateDirectoryW

user32

TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetSysColor
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
SetFocus
GetDlgCtrlID
GetDlgItem
SetWindowPlacement
GetWindowPlacement
IsChild
GetClassInfoExW
RegisterClassW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
ValidateRect
SetRectEmpty
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackMouseEvent
DestroyWindow
ShowWindow
SetActiveWindow
IntersectRect
UnhookWindowsHookEx
SetWindowsHookExW
CallWindowProcW
CallNextHookEx
SetPropW
GetClassNameW
RemovePropW
GetPropW
AttachThreadInput
GetWindowThreadProcessId
GetActiveWindow
GetForegroundWindow
IsZoomed
GetIconInfo
SystemParametersInfoW
LoadIconW
PostThreadMessageW
SetClassLongW
GetClassLongW
UpdateLayeredWindow
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
MessageBoxW
InsertMenuW
GetSystemMenu
GetLastActivePopup
FindWindowW
SetWindowRgn
GetClassInfoW
PostQuitMessage
IsIconic
SetForegroundWindow
SetParent
BringWindowToTop
GetSystemMetrics
LoadCursorFromFileW
IsRectEmpty
EqualRect
MapVirtualKeyW
GetNextDlgTabItem
GetWindow
CharNextW
RegisterWindowMessageW
GetCapture
SetCaretPos
GetCaretPos
UpdateWindow
SetTimer
KillTimer
ReleaseCapture
SetCapture
ScreenToClient
GetCursorPos
EnableMenuItem
AppendMenuW
CreatePopupMenu
SetCursor
HideCaret
GetAsyncKeyState
GetFocus
GetDesktopWindow
OffsetRect
WindowFromPoint
PtInRect
ClientToScreen
CopyRect
GetKeyState
InflateRect
IsWindowVisible
EnableWindow
InvalidateRect
GetDC
ReleaseDC
GetUpdateRect
PostMessageW
GetClientRect
RedrawWindow
CreateWindowExW
LoadCursorW
DefWindowProcW
GetParent
SendMessageW
EndPaint
BeginPaint
GetWindowLongW
SetWindowLongW
SetRect
GetWindowRect
SubtractRect
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
CopyIcon
SetMenuDefaultItem
EnableScrollBar
CharUpperBuffW
SetCursorPos
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
FillRect
SetLayeredWindowAttributes
SetWindowPos
IsWindow
GetWindowRgn
DrawIcon
GetComboBoxInfo
DestroyCursor
CreateMenu
GetWindowDC
UnionRect
InvertRect
GetMenuDefaultItem
LockWindowUpdate
EnumChildWindows
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
WaitMessage
ModifyMenuW
IsMenu
NotifyWinEvent
DeleteMenu
DrawStateW
EnumDisplayMonitors
MonitorFromPoint
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
UnregisterClassW
RegisterClipboardFormatW
GetNextDlgGroupItem
IsClipboardFormatAvailable
RealChildWindowFromPoint
GetSysColorBrush
SendDlgItemMessageA
CopyImage
ShowOwnedPopups
MessageBeep
InvalidateRgn
CopyAcceleratorTableW
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamW
LoadMenuW
GetMenuItemInfoW
DestroyMenu
CharUpperW
GetKeyNameTextW
TranslateMessage
GetMessageW
RemoveMenu
GetMenuState
GetMenuStringW
GetDoubleClickTime

gdi32

CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileW
CreateDCW
PatBlt
CreateBitmap
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
SetRectRgn
DPtoLP
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
RealizePalette
SetPixel
SetDIBColorTable
CreateRoundRectRgn
OffsetRgn
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
CreateCompatibleBitmap
GetObjectW
StretchBlt
SetTextColor
SetBkColor
CreateFontIndirectW
GetStockObject
CreateRectRgnIndirect
GetDeviceCaps
CombineRgn
CreateRectRgn
SelectClipRgn
BitBlt
CreateSolidBrush
CreateDIBSection
CreateCompatibleDC
DeleteDC
DeleteObject
GetTextExtentPoint32W
SelectObject
SetStretchBltMode

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegQueryValueW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW

shell32

SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
DragQueryFileW
SHGetFileInfoW
ShellExecuteA
SHAppBarMessage
Shell_NotifyIconW
CommandLineToArgvW
SHChangeNotify
ShellExecuteW
DragFinish

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathRemoveFileSpecW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
SHCreateStreamOnFileEx
StrFormatKBSizeW

uxtheme

DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
GetThemePartSize
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
DrawThemeText
GetWindowTheme
DrawThemeParentBackground

ole32

CoRegisterMessageFilter
ReleaseStgMedium
OleDuplicateData
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
CoCreateGuid
CoInitialize
CoFreeUnusedLibraries
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning

oleaut32

DispCallFunc
SysAllocString
VarBstrCmp
VariantCopy
VariantChangeType
SysStringLen
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantClear
VarBstrFromDate
OleCreateFontIndirect
LoadRegTypeLi
SysFreeString
VariantInit

oledlg

OleUIBusyW

rpcrt4

UuidFromStringW
UuidIsNil
UuidCreateNil

gdiplus

GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipLoadImageFromStream
GdipLoadImageFromFile
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapGetPixel
GdipCreateBitmapFromGraphics
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteFontFamily
GdipCloneImage
GdipGetFontHeight
GdipGetRegionBoundsI
GdipCombineRegionPath
GdipSetEmpty
GdipCreateFont
GdipCreateRegion
GdipGetClip
GdipResetClip
GdipSetClipHrgn
GdipSetClipRegion
GdipSetClipRectI
GdipDrawImageRectRectI
GdipDrawImageRectI
GdipMeasureString
GdipDrawString
GdipFillPolygonI
GdipFillRectanglesI
GdipFillRectangleI
GdipDrawPolygonI
GdipDrawRectangleI
GdipDrawBezier
GdipDrawArcI
GdipDrawLineI
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipSetCompositingMode
GdipReleaseDC
GdipDeleteFont
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetDC
GdipDeleteGraphics
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipSetInterpolationMode
GdipDeleteRegion
GdipSaveImageToFile
GdipFree
GdipAlloc
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipDeleteBrush
GdipCloneBrush
GdipCreateSolidFill
GdipCreateTexture2I
GdipTranslateTextureTransform
GdipDisposeImage
GdipCreatePen1
GdipDeletePen
GdipSetPenDashStyle
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipCreatePath
GdipDeletePath
GdipAddPathLine2I
GdipCreateFromHDC
GdipCreateFromHWND
GdipGetImageGraphicsContext

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

winmm

PlaySoundW

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 634KB - Virtual size: 633KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OBCrashReport.exe
.exe windows:5 windows x86 arch:x86

6e5f617f29ccb01ec2733c307510a239

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SVN_ROOT\trunk\Reader\HanWenBook_V1_Spread\HanwenBook\bin\OBCrashReport.pdb

Imports

ws2_32

WSACleanup
getservbyport
gethostbyaddr
gethostbyname
ntohs
htons
recv
htonl
inet_addr
WSAStartup
inet_ntoa
connect
socket
getservbyname
WSASetLastError
WSAGetLastError
send
closesocket

dnsapi

DnsQuery_W
DnsFree

wininet

HttpEndRequestW
HttpQueryInfoW
InternetWriteFile
InternetReadFile
InternetOpenW
InternetCloseHandle
HttpOpenRequestW
InternetConnectW
HttpSendRequestExW

gdi32

GetTextFaceW
CreateRoundRectRgn
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
SelectObject
DeleteObject
CreateDCW
GetDIBits
DeleteDC
SetLayout
CopyMetaFileW
GetDeviceCaps
CreateBitmap
CreateRectRgnIndirect
PatBlt
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetObjectW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx

shell32

SHFileOperationW
SHGetFileInfoW
SHGetDesktopFolder
SHAppBarMessage
CommandLineToArgvW
DragQueryFileW
ShellExecuteW
DragFinish
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW

psapi

GetProcessMemoryInfo

kernel32

GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
SetFilePointerEx
GetStringTypeW
PeekNamedPipe
OutputDebugStringW
WriteConsoleW
GetDateFormatW
TerminateProcess
IsValidCodePage
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetProcessHeap
GetStdHandle
GetTimeFormatW
LCMapStringW
SetEnvironmentVariableW
SetEnvironmentVariableA
ReadConsoleW
GetConsoleMode
SetUnhandledExceptionFilter
ExitProcess
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetLastError
CloseHandle
FindResourceW
LoadResource
WaitForSingleObject
SetEvent
InitializeCriticalSectionAndSpinCount
SizeofResource
LeaveCriticalSection
EnterCriticalSection
ResetEvent
LockResource
CreateEventW
DeleteCriticalSection
FreeLibrary
GetProcessTimes
OpenProcess
WideCharToMultiByte
LoadLibraryW
GetFileAttributesW
FileTimeToSystemTime
MultiByteToWideChar
GetFileSizeEx
GetProcAddress
GetSystemTime
GetCommandLineW
CreateMutexW
GlobalLock
GlobalAlloc
GlobalUnlock
FreeResource
GetFileSize
CreateProcessW
GetFileInformationByHandle
CreateThread
OutputDebugStringA
GetModuleHandleW
GetProcessId
MapViewOfFile
UnmapViewOfFile
GetSystemInfo
OpenFileMappingW
GetSystemDirectoryA
GetTimeZoneInformation
LoadLibraryA
GetTempFileNameW
SystemTimeToFileTime
GetCurrentProcess
CreateDirectoryW
GetPrivateProfileStringW
GetGeoInfoW
GetUserGeoID
FormatMessageW
GetModuleFileNameW
WritePrivateProfileStringW
GetTempPathW
GlobalFree
GetCurrentProcessId
SetLastError
GlobalSize
LocalFree
MulDiv
CopyFileW
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
GetVersion
GetModuleHandleA
InterlockedExchange
GetCurrentThread
GetCurrentThreadId
GetVersionExW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpA
lstrcmpW
GetPrivateProfileIntW
GlobalAddAtomW
SetThreadPriority
ResumeThread
InterlockedDecrement
EncodePointer
DecodePointer
GetSystemDirectoryW
GlobalFindAtomW
GlobalGetAtomNameW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
InterlockedIncrement
GlobalFlags
GetCurrentDirectoryW
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
DeleteFileW
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
lstrcmpiW
SetErrorMode
GetFileAttributesExW
GetFileTime
GetWindowsDirectoryW
lstrcpyW
VerSetConditionMask
VerifyVersionInfoW
Sleep
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
FindResourceExW
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
FindFirstFileExW
GetDriveTypeW
HeapReAlloc
RaiseException
GetFileType
GetModuleHandleExW
ExitThread
HeapSize
HeapQueryInformation
VirtualAlloc
VirtualQuery
SetStdHandle

user32

GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
IsWindow
GetKeyNameTextW
MapVirtualKeyW
LoadMenuW
PostQuitMessage
ShowOwnedPopups
SetCursor
IsWindowEnabled
GetLastActivePopup
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
FillRect
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
GetActiveWindow
GetKeyState
ValidateRect
SetWindowsHookExW
CallNextHookEx
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
SetActiveWindow
GetDesktopWindow
UnhookWindowsHookEx
RegisterWindowMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsChild
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
SetFocus
GetCapture
GetMenu
SetMenu
TrackPopupMenu
UpdateWindow
GetForegroundWindow
SetForegroundWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
AdjustWindowRectEx
EqualRect
GetClassLongW
GetClassNameW
GetTopWindow
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
ShowWindow
CheckDlgButton
SetWindowTextW
IsDialogMessageW
GetSysColorBrush
LoadCursorW
GetParent
InflateRect
DestroyMenu
GetMenuItemInfoW
SystemParametersInfoW
CopyImage
DeleteMenu
RemoveMenu
WaitMessage
SetCapture
ReleaseCapture
WindowFromPoint
DestroyIcon
CharUpperW
SendDlgItemMessageA
UnregisterClassW
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
CreatePopupMenu
InsertMenuItemW
SetRectEmpty
LoadImageW
UnpackDDElParam
ReuseDDElParam
GetMenuDefaultItem
UnionRect
IsRectEmpty
GetSystemMenu
SetParent
GetNextDlgGroupItem
DrawFocusRect
DrawIconEx
MessageBeep
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
LockWindowUpdate
SetLayeredWindowAttributes
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
IsMenu
UpdateLayeredWindow
MonitorFromPoint
TrackMouseEvent
GetComboBoxInfo
IsZoomed
PostThreadMessageW
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
GetClientRect
PtInRect
GetDC
LoadIconW
OffsetRect
SetRect
ReleaseDC
RedrawWindow
GetSystemMetrics
SendMessageW
EnableWindow
MessageBoxW
GetGuiResources
SetWindowLongW
MapWindowPoints
GetWindow
MoveWindow
GetWindowRect
EnumWindows
GetIconInfo
GetCursorInfo
IntersectRect
GetWindowLongW
GetWindowTextW
GetCursorPos
IsWindowVisible
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
InvalidateRect
GetMenuStringW
GetMonitorInfoW
CopyRect
GetWindowThreadProcessId
SetWindowRgn
SetTimer
IsIconic
PostMessageW
RealChildWindowFromPoint
KillTimer
EnumDisplayMonitors

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegEnumKeyW
RegQueryValueW

comctl32

ImageList_ReplaceIcon
InitCommonControlsEx

shlwapi

PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetThemeSysColor
GetWindowTheme
GetThemeColor
IsAppThemed
GetThemePartSize
CloseThemeData
OpenThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeText
GetCurrentThemeName

ole32

CoTaskMemAlloc
CoCreateGuid
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoCreateInstance
CoInitialize
CoInitializeEx
DoDragDrop
OleLockRunning
OleCreateMenuDescriptor
CoTaskMemFree

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantClear
VariantInit
SysAllocString
VarBstrFromDate
VariantChangeType
SysAllocStringLen
SysFreeString

gdiplus

GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipDrawRectangleI
GdipCreateTexture2I
GdipCreatePen1
GdipGetImageWidth
GdipCloneImage
GdipFillRectangleI
GdipCreateFromHDC
GdipCreateFontFamilyFromName
GdipDrawString
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDisposeImage
GdipAlloc
GdipDrawImageI
GdipCreateSolidFill
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteFont
GdipTranslateTextureTransform
GdipDrawImagePointRectI
GdipGetImageHeight
GdipCloneFont
GdipCloneBrush
GdipDeletePen
GdipFree
GdipDeleteBrush
GdipDrawImageRectRect
GdipLoadImageFromStream
GdiplusStartup
GdiplusShutdown
GdipDrawImageRectI

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
OBCrashRpt.dll
.dll windows:6 windows x86 arch:x86

b0ffa228d92023b12ca94ea6da1063c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SVN_ROOT\trunk\Library\DevUtil\crashrpt\bin\OBCrashRpt.pdb

Imports

user32

LoadStringW
MessageBoxW
CharNextW
wvsprintfW

advapi32

RegCloseKey
RegOpenKeyExW

rpcrt4

RpcStringFreeA
UuidToStringA

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

shell32

SHGetSpecialFolderPathW

kernel32

ReadFile
SetEndOfFile
SetStdHandle
ReadConsoleW
SetFilePointerEx
WriteConsoleW
LCMapStringW
CompareStringW
LoadLibraryExW
HeapReAlloc
QueryPerformanceCounter
GetModuleFileNameA
GetTimeZoneInformation
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
DebugBreak
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
CloseHandle
lstrlenA
lstrlenW
CreateEventW
LoadLibraryW
CreateProcessW
OutputDebugStringW
CreateFileW
MultiByteToWideChar
RaiseException
GetLastError
WideCharToMultiByte
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetProcAddress
GlobalAlloc
GlobalFree
GetModuleFileNameW
GetModuleHandleW
CreateDirectoryW
GetFileAttributesW
OutputDebugStringA
SetEnvironmentVariableA
GetConsoleMode
GetConsoleCP
FlushFileBuffers
FreeEnvironmentStringsW
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
FileTimeToLocalFileTime
FindClose
FindFirstFileExW
GetDriveTypeW
FileTimeToSystemTime
SetConsoleCtrlHandler
RtlUnwind
HeapFree
GetSystemTimeAsFileTime
GetCommandLineA
GetStdHandle
WriteFile
HeapAlloc
ExitProcess
GetModuleHandleExW
HeapSize
Sleep
UnhandledExceptionFilter
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetFullPathNameW
GetCurrentDirectoryW
GetProcessHeap
GetEnvironmentStringsW

ole32

CoCreateGuid

Exports

Exports

crAddFile2A
crAddFile2W
crAddFileA
crAddFileW
crAddPropertyA
crAddPropertyW
crAddRegKeyA
crAddRegKeyW
crAddScreenshot
crAddScreenshot2
crEmulateCrash
crExceptionFilter
crGenerateErrorReport
crGetLastErrorMsgA
crGetLastErrorMsgW
crInstallA
crInstallToCurrentThread
crInstallToCurrentThread2
crInstallW
crUninstall
crUninstallFromCurrentThread

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OBModuleDraw.dll
.dll windows:5 windows x86 arch:x86

906636e9dfd32328d07425c6dd9ec169

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SVN_ROOT\trunk\Reader\HanWenBook_V1\HanwenBook\Out\OBModuleDraw.pdb

Imports

winmm

timeGetTime

kernel32

CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ReleaseSemaphore
FormatMessageA
GetLastError
WaitForSingleObject
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
DeviceIoControl
CreateFileA
GetProcAddress
GetCurrentProcess
GetModuleHandleA
DeleteFileA
SuspendThread
ResumeThread
CreateSemaphoreW
CreateEventW
WaitForMultipleObjects
InitializeCriticalSection
InterlockedCompareExchange
GetModuleFileNameW
GetTickCount
Sleep
GetCurrentThreadId
TlsAlloc
GetFileSize
CreateMutexW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetCommandLineA
CreateThread
ExitThread
LoadLibraryExW
IsDebuggerPresent
IsProcessorFeaturePresent
GetFullPathNameA
GetDriveTypeW
SetEnvironmentVariableA
GetCurrentDirectoryW
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
CreateDirectoryW
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
WriteFile
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFullPathNameW
CreateFileW
GetFileAttributesExW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleCP
GetConsoleMode
FreeLibrary
OutputDebugStringW
LoadLibraryW
CompareStringW
LCMapStringW
SetFilePointerEx
GetStringTypeW
SetStdHandle
SetEndOfFile
ReadFile
ReadConsoleW
WriteConsoleW
GetSystemTime
LocalFree
GetTempPathA
DeleteFileW
OutputDebugStringA
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
GetTempPathW
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageW
UnlockFileEx
LockFile
UnlockFile
SystemTimeToFileTime
UnmapViewOfFile
MapViewOfFile
SetFilePointer

user32

wsprintfA

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

shell32

SHGetFolderPathW

Exports

Exports

OBCreateModule

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OBModuleInfo.dll
.dll windows:5 windows x86 arch:x86

cbd838aee488ed07f673e311aa9bc4aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SVN_ROOT\trunk\Reader\HanWenBook_V1\HanwenBook\Out\OBModuleInfo.pdb

Imports

winmm

timeGetTime

kernel32

GetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
Sleep
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
DeviceIoControl
CreateFileA
GetProcAddress
GetCurrentProcess
GetModuleHandleA
DeleteFileA
AreFileApisANSI
GetSystemTime
LocalFree
GetTempPathA
GetCurrentProcessId
DeleteFileW
OutputDebugStringA
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
FormatMessageA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
CreateFileW
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageW
LoadLibraryW
WriteFile
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
GetTickCount
OutputDebugStringW
LockFile
UnlockFile
HeapFree
QueryPerformanceCounter
SystemTimeToFileTime
HeapAlloc
FreeLibrary
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
CreateMutexW
GetFileSize
HeapReAlloc
GetFullPathNameA
CreateDirectoryW
InterlockedCompareExchange
InitializeCriticalSection
ReadConsoleW
SetStdHandle
GetModuleFileNameW
WriteConsoleW
LoadLibraryA
GetFullPathNameW
LoadLibraryExW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
GetStringTypeW
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
GetDriveTypeW
SetEnvironmentVariableA
GetCurrentDirectoryW
RaiseException
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CompareStringW
LCMapStringW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP

user32

wsprintfA

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

shell32

SHGetFolderPathW

rpcrt4

UuidIsNil
UuidFromStringA
UuidCreateNil

Exports

Exports

OBCreateModule

Sections

.text
Size: 724KB - Virtual size: 723KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OBModuleMgr.dll
.dll windows:5 windows x86 arch:x86

0150c0064b121953450bd052f160dc2a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SVN_ROOT\trunk\Reader\HanWenBook_V1\HanwenBook\Out\OBModuleMgr.pdb

Imports

winmm

timeGetTime

kernel32

GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CloseHandle
CreateEventA
CreateSemaphoreA
FormatMessageA
SetLastError
SleepEx
GetTickCount
ExpandEnvironmentStringsA
GetWindowsDirectoryA
GetVersionExA
GetLocalTime
CreateThread
QueryPerformanceCounter
ResumeThread
CreateSemaphoreW
CreateEventW
WaitForMultipleObjects
GetLastError
SetEndOfFile
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
ExitThread
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
CompareStringW
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
SetFilePointerEx
SetFilePointer
ReadConsoleW
GetFileAttributesExW
CreateFileW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetTimeZoneInformation
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
TerminateThread
DecodePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
InterlockedIncrement
InterlockedDecrement
EncodePointer
CreateDirectoryW
GetSystemTimeAsFileTime
GetCommandLineA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetFullPathNameA
FileTimeToLocalFileTime
FindClose
FindFirstFileExW
GetDriveTypeW
FileTimeToSystemTime
SetEnvironmentVariableA
GetCurrentDirectoryW
HeapFree
HeapAlloc
HeapReAlloc
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
GetModuleFileNameA
GetCurrentProcessId

user32

PostMessageW

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

rpcrt4

UuidCreate

ws2_32

inet_addr
gethostname
htonl
__WSAFDIsSet
WSASetLastError
socket
setsockopt
ntohs
htons
ioctlsocket
getsockname
getpeername
connect
closesocket
bind
send
recv
WSACleanup
WSAStartup
select
WSAGetLastError
recvfrom
getsockopt

iphlpapi

GetNetworkParams

wininet

InternetSetCookieA

Exports

Exports

OBCreateManager

Sections

.text
Size: 446KB - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OBModuleTool.dll
.dll windows:5 windows x86 arch:x86

ed5a1f99a1def5f5f9fdaae87a9614e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SVN_ROOT\trunk\Reader\HanWenBook_V1\HanwenBook\Out\OBModuleTool.pdb

Imports

kernel32

GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
Sleep
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
EncodePointer
DecodePointer
GetCommandLineA
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetFullPathNameA
GetLastError
GetDriveTypeW
SetEnvironmentVariableA
GetCurrentDirectoryW
HeapFree
HeapAlloc
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
InterlockedIncrement
GetProcessHeap
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
CreateFileW
GetFileAttributesExW
GetTimeZoneInformation
LoadLibraryExW
HeapReAlloc
OutputDebugStringW
LoadLibraryW
CompareStringW
LCMapStringW
SetStdHandle
SetFilePointerEx
WriteConsoleW
GetStringTypeW
SetEndOfFile
ReadFile
ReadConsoleW
CreateDirectoryW

Exports

Exports

OBCreateModule

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OBModuleUser.dll
.dll windows:5 windows x86 arch:x86

4641c11af0e7c6f56f3b29e8dade675a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SVN_ROOT\trunk\Reader\HanWenBook_V1\HanwenBook\Out\OBModuleUser.pdb

Imports

kernel32

DeleteCriticalSection
SetEvent
ReleaseSemaphore
WaitForSingleObject
Sleep
CloseHandle
CreateEventA
GetCurrentThreadId
FormatMessageA
GetLastError
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
DeviceIoControl
CreateFileA
GetProcAddress
GetCurrentProcess
GetModuleHandleA
SuspendThread
ResumeThread
CreateSemaphoreW
CreateEventW
WaitForMultipleObjects
DeleteFileA
ExitThread
CreateThread
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
InitializeCriticalSection
InterlockedCompareExchange
GetFileSize
CreateMutexW
MapViewOfFile
UnmapViewOfFile
SystemTimeToFileTime
UnlockFile
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
GetStringTypeW
GetSystemTimeAsFileTime
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetFullPathNameA
GetDriveTypeW
SetEnvironmentVariableA
GetCurrentDirectoryW
HeapFree
HeapAlloc
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CompareStringW
LCMapStringW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
WriteFile
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFullPathNameW
CreateFileW
GetFileAttributesExW
GetTimeZoneInformation
ReadFile
SetFilePointerEx
HeapReAlloc
SetFilePointer
FreeLibrary
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
SetStdHandle
WriteConsoleW
SetEndOfFile
ReadConsoleW
GetSystemTime
LocalFree
GetTempPathA
DeleteFileW
OutputDebugStringA
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
GetTempPathW
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageW
UnlockFileEx
GetTickCount
LockFile
CreateDirectoryW

user32

wsprintfA

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

shell32

SHGetFolderPathW

rpcrt4

UuidFromStringW
UuidIsNil
UuidFromStringA
UuidCreateNil

Exports

Exports

OBCreateModule

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Res/Cursor/BoldLine.cur
Res/Cursor/Clear.cur
Res/Cursor/FineLine.cur
Res/Cursor/Marquee.cur
Res/Cursor/Painter.cur
Res/Cursor/WaveLine.cur
Res/Cursor/mouse.cur
Res/Cursor/stop.cur
Res/Cursor/дע.cur
Res/Cursor/.ani
Res/Cursor/ѡ.cur
Res/Html/Default.css
Res/Html/Default.html
.html
Res/Html/Marginalia.css
Res/Html/drift_main_bg.jpg
.jpg
Res/Html/protocal.html
.html
Res/Images/Images/Frame/0-1.png
.png
Res/Images/Images/Frame/0-2.png
.png
Res/Images/Images/Frame/0-3.png
.png
Res/Images/Images/Frame/0-4.png
.png
Res/Images/Images/Frame/BookRightShadow.png
.png
Res/Images/Images/Frame/IconError.png
.png
Res/Images/Images/Frame/Logo.png
.png
Res/Images/Images/Frame/ScrollTip.png
.png
Res/Images/Images/Frame/head.png
.png
Res/Images/Images/Frame/hong.png
.png
Res/Images/Images/Frame/kx.png
.png
Res/Images/Images/Frame/lxyd-.png
.png
Res/Images/Images/Frame/lxyd-.png
.png
Res/Images/Images/Frame/lxyd-.png
.png
Res/Images/Images/Frame/lxyd-.png
.png
Res/Images/Images/Frame/lxyd-.png
.png
Res/Images/Images/Frame/menuBottom.jpg
.jpg
Res/Images/Images/Frame/menuLeftTile.jpg
.jpg
Res/Images/Images/Frame/menuRightTile.jpg
.jpg
Res/Images/Images/Frame/menuTag.png
.png
Res/Images/Images/Frame/menuTop.jpg
.jpg
Res/Images/Images/Frame/rr.png
.png
Res/Images/Images/Frame/sh.png
.png
Res/Images/Images/Frame/sina.png
.png
Res/Images/Images/Frame/swait.png
.png
Res/Images/Images/Frame/tip01.png
.png
Res/Images/Images/Frame/tip02.png
.png
Res/Images/Images/Frame/tip03.png
.png
Res/Images/Images/Frame/tip04.png
.png
Res/Images/Images/Frame/tip05.png
.png
Res/Images/Images/Frame/tiperror.png
.png
Res/Images/Images/Frame/tipnorm.png
.png
Res/Images/Images/Frame/tipques.png
.png
Res/Images/Images/Frame/tipwarn.png
.png
Res/Images/Images/Frame/tx.png
.png
Res/Images/Images/Frame/wrireMargia.png
.png
Res/Images/Images/Frame/ȴ.png
.png
Res/Images/Images/Frame/ȴ.png
.png
Res/Images/Images/Frame/Ŵ.jpg
.jpg
Res/Images/Images/Frame/ر.png
.png
Res/Images/Images/Frame/1.png
.png
Res/Images/Images/Frame/2.png
.png
Res/Images/Images/Frame/շѵȴ.png
.png
Res/Images/Images/Frame/ͶӰ-.png
.png
Res/Images/Images/Frame/ͶӰ-.png
.png
Res/Images/Images/Frame/ͶӰ-.png
.png
Res/Images/Images/Frame/ͶӰ-.png
.png
Res/Images/Images/Frame/ͶӰ-.png
.png
Res/Images/Images/Frame/ͶӰ-.png
.png
Res/Images/Images/Frame/.png
.png
Res/Images/Images/Frame/.jpg
.jpg
Res/Images/Images/bookpreread_btnRead.png
.png
Res/Images/Images/home_head_mask.png
.png
Res/Images/Images/home_shelf_background.png
.png
Res/Images/Images/home_shelf_book_border.png
.png
Res/Images/Images/home_shelf_book_hover.png
.png
Res/Images/Images/home_shelf_book_source_active_mark.png
.png
Res/Images/Images/home_shelf_book_source_mark.png
.png
Res/Images/Images/home_shelf_book_tip_background.png
.png
Res/Images/Images/home_shelf_create_rate_empty.png
.png
Res/Images/Images/home_shelf_create_rate_full.png
.png
Res/Images/Images/home_shelf_lock.png
.png
Res/Images/Images/home_shelf_menu.png
.png
Res/Images/Images/home_shelf_menu_flod.png
.png
Res/Images/Images/home_shelf_menu_new.png
.png
Res/Images/Images/home_shelf_menu_next.png
.png
Res/Images/Images/home_shelf_menu_prev.png
.png
Res/Images/Images/login_background.png
.png
Res/Images/Images/logo.png
.png
Res/Images/Images/main_button_blue_135_40_4.png
.png
Res/Images/Images/main_button_blue_95_30_3.png
.png
Res/Images/Images/main_button_blue_yello_95_30_3.png
.png
Res/Images/Images/main_button_color_80_25_4.png
.png
Res/Images/Images/main_button_gray_135_40_4.png
.png
Res/Images/Images/main_button_gray_136_36_4.png
.png
Res/Images/Images/main_button_gray_50_20_4.png
.png
Res/Images/Images/main_button_gray_80_38_4.png
.png
Res/Images/Images/main_button_gray_apha_135_36_4.png
.png
Res/Images/Images/main_button_light_blue_95_30_3.png
.png
Res/Images/Images/main_button_line_95_30_4.png
.png
Res/Images/Images/main_button_orange_95_30_3.png
.png
Res/Images/Images/main_button_red_135_40_4.png
.png
Res/Images/Images/main_button_red_175_38_4.png
.png
Res/Images/Images/main_button_red_96_38_4.png
.png
Res/Images/Images/main_button_yello_95_30_3.png
.png
Res/Images/Images/main_check_back_16_16.png
.png
Res/Images/Images/main_check_select_16_16.png
.png
Res/Images/Images/main_close_3stat.png
.png
Res/Images/Images/main_close_button_16_16_3.png
.png
Res/Images/Images/main_close_button_red_15_15_3.png
.png
Res/Images/Images/main_common_face_icon.png
.png
Res/Images/Images/main_common_sex_icon.png
.png
Res/Images/Images/main_common_tip_back.png
.png
Res/Images/Images/main_edge_bottom_15_15_4.png
.png
Res/Images/Images/main_head_default_boy.png
.png
Res/Images/Images/main_head_default_girl.png
.png
Res/Images/Images/main_head_default_null.png
.png
Res/Images/Images/main_login_mail_back.png
.png
Res/Images/Images/main_login_name_back.png
.png
Res/Images/Images/main_login_process_back.png
.png
Res/Images/Images/main_login_process_bar.png
.png
Res/Images/Images/main_login_pwd_back.png
.png
Res/Images/Images/main_login_regist_success_background.png
.png
Res/Images/Images/main_message_3stat.png
.png
Res/Images/Images/main_min_3stat.png
.png
Res/Images/Images/main_nick_normal.png
.png
Res/Images/Images/main_pagetab_back.png
.png
Res/Images/Images/main_pagetab_front.png
.png
Res/Images/Images/main_pagetab_next.png
.png
Res/Images/Images/main_pagetab_prev.png
.png
Res/Images/Images/main_popup_dlg_background.png
.png
Res/Images/Images/main_radio_back_16_16_2.png
.png
Res/Images/Images/main_radio_select_10_10.png
.png
Res/Images/Images/main_scroll_background_updown.png
.png
Res/Images/Images/main_scroll_button_bottom.png
.png
Res/Images/Images/main_scroll_button_top.png
.png
Res/Images/Images/main_scroll_slider_updown.png
.png
Res/Images/Images/main_search_box.png
.png
Res/Images/Images/main_search_icon.png
.png
Res/Images/Images/main_setting_3stat.png
.png
Res/Images/Images/main_user_3stat.png
.png
Res/Images/Images/read_desk_book_mark_3icon.png
.png
Res/Images/Images/read_desk_button_enlarge.png
.png
Res/Images/Images/read_desk_button_narrow.png
.png
Res/Images/Images/read_desk_foot_layer_background.png
.png
Res/Images/Images/read_desk_foot_scroll_back.png
.png
Res/Images/Images/read_desk_foot_scroll_icon.png
.png
Res/Images/Images/read_desk_foot_scroll_slider.png
.png
Res/Images/Images/read_desk_menu_icon.png
.png
Res/Images/Images/read_desk_page_next.png
.png
Res/Images/Images/read_desk_page_prev.png
.png
Res/Images/Images/read_desk_tab_edge.png
.png
Res/Images/Images/read_left_button_buy.png
.png
Res/Images/Images/read_left_button_collect.png
.png
Res/Images/Images/read_left_history_clean.png
.png
Res/Images/Images/read_left_menu_icon.png
.png
Res/Images/Images/read_left_recommend_star.png
.png
Res/Images/Images/read_left_search_edit_background.png
.png
Res/Images/Images/read_left_shadow.png
.png
Res/Images/Images/read_left_tab_edge.png
.png
Res/Images/Images/read_postil_area_blue_28_28_3.png
.png
Res/Images/Images/read_postil_area_red_28_28_3.png
.png
Res/Images/Images/regist_background.png
.png
Res/Images/Images/regist_button_back.png
.png
Res/Images/Images/store_tab_boutique_normal.png
.png
Res/Images/Images/store_tab_boutique_select.png
.png
Res/Images/Images/store_tab_category_normal.png
.png
Res/Images/Images/store_tab_category_select.png
.png
Res/Images/Images/store_tab_limitfree_normal.png
.png
Res/Images/Images/store_tab_limitfree_select.png
.png
Res/Images/Images/store_tab_rank_normal.png
.png
Res/Images/Images/store_tab_rank_select.png
.png
Res/Images/Images/store_tab_recommend_normal.png
.png
Res/Images/Images/store_tab_recommend_select.png
.png
Res/Images/Images/store_tab_select_edge.png
.png
Res/Images/Update/update_background.png
.png
Res/Images/Update/update_button_cancel.png
.png
Res/Images/Update/update_progress.png
.png
Uninstall.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ExecCmd.dll
.dll windows:4 windows x86 arch:x86

bf44c9fb48bb8c36b3e2527e7252350d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
OpenProcess
CloseHandle
GetProcAddress
LoadLibraryA
GetVersionExA
GlobalFree
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
Sleep
CreateProcessA
GlobalAlloc
GetExitCodeThread
lstrcpyA
lstrcpynA
CreateThread
lstrcatA
GetEnvironmentVariableA
lstrcmpiA

user32

SendMessageA
EnumWindows
WaitForInputIdle
wsprintfA
GetWindowThreadProcessId

Exports

Exports

exec
wait

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 802B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
lstrcmpA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
FreeLibrary
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

FindProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/GetVersion.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

WindowsName
WindowsPlatformArchitecture
WindowsPlatformId
WindowsServerName
WindowsServicePack
WindowsServicePackBuild
WindowsServicePackMajor
WindowsServicePackMinor
WindowsType
WindowsVersion

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/inetc.dll
.dll windows:4 windows x86 arch:x86

3f1149a3053980fe6b461521d2b55a2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_mbschr
_adjust_fdiv
malloc
_initterm
free
_mbsrchr
strtoul
memset
_mbsstr
strtol

kernel32

CloseHandle
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
LoadLibraryA
GetProcAddress
lstrlenA
WriteFile
ReadFile
lstrcmpA
lstrcpynA
GetLastError
GlobalFree
lstrcmpiA
DeleteFileA
SleepEx
SetFilePointer
GetTickCount
lstrcatA
GetFileSize
CreateFileA

user32

MessageBoxA
GetParent
ShowWindow
PostMessageA
SetWindowTextA
GetWindowTextA
IsWindow
GetDlgItem
SetDlgItemTextA
SendDlgItemMessageA
SetWindowPos
SystemParametersInfoA
GetClientRect
GetWindowRect
SetTimer
LoadIconA
SetWindowLongA
GetWindowLongA
UpdateWindow
DestroyWindow
KillTimer
RedrawWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
IsWindowVisible
EnableWindow
CreateDialogParamA
FindWindowExA
wsprintfA
SendMessageA

wininet

HttpSendRequestA
HttpSendRequestExA
HttpQueryInfoA
FtpCreateDirectoryA
FtpOpenFileA
InternetGetLastResponseInfoA
InternetSetFilePointer
InternetSetOptionA
InternetQueryOptionA
InternetCloseHandle
InternetErrorDlg
HttpOpenRequestA
HttpAddRequestHeadersA
HttpEndRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetReadFile
InternetWriteFile

comctl32

ord17

Exports

Exports

get
head
post
put

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dbghelp.dll
.dll windows:6 windows x86 arch:x86

3f5a00ef2a36f3cd8924690a5a1d6f3c

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:18:b5:d8:36:d5:03:90:4b:8d:d1:1f:b3:91:e5:ba:23:df:bc:92
Signer

Actual PE Digest

bf:18:b5:d8:36:d5:03:90:4b:8d:d1:1f:b3:91:e5:ba:23:df:bc:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dbghelp.pdb

Imports

msvcrt

_isatty
_write
_lseeki64
??3@YAXPAX@Z
_fileno
_read
__pioinfo
__badioinfo
ferror
wctomb
_snprintf
isleadbyte
mbtowc
_onexit
_lock
__dllonexit
_unlock
_ismbblead
_amsg_exit
_initterm
_XcptFilter
memmove
_iob
__mb_cur_max
strchr
_vsnwprintf
_errno
__CxxFrameHandler
iswspace
calloc
_itoa
_wcsdup
towlower
tolower
_wcslwr
time
_wctime
_ltoa
_wcsnicmp
_purecall
ctime
malloc
strncmp
isspace
_stricmp
_strlwr
free
wcsrchr
strstr
memcpy
_wcsicmp
qsort
wcschr
wcsstr
wcsncmp
iswxdigit
memset
??2@YAPAXI@Z
iswprint
atol
fclose
__unDName
iswdigit
_CxxThrowException
bsearch
_wfsopen
fread
fseek
wcstol
_wfullpath
_wgetenv
_get_osfhandle
_chsize
_close
_open_osfhandle
ftell
_memicmp
_mbscmp
??1type_info@@UAE@XZ
_wsopen

kernel32

HeapReAlloc
MapViewOfFileEx
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
GetFileType
DeviceIoControl
SetFileAttributesW
CreateFileMappingW
InterlockedIncrement
InterlockedDecrement
LocalFree
FormatMessageW
DelayLoadFailureHook
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedExchange
GetThreadSelectorEntry
CreateThread
TerminateThread
VirtualQueryEx
GetPriorityClass
GetThreadPriority
GetThreadTimes
GetThreadContext
ResumeThread
SuspendThread
GetCurrentThreadId
GetSystemTimeAsFileTime
Sleep
GetVersion
GetSystemInfo
LoadLibraryExA
InterlockedCompareExchange
ReadProcessMemory
GetProcessHeap
GetFileAttributesA
SetErrorMode
WriteFile
OutputDebugStringA
VirtualFree
OpenProcess
GetCurrentProcessId
GetModuleHandleA
CreateFileMappingA
MapViewOfFile
DuplicateHandle
VirtualAlloc
VirtualProtect
CreateDirectoryA
UnmapViewOfFile
GetCurrentProcess
SetFilePointer
IsDBCSLeadByte
HeapFree
HeapAlloc
GetVersionExA
InitializeCriticalSection
HeapCreate
HeapDestroy
FindClose
LocalAlloc
SetLastError
LeaveCriticalSection
EnterCriticalSection
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetLastError
TlsSetValue
TlsGetValue
FreeLibrary
LoadLibraryA
TlsAlloc
TlsFree
DeleteCriticalSection
FlushViewOfFile

Exports

Exports

DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumDirTree
EnumDirTreeW
EnumerateLoadedModules
EnumerateLoadedModules64
EnumerateLoadedModulesEx
EnumerateLoadedModulesExW
EnumerateLoadedModulesW64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindDebugInfoFileExW
FindExecutableImage
FindExecutableImageEx
FindExecutableImageExW
FindFileInPath
FindFileInSearchPath
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapDebugInformation
MiniDumpReadDumpStream
MiniDumpWriteDump
SearchTreeForFile
SearchTreeForFileW
StackWalk
StackWalk64
SymAddSourceStream
SymAddSourceStreamA
SymAddSourceStreamW
SymAddSymbol
SymAddSymbolW
SymCleanup
SymDeleteSymbol
SymDeleteSymbolW
SymEnumLines
SymEnumLinesW
SymEnumProcesses
SymEnumSourceFileTokens
SymEnumSourceFiles
SymEnumSourceFilesW
SymEnumSourceLines
SymEnumSourceLinesW
SymEnumSym
SymEnumSymbols
SymEnumSymbolsForAddr
SymEnumSymbolsForAddrW
SymEnumSymbolsW
SymEnumTypes
SymEnumTypesByName
SymEnumTypesByNameW
SymEnumTypesW
SymEnumerateModules
SymEnumerateModules64
SymEnumerateModulesW64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindDebugInfoFile
SymFindDebugInfoFileW
SymFindExecutableImage
SymFindExecutableImageW
SymFindFileInPath
SymFindFileInPathW
SymFromAddr
SymFromAddrW
SymFromIndex
SymFromIndexW
SymFromName
SymFromNameW
SymFromToken
SymFromTokenW
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetFileLineOffsets64
SymGetHomeDirectory
SymGetHomeDirectoryW
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromAddrW64
SymGetLineFromName
SymGetLineFromName64
SymGetLineFromNameW64
SymGetLineNext
SymGetLineNext64
SymGetLineNextW64
SymGetLinePrev
SymGetLinePrev64
SymGetLinePrevW64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOmapBlockBase
SymGetOmaps
SymGetOptions
SymGetScope
SymGetScopeW
SymGetSearchPath
SymGetSearchPathW
SymGetSourceFile
SymGetSourceFileFromToken
SymGetSourceFileFromTokenW
SymGetSourceFileToken
SymGetSourceFileTokenW
SymGetSourceFileW
SymGetSourceVarFromToken
SymGetSourceVarFromTokenW
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolFile
SymGetSymbolFileW
SymGetTypeFromName
SymGetTypeFromNameW
SymGetTypeInfo
SymGetTypeInfoEx
SymGetUnwindInfo
SymInitialize
SymInitializeW
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymLoadModuleExW
SymMatchFileName
SymMatchFileNameW
SymMatchString
SymMatchStringA
SymMatchStringW
SymNext
SymNextW
SymPrev
SymPrevW
SymRefreshModuleList
SymRegisterCallback
SymRegisterCallback64
SymRegisterCallbackW64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSearch
SymSearchW
SymSetContext
SymSetHomeDirectory
SymSetHomeDirectoryW
SymSetOptions
SymSetParentWindow
SymSetScopeFromAddr
SymSetScopeFromIndex
SymSetSearchPath
SymSetSearchPathW
SymSrvDeltaName
SymSrvDeltaNameW
SymSrvGetFileIndexInfo
SymSrvGetFileIndexInfoW
SymSrvGetFileIndexString
SymSrvGetFileIndexStringW
SymSrvGetFileIndexes
SymSrvGetFileIndexesW
SymSrvGetSupplement
SymSrvGetSupplementW
SymSrvIsStore
SymSrvIsStoreW
SymSrvStoreFile
SymSrvStoreFileW
SymSrvStoreSupplement
SymSrvStoreSupplementW
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnDecorateSymbolNameW
UnmapDebugInformation
WinDbgExtensionDllInit
block
chksym
dbghelp
dh
fptr
homedir
itoldyouso
lmi
lminfo
omap
srcfiles
stack_force_ebp
stackdbg
sym
symsrv
vc7fpo

Sections

.text
Size: 979KB - Virtual size: 979KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 151KB

.ndata Size: - Virtual size: 92KB

.rsrc Size: 35KB - Virtual size: 34KB

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 104B

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 24KB

UPX1 Size: 3KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 728B

.reloc Size: 1024B - Virtual size: 624B

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 100B

.reloc Size: 1024B - Virtual size: 520B

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 151KB

.ndata
Size: - Virtual size: 92KB

.rsrc
Size: 35KB - Virtual size: 34KB

.text
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 104B

UPX0
Size: - Virtual size: 24KB

UPX1
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 728B

.reloc
Size: 1024B - Virtual size: 624B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 572B

.text
Size: 512B - Virtual size: 84B

.rdata
Size: 512B - Virtual size: 206B

.data
Size: - Virtual size: 20B

.reloc
Size: 512B - Virtual size: 48B

.text
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 27KB - Virtual size: 30KB

Shared
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 70KB - Virtual size: 70KB

.reloc
Size: 35KB - Virtual size: 34KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 393KB - Virtual size: 393KB

.data
Size: 32KB - Virtual size: 71KB

.rsrc
Size: 59KB - Virtual size: 59KB