fd24d3ce9ee75bff10ce3a572b2103b3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd24d3ce9ee75bff10ce3a572b2103b3_JaffaCakes118
Size

8.1MB
MD5

fd24d3ce9ee75bff10ce3a572b2103b3
SHA1

a0d51970a3e1b1465050f7cc00cd0ed825d89692
SHA256

154afa3edb55a35fae802f3e9e4a2efdbebaf356cee8395f039f879471732ee8
SHA512

e9f36acbd062d9c35937c53a528d4dfdeaec664f5e81c0054cb326c9a44dd0d645d876896729a2bd3d3cd8feea6053e1126112a3e4771a6f714edb19d6e836e6
SSDEEP

196608:Cg+iWjoEA14K7bpRPRdp+RkhByr5wlaKZymubJt0DPZ2y2:N+lj9AXnpLvFwroKKq

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/BaiduGame/AvataShow.dll	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/BaiduGame/AvataShow.dll	upx

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/StartMenu.dll
unpack002/out.upx
unpack001/BaiduGame/GameStart.exe
unpack001/BaiduGame/LoginUI.dll
unpack001/BaiduGame/bass.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

fd24d3ce9ee75bff10ce3a572b2103b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:42:d4:bb:60:d8:1a:da:46:32:19:4a:08:6e:4e:c4
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

21/12/2010, 16:00

Not After

21/12/2013, 16:00

Subject

CN=timestamp.sheca.com,O=上海市数字证书认证中心有限公司,L=上海市,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11737570706f72744073686563612e636f6d

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c3:38:36:42:91:61:7c:78:50:5d:31:76:c6:4b:08:5b:c1:87:bb:c9
Signer

Actual PE Digest

c3:38:36:42:91:61:7c:78:50:5d:31:76:c6:4b:08:5b:c1:87:bb:c9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StartMenu.dll
.dll windows:4 windows x86 arch:x86

a648aeaa164b592c1e8892a10400b5ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
lstrcatA
FindClose
FindNextFileA
MulDiv
GlobalFree
lstrcpynA
GlobalAlloc
lstrcmpiA
FindFirstFileA
lstrcpyA

user32

TranslateMessage
GetMessageA
IsDialogMessageA
PostMessageA
DispatchMessageA
GetWindowLongA
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
IsDlgButtonChecked
GetWindowTextA
DestroyWindow
GetDlgItem
CreateDialogParamA
SetWindowLongA
wsprintfA
CallWindowProcA

gdi32

GetTextMetricsA
SelectObject

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoTaskMemFree

Exports

Exports

Init
Select
Show

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$TEMP/StartCheck.exe
.exe windows:5 windows x86 arch:x86

071689b2ff6578609da1964ca79e307d

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b3:fa:9d:b1:6c:81:76:3d:28:a6:7c:43:5c:d7:23:c9:07:ad:89:62
Signer

Actual PE Digest

b3:fa:9d:b1:6c:81:76:3d:28:a6:7c:43:5c:d7:23:c9:07:ad:89:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc90

ord589
ord1275
ord793
ord800

msvcr90

__p__fmode
__set_app_type
__p__commode
_crt_debugger_hook
_except_handler4_common
memset
_controlfp_s
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_stricmp
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
printf
sprintf_s
?terminate@@YAXXZ
_invoke_watson

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
GetModuleHandleA
GetCommandLineA
Sleep
CloseHandle
GetCurrentProcess
Process32Next
Process32First
GetLastError
CreateToolhelp32Snapshot
TerminateProcess
GetExitCodeProcess
OpenProcess
GetSystemTimeAsFileTime

user32

GetWindowThreadProcessId
FindWindowA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/Avata/default/empty.xml
.xml
BaiduGame/Avata/default/female_body.png
.png
BaiduGame/Avata/default/female_full.png
.png
BaiduGame/Avata/default/female_head.png
.png
BaiduGame/Avata/default/male_body.png
.png
BaiduGame/Avata/default/male_full.png
.png
BaiduGame/Avata/default/male_head.png
.png
BaiduGame/Avata/default/resource/xml/defaultFemale.xml
.xml
BaiduGame/Avata/default/resource/xml/defaultMale.xml
.xml
BaiduGame/Avata/frame/person.swf
BaiduGame/AvataShow.dll
.dll windows:5 windows x86 arch:x86

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d3:ad:fd:c8:6a:9e:1e:cb:10:01:56:3d:ec:c7:7e:b4:f6:aa:04:44
Signer

Actual PE Digest

d3:ad:fd:c8:6a:9e:1e:cb:10:01:56:3d:ec:c7:7e:b4:f6:aa:04:44

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CreateAvata
ReleaseAvata

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/BaiduGame.exe
.exe windows:5 windows x86 arch:x86

e5b86def29e9e7881ccfef344c629177

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:42:d4:bb:60:d8:1a:da:46:32:19:4a:08:6e:4e:c4
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

21/12/2010, 16:00

Not After

21/12/2013, 16:00

Subject

CN=timestamp.sheca.com,O=上海市数字证书认证中心有限公司,L=上海市,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11737570706f72744073686563612e636f6d

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

50:8d:35:27:f6:a0:48:3f:b2:0c:b6:16:64:81:28:84:22:b3:d2:6e
Signer

Actual PE Digest

50:8d:35:27:f6:a0:48:3f:b2:0c:b6:16:64:81:28:84:22:b3:d2:6e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\BD_Lobby_V2\Bin\release\BaiduGame.pdb

Imports

dskinlite

dsGetClientRect
dsSetDrawItemVisible
dsExitSkin
dsLoadSkin
dsInitKeys
dsAdjustColor
dsSkinWindow

commonencryption

ord5

urlmanager

CreateIUrlManagerObj

showmessagebox

ShowMessage
ShowMessageBox

downloadui

_CreateDownloadUIObj@0

windowevent

_CreateWindowEventObj@0

timerengine

_CreateTimerEngineObj@0

httpsocket

CreateHttpSocket
ReleaseHttpSocket

webcomponent

?OnShowErrorWindow@CWebContainer@@MAEXAAVCSize@@H@Z
?OnCloseErrorWindow@CWebContainer@@MAEXPAUHWND__@@@Z
?OnNavigateError@CWebContainer@@UAEXPBD0KPAH@Z
?OnGetHostInfo@CWebContainer@@UAEJPAU_DOCHOSTUIINFO@@@Z
?CreateControlSite@CWebContainer@@MAEHPAVCOleControlContainer@@PAPAVCOleControlSite@@IABU_GUID@@@Z
?PostNcDestroy@CWebContainer@@MAEXXZ
?DoDataExchange@CWebContainer@@MAEXPAVCDataExchange@@@Z
?OnNavigateComplete2@CWebContainer@@UAEXPBD@Z
?OnBeforeNavigate2@CWebContainer@@UAEXPBDK0AAVCByteArray@@0PAH@Z
?CrackURL@CWebContainer@@SAHPBDPAU_tagURLComponent@1@@Z
?GetThisMessageMap@CWebContainer@@KGPBUAFX_MSGMAP@@XZ
??0CWebContainer@@IAE@XZ
??1CWebContainer@@MAE@XZ
?Create@CWebContainer@@SAPAV1@KPAVCWnd@@PAUCRuntimeClass@@@Z
?GetThisClass@CWebContainer@@SGPAUCRuntimeClass@@XZ
?OnCreateErrorWindow@CWebContainer@@MAEXPAV1@AAVCSize@@PAPAUHWND__@@@Z
?OnSizeErrorWindow@CWebContainer@@MAEXAAVCSize@@@Z

useraccount

CreateIUserAccountObj

webgamecontrol

CreateWebGameControl

webgamelist

CreateWebGameListCtrl

lefttabbar

CreateLeftTabBarCtrl

logonconfig

CreateILogonConfig

gametreectrl

CreateTreeCtrl
_TREEDllPreTranslateMessage@4

roomtabbar

CreateRoomTabBarCtrl

loginui

CreateLoginUICtrl

lobbybutton

CreateLobbyButtomCtrl

userindividualinfo

CreateIndividualInfoCtrl

roomcontrol

CreateRoomCtrl
_ROOMDllPreTranslateMessage@4

mfc90

ord4783
ord4784
ord5385
ord5215
ord5127
ord4771
ord5476
ord5386
ord5064
ord5367
ord4918
ord5382
ord4535
ord1380
ord2194
ord4536
ord3077
ord3940
ord4030
ord2038
ord1490
ord1500
ord942
ord6793
ord941
ord899
ord3179
ord5753
ord1320
ord4693
ord5213
ord5369
ord4927
ord5393
ord4889
ord4940
ord5392
ord5264
ord4775
ord4846
ord5472
ord4972
ord5341
ord4095
ord4851
ord4850
ord5209
ord4608
ord5199
ord4796
ord5403
ord4575
ord4582
ord5001
ord5194
ord4793
ord4808
ord4806
ord4788
ord4791
ord4786
ord5281
ord5278
ord4364
ord3345
ord6390
ord5639
ord2638
ord2639
ord2642
ord2640
ord2641
ord3670
ord1444
ord5599
ord1689
ord2964
ord4679
ord3946
ord2337
ord1603
ord6682
ord6676
ord3663
ord1222
ord3856
ord1144
ord1361
ord2364
ord777
ord3643
ord4646
ord1720
ord2283
ord4531
ord6646
ord2591
ord5167
ord1258
ord5923
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord4333
ord4981
ord5663
ord5646
ord6001
ord3110
ord4890
ord3659
ord3568
ord2282
ord4498
ord2130
ord2447
ord1220
ord6462
ord1186
ord1098
ord4197
ord793
ord589
ord4029
ord4952
ord1555
ord5520
ord663
ord404
ord5924
ord2480
ord2481
ord4481
ord4477
ord4506
ord4507
ord1611
ord305
ord3213
ord1087
ord1117
ord321
ord2691
ord6048
ord2592
ord6788
ord6557
ord611
ord3480
ord4638
ord1668
ord2274
ord945
ord5963
ord4392
ord3506
ord2753
ord6046
ord6552
ord6043
ord6546
ord4565
ord6549
ord6352
ord6166
ord6084
ord5957
ord6023
ord5846
ord5833
ord6398
ord6157
ord3504
ord6527
ord6079
ord6170
ord744
ord524
ord3528
ord1137
ord1108
ord5835
ord300
ord817
ord2327
ord820
ord310
ord6074
ord1358
ord3534
ord2106
ord1183
ord3477
ord1357
ord636
ord367
ord266
ord265
ord1321
ord2692
ord5615
ord4617
ord5152
ord5309
ord2208
ord1810
ord1809
ord1678
ord3344
ord6388
ord1496
ord5636
ord4668
ord4116
ord6559
ord6584
ord2069
ord2899
ord6456
ord4529
ord4993
ord3987
ord2045
ord1938
ord2040
ord654
ord3519
ord772
ord595
ord796
ord3638
ord4667
ord4895
ord4334
ord2886
ord4057
ord4067
ord4066
ord3277
ord2759
ord2888
ord2769
ord3135
ord2961
ord4714
ord3107
ord2978
ord2766
ord5633
ord1728
ord1791
ord1792
ord2139
ord5608
ord1446
ord3218
ord6356
ord5389
ord3671
ord6782
ord4160
ord6784
ord1644
ord2368
ord2375
ord2625
ord2607
ord2605
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5647
ord4589
ord6780
ord5497
ord2074
ord5585
ord4650
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord1717
ord1782
ord639
ord374
ord3783
ord2539
ord316
ord605
ord1278
ord1233
ord1145
ord322
ord801
ord601
ord1276
ord798
ord800
ord4912

msvcr90

_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_stricmp
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_setmbcp
memset
memcpy
__CxxFrameHandler3
_beginthreadex
printf
atoi
fflush
fwrite
strftime
isalpha
tolower
strchr
strncmp
fseek
ftell
ferror
fprintf
fopen_s
_vsnprintf_s
fputc
strcat_s
_snprintf
strrchr
_localtime64_s
_time64
memcpy_s
exit
_stat64i32
rand
srand
isspace
isalnum
memmove_s
?what@exception@std@@UBEPBDXZ
_purecall
fclose
fread
fopen
strcpy_s
sprintf_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
atol
_CxxThrowException

kernel32

GetCurrentProcess
FindClose
FindFirstFileA
lstrcmpiA
GetVersion
WritePrivateProfileStringA
GetCurrentThreadId
lstrcpynA
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MoveFileA
EnterCriticalSection
TerminateProcess
SetUnhandledExceptionFilter
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
CreateFileA
GetCurrentProcessId
lstrlenA
GetCurrentDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
LeaveCriticalSection
CloseHandle
CopyFileA
CreateMutexA
InterlockedDecrement
InterlockedIncrement
CreateDirectoryA
WaitForSingleObject
InitializeCriticalSection
LoadLibraryA
DeleteCriticalSection
SetEvent
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
CreateEventA
TerminateThread
LocalFree
LocalAlloc
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
GetTickCount
GetLastError
MultiByteToWideChar
DeleteFileA
GetProcAddress

user32

GetClassInfoA
FindWindowA
GetWindowThreadProcessId
RegisterWindowMessageA
SendMessageTimeoutA
IsIconic
DrawIcon
AttachThreadInput
GetForegroundWindow
SetForegroundWindow
GetCursorPos
GetSubMenu
ShowWindow
SetActiveWindow
IsWindowVisible
IsWindow
SystemParametersInfoA
InvalidateRect
PostQuitMessage
WindowFromPoint
UnregisterHotKey
RegisterHotKey
MapVirtualKeyA
GetKeyNameTextA
SetParent
GetParent
GetWindowRect
GetSystemMetrics
GrayStringA
DrawTextExA
TabbedTextOutA
DrawTextA
CopyRect
SetTimer
LoadImageA
KillTimer
LoadCursorA
SetCursor
wsprintfA
GetWindowLongA
SetWindowLongA
EnableWindow
GetClientRect
PtInRect
LoadMenuA
PostMessageA
SendMessageA
LoadIconA
BringWindowToTop
SetRect

gdi32

TextOutA
Escape
GetStockObject
PtVisible
CreateFontA
SelectObject
GetTextExtentPoint32A
BitBlt
StretchBlt
CreateCompatibleBitmap
CreateCompatibleDC
ExtTextOutA
RectVisible

advapi32

RegCloseKey
RegDeleteValueA
RegOpenKeyA

shell32

SHGetFolderPathA
Shell_NotifyIconA
ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA
SHAutoComplete

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

msvcp90

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

dbghelp

MiniDumpWriteDump

wininet

InternetReadFile
InternetQueryOptionA
HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetGetConnectedState

winmm

timeGetTime

ws2_32

__WSAFDIsSet
closesocket
inet_addr
gethostbyname
socket
select
WSAGetLastError
htons
connect

Exports

Exports

?IsAutoScroll@CWebContainer@@QAE_NXZ
?IsShowContextMenu@CWebContainer@@QAE_NXZ
?SetAutoScroll@CWebContainer@@QAEX_N@Z
?SetShowContextMenu@CWebContainer@@QAEX_N@Z
?SetSink@CWebContainer@@QAEXPAX@Z

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/CLM.dll
.dll windows:5 windows x86 arch:x86

979c60d1a9e5ea5cef580e7d09e55e37

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

49:3a:83:62:04:ea:fe:f6:35:33:30:42:eb:cc:49:19:6e:c5:db:14
Signer

Actual PE Digest

49:3a:83:62:04:ea:fe:f6:35:33:30:42:eb:cc:49:19:6e:c5:db:14

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\CLM.pdb

Imports

kernel32

WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
FindResourceExA
GetProcAddress
FreeLibrary
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
CreateEventA
CloseHandle
GetModuleHandleA
WaitForSingleObject
SetEvent
CreateIoCompletionPort
TerminateThread
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
DeleteCriticalSection
InterlockedCompareExchange
Sleep
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
InterlockedExchange

user32

LoadCursorA
SendMessageA
DefWindowProcA
GetWindowLongA
DestroyWindow
SetWindowLongA
CreateWindowExA
UnregisterClassA
RegisterClassA
LoadIconA

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

wininet

InternetQueryOptionA

msvcr90

??0exception@std@@QAE@XZ
printf
_beginthreadex
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
memset
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
??1exception@std@@UAE@XZ
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_unlock
__dllonexit
_lock
_onexit
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_mbsstr
memmove_s
memcpy_s
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
atoi
_amsg_exit
_mbsupr_s
__CxxFrameHandler3
strcpy_s
_CxxThrowException

Exports

Exports

CreateCLM

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/CNExtract.exe
.exe windows:5 windows x86 arch:x86

9d4cf5b76f2ef10c514dbc1f68590c16

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c6:a1:7f:f9:2c:6e:71:49:06:02:a5:45:dc:f5:a9:ad:be:fb:8a:68
Signer

Actual PE Digest

c6:a1:7f:f9:2c:6e:71:49:06:02:a5:45:dc:f5:a9:ad:be:fb:8a:68

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
GetLastError
CreateToolhelp32Snapshot
WinExec
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CopyFileA
CloseHandle
TerminateProcess
OpenProcess
MoveFileA
DeleteFileA
Sleep
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCommandLineA
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFullPathNameA
GetCurrentDirectoryA
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
LCMapStringA
MultiByteToWideChar
LCMapStringW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BaiduGame/CommonEncryption.dll
.dll windows:5 windows x86 arch:x86

bd2e11174e1f56dff1ba153b4e845cae

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d3:18:c6:fe:dd:f3:ea:2b:2c:c8:5b:fa:9a:59:58:83:5b:37:a6:89
Signer

Actual PE Digest

d3:18:c6:fe:dd:f3:ea:2b:2c:c8:5b:fa:9a:59:58:83:5b:37:a6:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\CGPV2\Output\Bin\Dll\Release\CommonEncryption.pdb

Imports

msvcr90

_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
_initterm_e
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
sprintf
strrchr
??2@YAPAXI@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??3@YAXPAX@Z
memset
memcpy
__CxxFrameHandler3

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

AesDecode
AesEncode
Base64Decode
Base64Encode
CompleteDecode
DesSecurity
MD5Security

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/CrazyConfig.dll
.dll windows:5 windows x86 arch:x86

bd0cca8e0aa5022004d7a2882c32f335

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e8:98:4c:df:33:ee:36:bf:f6:cc:12:ac:77:cd:72:89:64:c6:ea:a3
Signer

Actual PE Digest

e8:98:4c:df:33:ee:36:bf:f6:cc:12:ac:77:cd:72:89:64:c6:ea:a3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\WorkItem\CGP2\CGP\Output\Bin\Dll\Release\CrazyConfig.pdb

Imports

kernel32

RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
HeapFree
VirtualAlloc
HeapReAlloc
HeapSize
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
RaiseException
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
GetLocaleInfoA
InterlockedExchange
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
GetCurrentThreadId
GlobalFlags
GlobalAddAtomA
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
GlobalGetAtomNameA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetModuleHandleW
CompareStringA
GetProcAddress
CreateFileA
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LoadLibraryA
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
lstrcpynA
lstrlenA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FreeEnvironmentStringsW
FindResourceA

user32

DestroyMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
PostMessageA
CreateWindowExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetWindowPos
SetWindowLongA
IsWindow
GetDlgItem
GetSubMenu
GetMenuItemCount
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
GetClientRect
GetMenuItemID
GetMenuState
GetSystemMetrics
CharUpperA
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
LoadCursorA
UnhookWindowsHookEx
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SendMessageA
GetWindowThreadProcessId
PeekMessageA
ValidateRect
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
GetWindowTextA
GetClassInfoExA

gdi32

DeleteDC
CreateBitmap
GetStockObject
ScaleWindowExtEx
ExtTextOutA
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetDeviceCaps
TextOutA
RectVisible
PtVisible
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
Escape

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

CreateCrazyConfig
ReleaseCrazyConfig

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/DownloadUI.dll
.dll windows:5 windows x86 arch:x86

10c49d585b1272dbb632fff1dd927618

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0b:e5:ff:e0:73:6a:ad:a6:ec:20:0a:b1:d2:8b:44:ab:36:d9:0d:21
Signer

Actual PE Digest

0b:e5:ff:e0:73:6a:ad:a6:ec:20:0a:b1:d2:8b:44:ab:36:d9:0d:21

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\DownloadUI.pdb

Imports

dskinlite

dsSkinWindow
dsSetProgressItemPos
dsSetItemStyle
dsGetClientRect
dsSetDrawItemValueEx

showmessagebox

ShowMessage
ShowMessageBox

httpsocket

CreateHttpSocket
ReleaseHttpSocket

mfc90

ord3140
ord2364
ord6584
ord4252
ord6327
ord316
ord601
ord2539
ord4993
ord2899
ord4529
ord4248
ord2069
ord798
ord4668
ord5636
ord4650
ord1496
ord6388
ord3344
ord1678
ord1809
ord1810
ord2208
ord5309
ord5152
ord4617
ord5615
ord321
ord1087
ord4029
ord589
ord793
ord4197
ord3659
ord4890
ord3110
ord3987
ord5646
ord5663
ord4981
ord4333
ord2447
ord5659
ord5657
ord3209
ord2087
ord4199
ord5813
ord6721
ord5533
ord1046
ord4165
ord6018
ord2206
ord2251
ord4733
ord6781
ord4159
ord6783
ord4409
ord4434
ord820
ord2592
ord1490
ord310
ord1321
ord6148
ord2672
ord1938
ord693
ord595
ord3554
ord4667
ord4895
ord4334
ord2886
ord4057
ord4067
ord4066
ord3244
ord2759
ord2888
ord2769
ord3135
ord2961
ord4714
ord3107
ord2978
ord2766
ord5633
ord1728
ord1791
ord1792
ord2139
ord5608
ord1446
ord3218
ord6356
ord5389
ord3671
ord6782
ord4160
ord6784
ord1644
ord2368
ord2375
ord2625
ord2607
ord2605
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5647
ord4589
ord6780
ord5497
ord2074
ord5585
ord4644
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord2280
ord639
ord374
ord3783
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord800
ord6001

msvcr90

__dllonexit
_unlock
_stricmp
_encode_pointer
_lock
_CxxThrowException
_onexit
_decode_pointer
_malloc_crt
free
memset
__CxxFrameHandler3
_purecall
??0exception@std@@QAE@XZ
memmove_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_invalid_parameter_noinfo
sprintf_s
_encoded_null
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
strcpy_s

kernel32

DeleteFileA
Process32First
InterlockedDecrement
GetCurrentDirectoryA
lstrcmpiA
GetLastError
InterlockedIncrement
Process32Next
GetModuleFileNameA
LocalFree
LocalAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
CreateToolhelp32Snapshot

user32

SendMessageA
EnableWindow
PostMessageA
IsWindow
SetTimer

shell32

ShellExecuteA

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Exports

Exports

_CreateDownloadUIObj@0

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/EncrpytModule.dll
.dll windows:5 windows x86 arch:x86

951aa10c54344a5dc484ea05439b5b1f

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a2:ea:61:e8:00:46:97:16:8c:21:a3:36:26:30:eb:21:43:bb:90:4e
Signer

Actual PE Digest

a2:ea:61:e8:00:46:97:16:8c:21:a3:36:26:30:eb:21:43:bb:90:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\EncrpytModule.pdb

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr90

free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_malloc_crt
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_encode_pointer
??2@YAPAXI@Z
fclose
fseek
ftell
fwrite
fread
fopen
??_U@YAPAXI@Z
??_V@YAXPAX@Z
??3@YAXPAX@Z
_adjust_fdiv
memcpy

Exports

Exports

CloseEncrpytFile
GetEncrpytFileLength
OpenEncrpytFile
ReadEncrpytFile
WriteEncrpytFile

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/Flash.exe
.exe windows:5 windows x86 arch:x86

ee2ef73d89b7240126ad8a542654c1e3

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

3f:47:6d:6b:e3:28:60:fc:f6:15:a0:0d:42:0d:0f:07:0a:67:45:65
Signer

Actual PE Digest

3f:47:6d:6b:e3:28:60:fc:f6:15:a0:0d:42:0d:0f:07:0a:67:45:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc90

ord2607
ord2625
ord2375
ord2368
ord1644
ord6784
ord4160
ord6782
ord3671
ord5389
ord6356
ord3218
ord1446
ord5608
ord2139
ord1792
ord1791
ord1728
ord5633
ord3135
ord4895
ord4668
ord3506
ord2069
ord4993
ord3987
ord1108
ord374
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2605
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord800
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5636
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord266
ord4334
ord4890
ord4667
ord3659
ord639
ord6005
ord6584
ord1678
ord601
ord5615
ord4617
ord5152
ord5309
ord2208
ord1810
ord1809
ord3344
ord6388
ord1755
ord1752
ord4331
ord1496
ord4650
ord5585
ord2074
ord5497
ord6780
ord2206
ord316
ord1098
ord1220
ord1137
ord4197
ord793
ord589
ord4029
ord4952
ord265
ord798
ord4589
ord1276

msvcr90

malloc
__CxxFrameHandler3
_CxxThrowException
memset
_setmbcp
fopen
free
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_beginthreadex
printf
fflush
fwrite
fclose
sprintf_s
_purecall
sprintf
exit
_stat64i32
??0exception@std@@QAE@XZ
memmove_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_invalid_parameter_noinfo
atoi
strcpy_s
strcat_s
_mbsrchr

kernel32

GetLastError
CreateDirectoryA
InterlockedDecrement
lstrlenA
GetTickCount
DeleteFileA
CreateMutexA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WaitForSingleObject
GetModuleFileNameA
MultiByteToWideChar
HeapFree
GetProcessHeap
MoveFileA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
TerminateThread
CreateEventA
CreateIoCompletionPort
GetQueuedCompletionStatus
InterlockedIncrement
PostQueuedCompletionStatus
SetEvent

user32

GetSystemMetrics
FindWindowA
SendMessageA
LoadIconA
GetClientRect
PostMessageA
UpdateLayeredWindow
ReleaseDC
GetDC
EqualRect
GetWindowRect
SetCursor
DefWindowProcA
SetWindowLongA
GetWindowLongA
SetWindowPos
GetDesktopWindow
CreateWindowExA
RegisterClassExA
EnableWindow
SetTimer
GetClassInfoA

gdi32

SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
DeleteObject

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

ole32

OleSetContainedObject
OleCreate
CoInitialize
OleDraw

oleaut32

GetErrorInfo
VariantClear
SysAllocString
SysFreeString

wininet

InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetGetConnectedState

winmm

timeGetTime

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/GameStart.exe
.exe windows:5 windows x86 arch:x86

18cb897e7acb24baa42a36ac59f9ee14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\百度GameStart实例\GameStart\Release\GS.pdb

Imports

mfc90

ord9952
ord13174
ord12384
ord1137
ord4733
ord10437
ord601
ord310
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord8432
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord9252
ord4197
ord7312
ord7118
ord4029
ord4952
ord10284
ord13116
ord12145
ord12597
ord7746
ord9945
ord4409
ord4434
ord4159
ord6783
ord6781
ord1276
ord800

msvcr90

_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_setmbcp

kernel32

SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
InterlockedExchange
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep

shell32

ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/GameTreeCtrl.dll
.dll windows:5 windows x86 arch:x86

4b98345bb15fd2f8efabb59ef18394f6

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

fd:08:46:ad:95:ea:93:4e:a5:31:de:dd:0a:d0:b1:cd:fb:24:75:ed
Signer

Actual PE Digest

fd:08:46:ad:95:ea:93:4e:a5:31:de:dd:0a:d0:b1:cd:fb:24:75:ed

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\GameTreeCtrl.pdb

Imports

dskinlite

dsDrawImage
dsSkinWindow

lobbymodule

CreateILobbyModule

showmessagebox

ShowMessage

kernel32

GetModuleHandleW
GetFileAttributesA
GetFileSizeEx
GetFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
RtlUnwind
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
HeapSize
GetACP
IsValidCodePage
GetOEMCP
LCMapStringW
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetDriveTypeA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetCPInfo
GlobalFlags
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleFileNameW
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GetCurrentProcessId
lstrlenA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
MultiByteToWideChar
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
DeleteFileA
CreateDirectoryA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCurrentDirectoryA
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
LCMapStringA

user32

UnregisterClassA
CharUpperA
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
LoadIconA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextA
GetLastActivePopup
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetScrollInfo
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
EndPaint
BeginPaint
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
SetWindowLongA
LoadBitmapA
SetRect
ScreenToClient
GetCursorPos
LoadCursorA
ReleaseDC
GetSysColorBrush
GetDC
GetClientRect
GetSysColor
CopyRect
PostMessageA
GetSubMenu
GetWindowRect
GetActiveWindow
ClientToScreen
InvalidateRect
SetCursor
GetParent
SendMessageA
GetWindowLongA
DestroyMenu
EnableWindow
LoadImageA
SetMenu
GetForegroundWindow

gdi32

SetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
CreatePen
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
PtVisible
Escape
ExtTextOutA
TextOutA
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
GetStockObject
CreateFontA
DeleteObject
MoveToEx
LineTo
GetClipBox
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32A
StretchBlt
GetObjectA
DeleteDC
SetTextColor
SetBkColor
CreateBitmap
RectVisible

msimg32

TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA

oleaut32

VariantClear
VariantChangeType
VariantInit

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

wininet

InternetQueryOptionA

Exports

Exports

CreateTreeCtrl
_TREEDllPreTranslateMessage@4

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/HttpSocket.dll
.dll windows:5 windows x86 arch:x86

fbc80eabd73818c4afe065590781551d

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

12:3f:4c:eb:d7:29:3a:3a:ff:ba:3c:79:b2:6f:36:f6:7f:97:d2:8e
Signer

Actual PE Digest

12:3f:4c:eb:d7:29:3a:3a:ff:ba:3c:79:b2:6f:36:f6:7f:97:d2:8e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\CGPV2\BD_Ver\CltSrc\Common\SocketHttp\Release\HttpSocket.pdb

Imports

mfc90

ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4434
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord798
ord265
ord266
ord316
ord601
ord321
ord1087
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord820
ord1211
ord817
ord310
ord2539
ord4392
ord4507
ord4477
ord2481
ord2692
ord4333
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord3659
ord4197
ord793
ord589
ord4029
ord800

msvcr90

malloc
memcpy
memset
_initterm_e
memmove_s
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_CxxThrowException
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
strcpy_s
_purecall
?what@exception@std@@UBEPBDXZ
vsprintf_s
atoi
sprintf_s
fopen_s
fclose
fwrite
strcat_s
printf
_beginthreadex

kernel32

InterlockedExchange
DeleteCriticalSection
EnterCriticalSection
ResetEvent
LeaveCriticalSection
GetLastError
Sleep
CreateThread
CloseHandle
GetTickCount
DeleteFileA
MoveFileA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InitializeCriticalSection
LocalAlloc
LocalFree
TerminateThread
CreateEventA
CreateIoCompletionPort
InterlockedDecrement
InterlockedIncrement
SetEvent
WaitForSingleObject

user32

SetTimer
KillTimer
PostThreadMessageA
GetMessageA

msvcp90

??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

ws2_32

ioctlsocket
htons
WSASocketA
setsockopt
shutdown
ntohs
WSACleanup
WSAStartup
connect
WSAGetLastError
select
send
recv
closesocket
gethostbyname

Exports

Exports

CreateHttpSocket
ReleaseHttpSocket

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/LeftTabBar.dll
.dll windows:5 windows x86 arch:x86

df469dd9fbd44684e8652f83d3481c07

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

42:e7:dd:5f:69:b7:2e:d7:7c:fd:b2:8e:21:9f:f2:b2:31:92:a7:50
Signer

Actual PE Digest

42:e7:dd:5f:69:b7:2e:d7:7c:fd:b2:8e:21:9f:f2:b2:31:92:a7:50

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\LeftTabBar.pdb

Imports

dskinlite

dsSetDrawItemVisible
dsSkinWindow

mfc90

ord1644
ord6784
ord4160
ord6782
ord3671
ord5389
ord6356
ord3218
ord1446
ord5608
ord1792
ord1791
ord5633
ord3135
ord3277
ord4895
ord3480
ord595
ord1500
ord2069
ord4668
ord5636
ord4650
ord1496
ord6388
ord3344
ord1678
ord2368
ord1810
ord2208
ord4993
ord5309
ord5152
ord4617
ord5615
ord2692
ord1321
ord265
ord266
ord2375
ord2625
ord2607
ord2605
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5647
ord4589
ord6780
ord5497
ord2074
ord5585
ord4638
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord1668
ord2274
ord6584
ord4529
ord2592
ord1728
ord1087
ord321
ord3987
ord611
ord2139
ord639
ord376
ord3783
ord2539
ord316
ord601
ord798
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord4197
ord793
ord589
ord4029
ord800
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord1809

msvcr90

atoi
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_purecall
_CxxThrowException
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
isalpha
tolower
isalnum
strchr
isspace
strncmp
fclose
fseek
ftell
ferror
fprintf
fread
fopen_s
_vsnprintf_s
fputc
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z

kernel32

InterlockedExchange
InterlockedDecrement
LocalFree
LocalAlloc
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement

user32

EnableWindow

msvcp90

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

Exports

Exports

CreateLeftTabBarCtrl

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/LobbyButton.dll
.dll windows:5 windows x86 arch:x86

3edb97a7393b72f1d14e05eaae013921

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

66:5b:6e:40:b6:55:85:cc:cd:1b:0e:c9:8d:56:bb:8d:32:31:0b:15
Signer

Actual PE Digest

66:5b:6e:40:b6:55:85:cc:cd:1b:0e:c9:8d:56:bb:8d:32:31:0b:15

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\LobbyButton.pdb

Imports

dskinlite

dsSkinWindow

mfc90

ord4409
ord4434
ord3783
ord376
ord639
ord2274
ord1668
ord3346
ord6391
ord1755
ord1752
ord4331
ord1497
ord4638
ord5585
ord2074
ord5497
ord6780
ord4589
ord5647
ord3732
ord5139
ord4688
ord1729
ord6446
ord5668
ord5666
ord958
ord963
ord967
ord965
ord969
ord2610
ord2630
ord2614
ord2620
ord2618
ord2616
ord2633
ord2628
ord2612
ord2635
ord2623
ord2605
ord2607
ord6783
ord2375
ord2368
ord1644
ord6784
ord4160
ord6782
ord3671
ord5389
ord6356
ord3218
ord1446
ord5608
ord2139
ord1792
ord1791
ord1728
ord5633
ord3135
ord3277
ord4895
ord3480
ord595
ord611
ord3987
ord321
ord1087
ord2592
ord6584
ord798
ord4668
ord5636
ord4650
ord1496
ord6388
ord3344
ord1678
ord1809
ord1810
ord2208
ord4993
ord5309
ord5152
ord4617
ord5615
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord4197
ord793
ord589
ord4029
ord800
ord2625
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801

msvcr90

__dllonexit
_unlock
__CxxFrameHandler3
_encode_pointer
_lock
_purecall
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit

kernel32

InterlockedIncrement
LocalFree
LocalAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement

user32

GetClientRect
EnableWindow

Exports

Exports

CreateLobbyButtomCtrl

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/LobbyModule.dll
.dll windows:5 windows x86 arch:x86

a97f4883681ac367fb1bbbe6f1f0cf0d

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

9c:ae:8f:22:78:3e:e3:88:75:b9:4d:89:90:28:7b:ed:2a:08:b8:96
Signer

Actual PE Digest

9c:ae:8f:22:78:3e:e3:88:75:b9:4d:89:90:28:7b:ed:2a:08:b8:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\LobbyModule.pdb

Imports

mfc90

ord2539
ord316
ord817
ord2692
ord1321
ord601
ord266
ord265
ord605
ord1278
ord321
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord1087
ord798
ord800

msvcr90

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
__CxxFrameHandler3
_beginthreadex
printf
_CxxThrowException
isalpha
tolower
isalnum
strchr
isspace
strncmp
ftell
fprintf
fopen_s
_vsnprintf_s
_vsnprintf
fseek
fread
_purecall
strcat_s
atol
atoi
strcpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
fflush
fwrite
fclose
fopen
sprintf_s
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
memset
_except_handler4_common

kernel32

LocalAlloc
OutputDebugStringA
CreateDirectoryA
GetCurrentDirectoryA
MoveFileA
DeleteFileA
GetTickCount
lstrlenA
LoadLibraryA
GetProcAddress
Sleep
InterlockedIncrement
InterlockedDecrement
CreateEventA
CloseHandle
WaitForSingleObject
SetEvent
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
TerminateThread
LocalFree
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
FreeLibrary

user32

KillTimer
GetMessageA
PostThreadMessageA
SetTimer

shlwapi

PathFileExistsA

msvcp90

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetGetConnectedState

winmm

timeGetTime

Exports

Exports

CreateILobbyModule

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/LobbySkin/GeneralControl.xml
BaiduGame/LobbySkin/GeneralControl/Button/ModifySkin.png
.png
BaiduGame/LobbySkin/GeneralControl/Button/ModifySkin0.png
.png
BaiduGame/LobbySkin/GeneralControl/Button/ModifySkin1.png
.png
BaiduGame/LobbySkin/GeneralControl/Button/OptionSet.png
.png
BaiduGame/LobbySkin/GeneralControl/Button/button.png
.png
BaiduGame/LobbySkin/GeneralControl/Button/button_1.png
.png
BaiduGame/LobbySkin/GeneralControl/Button/hide_button.png
.png
BaiduGame/LobbySkin/GeneralControl/Button/optionSetOver.png
.png
BaiduGame/LobbySkin/GeneralControl/Button/show_button.png
.png
BaiduGame/LobbySkin/GeneralControl/Button/sysset_button.png
.png
BaiduGame/LobbySkin/GeneralControl/CheckButton/checkbox_button.png
.png
BaiduGame/LobbySkin/GeneralControl/ComboBox/combobox_buttonDown.bmp
BaiduGame/LobbySkin/GeneralControl/ComboBox/combobox_buttonHot.bmp
BaiduGame/LobbySkin/GeneralControl/ComboBox/combobox_buttonNor.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/HeaderCtrl_arrowUp.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/Headerctrl_Sperator.png
.png
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/Headerctrl_arrowDown.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/headerctrl_ItemDown.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/headerctrl_ItemHot.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/headerctrl_itemNor.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/matchlist_ItemDown.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/matchlist_ItemHot.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/matchlist_Sperator.png
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/matchlist_itemNor.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/toplist_ItemDown.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/toplist_ItemHot.bmp
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/toplist_Sperator.png
.png
BaiduGame/LobbySkin/GeneralControl/HeaderCtrl/toplist_itemNor.bmp
BaiduGame/LobbySkin/GeneralControl/LOGO.ico
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/Armor.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/Enter.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/Enter_i.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/Enter_n.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/ExitMatch.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/Registration.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/Rules.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/listItem_down.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/listItem_nor.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/listItem_nor2.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/listItem_nor3.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/listItem_over.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/list_tab_button_down.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/list_tab_button_normal.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/button/list_tab_button_over.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/blue.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/blue_flag.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/inlay_blue.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/inlay_blue_flag.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/inlay_red.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/inlay_red_flag.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/inlay_white.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/inlay_white_flag.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/inlay_yellow.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/inlay_yellow_flag.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/matchicon.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/red.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/red_flag.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/white.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/white_flag.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/yellow.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/icon/yellow_flag.png
.png
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/progress/progress_bg.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/progress/progress_fg.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/window/ListHeaderBK.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/window/Queue_Separator1.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/window/Queue_Separator2.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/window/Separator.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/window/Tab_bg.bmp
BaiduGame/LobbySkin/GeneralControl/MatchLobbySkin/window/matchlogo.png
.png
BaiduGame/LobbySkin/GeneralControl/Menu/menuItem_arrow.bmp
BaiduGame/LobbySkin/GeneralControl/Menu/menuItem_check.bmp
BaiduGame/LobbySkin/GeneralControl/Menu/menuItem_seperator.bmp
BaiduGame/LobbySkin/GeneralControl/Menu/menubg.bmp
BaiduGame/LobbySkin/GeneralControl/Menu/menuitem_select.bmp
BaiduGame/LobbySkin/GeneralControl/Progress/ProgressBackground.bmp
BaiduGame/LobbySkin/GeneralControl/Progress/ProgressForeground.bmp
BaiduGame/LobbySkin/GeneralControl/RadioButton/radiobtn.png
.png
BaiduGame/LobbySkin/GeneralControl/ScrollBar/Untitled.pdn
BaiduGame/LobbySkin/GeneralControl/ScrollBar/scrollbar.bmp
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/bk.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color0.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color00.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color1.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color11.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color2.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color22.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color3.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color33.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color4.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color44.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color5.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color55.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color6.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/color66.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/hug.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/hug0.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/lightness.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/saturation.png
.png
BaiduGame/LobbySkin/GeneralControl/Skin_Modify/slider.png
.png
BaiduGame/LobbySkin/GeneralControl/Split/Split_line.bmp
BaiduGame/LobbySkin/GeneralControl/SysButton/close_button.png
.png
BaiduGame/LobbySkin/GeneralControl/SysButton/huanyuan_button.png
.png
BaiduGame/LobbySkin/GeneralControl/SysButton/maximum_button.png
.png
BaiduGame/LobbySkin/GeneralControl/SysButton/minimum_button.png
.png
BaiduGame/LobbySkin/GeneralControl/Texture/color1_L.png
.png
BaiduGame/LobbySkin/GeneralControl/Texture/color1_R.png
.png
BaiduGame/LobbySkin/GeneralControl/Title.png
.png
BaiduGame/LobbySkin/GeneralControl/Window/BG_b.bmp
BaiduGame/LobbySkin/GeneralControl/Window/BG_s.bmp
BaiduGame/LobbySkin/GeneralControl/Window/LobbyTips.bmp
BaiduGame/LobbySkin/GeneralControl/Window/Main_BG.bmp
BaiduGame/LobbySkin/GeneralControl/Window/ToolBK.bmp
BaiduGame/LobbySkin/GeneralControl/Window/windowBkg.bmp
BaiduGame/LobbySkin/GeneralControl/datetimectrl/buttonDown.bmp
BaiduGame/LobbySkin/GeneralControl/edit/edit_disable.bmp
BaiduGame/LobbySkin/GeneralControl/edit/edit_normal.bmp
BaiduGame/LobbySkin/GeneralControl/hand.cur
BaiduGame/LobbySkin/GeneralControl/large_logo.png
.png
BaiduGame/LobbySkin/GeneralControl/listctrl/bar_a.bmp
BaiduGame/LobbySkin/GeneralControl/listctrl/bar_b.bmp
BaiduGame/LobbySkin/GeneralControl/loading.gif
.gif
BaiduGame/LobbySkin/GeneralControl/loading_ani.gif
.gif
BaiduGame/LobbySkin/GeneralControl/loading_ani_small.gif
.gif
BaiduGame/LobbySkin/GeneralControl/messagebox/ICON_E.png
.png
BaiduGame/LobbySkin/GeneralControl/messagebox/ICON_Q.png
.png
BaiduGame/LobbySkin/GeneralControl/messagebox/ICON_T.png
.png
BaiduGame/LobbySkin/GeneralControl/spinbutton/spinbutton.bmp
BaiduGame/LobbySkin/IndividualInfoSkin.xml
BaiduGame/LobbySkin/IndividualInfoSkin/Ani/Logon_ani.gif
.gif
BaiduGame/LobbySkin/IndividualInfoSkin/Ani/guest_enter_ani.gif
.gif
BaiduGame/LobbySkin/IndividualInfoSkin/Edit/user_name_edit.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/Static/register_info.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/enter_button.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/info_normal.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/info_over.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/player_photo_normal.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/player_photo_over.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/quit.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/register_button.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/tab_button_down.bmp
BaiduGame/LobbySkin/IndividualInfoSkin/button/tab_down.bmp
BaiduGame/LobbySkin/IndividualInfoSkin/button/tab_normal.bmp
BaiduGame/LobbySkin/IndividualInfoSkin/button/tab_over.bmp
BaiduGame/LobbySkin/IndividualInfoSkin/button/user_charge_button.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/user_family_button.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/user_friend_button.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/user_info_button.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/user_labour_union.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/user_name_normal.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/user_name_over.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/button/user_res_button.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/face/boy.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/face/boyface.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/face/default_photo.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/face/girl.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/face/girlface.png
.png
BaiduGame/LobbySkin/IndividualInfoSkin/window/windowBkg.bmp
BaiduGame/LobbySkin/LobbyButtonSkin.xml
BaiduGame/LobbySkin/LobbyButtonSkin/button/home_button.png
.png
BaiduGame/LobbySkin/LobbyButtonSkin/button/huodong.png
.png
BaiduGame/LobbySkin/LobbyButtonSkin/button/member_button.png
.png
BaiduGame/LobbySkin/LobbyButtonSkin/button/shopping_button.png
.png
BaiduGame/LobbySkin/LobbyButtonSkin/button/tieba.png
.png
BaiduGame/LobbySkin/LobbyButtonSkin/logo/Logo.png
.png
BaiduGame/LobbySkin/LobbyButtonSkin/window/windowBkg.bmp
BaiduGame/LobbySkin/LobbyTreeSkin.xml
BaiduGame/LobbySkin/LoginSkin.xml
BaiduGame/LobbySkin/LoginSkin/button/logon_btn.png
.png
BaiduGame/LobbySkin/LoginSkin/button/more_button.png
.png
BaiduGame/LobbySkin/LoginSkin/edit/input_bg.png
.png
BaiduGame/LobbySkin/LoginSkin/window/UpdateBK.png
.png
BaiduGame/LobbySkin/LoginSkin/window/UpdateFlash.png
.png
BaiduGame/LobbySkin/LoginSkin/window/banner.png
.png
BaiduGame/LobbySkin/LoginSkin/window/enter_ani.gif
.gif
BaiduGame/LobbySkin/LoginSkin/window/enter_bg.png
.png
BaiduGame/LobbySkin/MatchLobbySkin.xml
BaiduGame/LobbySkin/MatchLobbySkin/button/Armor.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/button/Enter.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/button/Enter_i.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/button/Enter_n.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/button/ExitMatch.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/button/Registration.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/button/Rules.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/button/listItem_down.bmp
BaiduGame/LobbySkin/MatchLobbySkin/button/listItem_nor.bmp
BaiduGame/LobbySkin/MatchLobbySkin/button/listItem_nor2.bmp
BaiduGame/LobbySkin/MatchLobbySkin/button/listItem_nor3.bmp
BaiduGame/LobbySkin/MatchLobbySkin/button/listItem_over.bmp
BaiduGame/LobbySkin/MatchLobbySkin/button/list_tab_button_down.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/button/list_tab_button_normal.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/button/list_tab_button_over.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/blue.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/blue_flag.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/inlay_blue.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/inlay_blue_flag.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/inlay_red.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/inlay_red_flag.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/inlay_white.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/inlay_white_flag.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/inlay_yellow.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/inlay_yellow_flag.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/matchicon.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/red.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/red_flag.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/white.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/white_flag.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/yellow.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/icon/yellow_flag.png
.png
BaiduGame/LobbySkin/MatchLobbySkin/progress/progress_bg.bmp
BaiduGame/LobbySkin/MatchLobbySkin/progress/progress_fg.bmp
BaiduGame/LobbySkin/MatchLobbySkin/window/ListHeaderBK.bmp
BaiduGame/LobbySkin/MatchLobbySkin/window/Queue_Separator1.bmp
BaiduGame/LobbySkin/MatchLobbySkin/window/Queue_Separator2.bmp
BaiduGame/LobbySkin/MatchLobbySkin/window/Separator.bmp
BaiduGame/LobbySkin/MatchLobbySkin/window/Tab_bg.bmp
BaiduGame/LobbySkin/MatchLobbySkin/window/matchlogo.png
.png
BaiduGame/LobbySkin/MiniIM/FriendBackground.png
.png
BaiduGame/LobbySkin/MiniIM/SubGroupBackground.png
.png
BaiduGame/LobbySkin/MiniIM/arrow.png
.png
BaiduGame/LobbySkin/MiniIM/boy.png
.png
BaiduGame/LobbySkin/MiniIM/girl.png
.png
BaiduGame/LobbySkin/MiniIM/list_BG.bmp
BaiduGame/LobbySkin/MiniIMSkin.xml
BaiduGame/LobbySkin/RoomSkin.xml
BaiduGame/LobbySkin/RoomSkin/Background/talk_tools_BG.png
.png
BaiduGame/LobbySkin/RoomSkin/Background/white_dot.bmp
BaiduGame/LobbySkin/RoomSkin/button/admin_icon.png
.png
BaiduGame/LobbySkin/RoomSkin/button/clear_escape_icon.png
.png
BaiduGame/LobbySkin/RoomSkin/button/clear_zero_icon.png
.png
BaiduGame/LobbySkin/RoomSkin/button/color_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/double_score_icon.png
.png
BaiduGame/LobbySkin/RoomSkin/button/face_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/fireworks_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/fufenqingling_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/message_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/more_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/no_less_icon.png
.png
BaiduGame/LobbySkin/RoomSkin/button/normal_prop.png
.png
BaiduGame/LobbySkin/RoomSkin/button/quick_join_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/screen_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/search_icon.png
.png
BaiduGame/LobbySkin/RoomSkin/button/send_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/setting_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/taopaolvqingling_button.png
.png
BaiduGame/LobbySkin/RoomSkin/button/trumpet_button.png
.png
BaiduGame/LobbySkin/RoomSkin/edit/input1_bg.png
.png
BaiduGame/LobbySkin/RoomSkin/edit/input2_bg.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/Match1.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/Match2.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/Match3.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/Match4.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/Match5.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/Match6.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/female.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/female_m.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/free.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/gm.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/guest.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/lookon.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/male.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/male_m.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/offline.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/play.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/ready.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/sit.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/star1.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/star2.png
.png
BaiduGame/LobbySkin/RoomSkin/userstate/star3.png
.png
BaiduGame/LobbySkin/RoomTabSkin.xml
BaiduGame/LobbySkin/RoomTabSkin/button/L_move_button.png
.png
BaiduGame/LobbySkin/RoomTabSkin/button/R_move_button.png
.png
BaiduGame/LobbySkin/RoomTabSkin/button/close_s_button.bmp
BaiduGame/LobbySkin/RoomTabSkin/button/close_s_button.png
.png
BaiduGame/LobbySkin/RoomTabSkin/button/tab_B_button_down.png
.png
BaiduGame/LobbySkin/RoomTabSkin/button/tab_B_button_normal.png
.png
BaiduGame/LobbySkin/RoomTabSkin/button/tab_B_button_over.png
.png
BaiduGame/LobbySkin/RoomTabSkin/button/tab_down.bmp
BaiduGame/LobbySkin/RoomTabSkin/button/tab_normal.bmp
BaiduGame/LobbySkin/RoomTabSkin/button/tab_over.bmp
BaiduGame/LobbySkin/RoomTabSkin/window/Room_BG.bmp
BaiduGame/LobbySkin/RoomTabSkin/window/ad.png
.png
BaiduGame/LobbySkin/RoomTabSkin/window/lineL.png
.png
BaiduGame/LobbySkin/RoomTabSkin/window/lineR.png
.png
BaiduGame/LobbySkin/RoomTabSkin/window/tab_BG.png
.png
BaiduGame/LobbySkin/TableSkin.xml
BaiduGame/LobbySkin/UserListSkin.xml
BaiduGame/LobbySkin/WebViewSkin.xml
BaiduGame/LobbySkin/WebViewSkin/button/Refresh_button.png
.png
BaiduGame/LobbySkin/WebViewSkin/button/back_button.png
.png
BaiduGame/LobbySkin/WebViewSkin/button/forward_button.png
.png
BaiduGame/LobbySkin/WebViewSkin/button/fullscreen_button.png
.png
BaiduGame/LobbySkin/WebViewSkin/button/main_button.png
.png
BaiduGame/LobbySkin/WebViewSkin/button/restore_button.png
.png
BaiduGame/LobbySkin/WebViewSkin/window/top_BG.bmp
BaiduGame/LobbySkin/lobbytreeskin/button/download.png
.png
BaiduGame/LobbySkin/lobbytreeskin/button/quick_join.png
.png
BaiduGame/LobbySkin/lobbytreeskin/button/search_button.png
.png
BaiduGame/LobbySkin/lobbytreeskin/selectbar/select_bar.bmp
BaiduGame/LobbySkin/lobbytreeskin/selectbar/selectbar.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/HOT.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/LOGO.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/add.png
.png
BaiduGame/LobbySkin/lobbytreeskin/treeicon/bisai.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/default.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/fenzu.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/huanledou.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/kaixinguo.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/list_down.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/new.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/noDown.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/sub.png
.png
BaiduGame/LobbySkin/lobbytreeskin/treeicon/wadou.bmp
BaiduGame/LobbySkin/lobbytreeskin/treeicon/web.bmp
BaiduGame/LobbySkin/lobbytreeskin/window/list_BG.bmp
BaiduGame/LobbySkin/lobbytreeskin/window/list_BG_u.bmp
BaiduGame/LobbySkin/lobbytreeskin/window/search_BG.png
.png
BaiduGame/LoginUI.dll
.dll windows:5 windows x86 arch:x86

3cb52c0df0818bbd44aefffbc8dd7a28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dskinlite

dsSkinWindow

httpsocket

CreateHttpSocket
ReleaseHttpSocket

showmessagebox

ShowMessageBox

mfc90

ord2539
ord310
ord820
ord1321
ord2692
ord321
ord1087
ord2208
ord2360
ord1678
ord2592
ord2364
ord3175
ord4617
ord4305
ord2905
ord2480
ord2481
ord817
ord4392
ord3213
ord4507
ord403
ord663
ord5753
ord1555
ord4668
ord5636
ord1496
ord6388
ord3344
ord1809
ord1810
ord5309
ord5615
ord1603
ord305
ord1611
ord4506
ord4481
ord1607
ord474
ord721
ord2451
ord2449
ord2452
ord1746
ord4281
ord3946
ord6559
ord4030
ord2069
ord3485
ord3227
ord3122
ord1745
ord1744
ord2125
ord2246
ord4282
ord6433
ord4279
ord3418
ord6430
ord6006
ord3728
ord2965
ord4512
ord4515
ord6558
ord4114
ord2895
ord6252
ord4528
ord6556
ord6583
ord4383
ord2359
ord6289
ord6290
ord2342
ord1391
ord1401
ord5745
ord1751
ord1866
ord1867
ord3663
ord3940
ord265
ord266
ord6584
ord6557
ord2899
ord1490
ord4529
ord4993
ord3987
ord1938
ord654
ord595
ord796
ord3519
ord4895
ord3277
ord3135
ord5633
ord1728
ord1791
ord1792
ord2139
ord5608
ord1446
ord3218
ord6356
ord5389
ord3671
ord6782
ord4160
ord6784
ord1644
ord2368
ord2375
ord2625
ord2607
ord2605
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord4589
ord6780
ord5497
ord2074
ord5585
ord4650
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord639
ord374
ord3783
ord798
ord5647
ord4116
ord300
ord601
ord316
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord1098
ord4197
ord793
ord589
ord4029
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord800
ord3077

msvcr90

strchr
isalnum
tolower
isspace
strncmp
fseek
memcpy
ftell
fprintf
fread
fopen_s
_vsnprintf_s
_purecall
memset
strcpy_s
atoi
_stat64i32
fclose
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
isalpha
memcpy_s

kernel32

DeleteFileA
GetTickCount
Sleep
MoveFileA
InterlockedIncrement
InterlockedDecrement
LocalFree
LocalAlloc
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateDirectoryA

user32

KillTimer
SetTimer
EnableWindow
SendMessageA
CharLowerA
IsWindowVisible
GetKeyState

msvcp90

?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z

wininet

InternetQueryOptionA

ws2_32

connect
WSAGetLastError
gethostbyname
__WSAFDIsSet
closesocket
select
htons
socket
inet_addr

Exports

Exports

CreateLoginUICtrl

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/LogonConfig.dll
.dll windows:5 windows x86 arch:x86

86c45c4582eb0f5c6598241612152fab

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

de:aa:bf:30:7b:5e:c1:80:f8:f5:72:43:6f:f5:5b:34:65:d8:21:9b
Signer

Actual PE Digest

de:aa:bf:30:7b:5e:c1:80:f8:f5:72:43:6f:f5:5b:34:65:d8:21:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\LogonConfig.pdb

Imports

encrpytmodule

WriteEncrpytFile
OpenEncrpytFile
GetEncrpytFileLength
CloseEncrpytFile
ReadEncrpytFile

mfc90

ord1137
ord1087
ord321
ord817
ord2327
ord820
ord310
ord266
ord4434
ord4392
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord945
ord5963
ord2692
ord4409
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord798
ord4197
ord793
ord589
ord4029
ord601
ord316
ord265
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord322
ord801
ord800

msvcr90

memset
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
strcpy_s
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memcpy_s
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
atoi
atol
_time64
_localtime64_s
?what@exception@std@@UBEPBDXZ
_purecall
_vsnprintf_s
fprintf
strncmp
isspace
strchr
isalnum
tolower
isalpha
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
_CxxThrowException

kernel32

lstrcpyA
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameA
MoveFileA
Sleep
lstrlenA
lstrcmpiA
LocalFree
LocalAlloc
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

shlwapi

PathFileExistsA

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

Exports

Exports

CreateILogonConfig

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/MiniIMLogic.dll
.dll .js windows:5 windows x86 arch:x86 polyglot

24fdb5f85f156b91421c9b3607097636

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

58:6c:23:1c:f4:48:f7:49:0d:5b:27:51:85:ac:90:23:20:4f:4a:85
Signer

Actual PE Digest

58:6c:23:1c:f4:48:f7:49:0d:5b:27:51:85:ac:90:23:20:4f:4a:85

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\CGPV2\BD_Ver\CltSrc\BD_Lobby\Bin\Release\MiniIMLogic.pdb

Imports

kernel32

WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
FindResourceExA
CreateDirectoryA
GetCurrentDirectoryA
GetLocalTime
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcessHeap

tcpclt

TcpSocketFactory

msvcr90

_initterm_e
_amsg_exit
_purecall
__CppXcptFilter
_crt_debugger_hook
_initterm
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_decode_pointer
_encoded_null
free
_malloc_crt
?terminate@@YAXXZ
_encode_pointer
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
fwrite
fclose
fread
fopen
sprintf
strcpy_s
_mbsstr
_stat64i32
_time64
_gmtime64
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
memmove_s
memcpy_s
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf_s
__CxxFrameHandler3
_adjust_fdiv
memset
_CxxThrowException

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

Exports

Exports

CreateMiniIMLogic

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/NetMsgSvr.dll
.dll windows:5 windows x86 arch:x86

1e30adda38da8da229b5a925c7ab9f2e

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a6:45:6d:92:74:58:25:5a:83:ef:00:e8:98:75:51:f9:36:b1:84:1b
Signer

Actual PE Digest

a6:45:6d:92:74:58:25:5a:83:ef:00:e8:98:75:51:f9:36:b1:84:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\NetMsgSvr.pdb

Imports

mfc90

ord4650
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord316
ord796
ord601
ord5585
ord817
ord798
ord2592
ord910
ord3178
ord5835
ord2692
ord1241
ord391
ord1152
ord2074
ord5497
ord6780
ord4589
ord5647
ord3732
ord5139
ord4688
ord1729
ord6446
ord5668
ord5666
ord958
ord963
ord967
ord965
ord969
ord2610
ord2630
ord2614
ord2620
ord2618
ord2616
ord2633
ord2628
ord2612
ord2635
ord2623
ord2605
ord2607
ord2625
ord2375
ord2368
ord1644
ord6784
ord4160
ord6782
ord3671
ord5389
ord6356
ord3218
ord1446
ord5608
ord2139
ord1792
ord1791
ord1728
ord5633
ord2766
ord2978
ord3107
ord4714
ord2961
ord3135
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4895
ord4667
ord3663
ord595
ord4030
ord265
ord2327
ord800
ord947

msvcr90

_initterm
_decode_pointer
_amsg_exit
_encoded_null
free
_malloc_crt
_encode_pointer
vsprintf_s
printf
strlen
memmove
memcpy
strcpy_s
_CxxThrowException
_snprintf
memcmp
__CxxFrameHandler3
memset
_purecall
_initterm_e
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv

kernel32

InterlockedIncrement
lstrcpynA
InterlockedDecrement
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount

user32

EnableWindow
GetDesktopWindow
PostMessageA

wsock32

WSAGetLastError
connect
WSAAsyncSelect
WSASetLastError
htons
socket
closesocket
shutdown
send
gethostbyname
ioctlsocket
recv
ntohs
WSAStartup

Exports

Exports

NewNetMsgSvr

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/RoomControl.dll
.dll windows:5 windows x86 arch:x86

751a81011706b3e9eb22363bd44dc792

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d1:11:0d:27:3d:9f:9c:c4:0e:da:85:fe:9c:68:d5:58:0e:72:87:ff
Signer

Actual PE Digest

d1:11:0d:27:3d:9f:9c:c4:0e:da:85:fe:9c:68:d5:58:0e:72:87:ff

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\RoomControl.pdb

Imports

dskinlite

dsSetItemStyle
dsTrackPopupMenu
dsSetDrawItemVisible
dsSetDrawItemValueEx
dsDrawImage
dsSkinWindow

netmsgsvr

NewNetMsgSvr

showmessagebox

ShowMessage
ShowMessageBox

cb

CreateChatBox
ReleaseChatBox

webcomponent

?PostNcDestroy@CWebContainer@@MAEXXZ
?DoDataExchange@CWebContainer@@MAEXPAVCDataExchange@@@Z
?OnNavigateError@CWebContainer@@UAEXPBD0KPAH@Z
?OnNavigateComplete2@CWebContainer@@UAEXPBD@Z
?OnBeforeNavigate2@CWebContainer@@UAEXPBDK0AAVCByteArray@@0PAH@Z
?CreateControlSite@CWebContainer@@MAEHPAVCOleControlContainer@@PAPAVCOleControlSite@@IABU_GUID@@@Z
?GetThisMessageMap@CWebContainer@@KGPBUAFX_MSGMAP@@XZ
??0CWebContainer@@IAE@XZ
??1CWebContainer@@MAE@XZ
?GetThisClass@CWebContainer@@SGPAUCRuntimeClass@@XZ
?Create@CWebContainer@@SAPAV1@KPAVCWnd@@PAUCRuntimeClass@@@Z
?OnSizeErrorWindow@CWebContainer@@MAEXAAVCSize@@@Z
?OnCreateErrorWindow@CWebContainer@@MAEXPAV1@AAVCSize@@PAPAUHWND__@@@Z
?CrackURL@CWebContainer@@SAHPBDPAU_tagURLComponent@1@@Z
?OnShowErrorWindow@CWebContainer@@MAEXAAVCSize@@H@Z
?OnCloseErrorWindow@CWebContainer@@MAEXPAUHWND__@@@Z

mfc90

ord2103
ord1604
ord4496
ord2277
ord1670
ord4640
ord3487
ord615
ord6616
ord3796
ord474
ord721
ord2451
ord2449
ord2452
ord1746
ord4281
ord3946
ord3077
ord3485
ord3227
ord3122
ord1745
ord1744
ord2125
ord2246
ord4282
ord6433
ord4279
ord3418
ord6430
ord6006
ord3728
ord2965
ord4512
ord4515
ord6558
ord4114
ord2895
ord6252
ord4528
ord6556
ord6583
ord4383
ord2359
ord6289
ord6290
ord2342
ord1391
ord1401
ord5745
ord1751
ord1866
ord1867
ord3663
ord942
ord6676
ord6682
ord2672
ord941
ord1603
ord4223
ord4679
ord2964
ord1689
ord5599
ord1444
ord3670
ord2641
ord2640
ord2642
ord2639
ord2638
ord5639
ord6390
ord3345
ord4364
ord5278
ord5281
ord4786
ord4791
ord4788
ord4806
ord4808
ord4793
ord5194
ord5001
ord4582
ord4575
ord5403
ord4796
ord5199
ord4608
ord5209
ord4850
ord4851
ord4095
ord5341
ord4972
ord5472
ord4846
ord4775
ord4912
ord5264
ord5392
ord4940
ord4889
ord5393
ord4927
ord5369
ord5213
ord4693
ord4783
ord4784
ord5385
ord5215
ord5127
ord4771
ord5476
ord5386
ord5064
ord5367
ord4918
ord5382
ord4535
ord1380
ord2194
ord4536
ord441
ord690
ord3067
ord3066
ord5538
ord6098
ord5720
ord5997
ord6788
ord3175
ord2356
ord2263
ord5753
ord3179
ord6473
ord2097
ord4396
ord4527
ord6464
ord6078
ord3612
ord525
ord6057
ord6474
ord2360
ord6074
ord6170
ord1357
ord3477
ord636
ord367
ord6527
ord2469
ord2470
ord2753
ord6079
ord1358
ord3534
ord2106
ord1183
ord3528
ord744
ord524
ord1254
ord1258
ord6327
ord4252
ord3140
ord4248
ord693
ord3554
ord3244
ord4644
ord2280
ord4531
ord2587
ord766
ord3629
ord4477
ord1938
ord654
ord3519
ord3579
ord1252
ord265
ord4529
ord6048
ord2069
ord3764
ord3228
ord5151
ord4616
ord2207
ord340
ord2591
ord1361
ord1108
ord2130
ord3568
ord2282
ord4498
ord6557
ord2364
ord2592
ord6559
ord1490
ord6584
ord4030
ord376
ord777
ord3643
ord4646
ord1720
ord2283
ord611
ord595
ord796
ord3480
ord3277
ord5647
ord4638
ord1497
ord6391
ord3346
ord1668
ord2274
ord3940
ord3726
ord266
ord1087
ord321
ord4311
ord4481
ord4506
ord1611
ord305
ord4507
ord2481
ord404
ord663
ord5520
ord6793
ord1555
ord5963
ord3213
ord4392
ord817
ord2327
ord3178
ord6613
ord1137
ord300
ord5924
ord310
ord1321
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord3110
ord4890
ord4667
ord3659
ord1098
ord1156
ord4197
ord793
ord589
ord4029
ord798
ord2692
ord5776
ord910
ord5528
ord945
ord2539
ord780
ord579
ord5615
ord4617
ord5309
ord2208
ord1810
ord1809
ord1678
ord3344
ord6388
ord1755
ord1752
ord4331
ord1496
ord4650
ord5585
ord2074
ord5497
ord6780
ord4589
ord5636
ord3732
ord5139
ord4688
ord1729
ord6446
ord5668
ord5666
ord958
ord963
ord967
ord965
ord969
ord2610
ord2630
ord2614
ord2620
ord2618
ord2616
ord2633
ord2628
ord2612
ord2635
ord2623
ord2605
ord2607
ord2625
ord2375
ord2368
ord1644
ord6784
ord4160
ord6782
ord3671
ord5389
ord6356
ord3218
ord1446
ord5608
ord2139
ord1792
ord1791
ord1728
ord5633
ord2766
ord2978
ord3107
ord4714
ord2961
ord3135
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4895
ord4668
ord5152
ord4116
ord6291
ord2899
ord4993
ord3987
ord820
ord601
ord6046
ord6552
ord6043
ord6546
ord4565
ord6549
ord6352
ord6166
ord6084
ord5957
ord6023
ord5846
ord5833
ord6398
ord6157
ord3504
ord2588
ord3479
ord3489
ord333
ord316
ord639
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord322
ord801
ord374
ord3783
ord800
ord5835

msvcr90

fclose
strchr
_mbsrchr
printf
_beginthreadex
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_stricmp
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
fseek
ftell
ferror
fprintf
fread
fopen_s
_purecall
_vsnprintf_s
fputc
isalnum
isalpha
__isascii
iscntrl
isdigit
isgraph
isupper
strncmp
isxdigit
ispunct
__CxxFrameHandler3
islower
isspace
memcpy
_CxxThrowException
tolower
toupper
vsprintf_s
realloc
calloc
_recalloc
malloc
_resetstkoflw
free
_i64toa_s
memmove
sprintf_s
memmove_s
rand
srand
sprintf
_snprintf
_time64
_localtime64_s
strftime
memcpy_s
atol
atoi
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_invalid_parameter_noinfo
sscanf
strcpy_s
isprint
memset

kernel32

SetEvent
CreateIoCompletionPort
CreateEventA
TerminateThread
LocalFree
LocalAlloc
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeCriticalSection
GetSystemTimeAsFileTime
CreateToolhelp32Snapshot
GetPrivateProfileStringA
GlobalAlloc
GlobalLock
GlobalUnlock
GetLastError
Sleep
OutputDebugStringA
GetTickCount
GetPrivateProfileIntA
GetModuleFileNameA
lstrlenA
InterlockedDecrement
InterlockedIncrement
lstrcpynA
Process32Next
OpenProcess
CreateProcessA
TerminateProcess
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WaitForSingleObject
CloseHandle
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
lstrcmpA
InterlockedExchange
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
Process32First

user32

SetTimer
FindWindowA
LoadMenuA
GetSubMenu
GetMenuItemCount
RemoveMenu
EnableMenuItem
ModifyMenuA
GetCursorPos
WindowFromPoint
GetWindowRect
RegisterWindowMessageA
InvalidateRect
GetDC
ReleaseDC
SetClassLongA
SetCursor
LoadCursorA
SetRect
InflateRect
UpdateWindow
GetSysColor
OffsetRect
PtInRect
IsWindow
ReleaseCapture
ScreenToClient
CopyRect
GetFocus
GetDesktopWindow
SetWindowLongA
GetSystemMetrics
GetCapture
FillRect
FrameRect
DrawTextA
TabbedTextOutA
DrawTextExA
GrayStringA
GetComboBoxInfo
GetParent
GetAsyncKeyState
MoveWindow
IsChild
ShowWindow
SetForegroundWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
KillTimer
PostMessageA
EnableWindow
SetCapture
SendMessageA
GetClientRect

gdi32

ExtTextOutA
RectVisible
PtVisible
CreatePen
GetStockObject
TextOutA
GetTextExtentPoint32A
StretchBlt
GetDIBColorTable
CreateCompatibleBitmap
CreateFontA
SetDIBColorTable
GetPixel
SelectObject
DeleteObject
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
GetObjectA
Escape

msimg32

AlphaBlend
TransparentBlt

shell32

ShellExecuteA

msvcp90

?good@ios_base@std@@QBE_NXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ

gdiplus

GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusShutdown

wininet

InternetQueryOptionA

Exports

Exports

?IsAutoScroll@CWebContainer@@QAE_NXZ
?IsShowContextMenu@CWebContainer@@QAE_NXZ
?SetAutoScroll@CWebContainer@@QAEX_N@Z
?SetShowContextMenu@CWebContainer@@QAEX_N@Z
?SetSink@CWebContainer@@QAEXPAX@Z
CreateRoomCtrl
CreateTableCtrl
CreateUserManager
ReleaseTableCtrl
ReleaseUserManager
_ROOMDllPreTranslateMessage@4

Sections

.text
Size: 343KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/RoomTabBar.dll
.dll windows:5 windows x86 arch:x86

3bbadc6ad0e2c2ed24acecb0874ffffe

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

fc:d8:86:0a:18:af:c2:01:59:f4:cf:60:11:b9:24:9f:77:4a:11:30
Signer

Actual PE Digest

fc:d8:86:0a:18:af:c2:01:59:f4:cf:60:11:b9:24:9f:77:4a:11:30

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\RoomTabBar.pdb

Imports

dskinlite

dsSkinWindow

tabbar

ReleaseTabBarCtrl
CreateTabBarCtrl

mfc90

ord4895
ord3135
ord5633
ord1791
ord1792
ord2139
ord5608
ord1446
ord3218
ord6356
ord5389
ord3671
ord6782
ord4160
ord6784
ord1644
ord2368
ord2375
ord2625
ord2607
ord2605
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord4668
ord1729
ord4688
ord5139
ord3732
ord5636
ord4589
ord5497
ord2074
ord5585
ord4650
ord1496
ord4331
ord1752
ord1755
ord6388
ord3344
ord1678
ord1809
ord1810
ord2208
ord4993
ord5309
ord5152
ord4617
ord5615
ord798
ord6780
ord4529
ord6048
ord2069
ord2592
ord1728
ord1087
ord321
ord3987
ord639
ord376
ord3783
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord4197
ord793
ord589
ord4029
ord800
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord6446

msvcr90

__CxxFrameHandler3
_unlock
_lock
__dllonexit
_encode_pointer
_purecall
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_onexit
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer

kernel32

InterlockedExchange
InterlockedDecrement
LocalFree
LocalAlloc
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement

user32

SetWindowLongA
InvalidateRect
GetWindowRect
EnableWindow
GetWindowLongA

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

Exports

Exports

CreateRoomTabBarCtrl

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/ShowMessageBox.dll
.dll windows:5 windows x86 arch:x86

db7224af80d39c98eb4fa14af1369c5e

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

62:12:07:17:98:a5:b5:d1:d8:93:40:4b:dd:e6:5a:02:38:08:32:d7
Signer

Actual PE Digest

62:12:07:17:98:a5:b5:d1:d8:93:40:4b:dd:e6:5a:02:38:08:32:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\ShowMessageBox.pdb

Imports

dskinlite

dsGetClientRect
dsInvalidateRect
dsSetSelfPaint
dsGetColor
dsSkinWindow

mfc90

ord4066
ord4067
ord4057
ord2886
ord4334
ord4895
ord4667
ord3480
ord595
ord611
ord3528
ord1183
ord2539
ord2106
ord3534
ord1938
ord3987
ord4993
ord1358
ord2899
ord6048
ord4529
ord6559
ord6584
ord524
ord744
ord6079
ord6170
ord5152
ord4617
ord820
ord310
ord6557
ord1490
ord5924
ord817
ord4507
ord2069
ord798
ord4668
ord5636
ord4650
ord1496
ord6388
ord3344
ord1678
ord1809
ord1810
ord3277
ord5309
ord5615
ord2672
ord4029
ord589
ord793
ord4197
ord321
ord1087
ord3659
ord4890
ord3110
ord6001
ord5646
ord5663
ord4981
ord4333
ord2447
ord5659
ord5657
ord3209
ord2087
ord4199
ord5813
ord6721
ord5533
ord1046
ord4165
ord6018
ord2206
ord2251
ord4733
ord6781
ord4159
ord6783
ord4409
ord4434
ord2759
ord2888
ord2769
ord3135
ord2961
ord4714
ord3107
ord2978
ord2766
ord5633
ord1728
ord1791
ord1792
ord2139
ord5608
ord1446
ord3218
ord6356
ord5389
ord3671
ord6782
ord4160
ord6784
ord1644
ord2368
ord2375
ord2625
ord2607
ord2605
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5647
ord4589
ord6780
ord5497
ord2074
ord5585
ord4638
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord1668
ord2274
ord601
ord316
ord639
ord374
ord3783
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord800
ord2208

msvcr90

_amsg_exit
_adjust_fdiv
__CppXcptFilter
_lock
_initterm_e
__dllonexit
_unlock
__CxxFrameHandler3
_beginthreadex
_initterm
_onexit
memset
free
_malloc_crt
_encode_pointer
_decode_pointer
strcpy_s
_encoded_null
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ

kernel32

CloseHandle
LocalFree
LocalAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
WaitForSingleObject
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
CreateEventA
TerminateProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime
SetEvent

user32

GetClientRect
PtInRect
KillTimer
LoadCursorA
MessageBeep
SetTimer
InvalidateRect
SetWindowPos
GetWindowRect
SetCursor
EnableWindow

gdi32

CreateFontA
GetTextExtentPoint32A

shell32

ShellExecuteA

Exports

Exports

ShowMessage
ShowMessageBox

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/StartCheck.exe
.exe windows:5 windows x86 arch:x86

071689b2ff6578609da1964ca79e307d

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b3:fa:9d:b1:6c:81:76:3d:28:a6:7c:43:5c:d7:23:c9:07:ad:89:62
Signer

Actual PE Digest

b3:fa:9d:b1:6c:81:76:3d:28:a6:7c:43:5c:d7:23:c9:07:ad:89:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc90

ord589
ord1275
ord793
ord800

msvcr90

__p__fmode
__set_app_type
__p__commode
_crt_debugger_hook
_except_handler4_common
memset
_controlfp_s
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_stricmp
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
printf
sprintf_s
?terminate@@YAXXZ
_invoke_watson

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
GetModuleHandleA
GetCommandLineA
Sleep
CloseHandle
GetCurrentProcess
Process32Next
Process32First
GetLastError
CreateToolhelp32Snapshot
TerminateProcess
GetExitCodeProcess
OpenProcess
GetSystemTimeAsFileTime

user32

GetWindowThreadProcessId
FindWindowA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/TabBar.dll
.dll windows:5 windows x86 arch:x86

7df5d0c3cfb429253c29436352d20219

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b1:e4:01:4d:47:89:e6:03:18:8f:4d:b3:e4:08:40:27:f2:c7:7f:c2
Signer

Actual PE Digest

b1:e4:01:4d:47:89:e6:03:18:8f:4d:b3:e4:08:40:27:f2:c7:7f:c2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\TabBar.pdb

Imports

dskinlite

dsSkinWindow

mfc90

ord5647
ord3732
ord5139
ord4688
ord1729
ord6446
ord5668
ord5666
ord958
ord963
ord967
ord965
ord969
ord2610
ord2630
ord2614
ord2620
ord2618
ord2616
ord2633
ord2628
ord2612
ord2635
ord2623
ord2605
ord2607
ord2625
ord2375
ord2368
ord1644
ord6784
ord4160
ord6782
ord3671
ord5389
ord6356
ord3218
ord1446
ord5608
ord2139
ord1792
ord1791
ord1728
ord5633
ord3135
ord3277
ord4895
ord3480
ord4589
ord595
ord611
ord1938
ord3987
ord321
ord1087
ord1678
ord2592
ord4529
ord6584
ord798
ord2069
ord6048
ord6557
ord4668
ord5636
ord4650
ord1496
ord6388
ord3344
ord1809
ord1810
ord2208
ord4993
ord5309
ord5152
ord4617
ord5615
ord3757
ord4030
ord2896
ord6780
ord5497
ord2074
ord5585
ord4638
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord1668
ord2274
ord639
ord374
ord3783
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord4197
ord793
ord589
ord4029
ord800
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801

msvcr90

_purecall
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
memmove_s
__CxxFrameHandler3
_onexit
_unlock
_encode_pointer
_invalid_parameter_noinfo
_CxxThrowException
__dllonexit
??1exception@std@@UAE@XZ
_lock
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
??0exception@std@@QAE@ABQBD@Z

kernel32

Sleep
LocalAlloc
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalFree

user32

GetClientRect
GetParent
InvalidateRect
GetWindowRect
RegisterWindowMessageA
IsWindow
SendMessageA
PostMessageA
EnableWindow

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

Exports

Exports

CreateTabBarCtrl
ReleaseTabBarCtrl

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/TcpSocket.dll
.dll windows:5 windows x86 arch:x86

a437b0d29bd3d7075d5dc0bc18dd161e

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e9:cf:01:69:7e:82:77:a5:24:8d:0f:2b:50:e0:a6:34:6f:f5:f8:37
Signer

Actual PE Digest

e9:cf:01:69:7e:82:77:a5:24:8d:0f:2b:50:e0:a6:34:6f:f5:f8:37

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\CGPV2\Output\Bin\Dll\Release\TcpSocket.pdb

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WaitForSingleObject
SetEvent
PostQueuedCompletionStatus
InterlockedIncrement
GetQueuedCompletionStatus
InterlockedDecrement
Sleep
OutputDebugStringA
CreateIoCompletionPort
CreateEventA
TerminateThread
GetTickCount
GetSystemInfo
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange

msvcr90

_encode_pointer
??_V@YAXPAX@Z
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
vsprintf_s
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
strcpy_s
sprintf
printf
memmove_s
__CppXcptFilter
??_U@YAPAXI@Z
__CxxFrameHandler3
memcpy
memset
_beginthreadex
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_malloc_crt
_CxxThrowException

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

ws2_32

WSAEventSelect
WSAEnumNetworkEvents
WSACloseEvent
WSAAccept
inet_addr
gethostbyname
ntohs
socket
WSAConnect
shutdown
WSASend
recv
WSARecv
WSAIoctl
setsockopt
closesocket
bind
htons
listen
WSAGetLastError
WSASocketA
inet_ntoa
WSAStartup
WSACreateEvent

Exports

Exports

TcpSocketFactory

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/TimerEngine.dll
.dll windows:5 windows x86 arch:x86

e734567537dff53a8bd3ac41c54ce7ab

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c6:c9:73:e2:ab:ad:41:40:6e:7d:8b:6a:84:02:6d:57:68:c4:e4:f9
Signer

Actual PE Digest

c6:c9:73:e2:ab:ad:41:40:6e:7d:8b:6a:84:02:6d:57:68:c4:e4:f9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Common\TimerEngine\Release\TimerEngine.pdb

Imports

mfc90

ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4434
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord798
ord4981
ord1087
ord321
ord4197
ord793
ord589
ord4029
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord800

msvcr90

_malloc_crt
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_CxxThrowException
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_purecall
memmove_s
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
_unlock

kernel32

TerminateProcess
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
LocalAlloc
LocalFree
CreateThread
CloseHandle
WaitForSingleObject
Sleep

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

Exports

Exports

_CreateTimerEngineObj@0

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/TreeIcon.ini
BaiduGame/Uninstall.exe.nsis
BaiduGame/Updatentid.exe
.exe windows:5 windows x86 arch:x86

0e59692f2c45d2f8c66026a7d3d008c3

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

58:57:99:e1:dd:db:46:bb:5b:7f:19:57:74:84:fd:5e:0b:ec:85:89
Signer

Actual PE Digest

58:57:99:e1:dd:db:46:bb:5b:7f:19:57:74:84:fd:5e:0b:ec:85:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleFileNameA
lstrlenA
Sleep
GetTickCount
DeleteCriticalSection
EnterCriticalSection
DeviceIoControl
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
CreateFileA
GetProcessHeap
SetEndOfFile
LoadLibraryA
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetLastError
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RtlUnwind
MultiByteToWideChar
ReadFile
HeapFree
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapAlloc
GetStdHandle
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetStdHandle
VirtualAlloc
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

iphlpapi

GetAdaptersInfo

winmm

timeGetTime

wininet

InternetOpenA
InternetGetConnectedState
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/UrlManager.dll
.dll windows:5 windows x86 arch:x86

cbdb74306e217073e76dc34c2f102ae5

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

74:6e:85:a5:e7:07:98:6f:62:f1:8f:ff:43:db:bb:2e:17:5d:14:ed
Signer

Actual PE Digest

74:6e:85:a5:e7:07:98:6f:62:f1:8f:ff:43:db:bb:2e:17:5d:14:ed

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\UrlManager.pdb

Imports

mfc90

ord4434
ord4409
ord6783
ord4159
ord6781
ord798
ord265
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord266
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord4197
ord793
ord589
ord4333
ord605
ord1278
ord321
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord1087
ord4029
ord800

msvcr90

_purecall
fopen_s
fread
fprintf
ftell
fseek
fclose
strncmp
isspace
strchr
isalnum
tolower
isalpha
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
memset
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
?what@exception@std@@UBEPBDXZ
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
_vsnprintf_s
_CxxThrowException
??0exception@std@@QAE@XZ
?terminate@@YAXXZ

kernel32

GetCurrentProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
LocalFree
InterlockedDecrement
InterlockedIncrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

msvcp90

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z

wininet

InternetCrackUrlA

Exports

Exports

CreateIUrlManagerObj

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/UserAccount.dll
.dll windows:5 windows x86 arch:x86

eeb266fd9b0e6296a652cbc3e756e707

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

05:1a:42:06:89:65:68:f3:07:c1:38:cf:e8:00:a1:f3:39:79:03:a5
Signer

Actual PE Digest

05:1a:42:06:89:65:68:f3:07:c1:38:cf:e8:00:a1:f3:39:79:03:a5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\UserAccount.pdb

Imports

clm

CreateCLM

commonencryption

ord7
ord3
ord5
ord4

httpsocket

CreateHttpSocket
ReleaseHttpSocket

mfc90

ord5835
ord2539
ord316
ord817
ord601
ord2691
ord820
ord310
ord266
ord265
ord798
ord3213
ord305
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord1611
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord4197
ord793
ord589
ord4029
ord800
ord4392
ord4507
ord4506
ord6676
ord6682
ord4481
ord2481
ord2692
ord605
ord1278
ord321
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord1087
ord5646

msvcr90

memset
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memcpy_s
memmove_s
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
isspace
atoi
isalnum
strcpy_s
strcat_s
_purecall
?what@exception@std@@UBEPBDXZ
_vsnprintf_s
fprintf
strncmp
strchr
tolower
isalpha
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_CxxThrowException

kernel32

InterlockedIncrement
GetTickCount
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
LocalFree
LocalAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcpynA

msvcp90

?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

wininet

InternetQueryOptionA

ws2_32

gethostbyname
inet_ntoa
inet_addr

Exports

Exports

CreateIUserAccountObj

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/UserIndividualInfo.dll
.dll windows:5 windows x86 arch:x86

6c2ba2ec0e74f8676521cdf81cbf3d65

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ee:6c:0f:25:e3:81:24:16:28:93:5f:29:b2:4e:75:a7:a7:74:50:e7
Signer

Actual PE Digest

ee:6c:0f:25:e3:81:24:16:28:93:5f:29:b2:4e:75:a7:a7:74:50:e7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\UserIndividualInfo.pdb

Imports

dskinlite

dsSetDrawItemValue
dsTrackPopupMenu
dsSkinWindow

showmessagebox

ShowMessageBox

webcomponent

?Create@CWebContainer@@SAPAV1@KPAVCWnd@@PAUCRuntimeClass@@@Z
?GetThisClass@CWebContainer@@SGPAUCRuntimeClass@@XZ

mfc90

ord2888
ord2759
ord3277
ord4066
ord4067
ord4057
ord2886
ord4334
ord4895
ord4667
ord3519
ord796
ord595
ord654
ord3479
ord1183
ord2539
ord601
ord316
ord2106
ord3534
ord4030
ord6170
ord1358
ord2069
ord2592
ord6048
ord310
ord820
ord817
ord798
ord3783
ord376
ord639
ord3528
ord2274
ord1668
ord4638
ord3480
ord611
ord2283
ord1720
ord4646
ord3643
ord777
ord4498
ord2282
ord3568
ord2130
ord3987
ord321
ord1087
ord1681
ord1108
ord1361
ord6557
ord1117
ord6559
ord6584
ord4384
ord4116
ord6291
ord2769
ord2591
ord4668
ord5636
ord1496
ord6388
ord3344
ord1678
ord1809
ord1810
ord2208
ord4993
ord5309
ord5152
ord4617
ord5615
ord5924
ord2692
ord4029
ord589
ord793
ord4197
ord3659
ord4890
ord3110
ord6001
ord5646
ord5663
ord4981
ord4333
ord2447
ord5659
ord5657
ord3209
ord2087
ord4199
ord5813
ord6721
ord5533
ord1046
ord4165
ord6018
ord2206
ord2251
ord4733
ord6781
ord4159
ord6783
ord4409
ord4434
ord4529
ord4531
ord1490
ord3135
ord2961
ord4714
ord3107
ord2978
ord2766
ord5633
ord1728
ord1791
ord1792
ord2139
ord5608
ord1446
ord3218
ord6356
ord5389
ord3671
ord6782
ord4160
ord6784
ord1644
ord2368
ord2375
ord2625
ord2607
ord2605
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5647
ord4589
ord6780
ord5497
ord2074
ord5585
ord4650
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord800
ord2360

msvcr90

?terminate@@YAXXZ
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_stricmp
memset
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
_purecall
_crt_debugger_hook
strcpy_s

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
InterlockedCompareExchange
IsDebuggerPresent
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
Sleep
InterlockedExchange
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
LocalFree
InterlockedDecrement
InterlockedIncrement
LocalAlloc

user32

SendMessageA
LoadMenuA
ModifyMenuA
IsWindowVisible
InvalidateRect
WindowFromPoint
GetSubMenu
GetFocus
GetClientRect
InflateRect
GetWindowRect
GetParent
GetCursorPos
EnableWindow

gdi32

GetStockObject
CreateFontA
CreateSolidBrush

Exports

Exports

?IsAutoScroll@CWebContainer@@QAE_NXZ
?IsShowContextMenu@CWebContainer@@QAE_NXZ
?SetAutoScroll@CWebContainer@@QAEX_N@Z
?SetShowContextMenu@CWebContainer@@QAEX_N@Z
?SetSink@CWebContainer@@QAEXPAX@Z
CreateIndividualInfoCtrl

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/WebComponent.dll
.dll windows:5 windows x86 arch:x86

19ae25c084ed9c5d907e592aff8ae92f

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

93:77:a2:37:a4:27:41:a0:d2:d9:b4:1f:be:4b:80:c0:e3:dc:46:57
Signer

Actual PE Digest

93:77:a2:37:a4:27:41:a0:d2:d9:b4:1f:be:4b:80:c0:e3:dc:46:57

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\WebComponent.pdb

Imports

mfc90

ord3819
ord430
ord265
ord3965
ord1867
ord1866
ord721
ord1751
ord5745
ord1401
ord1391
ord2342
ord6290
ord6289
ord2359
ord4383
ord6583
ord6556
ord4528
ord6252
ord2895
ord4114
ord6558
ord4515
ord4512
ord2965
ord3728
ord6006
ord6430
ord3418
ord4279
ord6433
ord4282
ord2246
ord2125
ord1744
ord1745
ord474
ord4705
ord3345
ord6390
ord4575
ord4582
ord5001
ord5584
ord4679
ord3670
ord4851
ord4850
ord5209
ord4608
ord5199
ord5403
ord4793
ord4808
ord4806
ord4788
ord4791
ord4786
ord4364
ord1087
ord1254
ord5281
ord4927
ord4095
ord5194
ord1444
ord266
ord781
ord580
ord321
ord1117
ord1752
ord4895
ord4331
ord1497
ord4650
ord2074
ord5497
ord6780
ord4589
ord3732
ord5139
ord4688
ord2964
ord2639
ord2642
ord2640
ord2641
ord4930
ord6446
ord5668
ord5666
ord958
ord967
ord969
ord2610
ord2630
ord2614
ord2620
ord2618
ord2616
ord2633
ord2628
ord2612
ord2635
ord2625
ord2375
ord3135
ord2368
ord1644
ord6784
ord4160
ord6782
ord5389
ord6356
ord3218
ord2139
ord1792
ord1791
ord5633
ord4516
ord4513
ord2966
ord1252
ord5090
ord4604
ord5369
ord5213
ord4693
ord4783
ord4784
ord5385
ord5215
ord5127
ord4771
ord5224
ord5476
ord5386
ord5064
ord5367
ord4918
ord5382
ord5091
ord683
ord4796
ord4535
ord1380
ord2194
ord4536
ord5349
ord3996
ord3485
ord4667
ord4890
ord4334
ord2886
ord4057
ord4067
ord4066
ord3227
ord2759
ord3065
ord4531
ord1689
ord5639
ord5599
ord5341
ord4972
ord5472
ord4846
ord4775
ord4912
ord5264
ord2638
ord5334
ord2888
ord2769
ord2961
ord2451
ord2449
ord2452
ord4714
ord3107
ord2978
ord2766
ord1855
ord798
ord1241
ord1137
ord1152
ord391
ord5392
ord4940
ord4889
ord1729
ord5393
ord5278
ord800

msvcr90

memset
_CRT_RTC_INITW
__CxxFrameHandler3
_CxxThrowException
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
?terminate@@YAXXZ
free
__RTDynamicCast

kernel32

VirtualQuery
GetModuleFileNameW
HeapAlloc
FreeLibrary
LoadLibraryA
GetProcAddress
WideCharToMultiByte
DebugBreak
RaiseException
GetProcessHeap
HeapFree
MultiByteToWideChar
GetLastError
InterlockedExchange
lstrcpynA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep

user32

GetClientRect
PostMessageA
IsWindowVisible
EnableWindow

oleaut32

SysFreeString
SysStringByteLen
SysAllocStringLen
SysAllocStringByteLen
VariantCopy
VariantClear

wininet

InternetCrackUrlA

Exports

Exports

??0CWebContainer@@IAE@XZ
??1CWebContainer@@MAE@XZ
??_7CWebContainer@@6B@
?CrackURL@CWebContainer@@SAHPBDPAU_tagURLComponent@1@@Z
?Create@CWebContainer@@SAPAV1@KPAVCWnd@@PAUCRuntimeClass@@@Z
?CreateControlSite@CWebContainer@@MAEHPAVCOleControlContainer@@PAPAVCOleControlSite@@IABU_GUID@@@Z
?CreateObject@CWebContainer@@SGPAVCObject@@XZ
?DoDataExchange@CWebContainer@@MAEXPAVCDataExchange@@@Z
?ExecuteScript@CWebContainer@@QAEJABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAV_variant_t@@@Z
?ExecuteScript@CWebContainer@@QAEJABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@ABVCStringArray@@AAV_variant_t@@@Z
?GetMessageMap@CWebContainer@@MBEPBUAFX_MSGMAP@@XZ
?GetRuntimeClass@CWebContainer@@UBEPAUCRuntimeClass@@XZ
?GetThisClass@CWebContainer@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@CWebContainer@@KGPBUAFX_MSGMAP@@XZ
?IsAutoScroll@CWebContainer@@QAE_NXZ
?IsShowContextMenu@CWebContainer@@QAE_NXZ
?NavigateEx@CWebContainer@@QAEXPBDK00PAXK@Z
?OnBeforeNavigate2@CWebContainer@@UAEXPBDK0AAVCByteArray@@0PAH@Z
?OnCloseErrorWindow@CWebContainer@@MAEXPAUHWND__@@@Z
?OnClosePreloadWindow@CWebContainer@@MAEXPAUHWND__@@@Z
?OnCreate@CWebContainer@@QAEHPAUtagCREATESTRUCTA@@@Z
?OnCreateErrorWindow@CWebContainer@@MAEXPAV1@AAVCSize@@PAPAUHWND__@@@Z
?OnCreatePreloadWindow@CWebContainer@@MAEXPAV1@AAVCSize@@PAPAUHWND__@@@Z
?OnGetHostInfo@CWebContainer@@UAEJPAU_DOCHOSTUIINFO@@@Z
?OnNavigate@CWebContainer@@QAEJIJ@Z
?OnNavigateComplete2@CWebContainer@@UAEXPBD@Z
?OnNavigateError@CWebContainer@@UAEXPBD0KPAH@Z
?OnShowErrorWindow@CWebContainer@@MAEXAAVCSize@@H@Z
?OnShowMessage@CWebContainer@@UAEJPAUHWND__@@PA_W1K1KPAJ@Z
?OnShowPreloadWindow@CWebContainer@@MAEXAAVCSize@@H@Z
?OnSize@CWebContainer@@QAEXIHH@Z
?OnSizeErrorWindow@CWebContainer@@MAEXAAVCSize@@@Z
?OnSizePreloadWindow@CWebContainer@@MAEXAAVCSize@@@Z
?PostNcDestroy@CWebContainer@@MAEXXZ
?SetAutoScroll@CWebContainer@@QAEX_N@Z
?SetShowContextMenu@CWebContainer@@QAEX_N@Z
?SetSink@CWebContainer@@QAEXPAX@Z
?_GetBaseClass@CWebContainer@@KGPAUCRuntimeClass@@XZ
?classCWebContainer@CWebContainer@@2UCRuntimeClass@@B

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/WebDownloader.dll
.dll windows:5 windows x86 arch:x86

4301d71b8577a5625a859e16495f0364

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

87:bf:42:f7:25:7d:ad:34:d9:96:6d:be:ec:48:b4:cd:66:7a:73:72
Signer

Actual PE Digest

87:bf:42:f7:25:7d:ad:34:d9:96:6d:be:ec:48:b4:cd:66:7a:73:72

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\WebDownloader.pdb

Imports

mfc90

ord3525
ord2948
ord2950
ord5926
ord316
ord601
ord820
ord663
ord404
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord400
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord798
ord5520
ord1087
ord321
ord4197
ord793
ord589
ord4029
ord3012
ord1555
ord320
ord1265
ord6793
ord2447
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord800

msvcr90

_onexit
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_CxxThrowException
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
sprintf_s
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
_purecall

kernel32

InterlockedExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcpynA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
LocalAlloc
CreateThread
CloseHandle
WaitForSingleObject
Sleep
MoveFileA
DeleteFileA
SetLastError
GetLastError
LocalFree
FormatMessageA
lstrlenA

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetGetLastResponseInfoA

Exports

Exports

_CreateWebDownloader@0

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/WebGameControl.dll
.dll windows:5 windows x86 arch:x86

9ed42e683cd27589f88679a23cbcc77f

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

9a:c1:6d:af:0d:12:97:6f:47:55:21:e6:60:e2:98:6c:e2:7e:d2:38
Signer

Actual PE Digest

9a:c1:6d:af:0d:12:97:6f:47:55:21:e6:60:e2:98:6c:e2:7e:d2:38

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\WebGameControl.pdb

Imports

dskinlite

dsSkinWindow

commonencryption

ord5

webcomponent

?Create@CWebContainer@@SAPAV1@KPAVCWnd@@PAUCRuntimeClass@@@Z
?OnCloseErrorWindow@CWebContainer@@MAEXPAUHWND__@@@Z
?OnShowErrorWindow@CWebContainer@@MAEXAAVCSize@@H@Z
?OnSizeErrorWindow@CWebContainer@@MAEXAAVCSize@@@Z
?OnCreateErrorWindow@CWebContainer@@MAEXPAV1@AAVCSize@@PAPAUHWND__@@@Z
?OnNavigateError@CWebContainer@@UAEXPBD0KPAH@Z
?OnGetHostInfo@CWebContainer@@UAEJPAU_DOCHOSTUIINFO@@@Z
?CreateControlSite@CWebContainer@@MAEHPAVCOleControlContainer@@PAPAVCOleControlSite@@IABU_GUID@@@Z
?PostNcDestroy@CWebContainer@@MAEXXZ
?DoDataExchange@CWebContainer@@MAEXPAVCDataExchange@@@Z
?OnNavigateComplete2@CWebContainer@@UAEXPBD@Z
?OnBeforeNavigate2@CWebContainer@@UAEXPBDK0AAVCByteArray@@0PAH@Z
?GetThisMessageMap@CWebContainer@@KGPBUAFX_MSGMAP@@XZ
??0CWebContainer@@IAE@XZ
?GetThisClass@CWebContainer@@SGPAUCRuntimeClass@@XZ
??1CWebContainer@@MAE@XZ

mfc90

ord4796
ord5199
ord4608
ord5209
ord4850
ord4851
ord4095
ord5341
ord4972
ord5472
ord4846
ord4775
ord4912
ord5264
ord5392
ord4940
ord4889
ord5393
ord4927
ord5369
ord5213
ord4693
ord4783
ord4784
ord5385
ord5215
ord4771
ord5476
ord5386
ord5064
ord5367
ord4918
ord5382
ord4535
ord1380
ord2194
ord4536
ord4029
ord589
ord793
ord4197
ord3659
ord4667
ord4890
ord2888
ord3110
ord2961
ord6001
ord5646
ord5663
ord4981
ord4333
ord5403
ord5659
ord5657
ord3209
ord2087
ord4199
ord5813
ord6721
ord5533
ord1046
ord4165
ord6018
ord2206
ord2251
ord4733
ord6781
ord4159
ord6783
ord4409
ord4434
ord3940
ord595
ord796
ord2274
ord1668
ord3346
ord6391
ord1755
ord4638
ord5585
ord5647
ord963
ord965
ord2623
ord2605
ord2607
ord3671
ord1446
ord5608
ord1728
ord3277
ord3480
ord611
ord2283
ord1720
ord4646
ord3643
ord777
ord4030
ord321
ord1117
ord1087
ord2592
ord4529
ord2069
ord6557
ord4575
ord4582
ord5001
ord5194
ord4793
ord4808
ord4806
ord4788
ord4791
ord4786
ord5281
ord5278
ord4364
ord3345
ord6390
ord1752
ord4331
ord1497
ord4650
ord2074
ord5497
ord6780
ord4589
ord5639
ord3732
ord5139
ord4688
ord1729
ord6446
ord5668
ord5666
ord958
ord2638
ord967
ord2639
ord969
ord2610
ord2630
ord2614
ord2620
ord2618
ord2616
ord2633
ord2628
ord2612
ord2635
ord2642
ord2640
ord2641
ord2625
ord2375
ord2368
ord1644
ord6784
ord4160
ord6782
ord3670
ord5389
ord6356
ord3218
ord1444
ord5599
ord2139
ord1792
ord1791
ord1689
ord5633
ord2766
ord2978
ord3107
ord4714
ord3135
ord2769
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4895
ord4679
ord4531
ord6584
ord1183
ord3952
ord3946
ord2337
ord798
ord2539
ord601
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord316
ord800
ord2447

msvcr90

__clean_type_info_names_internal
_amsg_exit
_initterm_e
_except_handler4_common
_encoded_null
free
_malloc_crt
_decode_pointer
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_initterm
__CppXcptFilter
_CxxThrowException
memset
memcpy
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
_beginthreadex
printf
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
sprintf_s
memcpy_s
_purecall
vsprintf_s
?terminate@@YAXXZ
strcpy_s

kernel32

GetProcessHeap
HeapFree
InterlockedIncrement
InterlockedDecrement
GetTickCount
LoadLibraryA
GetProcAddress
CreateEventA
GetModuleHandleA
WaitForSingleObject
SetEvent
HeapAlloc
CreateIoCompletionPort
TerminateThread
LocalFree
LocalAlloc
InterlockedExchange
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
InterlockedCompareExchange
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CloseHandle
CreateFileA
DeviceIoControl
lstrcpyA

user32

SetRect
RegisterWindowMessageA
LoadCursorA
LoadIconA
RegisterClassA
UnregisterClassA
KillTimer
SetWindowLongA
DestroyWindow
GetWindowLongA
DefWindowProcA
SendMessageA
SetTimer
CreateWindowExA
EnableWindow

iphlpapi

GetAdaptersInfo

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

Exports

Exports

?IsAutoScroll@CWebContainer@@QAE_NXZ
?IsShowContextMenu@CWebContainer@@QAE_NXZ
?SetAutoScroll@CWebContainer@@QAEX_N@Z
?SetShowContextMenu@CWebContainer@@QAEX_N@Z
?SetSink@CWebContainer@@QAEXPAX@Z
CreateWebGameControl

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/WebGameList.dll
.dll windows:5 windows x86 arch:x86

5fffb0900e0c0a04e4c6447968ac1c8a

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

03:a2:ac:a2:23:85:2c:aa:26:17:77:28:32:df:12:82:03:b9:9d:45
Signer

Actual PE Digest

03:a2:ac:a2:23:85:2c:aa:26:17:77:28:32:df:12:82:03:b9:9d:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\WebGameList.pdb

Imports

dskinlite

dsSkinWindow

webcomponent

?Create@CWebContainer@@SAPAV1@KPAVCWnd@@PAUCRuntimeClass@@@Z
?OnCloseErrorWindow@CWebContainer@@MAEXPAUHWND__@@@Z
?OnShowErrorWindow@CWebContainer@@MAEXAAVCSize@@H@Z
?OnSizeErrorWindow@CWebContainer@@MAEXAAVCSize@@@Z
?OnCreateErrorWindow@CWebContainer@@MAEXPAV1@AAVCSize@@PAPAUHWND__@@@Z
?CreateControlSite@CWebContainer@@MAEHPAVCOleControlContainer@@PAPAVCOleControlSite@@IABU_GUID@@@Z
?DoDataExchange@CWebContainer@@MAEXPAVCDataExchange@@@Z
?OnNavigateError@CWebContainer@@UAEXPBD0KPAH@Z
?OnNavigateComplete2@CWebContainer@@UAEXPBD@Z
?OnBeforeNavigate2@CWebContainer@@UAEXPBDK0AAVCByteArray@@0PAH@Z
?CrackURL@CWebContainer@@SAHPBDPAU_tagURLComponent@1@@Z
?GetThisMessageMap@CWebContainer@@KGPBUAFX_MSGMAP@@XZ
??0CWebContainer@@IAE@XZ
?GetThisClass@CWebContainer@@SGPAUCRuntimeClass@@XZ
??1CWebContainer@@MAE@XZ
?PostNcDestroy@CWebContainer@@MAEXXZ

mfc90

ord601
ord310
ord817
ord798
ord300
ord1137
ord3077
ord3946
ord1183
ord4679
ord4895
ord3135
ord2964
ord5633
ord1689
ord1791
ord1792
ord2139
ord5599
ord1444
ord3218
ord6356
ord5389
ord3670
ord6782
ord4160
ord6784
ord1644
ord2368
ord2375
ord2625
ord2641
ord2640
ord2642
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord2639
ord967
ord2638
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5639
ord4589
ord6780
ord5497
ord2074
ord4650
ord1497
ord4331
ord1752
ord6390
ord3345
ord4364
ord5278
ord5281
ord4786
ord4791
ord4788
ord4806
ord4808
ord4793
ord5194
ord316
ord4582
ord4575
ord5403
ord4796
ord5199
ord4608
ord5209
ord4850
ord4851
ord4095
ord5341
ord4972
ord5472
ord4846
ord4775
ord4912
ord5264
ord5392
ord4940
ord4889
ord5393
ord4927
ord5369
ord5213
ord4693
ord4783
ord4784
ord5385
ord5215
ord5127
ord4771
ord5476
ord5386
ord5064
ord5367
ord4918
ord5382
ord4535
ord1380
ord2194
ord4536
ord4392
ord5997
ord2481
ord945
ord2692
ord3783
ord376
ord639
ord3987
ord321
ord1087
ord1728
ord2592
ord4529
ord6584
ord4531
ord4668
ord5608
ord1446
ord3671
ord2607
ord2605
ord2623
ord965
ord963
ord5636
ord5585
ord1496
ord1755
ord6388
ord3344
ord1678
ord1809
ord1810
ord2208
ord4993
ord5309
ord5152
ord4617
ord5615
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord1098
ord4197
ord793
ord589
ord4029
ord800
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord322
ord801
ord5001

msvcr90

_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
memset
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
_purecall
atol
_except_handler4_common
atoi

kernel32

GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
LocalFree
LocalAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcpynA

user32

GetClientRect
EnableWindow

Exports

Exports

?IsAutoScroll@CWebContainer@@QAE_NXZ
?IsShowContextMenu@CWebContainer@@QAE_NXZ
?SetAutoScroll@CWebContainer@@QAEX_N@Z
?SetShowContextMenu@CWebContainer@@QAEX_N@Z
?SetSink@CWebContainer@@QAEXPAX@Z
CreateWebGameListCtrl

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/WebServiceLite.dll
.dll windows:5 windows x86 arch:x86

ca99fcad02aaca453c50dde4974d7577

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

03:1c:fa:38:a9:2e:d6:c2:7b:72:fd:b4:07:75:b4:76:5b:9a:c3:36
Signer

Actual PE Digest

03:1c:fa:38:a9:2e:d6:c2:7b:72:fd:b4:07:75:b4:76:5b:9a:c3:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\WebServiceLite.pdb

Imports

kernel32

InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateFileMappingA
MapViewOfFile
CloseHandle
UnmapViewOfFile
GetLastError
lstrlenA
Sleep
InterlockedIncrement
lstrcpynA
FormatMessageA
LocalFree
CreateEventA
SetEvent
WaitForSingleObject
CreateThread
InterlockedDecrement
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter

shlwapi

StrStrIA

msvcr90

_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_decode_pointer
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_encoded_null
??0exception@std@@QAE@ABV01@@Z
_malloc_crt
_encode_pointer
?terminate@@YAXXZ
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
_invalid_parameter_noinfo
??2@YAPAXI@Z
sprintf_s
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
_purecall
??3@YAXPAX@Z
_CxxThrowException
memcpy
free
memset

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

wininet

InternetGetLastResponseInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile

Exports

Exports

_CreateWebServiceObj@0

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/WindowEvent.dll
.dll windows:5 windows x86 arch:x86

3d6ae0f638c3946e3fb5dd3a65a63c32

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0d:d6:43:e9:cb:7e:3e:39:51:46:f1:33:13:7c:d8:28:8c:65:f6:25
Signer

Actual PE Digest

0d:d6:43:e9:cb:7e:3e:39:51:46:f1:33:13:7c:d8:28:8c:65:f6:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\WindowEvent.pdb

Imports

kernel32

InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

user32

PostMessageA
SendMessageA
DefWindowProcA
DestroyWindow
CreateWindowExA
RegisterClassA
RegisterWindowMessageA

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr90

??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_invalid_parameter_noinfo
_purecall
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
??0exception@std@@QAE@XZ
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
free
__CxxFrameHandler3
_CxxThrowException

Exports

Exports

_CreateWindowEventObj@0

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetFlags
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetAttribute
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicLoad
BASS_MusicSetAttribute
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_Update
_

Sections

Size: 86KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BaiduGame/bdMiniIM.exe
.exe windows:5 windows x86 arch:x86

7b5277f539ad3654df3cd3c4f3fc0121

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

79:f9:d8:29:55:55:e9:b4:1c:60:9d:59:be:6d:11:1f:89:fe:6a:13
Signer

Actual PE Digest

79:f9:d8:29:55:55:e9:b4:1c:60:9d:59:be:6d:11:1f:89:fe:6a:13

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\CGPV2\BD_Ver\CltSrc\BD_Lobby\Bin\Release\bdMiniIM.pdb

Imports

dskinlite

dsInitKeys
dsLoadSkin
dsSkinWindow

miniimlogic

CreateMiniIMLogic

mfc90

ord2251
ord4733
ord6781
ord4159
ord6783
ord4409
ord4434
ord2691
ord1137
ord2327
ord4392
ord5963
ord945
ord266
ord1918
ord4498
ord2282
ord3568
ord2130
ord1108
ord1361
ord2591
ord6646
ord1746
ord4281
ord474
ord721
ord2451
ord2449
ord2452
ord3105
ord580
ord781
ord5808
ord3949
ord306
ord405
ord664
ord2209
ord3390
ord3663
ord3485
ord3227
ord3122
ord1745
ord4029
ord2125
ord2246
ord4282
ord6433
ord4279
ord3418
ord6430
ord6006
ord3728
ord2965
ord4512
ord4515
ord6558
ord4114
ord2895
ord6252
ord4528
ord6556
ord6583
ord4383
ord2359
ord6289
ord6290
ord2342
ord1391
ord1401
ord5745
ord1751
ord1866
ord1867
ord3213
ord305
ord1611
ord1303
ord3762
ord3969
ord491
ord729
ord3980
ord321
ord1087
ord5965
ord4785
ord4790
ord4805
ord4807
ord4787
ord4792
ord4952
ord265
ord6740
ord1937
ord2057
ord310
ord2753
ord6046
ord6552
ord6043
ord6546
ord4565
ord6549
ord6352
ord6166
ord6084
ord5957
ord6023
ord5846
ord5833
ord6398
ord6157
ord3504
ord6527
ord6170
ord6079
ord6473
ord744
ord524
ord6057
ord6474
ord6291
ord4030
ord3940
ord3528
ord817
ord6074
ord1358
ord3534
ord2206
ord1183
ord3477
ord1357
ord636
ord367
ord1252
ord1254
ord1258
ord2692
ord941
ord5924
ord5152
ord1555
ord6793
ord3489
ord4668
ord3228
ord1496
ord6388
ord3344
ord1809
ord1810
ord2208
ord5309
ord5151
ord4616
ord5615
ord2207
ord340
ord5753
ord5520
ord663
ord404
ord6584
ord6557
ord2069
ord4617
ord4116
ord6559
ord2539
ord2899
ord1490
ord4529
ord4993
ord5636
ord3987
ord1938
ord766
ord595
ord796
ord3629
ord4667
ord4895
ord4334
ord2886
ord4057
ord4067
ord4066
ord3277
ord2759
ord2888
ord2769
ord3135
ord2961
ord4714
ord3107
ord2978
ord2766
ord5633
ord1728
ord1791
ord1792
ord2139
ord5608
ord1446
ord3218
ord6356
ord5389
ord3671
ord6782
ord4160
ord6784
ord1644
ord2368
ord2375
ord2625
ord2607
ord2605
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5647
ord4589
ord6780
ord5497
ord2074
ord5585
ord4650
ord800
ord316
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord639
ord374
ord3783
ord2592
ord1678
ord798
ord300
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord3110
ord4890
ord3659
ord6001
ord1098
ord1156
ord4197
ord793
ord2106
ord589
ord820
ord601
ord1276
ord1744

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_initterm
_acmdln
_ismbblead
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
memcpy
_onexit
_lock
_crt_debugger_hook
__dllonexit
_unlock
_beginthreadex
printf
_purecall
exit
rand
atol
?terminate@@YAXXZ
__set_app_type
__p__fmode
atoi
memmove_s
calloc
_recalloc
memcpy_s
malloc
_resetstkoflw
free
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_encode_pointer
_initterm_e
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
_setmbcp
__CxxFrameHandler3
memset
_CxxThrowException
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_invalid_parameter_noinfo
sprintf_s
_XcptFilter
strcpy_s

kernel32

TerminateProcess
GetCurrentProcess
CreateFileMappingA
MapViewOfFile
CreateEventA
WaitForMultipleObjects
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleFileNameA
OpenProcess
GetCommandLineA
GetLastError
InterlockedExchange
MultiByteToWideChar
lstrlenA
LeaveCriticalSection
EnterCriticalSection
GetLocalTime
GetStartupInfoA
WaitForSingleObject
SetEvent
InterlockedIncrement
InterlockedDecrement
CreateIoCompletionPort
TerminateThread
Sleep
SetCurrentDirectoryA
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentDirectoryA
GetSystemTimeAsFileTime
GetCurrentThreadId

user32

InvalidateRect
SetCapture
ReleaseCapture
CopyRect
DrawTextA
TabbedTextOutA
DrawTextExA
GrayStringA
PostMessageA
GetWindowRect
SetClassLongA
LoadMenuA
GetCursorPos
GetSubMenu
PostThreadMessageA
GetMessageA
KillTimer
SetTimer
CreatePopupMenu
AppendMenuA
CheckMenuItem
SystemParametersInfoA
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
SendMessageA
MoveWindow
GetClientRect
GetAsyncKeyState
GetParent
EnableWindow
SetWindowPos
GetDesktopWindow

gdi32

CreateCompatibleDC
BitBlt
CreateDIBSection
DeleteObject
StretchBlt
GetDIBColorTable
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateFontA
TextOutA
PtVisible
RectVisible
ExtTextOutA
Escape
SetDIBColorTable
GetObjectA

msimg32

TransparentBlt
AlphaBlend

shell32

ShellExecuteA

comctl32

InitCommonControlsEx

ole32

CoInitialize

oleaut32

SysAllocStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

showmessagebox

ShowMessageBox

gdiplus

GdipLoadImageFromFile
GdipDrawImageRectRect
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/cb.dll
.dll windows:5 windows x86 arch:x86

fadc5a93d39e62e0d029bcf4f0b7b503

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

68:60:1d:a6:e3:12:02:f8:e8:8b:ff:9e:2b:6d:7a:fc:e9:06:81:dd
Signer

Actual PE Digest

68:60:1d:a6:e3:12:02:f8:e8:8b:ff:9e:2b:6d:7a:fc:e9:06:81:dd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\YINMINGXIANG\BD_Ver\CltSrc\Bin\Release\cb.pdb

Imports

mfc90

ord2139
ord5608
ord1446
ord3218
ord6356
ord5389
ord3671
ord6782
ord4160
ord6784
ord1644
ord2368
ord2375
ord2625
ord2607
ord2605
ord2623
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5647
ord4589
ord6780
ord5497
ord2074
ord5585
ord4650
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord1254
ord310
ord820
ord2691
ord1252
ord4281
ord266
ord474
ord721
ord2451
ord2449
ord2452
ord3105
ord4498
ord2282
ord3568
ord2130
ord1361
ord6646
ord580
ord4409
ord265
ord4030
ord2069
ord5808
ord4529
ord3949
ord306
ord405
ord664
ord2209
ord404
ord663
ord5520
ord3390
ord6793
ord1555
ord1183
ord3663
ord1728
ord3485
ord3227
ord1792
ord3940
ord1744
ord2125
ord2246
ord4282
ord6433
ord4279
ord3418
ord6430
ord6006
ord3728
ord2965
ord4512
ord4515
ord6558
ord4114
ord2895
ord6252
ord4528
ord6556
ord6583
ord4383
ord2359
ord6289
ord6290
ord2342
ord1391
ord1401
ord5745
ord1751
ord1866
ord1867
ord3213
ord305
ord1611
ord1303
ord5997
ord2481
ord945
ord941
ord3762
ord3969
ord491
ord729
ord3980
ord5965
ord4785
ord4790
ord4805
ord4807
ord4787
ord4792
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord3107
ord3110
ord3659
ord2766
ord2978
ord4714
ord2961
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord2539
ord1087
ord321
ord4197
ord793
ord589
ord1791
ord5633
ord3135
ord3277
ord3122
ord4895
ord4029
ord796
ord595
ord1746
ord5924
ord1745
ord4434
ord798
ord300
ord817
ord601
ord316
ord781
ord605
ord1278
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord800

msvcr90

memset
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
free
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
_CxxThrowException

kernel32

IsDebuggerPresent
GetCurrentDirectoryA
SetCurrentDirectoryA
LocalFree
LocalAlloc
InterlockedExchange
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
MultiByteToWideChar
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange

user32

AppendMenuA
CreatePopupMenu
EnableWindow
DestroyWindow
CheckMenuItem

ole32

CoInitialize

oleaut32

SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

Exports

Exports

CreateChatBox
ReleaseChatBox

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/cfg
BaiduGame/dskinlite.dll
.dll windows:4 windows x86 arch:x86

d81aff18e8c9232a02f0176dd0d3acbe

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

3d:3e:ec:9c:24:e0:80:24:09:c2:a3:b4:b9:11:89:51:55:61:05:ec
Signer

Actual PE Digest

3d:3e:ec:9c:24:e0:80:24:09:c2:a3:b4:b9:11:89:51:55:61:05:ec

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\develop\Work_folder\Subversion\dskinlite3.0\trunk\bin\dskinlite.pdb

Imports

kernel32

VirtualProtect
FlushInstructionCache
GetCurrentProcess
VirtualQuery
FlushFileBuffers
GetConsoleMode
GetConsoleCP
InitializeCriticalSection
GetLocaleInfoA
GetCurrentDirectoryA
CloseHandle
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
Sleep
GetStdHandle
WriteFile
ExitProcess
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetDriveTypeA
RaiseException
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
GetCommandLineA
HeapReAlloc
GetSystemInfo
VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFullPathNameA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetThreadLocale
InterlockedExchange
GetVersionExA
GlobalReAlloc
GetCurrentThreadId
lstrlenW
GetPrivateProfileStringA
GetPrivateProfileIntA
LocalUnlock
LocalFree
LocalLock
LocalAlloc
GetModuleHandleA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
ReadFile
GetFileSize
CreateFileA
WideCharToMultiByte
FindResourceExA
LoadResource
LockResource
SizeofResource
FindResourceA
SetStdHandle
GetModuleFileNameA
FindNextFileA
GetLastError
FindFirstFileA
SetLastError
lstrlenA
FindClose
MulDiv
GetVersion
GetProcessHeap
HeapFree
HeapAlloc

user32

GetDlgCtrlID
RegisterWindowMessageA
TrackPopupMenu
WindowFromDC
AdjustWindowRectEx
GetClassLongA
SetClassLongA
GetForegroundWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
ClientToScreen
ShowWindow
EnumChildWindows
GetMenu
GetMenuState
PostMessageA
GetMonitorInfoA
MonitorFromWindow
SystemParametersInfoA
IsZoomed
GetWindowRgn
IsRectEmpty
SetWindowRgn
IsIconic
GetKeyState
GetComboBoxInfo
GetNextDlgGroupItem
UpdateWindow
DrawFocusRect
GetFocus
IsWindowEnabled
CreateWindowExA
IsWindowVisible
GetWindowTextLengthA
SetRectEmpty
EndPaint
BeginPaint
DestroyWindow
PostQuitMessage
WaitMessage
DispatchMessageA
TranslateMessage
IsDialogMessageA
PeekMessageA
CreateDialogIndirectParamA
GetAsyncKeyState
CloseClipboard
SetClipboardData
EmptyClipboard
GetDesktopWindow
GetDC
OpenClipboard
RedrawWindow
GetWindowTextA
WinHelpA
SetWindowTextA
MoveWindow
SetForegroundWindow
GetMenuItemCount
GetMenuItemID
GetMenuStringA
GetSubMenu
SetMenuItemInfoA
GetMenuItemInfoA
EqualRect
SetFocus
CheckDlgButton
GetSystemMenu
EnableMenuItem
EnableWindow
GetDlgItem
LoadIconA
GetDialogBaseUnits
DrawIcon
MessageBeep
GetLastActivePopup
GetActiveWindow
MessageBoxA
GetWindow
GetClassNameA
GetTopWindow
IsWindow
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
DestroyIcon
DrawIconEx
LoadImageA
SetCursor
DrawTextA
UnionRect
IntersectRect
InvalidateRect
SetTimer
ScreenToClient
GetWindowRect
GetWindowDC
FillRect
SetCapture
KillTimer
GetParent
DrawEdge
PtInRect
OffsetRect
SetRect
ReleaseDC
GetSysColor
GetCursorPos
GetSysColorBrush
ReleaseCapture
GetSystemMetrics
MapWindowPoints
CallWindowProcA
DrawFrameControl
CopyRect
GetMessagePos
GetPropA
RemovePropA
GetClientRect
SendMessageA
SetScrollRange
GetScrollRange
SetPropA
SetWindowLongA
GetScrollInfo
GetWindowLongA
SetScrollPos
SetWindowPos
EnableScrollBar
ShowScrollBar
SetScrollInfo
GetScrollPos
LoadCursorA
UnregisterClassA

gdi32

ExtTextOutA
CreatePatternBrush
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
UnrealizeObject
CreateBitmap
ExcludeClipRect
SetBkColor
SetBrushOrgEx
DeleteDC
SetTextColor
PatBlt
BitBlt
CreateDIBSection
SetStretchBltMode
StretchDIBits
GetClipBox
SetDIBitsToDevice
CreateSolidBrush
GetTextExtentPoint32A
CreatePen
SetBkMode
CreateFontA
GetObjectA
CreateFontIndirectA
CreateDCA
GetTextMetricsA
CreateRectRgnIndirect
CreateEllipticRgnIndirect
CreateRoundRectRgn
CombineRgn
OffsetRgn
RectInRegion
CreateRectRgn
ExtSelectClipRgn
SelectClipRgn
SaveDC
MoveToEx
LineTo
RestoreDC
RoundRect
ExtCreateRegion
StretchBlt
SetViewportOrgEx
GetStockObject

shell32

DuplicateIcon

ole32

StgIsStorageFile
CoTaskMemFree
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
StgOpenStorage

oleaut32

OleLoadPicture

shlwapi

PathIsDirectoryA
PathFileExistsA
PathRemoveFileSpecA
PathCombineA

Exports

Exports

dsAddMenuBar
dsAddStyleFile
dsAdjustColor
dsDrawImage
dsEnableMenuNoBorder
dsExitSkin
dsGetClientRect
dsGetColor
dsGetFont
dsGetIcon
dsGetLastError
dsInitKeys
dsInvalidateRect
dsLoadSkin
dsLoadSkinFromRes
dsLockState
dsMessageBox
dsResetAnimate
dsSetAnimateFrame
dsSetAnimatePlay
dsSetDrawItemValue
dsSetDrawItemValueEx
dsSetDrawItemVisible
dsSetDrawItemVisibleEx
dsSetDrawItemVisibleEx2
dsSetHighLight
dsSetItemStyle
dsSetProgressItemPos
dsSetProgressItemRange
dsSetSelfPaint
dsSkinWindow
dsTrackPopupMenu

Sections

.text
Size: 440KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/fireworks/1.swf
BaiduGame/fireworks/2.swf
BaiduGame/fireworks/3.swf
BaiduGame/fireworks/4.swf
BaiduGame/fireworks/5.swf
BaiduGame/fireworks/6.swf
BaiduGame/frame/Emotion/Skin/bar_hover.bmp
BaiduGame/frame/Emotion/Skin/bar_normal.bmp
BaiduGame/frame/Emotion/Skin/bar_select.bmp
BaiduGame/frame/Emotion/face/Face/01.gif
.gif
BaiduGame/frame/Emotion/face/Face/02.gif
.gif
BaiduGame/frame/Emotion/face/Face/03.gif
.gif
BaiduGame/frame/Emotion/face/Face/04.gif
.gif
BaiduGame/frame/Emotion/face/Face/05.gif
.gif
BaiduGame/frame/Emotion/face/Face/06.gif
.gif
BaiduGame/frame/Emotion/face/Face/07.gif
.gif
BaiduGame/frame/Emotion/face/Face/08.gif
.gif
BaiduGame/frame/Emotion/face/Face/09.gif
.gif
BaiduGame/frame/Emotion/face/Face/10.gif
.gif
BaiduGame/frame/Emotion/face/Face/11.gif
.gif
BaiduGame/frame/Emotion/face/Face/12.gif
.gif
BaiduGame/frame/Emotion/face/Face/13.gif
.gif
BaiduGame/frame/Emotion/face/Face/14.gif
.gif
BaiduGame/frame/Emotion/face/Face/15.gif
.gif
BaiduGame/frame/Emotion/face/Face/16.gif
.gif
BaiduGame/frame/Emotion/face/Face/17.gif
.gif
BaiduGame/frame/Emotion/face/Face/18.gif
.gif
BaiduGame/frame/Emotion/face/Face/19.gif
.gif
BaiduGame/frame/Emotion/face/Face/20.gif
.gif
BaiduGame/frame/Emotion/face/Face/21.gif
.gif
BaiduGame/frame/Emotion/face/Face/22.gif
.gif
BaiduGame/frame/Emotion/face/Face/23.gif
.gif
BaiduGame/frame/Emotion/face/Face/24.gif
.gif
BaiduGame/frame/Emotion/face/Face/25.gif
.gif
BaiduGame/frame/Emotion/face/Face/26.gif
.gif
BaiduGame/frame/Emotion/face/Face/27.gif
.gif
BaiduGame/frame/Emotion/face/Face/28.gif
.gif
BaiduGame/frame/Emotion/face/Face/29.gif
.gif
BaiduGame/frame/Emotion/face/Face/30.gif
.gif
BaiduGame/frame/Emotion/face/Face/31.gif
.gif
BaiduGame/frame/Emotion/face/Face/32.gif
.gif
BaiduGame/frame/Emotion/face/Face/33.gif
.gif
BaiduGame/frame/Emotion/face/Face/34.gif
.gif
BaiduGame/frame/Emotion/face/Face/35.gif
.gif
BaiduGame/frame/Emotion/face/Face/36.gif
.gif
BaiduGame/frame/Emotion/face/Face/37.gif
.gif
BaiduGame/frame/Emotion/face/Face/38.gif
.gif
BaiduGame/frame/Emotion/face/Face/39.gif
.gif
BaiduGame/frame/Emotion/face/Face/40.gif
.gif
BaiduGame/frame/Emotion/face/Face/41.gif
.gif
BaiduGame/frame/Emotion/face/Face/42.gif
.gif
BaiduGame/frame/GM.gif
.gif
BaiduGame/frame/MessageIcon/MessageIcon.ini
BaiduGame/frame/MessageIcon/bk.bmp
BaiduGame/frame/MessageIcon/gm.bmp
BaiduGame/frame/MessageIcon/laba.bmp
BaiduGame/frame/icon/Handset.png
.png
BaiduGame/frame/icon/Match1.png
.png
BaiduGame/frame/icon/Match2.png
.png
BaiduGame/frame/icon/Match3.png
.png
BaiduGame/frame/icon/Match4.png
.png
BaiduGame/frame/icon/Match5.png
.png
BaiduGame/frame/icon/Match6.png
.png
BaiduGame/frame/icon/female.png
.png
BaiduGame/frame/icon/free.png
.png
BaiduGame/frame/icon/gm.png
.png
BaiduGame/frame/icon/guest.png
.png
BaiduGame/frame/icon/laba.png
.png
BaiduGame/frame/icon/lookon.png
.png
BaiduGame/frame/icon/male.png
.png
BaiduGame/frame/icon/offline.png
.png
BaiduGame/frame/icon/play.png
.png
BaiduGame/frame/icon/ready.png
.png
BaiduGame/frame/icon/sit.png
.png
BaiduGame/frame/icon/star1.png
.png
BaiduGame/frame/icon/star2.png
.png
BaiduGame/frame/icon/star3.png
.png
BaiduGame/frame/icon/sys.png
.png
BaiduGame/frame/laba.gif
.gif
BaiduGame/frame/popup_win.css
BaiduGame/frame/popup_win.html
.js
BaiduGame/frame/room_win.css
BaiduGame/frame/room_win.html
.js
BaiduGame/frame/sys.gif
.gif
BaiduGame/frame/user.gif
.gif
BaiduGame/frame/user2.gif
.gif
BaiduGame/httpcall.ini
BaiduGame/im.ini
BaiduGame/installlog.ini
BaiduGame/lobbyconfig.xml
.xml
BaiduGame/mip.dll
.dll windows:5 windows x86 arch:x86

0342753571137a5532571d1b432e06b9

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

21:13:07:1e:6a:81:41:4d:1e:3a:33:b3:b3:e7:9a:68:15:82:58:bb
Signer

Actual PE Digest

21:13:07:1e:6a:81:41:4d:1e:3a:33:b3:b3:e7:9a:68:15:82:58:bb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\CGPV2\BD_Ver\CltSrc\BD_Lobby\Bin\Release\mip.pdb

Imports

kernel32

CreateFileMappingA
MapViewOfFile
CreateEventA
OpenProcess
TerminateProcess
CloseHandle
UnmapViewOfFile
SetEvent
WaitForSingleObject
GetCurrentDirectoryA
GetCurrentProcessId
CreateProcessA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr90

_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_lock
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_encode_pointer
__dllonexit
_amsg_exit
??3@YAXPAX@Z
strcpy_s
sprintf_s
_unlock
memset

Exports

Exports

CreateMiniIMClientProxy

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/tcpclt.dll
.dll windows:5 windows x86 arch:x86

c8b2f257e3401d9bb2e755753041f7aa

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

dd:54:3d:c3:69:09:d3:20:9b:b1:76:54:4a:c5:57:a1:e6:02:01:54
Signer

Actual PE Digest

dd:54:3d:c3:69:09:d3:20:9b:b1:76:54:4a:c5:57:a1:e6:02:01:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\WorkItem\CGP\MiniIM\bin\release\tcpclt.pdb

Imports

mfc90

ord5647
ord4589
ord6780
ord5497
ord2074
ord5585
ord4650
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord4030
ord798
ord2607
ord2625
ord2375
ord2368
ord1644
ord6784
ord4160
ord6782
ord3671
ord5389
ord6356
ord3218
ord1446
ord5608
ord2139
ord1792
ord1791
ord5633
ord3135
ord4895
ord3663
ord2592
ord1728
ord266
ord796
ord595
ord265
ord3732
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord3209
ord5657
ord5659
ord2447
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord5139
ord4688
ord1729
ord6446
ord5668
ord4334
ord4890
ord4667
ord3659
ord4197
ord793
ord5666
ord958
ord963
ord967
ord965
ord969
ord2610
ord2630
ord2614
ord2620
ord2618
ord2616
ord2633
ord2628
ord2612
ord2635
ord2623
ord4434
ord2605
ord605
ord1278
ord321
ord1243
ord1241
ord1268
ord1180
ord1233
ord2084
ord391
ord1152
ord1277
ord1275
ord1145
ord1075
ord1137
ord322
ord801
ord1087
ord589
ord4029
ord800

msvcr90

memset
_purecall
memcpy
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
_beginthreadex
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_snprintf
_CxxThrowException
vsprintf_s
printf
strcpy_s

kernel32

InterlockedCompareExchange
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
SetEvent
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
lstrcpynA
Sleep
InterlockedExchange
LocalAlloc
LocalFree
TerminateThread
CreateEventA
CreateIoCompletionPort
InterlockedDecrement
InterlockedIncrement

user32

GetDesktopWindow
EnableWindow

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

ws2_32

WSACreateEvent
setsockopt
htons
socket
WSACloseEvent
closesocket
WSAEventSelect
WSAGetLastError
WSASend
ntohs
gethostbyname
inet_addr
WSAStartup
WSAAsyncSelect
connect
WSAEnumNetworkEvents
shutdown
WSARecv

Exports

Exports

TcpSocketFactory

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BaiduGame/urlconfig.xml
.xml
BaiduGame/vcredist_x86.exe
.exe windows:5 windows x86 arch:x86

092eb6daba2f17cbda102fd1a32acd00

Code Sign

19
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 00:00

Subject

CN=SHECA,O=SHECA

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=UCA Root,O=UniTrust,C=CN

Not Before

01/01/2004, 00:00

Not After

31/12/2029, 00:00

Subject

CN=UCA Root,O=UniTrust,C=CN

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageIPSECEndSystem
ExtKeyUsageIPSECTunnel
ExtKeyUsageIPSECUser
ExtKeyUsageTimeStamping
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

Issuer

CN=SHECA,O=SHECA

Not Before

05/01/2011, 16:00

Not After

05/01/2012, 16:00

Subject

CN=深圳市名游网络科技有限公司,OU=深圳市名游网络科技有限公司,O=深圳市名游网络科技有限公司,ST=上海市,C=CN,1.2.840.113549.1.9.1=#0c11363238303834303739403133392e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8f:b4:88:77:65:2e:d1:f9:20:49:04:a3:aa:4d:40:5e:81:0c:7e:15
Signer

Actual PE Digest

8f:b4:88:77:65:2e:d1:f9:20:49:04:a3:aa:4d:40:5e:81:0c:7e:15

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile

msvcrt

strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf

advapi32

AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken

user32

ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA

ntdll

NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.9MB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Code Sign

19Certificate

Key Usages

09Certificate

Extended Key Usages

Key Usages

7f:42:d4:bb:60:d8:1a:da:46:32:19:4a:08:6e:4e:c4Certificate

Extended Key Usages

Key Usages

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75Certificate

Extended Key Usages

Key Usages

c3:38:36:42:91:61:7c:78:50:5d:31:76:c6:4b:08:5b:c1:87:bb:c9Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 40KB

.rsrc Size: 17KB - Virtual size: 17KB

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

a648aeaa164b592c1e8892a10400b5ae

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 296B

.reloc Size: 1024B - Virtual size: 518B

071689b2ff6578609da1964ca79e307d

Code Sign

19Certificate

Key Usages

09Certificate

Extended Key Usages

Key Usages

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75Certificate

19
Certificate

09
Certificate

7f:42:d4:bb:60:d8:1a:da:46:32:19:4a:08:6e:4e:c4
Certificate

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

c3:38:36:42:91:61:7c:78:50:5d:31:76:c6:4b:08:5b:c1:87:bb:c9
Signer

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 40KB

.rsrc
Size: 17KB - Virtual size: 17KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 296B

.reloc
Size: 1024B - Virtual size: 518B

19
Certificate

09
Certificate

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

b3:fa:9d:b1:6c:81:76:3d:28:a6:7c:43:5c:d7:23:c9:07:ad:89:62
Signer

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 672B

19
Certificate

09
Certificate

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

d3:ad:fd:c8:6a:9e:1e:cb:10:01:56:3d:ec:c7:7e:b4:f6:aa:04:44
Signer

UPX0
Size: - Virtual size: 112KB

UPX1
Size: 70KB - Virtual size: 72KB

.rsrc
Size: 2KB - Virtual size: 4KB

.text
Size: 114KB - Virtual size: 113KB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB

19
Certificate

09
Certificate

7f:42:d4:bb:60:d8:1a:da:46:32:19:4a:08:6e:4e:c4
Certificate

73:a2:54:ef:85:28:28:36:fc:07:d0:83:76:4c:ba:75
Certificate

50:8d:35:27:f6:a0:48:3f:b2:0c:b6:16:64:81:28:84:22:b3:d2:6e
Signer