ff8cca48a2cb73452ef05c1e3ef37bfa_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ff8cca48a2cb73452ef05c1e3ef37bfa_JaffaCakes118
Size

5.0MB
MD5

ff8cca48a2cb73452ef05c1e3ef37bfa
SHA1

b54379c3636c0e7132460c8d9dbbb1bbb311ea75
SHA256

6ef94526277cbd63b6f7d51fe802750efe323dea5bfcf743766d946c282e03fd
SHA512

2e58b5a9d18b4752a900d1cdd21a6aa2f7961abe7f3115a3fd46b5611fdcb8da563189f0052405c5bf4023338c7b7cc9c979794e591ed429d03b7d95ba158125
SSDEEP

98304:VJqtKTPCMcNRhgAaqzVOQOYNtfkXZ8tOzTcOPwaWcLJhlppwEHXp:ywqMc7uAaq5JLkpdYOPJJt3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 15 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PaiPai/@绿化工具.exe
unpack002/$PLUGINSDIR/ButtonEvent.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/KillProcDLL.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/linker.dll
unpack002/$SYSDIR/divxdec.ax
unpack001/PaiPai/DivX.dll
unpack001/PaiPai/Feedback.dll
unpack001/PaiPai/FreeImage.dll
unpack001/PaiPai/PaiPai_LiveUpdate.exe
unpack001/PaiPai/divxdec.ax
unpack001/PaiPai/dpl100.dll
unpack001/PaiPai/lame.ax
unpack001/PaiPai/libWeiBoU.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
static1/unpack001/PaiPai/@绿化工具.exe	nsis_installer_1
static1/unpack001/PaiPai/@绿化工具.exe	nsis_installer_2

Files

ff8cca48a2cb73452ef05c1e3ef37bfa_JaffaCakes118
.rar
PaiPai/@绿化工具.exe
.exe windows:4 windows x86 arch:x86

1c042238f43557c055fca8642de8a074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
RegisterClassA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
EmptyClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ButtonEvent.dll
.dll windows:4 windows x86 arch:x86

0ece15e7d9bb35972aec701f46192460

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
GlobalAlloc
lstrcpyA
lstrcpynA
GlobalFree

user32

PostMessageA
CallWindowProcA
GetDlgItem
FindWindowExA
SetWindowLongA
wsprintfA

Exports

Exports

AddEventHandler
Unload
UnsetEventHandler
WhichButtonId

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
MessageBoxA
CallWindowProcA
PostMessageA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
TerminateProcess
OpenProcess
LoadLibraryA
CloseHandle
GetProcAddress
FreeLibrary
GlobalFree
lstrcpyA
DisableThreadLibraryCalls

msvcrt

strcmp
_strupr
toupper
strlen
free
_initterm
malloc
_adjust_fdiv
strcpy
_itoa

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/linker.dll
.dll windows:4 windows x86 arch:x86

5b9be84907034b8f0152e51177ceafc3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GetModuleHandleA
lstrcpynA
lstrcpyA
GlobalFree

user32

UpdateWindow
InvalidateRect
SetCapture
SetFocus
PtInRect
GetWindowRect
GetDC
ReleaseCapture
EndPaint
BeginPaint
SetCursor
LoadCursorA
CallWindowProcA
DestroyCursor
SetWindowLongA
CreateCursor
IsWindow
ReleaseDC
SetWindowPos
GetWindowLongA
SendMessageA
GetClientRect
FillRect
GetFocus
DrawFocusRect
DrawTextA
ClientToScreen

gdi32

SetBkMode
SetTextColor
CreateFontIndirectA
GetObjectA
GetStockObject
DeleteObject
SelectObject

shell32

ShellExecuteA

Exports

Exports

Link
Unload

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/www.greendown.cn.ini
$SYSDIR/divxdec.ax
.dll regsvr32 windows:4 windows x86 arch:x86

5c7c5ae3768c60930b4ff63aa3912e80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeEndPeriod
timeBeginPeriod
timeGetDevCaps
timeGetTime

kernel32

GetTickCount
GetLastError
MultiByteToWideChar
lstrlenA
GetProcessAffinityMask
ReadFile
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
WriteConsoleA
GetLocaleInfoA
CreateFileA
FlushFileBuffers
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStartupInfoA
GetFileType
GetModuleHandleA
DisableThreadLibraryCalls
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
VirtualFree
WaitForMultipleObjects
ResetEvent
SetEvent
InterlockedDecrement
InterlockedIncrement
VirtualQuery
SystemTimeToFileTime
LoadLibraryW
GetCurrentProcessId
CreateEventA
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetVersionExA
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
CreateThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetExitCodeThread
SetProcessAffinityMask
GetConsoleOutputCP
SetHandleCount
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
HeapCreate
HeapDestroy
ExitProcess
GetProcessHeap
GetCommandLineA
HeapReAlloc
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
HeapFree
RtlUnwind

user32

ShowWindow
SetDlgItemTextA
GetDlgItem
SetCursor
LoadCursorA
SetClassLongA
GetDesktopWindow
LoadStringW
LoadStringA
MoveWindow
CreateDialogParamA
DestroyWindow
InvalidateRect
SetWindowLongA
DefWindowProcA
GetWindowRect
GetWindowLongA

gdi32

SetTextAlign
SetTextColor
TextOutA

advapi32

RegCreateKeyA
RegSetValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PaiPai/DivX.dll
.dll windows:4 windows x86 arch:x86

9cc8ecedfb7c696735ef87e229076ac4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

DefDriverProc

dpl100

divXLicenseRelease

mfc42

ord6375

msvcrt

sin

user32

GetScrollRange

gdi32

StretchDIBits

advapi32

RegEnumKeyExA

shell32

SHGetFolderPathA

msvcp60

?freeze@strstreambuf@std@@QAEX_N@Z

Exports

Exports

DriverProc
GetGuiVersion
doModalConfigure

Sections

.text
Size: 670KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PaiPai/DivX6.inf
PaiPai/Effects/PaiPaiWatermark.png
.png
PaiPai/Effects/Thumbs.db
PaiPai/Effects/border.jpg
.jpg
PaiPai/Effects/hhj_Thumb/hhj_thumb_021.png
.png
PaiPai/Effects/hhj_Thumb/hhj_thumb_022.png
.png
PaiPai/Effects/hhj_Thumb/hhj_thumb_023.png
.png
PaiPai/Effects/hhj_Thumb/hhj_thumb_024.png
.png
PaiPai/Effects/hhj_Thumb/hhj_thumb_025.jpg
.jpg
PaiPai/Effects/hhj_Thumb/hhj_thumb_026.png
.png
PaiPai/Effects/hhj_Thumb/hhj_thumb_037.png
.png
PaiPai/Effects/hhj_Thumb/hhj_thumb_039.jpg
.jpg
PaiPai/Feedback.dll
.dll regsvr32 windows:4 windows x86 arch:x86

e44aed1140740dfadc877482670b60a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
LockResource
SizeofResource
LoadResource
GlobalLock
GlobalFree
MulDiv
GlobalUnlock
FreeResource
InterlockedIncrement
lstrlenW
GetCurrentThreadId
DeleteCriticalSection
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetVersionExW
DisableThreadLibraryCalls
lstrlenA
OutputDebugStringW
DebugBreak
InterlockedDecrement
GetCurrentProcess
FlushInstructionCache
FindResourceW

user32

SetWindowPos
AdjustWindowRectEx
GetMenu
MapWindowPoints
GetWindow
wvsprintfW
CharNextW
LoadStringW
LoadCursorW
DialogBoxParamW
GetActiveWindow
GetSystemMetrics
DrawFocusRect
EndPaint
GetWindowLongW
SetWindowLongW
KillTimer
ClientToScreen
PtInRect
GetDlgCtrlID
GetParent
ReleaseCapture
SetCapture
CallWindowProcW
InflateRect
ScreenToClient
SetWindowRgn
IsWindowEnabled
DrawEdge
CreateWindowExW
GetClientRect
GetCapture
SystemParametersInfoW
SetTimer
InvalidateRect
UpdateWindow
IsWindow
OffsetRect
GetWindowRect
GetDlgItem
EndDialog
SetCursor
MessageBoxW
GetDlgItemTextW
DefWindowProcW
SendMessageW
BeginPaint
FrameRect

gdi32

GetDeviceCaps
SetTextColor
SetBkMode
GetStockObject
CreateRoundRectRgn
DeleteObject
CreateSolidBrush

ole32

CoUninitialize
CoInitialize
CreateStreamOnHGlobal

oleaut32

OleLoadPicture

comctl32

ImageList_LoadImageW
ImageList_Draw
_TrackMouseEvent
ImageList_Destroy
ImageList_GetIconSize

wininet

InternetCrackUrlW
InternetOpenW
InternetConnectW
InternetCloseHandle
HttpOpenRequestW
HttpSendRequestW

msvcrt

??3@YAXPAX@Z
memset
memcpy
??2@YAPAXI@Z
wcslen
iswdigit
_wtoi
free
_initterm
_adjust_fdiv
malloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ShowFeedbackDialog

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 978B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PaiPai/FreeImage.dll
.dll windows:4 windows x86 arch:x86

9e5102bd533e52d93deb4da882ac8c62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
SetCurrentDirectoryA
GetModuleFileNameA
GetCurrentDirectoryA
IsBadReadPtr
OutputDebugStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
CreateFileW
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapAlloc
RtlUnwind
HeapReAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
DeleteFileA
MoveFileA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetModuleHandleA
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetACP
GetOEMCP
IsValidCodePage
ReadFile
GetConsoleCP
GetConsoleMode
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
FlushFileBuffers
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile

ws2_32

htonl
ntohs
htons
ntohl

Exports

Exports

FreeImage_OutputMessageProc
_FreeImage_AcquireMemory@12
_FreeImage_AdjustBrightness@12
_FreeImage_AdjustColors@32
_FreeImage_AdjustContrast@12
_FreeImage_AdjustCurve@12
_FreeImage_AdjustGamma@12
_FreeImage_Allocate@24
_FreeImage_AllocateEx@36
_FreeImage_AllocateExT@40
_FreeImage_AllocateT@28
_FreeImage_AppendPage@8
_FreeImage_ApplyColorMapping@24
_FreeImage_ApplyPaletteIndexMapping@20
_FreeImage_Clone@4
_FreeImage_CloneMetadata@8
_FreeImage_CloneTag@4
_FreeImage_CloseMemory@4
_FreeImage_CloseMultiBitmap@8
_FreeImage_ColorQuantize@8
_FreeImage_ColorQuantizeEx@20
_FreeImage_Composite@16
_FreeImage_ConvertFromRawBits@36
_FreeImage_ConvertLine16To24_555@12
_FreeImage_ConvertLine16To24_565@12
_FreeImage_ConvertLine16To32_555@12
_FreeImage_ConvertLine16To32_565@12
_FreeImage_ConvertLine16To4_555@12
_FreeImage_ConvertLine16To4_565@12
_FreeImage_ConvertLine16To8_555@12
_FreeImage_ConvertLine16To8_565@12
_FreeImage_ConvertLine16_555_To16_565@12
_FreeImage_ConvertLine16_565_To16_555@12
_FreeImage_ConvertLine1To16_555@16
_FreeImage_ConvertLine1To16_565@16
_FreeImage_ConvertLine1To24@16
_FreeImage_ConvertLine1To32@16
_FreeImage_ConvertLine1To4@12
_FreeImage_ConvertLine1To8@12
_FreeImage_ConvertLine24To16_555@12
_FreeImage_ConvertLine24To16_565@12
_FreeImage_ConvertLine24To32@12
_FreeImage_ConvertLine24To4@12
_FreeImage_ConvertLine24To8@12
_FreeImage_ConvertLine32To16_555@12
_FreeImage_ConvertLine32To16_565@12
_FreeImage_ConvertLine32To24@12
_FreeImage_ConvertLine32To4@12
_FreeImage_ConvertLine32To8@12
_FreeImage_ConvertLine4To16_555@16
_FreeImage_ConvertLine4To16_565@16
_FreeImage_ConvertLine4To24@16
_FreeImage_ConvertLine4To32@16
_FreeImage_ConvertLine4To8@12
_FreeImage_ConvertLine8To16_555@16
_FreeImage_ConvertLine8To16_565@16
_FreeImage_ConvertLine8To24@16
_FreeImage_ConvertLine8To32@16
_FreeImage_ConvertLine8To4@16
_FreeImage_ConvertTo16Bits555@4
_FreeImage_ConvertTo16Bits565@4
_FreeImage_ConvertTo24Bits@4
_FreeImage_ConvertTo32Bits@4
_FreeImage_ConvertTo4Bits@4
_FreeImage_ConvertTo8Bits@4
_FreeImage_ConvertToGreyscale@4
_FreeImage_ConvertToRGBF@4
_FreeImage_ConvertToRawBits@32
_FreeImage_ConvertToStandardType@8
_FreeImage_ConvertToType@12
_FreeImage_Copy@20
_FreeImage_CreateICCProfile@12
_FreeImage_CreateTag@0
_FreeImage_DeInitialise@0
_FreeImage_DeletePage@8
_FreeImage_DeleteTag@4
_FreeImage_DestroyICCProfile@4
_FreeImage_Dither@8
_FreeImage_EnlargeCanvas@28
_FreeImage_FIFSupportsExportBPP@8
_FreeImage_FIFSupportsExportType@8
_FreeImage_FIFSupportsICCProfiles@4
_FreeImage_FIFSupportsReading@4
_FreeImage_FIFSupportsWriting@4
_FreeImage_FillBackground@12
_FreeImage_FindCloseMetadata@4
_FreeImage_FindFirstMetadata@12
_FreeImage_FindNextMetadata@8
_FreeImage_FlipHorizontal@4
_FreeImage_FlipVertical@4
_FreeImage_GetAdjustColorsLookupTable@32
_FreeImage_GetBPP@4
_FreeImage_GetBackgroundColor@8
_FreeImage_GetBits@4
_FreeImage_GetBlueMask@4
_FreeImage_GetChannel@8
_FreeImage_GetColorType@4
_FreeImage_GetColorsUsed@4
_FreeImage_GetComplexChannel@8
_FreeImage_GetCopyrightMessage@0
_FreeImage_GetDIBSize@4
_FreeImage_GetDotsPerMeterX@4
_FreeImage_GetDotsPerMeterY@4
_FreeImage_GetFIFCount@0
_FreeImage_GetFIFDescription@4
_FreeImage_GetFIFExtensionList@4
_FreeImage_GetFIFFromFilename@4
_FreeImage_GetFIFFromFilenameU@4
_FreeImage_GetFIFFromFormat@4
_FreeImage_GetFIFFromMime@4
_FreeImage_GetFIFMimeType@4
_FreeImage_GetFIFRegExpr@4
_FreeImage_GetFileType@8
_FreeImage_GetFileTypeFromHandle@12
_FreeImage_GetFileTypeFromMemory@8
_FreeImage_GetFileTypeU@8
_FreeImage_GetFormatFromFIF@4
_FreeImage_GetGreenMask@4
_FreeImage_GetHeight@4
_FreeImage_GetHistogram@12
_FreeImage_GetICCProfile@4
_FreeImage_GetImageType@4
_FreeImage_GetInfo@4
_FreeImage_GetInfoHeader@4
_FreeImage_GetLine@4
_FreeImage_GetLockedPageNumbers@12
_FreeImage_GetMetadata@16
_FreeImage_GetMetadataCount@8
_FreeImage_GetPageCount@4
_FreeImage_GetPalette@4
_FreeImage_GetPitch@4
_FreeImage_GetPixelColor@16
_FreeImage_GetPixelIndex@16
_FreeImage_GetRedMask@4
_FreeImage_GetScanLine@8
_FreeImage_GetTagCount@4
_FreeImage_GetTagDescription@4
_FreeImage_GetTagID@4
_FreeImage_GetTagKey@4
_FreeImage_GetTagLength@4
_FreeImage_GetTagType@4
_FreeImage_GetTagValue@4
_FreeImage_GetTransparencyCount@4
_FreeImage_GetTransparencyTable@4
_FreeImage_GetTransparentIndex@4
_FreeImage_GetVersion@0
_FreeImage_GetWidth@4
_FreeImage_HasBackgroundColor@4
_FreeImage_Initialise@4
_FreeImage_InsertPage@12
_FreeImage_Invert@4
_FreeImage_IsLittleEndian@0
_FreeImage_IsPluginEnabled@4
_FreeImage_IsTransparent@4
_FreeImage_JPEGCrop@24
_FreeImage_JPEGCropU@24
_FreeImage_JPEGTransform@16
_FreeImage_JPEGTransformU@16
_FreeImage_Load@12
_FreeImage_LoadFromHandle@16
_FreeImage_LoadFromMemory@12
_FreeImage_LoadMultiBitmapFromMemory@12
_FreeImage_LoadU@12
_FreeImage_LockPage@8
_FreeImage_LookupSVGColor@16
_FreeImage_LookupX11Color@16
_FreeImage_MakeThumbnail@12
_FreeImage_MovePage@12
_FreeImage_MultigridPoissonSolver@8
_FreeImage_OpenMemory@8
_FreeImage_OpenMultiBitmap@24
_FreeImage_OpenMultiBitmapFromHandle@16
_FreeImage_Paste@20
_FreeImage_PreMultiplyWithAlpha@4
_FreeImage_ReadMemory@16
_FreeImage_RegisterExternalPlugin@20
_FreeImage_RegisterLocalPlugin@20
_FreeImage_Rescale@16
_FreeImage_Rotate@16
_FreeImage_RotateClassic@12
_FreeImage_RotateEx@48
_FreeImage_Save@16
_FreeImage_SaveToHandle@20
_FreeImage_SaveToMemory@16
_FreeImage_SaveU@16
_FreeImage_SeekMemory@12
_FreeImage_SetBackgroundColor@8
_FreeImage_SetChannel@12
_FreeImage_SetComplexChannel@12
_FreeImage_SetDotsPerMeterX@8
_FreeImage_SetDotsPerMeterY@8
_FreeImage_SetMetadata@16
_FreeImage_SetOutputMessage@4
_FreeImage_SetOutputMessageStdCall@4
_FreeImage_SetPixelColor@16
_FreeImage_SetPixelIndex@16
_FreeImage_SetPluginEnabled@8
_FreeImage_SetTagCount@8
_FreeImage_SetTagDescription@8
_FreeImage_SetTagID@8
_FreeImage_SetTagKey@8
_FreeImage_SetTagLength@8
_FreeImage_SetTagType@8
_FreeImage_SetTagValue@8
_FreeImage_SetTransparencyTable@12
_FreeImage_SetTransparent@8
_FreeImage_SetTransparentIndex@8
_FreeImage_SwapColors@16
_FreeImage_SwapPaletteIndices@12
_FreeImage_TagToString@12
_FreeImage_TellMemory@4
_FreeImage_Threshold@8
_FreeImage_TmoDrago03@20
_FreeImage_TmoFattal02@20
_FreeImage_TmoReinhard05@20
_FreeImage_TmoReinhard05Ex@36
_FreeImage_ToneMapping@24
_FreeImage_Unload@4
_FreeImage_UnlockPage@12
_FreeImage_WriteMemory@16
_FreeImage_ZLibCRC32@12
_FreeImage_ZLibCompress@16
_FreeImage_ZLibGUnzip@16
_FreeImage_ZLibGZip@16
_FreeImage_ZLibUncompress@16

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 840KB - Virtual size: 837KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PaiPai/Images/Icons/Gallery.ico
PaiPai/Images/Icons/PaiPai.ico
PaiPai/Images/Icons/Thumbs.db
PaiPai/Images/Icons/Wan.ico
PaiPai/Images/Icons/mtbk_16x16.ico
PaiPai/Images/Icons/mtjt_16x16.ico
PaiPai/Images/Icons/mtst_16x16.ico
PaiPai/Images/UI/Thumbs.db
PaiPai/Images/UI/bg_dlg_bottomleft.png
.png
PaiPai/Images/UI/bg_dlg_bottommiddle.png
.png
PaiPai/Images/UI/bg_dlg_bottomright.png
.png
PaiPai/Images/UI/bg_dlg_middleleft.png
.png
PaiPai/Images/UI/bg_dlg_middlemid.png
.png
PaiPai/Images/UI/bg_dlg_middleright.png
.png
PaiPai/Images/UI/bg_dlg_pic.png
.png
PaiPai/Images/UI/bg_dlg_topleft.png
.png
PaiPai/Images/UI/bg_dlg_topmiddle.png
.png
PaiPai/Images/UI/bg_dlg_topright.png
.png
PaiPai/Images/UI/bg_mainview1.png
.png
PaiPai/Images/UI/bg_mainview2.png
.png
PaiPai/Images/UI/bg_mainview_border.png
.png
PaiPai/Images/UI/bg_mainview_bottom.png
.png
PaiPai/Images/UI/bg_mainview_left.png
.png
PaiPai/Images/UI/bg_mainview_leftbottom.png
.png
PaiPai/Images/UI/bg_mainview_lefttop.png
.png
PaiPai/Images/UI/bg_mainview_lianpai_shotting_1.png
.png
PaiPai/Images/UI/bg_mainview_lianpai_shotting_2.png
.png
PaiPai/Images/UI/bg_mainview_number1_1.png
.png
PaiPai/Images/UI/bg_mainview_number1_2.png
.png
PaiPai/Images/UI/bg_mainview_number2_1.png
.png
PaiPai/Images/UI/bg_mainview_number2_2.png
.png
PaiPai/Images/UI/bg_mainview_number3_1.png
.png
PaiPai/Images/UI/bg_mainview_number3_2.png
.png
PaiPai/Images/UI/bg_mainview_right.png
.png
PaiPai/Images/UI/bg_mainview_rightbottom.png
.png
PaiPai/Images/UI/bg_mainview_righttop.png
.png
PaiPai/Images/UI/bg_mainview_shotting_1.png
.png
PaiPai/Images/UI/bg_mainview_shotting_2.png
.png
PaiPai/Images/UI/bg_mainview_top.png
.png
PaiPai/Images/UI/bg_midbotlistctrl.bmp
PaiPai/Images/UI/bg_middlebottomview.png
.png
PaiPai/Images/UI/bg_middlebottomview_listbg.png
.png
PaiPai/Images/UI/bg_middletop.png
.png
PaiPai/Images/UI/bg_mode_bottom.png
.png
PaiPai/Images/UI/bg_mode_middle.png
.png
PaiPai/Images/UI/bg_mode_top.png
.png
PaiPai/Images/UI/bg_scrollimg_left.png
.png
PaiPai/Images/UI/bg_scrollimg_middle.png
.png
PaiPai/Images/UI/bg_scrollimg_right.png
.png
PaiPai/Images/UI/bg_scrollimg_thumb_left.png
.png
PaiPai/Images/UI/bg_scrollimg_thumb_middle.png
.png
PaiPai/Images/UI/bg_scrollimg_thumb_right.png
.png
PaiPai/Images/UI/bg_scrollimg_thumb_streth.png
.png
PaiPai/Images/UI/bg_setting_line1.png
.png
PaiPai/Images/UI/bg_setting_shili1.jpg
.jpg
PaiPai/Images/UI/bg_setting_shili2.jpg
.jpg
PaiPai/Images/UI/bitmap_del_bg.png
.png
PaiPai/Images/UI/btn_adddynamicbk_down.png
.png
PaiPai/Images/UI/btn_adddynamicbk_hover.png
.png
PaiPai/Images/UI/btn_adddynamicbk_normal.png
.png
PaiPai/Images/UI/btn_addeffect_down.png
.png
PaiPai/Images/UI/btn_addeffect_hover.png
.png
PaiPai/Images/UI/btn_addeffect_normal.png
.png
PaiPai/Images/UI/btn_addmagic_down.png
.png
PaiPai/Images/UI/btn_addmagic_hover.png
.png
PaiPai/Images/UI/btn_addmagic_normal.png
.png
PaiPai/Images/UI/btn_addsence_down.png
.png
PaiPai/Images/UI/btn_addsence_hover.png
.png
PaiPai/Images/UI/btn_addsence_normal.png
.png
PaiPai/Images/UI/btn_addstillbk_down.png
.png
PaiPai/Images/UI/btn_addstillbk_hover.png
.png
PaiPai/Images/UI/btn_addstillbk_normal.png
.png
PaiPai/Images/UI/btn_album_down.png
.png
PaiPai/Images/UI/btn_album_hover.png
.png
PaiPai/Images/UI/btn_album_normal.png
.png
PaiPai/Images/UI/btn_arrow_left_disable.png
.png
PaiPai/Images/UI/btn_arrow_left_down.png
.png
PaiPai/Images/UI/btn_arrow_left_hover.png
.png
PaiPai/Images/UI/btn_arrow_left_normal.png
.png
PaiPai/Images/UI/btn_arrow_right_disable.png
.png
PaiPai/Images/UI/btn_arrow_right_down.png
.png
PaiPai/Images/UI/btn_arrow_right_hover.png
.png
PaiPai/Images/UI/btn_arrow_right_normal.png
.png
PaiPai/Images/UI/btn_autoeffect_down.png
.png
PaiPai/Images/UI/btn_autoeffect_hover.png
.png
PaiPai/Images/UI/btn_autoeffect_normal.png
.png
PaiPai/Images/UI/btn_automtxx_down.png
.png
PaiPai/Images/UI/btn_automtxx_hover.png
.png
PaiPai/Images/UI/btn_automtxx_normal.png
.png
PaiPai/Images/UI/btn_biaoqing_down.png
.png
PaiPai/Images/UI/btn_biaoqing_hover.png
.png
PaiPai/Images/UI/btn_biaoqing_normal.png
.png
PaiPai/Images/UI/btn_convert_down.png
.png
PaiPai/Images/UI/btn_convert_hover.png
.png
PaiPai/Images/UI/btn_convert_normal.png
.png
PaiPai/Images/UI/btn_copytoqq_down.png
.png
PaiPai/Images/UI/btn_copytoqq_hover.png
.png
PaiPai/Images/UI/btn_copytoqq_normal.png
.png
PaiPai/Images/UI/btn_danzhang_down.png
.png
PaiPai/Images/UI/btn_danzhang_hover.png
.png
PaiPai/Images/UI/btn_danzhang_normal.png
.png
PaiPai/Images/UI/btn_fanjingxiang_down.png
.png
PaiPai/Images/UI/btn_fanjingxiang_hover.png
.png
PaiPai/Images/UI/btn_fanjingxiang_normal.png
.png
PaiPai/Images/UI/btn_folder_dlgsave_down.png
.png
PaiPai/Images/UI/btn_folder_dlgsave_hover.png
.png
PaiPai/Images/UI/btn_folder_dlgsave_normal.png
.png
PaiPai/Images/UI/btn_imgitemborderbg.png
.png
PaiPai/Images/UI/btn_imgitemdel2.png
.png
PaiPai/Images/UI/btn_jixupaizhao_down.png
.png
PaiPai/Images/UI/btn_jixupaizhao_hover.png
.png
PaiPai/Images/UI/btn_jixupaizhao_normal.png
.png
PaiPai/Images/UI/btn_leftaddbk_down.png
.png
PaiPai/Images/UI/btn_leftdelbk_down.png
.png
PaiPai/Images/UI/btn_leftdelbk_down1.png
.png
PaiPai/Images/UI/btn_leftdelbk_hover.png
.png
PaiPai/Images/UI/btn_leftdelbk_normal.png
.png
PaiPai/Images/UI/btn_lianpai_down.png
.png
PaiPai/Images/UI/btn_lianpai_hover.png
.png
PaiPai/Images/UI/btn_lianpai_normal.png
.png
PaiPai/Images/UI/btn_lianpaizhao_down.png
.png
PaiPai/Images/UI/btn_lianpaizhao_hover.png
.png
PaiPai/Images/UI/btn_lianpaizhao_normal.png
.png
PaiPai/Images/UI/btn_luxiang_down.png
.png
PaiPai/Images/UI/btn_luxiang_hover.png
.png
PaiPai/Images/UI/btn_luxiang_normal.png
.png
PaiPai/Images/UI/btn_luxiang_shipin_down.png
.png
PaiPai/Images/UI/btn_luxiang_shipin_hover.png
.png
PaiPai/Images/UI/btn_luxiang_shipin_normal.png
.png
PaiPai/Images/UI/btn_mirror_down.png
.png
PaiPai/Images/UI/btn_mirror_hover.png
.png
PaiPai/Images/UI/btn_mirror_normal.png
.png
PaiPai/Images/UI/btn_modebiaoqing_down.png
.png
PaiPai/Images/UI/btn_modebiaoqing_hover.png
.png
PaiPai/Images/UI/btn_modebiaoqing_normal.png
.png
PaiPai/Images/UI/btn_modeluxiang_down.png
.png
PaiPai/Images/UI/btn_modeluxiang_hover.png
.png
PaiPai/Images/UI/btn_modeluxiang_normal.png
.png
PaiPai/Images/UI/btn_modepaizhao_down.png
.png
PaiPai/Images/UI/btn_modepaizhao_hover.png
.png
PaiPai/Images/UI/btn_modepaizhao_normal.png
.png
PaiPai/Images/UI/btn_mv_copytoqq_down.png
.png
PaiPai/Images/UI/btn_mv_copytoqq_hover.png
.png
PaiPai/Images/UI/btn_mv_copytoqq_normal.png
.png
PaiPai/Images/UI/btn_paizhao_down.png
.png
PaiPai/Images/UI/btn_paizhao_hover.png
.png
PaiPai/Images/UI/btn_paizhao_normal.png
.png
PaiPai/Images/UI/btn_qq_dlgsave_down.png
.png
PaiPai/Images/UI/btn_qq_dlgsave_hover.png
.png
PaiPai/Images/UI/btn_qq_dlgsave_normal.png
.png
PaiPai/Images/UI/btn_qq_down.png
.png
PaiPai/Images/UI/btn_qq_hover.png
.png
PaiPai/Images/UI/btn_qq_normal.png
.png
PaiPai/Images/UI/btn_restoredefault_down.png
.png
PaiPai/Images/UI/btn_restoredefault_hover.png
.png
PaiPai/Images/UI/btn_restoredefault_normal.png
.png
PaiPai/Images/UI/btn_return_down.png
.png
PaiPai/Images/UI/btn_return_hover.png
.png
PaiPai/Images/UI/btn_return_normal.png
.png
PaiPai/Images/UI/btn_save_down.png
.png
PaiPai/Images/UI/btn_save_hover.png
.png
PaiPai/Images/UI/btn_save_normal.png
.png
PaiPai/Images/UI/btn_setting_down.png
.png
PaiPai/Images/UI/btn_setting_genggai_down.png
.png
PaiPai/Images/UI/btn_setting_genggai_hover.png
.png
PaiPai/Images/UI/btn_setting_genggai_normal.png
.png
PaiPai/Images/UI/btn_setting_hover.png
.png
PaiPai/Images/UI/btn_setting_normal.png
.png
PaiPai/Images/UI/btn_setting_queding_down.png
.png
PaiPai/Images/UI/btn_setting_queding_hover.png
.png
PaiPai/Images/UI/btn_setting_queding_normal.png
.png
PaiPai/Images/UI/btn_shantu_down.png
.png
PaiPai/Images/UI/btn_shantu_hover.png
.png
PaiPai/Images/UI/btn_shantu_normal.png
.png
PaiPai/Images/UI/btn_sina_bottom_down.png
.png
PaiPai/Images/UI/btn_sina_bottom_hover.png
.png
PaiPai/Images/UI/btn_sina_bottom_normal.png
.png
PaiPai/Images/UI/btn_sina_dlgsave_down.png
.png
PaiPai/Images/UI/btn_sina_dlgsave_hover.png
.png
PaiPai/Images/UI/btn_sina_dlgsave_normal.png
.png
PaiPai/Images/UI/btn_sina_send.png
.png
PaiPai/Images/UI/btn_smallarrow_left_disable.png
.png
PaiPai/Images/UI/btn_smallarrow_left_down.png
.png
PaiPai/Images/UI/btn_smallarrow_left_hover.png
.png
PaiPai/Images/UI/btn_smallarrow_left_normal.png
.png
PaiPai/Images/UI/btn_smallarrow_right_disable.png
.png
PaiPai/Images/UI/btn_smallarrow_right_down.png
.png
PaiPai/Images/UI/btn_smallarrow_right_hover.png
.png
PaiPai/Images/UI/btn_smallarrow_right_normal.png
.png
PaiPai/Images/UI/btn_stopluxiang_down.png
.png
PaiPai/Images/UI/btn_stopluxiang_hover.png
.png
PaiPai/Images/UI/btn_stopluxiang_normal.png
.png
PaiPai/Images/UI/btn_symtxx_down.png
.png
PaiPai/Images/UI/btn_symtxx_hover.png
.png
PaiPai/Images/UI/btn_symtxx_normal.png
.png
PaiPai/Images/UI/btn_tabright_down.png
.png
PaiPai/Images/UI/btn_tabright_hover.png
.png
PaiPai/Images/UI/btn_tabright_normal.png
.png
PaiPai/Images/UI/btn_yuantu_disable.png
.png
PaiPai/Images/UI/btn_yuantu_down.png
.png
PaiPai/Images/UI/btn_yuantu_hover.png
.png
PaiPai/Images/UI/btn_yuantu_normal.png
.png
PaiPai/Images/UI/btn_zhengjingxiang_down.png
.png
PaiPai/Images/UI/btn_zhengjingxiang_hover.png
.png
PaiPai/Images/UI/btn_zhengjingxiang_normal.png
.png
PaiPai/Images/UI/btn_zidongyouhua_down.png
.png
PaiPai/Images/UI/btn_zidongyouhua_hover.png
.png
PaiPai/Images/UI/btn_zidongyouhua_normal.png
.png
PaiPai/Images/UI/button_chongzhi_disable.png
.png
PaiPai/Images/UI/button_chongzhi_down.png
.png
PaiPai/Images/UI/button_chongzhi_hover.png
.png
PaiPai/Images/UI/button_chongzhi_normal.png
.png
PaiPai/Images/UI/gif_demo_head.gif
.gif
PaiPai/Images/UI/ico_cancel_dlgsave.png
.png
PaiPai/Images/UI/ico_downward.png
.png
PaiPai/Images/UI/ico_leftpaizhao.png
.png
PaiPai/Images/UI/ico_leftxiaojiqiao.png
.png
PaiPai/Images/UI/ico_new_zaixian.png
.png
PaiPai/Images/UI/ico_other_bendi.png
.png
PaiPai/Images/UI/ico_qq.png
.png
PaiPai/Images/UI/ico_save_dlgsave.png
.png
PaiPai/Images/UI/ico_saveas_dlgsave.png
.png
PaiPai/Images/UI/img_border_luxiangshijian_bg.png
.png
PaiPai/Images/UI/img_luxiangbofangbg.png
.png
PaiPai/Images/UI/img_luxiangshijian_bg.png
.png
PaiPai/Images/UI/img_mainview_shotting_luxiangbg.png
.png
PaiPai/Images/UI/img_mainview_shotting_luxiangshanshuobg.png
.png
PaiPai/Images/UI/img_tiaozheng.png
.png
PaiPai/Images/UI/img_zidongyouhua_biankuang.png
.png
PaiPai/Images/UI/img_zidongyouhua_jiantou.png
.png
PaiPai/Images/UI/img_zidongyouhua_youhuahou.png
.png
PaiPai/Images/UI/img_zidongyouhua_youhuaquyu.png
.png
PaiPai/Images/UI/img_zidongyouhua_yuantu.png
.png
PaiPai/Images/UI/mainview_nodevice.bmp
PaiPai/PaiPai.exe
.exe windows:4 windows x86 arch:x86

3be846ab168c03c80c91c89e0aa289a9

Code Sign

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06-08-2003 00:00

Not After

05-08-2013 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

14:b3:be:a8:9d:64:8e:0d:36:19:5d:2a:76:5a:9c:6b
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

03-12-2009 00:00

Not After

01-02-2012 23:59

Subject

CN=厦门网之源信息科技有限公司,O=厦门网之源信息科技有限公司,L=xiamen,ST=fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

6b:71:14:50:13:57:73:76:cd:95:a3:b2:bc:57:76:98:91:f2:33:dc
Signer

Actual PE Digest

6b:71:14:50:13:57:73:76:cd:95:a3:b2:bc:57:76:98:91:f2:33:dc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCreateTexture
GdipSaveImageToFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateImageAttributes
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipTranslateTextureTransform
GdipGraphicsClear
GdipCreateBitmapFromFile
GdipCloneBrush
GdipCreateFontFamilyFromName
GdipCreateFont
GdipCreateSolidFill
GdipSetTextRenderingHint
GdipDrawString
GdipDeleteBrush
GdipDeleteFont
GdipDeleteFontFamily
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateRegionHrgn
GdipDeleteRegion
GdipFillRegion
GdipFillRectangle
GdipCreateMatrix
GdipScaleMatrix
GdipTransformMatrixPointsI
GdipGetImagePalette
GdipSetImagePalette
GdipDrawImageRectRect
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateHBITMAPFromBitmap
GdipBitmapSetResolution
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdiplusStartup
GdipCreateFromHDC
GdipDrawImageRectI
GdipReleaseDC
GdipDeleteGraphics
GdipDisposeImage
GdipLoadImageFromFile
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapLockBits
GdiplusShutdown
GdipDrawImageI
GdipCreateBitmapFromFileICM
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDeletePen
GdipCreatePen1
GdipDrawRectangleI
GdipSetSmoothingMode
GdipFillRectangleI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCloneBitmapAreaI
GdipDrawImageRectRectI
GdipImageRotateFlip
GdipSetInterpolationMode
GdipDeleteMatrix
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipBitmapUnlockBits

freeimage

_FreeImage_GetFileTypeFromHandle@12
_FreeImage_LoadFromHandle@16
_FreeImage_DeInitialise@0
_FreeImage_GetWidth@4
_FreeImage_GetHeight@4
_FreeImage_GetBPP@4
_FreeImage_ConvertTo32Bits@4
_FreeImage_Unload@4
_FreeImage_GetScanLine@8
_FreeImage_Initialise@4

mfc42u

ord3744
ord5059
ord1720
ord5257
ord2438
ord2116
ord5273
ord2977
ord3142
ord3254
ord4459
ord3131
ord3257
ord2980
ord3076
ord2971
ord3397
ord3825
ord3826
ord3820
ord3074
ord4075
ord4621
ord4418
ord3716
ord795
ord567
ord4270
ord755
ord2746
ord470
ord6193
ord2371
ord5977
ord3084
ord6451
ord3737
ord818
ord2070
ord4279
ord641
ord2506
ord1165
ord4294
ord663
ord656
ord609
ord2810
ord925
ord2108
ord2634
ord4219
ord6211
ord860
ord1197
ord3785
ord809
ord556
ord2114
ord6354
ord1088
ord2910
ord5706
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord616
ord3312
ord6871
ord668
ord1972
ord2762
ord356
ord1560
ord665
ord1971
ord5438
ord3784
ord353
ord268
ord2385
ord690
ord5803
ord5198
ord3224
ord389
ord6381
ord922
ord613
ord289
ord2567
ord4390
ord3569
ord5261
ord4370
ord4847
ord4992
ord6048
ord1767
ord5276
ord4419
ord3592
ord1594
ord324
ord2293
ord2294
ord4229
ord6597
ord4704
ord4532
ord3701
ord4470
ord4282
ord2084
ord366
ord6127
ord6212
ord6195
ord2081
ord3871
ord3749
ord6372
ord3170
ord3494
ord2507
ord355
ord3605
ord348
ord2078
ord1105
ord2447
ord2855
ord5777
ord2705
ord1761
ord413
ord711
ord283
ord6266
ord3490
ord3176
ord4053
ord2773
ord6589
ord6642
ord6583
ord6798
ord6848
ord6814
ord6846
ord6823
ord6850
ord6858
ord6838
ord6805
ord6830
ord6837
ord6849
ord6807
ord6806
ord6803
ord6836
ord6847
ord6826
ord4583
ord4582
ord4893
ord4364
ord4886
ord6808
ord5070
ord4334
ord4341
ord4714
ord4883
ord4525
ord4539
ord4520
ord4523
ord4518
ord4957
ord4954
ord4103
ord6050
ord5236
ord5277
ord3743
ord5256
ord6683
ord4426
ord6475
ord6510
ord6791
ord3792
ord5031
ord6796
ord6799
ord1718
ord6606
ord4155
ord1941
ord3365
ord2574
ord4396
ord3635
ord693
ord4238
ord2442
ord2235
ord3915
ord3288
ord2857
ord3905
ord5142
ord3747
ord4688
ord6895
ord1834
ord4237
ord2715
ord2382
ord3054
ord5094
ord5097
ord4461
ord4298
ord3345
ord5006
ord975
ord5468
ord3398
ord2874
ord2873
ord4146
ord4072
ord5233
ord5278
ord2641
ord1658
ord4430
ord674
ord5248
ord1229
ord1150
ord6617
ord4451
ord4421
ord4493
ord5024
ord816
ord562
ord4331
ord4768
ord2538
ord3810
ord1173
ord291
ord4718
ord6819
ord4407
ord2144
ord1230
ord2072
ord3173
ord4273
ord927
ord539
ord6891
ord2092
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord5285
ord5710
ord4616
ord3733
ord1569
ord815
ord3806
ord4154
ord6113
ord2613
ord1131
ord1202
ord3948
ord2717
ord6655
ord3313
ord5180
ord354
ord6298
ord4163
ord1912
ord4335
ord4343
ord4537
ord517
ord784
ord4257
ord4717
ord4458
ord4780
ord4474
ord3748
ord3638
ord394
ord696
ord909
ord5624
ord4180
ord4450
ord6831
ord6691
ord2836
ord2372
ord6375
ord2099
ord6860
ord4199
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord6051
ord6390
ord5446
ord6379
ord5436
ord472
ord537
ord1192
ord2745
ord2444
ord536
ord5852
ord4197
ord2756
ord1614
ord4292
ord4128
ord5783
ord942
ord941
ord940
ord2914
ord5568
ord1143
ord1637
ord554
ord2112
ord4158
ord3284
ord2004
ord2915
ord807
ord538
ord3981
ord5856
ord2400
ord2088
ord1172
ord2859
ord5781
ord2397
ord323
ord1633
ord6190
ord640
ord3614
ord3591
ord5860
ord6057
ord5567
ord5575
ord5732
ord5674
ord5790
ord5785
ord5869
ord6168
ord6017
ord6185
ord4324
ord6182
ord5752
ord6188
ord5755
ord2966
ord1634
ord858
ord2606
ord5784
ord2559
ord2406
ord5679
ord4272
ord2755
ord4124
ord5871
ord3621
ord3688
ord3568
ord3566
ord2854
ord5602
ord2858
ord4078
ord6138
ord823
ord2430
ord3658
ord3649
ord2576
ord4215
ord1854
ord500
ord3696
ord772
ord540
ord861
ord535
ord800
ord686
ord384
ord825
ord6896
ord561

msvcrt

_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
vswprintf
wcsrchr
memset
memcpy
memcmp
_chkesp
printf
strchr
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_wcsicmp
strncat
_strlwr
wcscat
swprintf
wcstol
wcsncmp
wcschr
floor
_snprintf
_endthread
_beginthreadex
strncpy
??1type_info@@UAE@XZ
srand
remove
getenv
vsprintf
_CxxThrowException
calloc
fprintf
_iob
sscanf
sprintf
_CIpow
rand
_open
_filelength
_close
setlocale
mbstowcs
atoi
_wtoi
_wtol
fscanf
fgets
getc
fflush
_wfopen
wcstombs
_strtime
_vsnwprintf
fopen
fseek
ftell
fclose
fputc
fread
fwrite
strncmp
wcsncpy
_controlfp
time
wcsstr
memmove
wcscmp
wcslen
_strupr
_strnicmp
wcscpy
__CxxFrameHandler
malloc
free
_purecall
_ftol
exit

kernel32

LockResource
GetCPInfo
lstrlenA
MultiByteToWideChar
GetVersion
GetVersionExW
GetLastError
CreateThread
GetLocalTime
GetModuleFileNameW
WaitForSingleObject
DeleteFileW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GlobalReAlloc
GetFileSize
GlobalSize
LocalUnlock
LocalLock
LocalAlloc
GetProcAddress
LoadLibraryW
FreeLibrary
SizeofResource
CopyFileW
GetPrivateProfileIntW
SetEvent
LCMapStringA
lstrcpynA
VirtualFree
VirtualAlloc
CreateMutexW
GetShortPathNameA
GetSystemTime
ExitThread
ReleaseMutex
TerminateThread
CreateEventW
GetTickCount
DeviceIoControl
CreateFileA
LoadLibraryA
ResumeThread
ResetEvent
GetFileAttributesW
TerminateProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MulDiv
GetWindowsDirectoryW
RemoveDirectoryW
DebugBreak
GetProfileIntW
InitializeCriticalSection
DeleteCriticalSection
SetConsoleTitleW
AllocConsole
GetStdHandle
FatalAppExitW
lstrcatA
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
WaitForMultipleObjects
GetStartupInfoW
LoadResource
FindResourceW
lstrcmpiW
lstrlenW
CloseHandle
WriteFile
SetFilePointer
CreateFileW
lstrcpyW
lstrcpynW
CreateDirectoryW
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
InterlockedDecrement
Sleep
ReadFile
HeapFree
HeapAlloc
GetProcessHeap
OutputDebugStringW
lstrcatW
FormatMessageW
LocalFree

user32

SetTimer
KillTimer
IsWindow
ShowWindow
GetSystemMenu
GetWindowDC
MoveWindow
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EnumDisplaySettingsW
ChangeDisplaySettingsW
DestroyWindow
AdjustWindowRect
SetForegroundWindow
CreateWindowExA
GetMessageW
DefWindowProcW
ShowCursor
TrackMouseEvent
AdjustWindowRectEx
EndPaint
BeginPaint
DestroyCursor
LoadImageW
FrameRect
TranslateMessage
SetMenu
RegisterHotKey
UnregisterHotKey
IsMenu
GetMenu
GetWindowTextW
EnumWindows
IsIconic
FindWindowW
RegisterClipboardFormatW
LoadMenuW
GetMessagePos
CallWindowProcW
GetCursorPos
RegisterClassExW
CreateWindowExW
PeekMessageW
InflateRect
WindowFromPoint
GetIconInfo
wsprintfW
wvsprintfA
OffsetRect
SetWindowRgn
PtInRect
ScreenToClient
ClientToScreen
IsRectEmpty
GetWindowRect
LoadCursorW
SetCursor
SendMessageW
RedrawWindow
EnableWindow
GetKeyState
GetParent
PostMessageW
SetCapture
GetClientRect
ReleaseCapture
InvalidateRect
DrawFocusRect
GrayStringW
DrawTextW
TabbedTextOutW
GetSubMenu
DeleteMenu
RemoveMenu
LoadBitmapW
GetSysColorBrush
GetMenuStringW
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuW
GetMenuItemCount
InsertMenuW
AppendMenuW
GetSystemMetrics
DispatchMessageW
MsgWaitForMultipleObjects
LoadIconW
GetAsyncKeyState
MessageBoxW
SetWindowPos
GetWindowLongW
GetWindowRgn
SetWindowLongW
GetDesktopWindow
GetDC
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoW
GetSysColor
CopyRect
FillRect
DrawEdge
SetRect
GetMenuItemInfoW
UpdateWindow

gdi32

CreateRoundRectRgn
SetGraphicsMode
SetWorldTransform
SetMapMode
SetBkColor
GetNearestPaletteIndex
SetSystemPaletteUse
ResizePalette
SetPaletteEntries
StretchDIBits
CreateDCW
GetDIBColorTable
GetPaletteEntries
CreateHalftonePalette
SetDIBColorTable
SetStretchBltMode
StretchBlt
GdiFlush
GetStockObject
SelectPalette
RealizePalette
CreateDIBitmap
GetSystemPaletteEntries
GetDIBits
CreatePalette
GetWindowExtEx
GetViewportExtEx
CreateBitmap
LPtoDP
GetMapMode
DPtoLP
GetBkColor
Escape
CreateHatchBrush
CreateRectRgn
CreateFontW
FrameRgn
SetDIBitsToDevice
ExtCreateRegion
CreateICW
PtInRegion
CreatePolygonRgn
CombineRgn
Rectangle
TextOutW
RectVisible
PtVisible
PatBlt
GetObjectW
GetPixel
SetPixel
CreateDIBSection
SelectObject
BitBlt
DeleteObject
DeleteDC
Ellipse
ExtTextOutW
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
CreateSolidBrush
CreatePen
GetBkMode
GetDeviceCaps

advapi32

RegCloseKey
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
ShellExecuteExW
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteW

comctl32

ImageList_Replace
_TrackMouseEvent
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Draw
ImageList_Remove
FlatSB_EnableScrollBar
InitializeFlatSB
ord17
ImageList_GetIconSize
ImageList_SetImageCount

ole32

StringFromGUID2
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize

olepro32

ord251

oleaut32

SetErrorInfo
GetErrorInfo
VariantChangeType
CreateErrorInfo
VariantClear
SysFreeString
SysAllocString
VariantInit

shlwapi

SHSetValueW
PathRemoveFileSpecW
PathFindFileNameW
PathRemoveExtensionW
PathFileExistsW
PathUnquoteSpacesW
PathRemoveArgsW
SHGetValueW

avifil32

AVIStreamLength
AVIStreamSampleToTime
AVIFileInit
AVIFileOpenW
AVIFileRelease
AVIFileGetStream
AVIStreamRelease
AVIFileExit

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

wininet

HttpOpenRequestW
InternetReadFile
InternetGetConnectedState
InternetCrackUrlW
InternetConnectW
InternetCloseHandle
HttpSendRequestW
InternetOpenW
InternetOpenUrlW
HttpQueryInfoW

winmm

timeGetTime
PlaySoundW

setupapi

SetupIterateCabinetW

netapi32

Netbios

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_FCxIOFile@@QAEXXZ
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPBG0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PaiPai/PaiPai_LiveUpdate.exe
.exe windows:4 windows x86 arch:x86

36081022dd5f5cacdd05fc009892324b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
TerminateProcess
GetACP
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
GetLocalTime
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetSystemTime
GetProfileStringA
GetTimeZoneInformation
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
ExitThread
CreateThread
RtlUnwind
GetTickCount
GetOEMCP
GetCPInfo
WritePrivateProfileStringA
GetProcessVersion
GlobalFlags
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FormatMessageA
LocalFree
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
SuspendThread
GetCurrentThreadId
SetThreadPriority
InterlockedDecrement
InterlockedIncrement
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
lstrcmpiA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetLastError
SetEvent
ResetEvent
FindResourceA
LoadResource
SizeofResource
LockResource
GlobalAlloc
ResumeThread
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
CloseHandle
CreateEventA
lstrcpynA
GetPrivateProfileStringA
GetModuleFileNameA
GetPrivateProfileSectionNamesA
OutputDebugStringA
lstrlenA
CreateProcessA
GetLastError
WaitForSingleObject

user32

RegisterClipboardFormatA
PostThreadMessageA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetLastActivePopup
MessageBoxA
SetCursor
PostQuitMessage
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
SetFocus
IsWindowEnabled
SetWindowPos
MoveWindow
SetWindowLongA
InflateRect
SetWindowTextA
GetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
PostMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetWindowTextLengthA
GetWindowTextA
CharUpperA
wsprintfA
CopyRect
GetSysColor
FillRect
InvalidateRect
GetDC
ReleaseDC
SetRect
EnableWindow
DestroyMenu
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
IsWindowVisible
LoadImageA
ShowWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SetTimer
LoadIconA
SendMessageA
SetDlgItemTextA
CharNextA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
LoadStringA
UpdateWindow
MapWindowPoints
AdjustWindowRectEx
RegisterClassA
GetTopWindow
IsChild
GetDlgCtrlID
GetCapture
WinHelpA
GetMessageA
GetClassInfoA

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
OffsetViewportOrgEx
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetObjectA
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
GetStockObject
RestoreDC
SaveDC
CreateBitmap
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
CreateDIBitmap
GetTextExtentPointA
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord251
ord253

oleaut32

VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen

wininet

HttpQueryInfoA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile

shlwapi

PathRemoveFileSpecA

Sections

.text
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PaiPai/Skins/Blue/Skin.ini
PaiPai/Skins/Blue/Thumbs.db
PaiPai/Skins/Blue/border_bottom.png
.png
PaiPai/Skins/Blue/border_bottom_left.png
.png
PaiPai/Skins/Blue/border_bottom_right.png
.png
PaiPai/Skins/Blue/border_effects_bg.png
.png
PaiPai/Skins/Blue/border_fengexian_bg.png
.png
PaiPai/Skins/Blue/border_head.png
.png
PaiPai/Skins/Blue/border_left.png
.png
PaiPai/Skins/Blue/border_right.png
.png
PaiPai/Skins/Blue/border_rightviewbk_bg.png
.png
PaiPai/Skins/Blue/border_tail.png
.png
PaiPai/Skins/Blue/border_titlelefttop.png
.png
PaiPai/Skins/Blue/border_top1.png
.png
PaiPai/Skins/Blue/border_top2.png
.png
PaiPai/Skins/Blue/border_top3.png
.png
PaiPai/Skins/Blue/border_top_left.png
.png
PaiPai/Skins/Blue/border_top_right.png
.png
PaiPai/Skins/Blue/border_topspe.png
.png
PaiPai/Skins/Blue/btn_close_down.png
.png
PaiPai/Skins/Blue/btn_close_hover.png
.png
PaiPai/Skins/Blue/btn_close_normal.png
.png
PaiPai/Skins/Blue/btn_maximize_down.png
.png
PaiPai/Skins/Blue/btn_maximize_hover.png
.png
PaiPai/Skins/Blue/btn_maximize_normal.png
.png
PaiPai/Skins/Blue/btn_minimize_down.png
.png
PaiPai/Skins/Blue/btn_minimize_hover.png
.png
PaiPai/Skins/Blue/btn_minimize_normal.png
.png
PaiPai/Skins/Blue/btn_restore_down.png
.png
PaiPai/Skins/Blue/btn_restore_hover.png
.png
PaiPai/Skins/Blue/btn_restore_normal.png
.png
PaiPai/Skins/Blue/menu_btn_top_help_down.png
.png
PaiPai/Skins/Blue/menu_btn_top_help_hover.png
.png
PaiPai/Skins/Blue/menu_btn_top_help_normal.png
.png
PaiPai/Skins/Blue/menu_top_adjust_down.png
.png
PaiPai/Skins/Blue/menu_top_adjust_hover.png
.png
PaiPai/Skins/Blue/menu_top_adjust_normal.png
.png
PaiPai/Skins/Blue/menu_top_advice_down.png
.png
PaiPai/Skins/Blue/menu_top_advice_hover.png
.png
PaiPai/Skins/Blue/menu_top_advice_normal.png
.png
PaiPai/Skins/Blue/menu_top_setting_down.png
.png
PaiPai/Skins/Blue/menu_top_setting_hover.png
.png
PaiPai/Skins/Blue/menu_top_setting_normal.png
.png
PaiPai/Sound/1.wav
PaiPai/Sound/2.wav
PaiPai/Sound/3.wav
PaiPai/Sound/luxiang.WAV
PaiPai/Sound/paizhao.wav
PaiPai/Web/Sucai/Thumbs.db
PaiPai/Web/Sucai/icon_01.gif
.gif
PaiPai/Web/Sucai/icon_02.gif
.gif
PaiPai/Web/Sucai/local_01.html
.html
PaiPai/Web/Sucai/local_02.html
.html
PaiPai/Web/Sucai/pic_face_01.jpg
.jpg
PaiPai/Web/Welcome/images/bg_02.jpg
.jpg
PaiPai/Web/Welcome/images/bg_caes.png
.png
PaiPai/Web/Welcome/images/btn.gif
.gif
PaiPai/Web/Welcome/images/btn_close.jpg
.jpg
PaiPai/Web/Welcome/images/fun_01.gif
.gif
PaiPai/Web/Welcome/images/fun_02.gif
.gif
PaiPai/Web/Welcome/images/fun_03.gif
.gif
PaiPai/Web/Welcome/images/logo_kankan.gif
.gif
PaiPai/Web/Welcome/images/logo_paipai.gif
.gif
PaiPai/Web/Welcome/images/logo_xiuxiu.gif
.gif
PaiPai/Web/Welcome/images/pic_01.jpg
.jpg
PaiPai/Web/Welcome/images/pic_cl.gif
.gif
PaiPai/Web/Welcome/images/pic_cr.gif
.gif
PaiPai/Web/Welcome/images/showcase_01.jpg
.jpg
PaiPai/Web/Welcome/images/showcase_02.jpg
.jpg
PaiPai/Web/Welcome/images/showcase_03.gif
.gif
PaiPai/Web/Welcome/index.html
.html
PaiPai/divxdec.ax
.dll regsvr32 windows:4 windows x86 arch:x86

5c7c5ae3768c60930b4ff63aa3912e80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeEndPeriod
timeBeginPeriod
timeGetDevCaps
timeGetTime

kernel32

GetTickCount
GetLastError
MultiByteToWideChar
lstrlenA
GetProcessAffinityMask
ReadFile
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
WriteConsoleA
GetLocaleInfoA
CreateFileA
FlushFileBuffers
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStartupInfoA
GetFileType
GetModuleHandleA
DisableThreadLibraryCalls
VirtualAlloc
GetCurrentThreadId
GetCurrentProcess
VirtualFree
WaitForMultipleObjects
ResetEvent
SetEvent
InterlockedDecrement
InterlockedIncrement
VirtualQuery
SystemTimeToFileTime
LoadLibraryW
GetCurrentProcessId
CreateEventA
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GetVersionExA
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
CreateThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetExitCodeThread
SetProcessAffinityMask
GetConsoleOutputCP
SetHandleCount
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
HeapCreate
HeapDestroy
ExitProcess
GetProcessHeap
GetCommandLineA
HeapReAlloc
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
HeapFree
RtlUnwind

user32

ShowWindow
SetDlgItemTextA
GetDlgItem
SetCursor
LoadCursorA
SetClassLongA
GetDesktopWindow
LoadStringW
LoadStringA
MoveWindow
CreateDialogParamA
DestroyWindow
InvalidateRect
SetWindowLongA
DefWindowProcA
GetWindowRect
GetWindowLongA

gdi32

SetTextAlign
SetTextColor
TextOutA

advapi32

RegCreateKeyA
RegSetValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PaiPai/dpl100.dll
.dll windows:4 windows x86 arch:x86

80c9d30cd66f30fa5870632339097c59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

advapi32

RegQueryInfoKeyW
RegEnumKeyW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW

msvcp80

?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXAAV12@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr80

memcpy
strncpy
toupper
strncmp
??_V@YAXPAX@Z
memset
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
__RTDynamicCast
_time64
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
memmove_s
__CxxFrameHandler3

Exports

Exports

divXLicenseInit
divXLicenseRelease
getLicenseState
getRemainingTrialLength
isValidSerialNumber
registerGUIDSerialNumber
registerSerialNumber
wrapper_isValidSerialNumber

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PaiPai/lame.ax
.dll regsvr32 windows:4 windows x86 arch:x86

ab4ebe3a60efdebe1a2684e0c778c352

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

fprintf
exit
_purecall
_ftol
memmove
calloc
free
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
ceil
_snprintf
vfprintf
fflush
_adj_fpatan
malloc
floor
_adj_fdivr_m64
fscanf
abort
_adj_fdiv_m32
fclose
_CIpow
_adj_fdiv_r
_adj_fdiv_m32i
_adj_fdivr_m32
??2@YAPAXI@Z
qsort
_iob

kernel32

EnterCriticalSection
MulDiv
lstrcpyA
lstrlenA
GetVersionExW
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
FreeLibrary
lstrcmpW
lstrcpynW
lstrlenW
MultiByteToWideChar
GetLastError
GetModuleFileNameA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection

advapi32

RegCreateKeyA
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey

user32

SendDlgItemMessageA
wsprintfA
IsDlgButtonChecked
SendMessageA
CheckDlgButton
CheckRadioButton
GetDlgItem
SetDlgItemTextA
GetDesktopWindow
GetWindowRect
LoadStringW
wsprintfW
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
EnableWindow

comctl32

ord17

ole32

CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PaiPai/libWeiBoU.dll
.dll windows:5 windows x86 arch:x86

92ea3fc5784f10c895c2c99868c37b71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Sourcecode\sina\client\weibo\develop\trunk\src\WeiBo SDK\DLL ReleaseMT\libWeiBoU.pdb

Imports

wldap32

ord41
ord27
ord301
ord33
ord200
ord79
ord35
ord32
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord46

ws2_32

htons
bind
getsockname
getsockopt
ioctlsocket
closesocket
send
recv
WSAGetLastError
WSAStartup
WSACleanup
setsockopt
connect
socket
gethostbyname
WSASetLastError
sendto
recvfrom
accept
listen
__WSAFDIsSet
select
gethostname
shutdown
ntohs

kernel32

GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
CreateFileA
GetCurrentDirectoryA
GetFullPathNameA
HeapSize
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetModuleHandleA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
GetStartupInfoA
SetHandleCount
GetModuleFileNameA
WriteFile
LCMapStringW
LCMapStringA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
WideCharToMultiByte
MultiByteToWideChar
AreFileApisANSI
GetCurrentThreadId
GetLastError
GetVersion
GetFileType
GetStdHandle
CreateThread
CloseHandle
WaitForSingleObject
DeleteCriticalSection
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesW
CreateDirectoryW
lstrlenW
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
FlushConsoleInputBuffer
SleepEx
SetLastError
FormatMessageA
DuplicateHandle
GetCurrentProcess
ReleaseMutex
SetEvent
WaitForMultipleObjects
CreateEventA
CreateMutexA
GetExitCodeThread
ReadFile
PeekNamedPipe
ExpandEnvironmentStringsA
FindFirstFileA
FindClose
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetProcessHeap
GetLocaleInfoA
CreateFileW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
TerminateThread
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
GetModuleHandleW
ExitProcess
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
RaiseException
TerminateProcess
IsDebuggerPresent
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
SetConsoleCtrlHandler
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
ExitThread
GetFileInformationByHandle
SetFilePointer
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc

user32

MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW

gdi32

CreateDCA
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
DeleteDC

advapi32

RegisterEventSourceA
ReportEventA
DeregisterEventSource

Exports

Exports

loWeibo_get_url
loWeibo_oauth_copy
loWeibo_request_create
loWeibo_request_destroy
loWeibo_request_setopt
loWeibo_request_start
loWeibo_request_stop
loWeibo_request_wait

Sections

.text
Size: 718KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PaiPaiSucai/Biankuang/Jingtai/Default/Thumbs.db
PaiPaiSucai/Biankuang/Jingtai/Default/mtsc30146.png
.png
PaiPaiSucai/Biankuang/Jingtai/Default/mtsc30148.png
.png
PaiPaiSucai/Biankuang/Jingtai/Default/mtsc30149.png
.png

Sharing

General

Malware Config

Signatures

Files

1c042238f43557c055fca8642de8a074

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 296KB

.ndata Size: - Virtual size: 360KB

.rsrc Size: 88KB - Virtual size: 88KB

0ece15e7d9bb35972aec701f46192460

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 503B

.data Size: 512B - Virtual size: 128B

.reloc Size: 512B - Virtual size: 220B

0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 172B

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 92B

.reloc Size: 512B - Virtual size: 446B

5b9be84907034b8f0152e51177ceafc3

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 296KB

.ndata
Size: - Virtual size: 360KB

.rsrc
Size: 88KB - Virtual size: 88KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 503B

.data
Size: 512B - Virtual size: 128B

.reloc
Size: 512B - Virtual size: 220B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 172B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 92B

.reloc
Size: 512B - Virtual size: 446B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 276B

.reloc
Size: 512B - Virtual size: 256B

.text
Size: 420KB - Virtual size: 418KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 160KB - Virtual size: 221KB

.data1
Size: 4KB - Virtual size: 164B

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 20KB - Virtual size: 19KB

.text
Size: 670KB - Virtual size: 2.7MB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 9KB