Manalyze report for 3e955916c82a382efdac7406fa7ba257ab58edb4c51e21114c2ddc1a86b3354e

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2013-Dec-20 03:21:00
Detected languages	Chinese - PRC English - United States
Debug artifacts	f:\ChinaQiPai2\Client\ClientBin\BaoHuang.pdb

Plugin Output

Info	Matching compiler(s):	`MASM/TASM - sig2(h)` `MASM/TASM - sig1(h)`
Malicious	The file headers were tampered with.	`Section .text is both writable and executable.` `The RICH header checksum is invalid.`
Malicious	VirusTotal score: 48/52 (Scanned on 2014-05-01 23:01:08)	`AVG: Win32/Alman` `Ad-Aware: Win32.Almanahe.D` `Agnitum: Win32.Alman.B` `AhnLab-V3: Win32/Alman.C` `AntiVir: W32/Almanahe.B` `Antiy-AVL: Virus/Win32.Alman.b` `Avast: Win32:Alman` `Baidu-International: Virus.Win32.Alman.$NAB` `BitDefender: Win32.Almanahe.D` `Bkav: W32.AcLuC.PE` `CAT-QuickHeal: W32.Almanahe.B` `CMC: Virus.Win32.Almanahe.2!O` `ClamAV: W32.Alman-2` `Commtouch: W32/Alman.C` `Comodo: Virus.Win32.Alman.A` `DrWeb: Win32.Alman.1` `ESET-NOD32: Win32/Alman.NAB` `Emsisoft: Win32.Almanahe.D (B)` `F-Prot: W32/Alman.C` `F-Secure: Win32.Almanahe.D` `Fortinet: W32/Alman.DB` `GData: Win32.Almanahe.D` `Ikarus: Virus.Win32.Alman` `Jiangmin: Win32/Almana.c` `K7AntiVirus: Virus ( 00001b6e1 )` `K7GW: Virus ( 00001b6e1 )` `Kaspersky: Virus.Win32.Alman.b` `Kingsoft: Worm.DLan.c.79872` `McAfee: W32/Almanahe.c` `McAfee-GW-Edition: W32/Almanahe.c` `MicroWorld-eScan: Win32.Almanahe.D` `Microsoft: Virus:Win32/Almanahe.B` `NANO-Antivirus: Virus.Win32.Alman.xyevp` `Norman: Alman.B` `Panda: W32/Almanahe.C` `Qihoo-360: Virus.Win32.Alman.C` `Rising: PE:Worm.Magistr.g!497223` `Sophos: W32/Alman-C` `Symantec: W32.Almanahe.B!inf` `TheHacker: W32/Almanahe.C.gen` `TotalDefense: Win32/Almanahe.F!x386` `TrendMicro: PE_CORELINK.C-1` `TrendMicro-HouseCall: PE_CORELINK.C-1` `VBA32: Virus.Win32.Alman.B` `VIPRE: Virus.Win32.Alman.b (v)` `ViRobot: Win32.Alman.B` `Zillya: Virus.Alman.Win32.2` `nProtect: Virus/W32.Alman.B`

Hashes

MD5	`04d0f62d46a439554d1654873d79dfd0`
SHA1	`5287119d2bcdeebfbf2a0a4058c9cf8eff46dd65`
SHA256	`3e955916c82a382efdac7406fa7ba257ab58edb4c51e21114c2ddc1a86b3354e`
SHA3	`c5564f600f8855a207caed3666e77a3e02b93f34ca1f6d34c732f21e5a1e2e15`
SSDeep	`6144:rtBdzUnRCHXpT7fJH16TLNHXB2zQOfrR6SsQLH5Ady:BvzUnR8XpF16TLlXszR6SsPdy`
Imports Hash	`754516e968499d6184204599c94b1019`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0x3f3`
e_cs	`0xd9`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xf0`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`5`
TimeDateStamp	2013-Dec-20 03:21:00
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`9.0`
SizeOfCode	`0x3ba00`
SizeOfInitializedData	`0x1a400`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00001000 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x3d000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`5.0`
ImageVersion	`0.0`
SubsystemVersion	`5.0`
Win32VersionValue	`0`
SizeOfImage	`0xf3000`
SizeOfHeaders	`0x400`
Checksum	`0x69832`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`a6697ac81054061f7d444bac8f7362ca`
SHA1	`0a903cfbf3059a444a677bcf786e4b6f0f1bdd4d`
SHA256	`3f26b457be3ad235feb8c9205520e977f23852f0cb92d9d922a5d2d283c2d797`
SHA3	`1e7659f494d9a70ae2fb5ddd79de2693171a72f8b72dd5a5ae62351103d50a01`
VirtualSize	`0x3b97a`
VirtualAddress	`0x1000`
SizeOfRawData	`0x3ba00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`6.03898`

.rdata

MD5	`ca3e31d8b80418690937d867d0342f2e`
SHA1	`8ec105389aa60f2d97af25ba6f5774884aaba91b`
SHA256	`fe17615a48dac62448760d162c19c9c24889a62d058410b91ea59c7446386f05`
SHA3	`72e42a6d8b08effd13fa618a23e506457edc2e15afe3c3e15e575aa8910db98d`
VirtualSize	`0xfdce`
VirtualAddress	`0x3d000`
SizeOfRawData	`0xfe00`
PointerToRawData	`0x3be00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.67335`

.data

MD5	`1b65d780dc462b8948bfc539109b9dc9`
SHA1	`170fe7787706943be7679515a625e7216a1ba9cd`
SHA256	`f169f279db3dbf0ad983e460f18fa29f3101635c1a6897c05b516658ea3ea62b`
SHA3	`42ce904c7c69b51ac9fb23a9883709d67854049a6c50c89117a965e31fb6c642`
VirtualSize	`0x92680`
VirtualAddress	`0x4d000`
SizeOfRawData	`0x1800`
PointerToRawData	`0x4bc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.9718`

.rsrc

MD5	`ed3fb8d827661aabec9e517be2cf262f`
SHA1	`08528ea3aaff015d57f08cafd2a67d7f7922e8bd`
SHA256	`8d82b5ff11b01730d4ca83f4a23eb7ad5c54fe056b62edac6ecc5bf6f8734888`
SHA3	`c6c69d42a766853335500bdde1729b1c887e64ae94db665bb203d14e8c54833a`
VirtualSize	`0x4850`
VirtualAddress	`0xe0000`
SizeOfRawData	`0x4a00`
PointerToRawData	`0x4d400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.51444`

.reloc

MD5	`02cd5ed57796e00be9a300de6a96d7b7`
SHA1	`a80fbe597deff59810cbf298335a6409b44278ac`
SHA256	`222510b19d121f939ab9e7059f01151f159f3a6ce3ec9d399b249f82f079aada`
SHA3	`13f27c87cdcc9e1a2d119ee95de339b5ff39764865ad79924bb091ce8ab054b0`
VirtualSize	`0xd902`
VirtualAddress	`0xe5000`
SizeOfRawData	`0xda00`
PointerToRawData	`0x51e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`7.50767`

Imports

GUI.dll	`?SetInitPosAlign@hgeItemBase@@QAEXMMIHH@Z` `?ReSetColor@hgeTextPanel@@QAEXXZ` `?SetFourColor@hgeTextPanel@@QAEXHK@Z` `?SetUseRectangleSelect@hgeItemRootContainer@@QAEXH@Z` `?SetTipTextColor@hgeItemRootContainer@@QAEXK@Z` `?SetTipBKSprite@hgeItemRootContainer@@QAEXPAVGESprite2D@@@Z` `?LoadTipConfigInfo@hgeItemRootContainer@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?GetIAvaterLoader@WJS_Avater@@QAEPAUIAvatarLoader@@XZ` `?SetTestRenderRS@hgeItemRootContainer@@QAEXP6A_NABVGERect@@@Z@Z` `?SetRectangleSelectColor@hgeItemRootContainer@@QAEXK@Z` `??3hgeItemContainer@@SAXPAX@Z` `??2hgeItemContainer@@SAPAXI@Z` `?GetParent@hgeItemBase@@QAEPAVhgeItemContainer@@XZ` `?GetPosition@hgeItemBase@@QAE?AVhgePoint@@XZ` `?GetSize@hgeItemBase@@QAE?AVhgePoint@@XZ` `?GetIRootContainer@IRootContainer@@QAEPAV1@XZ` `??HhgePoint@@QBE?AV0@ABV0@@Z` `??0hgePoint@@QAE@XZ` `??0hgePoint@@QAE@MM@Z` `?GetSelfFontEx@hgeItemBase@@UAEPAVGEFontEx@@XZ` `?FoundItemByDataNo@hgeItemBase@@UAEPAV1@HW4ehgeItemType@@@Z` `?ChangePosSizeByWndSize@hgeItemBase@@UAEXHH@Z` `?ResetPosWhenSizeChange@hgeItemBase@@UAEXXZ` `?FindControlWithName@hgeItemBase@@UAEPAV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV1@H@Z` `?ColumnWidthChange@hgeItemBase@@UAEXHM@Z` `?MoveColumn@hgeItemBase@@UAEXHABVhgePoint@@H@Z` `?SetSelfTipInfo_Base@hgeItemBase@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?LogAllInfo@hgeItemBase@@UAEXPAVFileLogger@@_N@Z` `?GetMenuInfo@hgeItemBase@@UAEXAAUstStartMenu@@@Z` `?OnLoseRFoucs@hgeItemBase@@UAEXXZ` `?OnRButtonDoubleClick_EditMode@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnLButtonDoubleClick_EditMode@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnRButtonDoubleClick@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnLButtonDoubleClick@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnRButtonUp_EditMode@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnRButtonDown_EditMode@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnRButtonUp@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnRButtonDown@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnWheelMove_EditMode@hgeItemBase@@UAEXIABH@Z` `?OnMouseMove_EditMode@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnLButtonUp_EditMode@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnLButtonDown_EditMode@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnMouseMove@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnLButtonUp@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnLButtonDown@hgeItemBase@@UAEXIABVhgePoint@@@Z` `?OnTimer@hgeItemBase@@UAEXK@Z` `?Update@hgeItemBase@@UAEXK@Z` `?HitTest_EditMode@hgeItemBase@@UAEPAV1@ABVhgePoint@@0I@Z` `?HitTest@hgeItemBase@@UAEPAV1@ABVhgePoint@@0I@Z` `?GetGlobalRect@hgeItemBase@@UAE?AVGERect@@XZ` `?OnParentSizeChange@hgeItemBase@@UAEXABVhgePoint@@@Z` `?MovePos@hgeItemBase@@UAEXABVhgePoint@@@Z` `?SetState@hgeItemBase@@UAEHW4EItemState@@@Z` `?SetShow@hgeItemBase@@UAEXH@Z` `?SetInitSize@hgeItemBase@@UAEXABVhgePoint@@HH@Z` `?SetSize@hgeItemBase@@UAEXABVhgePoint@@@Z` `?ChangeNamePipe@hgeItemBase@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?SetPosSizeScriptContext@hgeItemBase@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N1@Z` `?SetScriptContext@hgeItemBase@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?HideSpace@hgeItemBase@@UAEXXZ` `?SetShowSpace@hgeItemBase@@UAEXH@Z` `?OnLButtonUp@hgeItemButton@@UAEXIABVhgePoint@@@Z` `?Render@hgeItemButton@@UAEXPAVIGERenderScreen@@ABVhgePoint@@_NABVGERect@@@Z` `??1hgeItemButton@@UAE@XZ` `??0hgeItemButton@@QAE@PAVIRootContainer@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KABVhgePoint@@2HHHH@Z` `?SetUseEditMode@hgeItemContainer@@UAEX_N@Z` `?FoundItemByDataNo@hgeItemContainer@@UAEPAVhgeItemBase@@HW4ehgeItemType@@@Z` `?ChangePosSizeByWndSize@hgeItemContainer@@UAEXHH@Z` `?GetFirstItemByMapCopyId@hgeItemContainer@@UAEPAVhgeItemBase@@I@Z` `?GetFirstItemByCopyId@hgeItemContainer@@UAEPAVhgeItemBase@@I@Z` `?RemoveChildItemByCopyId@hgeItemContainer@@UAEXI@Z` `?SetPosByCopyId@hgeItemContainer@@UAEXPAVhgeItemBase@@I@Z` `?HideSpace@hgeItemContainer@@UAEXXZ` `?SetShowSpace@hgeItemContainer@@UAEXH@Z` `?ResetPosWhenSizeChange@hgeItemContainer@@UAEXXZ` `?GetGroupSelectIndex_Single@hgeItemContainer@@UAEHH@Z` `?SetGroupSelectIndex_Single@hgeItemContainer@@UAEXHH@Z` `?GroupSelectChange@hgeItemContainer@@UAEXHPAVhgeItemBase@@_N@Z` `?SetEditLayer@hgeItemContainer@@UAEX_N@Z` `?DragAddProcess@hgeItemContainer@@UAEXXZ` `?ColumnWidthChange@hgeItemContainer@@UAEXHM@Z` `?MoveColumn@hgeItemContainer@@UAEXHABVhgePoint@@H@Z` `?FindControlWithName@hgeItemContainer@@UAEPAVhgeItemBase@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV2@H@Z` `?OnParentSizeChange@hgeItemContainer@@UAEXABVhgePoint@@@Z` `?SubItemChangeZOrder@hgeItemContainer@@UAEXPAVhgeItemBase@@HH@Z` `?LogAllInfo@hgeItemContainer@@UAEXPAVFileLogger@@_N@Z` `?SetIsCanMoveItemTest@hgeItemContainer@@UAEXH@Z` `?SetSize@hgeItemContainer@@UAEXABVhgePoint@@@Z` `?Update@hgeItemContainer@@UAEXK@Z` `?PostHitTest_EditMode@hgeItemContainer@@UAEPAVhgeItemBase@@ABVhgePoint@@0I@Z` `?HitTest_EditMode@hgeItemContainer@@UAEPAVhgeItemBase@@ABVhgePoint@@0I@Z` `?PostHitTest@hgeItemContainer@@UAEPAVhgeItemBase@@ABVhgePoint@@0I@Z` `?HitTest@hgeItemContainer@@UAEPAVhgeItemBase@@ABVhgePoint@@0I@Z` `?RenderV5@hgeItemContainer@@UAEXPAVIGERenderScreen@@ABVhgePoint@@ABUstStateRenderPar@@_NABVGERect@@@Z` `?RenderV2@hgeItemContainer@@UAEXPAVIGERenderScreen@@ABVhgePoint@@_NABVGERect@@HH2@Z` `?Render_EditLayer@hgeItemContainer@@UAEXPAVIGERenderScreen@@ABVhgePoint@@_NABVGERect@@HH2@Z` `?Render@hgeItemContainer@@UAEXPAVIGERenderScreen@@ABVhgePoint@@_NABVGERect@@@Z` `?MouseLeaveWnd@hgeItemContainer@@UAEXXZ` `?SetShow@hgeItemContainer@@UAEXH@Z` `?RemoveAll@hgeItemContainer@@UAEXXZ` `?RemoveItemByIndex@hgeItemContainer@@UAEHHH@Z` `?RemoveItem@hgeItemContainer@@UAEHPAVhgeItemBase@@@Z` `?AddItem@hgeItemContainer@@UAEXPAVhgeItemBase@@_N@Z` `?SetAllContainerIsMoveItem@hgeItemContainer@@UAEXHH@Z` `?ChangeNamePipe@hgeItemContainer@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `??1hgeItemContainer@@UAE@XZ` `??0hgeItemContainer@@QAE@PAVIRootContainer@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `??3hgeItemButton@@SAXPAX@Z` `??2hgeItemButton@@SAPAXI@Z` `?IsEditLayer@hgeItemContainer@@UAE_NXZ` `?FirstStaticTextCreateNotifyParent@hgeItemContainer@@UAEXXZ` `?OnlyChangeMapTotalWidth@hgeItemContainer@@UAEXM@Z` `?OnWheelMove@hgeItemContainer@@UAEXIABH@Z` `?SetUseEditMode@hgeItemBase@@UAEX_N@Z` `?ScriptChangeSpan@hgeItemBase@@UAEXH@Z` `?ScriptChangeTex@hgeItemBase@@UAEXK@Z` `?IsGroupSelect@hgeItemBase@@UAE_NH@Z` `?OnGroupSelect@hgeItemBase@@UAEXH@Z` `?OnGroupCancelSelect@hgeItemBase@@UAEXH@Z` `?RecvEvent_MouseOnOut@hgeItemBase@@UAEXH@Z` `?GetCurAlpha@hgeItemBase@@UAEHXZ` `?SetCurAlpha@hgeItemBase@@UAEXH@Z` `?IsCommonLayer@hgeItemBase@@UAE_NXZ` `?SetEditLayer@hgeItemBase@@UAEX_N@Z` `?IsEditLayer@hgeItemBase@@UAE_NXZ` `?DragAddProcess@hgeItemBase@@UAEXXZ` `?RenderV5@hgeItemBase@@UAEXPAVIGERenderScreen@@ABVhgePoint@@ABUstStateRenderPar@@_NABVGERect@@@Z` `?LoseInput@hgeItemBase@@UAEXXZ` `?opFullSelect@hgeItemBase@@UAEXXZ` `?opPaste@hgeItemBase@@UAEXXZ` `?opCut@hgeItemBase@@UAEXXZ` `?opCopy@hgeItemBase@@UAEXXZ` `?OnCommonCharMsg@hgeItemBase@@UAEXPBD@Z` `?KeyClick@hgeItemBase@@UAEXHH@Z` `?OnImeCharMsg@hgeItemBase@@UAEXPBD@Z` `?CompositionState@hgeItemBase@@UAEX_N@Z` `?AsTipShow@hgeItemBase@@UAEXXZ` `?SetTip@hgeItemBase@@QAEXHW4eItemTipType@@@Z` `?MouseLeaveWnd@hgeItemBase@@UAEXXZ` `?OnWheelMove@hgeItemBase@@UAEXIABH@Z` `?SetDoHitTest@hgeItemBase@@QAEXH@Z` `?SetIsCanMoveItemTest@hgeItemBase@@UAEXH@Z` `?SetAllContainerIsMoveItem@hgeItemBase@@UAEXHH@Z` `?GetPosSizeScriptContext@hgeItemBase@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ` `?GetScriptContext@hgeItemBase@@UAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ` `?GetEventInputPar@hgeItemBase@@UAEPAXXZ` `?GetEventOutPar@hgeItemBase@@UAEPAXXZ` `?GetEventItemPar@hgeItemBase@@UAEPAV1@XZ` `?AddEnableEventFlag@hgeItemBase@@QAEXI@Z` `?SetNumValue@GameGUI_Num@@QAEXH@Z` `?StartTimeCount@GameGUI_Clock@@QAEXH@Z` `?StartJianBian@hgeItemStaticImage_Sprite@@QAEXK@Z` `?ChangeSprite@hgeItemStaticImage_Sprite@@QAEXPAVGESprite2D@@_N@Z` `?BindTrackMove_PingHua@hgeTrackPointManager@@QAE_NPAVhgeItemBase@@HH_N111M@Z` `?RectSelectTest@hgeGroupSubImage@@QAE_NABVhgePoint@@0PAVhgeItemBase@@_N@Z` `?SetCoverCards@hgeGroupSubImage@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@K@Z` `?SetValues@hgeGroupSubImage@@QAEXPBHH@Z` `??0IGetGifSprite@@QAE@XZ` `?GetLoopZouMaDeng@WJS_HTMLLineContainer@@QAE_NXZ` `?GetIAvater@WJS_Avater@@QAEPAUIAvatar@@XZ` `?SetIGetGifSprite@WJS_ChatContainer@@QAEXPAVIGetGifSprite@@@Z` `?SetText@hgeItemStaticText@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?SetKeepTime@hgeItemStaticImage_Sprite@@QAEXH@Z` `?SetJianBianValue@hgeItemStaticImage_Sprite@@QAEXH@Z` `?GetValue@hgeItemSubImage@@QAEHXZ` `?GetTimeValue@GameGUI_Clock@@QAEHXZ` `?SetEmptyHitTest@hgeItemContainer@@QAEX_N@Z` `?SetUseBaseRClickEvent@hgeItemBase@@QAEX_N@Z` `?SetIsShowInTop@hgeItemBase@@QAEX_N0@Z` `?GetLayoutAlign@hgeItemBase@@QAEIXZ` `?GetInitPosY@hgeItemBase@@QAEMXZ` `?GetInitPosX@hgeItemBase@@QAEMXZ` `?IsShow@hgeItemBase@@QAEHXZ` `?BindItemNum@GameGUI_Clock@@QAEXPAVGameGUI_Num@@@Z` `?FlushCurSelect@hgeDiyCombox@@QAEXXZ` `?SetBtnCaptionhColor@hgeItemTableControl@@QAEXKKKK@Z` `?SetUseSubItemAfterRender@hgeGroupSubImage@@QAEX_N@Z` `?SetSelectIndex@hgeItemCheckGroup_Sprite@@QAEXH@Z` `?SetMaxElementNum@WJS_ChatContainer@@QAEXH@Z` `?SetSelect@hgeDiyCombox@@QAEXH@Z` `?SetEnterLoseInputFocus@hgeEditItem@@QAEX_N@Z` `?SetMinDragSize@hgeItemBase@@QAEXABVhgePoint@@@Z` `?SetDragMargin@hgeItemBase@@QAEXIIII@Z` `?SelectValues@hgeGroupSubImage@@QAEXAAV?$vector@HV?$allocator@H@std@@@std@@@Z` `?GetAllSelectValues@hgeGroupSubImage@@QAE?AV?$vector@HV?$allocator@H@std@@@std@@XZ` `?SetAllSelect@hgeGroupSubImage@@QAEX_N0@Z` `?GetItemType@hgeItemBase@@QAE?AW4ehgeItemType@@XZ` `?GetState@hgeItemBase@@QAE?AW4EItemState@@XZ` `?ChangeSpan@hgeGroupSubImage@@QAEXH_N@Z` `?SetPostionByMouse@hgeItemBase@@QAEXABVhgePoint@@0@Z` `?SetNumSprite@GameGUI_Num@@QAEXPAVGESprite2D@@@Z` `?SetOnlyShowSubMenuList@hgeDiyMenu@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@M@Z` `?GetItemByMenuSubIndex@hgeDiyMenu@@QAEPAVhgeItemBase@@H@Z` `?ClearScreen@WJS_ChatContainer@@QAEXXZ` `?AddChatContext@WJS_ChatContainer@@QAE?AVhgePoint@@ABV?$vector@PAUstUnit@@V?$allocator@PAUstUnit@@@std@@@std@@K_NKK1H@Z` `?GetAllNode@ChatParser@@QAE?AV?$vector@PAUstUnit@@V?$allocator@PAUstUnit@@@std@@@std@@XZ` ?startPaserString_HTML@ChatParser@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@EABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HU?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@std@@@2@@3@ABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@@Z `??1ChatParser@@QAE@XZ` `??0ChatParser@@QAE@XZ` `?StartTimer@WJS_HTMLLineContainer@@QAEXH@Z` `?SetAsZouMaDeng@WJS_HTMLLineContainer@@QAEX_NM0@Z` `?CreateHTMLLineItemList@WJS_HTMLLineContainer@@QAEXMK@Z` `?SetHTMLLineContext@WJS_HTMLLineContainer@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@K_N@Z` `?SetCurSelectIndex@hgeItemTableControl@@QAEXH@Z` `?GetCurSelectIndex@hgeItemTableControl@@QAEHXZ` `?GetZouMaDengOffset@WJS_HTMLLineContainer@@QAEMXZ` `?SetSpaceNo@hgeItemBase@@QAEXH@Z`
WINMM.dll	`timeGetTime`
Layer.dll	`??1CommonLayerControl@@UAE@XZ` `?StartupOneContainer@BaseUILayerControl@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?EndOneContainer@BaseUILayerControl@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z` `?IsCommonLayer@CommonLayerControl@@UAE_NXZ` `?DeleteLayerEvent@CommonLayerControl@@UAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?SetResManager@BaseUILayerControl@@UAEXPAVGEResourceManager@@@Z` `?Restore_AddItemToParent@CommonLayerControl@@UAEXPAVhgeItemBase@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?FoundItemByName@CommonLayerControl@@UAEPAVhgeItemBase@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?FoundControl@CommonLayerControl@@QAEPAVhgeItemBase@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?ImportNode@CommonLayerControl@@QAEHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@0H_N@Z` `?LoadLayoutFile@CommonLayerControl@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z` `?CreateManageItemsAttribute@CommonLayerControl@@QAEXXZ` `??0CommonLayerControl@@QAE@PAVIGERenderScreen@@PAVIRootContainer@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVGEFont@@@Z` `?ProcessAddCreateItem@CommonLayerControl@@UAEXHPAVhgeItemBase@@HH_N@Z` `?AddNodeToTree@CommonLayerControl@@UAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVhgeItemBase@@PAVIMayEditItem@@@Z` `?Get_outputData@BaseUILayerControl@@UAEPAXH@Z`
GameEngine2.dll	`?GetStringWidth@GEFontEx@@QAEMPBD_N@Z` `??0GERect@@QAE@MMMM@Z` `??1GERect@@QAE@XZ` `?Render@GESprite2D@@QAEXPAVIGERenderScreen@@MM_NABVGERect@@@Z` `?GetTexture@GEResourceManager@@QAEIPBD@Z` `?SetGEWndMsgProc@GEMainWnd@@QAEXP6A_NPAV1@IIJ@Z@Z` `?SetGEFrameProc@GEMainWnd@@QAEXP6AXPAV1@0M@Z@Z` `?SetGERenderProc@GEMainWnd@@QAEXP6AXPAV1@0M@Z@Z` `?SetGEWndDestoryProc@GEMainWnd@@QAEXP6AXPAV1@@Z@Z` `?SetGEWndLoseFocusProc@GEMainWnd@@QAEXP6AXPAV1@@Z@Z` `?SetGEWndGainFocusProc@GEMainWnd@@QAEXP6AXPAV1@@Z@Z` `?SetWndSizeChangeCallBack@GEMainWnd@@QAEXP6AXPAV1@HH@Z@Z` `?SetWndMaxAndRestoreCallBack@GEMainWnd@@QAEXP6AXPAV1@H@Z@Z` `?SetGEWndCaptionDClick@GEMainWnd@@QAEXP6A_NPAV1@HH@Z@Z` `?SetGEWndCaptionMove@GEMainWnd@@QAEXP6A_NPAV1@HH@Z@Z` `?GetGERenderScreen@GEMainWnd@@QAEPAVIGERenderScreen@@XZ` `?GetWndType@GEMainWnd@@QAE?AW4eGEWndType@@XZ` `?FullRun@@YAHXZ` `??0GEResourcePacket_CQP@@QAE@XZ` `??1GEResourcePacket_CQP@@UAE@XZ` `?Resource_AttachPack@GEResourcePacket_CQP@@UAE_NPBD0@Z` `?Resource_RemovePack@GEResourcePacket_CQP@@UAEXPBD@Z` `?Resource_RemoveAllPacks@GEResourcePacket_CQP@@UAEXXZ` `?Resource_Load@GEResourcePacket_CQP@@UAEPAXPBDPAK@Z` `?Resource_Free@GEResourcePacket_CQP@@UAEXPAX@Z` `?GetAllChildFile@GEResourcePacket_CQP@@UAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@@Z` `??0GEMainWnd@@QAE@XZ` `??1GEMainWnd@@UAE@XZ` `?CreateMainWnd@GEMainWnd@@QAEPAUHWND__@@AAUstCreateWndInfo@@PAVIGEResourcePacket@@_NH@Z` `?SetLogger@GEMainWnd@@QAEXPAVFileLogger@@@Z` `?AddScript@GEResourceManager@@QAEXPBD_N@Z` `?GetGlobalResManagerPoint@GEResourceManager@@SAPAPAV1@XZ` `?GetGEInput@GEMainWnd@@QAEPAVIGEInput@@XZ` `?SetFPS@GEMainWnd@@QAEXH@Z` `?SetOnwerTitleBarRect@GEMainWnd@@QAEXMMMM@Z` `?SetMarginLenXY@GEMainWnd@@QAEXHH@Z` `?GetSprite@GEResourceManager@@QAEPAVGESprite2D@@PBD@Z`
GameBase.dll	`??0TableGamePlayer_C@@QAE@HPAVFileLogger@@@Z` `??1TableGamePlayer_C@@UAE@XZ` `?ReInit@TableGamePlayer_C@@UAEXXZ` `?OnTimerCallBack_TableGameIns@TableGameIns_C@@SAXHPAX@Z` `?OnTimerCallBack@TableGameIns_C@@UAEXH@Z` `?ClearAllTimer@TableGameIns_C@@UAEXXZ` `??0stPlayerFullInfo@@QAE@XZ` `?GetGradeName@TableGamePlayer_C@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ` `?GetWatcherFullInfo@TableGameIns_C@@QAE_NHAAUstPlayerFullInfo@@@Z` `?GetWatcherWinPercent@TableGameIns_C@@QAEMABUstPlayerFullInfo@@@Z` `?GetWatcherCharm@TableGameIns_C@@QAEHABUstPlayerFullInfo@@@Z` `?GetWatcherEscapePercent@TableGameIns_C@@QAEMABUstPlayerFullInfo@@@Z` `?GetWatcherExperience@TableGameIns_C@@QAEHABUstPlayerFullInfo@@@Z` `?IsMember@TableGameIns_C@@QAE_NXZ` `?GetGrade@TableGameIns_C@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z` `?CreatePlayerListInfo@TableGameIns_C@@QAEH_NH@Z` `?GetFullPathPrePath@TableGameIns_C@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ` `?ShowTopLaBaMsg@TableGameIns_C@@QAEXXZ` `?CheckTableHasSeatPlayer@TableGameIns_C@@QAE_NH@Z` `?GetExperienceGrade@TableGameIns_C@@QAEHH@Z` `?GetWagerMoney@TableGamePlayer_C@@QAE_JXZ` `?GetLeiJiWinLose@TableGamePlayer_C@@QAE_JXZ` `?GetLastRoundWinLose@TableGamePlayer_C@@QAE_JXZ` `?GetWinPercent@TableGamePlayer_C@@QAEMXZ` `?GetEscapePercent@TableGamePlayer_C@@QAEMXZ` `?GetScore@TableGamePlayer_C@@QAE_JXZ` `?GetWinCount@TableGamePlayer_C@@QAEHXZ` `?GetLoseCount@TableGamePlayer_C@@QAEHXZ` `?GetDrawCount@TableGamePlayer_C@@QAEHXZ` `?IsMember@TableGamePlayer_C@@QAE_NXZ` `?IsGM@TableGamePlayer_C@@QAE_NXZ` `?GetNetState@TableGamePlayer_C@@QAEHXZ` `?GetCharm@TableGamePlayer_C@@QAEHXZ` `?GetExperience@TableGamePlayer_C@@QAEHXZ` `?IsTuoGuan@TableGamePlayer_C@@QAEHXZ` `?GetColorByFromType@TableGameIns_C@@UAEKH_N@Z` `?NotifyPlayerGameStartFailed@TableGameIns_C@@UAEXF@Z` `?NotifyPlayerHasPropList@TableGameIns_C@@UAEXABV?$vector@PAUPtPropInfo3@Room2Game@@V?$allocator@PAUPtPropInfo3@Room2Game@@@std@@@std@@@Z` `?NotifyPlayerComposePiece@TableGameIns_C@@UAEXHHFFHH_N@Z` `?FallPiece@TableGameIns_C@@UAEXHFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `??0ITable_1@@QAE@XZ` `??0TableGameIns_C@@QAE@PAVISend@@PAVFileLogger@@H@Z` `??1TableGameIns_C@@UAE@XZ` `?TableChange_Start@TableGameIns_C@@UAEXXZ` `?AddFaceToChatInput@TableGameIns_C@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?ChatSend@TableGameIns_C@@UAEXXZ` `?OnDisplayTypeChanged@TableGameIns_C@@UAEXPAVWJS_Avater@@HHH@Z` `?OnEnableAvatarAndVideoExchange@TableGameIns_C@@UAEXPAVWJS_Avater@@H@Z` `?OnEnableOrDisableSound@TableGameIns_C@@UAEXPAVWJS_Avater@@H@Z` `?OnSoundLevelChanged@TableGameIns_C@@UAEXPAVWJS_Avater@@H@Z` `?OnVideoPopup@TableGameIns_C@@UAEXPAVWJS_Avater@@H@Z` `?OnNotifyOtherUserEnableVideo@TableGameIns_C@@UAEXPAVWJS_Avater@@H@Z` `?GetLocalChair@TableGameIns_C@@QAEHH@Z` `?ProcessVideoBtnEvent@TableGameIns_C@@UAEXHH@Z` `?ProcessPopupVideoBtnEvent@TableGameIns_C@@UAEXHH@Z` `?CallPlayerVideoChange@TableGameIns_C@@UAEXH_N@Z` `?LoadCharmCfg@TableGameIns_C@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?LoadFace@TableGameIns_C@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVIGERenderScreen@@@Z` `?LoadPhrase@TableGameIns_C@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?LoadGrade@TableGameIns_C@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?UpdataTimer@TableGameIns_C@@QAEXXZ` `?GetSelfPointer@TableGameIns_C@@QAEPAV1@XZ` `?StartGetInterface@TableGameIns_C@@QAEXXZ` `?SetTableGameIns@hgeWnd@@QAEXPAVTableGameIns_C@@@Z` `?CreateRootcontainer@hgeWnd@@UAEXXZ` `?ExitWnd@hgeWnd@@IAEXXZ` `?ClickMinBtn@hgeWnd@@QAEXPAVhgeItemBase@@W4eCommonEventType@@PAX2@Z` `?ClickCloseBtn@hgeWnd@@QAEXPAVhgeItemBase@@W4eCommonEventType@@PAX2@Z` `?GetBaoPai@hgeWnd@@UAE_NXZ` `?GetBackMusicVolume@hgeWnd@@UAEHXZ` `?GetSoundVolume@hgeWnd@@UAEHXZ` `?GetIsEnableBackMusic@hgeWnd@@UAE_NXZ` `?GetIsEnableSound@hgeWnd@@UAE_NXZ` `?SendAvatarData@hgeWnd@@UAEHPAXH@Z` `?OnRecvMemoryShareMsg_Room@hgeWnd@@QAE_NABV?$WJS_ArrayVector@E@@@Z` `?WriteMemoryShareLog@hgeWnd@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?NotifyRoomSelfClose@hgeWnd@@UAEXXZ` `?WndSizeChange@hgeWnd@@UAEXHH@Z` `?DefaultLoadCursorAndTipFnt@hgeWnd@@UAE_NXZ` `?AllocSubItemEnd@hgeWnd@@UAEXXZ` `?InitSubItems@hgeWnd@@UAEXXZ` `?FreeTexAndSprite@hgeWnd@@UAEXXZ` `?LoadTexAndSprite@hgeWnd@@UAE_NXZ` `?WndCaptionCanMoveTest@hgeWnd@@UAE_NHH@Z` `?WndGainFocus@hgeWnd@@UAEXXZ` `?WndLoseFocus@hgeWnd@@UAEXXZ` `?RealRender@hgeWnd@@UAEXHH_N@Z` `?WndDestoryProc@hgeWnd@@UAEXPAVGEMainWnd@@@Z` `?MsgProc@hgeWnd@@UAE_NPAVGEMainWnd@@IIJ@Z` `?RenderProc@hgeWnd@@UAEXPAVGEMainWnd@@0M@Z` `?FrameProc@hgeWnd@@UAEXPAVGEMainWnd@@0M@Z` `??1hgeWnd@@UAE@XZ` `??0hgeWnd@@QAE@PAVGEMainWnd@@0PAVIGERenderScreen@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVGEResourcePacket_CQP@@22HHV34@4@Z` `?processKey@hgeWnd@@UAEXH@Z` `?DeviceReset@hgeWnd@@UAEXXZ` `?DeviceLose@hgeWnd@@UAEXXZ` `?GetChatInterface@TableGameIns_C@@QAEPAVGB_ChatInterface@@XZ` `?GetGameSetInterface@TableGameIns_C@@QAEPAVGB_GameSetInterface@@XZ` `?GetDuanYuInterface@TableGameIns_C@@QAEPAVGB_DuanYuInterface@@XZ` `?GetFaceInterface@TableGameIns_C@@QAEPAVGB_FaceInterface@@XZ` `?ProcessCharmFlashAntiEnd@TableGameIns_C@@QAEXPAVWJS_Flash@@H@Z` `?ProcessAvatarWatchOnOrOutEvent@TableGameIns_C@@QAEXPAVWJS_Avater@@HH@Z` `?ProcessPopupVideoAfterRenderEvent@TableGameIns_C@@QAEXPAVhgeItemBase@@@Z` `?RegAvatarEvent@TableGameIns_C@@QAEXPAVWJS_Avater@@@Z` `?GetPopupVideoInterface@TableGameIns_C@@QAEPAVGB_PopupVideoInterface@@H@Z` `?GetVideoInterface@TableGameIns_C@@QAEPAVGB_VideoInterface@@H@Z` `?FlashWndTip@TableGameIns_C@@QAEXMH@Z` `?DuYuanDirectSend@TableGameIns_C@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?GetPicSpriteByConvert@TableGameIns_C@@QAEPAVGESprite2D@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVGEResourceManager@@@Z` `?GetGifSpriteByConvert@TableGameIns_C@@QAEPAVhgeGIFSprite@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?GetGameMessageBoxInterface@TableGameIns_C@@QAEPAVGB_GameMessageBoxInterface@@XZ` `?GetPopupCharmInterface@TableGameIns_C@@QAEPAVGB_PopupCharmInterface@@XZ` `?GetDiZhuSetInterface@TableGameIns_C@@QAEPAVGB_DiZhuSetInterface@@XZ` `?FoundControlMsgBox@GameMessageBoxCM@@QAEXPAVCommonLayerControl@@@Z` `?FoundControlMsgBox@PopupCharmCM@@QAEXXZ` `?FoundControl@PopupCharmCM@@QAEXXZ` `?FoundAllItemByDataNo@PopupVideoCM@@QAEXXZ` `?FoundAllItemByDataNo@VideoCM@@QAEXXZ` `?GetMagicInterface@TableGameIns_C@@QAEPAVGB_MagicInterface@@XZ` `?GetExitGameInterface@TableGameIns_C@@QAEPAVGB_ExitGameInterface@@XZ` `?AddSnapSreenInfoToChat@TableGameIns_C@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z` `?GetCurTimeDescribe@TableGameIns_C@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ` `?CheckDirectoryEixst@TableGameIns_C@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z` `?SendReady@TableGameIns_C@@QAEXF@Z` `?GetPhotoData@TableGamePlayer_C@@QAEHXZ` `?GetPhotoId@TableGamePlayer_C@@QAEHXZ` `?GetFaceId@TableGamePlayer_C@@QAEHXZ` `?GetUseFaceType@TableGamePlayer_C@@QAEHXZ` `?GetShowId@TableGamePlayer_C@@QAEHXZ` `?GetIsFale@TableGamePlayer_C@@QAE_NXZ` `?GetPlayerId@TableGamePlayer_C@@QAEHXZ` `?GetNickName@TableGamePlayer_C@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ` `?SetTuoGuan@TableGamePlayer_C@@QAEX_N@Z` `?ProcessAvatarRightClickEvent@TableGameIns_C@@UAEXPAVWJS_Avater@@H@Z` `?CallNotifyVideoServerInfo@TableGameIns_C@@UAEXIFIFF@Z`
KERNEL32.dll	`GetCurrentThreadId` `QueryPerformanceCounter` `IsDebuggerPresent` `SetUnhandledExceptionFilter` `UnhandledExceptionFilter` `GetCurrentProcess` `TerminateProcess` `GetStartupInfoA` `InterlockedCompareExchange` `InterlockedExchange` `RaiseException` `GetProcessHeap` `HeapSize` `HeapReAlloc` `HeapFree` `HeapAlloc` `HeapDestroy` `GetSystemTimeAsFileTime` `GetTickCount` `Sleep` `GetModuleFileNameA` `GetCurrentProcessId` `CreateDirectoryA` `OutputDebugStringA` `FindResourceA` `SizeofResource` `LockResource` `LoadResource` `FindResourceExA` `WideCharToMultiByte` `InitializeCriticalSection` `DeleteCriticalSection` `EnterCriticalSection` `LeaveCriticalSection`
USER32.dll	`ShowWindow` `LoadImageA`
SHELL32.dll	`SHGetSpecialFolderPathA`
MSVCP90.dll	`?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z` `?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z` `??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z` `??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z` `??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ` `?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z` `??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ` `??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ` `?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ` `?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z` `?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ` `??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z` `?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z` `?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z` `??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z` `?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A` `?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z` `?width@ios_base@std@@QAEHH@Z` `?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z` `?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z` `?eof@?$char_traits@D@std@@SAHXZ` `?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z` `?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ` `?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ` `?flags@ios_base@std@@QBEHXZ` `?width@ios_base@std@@QBEHXZ` `?length@?$char_traits@D@std@@SAIPBD@Z` `?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ` `?good@ios_base@std@@QBE_NXZ` `?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ` `?uncaught_exception@std@@YA_NXZ` `?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ` `?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ` `?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB` `??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z` `??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z` `??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z` `??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ` `?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z` `??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z` `?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ` `?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ` `?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z` `??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z`
SHLWAPI.dll	`PathFileExistsA`
MSVCR90.dll	`??_V@YAXPAX@Z` `??2@YAPAXI@Z` `atoi` `sprintf` `__CxxFrameHandler3` `_vsnprintf` `_ftime64` `_localtime64` `_time64` `memset` `_CxxThrowException` `strlen` `_mbsstr` `memcpy_s` `_vscprintf` `vsprintf_s` `malloc` `free` `memcpy` `??0exception@std@@QAE@ABQBDH@Z` `_unlock` `__dllonexit` `_encode_pointer` `_lock` `_onexit` `_decode_pointer` `?terminate@@YAXXZ` `_amsg_exit` `__getmainargs` `_cexit` `_exit` `_XcptFilter` `_ismbblead` `exit` `_acmdln` `_initterm` `_initterm_e` `_configthreadlocale` `__setusermatherr` `_adjust_fdiv` `__p__commode` `__p__fmode` `__set_app_type` `_except_handler4_common` `_crt_debugger_hook` `?_type_info_dtor_internal_method@type_info@@QAEXXZ` `_invoke_watson` `_controlfp_s` `_invalid_parameter_noinfo` `??0exception@std@@QAE@ABV01@@Z` `??0exception@std@@QAE@ABQBD@Z` `??0exception@std@@QAE@XZ` `??1exception@std@@UAE@XZ` `?what@exception@std@@UBEPBDXZ` `memmove_s` `??3@YAXPAX@Z` `_purecall`

Delayed Imports

1

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.3219`
MD5	`b47240de8f480ddd6c524620abef54cb`
SHA1	`f150a71998047429845485be67d0086495b5def5`
SHA256	`bfebb6a0258cb3dd3cc59c32215fe2634d5af6d5dd612a83bfb5cf68be3cc4e7`
SHA3	`ab7bf8416c9b20b6798749c4496ad396d870a11478a7328d76e1382463ed4181`

2

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.4289`
MD5	`703763cee0378ab95bddcd447cceb0a5`
SHA1	`22a1d43cea886d15c753c447d20d03e8c81c1bae`
SHA256	`7df97850e7d5427008695a435b38d78b3fba75bedbfe4b5bc55784340ab115cd`
SHA3	`754eca7139019515d2602b1bb47d38ff5087fc4b990ca51b92d90f41ae670de2`

3

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x988`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.28678`
MD5	`ae1f81bc7659d398375bccf3c5c2296b`
SHA1	`5378967f9c8f61d0f52d048397434555ca303c8f`
SHA256	`8f432b8ad654e66a75efb34a85c5cfb73fa04964e6c89efaf759c7230b7576ec`
SHA3	`ce5c9a16c23225f981b63423c968c3e754dc101adc4ca0046fa86e187570ec30`

4

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.31954`
MD5	`d6dc9eb29ee4311d41b494823cf59e3e`
SHA1	`e56da39e4cc8fb4103b5f8189a12b8397cfccb3d`
SHA256	`0f62c8a73ea39c6ecbf8d6463ef2a52416b7d19712dc20f13451c58fce6a3371`
SHA3	`4133740367f0d65929b60bf898c6b2d2054568da7aa9d0243b68ca8dc8ee9f0f`

101

Type	`RT_GROUP_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.62308`
Detected Filetype	Icon file
MD5	`5c84b5099ac46312565be1aa2e21eff0`
SHA1	`25f00759b0e6641f9b423e6a52556c2e4e2796c3`
SHA256	`816cc8c77a0adb35a7432b2bac047e9834bfd21b0ef96c612e5f8bc4f0986620`
SHA3	`17e6deff600599725f4cf3c95b7472cf6ca993cdc40907ae04b6209f5619547f`

1 (#2)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x256`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.0207`
MD5	`5a32206e4bb9d06170ae00fa980db49b`
SHA1	`126a45f48625322ba11eb0acf1ade9115ad6802b`
SHA256	`9f2fc067639866642bb1a73fb43006d233e569d25566b16dedec472fe5d3c5c3`
SHA3	`bfab9d66b065ea131bdc44ac811cfcf4d5c43a1075f9b6d16f0c8f2f20237cac`

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2013-Dec-20 03:21:00
Version	`0.0`
SizeofData	`69`
AddressOfRawData	`0x40c20`
PointerToRawData	`0x3fa20`
Referenced File	f:\ChinaQiPai2\Client\ClientBin\BaoHuang.pdb

TLS Callbacks

Load Configuration

Size	`0x48`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x44d0fc`
SEHandlerTable	`0x441f20`
SEHandlerCount	`173`

RICH Header

XOR Key	`0xc9efe215`
Unmarked objects	`0`
150 (20413)	`1`
ASM objects (VS2008 build 21022)	`3`
C objects (VS2008 build 21022)	`21`
C++ objects (VS2008 build 21022)	`16`
Imports (VS2012 build 50727 / VS2005 build 50727)	`10`
Imports (VS2008 build 21022)	`13`
Total imports	`539`
138 (VS2008 build 21022)	`13`
Linker (VS2008 build 21022)	`1`
Resource objects (VS2008 build 21022)	`1`

Errors

Leave a comment

No comments yet.