cd9700b1941e0f9c55ce44b36c80328fe95c6423175809c7b4ae885b42ffdf38

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2016-Aug-09 08:38:11
Detected languages Chinese - PRC
English - United States
Debug artifacts e:\WORK\ate_20160318\Tools\bin\gui_dl\GUI_dl.pdb
CompanyName TODO: <公司名>
FileDescription TODO: <文件说明>
FileVersion 1.0.0.1
InternalName GUIQSDownload.exe
LegalCopyright TODO: (C) <公司名>。保留所有权利。
OriginalFilename GUIQSDownload.exe
ProductName TODO: <产品名>
ProductVersion 1.0.0.1

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Microsoft Visual C++ 8
Microsoft Visual C++ 8.0
MSVC++ v.8 (procedure 1 recognized - h)
Suspicious Strings found in the binary may indicate undesirable behavior: May have dropper capabilities:
  • %temp%
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • LoadLibraryExA
  • GetProcAddress
Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
Can access the registry:
  • RegQueryValueA
  • RegSetValueExA
  • RegCreateKeyExA
  • RegOpenKeyExA
  • RegQueryValueExA
  • RegEnumKeyA
  • RegDeleteKeyA
  • RegOpenKeyA
  • RegCloseKey
Possibly launches other programs:
  • CreateProcessA
Can create temporary files:
  • CreateFileA
  • GetTempPathA
Uses functions commonly found in keyloggers:
  • GetForegroundWindow
  • CallNextHookEx
Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
Enumerates local disk drives:
  • GetVolumeInformationA
  • GetDriveTypeA
  • GetLogicalDriveStringsA
Manipulates other processes:
  • Process32Next
  • OpenProcess
  • Process32First
Can take screenshots:
  • GetDC
  • CreateCompatibleDC
  • BitBlt
Safe VirusTotal score: 0/72 (Scanned on 2025-08-15 03:21:44) All the AVs think this file is safe.

Hashes

MD5 294f69bc5783036cfedfd7ef86955b94 🔍
SHA1 4a70e3ba4f84547277bdc7af4d7d7299ca3b73f0 🔍
SHA256 cd9700b1941e0f9c55ce44b36c80328fe95c6423175809c7b4ae885b42ffdf38 🔍
SHA3 85c53a39fed8705c49ee043abdad3179f8dd7cd79676d976c8ed3793dea5d035 🔍
SSDeep 12288:58tVNc5UX3CMzR8GXkUmiRsupK0QeyEZdL9QHUHe:589YWELiRsu00QejDqHB 🔍
Imports Hash 32de56c33c14f0b5ffe280225c25f2f5 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 4
TimeDateStamp 2016-Aug-09 08:38:11
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 8.0
SizeOfCode 0x70000
SizeOfInitializedData 0x22000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00056F41 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x71000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x1000
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x9a000
SizeOfHeaders 0x1000
Checksum 0x9a6b2
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 21e2413f3b8e1ae6fed65391712f0f4d 🔍
SHA1 0925bd9776a140d6764ea2a76211084f1791d7f2 🔍
SHA256 97a976577fe4869570397c6e991a293f735e8ca01f3281e583739e951883c42f 🔍
SHA3 ca72fa3691ee0559655fb0c67693b5f5d6731bf2dbe1e501b5c4d8e1dee26444 🔍
VirtualSize 0x6f01a
VirtualAddress 0x1000
SizeOfRawData 0x70000
PointerToRawData 0x1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.5688

.rdata

MD5 69d43e592c24052d5c27658cc83914ea 🔍
SHA1 d30d34062c9ada594b75c59dcacf4a7d276a4811 🔍
SHA256 7c815fd4f364b0daf1e1d88f966bc749ca346a351bc55e69d5114350c49f010f 🔍
SHA3 4bdd2e26ff5a1e43194c25e2c6d67e4a145c545ff37e967a05b5167a914b0b3a 🔍
VirtualSize 0x157fc
VirtualAddress 0x71000
SizeOfRawData 0x16000
PointerToRawData 0x71000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.45046

.data

MD5 cd816f7b0078d64ba27bb16f0c77f0d0 🔍
SHA1 592df9d23c46412c55d5260f916f7a518c001a90 🔍
SHA256 279c9c1a74235488b1a05e4cb891d138ea0c3852b2cf0549d61ec8b5b2b30594 🔍
SHA3 d7747e287e21e1f5a35c8fd98fc50537ee09b89a96a18dcb72983de3f4333486 🔍
VirtualSize 0x92dc
VirtualAddress 0x87000
SizeOfRawData 0x3000
PointerToRawData 0x87000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.99469

.rsrc

MD5 9273dd78d23504e90c16af5ac4710033 🔍
SHA1 85554a9c6069fbfdfb508ea55e6319a04f6fc46a 🔍
SHA256 9358a46f003fd58b611388174298414b668719b9c377e1c4fa1d41005155e7d0 🔍
SHA3 e58cbeba94f4d2674d00e9a7298a0404140f99b20aeaa4fc6edbb68857a030fd 🔍
VirtualSize 0x8244
VirtualAddress 0x91000
SizeOfRawData 0x9000
PointerToRawData 0x8a000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.01574

Imports

WINMM.dll mciSendCommandA
KERNEL32.dll TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
InterlockedIncrement
GetThreadLocale
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
HeapFree
VirtualProtect
GlobalHandle
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
RtlUnwind
RaiseException
ExitProcess
HeapSize
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalFindAtomA
LoadLibraryA
lstrcmpW
GetVersionExA
FreeResource
GetCurrentProcessId
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
FreeLibrary
GlobalAddAtomA
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
MulDiv
GetProcAddress
SetLastError
SuspendThread
SetEvent
GetCurrentThreadId
ResumeThread
SetThreadPriority
GetDriveTypeA
GetLogicalDriveStringsA
DeviceIoControl
GetCommState
SetupComm
CreateFileA
InitializeCriticalSection
ExitThread
GetExitCodeThread
ClearCommError
GetOverlappedResult
CreateEventA
WaitCommEvent
LeaveCriticalSection
EnterCriticalSection
SetCommMask
PurgeComm
SetCommTimeouts
SetCommState
OutputDebugStringA
GetSystemTime
CompareStringW
InterlockedExchange
GetLastError
lstrlenA
CompareStringA
MultiByteToWideChar
GetVersion
SetHandleInformation
CreatePipe
CreateProcessA
GetStartupInfoA
WriteFile
ReadFile
PeekNamedPipe
LockResource
SizeofResource
GetTickCount
WideCharToMultiByte
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateDirectoryA
WaitForSingleObject
GetModuleFileNameA
WritePrivateProfileStringA
DeleteFileA
CopyFileA
FindNextFileA
GetLongPathNameA
CreateThread
FindClose
Process32Next
FindFirstFileA
CloseHandle
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
FindResourceA
LoadResource
GetTempPathA
VirtualAlloc
USER32.dll RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
CreateWindowExA
UnregisterClassA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
EnableMenuItem
CheckMenuItem
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
PostMessageA
SetCursor
GetMenuState
GetMenuItemID
SetCapture
LoadCursorA
GetSysColorBrush
GetMenuItemCount
GetSubMenu
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
SetWindowsHookExA
CallNextHookEx
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
GetMessageA
TranslateMessage
CopyAcceleratorTableA
CharNextA
GetClassInfoExA
ReleaseCapture
GetMenu
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
DrawEdge
TabbedTextOutA
RedrawWindow
GetParent
FillRect
GetSysColor
GetClassLongA
GrayStringA
WindowFromDC
DrawTextExA
DrawTextA
CharUpperA
EnableWindow
IsIconic
OffsetRect
MessageBoxA
GetSystemMenu
SetTimer
SendMessageA
GetWindowRect
LoadIconA
AppendMenuA
DrawIcon
KillTimer
GetClientRect
GetSystemMetrics
InvalidateRect
ModifyMenuA
GDI32.dll ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
GetStockObject
SetWindowExtEx
CreateRectRgnIndirect
GetTextColor
GetRgnBox
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
SelectClipRgn
DeleteObject
GetViewportExtEx
GetDeviceCaps
CreateFontIndirectA
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetWindowExtEx
ExtTextOutA
GetMapMode
TextOutA
GetObjectA
RectVisible
CreateCompatibleBitmap
PtVisible
LPtoDP
CreateRectRgn
CreateCompatibleDC
BitBlt
GetBkColor
Escape
GetTextExtentPoint32A
DPtoLP
COMDLG32.dll GetFileTitleA
WINSPOOL.DRV DocumentPropertiesA
ClosePrinter
OpenPrinterA
ADVAPI32.dll RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
SHELL32.dll ShellExecuteExA
COMCTL32.dll InitCommonControlsEx
SHLWAPI.dll PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
oledlg.dll #8
ole32.dll CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OLEAUT32.dll SysAllocStringByteLen
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
VariantInit
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
VariantChangeType
SETUPAPI.dll SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
WSOCK32.dll setsockopt
connect
ioctlsocket
send
socket
WSAStartup
WSAGetLastError
select
recv
WSACleanup
htons
closesocket
OLEACC.dll (delay-loaded) LresultFromObject
CreateStdAccessibleObject

Delayed Imports

Attributes 0x1
Name OLEACC.dll
ModuleHandle 0x8c444
DelayImportAddressTable 0x89aa8
DelayImportNameTable 0x8286c
BoundDelayImportTable 0x828a8
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

?COM_ExcuteATCommand@@YAHPAXPBDPADH@Z

Ordinal 1
Address 0x248f0

?PASDLib_ATCommandSocket@@YAHPAVTSocket@@PBDHPADH@Z

Ordinal 2
Address 0x19a60

?PASDLib_BuildLicenseKey@@YAHPBD0@Z

Ordinal 3
Address 0x18820

?PASDLib_CDToFastboot@@YAHPBD@Z

Ordinal 4
Address 0x181b0

?PASDLib_CloseEfsDir@@YAGPAXK@Z

Ordinal 5
Address 0x29790

?PASDLib_CloseEfsDir_SocketDl@@YAGPAVTSocket@@K@Z

Ordinal 6
Address 0x29460

?PASDLib_CloseSocket@@YAHPAVTSocket@@@Z

Ordinal 7
Address 0x19a30

?PASDLib_ConnectLAN@@YAPAXPBDGPAD1K@Z

Ordinal 8
Address 0x19980

?PASDLib_ConnectPort@@YAPAXEKH@Z

Ordinal 9
Address 0x19490

?PASDLib_ConnectPortEx@@YAPAXEKKKH@Z

Ordinal 10
Address 0x19700

?PASDLib_ConnectSocket@@YAPAVTSocket@@PBD@Z

Ordinal 11
Address 0x199f0

?PASDLib_ConnectUSB@@YAPAXU__USB@@KH@Z

Ordinal 12
Address 0x18d90

?PASDLib_ConnectUSB_Ex@@YAPAXPAU__USB@@IK@Z

Ordinal 13
Address 0x19090

?PASDLib_CreatEfsDir@@YAGPAXPBDI@Z

Ordinal 14
Address 0x27c00

?PASDLib_DaigToFastboot@@YAHPAX@Z

Ordinal 15
Address 0x20700

?PASDLib_DeleteFile@@YAHPAXPAD1@Z

Ordinal 16
Address 0x225b0

?PASDLib_Diag_CONTROL@@YAHPAX0H@Z

Ordinal 17
Address 0x24290

?PASDLib_Diag_CONTROLSocket@@YAHPAVTSocket@@PAXH@Z

Ordinal 18
Address 0x23f40

?PASDLib_DisconnectLan@@YAHPAX@Z

Ordinal 19
Address 0x26240

?PASDLib_DisconnectPort@@YAHPAX@Z

Ordinal 20
Address 0x261c0

?PASDLib_DisconnectPort_Ex@@YAHXZ

Ordinal 21
Address 0x27730

?PASDLib_DoShiftDevice@@YAH_NPAEHPBDH@Z

Ordinal 22
Address 0x17d10

?PASDLib_DownloadAMSS@@YAHPAXPBD1@Z

Ordinal 23
Address 0x20460

?PASDLib_DownloadAMSSBuffer@@YAHPAXPAEI1I@Z

Ordinal 24
Address 0x20430

?PASDLib_DownloadAPPSBL@@YAHPAXPBD1@Z

Ordinal 25
Address 0x26790

?PASDLib_DownloadAPPSBLBuffer@@YAHPAXPAEI1I@Z

Ordinal 26
Address 0x26760

?PASDLib_DownloadDBL@@YAHPAXPBD@Z

Ordinal 27
Address 0x205a0

?PASDLib_DownloadDBLBuffer@@YAHPAXPAEI@Z

Ordinal 28
Address 0x20560

?PASDLib_DownloadDBL_SocketDl@@YAHPAVTSocket@@PBD@Z

Ordinal 29
Address 0x20600

?PASDLib_DownloadEFS@@YAHPAXPBD@Z

Ordinal 30
Address 0x204a0

?PASDLib_DownloadEFSBuffer@@YAHPAXPAEI@Z

Ordinal 31
Address 0x20480

?PASDLib_DownloadEFS_SocketDl@@YAHPAVTSocket@@PBD@Z

Ordinal 32
Address 0x204c0

?PASDLib_DownloadFSBL@@YAHPAXPBD@Z

Ordinal 33
Address 0x20660

?PASDLib_DownloadFSBLBuffer@@YAHPAXPAEI@Z

Ordinal 34
Address 0x20620

?PASDLib_DownloadHexBuffer@@YAHAAPAXPADIH@Z

Ordinal 35
Address 0x1d6b0

?PASDLib_DownloadHexBuffer_SocketDl@@YAHPAVTSocket@@PADIH@Z

Ordinal 36
Address 0x1ccd0

?PASDLib_DownloadHexFile@@YAHAAPAXPBD@Z

Ordinal 37
Address 0x1ec10

?PASDLib_DownloadHexFile_SocketDl@@YAHPAVTSocket@@PBD@Z

Ordinal 38
Address 0x1cb30

?PASDLib_DownloadOEMSBL@@YAHPAXPBD1@Z

Ordinal 39
Address 0x20400

?PASDLib_DownloadOEMSBLBuffer@@YAHPAXPAEI1I@Z

Ordinal 40
Address 0x203c0

?PASDLib_DownloadOSBL@@YAHPAXPBD@Z

Ordinal 41
Address 0x206d0

?PASDLib_DownloadOSBLBuffer@@YAHPAXPAEI@Z

Ordinal 42
Address 0x20690

?PASDLib_DownloadPCSuit@@YAHPAXPBD@Z

Ordinal 43
Address 0x20520

?PASDLib_DownloadPCSuitBuffer@@YAHPAXPAEI@Z

Ordinal 44
Address 0x204e0

?PASDLib_DownloadPartitionTable@@YAHPAXPBDPAI@Z

Ordinal 45
Address 0x20250

?PASDLib_DownloadPartitionTableBuffer@@YAHPAXPAEIPAI@Z

Ordinal 46
Address 0x1f6c0

?PASDLib_DownloadPartitionTableBuffer_SocketDl@@YAHPAVTSocket@@PAEI@Z

Ordinal 47
Address 0x1fce0

?PASDLib_DownloadPartitionTable_SocketDl@@YAHPAVTSocket@@PBD@Z

Ordinal 48
Address 0x20190

?PASDLib_DownloadQCSBL@@YAHPAXPBD1@Z

Ordinal 49
Address 0x20370

?PASDLib_DownloadQCSBLBuffer@@YAHPAXPAEI1I@Z

Ordinal 50
Address 0x20310

?PASDLib_DownloadSaHaRaHexFile@@YAHAAPAXPBD1@Z

Ordinal 51
Address 0x1edb0

?PASDLib_DownloadSaHaRaHexFile_SocketDl@@YAHPAVTSocket@@PBD1@Z

Ordinal 52
Address 0x1bd60

?PASDLib_DownloadSaharaHexBuffer@@YAHAAPAXPAD1@Z

Ordinal 53
Address 0x1e270

?PASDLib_DownloadSaharaHexBuffer_SocketDl@@YAHPAVTSocket@@PAD1@Z

Ordinal 54
Address 0x1c190

?PASDLib_EmergencyDownloadMode@@YAHPAXPAE@Z

Ordinal 55
Address 0x1b0a0

?PASDLib_EmergencyDownloadModeSocketDl@@YAHPAVTSocket@@@Z

Ordinal 56
Address 0x1ace0

?PASDLib_EnterDlModeSocket@@YAHPAVTSocket@@H@Z

Ordinal 57
Address 0x19b10

?PASDLib_EnterDownloadMode@@YAHAAPAXPAEH@Z

Ordinal 58
Address 0x1a4e0

?PASDLib_EraseFlash@@YAHPAX@Z

Ordinal 59
Address 0x26310

?PASDLib_ExcuteATCommand@@YAHPAXPBDPADH@Z

Ordinal 60
Address 0x24680

?PASDLib_ExcuteRouterATCommand@@YAHPAXPBDPADH@Z

Ordinal 61
Address 0x24b90

?PASDLib_ExcuteRouterCommand@@YAHPAXPBDPADHH@Z

Ordinal 62
Address 0x24f00

?PASDLib_ExcuteRouterCommand_Ex@@YAHPAXPBDPADHPAPBDHH@Z

Ordinal 63
Address 0x267b0

?PASDLib_GPS_Control@@YAHPAX0HPAD@Z

Ordinal 64
Address 0x26af0

?PASDLib_GPS_Control_Ex@@YAHPAX0H@Z

Ordinal 65
Address 0x26f00

?PASDLib_GPS_Control_Ex_a@@YAHPAX0H@Z

Ordinal 66
Address 0x27340

?PASDLib_GetConnectedTargetType@@YAHPAX@Z

Ordinal 67
Address 0x262f0

?PASDLib_GetLastError@@YAPADPADH@Z

Ordinal 68
Address 0x26280

?PASDLib_LoadLicenseKey@@YAHPBD@Z

Ordinal 69
Address 0x18b40

?PASDLib_LoadLicenseKeyBuffer@@YAHPAEI@Z

Ordinal 70
Address 0x188a0

?PASDLib_MMGSDI_Add_CK_Code@@YAHPAX0H@Z

Ordinal 71
Address 0x32cd0

?PASDLib_MMGSDI_CK_Lock@@YAHPAX0H@Z

Ordinal 72
Address 0x32cd0

?PASDLib_MMGSDI_CloseSession@@YAHPAX00@Z

Ordinal 73
Address 0x31fc0

?PASDLib_MMGSDI_CloseSessionSocket@@YAHPAVTSocket@@PAX1@Z

Ordinal 74
Address 0x2ff30

?PASDLib_MMGSDI_GetAllAppInfo@@YAHPAX000@Z

Ordinal 75
Address 0x2f5a0

?PASDLib_MMGSDI_GetClientID@@YAHPAX00@Z

Ordinal 76
Address 0x2ee10

?PASDLib_MMGSDI_GetClientIDSocket@@YAHPAVTSocket@@PAX1@Z

Ordinal 77
Address 0x2f200

?PASDLib_MMGSDI_GetSessionID@@YAHPAX00G@Z

Ordinal 78
Address 0x2dc70

?PASDLib_MMGSDI_Get_Category_Data@@YAHPAXEEPAE0@Z

Ordinal 79
Address 0x2ea30

?PASDLib_MMGSDI_OpenSession@@YAHPAXH00000@Z

Ordinal 80
Address 0x31a50

?PASDLib_MMGSDI_OpenSessionSocket@@YAHPAVTSocket@@HPAX1111@Z

Ordinal 81
Address 0x2fa10

?PASDLib_MMGSDI_PersoActive@@YAHPAX0HPAU__MMGSDI_PERSO_DATA_RES@@@Z

Ordinal 82
Address 0x32880

?PASDLib_MMGSDI_PersoActiveSocket@@YAHPAVTSocket@@PAXHPAU__MMGSDI_PERSO_DATA_RES@@@Z

Ordinal 83
Address 0x31270

?PASDLib_MMGSDI_PersoDeactive@@YAHPAX0HPAU__MMGSDI_PERSO_DATA_RES@@@Z

Ordinal 84
Address 0x32880

?PASDLib_MMGSDI_PersoDeactiveSocket@@YAHPAVTSocket@@PAXHPAU__MMGSDI_PERSO_DATA_RES@@@Z

Ordinal 85
Address 0x30ae0

?PASDLib_MMGSDI_PersoGetData@@YAHPAX0HPAU__MMGSDI_DATA_INFO@@@Z

Ordinal 86
Address 0x330f0

?PASDLib_MMGSDI_PersoGetDataSocket@@YAHPAVTSocket@@PAXHPAU__MMGSDI_DATA_INFO@@@Z

Ordinal 87
Address 0x31650

?PASDLib_MMGSDI_PersoGetIndicator@@YAHPAX0HPAU__MMGSDI_PERSO_INDICATOR_STATUS@@@Z

Ordinal 88
Address 0x33560

?PASDLib_MMGSDI_PersoGetIndicatorSocket@@YAHPAVTSocket@@PAXHPAU__MMGSDI_PERSO_INDICATOR_STATUS@@@Z

Ordinal 89
Address 0x30710

?PASDLib_MMGSDI_PersoGetKey@@YAHPAX0HPAU__MMGSDI_DATA_INFO@@@Z

Ordinal 90
Address 0x32410

?PASDLib_MMGSDI_PersoGetKeySocket@@YAHPAVTSocket@@PAXHPAU__MMGSDI_DATA_INFO@@@Z

Ordinal 91
Address 0x30310

?PASDLib_MMGSDI_PersoSetData@@YAHPAX0H@Z

Ordinal 92
Address 0x32cd0

?PASDLib_MMGSDI_PersoSetDataSocket@@YAHPAVTSocket@@PAXH@Z

Ordinal 93
Address 0x30ec0

?PASDLib_MMGSDI_Set_Policy@@YAHPAXEE@Z

Ordinal 94
Address 0x2e670

?PASDLib_MMGSDI_UNLock@@YAHPAX0H@Z

Ordinal 95
Address 0x32cd0

?PASDLib_MMGSDI_WriteCmd@@YAHPAX0HG@Z

Ordinal 96
Address 0x2e250

?PASDLib_OpenEfsDir@@YAGPAXPBDPAK@Z

Ordinal 97
Address 0x287c0

?PASDLib_OpenEfsDir_SocketDl@@YAGPAVTSocket@@PBDPAK@Z

Ordinal 98
Address 0x29090

?PASDLib_ParameterRequest@@YAHPAX@Z

Ordinal 99
Address 0x1b550

?PASDLib_ParameterRequest_SocketDl@@YAHPAVTSocket@@@Z

Ordinal 100
Address 0x1b9b0

?PASDLib_PhoneReset@@YAHPAX@Z

Ordinal 101
Address 0x259c0

?PASDLib_PhoneReset_SocketDl@@YAHPAVTSocket@@@Z

Ordinal 102
Address 0x25e10

?PASDLib_RMNULLDir@@YAGPAXPAD@Z

Ordinal 103
Address 0x22160

?PASDLib_ReadData@@YAHPAXPAEAAH1H@Z

Ordinal 104
Address 0x25880

?PASDLib_ReadData@@YAHPAXPAEAAHPAPBDH@Z

Ordinal 105
Address 0x25930

?PASDLib_ReadEfsDir@@YAHPAXKKPAKPAD@Z

Ordinal 106
Address 0x28c30

?PASDLib_ReadEfsFile@@YAGPAXG0PBD@Z

Ordinal 107
Address 0x29b70

?PASDLib_ReadEfsFile_SocketDl@@YAGPAVTSocket@@GPAXPBD@Z

Ordinal 108
Address 0x2af80

?PASDLib_ReadNvItem@@YAGPAXG0H@Z

Ordinal 109
Address 0x20de0

?PASDLib_ReadNvItem_Ex@@YAHPAXG0HG@Z

Ordinal 110
Address 0x23180

?PASDLib_ReadNvItem_SocketDl@@YAGPAVTSocket@@GPAXH@Z

Ordinal 111
Address 0x21750

?PASDLib_RemoveDir@@YAGPAXPAD@Z

Ordinal 112
Address 0x21f60

?PASDLib_RunMessage@@YAHP6AXIPAX@Z@Z

Ordinal 113
Address 0x17cc0

?PASDLib_SayHelloSocketDl@@YAHPAVTSocket@@@Z

Ordinal 114
Address 0x1a150

?PASDLib_SayHelloToEfs@@YAHPAX@Z

Ordinal 115
Address 0x28080

?PASDLib_SayHelloToEfs_SocketDl@@YAHPAVTSocket@@@Z

Ordinal 116
Address 0x28470

?PASDLib_SearchAlUSB@@YAXPAU__USB@@PAE@Z

Ordinal 117
Address 0x18bf0

?PASDLib_SearchAllPort@@YAXPAU__Port@@PAE@Z

Ordinal 118
Address 0x18bc0

?PASDLib_SearchCDROM@@YAHPADPBDH@Z

Ordinal 119
Address 0x18430

?PASDLib_SendPassword@@YAGPAXPAEH@Z

Ordinal 120
Address 0x22da0

?PASDLib_SendPassword_SocketDl@@YAGPAVTSocket@@PAEH@Z

Ordinal 121
Address 0x22a70

?PASDLib_SendSecurityMode@@YAHPAXE@Z

Ordinal 122
Address 0x1f180

?PASDLib_SendSecurityMode_SocketDl@@YAHPAVTSocket@@E@Z

Ordinal 123
Address 0x1f470

?PASDLib_SendSpcCommand@@YAHPAX@Z

Ordinal 124
Address 0x20a60

?PASDLib_SetSerialNum@@YAHPAXK@Z

Ordinal 125
Address 0x27740

?PASDLib_StopMessage@@YAHXZ

Ordinal 126
Address 0x17d00

?PASDLib_WriteData@@YAHPAXPAEH@Z

Ordinal 127
Address 0x25800

?PASDLib_WriteEfsFile@@YAGPAXG0PBD@Z

Ordinal 128
Address 0x2bfd0

?PASDLib_WriteEfsFile_SocketDl@@YAGPAVTSocket@@GPAXPBD@Z

Ordinal 129
Address 0x2cfd0

?PASDLib_WriteLockDiag_Ex@@YAHPAX0H@Z

Ordinal 130
Address 0x23b20

?PASDLib_WriteNvItem@@YAGPAXG0H@Z

Ordinal 131
Address 0x21300

?PASDLib_WriteNvItem_Ex@@YAHPAXG0HG@Z

Ordinal 132
Address 0x23680

?PASDLib_WriteNvItem_SocketDl@@YAGPAVTSocket@@GPAXH@Z

Ordinal 133
Address 0x21bb0

2

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.02695
MD5 cab67e9ca149fb79ab4473998412b951 🔍
SHA1 2e793d35537bfb5d3f042ed0626d3b119d50519a 🔍
SHA256 fbeb3be87e80cb8e1d2af3d8140796c1bb80c6c7056f60897088ff9e355c3867 🔍
SHA3 0e72f5537421764effb2ed98e536358bb7e86eed7b0936e606e8d45559685684 🔍

3

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0xb4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.74274
MD5 9fa8a914823ac7e5370652146901f4f1 🔍
SHA1 eb3224109abb341b6e464d2606fdbed1a7160bc6 🔍
SHA256 f64ccc0582bc7c66af8b40049e485e8e241335261ec95ace909293ba50b2e4a3 🔍
SHA3 bb348af06514e27cd1fa21ad524dfd037edcd3b36ef4cc6ab24c4a8ec38995ff 🔍

4

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.34038
MD5 d78a341fa7444ba9ccb74ad0c943d0ac 🔍
SHA1 a3fdcb001587c47b72f06441087455e8027baca1 🔍
SHA256 652988945185cf5d604d9b48de66288d82d8ed0acdd134398e90d002d2d9fc72 🔍
SHA3 2ddf8193c735adcec9a83d3a9032dc70796778b1d0c967a43789f1a6bb3da15f 🔍

5

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.34004
MD5 07618c451f53db89991c3fb7c567a568 🔍
SHA1 0d5cd2bb85bb88024b832f68bdbadd1e69938138 🔍
SHA256 0b0e16c38a3d5a85566e67b1d9a7e720e4dee27e163b06099d3d7dfa5dbed9ee 🔍
SHA3 f4d98de638008ce348a7ef0cb3feb13207cf5b3eaea4f1ee1d71b3a22397fba4 🔍

6

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.51649
MD5 9936fbf67a1d9f755c37852015d09527 🔍
SHA1 426016ba6a10cc2634ab7357e4223793c51aa304 🔍
SHA256 368f9cb089d206a8b61251f0c85eeda97ee08a56b33be8579246e964d3af6169 🔍
SHA3 6bdb1e7d667efe7812e162384a6341edec73311ee7dfcb122adf0cc0f08e7a8f 🔍

7

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.45401
MD5 ffacff1dbee315221fd131e951d8e151 🔍
SHA1 d2eb9800a1f60d3ea7225fec706d809cf477885b 🔍
SHA256 6440c3a38dcfb81d45bc6be31b776fdae116dd7a2933b407b67132f6cfa0e6eb 🔍
SHA3 dbe125dd582d83c13a62c87798c900fdc43d97b581935e320c14f9cc761a3868 🔍

8

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.34864
MD5 fa681900dd51c997aa67a2c5a4704099 🔍
SHA1 b48ebfd25835cb260b5e4f8e7085ea3da102c48a 🔍
SHA256 9882a8462ce9de3cc9a5d0ca48c8c4f7ca97f1f846f0c10e6655e33c9734b152 🔍
SHA3 157fb750ffc808227ced340c81ed1c1c1e15b05dd0e831678b871515870e0a8b 🔍

9

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.34505
MD5 0a12283479aa8a8677dd27bb0f584a34 🔍
SHA1 63679153c4d14fc591d1286cc98ff5044a5b589d 🔍
SHA256 322e92d75b3fec9e16b81466f4cf111d298b80812d5b238f4ee032c025a02050 🔍
SHA3 d6fc5e08b9d51b2cc80c1a2a34ca495e28edd0ca1bc65f317958b773c675de7e 🔍

10

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.34864
MD5 d0293b6f84ea96f2662fa2f8e2fd44de 🔍
SHA1 240ad776d40208f067dda60701affa3d162cb3bb 🔍
SHA256 8db6df648274a0fc3d28430367216e1c17c364ca613066cbb0e133637e92ba62 🔍
SHA3 d92c1c2bfba803073152e14d6846474d13ccef3f04aa8670540389efa7c7d995 🔍

11

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.31114
MD5 49ca9d25ceb458297ddf84fff64c8d55 🔍
SHA1 fbd6d992b7e2a59c9e24372ea8d30a5dcdbd46f9 🔍
SHA256 f9c81ce9b4176b305c554a15f0ca2b98b11be76c1f13ef22169999aa07e9612f 🔍
SHA3 03f7002b636940864ef7d399ba60fb8de3f455da32f311ee39cdf6602c5d348b 🔍

12

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33609
MD5 27fc5529ad790189bbf410c7e3a70fb7 🔍
SHA1 ea2456c9b26f884a7f7abb051f460ec98cb9451c 🔍
SHA256 601635482a9b1864ea0c61ce0282c5c9fe1d014aa95dbb4f60770f1c2b6df3da 🔍
SHA3 24ab306744896452b2a7f7055c97671ab0aad3965342b3d0cead7a6cb640238d 🔍

13

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.81313
MD5 858a63dc597812b0885e8a8f9689227c 🔍
SHA1 0a816cd0e6f10038f43bde278eb613f1c7281b33 🔍
SHA256 2bf742d2beb4c56dd6eb68347dd8ee28da85bed9e6d165b36c6edb91da01d5d6 🔍
SHA3 6974d714fd124f0de87b6f088039e52bcf3123b5e6ae24c7c61864b70b894963 🔍

14

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.81491
MD5 ff43eaab521694d0356618a92cd83b55 🔍
SHA1 f1ed8d456a5a3d87d1a8349e992c99e22bf3624e 🔍
SHA256 cfc4ff9e46fbb61f61b68f36adc6593b137233d1cbaa50fe37e5653f0cb20396 🔍
SHA3 7069692bfbe0c043b33390a40f8033c3d0aa3092c3b1ca1b01fc899dc760ec48 🔍

15

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.10016
MD5 4bfaa5ad112338fc90bf84b1ba21859d 🔍
SHA1 f175fb276720b4f98bc75dd3edc8c53ed563bdf4 🔍
SHA256 c4a6e3a7a346baecb09a0c49268eb44f388382a7866a4e912b53d48fa3b34c26 🔍
SHA3 eb1f5efadebebc4b756ef49661343ee08641f53184ad8ee83e33d6665028a00d 🔍

16

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.97052
MD5 654a61b5fd300aaf86c52a3c48035005 🔍
SHA1 e16bdc1b4309abd682e2d0b52aaf370a77ad6a86 🔍
SHA256 f273e554605a89aa0994c9d42bc2569be3db5b19b2900dacb30f3218ed1174a0 🔍
SHA3 50582dc2bd6d1a2632564b2d3c6fdc1877e401924754069bc2dfccf3e2896340 🔍

17

Type RT_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.22699
MD5 b6946159ef4680b2b03d58bdf3dc83f6 🔍
SHA1 b949690a6e071a1fe43cb83a15d5104d1fa9fe0d 🔍
SHA256 ebaf4bcc0f0d7ca9a3458ea52520d2dd10811069241940b9b2e79ac1a4c3ca5c 🔍
SHA3 4b1152fe0fd4581cc8716682bff8f14d7c903ab6b5414d52876bd37fc58eb0c5 🔍

30994

Type RT_BITMAP
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0xb8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.23666
MD5 8cf65be17e506ff24c2177078f88b56e 🔍
SHA1 3e397dc7597caeb844df0ea760b64231c8ce3dbf 🔍
SHA256 e7c0005285d1ab59732d5f99f77a9bdd6342b01cf44437ebd7a07611a227e272 🔍
SHA3 7da4c7aab356574679f0f9107740f01647864c846c04f699deef67577fd6aded 🔍
Preview

30996

Type RT_BITMAP
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x144
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.87621
MD5 5a9c81cdbf480cf01daa71ba0e233c5f 🔍
SHA1 28e04c01584654e1974347d1baa462b2784e9c47 🔍
SHA256 abdf36bde89a26349f5741c17c235dacea88d441d8662ba16a598dc50c3c4864 🔍
SHA3 99dec83590ac444359a5a6f8924dae5615d93f4df527e10a8a61319ce3a5beaf 🔍
Preview

1

Type RT_ICON
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.43803
MD5 0ba2bfb83f946ee930b153566951d156 🔍
SHA1 c67bd9814744d5412cd7588526faeaf4cc40dce7 🔍
SHA256 9aa13e1200d4a05d076debf49c6271874cca1c480c5e497b57e86e723fcceded 🔍
SHA3 a1b1f10cfe120456c33b36b300cc401788bba3b2bfff85018201baeba6961eea 🔍

100

Type RT_DIALOG
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x120
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.35124
MD5 2b7d88c05f983a3ead8473e8abaf3661 🔍
SHA1 4676d1d46e5de544a7643e8828f6992412db5d57 🔍
SHA256 2039baf8596ddc57743dbe471574ec7d87dd5ad80ed504831cd76509260b7b2c 🔍
SHA3 1096dd245327af83f5ce093494a8ac394d9a6573a16eeb7ab388860d88b093ee 🔍

102

Type RT_DIALOG
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x138
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.18771
MD5 45cf80154f68a5e4119ab3b2ad482e4b 🔍
SHA1 f80831f238ba91f12d27be42a213fb45a1f43445 🔍
SHA256 05e849b732e7b5edf8fffe24a5d71de85758cafe62b90789c079cae4f10e2b9d 🔍
SHA3 ab2ecf2beb07e2664a70f194aa5fa7c79dd6c4cbff9d05e9e38994c4b2c03900 🔍

30721

Type RT_DIALOG
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0xe8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.06676
MD5 ad7b15160c8bf80910606d417f40fef5 🔍
SHA1 9752acb8e012635c4356f7f2a20191d656b53faf 🔍
SHA256 6e113fd8e9f3156ae68251c6076beb9b59fe29e589d06398e7019802521f69d3 🔍
SHA3 50c74f1eeba91cb4ecc237c0b18cd2f6c0e2b6064e8d13ce1a779160c03b5d48 🔍

30734

Type RT_DIALOG
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x34
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.41669
MD5 72723d63b211c60717138184c1675b66 🔍
SHA1 ecd2be6587bb32a080e51b5c3f3a816e8b637c85 🔍
SHA256 4cf716efaf68e0cb2ec45ec55d291050b5712b05653cae68edbb999f803d2a98 🔍
SHA3 6031fa1100e39d04c89ed42890fe9833adb0503fe1857940533b7356aec9d306 🔍

7 (#2)

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x4e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.37287
MD5 d91767ffa126423c7fe5b832a9f290f2 🔍
SHA1 30b98d7d2ae7ec34ee3c1e002ce1174880aa62c4 🔍
SHA256 d189b1b9ee29fbeb7554c18779ab9f0f8812b877db2b29f7da43df495ddbf422 🔍
SHA3 833a56e3a9e12dd80d4e1bc1fb89393ee5dc3fd71c728a4dbe17b6641000b296 🔍

3841

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x82
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.81705
MD5 8bb814f43734537868736a6df5dcc012 🔍
SHA1 3ae7a8f8678bc2aed76f745960730097032389b6 🔍
SHA256 d91dc4e26fd86def5ee907c72f32457bea07d21fa618012245f641d08501548d 🔍
SHA3 73fabbc3aad03738eda288b6d45b076e7f94f1ff8de37df5ac4d6e7dc7a48f98 🔍

3842

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x2a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.960953
MD5 0131ce1c2237957b6926d5097b0af63d 🔍
SHA1 2ce37b98065cc4de92e99eb0777e0e1159102068 🔍
SHA256 05e0d5787611ed4f643733e3e6e62d00f426422b5d3e443ceebac22e9d294bc4 🔍
SHA3 9ee7bcb02f48332a4fac72465297312ef9c765b03edf2ab24a4b3de0840bda6c 🔍

3843

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x192
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.08561
MD5 4878b41966ae4b4804e54b73c2ce749d 🔍
SHA1 96f81fde159fde9de106ae79c72a5ff33888240e 🔍
SHA256 66f1747ba4c17f6fca44818ed98445f01645651c120e72f558245e2df6949d35 🔍
SHA3 388adbbc3c6a6643ab1951eeffb44f27991ae18f30d4d58e4b3cfe105f9a0906 🔍

3857

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x4e2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.26139
MD5 a9e50c9388d7cdac902c23acec7aa23c 🔍
SHA1 d54e8c937a904c58112c0fd868012f1808bc7def 🔍
SHA256 d036e1af5639fb867f5035330e81788bbc24eff762610e3f6bba5d78903a845a 🔍
SHA3 d6269db5a679dd9690f84a835d71985ba4651061b49478a4df8690ece671a473 🔍

3858

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x31a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.02531
MD5 e3a0d53a85f1f4fb647a1ae27e97b22e 🔍
SHA1 402c9fb29b0531f57ab05b9951429fe0b3a4b3f2 🔍
SHA256 c054645d86387fd491743027e6c2284d6a7262f6aced9321cbc1465cef2b6b1f 🔍
SHA3 fbda24a136d74488bb95bdd2e8f3a50b89a1f969239952685c4fe12cb093df63 🔍

3859

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x2dc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16997
MD5 8e2ac8a2e85ae2a4a7d1b1fec0c30687 🔍
SHA1 e8ad7766b7c342e2721e21c0d7f0c222ee8720e9 🔍
SHA256 c1bc5318a82ea1a1809618040026851947f6aa5171d904a9e60966f4551ca1a3 🔍
SHA3 b12ff47988f4fe62a2460361df0144ad3366d59e0ffa2b6f38b3469d7b24fc79 🔍

3860

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x8a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.71087
MD5 5988b72b85cd1c121906b20e7526fdf2 🔍
SHA1 45efa4995e9c25a32e3f47a15b63a813cc6e8fc4 🔍
SHA256 35b5abb90316b4017d5531e031cbf15bae6e8dd46f6dd221701693a22a7795be 🔍
SHA3 afa115b83c9f9b2f16ce1e14424b4e2cf6216cbcee84835e0b5cec4a23510a93 🔍

3865

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0xac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.63903
MD5 5fbbd2a5f564e043553889eec9147920 🔍
SHA1 2ddafabdf2bf5b62090419f07f731c4d02f0d987 🔍
SHA256 1b8660b0c53b94f3e029de58e56d08c8097a080244e9dc65d4155a9b603820d8 🔍
SHA3 1a90cf149f1fc5cfa9cd3f82f9a079ec48c7f7ce76dc4be601e538ae5c052ab9 🔍

3866

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0xde
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.87807
MD5 a0838b75a6ffc345212d18178663bb7d 🔍
SHA1 a90a0eccdf4cc4c50f430195695a3b65adefe5e8 🔍
SHA256 31bff9afbf08a8869318cd946a1d73a4425afefc5693c6e06671bde1e86de1dc 🔍
SHA3 ad576d2bedb8e173fb207310f244bee3ad8c898a2101cb67da930fadf80ec7d0 🔍

3867

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x4c4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.23259
MD5 f2cb4a170c1677e5a01e7be62eb9cb0d 🔍
SHA1 2dd9a30c267d734a1b6da203ac4ddf4512ce30bf 🔍
SHA256 36db380991291cac5c99e42332efda20210f63985544d95e8fa6ef85bf2bdf8e 🔍
SHA3 2a1b4ca5a692c8deed0fef985b009b14ce015981e2b6bcf1469bba5700456504 🔍

3868

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x264
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.09466
MD5 22bc73fe721ab70d0af71b166577d914 🔍
SHA1 3f6f9d5eacc66775e33fa6644ffcb06e141b8955 🔍
SHA256 7f51554313c6765ba649783a942064cdfe6f5a70248a6f56840f71969f87ced0 🔍
SHA3 a37cc4b7ff7538179044beda7e177e62d1691994b518d2151622c975b5f282ef 🔍

3869

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x2c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.07875
MD5 4b18eed800e2806db8e0aacb95fd54f2 🔍
SHA1 8b09634f818d6823f6466717f3863cbb466d97c1 🔍
SHA256 0714c554acd308b38c3d6319f7e470f76a16d712f696545eacac2bdc725dfb95 🔍
SHA3 067dea0fda55e331beab407da1e0e79a9d71fe8a8d0c965384d459ce0a8d499a 🔍

3887

Type RT_STRING
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x42
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.95964
MD5 c65b487f823c0a91a2eec94148eb1ff6 🔍
SHA1 3fd26a7911c5c5d45d0dfc94dfd2fd11a1fd1574 🔍
SHA256 1f1b61a7f04edc3691a6c9350132b09929d5bfa1c900f6ff500e55c5ebc63212 🔍
SHA3 e89fdaf864b56d3012a7c4518ff3db5dee97ab11fa819b22076973a8f607d95f 🔍

30977

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x22
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.17349
Detected Filetype Cursor file
MD5 82087004b160772173284c3dae85be2f 🔍
SHA1 a3c1f9340fc37dff751efbe6673b5e9ef3e4a8b1 🔍
SHA256 e6bef05177430dd0710b2878ea9028fb4cd23b7dd9e6066a7dce3934c8e05124 🔍
SHA3 09d33054c8076b56ab90b399acf5383351b59ba9db1cac26820c9b60cc9532d0 🔍
Preview

30998

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 ebb32ed08b06ab16f79c997b7963c57c 🔍
SHA1 c87e290caff3cf222d5ec678a51927ff22637949 🔍
SHA256 9c17b4621412d6ded24a76aed74d4425ae61f86b6d4092ca1e28ca66b7c71399 🔍
SHA3 fb70f94bf4a64a26f2d83b588fe2a233796083fd03aae7835387aeba2646b847 🔍
Preview

30999

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 1ae28d964ba1a2b1b73cd813a32d4b40 🔍
SHA1 8883cd93b8ef7c15928177de37711f95f9e4cd22 🔍
SHA256 ff47a48c11c234903a7d625cb8b62101909f735ad84266c98dd4834549452c39 🔍
SHA3 a85dadd416ce2d22aa291c0794c45766a0613b853c6e3b884a2b05fc791427b8 🔍
Preview

31000

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 b3dbdfe1835416bbc3f5065baca9aca9 🔍
SHA1 334d5af1355f6a13c35be4ad16e76baaecf209f1 🔍
SHA256 ec26c438d10e3e84ec855c47f07a176e6c11bbfae1557d526490711b80f087fe 🔍
SHA3 2409b439f48a139d3764b226eda46c6a629d5bd208991369ae0c85e37c17c71d 🔍
Preview

31001

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 a95c7c78d0a0b30b87e3c4976e473508 🔍
SHA1 b19f3999f1b302a2d28977cb18a3416c918d486c 🔍
SHA256 326c048595bbc72e3f989cb3b95fbf09dc83739ced3cb13eb6f03336f95d74f1 🔍
SHA3 8157b4e6afa7ed2e2ffc174d655bec9fb81db609e4c5864faa5ead931ff60689 🔍
Preview

31002

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 446e8ff2a515c84d93ca4cbcf405d300 🔍
SHA1 98de0236185240e011430a5dd8e262ed8f991ec2 🔍
SHA256 ef309b720f166673cad840a88e7636e9161ad91415cc7c176010cebba07757e5 🔍
SHA3 d345fed6ee7f3afa40aba48106f47450bde6ac4c3d47db78cbfb11e4368be613 🔍
Preview

31003

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 dcaa3c032fe97281b125d0d8f677c219 🔍
SHA1 58fe36409f932549e2f101515abee7a40cf47b2c 🔍
SHA256 6e1e7738a1b6373d8829f817915822ef415a1727bb5bb7cfe809e31b3c143ac5 🔍
SHA3 02ef292e1b4a70e439e362af6b4fa213e3816ade45222b78dabab712b6afba54 🔍
Preview

31004

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 5df05404b0dab444d7bc0fe0bee0d519 🔍
SHA1 ecbc2591eaf234bcc87df4731b5e26266728ff6d 🔍
SHA256 28b8110695851e5280ff55cb78507b03e8b74dd370b8e122179c82b56f7e5f37 🔍
SHA3 f18323f0f4e67af79d43a527df26273c9f7e53e73b1ba51cd426cff3412927d2 🔍
Preview

31005

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 0893f6ba80d82936ebe7a8216546cd9a 🔍
SHA1 0754cbdf56c53de9ed7fbd47859d20b788c6f056 🔍
SHA256 a0adcedb82b57089f64e2857f97cefd6cf25f4d27eefc6648bda83fd5fef66bb 🔍
SHA3 ce6148ade08ef9b829f83cb13b4c650d9d4a7012bfd1ab697a7870a05f4104f8 🔍
Preview

31006

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 e6a3323fcb21bc5b90ee077f41a24061 🔍
SHA1 91e468b891f8306afeb6ac33bc31d67efb2cbe9d 🔍
SHA256 a92f60b25322592e7ddd13d88e4006c097666f4d87c8cb0c21ffdccd53b31d78 🔍
SHA3 ffc4266780334ccca3790e5f703fab0a138d252e16d1ad1145c1929f51d31d38 🔍
Preview

31007

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 d1c93cf23f34157f8c97800528b9bb99 🔍
SHA1 ab9e40c42ad0de11e11fdde5de49bd0adaa9bc2b 🔍
SHA256 8a495f17bc472bfc5e6923d9efa687848fac027ad60694f9c3f10a4f7b194924 🔍
SHA3 10b44e07ad4f8d644f73b4d71370ae8c337e8bfdac89efebff20378ad61e0758 🔍
Preview

31008

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 22a9b94eda22d068a6823a72268fdada 🔍
SHA1 7923c0aa606f67498391ecdb828292fcc3bc3ed6 🔍
SHA256 a2f0549cca7170ae03ba042464efe62365fba38c20049e439871c9e5ce0f914f 🔍
SHA3 565227501bdf04ce5d2afeb14e48062d4cdd6de7b76c62d26a15f6e4a34ba5c1 🔍
Preview

31009

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 1cd71148c4a650e298e26668e22c3733 🔍
SHA1 5aeaabee3ae2ad999e9ed91c85119a42c83473c6 🔍
SHA256 4ecc7f2578fd7b137c04f85ffcbd67d6eab0bc8b1df4246cebd2a2aa517f3c60 🔍
SHA3 89ccb4ca5392e186b8eeb9848f78a12843e40792c3500e104225869bf9be1894 🔍
Preview

31010

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 1529a8ec9965ecf3256d6d4550712406 🔍
SHA1 9bd0fc7e667f3d49f5098ecc2bff01987f3e1503 🔍
SHA256 12a5b9052dd16bed260343bc4352d436167c991c54497c5af441304646549386 🔍
SHA3 0799f15ab0007d5497ea80dbae86635472c9d085ffbb6c095b71d1e8acebc81b 🔍
Preview

31011

Type RT_GROUP_CURSOR
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 8e242da1769c2307f276e393dec0e7d9 🔍
SHA1 da604259954e8cda5931a679e081bfad9a9fd772 🔍
SHA256 ee63d4681e7622067fd29005c6cc67b456031eb723c7239f05f1cb097af0ef98 🔍
SHA3 e6021bdef60731a607f9445b3c004fcdac812f44b42aeb8e32fee72204be4572 🔍
Preview

128

Type RT_GROUP_ICON
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.91924
Detected Filetype Icon file
MD5 3e1d980f0dc747eec9d946c155cb1498 🔍
SHA1 15414ced0202f709d400c957d441a8856dde8479 🔍
SHA256 027e12c81d53ebb492d0e1ce8166c0c004e135274105fb79465b6b97bc6c71cd 🔍
SHA3 11e83c27ff3b8cca2c537273338202138c94fb4b10a6b2daf0f7d23d177cc049 🔍

1 (#2)

Type RT_VERSION
Language Chinese - PRC
Codepage Latin 1 / Western European
Size 0x2d8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.68946
MD5 08fd2420dec1d65987dbad91d2462888 🔍
SHA1 d0acb0f00b78fd4ee0c1cd91ce02e7b2437e02cd 🔍
SHA256 e166586a619e6d3c629442d8d260af1c6c9db284b794c698e1c3a2ebcf71715e 🔍
SHA3 75375c16f62aa31ac87542ee04c507b6c08561c56c55f8158ae9113b8fb1206d 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x16a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.06699
MD5 ffed1d19f3178b6ec3ed43c200832203 🔍
SHA1 02a3d5a1e217aef5ab19f0cd1a09ddd269aa3fd9 🔍
SHA256 491df5e526dedeba473e41db0354c4c2d6821f3c9d94a5de679691347e366e10 🔍
SHA3 74a3eb072910ecdfbf22da2c083915a1254a8c43a5e8a62f9f6a4bce77ecf32f 🔍

String Table contents

关于 GUIQSDownload(&A)...
Open
Save As
All Files (*.*)
Untitled
an unnamed file
&Hide
No error message is available.
An unsupported operation was attempted.
A required resource was unavailable.
Out of memory.
An unknown error has occurred.
An invalid argument was encountered.
Invalid filename.
Failed to open document.
Failed to save document.
Save changes to %1?
Failed to create empty document.
The file is too large to open.
Could not start print job.
Failed to launch help.
Internal application error.
Command failed.
Insufficient memory to perform operation.
System registry entries have been removed and the INI file (if any) was deleted.
Not all of the system registry entries (or INI file) were removed.
This program requires the file %s, which was not found on this system.
This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Please enter an integer.
Please enter a number.
Please enter an integer between %1 and %2.
Please enter a number between %1 and %2.
Please enter no more than %1 characters.
Please select a button.
Please enter an integer between 0 and 255.
Please enter a positive integer.
Please enter a date and/or time.
Please enter a currency.
Please enter a GUID.
Please enter a time.
Please enter a date.
Unexpected file format.
%1
Cannot find this file.
Please verify that the correct path and file name are given.
Destination disk drive is full.
Unable to read from %1, it is opened by someone else.
Unable to write to %1, it is read-only or opened by someone else.
An unexpected error occurred while reading %1.
An unexpected error occurred while writing %1.
%1: %2
Continue running script?
Dispatch exception: %1
Unable to read write-only property.
Unable to write read-only property.
Unable to load mail system support.
Mail system DLL is invalid.
Send Mail failed to send message.
No error occurred.
An unknown error occurred while accessing %1.
%1 was not found.
%1 contains an invalid path.
%1 could not be opened because there are too many open files.
Access to %1 was denied.
An invalid file handle was associated with %1.
%1 could not be removed because it is the current directory.
%1 could not be created because the directory is full.
Seek failed on %1
A hardware I/O error was reported while accessing %1.
A sharing violation occurred while accessing %1.
A locking violation occurred while accessing %1.
Disk full while accessing %1.
An attempt was made to access %1 past its end.
No error occurred.
An unknown error occurred while accessing %1.
An attempt was made to write to the reading %1.
An attempt was made to access %1 past its end.
An attempt was made to read from the writing %1.
%1 has a bad format.
%1 contained an unexpected object.
%1 contains an incorrect schema.
pixels
Uncheck
Check
Mixed

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.1
ProductVersion 1.0.0.1
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language Chinese - PRC
CompanyName TODO: <公司名>
FileDescription TODO: <文件说明>
FileVersion (#2) 1.0.0.1
InternalName GUIQSDownload.exe
LegalCopyright TODO: (C) <公司名>。保留所有权利。
OriginalFilename GUIQSDownload.exe
ProductName TODO: <产品名>
ProductVersion (#2) 1.0.0.1
Resource LangID Chinese - PRC

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2016-Aug-09 08:38:11
Version 0.0
SizeofData 73
AddressOfRawData 0x7b618
PointerToRawData 0x7b618
Referenced File e:\WORK\ate_20160318\Tools\bin\gui_dl\GUI_dl.pdb

TLS Callbacks

Load Configuration

Size 0x48
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x488400
SEHandlerTable 0x47dd20
SEHandlerCount 224

RICH Header

XOR Key 0x644b68bc
Unmarked objects 0
105 (2067) 3
ASM objects (VS2012 build 50727 / VS2005 build 50727) 28
C objects (VS2012 build 50727 / VS2005 build 50727) 171
C++ objects (VS2012 build 50727 / VS2005 build 50727) 157
C++ objects (4031) 3
Total imports 587
Imports (VS2012 build 50727 / VS2005 build 50727) 31
114 (VS2012 build 50727 / VS2005 build 50727) 17
Exports (VS2012 build 50727 / VS2005 build 50727) 1
Resource objects (VS2012 build 50727 / VS2005 build 50727) 1
Linker (VS2012 build 50727 / VS2005 build 50727) 1

Errors

Leave a comment

No comments yet.