PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x1000
timedatestamp.....: 0x48CFC008 (Tue Sep 16 16:17:44 2008)
machinetype.......: 0x14C (Intel I386)
( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x14000 0x13A00 6.48 cb357e69289cb7cf26dfea61eaea1985
.data 0x15000 0x8000 0xA00 4.93 568dd221456d807ca821813c84d65e70
.idata 0x1D000 0x2000 0x1200 4.79 bc7806e1c1ce9ebfd00ad834c1f7a647
.rsrc 0x1F000 0x28DC 0x2A00 5.47 497e5fdc01e78cc51ec9270471b960d0
( 8 imports )
>advapi32.dll: AdjustTokenPrivileges, LookupPrivilegeValueA,OpenProcessToken, RegCloseKey, RegCreateKeyExA, RegOpenKeyExA,RegQueryValueExA, RegSetValueExA, SetFileSecurityA, SetFileSecurityW
> comctl32.dll: -
> comdlg32.dll: CommDlgExtendedError, GetOpenFileNameA, GetSaveFileNameA
> gdi32.dll: DeleteObject
>kernel32.dll: CloseHandle, CompareStringA, CreateDirectoryA,CreateDirectoryW, CreateFileA, CreateFileW, DeleteFileA, DeleteFileW,DosDateTimeToFileTime, ExitProcess, ExpandEnvironmentStringsA,FileTimeToLocalFileTime, FileTimeToSystemTime, FindClose,FindFirstFileA, FindFirstFileW, FindNextFileA, FindNextFileW,FindResourceA, FreeLibrary, GetCPInfo, GetCommandLineA,GetCurrentDirectoryA, GetCurrentProcess, GetDateFormatA,GetFileAttributesA, GetFileAttributesW, GetFileType, GetFullPathNameA,GetLastError, GetLocaleInfoA, GetModuleFileNameA, GetModuleFileNameW,GetModuleHandleA, GetNumberFormatA, GetProcAddress, GetProcessHeap,GetStdHandle, GetSystemTime, GetTempPathA, GetTickCount,GetTimeFormatA, GetVersionExA, GlobalAlloc, HeapAlloc, HeapFree,HeapReAlloc, IsDBCSLeadByte, LoadLibraryA, LocalFileTimeToFileTime,MoveFileA, MoveFileExA, MultiByteToWideChar, ReadFile,SetCurrentDirectoryA, SetEndOfFile, SetEnvironmentVariableA,SetFileAttributesA, SetFileAttributesW, SetFilePointer, SetFileTime,SetLastError, Sleep, SystemTimeToFileTime, WaitForSingleObject,WideCharToMultiByte, WriteFile, lstrcmpiA, lstrlenA
> ole32.dll: CLSIDFromString, CoCreateInstance, CreateStreamOnHGlobal, OleInitialize, OleUninitialize
>shell32.dll: SHBrowseForFolderA, SHChangeNotify, SHFileOperationA,SHGetFileInfoA, SHGetMalloc, SHGetSpecialFolderLocation,ShellExecuteExA, SHGetPathFromIDListA
> user32.dll: CharToOemA,CharToOemBuffA, CharUpperA, CopyRect, CreateWindowExA, DefWindowProcA,DestroyIcon, DestroyWindow, DialogBoxParamA, DispatchMessageA,EnableWindow, EndDialog, FindWindowExA, GetClassNameA, GetClientRect,GetDlgItem, GetDlgItemTextA, GetMessageA, GetParent, GetSysColor,GetSystemMetrics, GetWindow, GetWindowLongA, GetWindowRect,GetWindowTextA, IsWindow, IsWindowVisible, LoadBitmapA, LoadCursorA,LoadIconA, LoadStringA, MapWindowPoints, MessageBoxA, OemToCharA,OemToCharBuffA, PeekMessageA, PostMessageA, RegisterClassExA,SendDlgItemMessageA, SendMessageA, SetDlgItemTextA, SetFocus, SetMenu,SetWindowLongA, SetWindowPos, SetWindowTextA, ShowWindow,TranslateMessage, UpdateWindow, WaitForInputIdle, wsprintfA, wvsprintfA
( 0 exports )
|
发表于 2009-8-12 11:39:50
发表于 2009-8-12 11:58:34
