filenameBugtrap (gamehack cn).dll
size770048 (0xbc000)
md510729b4e8d0426246cf6ff25905c427b
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavWin.Malware.Zusy-6840460-0 FOUND
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
1272913
14729943
109782188
11978286
19802244
19803421
10594
11816876
10816827
0031
617351
484471

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5f474fd5
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion6.0
SizeOfCode0x7e000
SizeOfInitializedData0x50000
SizeOfUninitializedData0
AddressOfEntryPoint0x5ff67
BaseOfCode0x1000
BaseOfData0x7f000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xcf000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 DLL (Debug)

Sections

namevavsizeraw sizeflags
.text0x10000x7d7720x7e000R-X CODE
.rdata0x7f0000x12cec0x13000R-- IDATA
.data0x920000x24a8c0x12000RW- IDATA
.rsrc0xb70000x57580x6000R-- IDATA
.reloc0xbd0000x112500x12000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x91ca00x4c
IMPORT0x8fa800x104
RESOURCE0xb70000x5758
EXCEPTION00
SECURITY00
BASERELOC0xbd0000x7450
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x7f0000x690
Delay_IAT00
CLR_Header00
typenamesizecp
TEXTINCLUDE#1110
TEXTINCLUDE#2220
TEXTINCLUDE#33370
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#41800
BITMAP#10315840
BITMAP#10383240
BITMAP#11383440
BITMAP#11393440
BITMAP#11403440
BITMAP#11413440
BITMAP#11423440
BITMAP#11433440
BITMAP#11443440
BITMAP#11453440
BITMAP#2656715080
BITMAP#309941840
BITMAP#309953640
BITMAP#309963240
ICON#17440
ICON#22960
ICON#32960
ICON#47440
ICON#516400
MENU#127120
MENU#10396440
DIALOG#1501520
DIALOG#2863780
DIALOG#5542500
DIALOG#10372340
DIALOG#108422220
DIALOG#11241780
DIALOG#11342040
DIALOG#11501780
DIALOG#307212260
DIALOG#307223960
STRING#3841800
STRING#3842440
STRING#38431200
STRING#38574520
STRING#38582980
STRING#38593260
STRING#3865640
STRING#38661000
STRING#38674720
STRING#38682760
STRING#3869360
GROUP_CURSOR#1032200
GROUP_CURSOR#1033200
GROUP_CURSOR#30977340
GROUP_ICONDEFAULT_ICON480
GROUP_ICON#1151200
GROUP_ICON#1152200
MANIFEST#14610
idlangstring
614402052打开
614412052保存为
614422052所有文件 (*.*)
614432052无标题
614462052一未命名文件
614572052隐藏(&H)
614722052得不到出错信息。
614732052试图执行系统不支持的操作。
614742052必需的资源无法得到。
614752052内存不足。
614762052出现了未知的错误
616962052无效的文件名。
616972052打开文档失败。
616982052保存文档失败。
616992052将改动保存到 %1？
617002052建立空文档失败。
617012052该文件太大，无法打开。
617022052无法启动打印作业。
617032052启动帮助失败。
617042052内部应用程序出错。
617052052命令失败。
617062052没有足够的内存执行操作。
617072052系统注册项已被移除并且相应的 INI 文件（假如存在）也被删除。
617082052不是所有的系统注册项（或 INI 文件）都被移除。
617092052在系统中没有找到此程序需要的文件%s。
617102052此程序连接到文件 %s 中丢失的输出 %s 。此机器可能有一个 %s 不兼容的版本。
617122052请键入一个整数。
617132052请键入一个数。
617142052“请填入一个在%1和%2之间的整数。”
617152052“请填入一个在%1和%2之间的数字。”
617162052“请填入不多于%1个的字符。”
617172052请选择一个按钮。
617182052“请填入一个在0和255之间的整数。”
617192052“请填入一个正整数。”
617202052“请填入一个日期和/或时间值。”
617212052“请填入一个货币值。”
617282052非预期的文件格式。
617292052无法找到该文件。 请验证给出的路径和文件名是否正确。
617302052目的磁盘驱动器已满。
617312052无法对 %1 进行读操作，它已经被其他人打开。
617322052无法对 %1 进行写操作，因为它是只读文件或已经被其他人打开。
617332052在对 %1 进行读操作时发生了一个非预期的错误。
617342052在对 %1 进行写操作时发生了一个非预期的错误。
618362052无法读只写特性。
618372052无法写只读特性。
618402052无法装入邮件系统支援。
618412052邮件系统 DLL 无效。
618422052传递邮件未能传递信息。
618562052无错误发生。
618572052在对 %1 进行访问时发生了一个不明错误。
618582052没有找到 %1。
618592052%1 中包含无效的路径。
618602052无法打开 %1 因为太多文件已被打开。
618612052对 %1 的存取被拒绝。
618622052一个无效的文件柄与 %1 相关联。
618632052无法删除 %1 因为它是当前目录。
618642052该目录已满，无法创建 %1。
618652052对 %1 进行查找失败。
618662052在存取 %1 时一个硬件输入/输出错误被报告。
618672052在存取 %1 时发生共享违例。
618682052在存取 %1 时发生锁违例。
618692052在存取 %1 时磁盘已满。
618702052试图越过其尾端对 %1 进行读写。
618722052无错误发生。
618732052在对 %1 进行访问时发生了一个不明错误。
618742052试图在对 %1 进行读操作的同时对其进行写操作。
618752052试图越过其尾端对 %1 进行读写。
618762052试图在对 %1 进行写操作的同时对其进行读操作。
618772052%1 格式错。
618782052%1 含有非预期的对象。
618792052%1 包含错误的模式。
618882052象素
module_namehintordfunction_name
KERNEL32.dll148FindFirstFileA
KERNEL32.dll403GlobalUnlock
KERNEL32.dll636SetStdHandle
KERNEL32.dll434IsBadCodePtr
KERNEL32.dll437IsBadReadPtr
KERNEL32.dll34CompareStringW
KERNEL32.dll33CompareStringA
KERNEL32.dll651SetUnhandledExceptionFilter
KERNEL32.dll342GetStringTypeW
KERNEL32.dll339GetStringTypeA
KERNEL32.dll144FindClose
KERNEL32.dll699VirtualAlloc
KERNEL32.dll448LCMapStringW
KERNEL32.dll447LCMapStringA
KERNEL32.dll610SetEnvironmentVariableA
KERNEL32.dll703VirtualFree
KERNEL32.dll411HeapCreate
KERNEL32.dll413HeapDestroy
KERNEL32.dll265GetEnvironmentVariableA
KERNEL32.dll264GetEnvironmentStringsW
KERNEL32.dll262GetEnvironmentStrings
KERNEL32.dll179FreeEnvironmentStringsW
KERNEL32.dll178FreeEnvironmentStringsA
KERNEL32.dll336GetStartupInfoA
KERNEL32.dll277GetFileType
KERNEL32.dll338GetStdHandle
KERNEL32.dll621SetHandleCount
KERNEL32.dll185GetACP
KERNEL32.dll419HeapSize
KERNEL32.dll670TerminateProcess
KERNEL32.dll283GetLocalTime
KERNEL32.dll349GetSystemTime
KERNEL32.dll368GetTimeZoneInformation
KERNEL32.dll523RaiseException
KERNEL32.dll559RtlUnwind
KERNEL32.dll305GetOEMCP
KERNEL32.dll191GetCPInfo
KERNEL32.dll325GetProcessVersion
KERNEL32.dll612SetErrorMode
KERNEL32.dll391GlobalFlags
KERNEL32.dll249GetCurrentThread
KERNEL32.dll71CreateSemaphoreA
KERNEL32.dll556ResumeThread
KERNEL32.dll550ReleaseSemaphore
KERNEL32.dll102EnterCriticalSection
KERNEL32.dll449LeaveCriticalSection
KERNEL32.dll331GetProfileStringA
KERNEL32.dll735WriteFile
KERNEL32.dll716WaitForMultipleObjects
KERNEL32.dll52CreateFileA
KERNEL32.dll613SetEvent
KERNEL32.dll163FindResourceA
KERNEL32.dll455LoadResource
KERNEL32.dll469LockResource
KERNEL32.dll536ReadFile
KERNEL32.dll292GetModuleFileNameA
KERNEL32.dll250GetCurrentThreadId
KERNEL32.dll125ExitProcess
KERNEL32.dll400GlobalSize
KERNEL32.dll392GlobalFree
KERNEL32.dll85DeleteCriticalSection
KERNEL32.dll426InitializeCriticalSection
KERNEL32.dll761lstrcatA
KERNEL32.dll776lstrlenA
KERNEL32.dll723WinExec
KERNEL32.dll770lstrcpyA
KERNEL32.dll157FindNextFileA
KERNEL32.dll399GlobalReAlloc
KERNEL32.dll415HeapFree
KERNEL32.dll418HeapReAlloc
KERNEL32.dll320GetProcessHeap
KERNEL32.dll409HeapAlloc
KERNEL32.dll278GetFullPathNameA
KERNEL32.dll180FreeLibrary
KERNEL32.dll450LoadLibraryA
KERNEL32.dll282GetLastError
KERNEL32.dll373GetVersionExA
KERNEL32.dll741WritePrivateProfileStringA
KERNEL32.dll74CreateThread
KERNEL32.dll49CreateEventA
KERNEL32.dll662Sleep
KERNEL32.dll385GlobalAlloc
KERNEL32.dll396GlobalLock
KERNEL32.dll276GetFileTime
KERNEL32.dll274GetFileSize
KERNEL32.dll676TlsGetValue
KERNEL32.dll463LocalReAlloc
KERNEL32.dll677TlsSetValue
KERNEL32.dll675TlsFree
KERNEL32.dll395GlobalHandle
KERNEL32.dll674TlsAlloc
KERNEL32.dll456LocalAlloc
KERNEL32.dll764lstrcmpA
KERNEL32.dll372GetVersion
KERNEL32.dll393GlobalGetAtomNameA
KERNEL32.dll383GlobalAddAtomA
KERNEL32.dll388GlobalFindAtomA
KERNEL32.dll387GlobalDeleteAtom
KERNEL32.dll767lstrcmpiA
KERNEL32.dll609SetEndOfFile
KERNEL32.dll686UnlockFile
KERNEL32.dll467LockFile
KERNEL32.dll170FlushFileBuffers
KERNEL32.dll618SetFilePointer
KERNEL32.dll247GetCurrentProcess
KERNEL32.dll99DuplicateHandle
KERNEL32.dll773lstrcpynA
KERNEL32.dll625SetLastError
KERNEL32.dll137FileTimeToLocalFileTime
KERNEL32.dll138FileTimeToSystemTime
KERNEL32.dll269GetFileAttributesA
KERNEL32.dll605SetCurrentDirectoryA
KERNEL32.dll460LocalFree
KERNEL32.dll484MultiByteToWideChar
KERNEL32.dll722WideCharToMultiByte
KERNEL32.dll429InterlockedDecrement
KERNEL32.dll432InterlockedIncrement
KERNEL32.dll375GetVolumeInformationA
KERNEL32.dll294GetModuleHandleA
KERNEL32.dll318GetProcAddress
KERNEL32.dll483MulDiv
KERNEL32.dll202GetCommandLineA
KERNEL32.dll365GetTickCount
KERNEL32.dll718WaitForSingleObject
KERNEL32.dll440IsBadWritePtr
KERNEL32.dll27CloseHandle
USER32.dll467OpenClipboard
USER32.dll242GetClipboardData
USER32.dll60CloseClipboard
USER32.dll547SetClipboardData
USER32.dll180EmptyClipboard
USER32.dll684wsprintfA
USER32.dll326GetSystemMetrics
USER32.dll252GetCursorPos
USER32.dll446MessageBoxA
USER32.dll603SetWindowPos
USER32.dll532SendMessageA
USER32.dll139DestroyCursor
USER32.dll574SetParent
USER32.dll399IsWindow
USER32.dll478PostMessageA
USER32.dll332GetTopWindow
USER32.dll309GetParent
USER32.dll263GetFocus
USER32.dll240GetClientRect
USER32.dll378InvalidateRect
USER32.dll666ValidateRect
USER32.dll657UpdateWindow
USER32.dll209EqualRect
USER32.dll348GetWindowRect
USER32.dll560SetForegroundWindow
USER32.dll141DestroyMenu
USER32.dll389IsChild
USER32.dll515ReleaseDC
USER32.dll398IsRectEmpty
USER32.dll212FillRect
USER32.dll253GetDC
USER32.dll550SetCursor
USER32.dll414LoadIconA
USER32.dll642TranslateMessage
USER32.dll168DrawFrameControl
USER32.dll165DrawEdge
USER32.dll166DrawFocusRect
USER32.dll681WindowFromPoint
USER32.dll298GetMessageA
USER32.dll149DispatchMessageA
USER32.dll581SetRectEmpty
USER32.dll502RegisterClipboardFormatA
USER32.dll83CreateIconFromResourceEx
USER32.dll82CreateIconFromResource
USER32.dll170DrawIconEx
USER32.dll88CreatePopupMenu
USER32.dll7AppendMenuA
USER32.dll452ModifyMenuA
USER32.dll87CreateMenu
USER32.dll70CreateAcceleratorTableA
USER32.dll257GetDlgCtrlID
USER32.dll322GetSubMenu
USER32.dll181EnableMenuItem
USER32.dll58ClientToScreen
USER32.dll197EnumDisplaySettingsA
USER32.dll416LoadImageA
USER32.dll625SystemParametersInfoA
USER32.dll618ShowWindow
USER32.dll400IsWindowEnabled
USER32.dll639TranslateAcceleratorA
USER32.dll274GetKeyState
USER32.dll64CopyAcceleratorTableA
USER32.dll480PostQuitMessage
USER32.dll403IsZoomed
USER32.dll231GetClassInfoA
USER32.dll132DefWindowProcA
USER32.dll284GetMenu
USER32.dll565SetMenu
USER32.dll476PeekMessageA
USER32.dll396IsIconic
USER32.dll559SetFocus
USER32.dll221GetActiveWindow
USER32.dll338GetWindow
USER32.dll137DestroyAcceleratorTable
USER32.dll604SetWindowRgn
USER32.dll300GetMessagePos
USER32.dll522ScreenToClient
USER32.dll56ChildWindowFromPointEx
USER32.dll68CopyRect
USER32.dll408LoadBitmapA
USER32.dll678WinHelpA
USER32.dll405KillTimer
USER32.dll594SetTimer
USER32.dll514ReleaseCapture
USER32.dll350GetWindowTextA
USER32.dll351GetWindowTextLengthA
USER32.dll47CharUpperA
USER32.dll340GetWindowDC
USER32.dll12BeginPaint
USER32.dll187EndPaint
USER32.dll627TabbedTextOutA
USER32.dll175DrawTextA
USER32.dll356GrayStringA
USER32.dll258GetDlgItem
USER32.dll142DestroyWindow
USER32.dll76CreateDialogIndirectParamA
USER32.dll185EndDialog
USER32.dll307GetNextDlgTabItem
USER32.dll347GetWindowPlacement
USER32.dll410LoadCursorA
USER32.dll264GetForegroundWindow
USER32.dll281GetLastActivePopup
USER32.dll301GetMessageTime
USER32.dll517RemovePropA
USER32.dll22CallWindowProcA
USER32.dll314GetPropA
USER32.dll646UnhookWindowsHookEx
USER32.dll578SetPropA
USER32.dll235GetClassLongA
USER32.dll21CallNextHookEx
USER32.dll610SetWindowsHookExA
USER32.dll89CreateWindowExA
USER32.dll291GetMenuItemID
USER32.dll290GetMenuItemCount
USER32.dll498RegisterClassA
USER32.dll319GetScrollPos
USER32.dll512RegisterWindowMessageA
USER32.dll2AdjustWindowRectEx
USER32.dll441MapWindowPoints
USER32.dll527SendDlgItemMessageA
USER32.dll526ScrollWindowEx
USER32.dll392IsDialogMessageA
USER32.dll606SetWindowTextA
USER32.dll457MoveWindow
USER32.dll52CheckMenuItem
USER32.dll569SetMenuItemBitmaps
USER32.dll295GetMenuState
USER32.dll286GetMenuCheckMarkDimensions
USER32.dll237GetClassNameA
USER32.dll255GetDesktopWindow
USER32.dll651UnregisterClassA
USER32.dll427LoadStringA
USER32.dll324GetSysColorBrush
USER32.dll228GetCapture
USER32.dll541SetCapture
USER32.dll320GetScrollRange
USER32.dll584SetScrollRange
USER32.dll583SetScrollPos
USER32.dll580SetRect
USER32.dll369InflateRect
USER32.dll377IntersectRect
USER32.dll140DestroyIcon
USER32.dll490PtInRect
USER32.dll466OffsetRect
USER32.dll402IsWindowVisible
USER32.dll183EnableWindow
USER32.dll497RedrawWindow
USER32.dll342GetWindowLongA
USER32.dll600SetWindowLongA
USER32.dll323GetSysColor
USER32.dll540SetActiveWindow
USER32.dll552SetCursorPos
GDI32.dll441RestoreDC
GDI32.dll461SetBkColor
GDI32.dll73CreateRectRgnIndirect
GDI32.dll495SetStretchBltMode
GDI32.dll283GetClipRgn
GDI32.dll71CreatePolygonRgn
GDI32.dll453SelectClipRgn
GDI32.dll83DeleteObject
GDI32.dll48CreateDIBitmap
GDI32.dll355GetSystemPaletteEntries
GDI32.dll66CreatePalette
GDI32.dll512StretchBlt
GDI32.dll456SelectPalette
GDI32.dll428RealizePalette
GDI32.dll292GetDIBits
GDI32.dll379GetWindowExtEx
GDI32.dll377GetViewportOrgEx
GDI32.dll380GetWindowOrgEx
GDI32.dll16BeginPath
GDI32.dll93EndPath
GDI32.dll405PathToRegion
GDI32.dll50CreateEllipticRgn
GDI32.dll74CreateRoundRectRgn
GDI32.dll361GetTextColor
GDI32.dll264GetBkMode
GDI32.dll263GetBkColor
GDI32.dll345GetROP2
GDI32.dll352GetStretchBltMode
GDI32.dll344GetPolyFillMode
GDI32.dll41CreateCompatibleBitmap
GDI32.dll43CreateDCA
GDI32.dll36CreateBitmap
GDI32.dll455SelectObject
GDI32.dll335GetObjectA
GDI32.dll68CreatePen
GDI32.dll404PatBlt
GDI32.dll30CombineRgn
GDI32.dll72CreateRectRgn
GDI32.dll168FillRgn
GDI32.dll77CreateSolidBrush
GDI32.dll351GetStockObject
GDI32.dll55CreateFontIndirectA
GDI32.dll92EndPage
GDI32.dll90EndDoc
GDI32.dll80DeleteDC
GDI32.dll508StartDocA
GDI32.dll511StartPage
GDI32.dll17BitBlt
GDI32.dll42CreateCompatibleDC
GDI32.dll88Ellipse
GDI32.dll431Rectangle
GDI32.dll386LPtoDP
GDI32.dll78DPtoLP
GDI32.dll286GetCurrentObject
GDI32.dll442RoundRect
GDI32.dll366GetTextExtentPoint32A
GDI32.dll293GetDeviceCaps
GDI32.dll448SaveDC
GDI32.dll462SetBkMode
GDI32.dll491SetPolyFillMode
GDI32.dll492SetROP2
GDI32.dll499SetTextColor
GDI32.dll482SetMapMode
GDI32.dll502SetViewportOrgEx
GDI32.dll396OffsetViewportOrgEx
GDI32.dll373GetTextMetricsA
GDI32.dll149Escape
GDI32.dll158ExtTextOutA
GDI32.dll517TextOutA
GDI32.dll430RectVisible
GDI32.dll426PtVisible
GDI32.dll376GetViewportExtEx
GDI32.dll157ExtSelectClipRgn
GDI32.dll388LineTo
GDI32.dll392MoveToEx
GDI32.dll152ExcludeClipRect
GDI32.dll282GetClipBox
GDI32.dll450ScaleWindowExtEx
GDI32.dll505SetWindowExtEx
GDI32.dll506SetWindowOrgEx
GDI32.dll449ScaleViewportExtEx
GDI32.dll501SetViewportExtEx
WINMM.dll185waveOutPause
WINMM.dll99midiStreamRestart
WINMM.dll93midiStreamClose
WINMM.dll89midiOutReset
WINMM.dll100midiStreamStop
WINMM.dll95midiStreamOut
WINMM.dll88midiOutPrepareHeader
WINMM.dll98midiStreamProperty
WINMM.dll94midiStreamOpen
WINMM.dll92midiOutUnprepareHeader
WINMM.dll184waveOutOpen
WINMM.dll178waveOutGetNumDevs
WINMM.dll172waveOutClose
WINMM.dll187waveOutReset
WINMM.dll193waveOutWrite
WINMM.dll186waveOutPrepareHeader
WINMM.dll192waveOutUnprepareHeader
WINSPOOL.DRV28ClosePrinter
WINSPOOL.DRV71DocumentPropertiesA
WINSPOOL.DRV124OpenPrinterA
ADVAPI32.dll378RegQueryValueA
ADVAPI32.dll347RegCloseKey
ADVAPI32.dll370RegOpenKeyExA
ADVAPI32.dll390RegSetValueExA
ADVAPI32.dll351RegCreateKeyExA
SHELL32.dll121Shell_NotifyIconA
SHELL32.dll114ShellExecuteA
ole32.dll224OleUninitialize
ole32.dll6CLSIDFromString
ole32.dll201OleInitialize
OLEAUT32.dll186
OLEAUT32.dll163
OLEAUT32.dll161
COMCTL32.dll34ImageList_Destroy
COMCTL32.dll17
WS2_32.dll10
WS2_32.dll16
WS2_32.dll5
WS2_32.dll12
WS2_32.dll17
WS2_32.dll1
WS2_32.dll116
WS2_32.dll3
WS2_32.dll101
comdlg32.dll7GetFileTitleA
comdlg32.dll11GetSaveFileNameA
comdlg32.dll9GetOpenFileNameA
comdlg32.dllChooseColorA
ordentry_vafunction_name
10x42d3A
20x42c7B
module_nameBugtrap.dll
flags0
timestamp2020-08-27 06:16:53
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x91cd0
Functions(2)0x91cc8
NameOrdinals(2)0x91cd8
offsetsizetypecomment
0770048DLL08/27/2020 06:16:53#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK