a2fad0f042459749b8a8a8b56f5fbc7a68944b7b348aa732259527a4ab51872b

Sharing

Copy URL Twitter E-mail

General

Target

a2fad0f042459749b8a8a8b56f5fbc7a68944b7b348aa732259527a4ab51872b
Size

4.3MB
MD5

fd6d0493b91bdc89d08807ccb6f347d9
SHA1

08621e6cc266336502985824d6dc622c60c562fc
SHA256

a2fad0f042459749b8a8a8b56f5fbc7a68944b7b348aa732259527a4ab51872b
SHA512

eb4c8e8d4282ceec39f6c38c09e191664bc888961456eb112559050ff25a6900652a87a3a41e4856bd9cd1787148e57a8accf7eb3f46ccfb9117646876fe6f7e
SSDEEP

49152:OG+tiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeA:zF4eRSfMXsLhOdvDR3gd342D

Score

N/A

Malware Config

Signatures

Files

a2fad0f042459749b8a8a8b56f5fbc7a68944b7b348aa732259527a4ab51872b
.dll regsvr32 windows x86

b6c6c9469e75014eb05f485daa314406

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

common

?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??1CTXStringA@@QAE@XZ
??BCTXStringA@@QBEPBDXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??0CTXStringW@@QAE@H@Z
??0CTXStringA@@QAE@XZ
?ReleaseBuffer@CTXStringA@@QAEXH@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?Compare@CTXStringA@@QBEHPBD@Z
??0CTXStringA@@QAE@DH@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
??0CTXStringA@@QAE@ABV0@@Z
?Find@CTXStringA@@QBEHPBDH@Z
??0CTXStringA@@QAE@PBDH@Z
?Left@CTXStringA@@QBE?AV1@H@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
??0CTXStringA@@QAE@PBD@Z
?GetLength@CTXStringA@@QBEHXZ
?Mid@CTXStringA@@QBE?AV1@HH@Z
?Delete@CTXStringA@@QAEHHH@Z
?Find@CTXStringA@@QBEHDH@Z
??YCTXStringA@@QAEAAV0@D@Z
??ACTXStringA@@QBEDH@Z
??4CTXStringA@@QAEAAV0@PBD@Z
?MakeLower@CTXStringA@@QAEAAV1@XZ
??YCTXStringA@@QAEAAV0@ABV0@@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??1CTXCommPack@@UAE@XZ
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddByte@CTXCommPack@@QAEHE@Z
??0CTXCommPack@@QAE@XZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
ord26
??YCTXStringW@@QAEAAV0@PB_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?AddWord@CTXCommPack@@QAEHGH@Z
??0CTXBSTR@@QAE@ABV0@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?Format@CTXStringA@@QAAXPBDZZ
??H@YA?AVCTXStringA@@ABV0@0@Z
?Trim@CTXStringA@@QAEAAV1@D@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeArrayTXDataBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
ord25
?GetTLV@CTXCommPack@@QAEHAAEAAVCTXBuffer@@W4TXCommPackDataType@@H@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeSkipAll@CCmdCodecBase@@IAEXXZ
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
ord9
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?DecodeArrayStringLenHead@CCmdCodecBase@@IAEXW4CMDFIELDTYPE@@@Z
?SetBufferIn@CTXCommPack@@QAEXPBEIH@Z
?DecodeArrayTXDataBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?GetBuf@CTXCommPack@@QAEHPAEHH@Z
?DecodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayTXDataBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?JumpBuf@CTXCommPack@@QAEHH@Z
?GetBufferByteLeft@CTXCommPack@@QBEHXZ
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?CodeArrayTXDataBuffer@CCmdCodecBase@@IAEXPB_W@Z
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
?ChangeConfig@CCmdCodecBase@@IAEXHH@Z
?CodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
ord33
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?Length@CTXBSTR@@QBEIXZ
??9@YA_NABVCTXStringW@@0@Z
??8@YA_NABVCTXStringW@@0@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?Replace@CTXStringW@@QAEHPB_W0@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??0CTXBSTR@@QAE@H@Z
?GetString@CTXCommPack@@QAEHAAVCTXStringW@@HHH@Z
?GetTencentProductName@ProductConfig@Util@@YAHAAVCTXStringW@@@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?GetLCID@NLS@@YAKXZ
?Trim@CTXStringW@@QAEAAV1@XZ
ord34
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetIEProxySetting@Network@Util@@YAHPAUITXData@@AAE@Z
?IsNetConnectionOK@Network@Util@@YAHPAHPAKPAPA_W@Z
?AddUInt64@CTXCommPack@@QAEH_KH@Z
?AddStrW@CTXCommPack@@QAEHABVCTXStringW@@@Z
?Append@CTXStringW@@QAEXPB_WH@Z
?GetUInt64@CTXCommPack@@QAEHAA_KHH@Z
?GetTLV@CTXCommPack@@QAEHAAKAAVCTXBuffer@@W4TXCommPackDataType@@H@Z
?AddTLV@CTXCommPack@@QAEHKABVCTXBuffer@@W4TXCommPackDataType@@@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetBuf@CTXCommPack@@QAEHPAPBEHH@Z
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??0CFmtString@@QAE@XZ
??0CTXStringW@@QAE@PB_WH@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?TXAssert@@YAXPB_WPAD0H@Z
?CreateChannel@Connection@Util@@YAJHPAPAUITXChannel@@@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
??0CTXStringW@@QAE@PA_W@Z
?GetLength@CTXStringW@@QBEHXZ
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
?Copy@CTXBSTR@@QBEPA_WXZ
?IPToString@Network@Util@@YA?AVCTXStringW@@K@Z
?Random@Sys@Util@@YAHXZ
??8CTXBSTR@@QBE_NABV0@@Z
??YCTXStringW@@QAEAAV0@_W@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?Right@CTXStringW@@QBE?AV1@H@Z
?Replace@CTXStringW@@QAEH_W0@Z
?DeleteDirectory@FS@@YAHPB_W@Z
?RemoveFileSystem@FS@@YAHPB_W@Z
?AddToDeadQueue@Misc@Util@@YAXHP6AXXZ@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??8CTXBSTR@@QBE_NPA_W@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??ACTXStringW@@QBE_WH@Z
?GetTencentRootName@ProductConfig@Util@@YAHAAVCTXStringW@@@Z
?GetSpecialFolderPath@Sys@Util@@YAHHAAVCTXBSTR@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?AllocSysString@CTXStringW@@QBEPA_WXZ
?Detach@CTXBSTR@@QAEPA_WXZ
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
??1CTXThreadModel@@MAE@XZ
??0CTXThreadModel@@IAE@XZ
?StopThread@CTXThreadModel@@QAEXK@Z
?StartThread@CTXThreadModel@@QAEHXZ
?CreateUDP@Network@Util@@YAHHPAPAUITXUDP@@@Z
?UnicodeToGBK@Convert@Util@@YA_NAAVCTXStringA@@PB_WH@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?Mid@CTXStringW@@QBE?AV1@H@Z
ord35
?GetString@CTXStringW@@QBEPB_WXZ
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Empty@CTXStringW@@QAEXXZ
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
??9CTXBSTR@@QBE_NPB_W@Z
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetHostByName@HostResolve@Util@@YAJPA_WPAPA_W@Z
?StringToIP@Network@Util@@YAKPB_W@Z
?GetCore@CoreCenter@Util@@YAHPA_WPAPAUITXCore@@@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
?GetLCID@TXI18N@@YAKXZ
?GetLoginServerTime@Time@Util@@YAKXZ
??8CTXBSTR@@QBE_NPB_W@Z
?SetAsyncCallback@TXTimer@@YAHP6GXPAX@Z0@Z
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?TrimRight@CTXStringW@@QAEAAV1@XZ
?Delete@CTXStringW@@QAEHHH@Z
?Find@CTXStringW@@QBEH_WH@Z
?TrimLeft@CTXStringW@@QAEAAV1@PB_W@Z
?EncodeHash@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetString@CTXStringA@@QBEPBDXZ
?IsThreadRunning@CTXThreadModel@@IAEHXZ
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?QueryInfo@CTXHttpDownload@@QAEHABVCTXStringW@@AAK@Z
?GetRawResponseHeader@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?QueryInfo@CTXHttpDownload@@QAEHABVCTXStringW@@AAV2@H@Z
??1CTXHttpDownload@@UAE@XZ
??1CTXHttpDownloadSink@@UAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??0CTXHttpDownload@@QAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?IsFileSystemFile@FS@@YAHPB_W@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?UploadFormData@CTXHttpDownload@@QAEHPB_W00@Z
?AddFormData@CTXHttpDownload@@QAEXABVCTXStringW@@0@Z
?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
?SetWithCookie@CTXHttpDownload@@QAEXH@Z
?ClearRequestHeader@CTXHttpDownload@@QAEXXZ
?ResetFormData@CTXHttpDownload@@QAEXXZ
?CopyFileW@FS@@YAHPB_W0H@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?IsFileExist@FS@@YAHPB_W@Z
?Empty@CTXBSTR@@QAEXXZ
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddBufLenByte@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddStrA@CTXCommPack@@QAEHABVCTXStringA@@@Z
?AddTLV@CTXCommPack@@QAEHEABVCTXBuffer@@W4TXCommPackDataType@@@Z
??0CTXStringW@@QAE@ABU_GUID@@@Z
?IsInFullScreen@WinScreenStatus@Util@@YAHPAPAUHWND__@@PAH1PAKPAPA_W1@Z
??9CTXBSTR@@QBE_NABV0@@Z
?IsEmpty@CTXStringA@@QBE_NXZ
?GetBuffer@CTXStringA@@QAEPADXZ
ord32
?SetBugReportUin@TXBugReport@@YAXK@Z
?MinimzeMemory@Sys@Util@@YAXXZ
?SetIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z
?CreateConnectTCPForProxyValidate@Network@Util@@YAHW4TX_PROXY_TYPE@@PAPAUITXConnectTCP@@@Z
?CreateUDPForProxyValidate@Network@Util@@YAHW4TX_PROXY_TYPE@@PAPAUITXUDP@@@Z
??1Big@@QAE@XZ
??4Big@@QAEAAV0@ABV0@@Z
?from_binary@@YA?AVBig@@HPAD@Z
??0Big@@QAE@XZ
??1CEcdsa@@QAE@XZ
?QQVerify@CEcdsa@@QAE_NABUCPublicKey@@PBEHABUCSignature@@@Z
??0CEcdsa@@QAE@W4ECCBIT@eccparam@@@Z
ord29
?HttpRequestToBuffer@CTXHttpDownload@@QAEHPB_WW4HTTPMETHOD@1@PAEI@Z
?GetDownloadedBuffer@CTXHttpDownload@@QAEHPAPAEPAK@Z
?CodeArrayStringLenHead@CCmdCodecBase@@IAEXW4CMDFIELDTYPE@@@Z
?GetDecodeNumberSigned@CCmdCodecBase@@IAEHPB_W@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?CreateDirectoryW@FS@@YAHPB_W@Z
??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?RenameFile@FS@@YAHPB_W0@Z
?IsDirectoryExist@FS@@YAHPB_W@Z
??7CTXStringW@@QBE_NXZ
?UploadFormData@CTXHttpDownload@@QAEHPB_W0PAEI0@Z
??9@YA_NPB_WABVCTXStringW@@@Z
ord30
?GetBuffer@CTXStringW@@QAEPA_WXZ
??0CTXStringW@@QAE@ABV0@@Z
??M@YA_NABVCTXStringW@@0@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?RecordTransBegin@Perf@Util@@YA_JPB_WHH00@Z
??0CTXStringW@@QAE@PB_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??0CTXStringW@@QAE@XZ
?Format@CTXStringW@@QAAXPB_WZZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??1CTXStringW@@QAE@XZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?Record@Perf@Util@@YAJPB_WHH00@Z
??0CTXBSTR@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??1CCmdCodecBase@@UAE@XZ
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
??9@YA_NABVCTXStringW@@_W@Z
??0CCmdCodecBase@@QAE@XZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?AddBuf@CTXCommPack@@QAEHPBEI@Z
?TXAssert@@YAXPB_W0H@Z

qtcommon

?RealTimeGetValue@Report@Util@@YAKKH@Z
?GetNetBarMgrProc@Misc@QTCommon@@YA?AVCTXStringW@@XZ
_GetDownloadObj@0
?SetRoomID@Report@Util@@YAJKK@Z
?StartReport@Report@Util@@YAHK@Z
?SetVersion@Report@Util@@YAJEEK@Z
?SetMsgTime@Msg@QTCommon@@YAXPAUITXMsgPack@@_J@Z
?GetConfigBuf@Config@QTCommon@@YAHPA_WH00PAPAUITXBuffer@@@Z
?SaveConfigBuf@Config@QTCommon@@YAHPA_WH00PAUITXBuffer@@@Z
?TranslateHotKeyPrefixCodeToString@Misc@QTCommon@@YA?AVCTXStringW@@KK@Z
?TranslateMouseToString@Misc@QTCommon@@YA?AVCTXStringW@@W4enum_mouse@@@Z
?TranslateHotKeyCodeToString@Misc@QTCommon@@YA?AVCTXStringW@@K@Z
?OpenUrlWithDefBrowser@Misc@QTCommon@@YAXABVCTXStringW@@@Z
?CheckUinValid@Misc@QTCommon@@YAHPA_W@Z
?RealTimeIncValue@Report@Util@@YAXKHK@Z
?SetValue@Report@Util@@YAXKHK@Z
?SetPort@Report@Util@@YAJG@Z
?RealTimeStartReport@Report@Util@@YAHK@Z
?IsYYExist@Report@Util@@YAHXZ
?GetProfileIntW@Profile@Config@QTCommon@@YAHPB_W0H@Z
?SaveConfigData@Config@QTCommon@@YAHPA_WH00PAUITXData@@@Z
?LogTXData@Misc@QTCommon@@YA?AVCTXStringW@@PAUITXData@@@Z
?IsEmailAccount@Misc@QTCommon@@YAHAAVCTXStringW@@@Z
?GetProfileStringW@Profile@Config@QTCommon@@YA?AVCTXStringW@@PB_W00@Z
?RemoveSpecialChar@Misc@QTCommon@@YA?AVCTXBSTR@@AAV3@@Z
?GetConfigValue@Config@QTCommon@@YAHPA_WH00HPAX@Z
?GetConfigArray@Config@QTCommon@@YAHPA_WH00PAPAUITXArray@@@Z
?GetConfigData@Config@QTCommon@@YAHPA_WH00PAPAUITXData@@@Z
?RealTimeSetValue@Report@Util@@YAXKHK@Z
?GetTimePassed@Misc@QTCommon@@YAKKK@Z
?SaveConfigArray@Config@QTCommon@@YAHPA_WH00PAUITXArray@@@Z
?SetConfigValue@Config@QTCommon@@YAHPA_WH00HPAX@Z

tinyxml

??1TiXmlDocument@@UAE@XZ
?LoadXML@TiXmlDocument@@QAE_NPADHW4TiXmlEncoding@@@Z
??0TiXmlDocument@@QAE@XZ
?GetText@TiXmlElement@@QBEPBDXZ
?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ
?FirstChild@TiXmlNode@@QAEPAV1@PBD@Z

sqlite3

sqlite3_get_table
sqlite3_prepare
sqlite3_bind_blob
sqlite3_step
sqlite3_finalize
sqlite3_exec
sqlite3_close
sqlite3_column_blob
sqlite3_column_int
sqlite3_errmsg
sqlite3_open16
sqlite3_column_bytes

pptmodule

ExportPPT

igmagent

?GetRoomAgent@InGameMode@Util@@YAPAVIRoomAgent@@XZ

kernel32

HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
HeapDestroy
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLocaleInfoA
GetACP
InterlockedCompareExchange
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
GetVolumeInformationW
DeviceIoControl
CloseHandle
CreateFileW
FreeLibrary
CreateProcessW
GetProcAddress
ReadFile
DuplicateHandle
GetCurrentProcess
CreatePipe
GetPrivateProfileIntW
LoadLibraryW
OpenMutexW
CreateMutexW
GetCurrentProcessId
Sleep
GetFileSize
WideCharToMultiByte
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetDiskFreeSpaceExW
GetSystemDirectoryW
GetFileAttributesW
GetVersionExW
WritePrivateProfileStringW
GetPrivateProfileStringW
CreateDirectoryW
GetLocalTime
TerminateThread
CreateThread
FlushInstructionCache
SetLastError
GlobalAddAtomW
GlobalDeleteAtom
VerifyVersionInfoW
VerSetConditionMask
OpenProcess
InterlockedExchange
WriteFile
CopyFileW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WaitForSingleObject
SetEvent
CreateEventW
ReleaseMutex
OpenFileMappingW
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualProtectEx
GetThreadContext
SuspendThread
GetModuleHandleA
LoadLibraryA
TerminateProcess
GetProcessTimes
GetSystemTimeAsFileTime
lstrcmpW
GetVersionExA

user32

RegisterClassExW
GetClassInfoExW
SendMessageTimeoutW
RegisterWindowMessageW
GetPropW
SetPropW
RemovePropW
wsprintfW
RegisterClassW
KillTimer
SetTimer
GetClassNameW
ShowWindow
CallWindowProcW
GetWindowLongW
RegisterHotKey
UnregisterHotKey
DefWindowProcW
DestroyWindow
SetWindowLongW
SetWindowsHookExW
GetMessageW
DispatchMessageW
TranslateMessage
CallNextHookEx
UnhookWindowsHookEx
GetSystemMetrics
GetAsyncKeyState
IsWindow
PostQuitMessage
GetDesktopWindow
SetWindowPos
CreateWindowExW
PostMessageW
CharNextW
FindWindowW
UnregisterClassA
UpdateWindow
LoadCursorW

gdi32

GetStockObject

advapi32

RegOpenKeyW
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW

shell32

SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFileInfoW

ole32

CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoCreateInstance

oleaut32

SysAllocString
DispCallFunc
VariantInit
VariantClear
SysFreeString
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi

atl80

ord32
ord18
ord22
ord64
ord23
ord61
ord30
ord58
ord31
ord10
ord42
ord47
ord48
ord41
ord43
ord44
ord15

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
PathAppendW

msvcp80

??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
_Nan
_Inf
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
_FNan
_FInf
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIABV12@@Z

msvcr80

??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??_V@YAXPAX@Z
_recalloc
_purecall
__CxxFrameHandler3
_time64
swprintf_s
_CxxThrowException
memset
??3@YAXPAX@Z
memcpy_s
malloc
wcscpy_s
wcsncpy_s
memmove_s
_snprintf
_snwprintf
strncpy
memcpy
strtoul
_wtoi
wcsncpy
rand
srand
_wcsdup
wcsrchr
wcschr
_snwprintf_s
__wargv
__argc
memmove
strncat
_wcsicmp
printf
ldiv
fflush
fprintf
__iob_func
_strtoi64
_strtoui64
strtol
strchr
sprintf
_errno
strtod
__RTDynamicCast
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_strdup
_getpid
??2@YAPAXI@Z

winmm

timeGetTime

netapi32

Netbios

rpcrt4

RpcStringFreeW
UuidToStringW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

ws2_32

setsockopt
recvfrom
ioctlsocket
__WSAFDIsSet
select
WSAGetLastError
WSACleanup
gethostbyname
WSAStartup

psapi

GetModuleFileNameExW
EnumProcessModules
GetProcessMemoryInfo

Exports

Exports

?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z
?AddRight@Rule@Util@@YAHAAUtagUserType@DataTypeID@@K@Z
?AddRoomAdm@Room@Util@@YAXABVROOM_HANDLE@@KPAUITXData@@@Z
?AddSubRoom@Room@Util@@YAXKK@Z
?AdjustFormat@URL@Util@@YA?AVCFmtString@@W4URLMODIFYLEVEL@12@@Z
?AdjustUrl@URL@Util@@YA?AVCTXStringW@@ABV3@W4URLMODIFYLEVEL@12@0@Z
?AysnDestroy@MVC_COMPONENT@@YAXPB_WABVROOM_HANDLE@@@Z
?AysnDestroy@MVC_KERNEL@@YAXPB_WKABVROOM_HANDLE@@@Z
?CanEnterRoomFreely@Rule@Util@@YAHUtagUserType@DataTypeID@@K@Z
?CanMemberOption@Rule@Util@@YAHUtagUserType@DataTypeID@@@Z
?CancelSendDataToDirServer@Network@Util@@YAJPAUITXNetSendSink@@@Z
?CancelSendDataToRoomServer@Network@Util@@YAJPAUITXNetSendSink@@ABVROOM_HANDLE@@@Z
?Clean@Room@Util@@YAXXZ
?CompareLevel@Rule@Util@@YAHKK@Z
?CompareLevel@Rule@Util@@YAHUtagUserType@DataTypeID@@0@Z
?CompareLevel@Rule@Util@@YAHUtagUserType@DataTypeID@@K@Z
?Create@MVC_COMPONENT@@YAPAVIMVCModule@@PB_WABVROOM_HANDLE@@@Z
?Create@MVC_KERNEL@@YAPAVIMVCModule@@PB_WKABVROOM_HANDLE@@@Z
?CreateSubRoom@Rule@Util@@YAHUtagUserType@DataTypeID@@K@Z
?DelSubRoom@Rule@Util@@YAHUtagUserType@DataTypeID@@K@Z
?Destroy@MVC_COMPONENT@@YAXPB_WABVROOM_HANDLE@@@Z
?Destroy@MVC_KERNEL@@YAXPB_WKABVROOM_HANDLE@@@Z
?DomainToIP@Network@Util@@YAKPA_W@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUIConfigCache@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUIGuildHomeService@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUIHeartService@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUILiveVideoService@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUIMicOrder@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUIQQGroupService@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUITXAudioEngine@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUITXVideoEngine@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUIVoteMgr@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHKPAPAUIGuildHomeService@@@Z
?GET_ROOM_OBJECT@Contact@Util@@YAHKPAPAUILiveVideoService@@@Z
?G_DestroyManager@MVC_KERNEL@@YAJXZ
?G_GetManager@MVC_KERNEL@@YAJPAPAVIMVCModuleManager@@@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?Get@MVC_COMPONENT@@YAPAVIMVCModule@@PB_WABVROOM_HANDLE@@@Z
?Get@MVC_KERNEL@@YAPAVIMVCModule@@PB_WKABVROOM_HANDLE@@@Z
?GetAccountInfo@Account@Util@@YAXKPAPAUITXDataRead@@@Z
?GetAccountName@Account@Util@@YA?AVCTXStringW@@K@Z
?GetAccountType@Account@Util@@YAEK@Z
?GetAccountValue@Account@Util@@YA?AVCTXStringW@@K@Z
?GetAppID@Contact@Util@@YAKXZ
?GetAsyncMainBtnStateByLogicalJudge@Misc@Util@@YAHXZ
?GetAudioEngineConfig@AudioChannel@Room@Util@@YA?AUAUDIO_ENGINE_CONFIG@123@XZ
?GetAudioHookDllPath@Contact@Util@@YA?AVCTXStringW@@XZ
?GetAvailablePort@Network@Util@@YAGKH@Z
?GetBuildVer@Version@@YAKXZ
?GetChatRoom@Contact@Util@@YAHABVROOM_HANDLE@@PAPAUITXChatRoom@@@Z
?GetChatRoom@Contact@Util@@YAHKPAPAUITXChatRoom@@@Z
?GetChatRoomHandle@Room@Util@@YAHKAAVROOM_HANDLE@@@Z
?GetClientType@Version@@YAKXZ
?GetConfigVersion@AudioChannel@Room@Util@@YAIXZ
?GetCurAudioEngineVersion@Contact@Util@@YAKH@Z
?GetCurrentProxyType@Network@Util@@YAEXZ
?GetCurrentRoomID@Contact@Util@@YAKVROOM_HANDLE@@@Z
?GetCurrentRooms@Contact@Util@@YA?AV?$vector@KV?$allocator@K@std@@@std@@XZ
?GetCusNumFmt@URL@Util@@YAXAAVCFmtString@@K@Z
?GetDirServerIP@Network@Util@@YAKKH@Z
?GetEmbedModePipeName@CommandLine@Util@@YA?AVCTXStringW@@XZ
?GetErrorTipsMessage@Sys@Util@@YA?AVCTXStringW@@H@Z
?GetErrorTipsMessage@Sys@Util@@YA?AVCTXStringW@@PAUITXData@@G@Z
?GetErrorTipsMessageTimeout@Sys@Util@@YA?AVCTXStringW@@PAUITXData@@PAG@Z
?GetGameID@RoomHandleInfo@Util@@YAHABVROOM_HANDLE@@PAK@Z
?GetGlobalDataDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetGlobalDataPublicDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetGlobalDataUsersDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetGlobalSysDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetGlobalSysIMDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetGlobalSysUsersDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetGoToVipWebNo@CommandLine@Util@@YAHAAK@Z
?GetHookCommunicateID@Misc@Util@@YAXAAKVROOM_HANDLE@@@Z
?GetISP@Network@Util@@YA?AW4ISP@12@XZ
?GetKBNum@Version@@YAKXZ
?GetKeyFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetLangFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetLastErrorStr@Contact@Util@@YA?AVCTXStringW@@XZ
?GetLastUsedMode@Misc@Util@@YAXPAUIConfigCache@@PAW4SpeakMode@SysConfig@@@Z
?GetLoginKeyBuffer@Misc@Util@@YAHAAVCTXBuffer@@@Z
?GetLoginKeyBufferEx@Misc@Util@@YAHVROOM_HANDLE@@AAVCTXBuffer@@@Z
?GetLoginSTBuffer@Misc@Util@@YAHAAVCTXBuffer@@@Z
?GetMainID@Room@Util@@YAKK@Z
?GetMajorVer@Version@@YAEXZ
?GetMinorVer@Version@@YAEXZ
?GetMyProfileDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetNextOrderID@Room@Util@@YAGK@Z
?GetNoAutoLogin@CommandLine@Util@@YAHXZ
?GetProgramBinDir@Sys@Util@@YA?AVCTXStringW@@V3@@Z
?GetProgramRootDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetPubNo@Version@@YAKXZ
?GetRandFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetRecommandType@SpecialRoom@Room@Util@@YAHPAPAUITXArray@@@Z
?GetResendCount@AudioChannel@Room@Util@@YAIXZ
?GetResendRange@AudioChannel@Room@Util@@YAIXZ
?GetRoomAdm@Room@Util@@YAXKKPAUITXData@@@Z
?GetRoomAdms@Room@Util@@YAXKPAUITXArray@@@Z
?GetRoomCType@Room@Util@@YAEK@Z
?GetRoomIDEXFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetRoomIDFmt@URL@Util@@YAXAAVCFmtString@@K@Z
?GetRoomIDsFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetRoomMemObj@Contact@Util@@YAHKPAPAUIRoomMem@@@Z
?GetRoomMember@Contact@Util@@YAPAVIRoomMember@@ABVROOM_HANDLE@@@Z
?GetRoomMember@Contact@Util@@YAPAVIRoomMember@@K@Z
?GetRoomMemberName@Contact@Util@@YA?AVCTXStringW@@ABVROOM_HANDLE@@KK@Z
?GetRoomMembers@Room@Util@@YAPBV?$map@VCUinSec@@PAUMEMBER_INFO@@U?$less@VCUinSec@@@std@@V?$allocator@U?$pair@$$CBVCUinSec@@PAUMEMBER_INFO@@@std@@@4@@std@@VROOM_HANDLE@@K@Z
?GetRoomMicOrderMgr@Contact@Util@@YAHKPAPAUIMicOrder@@@Z
?GetRoomObj@Contact@Util@@YAHKPAPAUIRoom@@@Z
?GetRoomType@Misc@Util@@YAHVROOM_HANDLE@@@Z
?GetRoomUsers@Room@Util@@YAXVROOM_HANDLE@@KPAUITXArray@@@Z
?GetSaveNameByTid@DataTypeID@@YA?AVCTXStringW@@H@Z
?GetSelfAccountName@Account@Util@@YA?AVCTXStringW@@XZ
?GetSelfMemberName@Room@Util@@YA?AVCTXStringW@@K@Z
?GetSelfName@Contact@Util@@YA?AVCTXStringW@@XZ
?GetSelfNameFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetSelfRightType@Contact@Util@@YA?AUtagUserType@DataTypeID@@ABVROOM_HANDLE@@K@Z
?GetSelfRoomRight@Member@Util@@YA?AUtagUserType@DataTypeID@@ABVROOM_HANDLE@@K@Z
?GetSelfUin@Contact@Util@@YAKXZ
?GetServerConfig2Array@Config@Util@@YAXPB_WPAPAUITXArray@@@Z
?GetServerConfigInt@Config@Util@@YAHPB_W0H@Z
?GetServerConfigStr@Config@Util@@YA?AVCTXStringW@@PB_W00@Z
?GetShowID@Room@Util@@YA?AVCTXStringW@@K@Z
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetSpeakKey@Misc@Util@@YAXPAUIConfigCache@@PAK@Z
?GetSpeakMode@Misc@Util@@YAXPAUIConfigCache@@PAW4SpeakMode@SysConfig@@@Z
?GetSpeakMouse@Misc@Util@@YAXPAUIConfigCache@@PAW4enum_mouse@@@Z
?GetStartupAccount@CommandLine@Util@@YA?AVCTXStringW@@XZ
?GetStartupAppID@CommandLine@Util@@YAKXZ
?GetStartupBusinessType@CommandLine@Util@@YAKXZ
?GetStartupExtParam@CommandLine@Util@@YAHVCTXStringW@@AAV3@@Z
?GetStartupGameID32@CommandLine@Util@@YAKXZ
?GetStartupGameID@CommandLine@Util@@YA_JXZ
?GetStartupGameST@CommandLine@Util@@YA?AVCTXStringW@@XZ
?GetStartupMiniQTInfo@CommandLine@Util@@YA?AVCTXStringW@@XZ
?GetStartupParaDW@CommandLine@Util@@YAKVCTXStringW@@@Z
?GetStartupParaStr@CommandLine@Util@@YA?AVCTXStringW@@V3@@Z
?GetStartupPromoter@CommandLine@Util@@YAKXZ
?GetStartupQTAppID@CommandLine@Util@@YAKXZ
?GetStartupQTBusinessType@CommandLine@Util@@YAKXZ
?GetStartupQTExtParam@CommandLine@Util@@YAHVCTXStringW@@AAV3@@Z
?GetStartupQTPara@CommandLine@Util@@YAKVCTXStringW@@0@Z
?GetStartupQTPara_String@CommandLine@Util@@YAHVCTXStringW@@0AAV3@@Z
?GetStartupQTRoomID@CommandLine@Util@@YAKXZ
?GetStartupQTSubRoomID@CommandLine@Util@@YAKXZ
?GetStartupQTVipWebPara@CommandLine@Util@@YAKXZ
?GetStartupQTVipno@CommandLine@Util@@YAKXZ
?GetStartupReportData@CommandLine@Util@@YAHVCTXStringW@@AAV3@@Z
?GetStartupRoomID@CommandLine@Util@@YAKXZ
?GetStartupSelRoomID@CommandLine@Util@@YAHXZ
?GetStartupSelVipWebPara@CommandLine@Util@@YAKXZ
?GetStartupSubRoomID@CommandLine@Util@@YAKXZ
?GetStartupType@CommandLine@Util@@YAHXZ
?GetStartupUI@CommandLine@Util@@YAHXZ
?GetStartupUin@CommandLine@Util@@YAKXZ
?GetStartupVipno@CommandLine@Util@@YAKXZ
?GetSubRooms@Room@Util@@YAXKPAUITXArray@@@Z
?GetSubRoomsNoCopy@Room@Util@@YAXKPAPAUITXArray@@@Z
?GetTidBySaveName@DataTypeID@@YAHPB_W@Z
?GetTimeFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetTotalOnline@Room@Util@@YAKK@Z
?GetTryLoginUin@Contact@Util@@YAKXZ
?GetUserCurrentRoom@Room@Util@@YAKVROOM_HANDLE@@K@Z
?GetUserDataSaveSetting@Sys@Util@@YA?AVCTXStringW@@AAKAAV3@@Z
?GetUserRightFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetUserRoomRight@Member@Util@@YA?AUtagUserType@DataTypeID@@ABVROOM_HANDLE@@KKU34@@Z
?GetUserTypeFromOptionType@Room@Util@@YAHEAAUtagUserType@DataTypeID@@@Z
?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z
?GetVersionUpdatedInfo@CommandLine@Util@@YAHXZ
?HasSubRoom@Room@Util@@YAHK@Z
?HaveRight@Rule@Util@@YAHUtagUserType@DataTypeID@@K@Z
?HideWindow@CommandLine@Util@@YAHXZ
?Init@Version@@YAHXZ
?InitCSSender@Network@Util@@YAXKH@Z
?InsertUserToUserList@Member@Util@@YAXABVROOM_HANDLE@@KKABUTIDS_DATA@12@@Z
?InsertUserToUserList@Member@Util@@YAXABVROOM_HANDLE@@KKPAUITXArray@@@Z
?IsAccountLogined@Account@Util@@YAHK@Z
?IsAdmin@Rule@Util@@YAHUtagUserType@DataTypeID@@@Z
?IsAutoLogin@CommandLine@Util@@YAHXZ
?IsCurrentRoom@Contact@Util@@YAHK@Z
?IsDefaultRoom@Room@Util@@YAHKK@Z
?IsEmbedQT@CommandLine@Util@@YAHXZ
?IsEnableMicroPortal@GameCustomed@Util@@YAHK@Z
?IsExistStartupExtParam@CommandLine@Util@@YAHXZ
?IsExistStartupQTExtParam@CommandLine@Util@@YAHXZ
?IsExistStartupReportData@CommandLine@Util@@YAHXZ
?IsFavorRoom@Misc@Util@@YAHK@Z
?IsGameConnected@IGM@Util@@YAHXZ
?IsHideAdmin@Rule@Util@@YAHABUtagUserType@DataTypeID@@@Z
?IsInRoom@Room@Util@@YAHVROOM_HANDLE@@KK@Z
?IsInSpecialRooms@Contact@Util@@YAHK@Z
?IsLockAccout@CommandLine@Util@@YAHXZ
?IsMainAdminOrMore@Rule@Util@@YAHUtagUserType@DataTypeID@@@Z
?IsNotHook@CommandLine@Util@@YAHXZ
?IsOpenUrlWithTTDefault@URL@Util@@YAHXZ
?IsQuickLogin@CommandLine@Util@@YAHXZ
?IsRoomAdmin@Contact@Util@@YAHABVROOM_HANDLE@@KK@Z
?IsRoomExist@Room@Util@@YAHK@Z
?IsRoomHasPSW@Room@Util@@YAHK@Z
?IsSelectEnterRoomMode@CommandLine@Util@@YAHAAK@Z
?IsSelectEnterSubRoomMode@CommandLine@Util@@YAHAAK0@Z
?IsSelectGotoVipWebMode@CommandLine@Util@@YAHAAK0@Z
?IsSoftMixEnable@Misc@Util@@YAHVROOM_HANDLE@@@Z
?IsStartedByGame@CommandLine@Util@@YAHXZ
?IsStereoMixEnable@Misc@Util@@YAHXZ
?IsStereoMixExist@Misc@Util@@YAHVROOM_HANDLE@@@Z
?IsStereoMixSet@Misc@Util@@YAHVROOM_HANDLE@@@Z
?IsSubRoom@Room@Util@@YAHK@Z
?IsSubRoomEx@Room@Util@@YAHKK@Z
?IsSuperAdmin@Rule@Util@@YAHUtagUserType@DataTypeID@@@Z
?IsSuperAdminOne@Rule@Util@@YAHUtagUserType@DataTypeID@@@Z
?IsSuperAdminTwo@Rule@Util@@YAHUtagUserType@DataTypeID@@@Z
?IsSupportVideoBulletin@Misc@Util@@YAHKK@Z
?IsTempRoom@Room@Util@@YAHK@Z
?IsUserExists@User@Util@@YAHK@Z
?IsVideoBulletin@Misc@Util@@YAHKK@Z
?IsVoChecking@Contact@Util@@YAHXZ
?KickoutMainRoom@Rule@Util@@YAHUtagUserType@DataTypeID@@0@Z
?MinimizeMemoryOnOnceIdle@Sys@Util@@YAXXZ
?NoLoginRecord@CommandLine@Util@@YAHXZ
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?OpenUrlWithDefBrowser@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?ParseTIDS@Member@Util@@YAHEPAUITXBuffer@@AAUTIDS_DATA@12@@Z
?ParseTIDS@Member@Util@@YAHPAUITXArray@@AAUTIDS_DATA@12@@Z
?ReSetAll@AudioChannel@Room@Util@@YAXXZ
?RemoveAllSubRooms@Room@Util@@YAXK@Z
?RemoveAllUser@Room@Util@@YAXVROOM_HANDLE@@K@Z
?RemoveRight@Rule@Util@@YAHAAUtagUserType@DataTypeID@@K@Z
?RemoveRoom@Room@Util@@YAXK@Z
?RemoveRoomAdm@Room@Util@@YAXKK@Z
?RemoveRoomAdms@Room@Util@@YAXK@Z
?RemoveSubRoom@Room@Util@@YAXKK@Z
?RemoveUser@Room@Util@@YAXVROOM_HANDLE@@KK@Z
?ResetAllRoomCount@Room@Util@@YAXK@Z
?ResetRoomOrder@Rule@Util@@YAHUtagUserType@DataTypeID@@K@Z
?RoomDataGetBYTE@Room@Util@@YAEKH@Z
?RoomDataGetDWord@Room@Util@@YAKKH@Z
?RoomDataGetStr@Room@Util@@YA?AVCTXStringW@@KH@Z
?RoomDataGetWord@Room@Util@@YAGKH@Z
?RoomDataSet@Room@Util@@YAXKPAUITXData@@@Z
?RoomDataSetBYTE@Room@Util@@YAXKHE@Z
?RoomDataSetDWord@Room@Util@@YAXKHK@Z
?RoomDataSetStr@Room@Util@@YAXKHVCTXStringW@@@Z
?RoomDataSetWord@Room@Util@@YAXKHG@Z
?SendDataToDirServer@Network@Util@@YAJPAUITXData@@PAUITXCmdCodec@@PAUITXNetSendSink@@KH@Z
?SendDataToRoomServer@Network@Util@@YAJKPAUITXData@@PAUITXCmdCodec@@PAUITXNetSendSink@@I@Z
?SendDataToRoomServer@Network@Util@@YAJPAUITXData@@PAUITXCmdCodec@@PAUITXNetSendSink@@ABVROOM_HANDLE@@I@Z
?SendRawDataToRoomServer@Network@Util@@YAJPAEIABVROOM_HANDLE@@@Z
?SendRawDataToRoomServer@Network@Util@@YAJPAEIK@Z
?SetAudioEngineConfig@AudioChannel@Room@Util@@YAXABUAUDIO_ENGINE_CONFIG@123@@Z
?SetConfigVersion@AudioChannel@Room@Util@@YAXI@Z
?SetGameID@RoomHandleInfo@Util@@YAHABVROOM_HANDLE@@K@Z
?SetLastErrorStr@Contact@Util@@YAXVCTXStringW@@@Z
?SetOpenUrlWithTTDefault@URL@Util@@YAXH@Z
?SetResendCount@AudioChannel@Room@Util@@YAXI@Z
?SetResendRange@AudioChannel@Room@Util@@YAXI@Z
?SetSelfMemberName@Room@Util@@YAXKKVCTXStringW@@@Z
?SetSoftwareStereoMix@Misc@Util@@YAHHVROOM_HANDLE@@@Z
?SetSoftwareStereoPlayer@Misc@Util@@YAXPB_W@Z
?SetSpeakKey@Misc@Util@@YAXPAUIConfigCache@@K@Z
?SetSpeakMode@Misc@Util@@YAXPAUIConfigCache@@W4SpeakMode@SysConfig@@H@Z
?SetSpeakMouse@Misc@Util@@YAXPAUIConfigCache@@W4enum_mouse@@@Z
?SetStereoMix@Misc@Util@@YAHHVROOM_HANDLE@@@Z
?SetVoChecking@Contact@Util@@YAXH@Z
?UnInitCSSender@Network@Util@@YAXXZ
?UserDataGetDWord@Room@Util@@YAKVROOM_HANDLE@@KKH@Z
?UserDataGetStr@Room@Util@@YA?AVCTXStringW@@VROOM_HANDLE@@KKH@Z
?UserDataSet@Room@Util@@YAXVROOM_HANDLE@@KKPAUITXData@@@Z
?UserDataSetBYTE@Room@Util@@YAXABVROOM_HANDLE@@KKHE@Z
?UserDataSetDWord@Room@Util@@YAXABVROOM_HANDLE@@KKHK@Z
?UserDataSetEx@Room@Util@@YAXVROOM_HANDLE@@KABV?$vector@UMEMBER_BASE_INFO@@V?$allocator@UMEMBER_BASE_INFO@@@std@@@std@@@Z
?UserDataSetStr@Room@Util@@YAXABVROOM_HANDLE@@KKHVCTXStringW@@@Z
?UserDataSetStruct@Room@Util@@YAXABVROOM_HANDLE@@KKHUtagUserType@DataTypeID@@@Z
?UserProfileGetBYTE@User@Util@@YAEKH@Z
?UserProfileGetBYTE@User@Util@@YAEPAUITXDataCenter@@KH@Z
?UserProfileGetDWord@User@Util@@YAKKH@Z
?UserProfileGetStr@User@Util@@YA?AVCTXStringW@@KH@Z
?UserProfileSetBYTE@User@Util@@YAXKHE@Z
?UserProfileSetDWord@User@Util@@YAXKHK@Z
?UserProfileSetStr@User@Util@@YAXKHVCTXStringW@@@Z
?VersionUpdate@QQUPDATECENTER@@YAJPB_W000000@Z
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 848KB - Virtual size: 847KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 368KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6c6c9469e75014eb05f485daa314406

Headers

File Characteristics

Imports

common

qtcommon

tinyxml

sqlite3

pptmodule

igmagent

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

atl80

shlwapi

msvcp80

msvcr80

winmm

netapi32

rpcrt4

version

ws2_32

psapi

Exports

Exports

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 848KB - Virtual size: 847KB

.data Size: 28KB - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 368KB - Virtual size: 366KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 848KB - Virtual size: 847KB

.data
Size: 28KB - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 368KB - Virtual size: 366KB