�����w.�UJ�һ!����8��?�>��D�����u�d�9�&��\��@�1]�n�1���Е��]�b��'tn�=X (ܚ�\�d���� F�fx�,�G"�^�$q�p� �"�����/����;�||<m���� �8�E����*B��;t~͡��9��H#J�Z�m rz �Isd����� ���[)��0�U�Z4e��C�{�� � ��{�Y*�ށQ6>X��v_hr��\�+t R��bd�c���s��+�;Y�tZi��}Uaܒ������4,2�+��v^9.�Ǧ���o��e��W � �A�+-�/��G��_]x�SSY�!�å�ϖ��[,�P¦�0)B?�@�ъ����@+c�ϐ"Z�!�K�c\ tn��F� #bR��C��uJa�?��ד��-.����d�*z��x ��m�*e��t� �Te�_�[��� ��� ��hԱ���� pV�8���h-�L{��^� ��˩)�5�P+����ٱ��� s�i��S�A!LkewJ G������?�]��h���7ļz �����\�{aU>�z �-Q ���E�����Z,w�'2��V���Li�ο �=���l�\�s��RQ��,q�<Z���gk�"6-�m<������)7F$��N|KsJn]���g/�K?�Qon�B��̭�||Vɼ@ �(h ��Ǡ{b�!���0��lf��(#�h�GS���VZ��� 猷�Rs�A���� �9��{��xKfx\h���T��З.ak�<�B�E/{���1�A��J5����!���%ֹ��Fx9&�J����i`rܯ �<�V�� }�m��4�N�݁S��G:��G�Cc�fԹS�뜦3 ������E��v�ٟ�n�s(�'Cb2�)�Q����z����, �L�q�6o�G�:�=���5bw�vD$��;�9o}�8ݫ�s3���6�?�0���V�N-d0����*{��S��X����wX��k�?<̪=� د�={�z��������!%,�ZC���HT� =��l0P>�:)vl�W��_+<`[%�/�ife��-���L�/1�J"=��^�$�m�Ff-�P��u��)�3�N(#��P�X��n@�����P>LT3�k�V����U��f���ʴ+�!���/�� ��� ��ZAB���fJ4�~%�Ԋ�κ�ݸn#����R�&[I�)Y�h� ��h�*�H9��9�tD��譬&G�:���7���2���@��spa3�V3������A)!��.x��%�5��W��sA+���|�kzq cSt�c�^��5���!��/}x� )�PˮM* @/��7Ʋ�/NJ��D�Fg��#�����Y��^�C��I����, �������E�&�J�-�3�P9�� %6 �߲@( K�8�!V�N6���� �g�L�nߩm��ўR���r�+غ>S�Ι�Ne�/�+ u�M({y٪Ҁ? ��"���� @%J�v_?&���~��PT��F-��1B�����Kܜ��O�oOy1��^�䝙\A.`i�P��iG ���� ��� ����Hl���]�N��;�O|�PF���bـŪ��HA ��é$k$/�[�5��� �� F���X4K��dL�?͇��O��Aa9b\@7�g z\J+ �����k�����:��&�п���{��a"�S��J��a4�A�?�Me��pX7 ����C �,�~�Dx!�A� O��oS�p�td�7D����{�\C�G�:"(���"�x �ŷ�7~��w2��x���Yj�$�g�4P��뒜���e����^����)�N�D�?53jtP4C�� ��|��5�P£�d ��~mz ɸ oo�ê��~���������!��~�b�X����EM�c�At��2��� �q5i�R�T�@�p�g���^Pο�Cx�v�fr��2 6.��0��/�H^����,N�M �~ ���ڣ��o����"ى�T������ a:�� |픭�;�&��@�����i%�M>�<�0�)���Yh=�2�v�M�O�" ��cM�p�� ����R�g�S��1��J�����́c)V��%�(� �#JE��oc}��~����|$q�P��I���i)zA Ο �!]����C��Q��j�X�J|�:Ň�u��<_ﺊ(x�=��<���|n� �Q.�_��Ne�M�.�W-f���͆��:xe�'�!N� 3��R�l�<!����[� e� �m1��鞛�`�7��� `��1�/���{��,��T1N�C���ɰЊ-�:G�U,�yR�K�]y`�N�=�0 pfNت�Z9 ;���a�0�@{W��X����c�M��J*D��*o[�� \)�1�/,'����������/�B(�b�q�� fr=U� �Z �1R z��Ò�2�xbGBe�ZHgZ ɲ]�l���,^��O�$ٝjB��6,�C����mI{Aѫ�A�:�=���(���ƨSf�̖|�FϮ��,*3�WWX���$�.���u[�{�{1���=�?���M���s��������;e(�������@�[f.c�?�5Q��z��{2�:��OA�Rz"��Wڈ~1�������JW�i~��;�s,�̥b�,��63��a��]��pw��,��_2��Ǥ-� �ť��,9��2L�u+@�����~�ߝ�l��@���Zl;��!�)~�Ǡ&)���<$lc͎m[BP�R���|At��)Y�ed%�#x`��$K%�#�<�����`� KΏ�sj������R6�c�,� �4Y^`�N�u TZ�cr<�x_� �ƃyg;�rH��u�ii����A����\2��-1Qq����E6��Z�XJ��K�;5Jq��1�ެ�ZF�Y�_ؕ����\�����U��<�_\Y�������<-��&= �c^wG =� ����� -����� �Ѡ��C�κ��� ����v����O� a<�h�ue�oR�f{5A�So!���I.g��1X2�P2?�լ��m� ��Ӗ�z��h��X;�HF����a� ��D��|��������r)D��,��� r���ڜ�M�vr���>Y� ]�$��B���7�r��j�o�i�,��Sp� ��z'�
Static task
static1
Behavioral task
behavioral1
Sample
33224805ae1f96d698f235083fc4d8867e237c2c1373bb5694cb19bc865cbe37.exe
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral2
Sample
33224805ae1f96d698f235083fc4d8867e237c2c1373bb5694cb19bc865cbe37.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
General
-
Target
33224805ae1f96d698f235083fc4d8867e237c2c1373bb5694cb19bc865cbe37
-
Size
593KB
-
MD5
2234fac97063c564b97e178505eba07b
-
SHA1
463fc060c07f79c5cd06827b59ffbea781f37158
-
SHA256
33224805ae1f96d698f235083fc4d8867e237c2c1373bb5694cb19bc865cbe37
-
SHA512
c2ac966b44bfd0757c2413020c1db10bf477475cd4b1797b53a71126b536bba7443a7f39e7ddd44a0bdcbb538fd527a04f0c76819fa30893a182bcdf27e16ba0
-
SSDEEP
12288:Xw9dX96H4w8nC5TBQqNhqNXyQdxNugEizNKZa:g9dMH4wz5TBQ24JygEIj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33224805ae1f96d698f235083fc4d8867e237c2c1373bb5694cb19bc865cbe37
Files
-
33224805ae1f96d698f235083fc4d8867e237c2c1373bb5694cb19bc865cbe37.exe windows x64
f807556d0bcde312328334028554ff2a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
apeditorcore
?afterKill@APNExportApp@@QEAAXXZ
??1APNExportApp@@UEAA@XZ
??0APNExportApp@@QEAA@AEAHPEAPEAD@Z
?openEditDialog@LaunchWindowClip@@SAXV?$function@$$A6AXXZ@std@@@Z
?Obj@LaunchWindowClip@@SAPEAV1@XZ
??1APNThumbApp@@UEAA@XZ
??0APNThumbApp@@QEAA@AEAHPEAPEAD@Z
??1SplashScreen@@UEAA@XZ
??0SplashScreen@@QEAA@PEAVQWidget@@@Z
?convert@APNConvertApp@@QEAA_NXZ
??1APNConvertApp@@UEAA@XZ
??0APNConvertApp@@QEAA@AEAHPEAPEAD@Z
?setLogPath@APNCrashRpt@APNext@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?uninstallCrashRpt@APNCrashRpt@APNext@@QEAAXXZ
?installCrashRpt@APNCrashRpt@APNext@@QEAAHXZ
??1APNCrashRpt@APNext@@QEAA@XZ
??0APNCrashRpt@APNext@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?Obj@LaunchWindow@@SAPEAV1@XZ
??1APNextUpdateApp@APNext@@UEAA@XZ
??0APNextUpdateApp@APNext@@QEAA@AEAHPEAPEAD@Z
?sendSplashScreenMessge@RemoteServer@@QEAAXAEBVQJsonObject@@@Z
?quitSplashScreen@RemoteServer@@QEAAXXZ
?showSplashScreen@RemoteServer@@QEAAXW4ShowType@1@@Z
?OBJ@RemoteServer@@SAPEAV1@XZ
?generateTimeDateFilename@APNext@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD_N@Z
?checkHasAudioDevice@APNextApp@APNext@@QEAA_NXZ
?stopMessageHeartBeat@APNextApp@APNext@@QEAAXXZ
?startMessageHeartBeat@APNextApp@APNext@@QEAAXXZ
?startMessageProcess@APNextApp@APNext@@QEAAXXZ
?checkUpateInNewProcess@APNextApp@APNext@@QEAAXXZ
??1APNextApp@APNext@@UEAA@XZ
??0APNextApp@APNext@@QEAA@AEAHPEAPEAD@Z
?UTF8_To_string@APN@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV23@@Z
??1APNMessageApp@APNext@@UEAA@XZ
??0APNMessageApp@APNext@@QEAA@AEAHPEAPEAD@Z
cvcore
??0CVCPoint@CVCore@@QEAA@MM@Z
?getSingleton@CVCManager@CVCore@@SAPEAV12@XZ
?setAppDataPath@CVCManager@CVCore@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
alog
log_set_type
log_set_callback
log_set_level
log_debug
log_info
log_error
psapi
GetProcessMemoryInfo
data_sender
DS_SendEvent
DS_Config
apuser
?unload3rdDll@APNUser@@UEAAXXZ
?sync3rdData@APNUser@@UEAAXXZ
?relogin@APNUser@@UEAAXXZ
?qt_metacast@APNUserHandler@@UEAAPEAXPEBD@Z
?qt_metacast@APNUser@@UEAAPEAXPEBD@Z
?qt_metacall@APNUserHandler@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacall@APNUser@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?paintVipHeadPic@APNUser@@MEAAXAEBVQImage@@@Z
?openUrl@APNUserHandler@@UEAAXAEBVQString@@@Z
?onVipPrivilegeDialog@APNUserHandler@@MEAAXXZ
?onPopupVipPayDialog@APNUserHandler@@MEAAXVQString@@@Z
?onPopupPersonalCentre@APNUserHandler@@MEAAXH@Z
?onPopLoginView@APNUserHandler@@MEAAXV?$function@$$A6AXXZ@std@@@Z
?onLogout@APNUserHandler@@MEAAXXZ
?onLoginValidQuery@APNUserHandler@@MEAAXXZ
?metaObject@APNUserHandler@@UEBAPEBUQMetaObject@@XZ
?metaObject@APNUser@@UEBAPEBUQMetaObject@@XZ
?logout@APNUser@@UEAAXXZ
?isInit@APNUser@@UEAA_NXZ
?init@APNUser@@UEAA_NXZ
?getVoiceTextTransformTrialSec@APNUser@@UEAA_JXZ
?get3rdAccountId@APNUser@@UEAA?AVQString@@XZ
?autoLogin@APNUser@@UEAAXXZ
?setHandlerObj@APNUserHandler@@SAXPEAV1@@Z
??1APNUserHandler@@UEAA@XZ
??0APNUserHandler@@QEAA@PEAVQObject@@@Z
?setUserObj@APNUser@@SAXPEAV1@@Z
??1APNUser@@UEAA@XZ
??0APNUser@@QEAA@PEAVQObject@@@Z
?OEM_FOXIT_ENABLE@API@@2QEADEA
?FOXIT@API@@2HA
?JIANYING@API@@2HA
?COOLCUT@API@@2HA
?EDITOR@API@@2HA
?AIPAI@API@@2HA
?setCreateHandlerFun@APNUserHandler@@SAXV?$function@$$A6AXXZ@std@@@Z
?setCreateUserObjFun@APNUser@@SAXV?$function@$$A6AXXZ@std@@@Z
?Obj@APNUser@@SAPEAV1@XZ
?init@API@@SAXH@Z
??1APNWarningDialog@@UEAA@XZ
??0APNWarningDialog@@QEAA@AEBVQString@@PEAVQWidget@@@Z
apcore
??0APNInfo@@QEAA@PEAVQObject@@@Z
?setIsGles@APNGlobalVariant@@QEAAX_N@Z
?setIsEnableHDPI@APNGlobalVariant@@QEAAX_N@Z
?toObject@JsonHelper@@SA?AVQJsonObject@@VQString@@PEA_N@Z
?readVersion@APN@@YA?AVQString@@AEBV2@@Z
?readChannel@APN@@YA?AVQString@@AEBV2@@Z
?getLanguageFromFile@APN@@YA?AVQString@@XZ
?urlFromParams@APN@@YA?AVQUrl@@HPEAPEAD@Z
?takeUrlInfo@APN@@YA_NVQUrl@@AEAVQString@@1PEAV?$QList@U?$QPair@VQString@@V1@@@@@@Z
?isNullOrEmpty@TextUitility@@SA_NAEBVQString@@@Z
?join@FilePathHelper@@SA?AVQString@@VQStringList@@@Z
?getAppDataLocation@FilePathHelper@@SA?AVQString@@XZ
?getSettingFilename@FilePathHelper@@SA?AVQString@@XZ
?getOldSettingFilename@FilePathHelper@@SA?AVQString@@XZ
?refreshResourcePath@APNInfo@@QEAAXXZ
?isRunAsAdministrator@OS@@YA_NXZ
?runAdminPrivileges@OS@@YAXAEBVQString@@0@Z
?Obj@NetworkHelper@@SAPEAV1@XZ
?get@NetworkHelper@@QEAA?AVQString@@VQUrl@@@Z
??0LockedFile@@QEAA@AEBVQString@@@Z
??1LockedFile@@UEAA@XZ
?lock@LockedFile@@QEAA_NW4LockMode@1@_N@Z
?unlock@LockedFile@@QEAA_NXZ
?UPDATE_FILENAME@APNInfo@@2QEBDEB
?CHANNEL_FILENAME@APNInfo@@2QEBDEB
?IS_DEBUG@APNInfo@@2_NA
?IS_EDITOR@APNInfo@@2_NA
?IS_COOLCUT@APNInfo@@2_NA
?IS_JIANYING@APNInfo@@2_NA
?IS_LENOVO@APNInfo@@2_NA
??1APNInfo@@UEAA@XZ
?Obj@APNSignalCenter@@SAPEAV1@XZ
?sendDataEventNew@APNSignalCenter@@QEAAXVQString@@@Z
?getNotHdpiEnableFlagFilename@FilePathHelper@@SA?AVQString@@XZ
?desktopProjectExtn@APNInfo@@2VQString@@A
?IS_FOXIT@APNInfo@@2_NA
?init@APNInfo@@SAXH@Z
?ALL_LANGUAGES@LanguageType@@2VQStringList@@A
?DEAFAULT_LANGUAGE@LanguageType@@2VQString@@A
?Russian@LanguageType@@2VQString@@A
?Portuguese@LanguageType@@2VQString@@A
?Korean@LanguageType@@2VQString@@A
?Spain@LanguageType@@2VQString@@A
?Arabic@LanguageType@@2VQString@@A
?Italiano@LanguageType@@2VQString@@A
?France@LanguageType@@2VQString@@A
?Deutsch@LanguageType@@2VQString@@A
?Japanese@LanguageType@@2VQString@@A
?English@LanguageType@@2VQString@@A
?Chinese@LanguageType@@2VQString@@A
?desktopProjectExtnCompatible@APNInfo@@2VQString@@A
?APP_LANGUAGE@APNInfo@@2VQString@@A
?SingleAppSeverName@APNInfo@@2VQString@@A
?RESOURCE_PATH@APNInfo@@2VQString@@A
?URL_PROTOCOL@APNInfo@@2VQString@@A
?XIAODAO_CHANNEL@APNInfo@@2VQString@@A
?XIAODAO_VERSION@APNInfo@@2VQString@@A
?DISPLAY_APPNAME@APNInfo@@2VQString@@A
?Obj@APNGlobalVariant@@SAPEAV1@XZ
qt5quick
?setSceneGraphBackend@QQuickWindow@@SAXW4GraphicsApi@QSGRendererInterface@@@Z
qt5network
?waitForConnected@QLocalSocket@@QEAA_NH@Z
??1QLocalSocket@@UEAA@XZ
??0QLocalSocket@@QEAA@PEAVQObject@@@Z
?connectToServer@QLocalSocket@@QEAAXAEBVQString@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?waitForBytesWritten@QLocalSocket@@UEAA_NH@Z
qt5widgets
??1QApplication@@UEAA@XZ
?exec@QApplication@@SAHXZ
?exec@QDialog@@UEAAHXZ
?show@QWidget@@QEAAXXZ
??0QApplication@@QEAA@AEAHPEAPEADH@Z
qt5gui
?setHighDpiScaleFactorRoundingPolicy@QGuiApplication@@SAXW4HighDpiScaleFactorRoundingPolicy@Qt@@@Z
?setQuitOnLastWindowClosed@QGuiApplication@@SAX_N@Z
qt5core
??1QLibrary@@UEAA@XZ
?resolve@QLibrary@@QEAAP6AXXZPEBD@Z
??0QSettings@@QEAA@AEBVQString@@W4Format@0@PEAVQObject@@@Z
??1QSettings@@UEAA@XZ
?sync@QSettings@@QEAAXXZ
?setValue@QSettings@@QEAAXAEBVQString@@AEBVQVariant@@@Z
?defaultTypeFor@QTimer@@CA?AW4TimerType@Qt@@H@Z
?singleShotImpl@QTimer@@CAXHW4TimerType@Qt@@PEBVQObject@@PEAVQSlotObjectBase@QtPrivate@@@Z
??0QTranslator@@QEAA@PEAVQObject@@@Z
??1QTranslator@@UEAA@XZ
?load@QTranslator@@QEAA_NAEBVQString@@000@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?isEmpty@QTranslator@@UEBA_NXZ
?metaObject@QTranslator@@UEBAPEBUQMetaObject@@XZ
?qt_metacall@QTranslator@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QTranslator@@UEAAPEAXPEBD@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?translate@QTranslator@@UEBA?AVQString@@PEBD00H@Z
?shared_null@QListData@@2UData@1@B
??1QJsonObject@@QEAA@XZ
??0QJsonObject@@QEAA@V?$initializer_list@U?$QPair@VQString@@VQJsonValue@@@@@std@@@Z
?toString@QJsonValue@@QEBA?AVQString@@XZ
?toInt@QJsonValue@@QEBAHH@Z
??0QJsonValue@@QEAA@AEBV0@@Z
??1QJsonValue@@QEAA@XZ
??0QJsonValue@@QEAA@PEBD@Z
??0QJsonValue@@QEAA@AEBVQString@@@Z
?tempPath@QDir@@SA?AVQString@@XZ
?setCurrent@QDir@@SA_NAEBVQString@@@Z
?isDir@QFileInfo@@QEBA_NXZ
?isFile@QFileInfo@@QEBA_NXZ
?absolutePath@QFileInfo@@QEBA?AVQString@@XZ
?exists@QFileInfo@@SA_NAEBVQString@@@Z
?exists@QFileInfo@@QEBA_NXZ
??1QFileInfo@@QEAA@XZ
??0QFileInfo@@QEAA@AEBVQString@@@Z
??6QDebug@@QEAAAEAV0@AEBVQString@@@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??6QDebug@@QEAAAEAV0@H@Z
??6QDebug@@QEAAAEAV0@D@Z
??6QDebug@@QEAAAEAV0@_N@Z
?setAutoInsertSpaces@QDebug@@QEAAX_N@Z
?autoInsertSpaces@QDebug@@QEBA_NXZ
?maybeSpace@QDebug@@QEAAAEAV1@XZ
?nospace@QDebug@@QEAAAEAV1@XZ
??1QDebug@@QEAA@XZ
??0QDebug@@QEAA@AEBV0@@Z
??6QTextStream@@QEAAAEAV0@PEBD@Z
??6QTextStream@@QEAAAEAV0@AEBVQString@@@Z
?flush@QTextStream@@QEAAXXZ
??1QTextStream@@UEAA@XZ
??0QTextStream@@QEAA@PEAVQIODevice@@@Z
?open@QFile@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?copy@QFile@@SA_NAEBVQString@@0@Z
?exists@QFile@@QEBA_NXZ
??1QFile@@UEAA@XZ
??0QFile@@QEAA@AEBVQString@@@Z
?close@QFileDevice@@UEAAXXZ
??0QLibrary@@QEAA@AEBVQString@@PEAVQObject@@@Z
?host@QUrl@@QEBA?AVQString@@V?$QFlags@W4ComponentFormattingOption@QUrl@@@@@Z
?isEmpty@QUrl@@QEBA_NXZ
?toString@QUrl@@QEBA?AVQString@@V?$QUrlTwoFlags@W4UrlFormattingOption@QUrl@@W4ComponentFormattingOption@2@@@@Z
??1QUrl@@QEAA@XZ
??0QUrl@@QEAA@AEBVQString@@W4ParsingMode@0@@Z
??0QUrl@@QEAA@AEBV0@@Z
?readLine@QIODevice@@QEAA?AVQByteArray@@_J@Z
??0QVariant@@QEAA@AEBVQString@@@Z
??0QVariant@@QEAA@PEBD@Z
??1QVariant@@QEAA@XZ
?translate@QCoreApplication@@SA?AVQString@@PEBD00H@Z
?installTranslator@QCoreApplication@@SA_NPEAVQTranslator@@@Z
?applicationFilePath@QCoreApplication@@SA?AVQString@@XZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?exec@QCoreApplication@@SAHXZ
?instance@QCoreApplication@@SAPEAV1@XZ
?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z
?QStringList_contains@QtPrivate@@YA_NPEBVQStringList@@AEBVQString@@W4CaseSensitivity@Qt@@@Z
?QStringList_join@QtPrivate@@YA?AVQString@@PEBVQStringList@@PEBVQChar@@H@Z
?end@QListData@@QEBAPEAPEAXXZ
?begin@QListData@@QEBAPEAPEAXXZ
?at@QListData@@QEBAPEAPEAXH@Z
?size@QListData@@QEBAHXZ
?append@QListData@@QEAAPEAPEAXXZ
?dispose@QListData@@SAXPEAUData@1@@Z
?dispose@QListData@@QEAAXXZ
?realloc@QListData@@QEAAXH@Z
?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z
?detach@QListData@@QEAAPEAUData@1@H@Z
?toStdString@QString@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??4QString@@QEAAAEAV0@PEBD@Z
??0QString@@QEAA@PEBD@Z
??8@YA_NAEBVQString@@0@Z
?number@QString@@SA?AV1@KH@Z
?number@QString@@SA?AV1@HH@Z
?fromLocal8Bit@QString@@SA?AV1@PEBDH@Z
?fromUtf8@QString@@SA?AV1@PEBDH@Z
?toUtf8@QString@@QEGBA?AVQByteArray@@XZ
?replace@QString@@QEAAAEAV1@AEBV1@0W4CaseSensitivity@Qt@@@Z
??YQString@@QEAAAEAV0@AEBV0@@Z
??YQString@@QEAAAEAV0@VQChar@@@Z
?toLower@QString@@QEGBA?AV1@XZ
?endsWith@QString@@QEBA_NVQChar@@W4CaseSensitivity@Qt@@@Z
?endsWith@QString@@QEBA_NAEBV1@W4CaseSensitivity@Qt@@@Z
?constData@QString@@QEBAPEBVQChar@@XZ
?length@QString@@QEBAHXZ
??4QString@@QEAAAEAV0@$$QEAV0@@Z
??0QString@@QEAA@$$QEAV0@@Z
??4QString@@QEAAAEAV0@AEBV0@@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@AEBV0@@Z
??0QString@@QEAA@VQLatin1String@@@Z
??0QString@@QEAA@VQChar@@@Z
??0QString@@QEAA@XZ
?constData@QByteArray@@QEBAPEBDXZ
?isEmpty@QByteArray@@QEBA_NXZ
?size@QByteArray@@QEBAHXZ
??1QByteArray@@QEAA@XZ
?qChecksum@@YAGPEBDI@Z
?qstrcmp@@YAHAEBVQByteArray@@PEBD@Z
??0QChar@@QEAA@UQLatin1Char@@@Z
?debug@QMessageLogger@@QEBA?AVQDebug@@XZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?value@QJsonObject@@QEBA?AVQJsonValue@@AEBVQString@@@Z
?path@QUrl@@QEBA?AVQString@@V?$QFlags@W4ComponentFormattingOption@QUrl@@@@@Z
?isEmpty@QJsonObject@@QEBA_NXZ
??8QString@@QEBA_NPEBD@Z
kernel32
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentThreadId
InitializeSListHead
GetCommandLineW
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDiskFreeSpaceExW
RemoveDirectoryW
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetProcessTimes
GetCurrentProcess
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTimeAsFileTime
GetLogicalProcessorInformation
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryW
LocalFree
SetThreadExecutionState
FormatMessageA
MoveFileExW
ReplaceFileW
MultiByteToWideChar
WideCharToMultiByte
CopyFileW
GetCurrentProcessId
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
SetCurrentDirectoryW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
shell32
CommandLineToArgvW
SHGetFolderPathW
advapi32
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
msvcp140
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getmonths@_Locinfo@std@@QEBAPEBDXZ
?_Getdays@_Locinfo@std@@QEBAPEBDXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Xtime_get_ticks
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
vcruntime140
memset
strchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memmove
strstr
memchr
memcmp
strrchr
__current_exception
__current_exception_context
__C_specific_handler
__std_type_info_destroy_list
__std_terminate
memcpy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_initterm
_crt_atexit
_execute_onexit_table
_initterm_e
_cexit
_seh_filter_exe
_get_narrow_winmain_command_line
_initialize_narrow_environment
exit
_exit
_c_exit
_register_thread_local_exe_atexit_callback
_errno
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function
_set_app_type
terminate
_crt_at_quick_exit
_seh_filter_dll
_configure_narrow_argv
api-ms-win-crt-heap-l1-1-0
_aligned_free
_set_new_mode
calloc
_aligned_realloc
_aligned_malloc
_callnewh
malloc
free
api-ms-win-crt-convert-l1-1-0
strtod
mbstowcs
strtoull
wcstombs
wcstol
api-ms-win-crt-stdio-l1-1-0
fseek
_wfopen
__acrt_iob_func
_get_stream_buffer_pointers
fclose
fflush
fgetc
fgetpos
feof
fopen
fputc
fread
fsetpos
_fseeki64
_set_fmode
fwrite
__stdio_common_vsprintf
__stdio_common_vfprintf
ungetc
__p__commode
_ftelli64
setvbuf
__stdio_common_vsscanf
fgets
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
_wstat64i32
_lock_file
_unlock_file
_wfullpath
api-ms-win-crt-string-l1-1-0
towlower
strlen
towupper
strncpy
strncmp
toupper
wcslen
strcmp
tolower
strcat_s
api-ms-win-crt-time-l1-1-0
_localtime64
strftime
api-ms-win-crt-locale-l1-1-0
localeconv
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
Exports
Exports
Sections
.text Size: 261KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ