QLAPI_GetVersion
QLAPI_Initialize
QLAPI_ObjCreate
QLAPI_ObjDelete
QLAPI_PreTransMsg
QLAPI_Process
QLAPI_Release
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
25277164f1666fe45316bba4742e4edd7e4611932af30c023cf7317ec483885e.dll
Resource
win7-20231025-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
25277164f1666fe45316bba4742e4edd7e4611932af30c023cf7317ec483885e.dll
Resource
win10v2004-20231023-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
25277164f1666fe45316bba4742e4edd7e4611932af30c023cf7317ec483885e
-
Size
940KB
-
MD5
b7f1c8b2884162bc40f9fb21fd21193e
-
SHA1
d2b3c58e95eecdf27b01b33bcb5a14c939e8c9cb
-
SHA256
25277164f1666fe45316bba4742e4edd7e4611932af30c023cf7317ec483885e
-
SHA512
98be93401622642849218b9ab55b37cbb211ff904545e317f3a12d01a0afbe4a1383f4af39d66ab46789666c4f1575b094e09b6514b3cdb431df2db24a8e5fb2
-
SSDEEP
12288:aGX2H6DFVTj7dXN44ZxUxXtCsVYhXnA6DGW2x313DKG2fknx1XxEyo:abHSzjEWUtKpnrKxktfcxXo
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25277164f1666fe45316bba4742e4edd7e4611932af30c023cf7317ec483885e
Files
-
25277164f1666fe45316bba4742e4edd7e4611932af30c023cf7317ec483885e.dll windows:5 windows x86
2f71af0ce7123d7a27c6053c696ebcc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
qltradectrls
?SetHint@CQLDlgOperate@@UAEXXZ
?SetMenuInfo@CQLDlgOperate@@UAEXJV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@K@Z
?SetMiniModeValue@CQLDlg@@UAEXH@Z
?SetMode@CQLDlgOperate@@UAEXH@Z
?SetToCommonMode@CQLDlg@@UAEXXZ
?SetToMFunctionMode@CQLDlg@@UAEXXZ
?SetToSimpleMode@CQLDlg@@UAEXXZ
?ShowHint@CQLDlg@@UAEHPAD@Z
?StartOperate@CQLDlgOperate@@UAEHXZ
?UpdateUI@CQLDlgOperate@@UAEXJPAX@Z
?WPMessage@CQLDlg@@UAEJIIJ@Z
?WindowProc@CQLDlg@@MAEJIIJ@Z
??0CQLButton@@QAE@XZ
??1CQLButton@@UAE@XZ
?SetWindowTextA@CQLButton@@QAEXPBD@Z
?GetWindowTextA@CQLButton@@QAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetCheck@CQLButton@@QAEXH@Z
?DoDataExchange@CQLDlg@@MAEXPAVCDataExchange@@@Z
?OnCtlColor@CQLDlg@@IAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z
?GetThisMessageMap@CQLDlg@@KGPBUAFX_MSGMAP@@XZ
?SetWindowTextA@CQLDlg@@QAEXPBD@Z
??0CColorStatic@@QAE@XZ
??1CColorStatic@@UAE@XZ
??0CQLButtonEx@@QAE@XZ
??1CQLButtonEx@@UAE@XZ
QLUI_MsgBox
QLUI_MsgBoxPack
QLUI_JudgeStockRiskMsg
QLUI_ShowRiskTip_File
QLUI_OptTradeRegularTip
QLUI_DlgEntrustList
QLUI_TradeCheck
QLUI_OptCloseLimitAmount
??0CQLDlgOperate@@QAE@IPAVCWnd@@J@Z
?TradeRiskAfterCheck@CQLDlgOperate@@QAEHU_tagReqAtt@@JJ@Z
?onAccountChanged@CQLDlgOperate@@MAEXXZ
?SetCtrlName@CQLWnd@@QAEHPADPBD@Z
?AddAnchor@CResizableLayout@@IAEXIVCSize@@0@Z
?OnSetFocus@CQLDlg@@IAEXPAVCWnd@@@Z
?DDX_Text@CQLDlg@@QAEXPAVCDataExchange@@HAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetWindowTextA@CQLStatic@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??0CQLEdit@@QAE@XZ
??1CQLEdit@@UAE@XZ
QLUI_KeyUpOrDown
??0CQLComboBox@@QAE@XZ
??1CQLComboBox@@UAE@XZ
?IsFocusInWnd@CQLDlg@@QAEHXZ
?InsertString@CQLComboBox@@QAEHHPBD@Z
?GetWindowTextA@CQLStatic@@QAEHPADH@Z
QLUI_InvalidateCtrlRect
QLUI_GetHintMsg
?ProcCode@CCodeEdit@@QAEXXZ
?OnDataReturn@CQLDlgOperate@@QAEJIJ@Z
?QuoteInitPrivate@CQLDlgOperate@@QAEXJ@Z
?GetWindowTextA@CQLStatic@@QAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?AddString@CQLComboBox@@QAEHPBD@Z
?SetMaxAmount@CAmountEdit@@QAEXNE@Z
QLUI_SetMaxEntrust
QLUI_SelCmbStockAccount
QLUI_CheckStockAccount
?SetMaxAmount@CQLSpinBtnCtrl@@QAEXK@Z
?SetCheckBindPriceEdit@CQLButton@@QAEXJ@Z
?SetWindowTextA@CQLButtonEx@@QAEXPBD@Z
?SetQuoteCheck@CPriceEdit@@QAEXPAVCQLButton@@@Z
?SetDecimals@CAmountEdit@@QAEXJ@Z
QLUI_SetEditFontColor
QLUI_CheckRepeat
QLUI_JudgeUpDownPrice
QLUI_OnCheckQuoteTip
?GetLBText@CQLComboBox@@QAEXHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
QLUI_InitComboBox
QLUI_CheckComboBox
?SetDrawFrame@CQLDlg@@UAEXHKJ@Z
?SetParentColorHwnd@CQLDlg@@QAEXPAUHWND__@@@Z
?SetTemplate@CQLDlg@@QAEXJ@Z
??1CQLListCtrl@@UAE@XZ
QLUI_GetMarketType
QLUI_CtrlsMove
QLUI_CheckLockStateLightTradePwd
QLUI_SelectMultiMarket
QLUI_JudgeWarningMsg
QLUI_TradeCheckEx
?SendSync_QueryStockTip@CQLDlgOperate@@QAEHV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0JJ@Z
?OnSize@CQLDlg@@IAEXIHH@Z
?SetLastFocus@CQLDlg@@QAEXXZ
?IsFocusInWnd@CQLDlg@@QAEHPAUHWND__@@0@Z
?InsertItem@CQLBaseListCtrl@@QAEHHPBDKKJHH@Z
?SetItemText@CQLBaseListCtrl@@QAEHHHPBDKK@Z
?InitHeadFromTemplate@CQLBaseListCtrl@@QAEHHH@Z
?DeleteAllItems@CQLBaseListCtrl@@QAEHXZ
?Init@CQLBaseListCtrl@@QAEJKPADHKJH@Z
?AdjustColumnWidth@CQLBaseListCtrl@@QAEXXZ
??0CQLListCtrl@@QAE@XZ
QLUI_ShowRiskTip_Protocal
QLUI_FundMsgBoxEx
?SetTextColor@CQLButtonEx@@QAEXKKKKK@Z
?ClearAllMapData@CQLBaseListCtrl@@QAEHXZ
?GetCurSel@CQLBaseListCtrl@@QAEHXZ
?ShowCheckBox@CQLBaseListCtrl@@QAEXH@Z
?SetCheck@CQLBaseListCtrl@@QAEHHH@Z
?GetCheck@CQLBaseListCtrl@@QBEHH@Z
?SetErrorMsg@CQLBaseListCtrl@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetErrorMsg@CQLBaseListCtrl@@QBEHXZ
?GetColumnFieldName@CQLListCtrl@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@J@Z
?InitReport@CQLListCtrl@@QAEXKPADH@Z
QLUI_ShowDataExport
QLUI_QLInWndMapString
?DDX_Text@CQLDlg@@QAEXPAVCDataExchange@@HAAH@Z
?OnDestroy@CResizableDialog@@IAEXXZ
?SetMaxLen@CQLEdit@@QAEXJ@Z
?GetMaxLen@CQLEdit@@QAEJXZ
??0CQLPassEdit@@QAE@XZ
??1CQLPassEdit@@UAE@XZ
?SetSafeText@CQLPassEdit@@QAEXPBDH@Z
?GetSafeText@CQLPassEdit@@QAEHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetStyle@CQLPassEdit@@QAEXHHH@Z
?ForceUninstallHook@CQLPassEdit@@QAEXXZ
?EnableSoftKeyboardBtn@CQLPassEdit@@QAEXXZ
?SetBitmap@CQLPassEdit@@QAEXPAUHBITMAP__@@00@Z
?InstallDaemon@CQLPassEdit@@QAEHPAUHWND__@@H@Z
QLUI_InitComboBox_FromBuffer
QLUI_KeyBoardShow
QLUI_KeyBoardDestroy
??0CQLDlg@@QAE@IPAVCWnd@@J@Z
?OnInitDialog@CQLDlg@@MAEHXZ
??1CQLDlg@@UAE@XZ
?DrawItem@CQLButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?GetMessageMap@CQLButton@@MBEPBUAFX_MSGMAP@@XZ
?GetRuntimeClass@CQLDlg@@UBEPAUCRuntimeClass@@XZ
?InitFromTemplate@CQLButton@@UAEHHH@Z
?PTMessage@CQLDlg@@UAEHPAUtagMSG@@@Z
?PreSubclassWindow@CQLButton@@MAEXXZ
?QLUI_Update@CQLButton@@UAEHJPAX@Z
QLUI_CtrlsMoveTo
QLUI_InitComboBoxEx
QLUI_GetWorkRect
??0CWebCtrlWnd@@QAE@XZ
??1CWebCtrlWnd@@UAE@XZ
?SetSilent@CWebCtrlWnd@@QAEXH@Z
?Navigate@CWebCtrlWnd@@QAEXPBDK00PAXK@Z
?Refresh@CWebCtrlWnd@@QAEXXZ
?SetMenuFuncKey@CQLDlgOperate@@QAEXPAD@Z
?SetHwndContainer@CQLDlgOperate@@QAEXJ@Z
?SetFuncStr@CQLDlgOperate@@QAEXPAD@Z
?SetClientFuncWorkMode@CQLDlgOperate@@QAEXJ@Z
?SetControlFocus@CQLDlgOperate@@UAEHJ@Z
?ResetWindow@CQLDlgOperate@@UAEXXZ
?QLUI_Update@CQLDlg@@UAEHJPAX@Z
?QLUI_SetIcon@CQLUICtrl@@UAEHHPBD@Z
?QLUI_SetIcon@CQLUICtrl@@UAEHHI@Z
?QLUI_SetFont@CQLUICtrl@@UAEHPBDHPAVCDC@@@Z
?QLUI_SetFont@CQLUICtrl@@UAEHPBDHHHH@Z
?QLUI_SetColor@CQLUICtrl@@UAEHHK@Z
?QLUI_SetBrush@CQLUICtrl@@UAEHHK@Z
?QLUI_SetBrush@CQLUICtrl@@UAEHHHK@Z
?QLUI_SetBitmap@CQLUICtrl@@UAEHHPBD@Z
?QLUI_SetBitmap@CQLUICtrl@@UAEHHI@Z
?ProcessFuncFlagDel@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
?ProcessFuncFlagAdd@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
?ProcessChangeAccount@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
?PreTranslateMessage@CQLDlg@@UAEHPAUtagMSG@@@Z
?PreSubclassWindow@CQLDlg@@MAEXXZ
?PTMessage@CQLDlgOperate@@UAEHPAUtagMSG@@@Z
?OnEraseBkgnd@CQLDlg@@MAEHPAVCDC@@@Z
?NeedsRefresh@CResizableLayout@@MAEHPAUHWND__@@@Z
?LikesClipping@CResizableLayout@@MAEHPAUHWND__@@@Z
?KeyUpOrDown@CQLDlgOperate@@UAEXI@Z
?KeyAddOrSubtract@CQLDlgOperate@@UAEXI@Z
?IsLastFocusBeforeOperate@CQLDlgOperate@@UAEHJ@Z
?IsDrawFrame@CQLDlg@@UAEHXZ
?IsCanCancel@CQLDlg@@UAEHXZ
?Initialize@CQLDlgOperate@@UAEHPBU_HEADCLIENT_@@@Z
?InitWindow@CQLDlgOperate@@UAEXXZ
?InitUI@CQLDlgOperate@@UAEXXZ
?InitParam@CQLDlgOperate@@UAEXXZ
?InitFromTemplate@CQLDlg@@UAEHHH@Z
?InitFrame@CQLDlg@@UAEXXZ
?InitCommon@CQLDlgOperate@@UAEXXZ
?GetTotalClientRect@CResizableLayout@@MAEXPAUtagRECT@@@Z
?GetRuntimeClass@CQLDlgOperate@@UBEPAUCRuntimeClass@@XZ
?SetHAcc@CQLDlgOperate@@UAEXK@Z
?GetReportFuncID@CQLDlgOperate@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetParam@CQLDlg@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@@Z
?FreshData@CQLDlgOperate@@UAEXXZ
?FreshBtnState@CQLDlgOperate@@UAEXH@Z
?EraseParam@CQLDlg@@UAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?End_QueryTicketAmount@CQLDlgOperate@@UAEXPAD@Z
?End_QueryStock@CQLDlgOperate@@UAEXPAD@Z
?GetOperatePack@CQLDlgOperate@@UAEXPAVCQLPack@@@Z
?End_QueryMoney@CQLDlgOperate@@UAEXPAD@Z
?End_QueryMaxAmount@CQLDlgOperate@@UAEXPAD@Z
?End_QueryIndebted@CQLDlgOperate@@UAEXPAD@Z
?End_QueryAssetLiability@CQLDlgOperate@@UAEXPAVCQLPack@@@Z
?End_Operate@CQLDlgOperate@@UAEXH@Z
?EnableOperate@CQLDlgOperate@@UAEXH@Z
?DoModal@CQLDlg@@UAEHXZ
?DestroyWindow@CQLDlg@@UAEHXZ
?CreateQL@CQLDlgOperate@@UAEHPAVCWnd@@J@Z
?Create@CQLDlg@@UAEHIPAVCWnd@@@Z
?CopyParam@CQLDlg@@UAEHPAV1@@Z
?ConfirmOperate@CQLDlgOperate@@UAEHPAVCQLPack@@PADJ@Z
?ClearAllParams@CQLDlg@@UAEXXZ
?CheckUserInput@CQLDlgOperate@@UAEHXZ
?ArrangeLayoutCallback@CResizableLayout@@MAEHAAVLayoutInfo@1@@Z
?AddParam@CQLDlg@@UAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?ActiveControl@CQLDlg@@UAEXXZ
?QuoteSetCode@CQLDlgOperate@@QAEXPADJJJJJ@Z
?OnInitDialog@CQLDlgOperate@@UAEHXZ
?ProcessSetFocus@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
?ProcessEvent@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
??1CQLDlgOperate@@UAE@XZ
?IsSetWindowText@CCodeEdit@@QBEHXZ
?SetCodeLen@CCodeEdit@@QAEXJ@Z
??1CCodeEdit@@UAE@XZ
??0CCodeEdit@@QAE@XZ
?SetEdit@CQLSpinBtnCtrl@@QAEXPAVCQLEdit@@@Z
?SetStep@CQLSpinBtnCtrl@@QAEXN@Z
?SetStep@CQLSpinBtnCtrl@@QAEXJ@Z
??1CQLSpinBtnCtrl@@UAE@XZ
??0CQLSpinBtnCtrl@@QAE@XZ
QLUI_CheckEdit
QLUI_SetCmbStockAccount
QLUI_GetStockAccount
QLUI_InitCmbSAcc
?SetStep@CAmountEdit@@QAEXJ@Z
??1CAmountEdit@@UAE@XZ
??0CAmountEdit@@QAE@XZ
?SetDecimals@CPriceEdit@@QAEXJ@Z
?SetStep@CPriceEdit@@QAEXN@Z
?SetWindowTextA@CPriceEdit@@QAEXPBD_N@Z
??1CPriceEdit@@UAE@XZ
??0CPriceEdit@@QAE@XZ
?OnLButtonDown@CQLDlg@@IAEXIVCPoint@@@Z
?GetResizableWnd@CResizableDialog@@MAEPAVCWnd@@XZ
qltrademng
?ShowMeTheMoney@@YAPAVIMngTrade@@XZ
LogDebug
QLAPI_GetInterface
LogError
qltradepub
?SetStockCodeInfo@CQLPack@@QAEXPBDJJ@Z
??0CDataDict@@QAE@XZ
??1CDataDict@@UAE@XZ
?BSTypeString@CDataDict@@QAEJEPADJ@Z
??0CQLPack@@QAE@XZ
??1CQLPack@@UAE@XZ
?OperationTyeString@CDataDict@@QAEJEPADJ@Z
qltradeutil
QLUTIL_HeadClientGetFuncID
QLUTIL_GetOperNameAndBatchNo
QLUTIL_BatchAddNewEntrust
QLUTIL_ZCZGetAuctionPriceCage
QLUTIL_GetAuctionFlag
QLUTIL_ZCZGetPriceCage
QLUTIL_IsSupportZCZ
QLUTIL_ConvertSZZQPrice
QLUTIL_ConfirmEntrust
QLUTIL_FireEventChangeFuncByAccAtt
QLUTIL_UnLockAndShowMainTrade
QLUTIL_FireEventSetMultiWndFocus
QLUTIL_FireEventQuerySelListCode
QLUTIL_FireEventFrameFresh
QLUTIL_HeadClientGetFlag
QLUTIL_GetBuyAmount
QLUTIL_GetExchangeType
QLUTIL_QueryStockMart
QLUTIL_ConfirmEntrustNotSplit
QLUTIL_FireEventAssistSetBSType
QLUTIL_GetSetPrice
QLUTIL_GetSellAmount
QLUTIL_QueryCommon
QLUTIL_QueryStock
QLUTIL_Entrust
QLUTIL_QueryMoney
QLUTIL_SysMarket
QLUTIL_GetStrBeforeSplitChar
QLUTIL_AllTrim
QLUTIL_NeedQueryMaxEntrust
QLUTIL_ReadFileBuffer
QLUTIL_SaveBufferToFile
QLUTIL_Decrypt
QLUTIL_TestFileExist
QLUTIL_GetLocalMac
QLUTIL_GetLocalIP
QLUTIL_ExchangeNumToDesc
QLUTIL_GetModiPasswordMinTip
QLUTIL_QueryBankSubAccounts
QLUTIL_FireEventFrameFreshBtnState
QLUTIL_OEMWarnTip
QLUTIL_GetBSName
QLUTIL_CodeRuleGet
QLUTIL_RegisterQuoteCode
QLUTIL_CancelQuoteCode
QLUTIL_GetStrNodeCount
QLUTIL_GetStrNode
QLUTIL_ChineseNumber
QLUTIL_GetShowXFundAccount
QLUTIL_TestFileEmpty
QLUTIL_AddEntrustCodeToZxg
QLUTIL_GetAccAtt
QLUTIL_IsSmallFloat
QLUTIL_GetSplitInfo
QLUTIL_FireEventQueryAfterTrade
QLUTIL_FireEventSendFunc
QLUTIL_ConfirmDisEntrust
QLUTIL_ConfirmOFDisEntrust
QLUTIL_ConfirmSFDisEntrust
QLUTIL_ConfirmSFDisSignedProtocal
QLUTIL_ConfirmOFTimeDisEntrust
QLUTIL_ConfirmLaterDisEntrust
QLUTIL_ConfirmEtfDisEntrust
QLUTIL_ConfirmDisPawnTrans
QLUTIL_ConfirmDisSpecEntrust
QLUTIL_ConfirmAppointWithdrawal
QLUTIL_ConfirmDisFinanceSet
QLUTIL_ConfirmBondQuoteDisEntrust
QLUTIL_ConfirmAgreeRepurchaseDisEntrust
QLUTIL_ConfirmSFOrderDisEntrust
QLUTIL_ConfirmDisLendSecurity
QLUTIL_FireEventUIChangeAccount
QLUTIL_GetLastDoModalDlgHwnd
QLUTIL_TrimMenuName
QLUTIL_GetHintMessage
QLUTIL_GetFeeTipInfo
QLUTIL_GetShowBZJFlag
QLUTIL_GetExceedInfo_QH
QLUTIL_GetExceedInfo
QLUTIL_GetRiskInfo
QLUTIL_GetArbitrageBail
QLUTIL_IsNeedShowHedge
QLUTIL_GetFutuBail
QLUTIL_GetContractBail_CSOPT
QLUTIL_GetContractBail_Stk
QLUTIL_GetContractBail
QLUTIL_GetIfTradeCheck
QLUTIL_GetRightOptPriceType
QLUTIL_FireEventModifyAutoTraceAfterEntrust
QLUTIL_GetDecimalID
mfc140
ord6523
ord1131
ord4865
ord3694
ord7782
ord8322
ord13582
ord13577
ord6581
ord3924
ord4869
ord2524
ord14291
ord4218
ord8705
ord2210
ord5648
ord7855
ord8732
ord6464
ord3140
ord9083
ord12863
ord3688
ord3789
ord2344
ord10202
ord5742
ord12162
ord12194
ord3825
ord12182
ord5894
ord3844
ord6831
ord6323
ord14582
ord6324
ord14583
ord6322
ord14581
ord7964
ord12474
ord14380
ord11927
ord11928
ord2027
ord7905
ord12888
ord4082
ord4143
ord9353
ord14507
ord7886
ord14509
ord12484
ord12485
ord2484
ord5336
ord8285
ord12806
ord12869
ord10383
ord12190
ord8347
ord1468
ord8429
ord1449
ord6475
ord324
ord1050
ord993
ord7961
ord4580
ord7618
ord976
ord486
ord2748
ord8776
ord5398
ord13234
ord4866
ord4820
ord2477
ord4807
ord8718
ord14322
ord14328
ord14334
ord4655
ord3839
ord1696
ord1692
ord1529
ord300
ord8445
ord2459
ord265
ord2992
ord9085
ord1068
ord3864
ord2988
ord8703
ord4213
ord3142
ord6471
ord9092
ord1443
ord4227
ord3250
ord7621
ord12074
ord6193
ord13677
ord2758
ord9167
ord8997
ord10963
ord11343
ord3395
ord3396
ord3159
ord6104
ord6195
ord13681
ord3298
ord3295
ord10207
ord8173
ord2759
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord11672
ord9096
ord12032
ord3830
ord11881
ord14502
ord8922
ord12163
ord6947
ord10950
ord9213
ord3259
ord13798
ord12205
ord1717
ord1739
ord1765
ord1751
ord1772
ord4920
ord4987
ord4932
ord4950
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord5769
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord6848
ord11663
ord12969
ord13628
ord5911
ord7783
ord14054
ord2680
ord12067
ord3933
ord3363
ord3364
ord3258
ord12111
ord1000
ord5228
ord5528
ord1507
ord1103
ord5739
ord9305
ord5504
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord9166
ord3689
ord13974
ord2986
ord1526
ord3157
ord6500
ord4870
ord2387
ord2383
ord7459
ord1044
ord310
ord12115
ord10421
ord316
ord458
ord6505
ord3808
ord1650
ord1109
ord4084
ord1422
ord6788
ord5960
ord12503
ord8146
ord5861
ord5095
ord5096
ord4315
ord9089
ord1178
ord8031
ord4216
ord8026
ord5792
ord13574
ord6563
ord2266
ord8306
ord5401
ord4656
ord12706
ord5898
ord305
ord3005
ord1661
ord14238
ord14421
ord13475
ord4468
ord1509
ord14149
ord6942
ord3669
ord6806
ord2251
ord8180
ord3841
ord1510
ord325
ord1051
ord2359
ord2241
ord2406
ord2409
ord2372
ord2408
ord485
ord2263
ord2370
ord2178
ord2294
ord2397
ord12201
kernel32
LeaveCriticalSection
DeleteCriticalSection
GetCurrentProcess
GetLastError
IsDebuggerPresent
CheckRemoteDebuggerPresent
InitializeCriticalSectionAndSpinCount
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
lstrcpynA
OutputDebugStringA
SetLastError
GetModuleFileNameW
EnterCriticalSection
GetModuleHandleW
GetProcAddress
LoadLibraryW
LocalAlloc
LocalFree
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetTickCount
GetLocalTime
GetModuleHandleA
OutputDebugStringW
Sleep
user32
GetDC
GetFocus
IsWindowVisible
GetKeyState
OffsetRect
InflateRect
GetClientRect
KillTimer
SetTimer
SendMessageA
GetWindowRect
InvalidateRect
EnableWindow
TranslateMessage
ReleaseDC
PeekMessageA
PostMessageA
IsWindow
GetWindow
GetSystemMetrics
LoadMenuW
GetSubMenu
AppendMenuA
DeleteMenu
SetWindowLongA
LoadImageA
GetWindowLongA
SetParent
UnregisterClassA
DispatchMessageA
GetParent
gdi32
GetTextExtentPoint32A
GetStockObject
DeleteDC
oleaut32
VariantTimeToSystemTime
SysFreeString
SystemTimeToVariantTime
msvcp140
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
gdiplus
GdiplusShutdown
vcruntime140
memset
strstr
_CxxThrowException
memcpy
__CxxFrameHandler3
memchr
_purecall
strchr
_except_handler4_common
__std_type_info_destroy_list
memmove
__std_terminate
api-ms-win-crt-runtime-l1-1-0
terminate
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_errno
_invalid_parameter_noinfo
_initterm_e
_initterm
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-convert-l1-1-0
strtol
strtod
atoi
atof
_atoi64
_itoa
_i64toa
_ui64toa
atol
api-ms-win-crt-string-l1-1-0
_strnicmp
strncmp
_stricmp
_memicmp
strncpy
strtok
api-ms-win-crt-stdio-l1-1-0
fclose
fopen
__stdio_common_vsprintf
ftell
fseek
fread
api-ms-win-crt-math-l1-1-0
ceil
_dtest
nan
floor
api-ms-win-crt-time-l1-1-0
_time64
_localtime64_s
api-ms-win-crt-utility-l1-1-0
bsearch
qsort
rand
srand
api-ms-win-crt-heap-l1-1-0
free
_recalloc
realloc
Exports
Exports
Sections
.text Size: 629KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ