QLAPI_GetVersion
QLAPI_Initialize
QLAPI_ObjCreate
QLAPI_ObjDelete
QLAPI_PreTransMsg
QLAPI_Process
QLAPI_Release
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3b39aab59f1a5b7117fdc4094878a4d5a27ae39d3c8406916b47c0a194eb6fc4.dll
Resource
win7-20231023-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
3b39aab59f1a5b7117fdc4094878a4d5a27ae39d3c8406916b47c0a194eb6fc4.dll
Resource
win10v2004-20231020-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
3b39aab59f1a5b7117fdc4094878a4d5a27ae39d3c8406916b47c0a194eb6fc4
-
Size
580KB
-
MD5
b1f18e88c50cd05073e86e4b66a7ca90
-
SHA1
496be151983da4175eb602506cef7d1fb0a10939
-
SHA256
3b39aab59f1a5b7117fdc4094878a4d5a27ae39d3c8406916b47c0a194eb6fc4
-
SHA512
35e1a22284524385e8bc9f0e496817c8f576de2e233d7e6b4e8156905af4a19bf318ea3d3d0ae8ce72c073fc8c6a10e87db9ca810a4477a6e6f4b19ce85158d3
-
SSDEEP
12288:hlqHm+S1BtesoZ3SO1trmJlhZHf290RQU:hoHmp9n+mJnBe9kQ
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b39aab59f1a5b7117fdc4094878a4d5a27ae39d3c8406916b47c0a194eb6fc4
Files
-
3b39aab59f1a5b7117fdc4094878a4d5a27ae39d3c8406916b47c0a194eb6fc4.dll windows:5 windows x86
83b1ea4018537201ff2e91256abaa091
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
qltradectrls
?CreateQL@CQLDlgOperate@@UAEHPAVCWnd@@J@Z
?EnableOperate@CQLDlgOperate@@UAEXH@Z
?End_Operate@CQLDlgOperate@@UAEXH@Z
?End_QueryAssetLiability@CQLDlgOperate@@UAEXPAVCQLPack@@@Z
?End_QueryIndebted@CQLDlgOperate@@UAEXPAD@Z
?End_QueryMaxAmount@CQLDlgOperate@@UAEXPAD@Z
?End_QueryMoney@CQLDlgOperate@@UAEXPAD@Z
?End_QueryStock@CQLDlgOperate@@UAEXPAD@Z
?End_QueryTicketAmount@CQLDlgOperate@@UAEXPAD@Z
?FreshBtnState@CQLDlgOperate@@UAEXH@Z
?FreshData@CQLDlgOperate@@UAEXXZ
?GetReportFuncID@CQLDlgOperate@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetRuntimeClass@CQLDlgOperate@@UBEPAUCRuntimeClass@@XZ
?InitCommon@CQLDlgOperate@@UAEXXZ
?InitParam@CQLDlgOperate@@UAEXXZ
?Initialize@CQLDlgOperate@@UAEHPBU_HEADCLIENT_@@@Z
?IsLastFocusBeforeOperate@CQLDlgOperate@@UAEHJ@Z
?KeyAddOrSubtract@CQLDlgOperate@@UAEXI@Z
?KeyUpOrDown@CQLDlgOperate@@UAEXI@Z
?PTMessage@CQLDlgOperate@@UAEHPAUtagMSG@@@Z
?ProcessChangeAccount@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
?ProcessEvent@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
?ProcessFuncFlagAdd@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
?ProcessFuncFlagDel@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
?ProcessSetFocus@CQLDlgOperate@@UAEJPAU_HEADCLIENT_@@PAX1@Z
?SetControlFocus@CQLDlgOperate@@UAEHJ@Z
?SetHAcc@CQLDlgOperate@@UAEXK@Z
?SetHint@CQLDlgOperate@@UAEXXZ
?SetMenuInfo@CQLDlgOperate@@UAEXJV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@K@Z
?SetMode@CQLDlgOperate@@UAEXH@Z
?StartOperate@CQLDlgOperate@@UAEHXZ
?UpdateUI@CQLDlgOperate@@UAEXJPAX@Z
?onAccountChanged@CQLDlgOperate@@MAEXXZ
?InsertString@CQLComboBox@@QAEHHPBD@Z
?GetMaxLen@CQLEdit@@QAEJXZ
?SetMode@CQLEdit@@QAEXE@Z
??0CQLPassEdit@@QAE@XZ
??1CQLPassEdit@@UAE@XZ
?SetSafeText@CQLPassEdit@@QAEXPBDH@Z
?GetSafeText@CQLPassEdit@@QAEHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetStyle@CQLPassEdit@@QAEXHHH@Z
?ForceUninstallHook@CQLPassEdit@@QAEXXZ
?EnableSoftKeyboardBtn@CQLPassEdit@@QAEXXZ
?SetBitmap@CQLPassEdit@@QAEXPAUHBITMAP__@@00@Z
?OnInitDialog@CQLDlgOperate@@UAEHXZ
?CheckUserInput@CQLDlgOperate@@UAEHXZ
?DeleteAllItems@CQLBaseListCtrl@@QAEHXZ
?SetItemTextColor@CQLBaseListCtrl@@QAEXKK@Z
?OnPaint@CQLDlg@@IAEXXZ
?IsFocusInWnd@CQLDlg@@QAEHXZ
QLUI_InvalidateCtrlRect
?GetWindowTextA@CQLStatic@@QAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?OnCtlColor@CQLDlg@@IAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z
?OnLButtonDown@CQLDlg@@IAEXIVCPoint@@@Z
?SetTemplate@CQLDlg@@QAEXJ@Z
?InstallDaemon@CQLPassEdit@@QAEHPAUHWND__@@H@Z
QLUI_MsgBoxEx
QLUI_LXMsgBoxEx
QLUI_CheckComboBox
QLUI_HasCtrlValid
QLUI_ShowNotice
QLUI_ShowRiskTip_File
QLUI_ShortcutsInit
QLUI_InvalidateCtrl
??0CVerifyCodeCtrl@@QAE@XZ
?GetVerifyCode@CVerifyCodeCtrl@@QAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?RebuildCode@CVerifyCodeCtrl@@QAEXXZ
?SetDPIData@CVerifyCodeCtrl@@QAEXMM@Z
?Init@CVerifyCodeCtrl@@QAEHXZ
??1CVerifyCodeCtrl@@UAE@XZ
?SetCtrlName@CQLWnd@@QAEHPADPBD@Z
QLUI_GetHintMsg
?GetThisClass@CQLDlg@@SGPAUCRuntimeClass@@XZ
??0QlBrowserView@@QAE@PAVCWnd@@@Z
??1QlBrowserView@@UAE@XZ
?Create@QlBrowserView@@QAEHABUtagRECT@@@Z
?Navigate@QlBrowserView@@QAE_NPB_W@Z
?GetMessageMap@QlBrowserView@@MBEPBUAFX_MSGMAP@@XZ
?SetWindowTextA@CQLButton@@QAEXPBD@Z
?Init@CQLBaseListCtrl@@QAEJKPADHKJH@Z
?AdjustColumnWidth@CQLBaseListCtrl@@QAEXXZ
?SetErrorMsg@CQLBaseListCtrl@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?OnDataReturn@CQLDlgOperate@@QAEJIJ@Z
?GetOperatePack@CQLDlgOperate@@UAEXPAVCQLPack@@@Z
?ResetWindow@CQLDlgOperate@@UAEXXZ
??0CQLGUI@@QAE@XZ
??1CQLGUI@@UAE@XZ
?DrawXPBmp@CQLGUI@@QAE?AVCSize@@PAVCDC@@PAVCBitmap@@VCPoint@@2@Z
?GetBitmapRgn@CQLGUI@@QAE?AVCSize@@AAVCRgn@@PAVCBitmap@@K@Z
?OnSetFocus@CQLDlg@@IAEXPAVCWnd@@@Z
??1CQLDlgOperate@@UAE@XZ
??0CQLDlgOperate@@QAE@IPAVCWnd@@J@Z
?Refresh@CWebCtrlWnd@@QAEXXZ
?Navigate@CWebCtrlWnd@@QAEXPBDK00PAXK@Z
?ConfirmOperate@CQLDlgOperate@@UAEHPAVCQLPack@@PADJ@Z
?SetSilent@CWebCtrlWnd@@QAEXH@Z
??1CWebCtrlWnd@@UAE@XZ
QLUI_KeyBoardDestroy
?OnSize@CQLDlg@@IAEXIHH@Z
?AddAnchor@CResizableLayout@@IAEXIVCSize@@0@Z
?SetCheck@CQLButton@@QAEXH@Z
?AddString@CQLListBox@@QAEHPBD@Z
??1CQLListBox@@UAE@XZ
??0CQLListBox@@QAE@XZ
QLUI_MoveCtrlPos
??1CQLListCtrl@@UAE@XZ
??0CQLListCtrl@@QAE@XZ
?SetColumnCnt@CQLBaseListCtrl@@QAEXJ@Z
?GetItemText@CQLBaseListCtrl@@QAEHHHPADH@Z
?GetItemText@CQLBaseListCtrl@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
?ClearAllMapData@CQLBaseListCtrl@@QAEHXZ
?DeleteItem@CQLBaseListCtrl@@QAEHH@Z
?GetItemData@CQLBaseListCtrl@@QAEKH@Z
?SetItemData@CQLBaseListCtrl@@QAEHHK@Z
??0CWebCtrlWnd@@QAE@XZ
?InsertColumn@CQLBaseListCtrl@@QAEHHPBDHHH@Z
?InitHeadFromTemplate@CQLBaseListCtrl@@QAEHHH@Z
?SetItemText@CQLBaseListCtrl@@QAEHHHPBDKK@Z
?InsertItem@CQLBaseListCtrl@@QAEHHPBDKKJHH@Z
?SetWindowTextA@CQLButtonEx@@QAEXPBD@Z
?OnDestroy@CResizableDialog@@IAEXXZ
??1CQLStatic@@UAE@XZ
??0CQLStatic@@QAE@XZ
QLUI_SetHint
?GetLBText@CQLComboBox@@QAEXHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?SetMaxLen@CQLComboBox@@QAEXJ@Z
?WindowProc@CQLDlg@@MAEJIIJ@Z
?WPMessage@CQLDlg@@UAEJIIJ@Z
?ShowHint@CQLDlg@@UAEHPAD@Z
?SetToSimpleMode@CQLDlg@@UAEXXZ
?SetToMFunctionMode@CQLDlg@@UAEXXZ
?SetToCommonMode@CQLDlg@@UAEXXZ
?SetMiniModeValue@CQLDlg@@UAEXH@Z
?SetDrawFrame@CQLDlg@@UAEXHKJ@Z
?QLUI_Update@CQLDlg@@UAEHJPAX@Z
?QLUI_SetIcon@CQLUICtrl@@UAEHHPBD@Z
?QLUI_SetIcon@CQLUICtrl@@UAEHHI@Z
?QLUI_SetFont@CQLUICtrl@@UAEHPBDHPAVCDC@@@Z
?QLUI_SetFont@CQLUICtrl@@UAEHPBDHHHH@Z
?QLUI_SetColor@CQLUICtrl@@UAEHHK@Z
?QLUI_SetBrush@CQLUICtrl@@UAEHHK@Z
?QLUI_SetBrush@CQLUICtrl@@UAEHHHK@Z
?QLUI_SetBitmap@CQLUICtrl@@UAEHHPBD@Z
?QLUI_SetBitmap@CQLUICtrl@@UAEHHI@Z
?PreSubclassWindow@CQLDlg@@MAEXXZ
?PTMessage@CQLDlg@@UAEHPAUtagMSG@@@Z
?OnEraseBkgnd@CQLDlg@@MAEHPAVCDC@@@Z
?NeedsRefresh@CResizableLayout@@MAEHPAUHWND__@@@Z
?LikesClipping@CResizableLayout@@MAEHPAUHWND__@@@Z
?IsDrawFrame@CQLDlg@@UAEHXZ
?IsCanCancel@CQLDlg@@UAEHXZ
?InitFromTemplate@CQLDlg@@UAEHHH@Z
?InitFrame@CQLDlg@@UAEXXZ
?GetTotalClientRect@CResizableLayout@@MAEXPAUtagRECT@@@Z
?GetRuntimeClass@CQLDlg@@UBEPAUCRuntimeClass@@XZ
?GetParam@CQLDlg@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@@Z
?EraseParam@CQLDlg@@UAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?DoModal@CQLDlg@@UAEHXZ
?DestroyWindow@CQLDlg@@UAEHXZ
?Create@CQLDlg@@UAEHIPAVCWnd@@@Z
?CopyParam@CQLDlg@@UAEHPAV1@@Z
?ClearAllParams@CQLDlg@@UAEXXZ
?ArrangeLayoutCallback@CResizableLayout@@MAEHAAVLayoutInfo@1@@Z
?AddParam@CQLDlg@@UAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?ActiveControl@CQLDlg@@UAEXXZ
QLUI_KeyUpOrDown
QLUI_MsgBox
??1CQLButtonEx@@UAE@XZ
??0CQLButtonEx@@QAE@XZ
??1CQLDlg@@UAE@XZ
?SetWindowTextA@CQLDlg@@QAEXPBD@Z
?DDX_Text@CQLDlg@@QAEXPAVCDataExchange@@HAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetThisMessageMap@CQLDlg@@KGPBUAFX_MSGMAP@@XZ
?OnInitDialog@CQLDlg@@MAEHXZ
?DoDataExchange@CQLDlg@@MAEXPAVCDataExchange@@@Z
?PreTranslateMessage@CQLDlg@@UAEHPAUtagMSG@@@Z
??0CQLDlg@@QAE@IPAVCWnd@@J@Z
?GetResizableWnd@CResizableDialog@@MAEPAVCWnd@@XZ
??1CQLButton@@UAE@XZ
??0CQLButton@@QAE@XZ
?SetMaxLen@CQLEdit@@QAEXJ@Z
??1CQLEdit@@UAE@XZ
??0CQLEdit@@QAE@XZ
??1CColorStatic@@UAE@XZ
??0CColorStatic@@QAE@XZ
?SetWindowTextA@CQLStatic@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?AddString@CQLComboBox@@QAEHPBD@Z
??1CQLComboBox@@UAE@XZ
QLUI_KeyBoardShow
??0CQLComboBox@@QAE@XZ
qltrademng
LogError
QlGetSystemInfo
LogInfo
QLAPI_GetInterface
LogWarning
qltradepub
??1CQLPack@@UAE@XZ
??0CDataDict@@QAE@XZ
??1CDataDict@@UAE@XZ
?GetStrNodeCount@CDataDict@@QAEJPBDD@Z
?GetStr@CDataDict@@QAEJPBDPADJEE@Z
?GetStrEx@CDataDict@@QAEXPBDPADGFD@Z
??0CQLPackSend@@QAE@XZ
??1CQLPackSend@@UAE@XZ
?TestFileExist@CDataDict@@QAEHPAD@Z
??0CCrypt@@QAE@PBE@Z
??1CCrypt@@UAE@XZ
?Decrypt@CCrypt@@QAEJPADJ0J@Z
?Encrypt@CCrypt@@QAEJPADJ0J@Z
?RestUserKey@CCrypt@@QAEXPAE@Z
?DeleteUserKey@CCrypt@@QAEXXZ
??0CQLPack@@QAE@XZ
qltradessl
SSL_SM4_encrypt
qltradeutil
QLUTIL_PostMsgAccountLogout
QLUTIL_PostMsgAccountChange
QLUTIL_GetAccOtherName
QLUTIL_TestFileExist
QLUTIL_OEM_GetAccByAttr
QLUTIL_GetStrNode
QLUTIL_GetStrNodeCount
QLUTIL_GetStrBeforeSplitChar
QLUTIL_AllTrim
QLUTIL_GetDecimalID
QLUTIL_FireEventClose
QLUTIL_GetComType
QLUTIL_MakeUserDirMD5
QLUTIL_GetLocalIP
QLUTIL_GetLocalMac
QLUTIL_GetLocalMacByIP
QLUTIL_IniDotQLDatFileExist
QLUTIL_PackCopyPwdField
QLUTIL_ReadUserCfg
QLUTIL_GetUserPath
QLUTIL_QLGCStart
QLUTIL_GetOptSAccount
QLUTIL_GetAccAtt
QLUTIL_GetAccAttName
QLUTIL_PostMsgAccountLogin
QLUTIL_GetAuthCode
QLUTIL_FireEventUKeyExtract
QLUTIL_RecordClientConfigLog
QLUTIL_GetModiPasswordMinTip
QLUTIL_CheckStringReturn
QLUTIL_GetGUUID
QLUTIL_GetShowXFundAccount
mfc140
ord5648
ord503
ord1142
ord2881
ord4705
ord2520
ord2518
ord450
ord3856
ord13028
ord1106
ord13011
ord10202
ord5742
ord12162
ord12194
ord8180
ord12182
ord5894
ord3844
ord6831
ord993
ord6323
ord14582
ord6324
ord14583
ord6322
ord14581
ord7964
ord12474
ord14380
ord11927
ord11928
ord2027
ord7905
ord12888
ord4082
ord4143
ord9353
ord14507
ord7886
ord14509
ord12484
ord12485
ord2484
ord5336
ord8285
ord7961
ord4580
ord12806
ord12869
ord10383
ord6942
ord8347
ord1468
ord7618
ord8429
ord976
ord1449
ord6475
ord6806
ord3250
ord4227
ord9092
ord486
ord3363
ord3364
ord3258
ord4870
ord5228
ord5528
ord5739
ord9305
ord5504
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord3669
ord3689
ord4807
ord8322
ord12863
ord14328
ord14334
ord4656
ord2986
ord1529
ord1526
ord1044
ord310
ord300
ord316
ord8146
ord5861
ord5095
ord8732
ord266
ord265
ord1507
ord1509
ord1650
ord1443
ord8713
ord7782
ord13234
ord6460
ord4841
ord3230
ord14571
ord12348
ord14518
ord12291
ord2477
ord14322
ord8672
ord7998
ord301
ord8445
ord5059
ord6724
ord2376
ord2381
ord1053
ord3330
ord3137
ord6444
ord2210
ord8735
ord1389
ord890
ord2241
ord4655
ord8306
ord3685
ord4865
ord4866
ord4733
ord4085
ord1141
ord9085
ord1068
ord3864
ord2988
ord8703
ord4213
ord5858
ord3142
ord6471
ord2344
ord3694
ord3695
ord2894
ord11917
ord5869
ord1446
ord14592
ord973
ord1140
ord12294
ord5862
ord11907
ord500
ord2387
ord2383
ord7459
ord12115
ord1109
ord10421
ord4084
ord458
ord6505
ord13577
ord13582
ord2200
ord6290
ord501
ord6200
ord2298
ord3825
ord2748
ord12067
ord5401
ord6785
ord3874
ord6540
ord1050
ord324
ord12706
ord2992
ord5898
ord305
ord3005
ord14238
ord6936
ord9088
ord1177
ord2751
ord1661
ord6836
ord14487
ord3866
ord2989
ord8704
ord4215
ord6996
ord3184
ord6562
ord6104
ord6195
ord13681
ord2759
ord14502
ord12163
ord7783
ord14054
ord3933
ord12111
ord1000
ord9166
ord1696
ord14513
ord12074
ord6193
ord13677
ord2758
ord9167
ord8997
ord10963
ord11343
ord4476
ord3395
ord3396
ord3159
ord3298
ord3295
ord10207
ord8173
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord11672
ord9096
ord12032
ord3830
ord11881
ord8922
ord6947
ord10950
ord9213
ord3259
ord13798
ord12205
ord12201
ord1717
ord1739
ord1765
ord1751
ord1772
ord4920
ord4987
ord4932
ord4950
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord5769
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord14421
ord6848
ord13475
ord4468
ord11663
ord14149
ord12969
ord14048
ord13628
ord5911
ord5398
ord12190
ord2680
ord3841
ord1510
ord325
ord1051
ord2359
ord2406
ord2409
ord2372
ord2408
ord485
ord2263
ord2370
ord2178
ord2294
ord2397
ord8776
kernel32
GetCurrentThreadId
FindClose
GetLocalTime
GetTickCount
OutputDebugStringA
GetPrivateProfileStringA
CreateDirectoryA
FindFirstFileA
CopyFileA
MultiByteToWideChar
GetFileTime
FileTimeToSystemTime
lstrcpynA
DeleteFileA
TerminateProcess
IsDebuggerPresent
CheckRemoteDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateProcessA
FindNextFileA
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
GetCurrentProcessId
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSection
ReleaseSemaphore
WaitForSingleObject
Sleep
CreateSemaphoreA
TerminateThread
LocalFree
FormatMessageA
SetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
LoadLibraryW
LocalAlloc
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentDirectoryA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetDriveTypeA
LoadLibraryA
GetLogicalDriveStringsA
lstrlenA
GetProcAddress
FreeLibrary
GetVersionExA
SetPriorityClass
CreateFileA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
GetLastError
HeapFree
OutputDebugStringW
GetCurrentProcess
user32
UnregisterClassA
GetClientRect
GetSystemMetrics
SetWindowLongA
EqualRect
MessageBoxA
SendMessageA
ScreenToClient
UpdateWindow
PeekMessageA
DispatchMessageA
IsWindowVisible
GetFocus
GetDesktopWindow
GetWindowRect
SetTimer
KillTimer
SetWindowRgn
InvalidateRect
PostMessageA
GetDC
ReleaseDC
TranslateMessage
GetIconInfo
DrawIconEx
DestroyIcon
SetForegroundWindow
EnableWindow
wsprintfA
GetKeyState
IsWindow
LoadImageA
GetParent
SetParent
gdi32
CreateCompatibleDC
GetTextExtentPoint32A
DeleteDC
CreateRectRgn
GetObjectA
CreateCompatibleBitmap
CombineRgn
BitBlt
GetStockObject
GetDeviceCaps
DeleteObject
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
oleaut32
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
msvcp140
?_Xlength_error@std@@YAXPBD@Z
ws2_32
inet_addr
gethostname
gdiplus
GdiplusShutdown
iphlpapi
GetAdaptersInfo
vcruntime140
memcpy
__CxxFrameHandler3
strstr
__std_type_info_destroy_list
_except_handler4_common
memmove
__std_terminate
_purecall
strchr
memchr
_CxxThrowException
memset
api-ms-win-crt-string-l1-1-0
isspace
isalnum
_memicmp
_strnicmp
_strupr
tolower
strtok
strncmp
strncpy
_strlwr
strncat
isprint
_stricmp
api-ms-win-crt-stdio-l1-1-0
ftell
fseek
fread
fclose
fgets
_sopen_dispatch
fopen
_write
__stdio_common_vfscanf
fwrite
_lseek
_close
_filelength
__stdio_common_vfprintf
__stdio_common_vsprintf
api-ms-win-crt-heap-l1-1-0
_recalloc
malloc
free
realloc
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_execute_onexit_table
_cexit
_crt_at_quick_exit
_invalid_parameter_noinfo
_initterm
_initialize_narrow_environment
_register_onexit_function
_initterm_e
_configure_narrow_argv
_seh_filter_dll
terminate
_beginthreadex
_invalid_parameter_noinfo_noreturn
_errno
_initialize_onexit_table
api-ms-win-crt-convert-l1-1-0
strtoul
atof
_i64toa
_itoa
_ui64toa
atoi
atol
strtod
strtol
_atoi64
api-ms-win-crt-time-l1-1-0
strftime
_mktime64
_localtime64_s
_localtime64
_time64
api-ms-win-crt-math-l1-1-0
ceil
floor
api-ms-win-crt-utility-l1-1-0
bsearch
qsort
rand
srand
api-ms-win-crt-filesystem-l1-1-0
remove
_findnext64i32
_findclose
_findfirst64i32
rename
_makepath
Exports
Exports
Sections
.text Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ