c561d28953d2412efe5a7f19ea414bf6

Sharing

Copy URL Twitter E-mail

General

Target

c561d28953d2412efe5a7f19ea414bf6
Size

2.4MB
MD5

c561d28953d2412efe5a7f19ea414bf6
SHA1

6ab300463e8a61defb90a21ca1bbdb82b17d1ea9
SHA256

672436a9d47c61c5167acffb8ee058c6e840bfd04e8b3ffcab848d2e6a8ebd50
SHA512

b5e64e1b14e216b3e44fa84efef48d91d5be2c0bea9ec80f25ff495267eaa4d092da5adf5cbc64cc2923285fa5d5a3d8878c0bcb0eee56b3bf8238506f112249
SSDEEP

49152:4EJGkNqw5glUFTImi8Fiv+POqkC7pr9cMl9JnA7a88qO2lV54WsfF:4Chqw5gl40TaiyOqkC75CmEa88dxWiF

Score

3^/10

Malware Config

Signatures

Unsigned PE 17 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QQShare1.0Beta02.exe
unpack002/$PLUGINSDIR/CmdLine.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/KillProcDLL.dll
unpack002/Picture.dll
unpack002/PictureShare.dll
unpack002/QQNet.exe
unpack002/QQShare.exe
unpack002/RecvMsgCom.dll
unpack002/TNProxy.dll
unpack002/ijl20.dll
unpack002/libdb43.dll
unpack002/msvcp60.dll
unpack002/msvcrt.dll
unpack002/presence.dll
unpack002/uninstQQShare.exe
unpack002/videodevice.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
static1/unpack001/QQShare1.0Beta02.exe	nsis_installer_1
static1/unpack002/uninstQQShare.exe	nsis_installer_1

Files

c561d28953d2412efe5a7f19ea414bf6
.rar
QQShare1.0Beta02.exe
.exe windows:4 windows x86 arch:x86

381e79edf6f32b225643e232be0965fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
GetCommandLineA
SetFileTime
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
MulDiv
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
CreateWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
CreateDialogParamA
EmptyClipboard
DestroyWindow
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
GetDlgItem

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/CmdLine.dll
.dll windows:4 windows x86 arch:x86

c64c080ec8ac5892f21264871ed5ffc0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
lstrcpynA
GlobalAlloc
GlobalFree

msvcrt

??3@YAXPAX@Z
_mbsnbcpy
_mbsstr
strlen
strcat
strcpy
memset
atoi
memcpy
??2@YAPAXI@Z
__dllonexit
_onexit

Exports

Exports

ParseCmdLine

Sections

.text
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 507B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

9d433976e02d79532f0d635ee81d0b20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetPrivateProfileIntA
GlobalAlloc
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
lstrcmpiA

user32

GetDlgCtrlID
GetClientRect
SetWindowRgn
LoadIconA
MapWindowPoints
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadImageA

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

97c84efb92e9e74c911abc996572ac5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
TerminateProcess
lstrcmpiA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
GetProcAddress
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 459B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
Data/0.1
Data/0.cbp
.jpg
Data/11B1808A8C27635D66B6B501404C1A4C_1.bin
Data/31E1712F99F1AF5FE9C7BC7E0846B83F_1.bin
Data/751ABA8988403AAF27CDF9F5DE857539_1.bin
Data/7C0E103CC056B6F72BF49DB12CB5AC82_1.bin
Data/8424EDD5D450B42E3A4B72BC3A152ED0_1.bin
Data/916177953BC083B171CD075CB737315E_1.bin
Data/99AA3BFF2A677E60392C281C5295C9BA_1.bin
Data/A0354BF1A75F7D7B9C55C482C82CD84C_1.bin
Data/C523820C87E8CF57A28F15C1D5D22229_1.bin
Data/D75D0B4361D2D2EE884A72A3AB2B57F8_1.bin
Data/D9FAAB26D9ADF6A61498A704C7D1C0D2_1.bin
Data/FA15F8DBAAB2AEE0908FAC704C0B5D95_1.bin
Emoticons/bmp/1.bmp
Emoticons/bmp/10.bmp
Emoticons/bmp/11.bmp
Emoticons/bmp/12.bmp
Emoticons/bmp/13.bmp
Emoticons/bmp/14.bmp
Emoticons/bmp/15.bmp
Emoticons/bmp/16.bmp
Emoticons/bmp/17.bmp
Emoticons/bmp/18.bmp
Emoticons/bmp/19.bmp
Emoticons/bmp/2.bmp
Emoticons/bmp/20.bmp
Emoticons/bmp/21.bmp
Emoticons/bmp/22.bmp
Emoticons/bmp/23.bmp
Emoticons/bmp/24.bmp
Emoticons/bmp/25.bmp
Emoticons/bmp/26.bmp
Emoticons/bmp/27.bmp
Emoticons/bmp/28.bmp
Emoticons/bmp/29.bmp
Emoticons/bmp/3.bmp
Emoticons/bmp/30.bmp
Emoticons/bmp/31.bmp
Emoticons/bmp/32.bmp
Emoticons/bmp/33.bmp
Emoticons/bmp/34.bmp
Emoticons/bmp/35.bmp
Emoticons/bmp/36.bmp
Emoticons/bmp/37.bmp
Emoticons/bmp/38.bmp
Emoticons/bmp/39.bmp
Emoticons/bmp/4.bmp
Emoticons/bmp/40.bmp
Emoticons/bmp/41.bmp
Emoticons/bmp/42.bmp
Emoticons/bmp/43.bmp
Emoticons/bmp/44.bmp
Emoticons/bmp/45.bmp
Emoticons/bmp/46.bmp
Emoticons/bmp/47.bmp
Emoticons/bmp/48.bmp
Emoticons/bmp/49.bmp
Emoticons/bmp/5.bmp
Emoticons/bmp/50.bmp
Emoticons/bmp/51.bmp
Emoticons/bmp/52.bmp
Emoticons/bmp/53.bmp
Emoticons/bmp/54.bmp
Emoticons/bmp/55.bmp
Emoticons/bmp/56.bmp
Emoticons/bmp/57.bmp
Emoticons/bmp/58.bmp
Emoticons/bmp/59.bmp
Emoticons/bmp/6.bmp
Emoticons/bmp/60.bmp
Emoticons/bmp/61.bmp
Emoticons/bmp/62.bmp
Emoticons/bmp/63.bmp
Emoticons/bmp/64.bmp
Emoticons/bmp/65.bmp
Emoticons/bmp/66.bmp
Emoticons/bmp/67.bmp
Emoticons/bmp/68.bmp
Emoticons/bmp/69.bmp
Emoticons/bmp/7.bmp
Emoticons/bmp/70.bmp
Emoticons/bmp/71.bmp
Emoticons/bmp/72.bmp
Emoticons/bmp/73.bmp
Emoticons/bmp/74.bmp
Emoticons/bmp/75.bmp
Emoticons/bmp/76.bmp
Emoticons/bmp/77.bmp
Emoticons/bmp/78.bmp
Emoticons/bmp/79.bmp
Emoticons/bmp/8.bmp
Emoticons/bmp/80.bmp
Emoticons/bmp/81.bmp
Emoticons/bmp/82.bmp
Emoticons/bmp/83.bmp
Emoticons/bmp/84.bmp
Emoticons/bmp/85.bmp
Emoticons/bmp/86.bmp
Emoticons/bmp/87.bmp
Emoticons/bmp/88.bmp
Emoticons/bmp/89.bmp
Emoticons/bmp/9.bmp
Emoticons/bmp/90.bmp
Emoticons/bmp/91.bmp
Emoticons/bmp/92.bmp
Emoticons/bmp/93.bmp
Emoticons/bmp/94.bmp
Emoticons/bmp/95.bmp
Emoticons/bmp/96.bmp
Emoticons/bmp/Thumbs.db
Emoticons/gif/0.gif
.gif
Emoticons/gif/1.gif
.gif
Emoticons/gif/10.gif
.gif
Emoticons/gif/11.gif
.gif
Emoticons/gif/12.gif
.gif
Emoticons/gif/13.gif
.gif
Emoticons/gif/14.gif
.gif
Emoticons/gif/15.gif
.gif
Emoticons/gif/16.gif
.gif
Emoticons/gif/17.gif
.gif
Emoticons/gif/18.gif
.gif
Emoticons/gif/19.gif
.gif
Emoticons/gif/2.gif
.gif
Emoticons/gif/20.gif
.gif
Emoticons/gif/21.gif
.gif
Emoticons/gif/22.gif
.gif
Emoticons/gif/23.gif
.gif
Emoticons/gif/24.gif
.gif
Emoticons/gif/25.gif
.gif
Emoticons/gif/26.gif
.gif
Emoticons/gif/27.gif
.gif
Emoticons/gif/28.gif
.gif
Emoticons/gif/29.gif
.gif
Emoticons/gif/3.gif
.gif
Emoticons/gif/30.gif
.gif
Emoticons/gif/31.gif
.gif
Emoticons/gif/32.gif
.gif
Emoticons/gif/33.gif
.gif
Emoticons/gif/34.gif
.gif
Emoticons/gif/35.gif
.gif
Emoticons/gif/36.gif
.gif
Emoticons/gif/37.gif
.gif
Emoticons/gif/38.gif
.gif
Emoticons/gif/39.gif
.gif
Emoticons/gif/4.gif
.gif
Emoticons/gif/40.gif
.gif
Emoticons/gif/41.gif
.gif
Emoticons/gif/42.gif
.gif
Emoticons/gif/43.gif
.gif
Emoticons/gif/44.gif
.gif
Emoticons/gif/45.gif
.gif
Emoticons/gif/46.gif
.gif
Emoticons/gif/47.gif
.gif
Emoticons/gif/48.gif
.gif
Emoticons/gif/49.gif
.gif
Emoticons/gif/5.gif
.gif
Emoticons/gif/50.gif
.gif
Emoticons/gif/51.gif
.gif
Emoticons/gif/52.gif
.gif
Emoticons/gif/53.gif
.gif
Emoticons/gif/54.gif
.gif
Emoticons/gif/55.gif
.gif
Emoticons/gif/56.gif
.gif
Emoticons/gif/57.gif
.gif
Emoticons/gif/58.gif
.gif
Emoticons/gif/59.gif
.gif
Emoticons/gif/6.gif
.gif
Emoticons/gif/60.gif
.gif
Emoticons/gif/61.gif
.gif
Emoticons/gif/62.gif
.gif
Emoticons/gif/63.gif
.gif
Emoticons/gif/64.gif
.gif
Emoticons/gif/65.gif
.gif
Emoticons/gif/66.gif
.gif
Emoticons/gif/67.gif
.gif
Emoticons/gif/68.gif
.gif
Emoticons/gif/69.gif
.gif
Emoticons/gif/7.gif
.gif
Emoticons/gif/70.gif
.gif
Emoticons/gif/71.gif
.gif
Emoticons/gif/72.gif
.gif
Emoticons/gif/73.gif
.gif
Emoticons/gif/74.gif
.gif
Emoticons/gif/75.gif
.gif
Emoticons/gif/76.gif
.gif
Emoticons/gif/77.gif
.gif
Emoticons/gif/78.gif
.gif
Emoticons/gif/79.gif
.gif
Emoticons/gif/8.gif
.gif
Emoticons/gif/80.gif
.gif
Emoticons/gif/81.gif
.gif
Emoticons/gif/82.gif
.gif
Emoticons/gif/83.gif
.gif
Emoticons/gif/84.gif
.gif
Emoticons/gif/85.gif
.gif
Emoticons/gif/86.gif
.gif
Emoticons/gif/87.gif
.gif
Emoticons/gif/88.gif
.gif
Emoticons/gif/89.gif
.gif
Emoticons/gif/9.gif
.gif
Emoticons/gif/90.gif
.gif
Emoticons/gif/91.gif
.gif
Emoticons/gif/92.gif
.gif
Emoticons/gif/93.gif
.gif
Emoticons/gif/94.gif
.gif
Emoticons/gif/95.gif
.gif
Emoticons/gif/Thumbs.db
NEWFACE/1-1.bmp
NEWFACE/1.bmp
NEWFACE/100_m.bmp
NEWFACE/10_m.bmp
NEWFACE/11_m.bmp
NEWFACE/12_m.bmp
NEWFACE/13_m.bmp
NEWFACE/14_m.bmp
NEWFACE/15_m.bmp
NEWFACE/16_m.bmp
NEWFACE/17_m.bmp
NEWFACE/18_m.bmp
NEWFACE/19_m.bmp
NEWFACE/1_m.bmp
NEWFACE/20_m.bmp
NEWFACE/21_m.bmp
NEWFACE/22_m.bmp
NEWFACE/23_m.bmp
NEWFACE/24_m.bmp
NEWFACE/25_m.bmp
NEWFACE/26_m.bmp
NEWFACE/27_m.bmp
NEWFACE/28_m.bmp
NEWFACE/29_m.bmp
NEWFACE/2_m.bmp
NEWFACE/30_m.bmp
NEWFACE/31_m.bmp
NEWFACE/32_m.bmp
NEWFACE/33_m.bmp
NEWFACE/34_m.bmp
NEWFACE/35_m.bmp
NEWFACE/36_m.bmp
NEWFACE/37_m.bmp
NEWFACE/38_m.bmp
NEWFACE/39_m.bmp
NEWFACE/3_m.bmp
NEWFACE/40_m.bmp
NEWFACE/41_m.bmp
NEWFACE/42_m.bmp
NEWFACE/43_m.bmp
NEWFACE/44_m.bmp
NEWFACE/45_m.bmp
NEWFACE/46_m.bmp
NEWFACE/47_m.bmp
NEWFACE/48_m.bmp
NEWFACE/49_m.bmp
NEWFACE/4_m.bmp
NEWFACE/50_m.bmp
NEWFACE/51_m.bmp
NEWFACE/52_m.bmp
NEWFACE/53_m.bmp
NEWFACE/54_m.bmp
NEWFACE/55_m.bmp
NEWFACE/56_m.bmp
NEWFACE/57_m.bmp
NEWFACE/58_m.bmp
NEWFACE/59_m.bmp
NEWFACE/5_m.bmp
NEWFACE/60_m.bmp
NEWFACE/61_m.bmp
NEWFACE/62_m.bmp
NEWFACE/63_m.bmp
NEWFACE/64_m.bmp
NEWFACE/65_m.bmp
NEWFACE/66_m.bmp
NEWFACE/67_m.bmp
NEWFACE/68_m.bmp
NEWFACE/69_m.bmp
NEWFACE/6_m.bmp
NEWFACE/70_m.bmp
NEWFACE/71_m.bmp
NEWFACE/72_m.bmp
NEWFACE/73_m.bmp
NEWFACE/74_m.bmp
NEWFACE/75_m.bmp
NEWFACE/76_m.bmp
NEWFACE/77_m.bmp
NEWFACE/78_m.bmp
NEWFACE/79_m.bmp
NEWFACE/7_m.bmp
NEWFACE/80_m.bmp
NEWFACE/81_m.bmp
NEWFACE/82_m.bmp
NEWFACE/83_m.bmp
NEWFACE/84_m.bmp
NEWFACE/85_m.bmp
NEWFACE/86_m.bmp
NEWFACE/87_m.bmp
NEWFACE/88_m.bmp
NEWFACE/89_m.bmp
NEWFACE/8_m.bmp
NEWFACE/90_m.bmp
NEWFACE/91_m.bmp
NEWFACE/92_m.bmp
NEWFACE/93_m.bmp
NEWFACE/94_m.bmp
NEWFACE/95_m.bmp
NEWFACE/96_m.bmp
NEWFACE/97_m.bmp
NEWFACE/98_m.bmp
NEWFACE/99_m.bmp
NEWFACE/9_m.bmp
Picture.dll
.dll regsvr32 windows:4 windows x86 arch:x86

6f2e799f21b27c53e83a536cafe04fbc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyA
lstrcatA
GetProcAddress
GetSystemInfo
GetCurrentThreadId
InterlockedIncrement
GetCurrentProcess
HeapAlloc
HeapCreate
LocalAlloc
InterlockedExchange
RaiseException
GlobalLock
ReadFile
GlobalUnlock
lstrlenW
WideCharToMultiByte
CreateFileA
WriteFile
CloseHandle
GetTickCount
InterlockedDecrement
lstrcpynA
DisableThreadLibraryCalls
IsDBCSLeadByte
GetLastError
lstrcmpiA
LoadLibraryExA
SizeofResource
FindResourceA
LoadResource
GetShortPathNameA
FreeLibrary
GetModuleFileNameA
SetFilePointer
lstrlenA
MultiByteToWideChar
GetModuleHandleA
GlobalAlloc
LoadLibraryA
FlushInstructionCache

user32

SetFocus
SetWindowPos
FillRect
WindowFromDC
SetWindowRgn
IsChild
ShowWindow
GetFocus
IntersectRect
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA
EndPaint
GetClientRect
GetParent
InvalidateRect
CharNextA
DefWindowProcA
DestroyWindow
IsWindow
GetKeyState
PtInRect
UnionRect
OffsetRect
EqualRect
CreateWindowExA
BeginPaint
CallWindowProcA
KillTimer
SetTimer
IsWindowVisible
GetDC
SendMessageA
ReleaseDC
SetWindowLongA
GetWindowLongA

gdi32

SelectObject
BitBlt
DeleteObject
CreateCompatibleDC
RestoreDC
DeleteDC
GetDeviceCaps
SetWindowOrgEx
SetMapMode
SetViewportOrgEx
LPtoDP
CreateDCA
SaveDC
DeleteMetaFile
CloseMetaFile
CreateRectRgnIndirect
CreateMetaFileA
SetWindowExtEx
CreateCompatibleBitmap

advapi32

RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA

ole32

OleSaveToStream
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
WriteClassStm
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

oleaut32

SysStringByteLen
VariantChangeType
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
VarUI4FromStr
VariantClear
OleCreatePropertyFrame
SysAllocStringByteLen
SysFreeString

msvcrt

_EH_prolog
realloc
wcscmp
strncpy
??2@YAPAXI@Z
__CxxFrameHandler
free
memset
malloc
?terminate@@YAXXZ
memcpy
memcmp
_purecall
_except_handler3
??3@YAXPAX@Z
__dllonexit
_onexit
_initterm
_adjust_fdiv

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PictureShare.dll
.dll regsvr32 windows:4 windows x86 arch:x86

362f0357ef93fa2ec525b165884f9fe9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup
gethostname
getprotobyname
socket
WSAGetLastError
connect
bind
recvfrom
sendto
inet_ntoa
htonl
ntohl
ntohs
inet_addr
htons
gethostbyname
send
recv
closesocket
setsockopt
WSACleanup
select
__WSAFDIsSet
ioctlsocket

gdi32

CreateDIBitmap
ExtTextOutA
GetDIBits
GetTextExtentPoint32A
DeleteDC
DeleteObject
CreateCompatibleDC
SelectObject
CreateFontIndirectA

kernel32

GetFileAttributesA
FindClose
GetLastError
CreateDirectoryA
FindNextFileA
QueryPerformanceFrequency
FindFirstFileA
ReleaseMutex
QueryPerformanceCounter
CreateMutexA
SetFileAttributesA
CopyFileA
GetModuleHandleA
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
DeleteFileA
CloseHandle
CreateThread
CreateEventA
WinExec
LeaveCriticalSection
EnterCriticalSection
Sleep
WaitForSingleObject
SetEvent
LoadLibraryA
FreeLibrary
ResetEvent
GetProcAddress
GetVersionExA
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrlenA
GetModuleFileNameA

user32

DestroyWindow
GetDesktopWindow
LoadCursorA
RegisterClassA
CreateWindowExA
SetWindowLongA
GetWindowLongA
KillTimer
SetTimer
PostMessageA
DefWindowProcA
UnregisterClassA
LoadIconA

advapi32

GetUserNameA

ijl20

ord5
ord4
ord3
ord2

libdb43

ord1

msvcp60

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0Init@ios_base@std@@QAE@XZ

msvcrt

printf
free
_purecall
memcpy
_stricmp
?terminate@@YAXXZ
_except_handler3
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
localtime
fprintf
fflush
_errno
strerror
_beginthread
malloc
strtod
strtol
strcpy
memset
__CxxFrameHandler
strcat
fclose
rand
clock
sprintf
??2@YAPAXI@Z
ftell
fseek
fopen
strlen
fwrite
fread
strncpy
srand
time
floor
memcmp
_ltoa
strstr
atoi
_mbsrchr
_ftol
_itoa
_splitpath
strncmp
_CxxThrowException
_CIpow
exit

ole32

CoFreeLibrary
CoLoadLibrary

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 560KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
QQNet.exe
.exe windows:4 windows x86 arch:x86

2d3240690f203815132c6d3be7a51046

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GetCurrentThreadId
GetCommandLineA
InitializeCriticalSection
GetModuleFileNameA
lstrcmpiA
InterlockedIncrement
lstrlenW
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
MultiByteToWideChar
GetShortPathNameA
SetCurrentDirectoryA
GetTickCount
ResetEvent
MapViewOfFileEx
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
GetStartupInfoA
GetModuleHandleA
lstrlenA
OpenProcess
FreeLibrary
GetCurrentProcessId
Sleep
CreateEventA
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
CreateMutexA
ReleaseMutex
ReadProcessMemory
GetThreadSelectorEntry
SetEvent
VirtualQueryEx
GetCurrentProcess
GetCurrentThread
CreateFileA
ReadFile
SetFilePointer
VirtualQuery
TlsSetValue
TlsFree
TlsAlloc
TlsGetValue
DeleteFileA
WritePrivateProfileStringA
TerminateProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryA
GetProcAddress
GetLastError
SetErrorMode
SetUnhandledExceptionFilter

user32

PostThreadMessageA
GetMessageA
DispatchMessageA
CharNextA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA

ole32

CoCreateInstance
CoRevokeClassObject
CoTaskMemFree
CoRegisterClassObject
CoUninitialize
CoInitialize
StringFromCLSID

oleaut32

SysFreeString
LoadRegTypeLi
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData

ws2_32

WSAStartup
WSACleanup
closesocket
htons
ntohs
bind
inet_addr
listen
sendto
gethostbyname
recvfrom
send
accept
socket
htonl
ntohl
inet_ntoa
select
gethostname
ioctlsocket
setsockopt
recv
getpeername
WSAGetLastError
connect
__WSAFDIsSet

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z

msvcrt

??2@YAPAXI@Z
memcmp
_CxxThrowException
memcpy
wcstombs
_beginthreadex
_mbsrchr
sprintf
strftime
localtime
time
printf
fputc
_iob
srand
rand
_mbslwr
_ftol
calloc
free
_except_handler3
memmove
strncpy
strstr
atoi
isdigit
fgetc
exit
malloc
_purecall
fprintf
perror
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcat
_EH_prolog
__CxxFrameHandler
strrchr
strlen
strcpy
_strlwr
strcmp
memset

imagehlp

StackWalk
SymLoadModule
SymSetOptions
SymInitialize
SymFunctionTableAccess
SymGetModuleInfo

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

iphlpapi

GetAdaptersInfo
GetIfEntry

wininet

InternetGetConnectedState

Sections

.text
Size: 524KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
QQShare.exe
.exe windows:4 windows x86 arch:x86

10dffe9ec013cc8b3c7985b8f1ff455b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4234
ord4299
ord4284
ord4710
ord324
ord3706
ord3092
ord3920
ord1641
ord2380
ord3089
ord6880
ord4123
ord2642
ord3571
ord3693
ord755
ord816
ord640
ord4133
ord4297
ord5788
ord472
ord6172
ord5789
ord5875
ord5785
ord1640
ord323
ord562
ord470
ord2582
ord3370
ord4402
ord3640
ord809
ord693
ord556
ord4243
ord6242
ord6696
ord1088
ord2122
ord2862
ord2096
ord2408
ord384
ord686
ord3301
ord2714
ord2575
ord4396
ord3574
ord609
ord3394
ord2587
ord4406
ord3729
ord804
ord4267
ord6442
ord1233
ord2078
ord3742
ord6197
ord6605
ord3398
ord3733
ord810
ord4271
ord3573
ord5787
ord283
ord6877
ord3296
ord5148
ord4694
ord3914
ord4506
ord4125
ord654
ord341
ord5858
ord4425
ord3597
ord6597
ord6800
ord6650
ord6591
ord6807
ord6857
ord6823
ord6855
ord6832
ord6859
ord6867
ord6847
ord6839
ord6846
ord2571
ord6816
ord6815
ord6812
ord6845
ord6856
ord6835
ord4589
ord4588
ord4899
ord4370
ord4892
ord6817
ord5076
ord4340
ord4347
ord4720
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord5240
ord5281
ord3748
ord1725
ord5260
ord6614
ord6691
ord4432
ord6514
ord6478
ord6699
ord6814
ord6808
ord3721
ord795
ord6805
ord2233
ord2820
ord6270
ord1644
ord5450
ord6394
ord5440
ord6383
ord2301
ord2289
ord2370
ord2302
ord6334
ord2614
ord6199
ord4224
ord6385
ord668
ord2770
ord356
ord4476
ord4242
ord2723
ord2390
ord3059
ord5100
ord5103
ord4467
ord4303
ord3350
ord5012
ord6663
ord5472
ord6140
ord6858
ord4278
ord4151
ord4077
ord5237
ord5282
ord2649
ord1665
ord4436
ord5252
ord4427
ord3623
ord674
ord366
ord2092
ord5030
ord2244
ord4287
ord4457
ord6380
ord613
ord5873
ord289
ord4317
ord4981
ord4499
ord2860
ord5953
ord1862
ord4220
ord2584
ord1775
ord5280
ord559
ord2438
ord6144
ord1175
ord2567
ord2753
ord2841
ord2107
ord1270
ord2393
ord1271
ord2431
ord3807
ord6178
ord2089
ord1151
ord1193
ord6876
ord4367
ord5344
ord3273
ord3579
ord438
ord614
ord4226
ord5685
ord3274
ord736
ord439
ord3216
ord6883
ord5510
ord1647
ord429
ord4324
ord4325
ord1949
ord4021
ord5495
ord5678
ord5781
ord5736
ord2504
ord1570
ord1197
ord6379
ord6283
ord6282
ord6143
ord4160
ord430
ord772
ord6142
ord5606
ord5860
ord500
ord2566
ord2152
ord6128
ord1187
ord926
ord3708
ord781
ord5937
ord6134
ord6136
ord3763
ord1756
ord3771
ord5223
ord3283
ord2935
ord2516
ord360
ord2116
ord3903
ord3767
ord5834
ord1567
ord268
ord3811
ord1158
ord2863
ord4774
ord1176
ord3499
ord2515
ord355
ord2100
ord3287
ord1848
ord2452
ord3998
ord3286
ord3996
ord6008
ord4000
ord6007
ord3303
ord1768
ord6378
ord798
ord1997
ord5465
ord5194
ord533
ord465
ord857
ord1105
ord1572
ord1669
ord2652
ord1799
ord3353
ord290
ord4003
ord2729
ord6467
ord2727
ord2730
ord3258
ord1265
ord4277
ord6662
ord610
ord287
ord538
ord5603
ord5602
ord5608
ord5857
ord6139
ord1980
ord3178
ord4058
ord2781
ord2448
ord2044
ord4673
ord939
ord941
ord2915
ord5572
ord1601
ord2818
ord2725
ord616
ord641
ord1200
ord924
ord537
ord535
ord5683
ord4129
ord858
ord5710
ord1134
ord2621
ord823
ord6438
ord2514
ord326
ord2086
ord1146
ord6215
ord1168
ord1232
ord825
ord561
ord540
ord815
ord800
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord6052
ord4998
ord4853
ord4376
ord5265
ord6320
ord3797
ord2414
ord2859
ord2754
ord3317
ord2243
ord3663
ord3626
ord3619
ord2578
ord4218
ord2023
ord539
ord6453
ord2379
ord4275
ord567
ord818
ord656
ord3610
ord3402
ord5277
ord4407
ord5981
ord2864
ord3874
ord6374
ord3582
ord4627
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord5163
ord2385
ord5241
ord4398
ord1776
ord4078
ord6055
ord2411
ord3810
ord5186
ord3318
ord5442
ord1979
ord860
ord5861
ord861
ord354
ord922
ord2764
ord541
ord801
ord665
ord3654
ord812
ord3403
ord2879
ord5199
ord1576
ord2878
ord975
ord4326

msvcrt

_snprintf
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
ftell
fseek
fwrite
fprintf
fflush
_beginthread
_purecall
_splitpath
srand
rand
_mbslwr
_CxxThrowException
time
localtime
strftime
_mbsrchr
strcat
_controlfp
_beginthreadex
_mbsnbcmp
_mbsstr
_mbsncmp
_mbschr
_except_handler3
isdigit
isupper
islower
abs
printf
memmove
tolower
strncpy
fopen
fclose
strcmp
_ftol
memcmp
swprintf
_wtoi
_wtol
_mbsicmp
atol
memcpy
sprintf
atoi
_mbscmp
wcslen
memset
free
__CxxFrameHandler
malloc
strcpy
strlen
_ultoa
_stricmp
_itoa
_setmbcp

kernel32

GetStartupInfoA
QueryPerformanceCounter
HeapFree
GetProcessHeap
HeapAlloc
LocalFree
GetCurrentThread
GetThreadSelectorEntry
VirtualQueryEx
VirtualQuery
SetFilePointer
WriteFile
SetErrorMode
SetUnhandledExceptionFilter
GetFileAttributesExA
GetTempPathA
GetCurrentProcess
SetProcessWorkingSetSize
FindFirstFileA
FindNextFileA
FindClose
lstrcpyA
CreateThread
SetEvent
TerminateThread
ResetEvent
WaitForSingleObject
ResumeThread
CreateEventA
InterlockedDecrement
MulDiv
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
GetVersion
GetProcAddress
lstrcpynA
CreateFileA
GetFileSize
ReadFile
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetModuleHandleA
GetVersionExA
GlobalMemoryStatus
GetDiskFreeSpaceExA
GetTickCount
DeleteFileA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleFileNameA
ReleaseMutex
CloseHandle
CreateMutexA
GetLastError
FreeLibrary
GetCommandLineA
ExitProcess
QueryPerformanceFrequency
LoadLibraryA

user32

FrameRect
GetSysColorBrush
FillRect
IntersectRect
GetDoubleClickTime
DrawStateA
DrawIcon
CloseWindow
GetUpdateRect
GetSystemMenu
ChildWindowFromPoint
IsIconic
SetForegroundWindow
SetParent
IsChild
GetMessagePos
SetActiveWindow
RegisterClipboardFormatA
PeekMessageA
LoadBitmapA
TranslateMessage
SetRectEmpty
GetKeyState
DrawFrameControl
FlashWindowEx
GetForegroundWindow
GetActiveWindow
MessageBeep
GetScrollInfo
EnableScrollBar
SetScrollInfo
SetScrollPos
ShowScrollBar
DrawEdge
MapWindowPoints
WindowFromDC
GetWindowThreadProcessId
EnableWindow
GetSystemMetrics
ReleaseDC
LoadImageA
DrawIconEx
SendMessageA
LoadIconA
GetCursor
DestroyCursor
DefWindowProcA
InflateRect
AppendMenuA
DestroyIcon
LoadCursorA
UpdateWindow
CreatePopupMenu
GetCapture
ClipCursor
SetCapture
GetMessageA
DispatchMessageA
ReleaseCapture
KillTimer
SetTimer
ShowWindow
GetSysColor
EnableMenuItem
PtInRect
SystemParametersInfoA
IsZoomed
CopyRect
GetClassNameA
GetWindowLongA
RegisterWindowMessageA
CreateWindowExA
SetCursor
GetWindowDC
OffsetRect
GetWindowRgn
ClientToScreen
IsWindowVisible
GetWindowRect
GetWindowTextW
GetWindowTextA
DrawTextW
DrawTextA
IsWindowEnabled
InvalidateRect
ScreenToClient
BeginPaint
EndPaint
GetTopWindow
GetWindow
GetCursorPos
WindowFromPoint
RedrawWindow
SetPropA
GetParent
GetDesktopWindow
GetClientRect
GetDC
SetWindowPos
CallWindowProcA
PostMessageA
SetRect
RemovePropA
SetWindowRgn
SetWindowLongA
SendMessageTimeoutA
GetClassInfoA
GetFocus
GetPropA
IsWindow
FindWindowA

gdi32

PlayEnhMetaFile
IntersectClipRect
CreatePatternBrush
SetBrushOrgEx
SetWindowOrgEx
PatBlt
UnrealizeObject
StretchDIBits
ExtTextOutA
SetPixel
PtInRegion
GetPixel
CreatePolygonRgn
CreateFontA
CreateCompatibleBitmap
GetTextExtentPoint32A
Rectangle
CreateRectRgn
OffsetRgn
DeleteObject
DeleteDC
GetDeviceCaps
CreateDCA
CreateDIBitmap
GetDIBits
GetObjectA
CombineRgn
ExtCreateRegion
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
SetStretchBltMode
SetTextColor
SetBkColor
CreateBitmap
CreateFontIndirectA
SetBkMode
FillRgn
RoundRect
GetStockObject
LineTo
MoveToEx
CreateSolidBrush
CreatePen
CreateRoundRectRgn
CreateRectRgnIndirect
ExtSelectClipRgn
ExcludeClipRect
SelectClipRgn

advapi32

RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

DragFinish
Shell_NotifyIconA
SHGetPathFromIDListA
SHGetFileInfoA
SHGetMalloc
SHGetDesktopFolder
DragQueryPoint
ShellExecuteA
DragQueryFileA

comctl32

ImageList_Remove
ImageList_Replace
ImageList_AddMasked
ImageList_Draw
ImageList_GetIcon
ImageList_GetImageCount
InitCommonControlsEx
_TrackMouseEvent
ImageList_SetImageCount

ole32

CoTaskMemFree
CoTaskMemAlloc
CoLoadLibrary
StgOpenStorage
CoCreateInstance
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleUninitialize
OleInitialize
CoUninitialize
CoInitialize
CoFreeLibrary

olepro32

ord251

oleaut32

VariantClear
SysFreeString
SysAllocString
GetErrorInfo

msvcp60

??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_F?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?_Xran@std@@YAXXZ
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z

gdiplus

GdipCreateHBITMAPFromBitmap
GdipGraphicsClear
GdipBitmapSetResolution
GdiplusShutdown
GdipSetInterpolationMode
GdipFree
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipCloneImage
GdipDisposeImage
GdipGetImageRawFormat
GdipAlloc
GdipDrawImageRectI
GdipDeleteGraphics
GdiplusStartup
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipGetImageGraphicsContext

imagehlp

SymGetModuleInfo
SymLoadModule
SymSetOptions
SymInitialize
StackWalk
SymFunctionTableAccess

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

msimg32

GradientFill

wsock32

bind
WSAGetLastError
select
__WSAFDIsSet
sendto
ntohs
closesocket
recvfrom
WSAStartup
inet_ntoa
WSACleanup
socket
htonl
htons
inet_addr
ioctlsocket
ntohl
gethostbyname

Sections

.text
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RecvMsgCom.dll
.dll regsvr32 windows:4 windows x86 arch:x86

2a0e959a597caaa4f8ed54751a5f6f52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapCreate
GetShortPathNameW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetSystemInfo
GetVersionExW
lstrcmpiW
lstrcpynW
HeapDestroy
GetProcAddress
LoadLibraryW
lstrcpyW
lstrcatW
lstrlenW
HeapReAlloc
HeapFree
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LoadLibraryExW
GetLastError
DebugBreak

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysFreeString
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysStringLen
VarUI4FromStr
SysAllocString
SysAllocStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 921B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Skin/Hand.cur
Skin/hall_bt_maintb_checkpage_down.bmp
Skin/hall_bt_maintb_checkpage_hover.bmp
Skin/hall_bt_maintb_checkpage_normal.bmp
Skin/login_list_bt_down.bmp
Skin/login_list_bt_hover.bmp
Skin/login_list_bt_normal.bmp
Skin/puclic_arrow_down_down.bmp
Skin/puclic_arrow_down_hover.bmp
Skin/puclic_arrow_down_normal.bmp
Skin/puclic_arrow_left_down.bmp
Skin/puclic_arrow_left_hover.bmp
Skin/puclic_arrow_left_normal.bmp
Skin/puclic_arrow_right_down.bmp
Skin/puclic_arrow_right_hover.bmp
Skin/puclic_arrow_right_normal.bmp
Skin/puclic_bt_disable_left.bmp
Skin/puclic_bt_disable_mid.bmp
Skin/puclic_bt_disable_right.bmp
Skin/puclic_bt_down_left.bmp
Skin/puclic_bt_down_mid.bmp
Skin/puclic_bt_down_right.bmp
Skin/puclic_bt_focus_left.bmp
Skin/puclic_bt_focus_mid.bmp
Skin/puclic_bt_focus_right.bmp
Skin/puclic_bt_hover_left.bmp
Skin/puclic_bt_hover_mid.bmp
Skin/puclic_bt_hover_right.bmp
Skin/puclic_bt_normal_left.bmp
Skin/puclic_bt_normal_mid.bmp
Skin/puclic_bt_normal_right.bmp
Skin/puclic_origin_disable.bmp
Skin/qqs-pub-back-nor.bmp
Skin/qqs-pub-back-over.bmp
Skin/qqs-pub-back-press.bmp
Skin/qqs-pub-pred-nor.bmp
Skin/qqs-pub-pred-over.bmp
Skin/qqs-pub-pred-press.bmp
Skin/qqs-pub-refresh-nor.bmp
Skin/qqs-pub-refresh-over.bmp
Skin/qqs-pub-refresh-press.bmp
Skin/qqs-pub-stop-nor.bmp
Skin/qqs-pub-stop-over.bmp
Skin/qqs-pub-stop-press.bmp
Skin/qqs_Navigate-l.bmp
Skin/qqs_Navigate-r.bmp
Skin/qqs_Picture-disable.bmp
Skin/qqs_Picture-nor.bmp
Skin/qqs_Picture-over.bmp
Skin/qqs_Picture-press.bmp
Skin/qqs_Simplify-nor.bmp
Skin/qqs_Simplify-over.bmp
Skin/qqs_Simplify-press.bmp
Skin/qqs_arrow_left_disable.bmp
Skin/qqs_arrow_left_nor.bmp
Skin/qqs_arrow_right_disable.bmp
Skin/qqs_arrow_right_nor.bmp
Skin/qqs_b6-nor.bmp
Skin/qqs_b6-over.bmp
Skin/qqs_b6-press.bmp
Skin/qqs_b7-nor.bmp
Skin/qqs_b7-over.bmp
Skin/qqs_b7-press.bmp
Skin/qqs_chat_chatbt.bmp
Skin/qqs_chat_emotion-nor.bmp
Skin/qqs_chat_emotion-over.bmp
Skin/qqs_chat_emotion-press.bmp
Skin/qqs_chat_face-nor.bmp
Skin/qqs_chat_face-over.bmp
Skin/qqs_chat_face-press.bmp
Skin/qqs_chat_font-nor.bmp
Skin/qqs_chat_font-over.bmp
Skin/qqs_chat_font-press.bmp
Skin/qqs_chat_sendbt-nor.bmp
Skin/qqs_chat_sendbt-over.bmp
Skin/qqs_chat_sendbt-press.bmp
Skin/qqs_chat_sendbt.bmp
Skin/qqs_chatbt-disable.bmp
Skin/qqs_chatbt-disable1.bmp
Skin/qqs_chatbt-nor.bmp
Skin/qqs_chatbt-nor1.bmp
Skin/qqs_chatbt-over.bmp
Skin/qqs_chatbt-over1.bmp
Skin/qqs_chatbt-press.bmp
Skin/qqs_chatbt-press1.bmp
Skin/qqs_close-disable.bmp
Skin/qqs_close-nor.bmp
Skin/qqs_close-over.bmp
Skin/qqs_close-press.bmp
Skin/qqs_closeshare-disable.bmp
Skin/qqs_closeshare-nor.bmp
Skin/qqs_closeshare-over.bmp
Skin/qqs_closeshare-press.bmp
Skin/qqs_closetop-nor.bmp
Skin/qqs_closetop-over.bmp
Skin/qqs_closetop-press.bmp
Skin/qqs_default_compressing.gif
.gif
Skin/qqs_default_transmitting.gif
.gif
Skin/qqs_dlgfollow_follow.bmp
Skin/qqs_dlgfollow_leftbt-nor.bmp
Skin/qqs_dlgfollow_leftbt-press.bmp
Skin/qqs_documentico.bmp
Skin/qqs_ear-b.bmp
Skin/qqs_ear-m.bmp
Skin/qqs_ear-t.bmp
Skin/qqs_earicon.bmp
Skin/qqs_fan-disable.bmp
Skin/qqs_fan-nor.bmp
Skin/qqs_fan-over.bmp
Skin/qqs_fan-press.bmp
Skin/qqs_goback-nor.bmp
Skin/qqs_goback-over.bmp
Skin/qqs_goback-press.bmp
Skin/qqs_help-disable.bmp
Skin/qqs_help-nor.bmp
Skin/qqs_help-over.bmp
Skin/qqs_help-press.bmp
Skin/qqs_imagedraw_frame_line.bmp
Skin/qqs_imagedraw_frame_shadow-l.bmp
Skin/qqs_imagedraw_frame_shadow-m.bmp
Skin/qqs_imagedraw_frame_shadow-r.bmp
Skin/qqs_imagetoolbar_180-nor.bmp
Skin/qqs_imagetoolbar_180-over.bmp
Skin/qqs_imagetoolbar_180-press.bmp
Skin/qqs_imagetoolbar_left90-nor.bmp
Skin/qqs_imagetoolbar_left90-over.bmp
Skin/qqs_imagetoolbar_left90-press.bmp
Skin/qqs_imagetoolbar_right90-nor.bmp
Skin/qqs_imagetoolbar_right90-over.bmp
Skin/qqs_imagetoolbar_right90-press.bmp
Skin/qqs_imagetoolbar_savebt-nor.bmp
Skin/qqs_imagetoolbar_savebt-over.bmp
Skin/qqs_imagetoolbar_savebt-press.bmp
Skin/qqs_imagetoolbar_toolbar.bmp
Skin/qqs_left.bmp
Skin/qqs_line-l.bmp
Skin/qqs_line-r.bmp
Skin/qqs_loading.bmp
Skin/qqs_login.bmp
Skin/qqs_loginbg-l.bmp
Skin/qqs_loginbg-m.bmp
Skin/qqs_loginbg-r.bmp
Skin/qqs_loop_backward_down.bmp
Skin/qqs_loop_backward_hover.bmp
Skin/qqs_loop_backward_normal.bmp
Skin/qqs_loop_chatbut_disable.bmp
Skin/qqs_loop_chatbut_down.bmp
Skin/qqs_loop_chatbut_hover.bmp
Skin/qqs_loop_chatbut_normal.bmp
Skin/qqs_loop_chatbut_open.bmp
Skin/qqs_loop_contrl-m.bmp
Skin/qqs_loop_forward_down.bmp
Skin/qqs_loop_forward_hover.bmp
Skin/qqs_loop_forward_normal.bmp
Skin/qqs_loop_modifyshare-disable.bmp
Skin/qqs_loop_modifyshare-nor.bmp
Skin/qqs_loop_modifyshare-over.bmp
Skin/qqs_loop_modifyshare-press.bmp
Skin/qqs_loop_nextres_disable.bmp
Skin/qqs_loop_nextres_down.bmp
Skin/qqs_loop_nextres_hover.bmp
Skin/qqs_loop_nextres_normal.bmp
Skin/qqs_loop_pause-nor.bmp
Skin/qqs_loop_pause-over.bmp
Skin/qqs_loop_pause-press.bmp
Skin/qqs_loop_play-nor.bmp
Skin/qqs_loop_play-over.bmp
Skin/qqs_loop_play-press.bmp
Skin/qqs_loop_prevres_disable.bmp
Skin/qqs_loop_prevres_down.bmp
Skin/qqs_loop_prevres_hover.bmp
Skin/qqs_loop_prevres_normal.bmp
Skin/qqs_loop_save_down.bmp
Skin/qqs_loop_save_hover.bmp
Skin/qqs_loop_save_normal.bmp
Skin/qqs_loop_scrollbar.bmp
Skin/qqs_loop_simple_scrollbar.bmp
Skin/qqs_loop_stop_down.bmp
Skin/qqs_loop_stop_hover.bmp
Skin/qqs_loop_stop_normal.bmp
Skin/qqs_loop_top_bg.bmp
Skin/qqs_max-nor.bmp
Skin/qqs_max-over.bmp
Skin/qqs_max-press.bmp
Skin/qqs_max_disable.bmp
Skin/qqs_message-left.bmp
Skin/qqs_message-middle.bmp
Skin/qqs_message-right.bmp
Skin/qqs_middle.bmp
Skin/qqs_middle_state.bmp
Skin/qqs_minimum-nor.bmp
Skin/qqs_minimum-over.bmp
Skin/qqs_minimum-press.bmp
Skin/qqs_myshare-disable.bmp
Skin/qqs_myshare-nor.bmp
Skin/qqs_myshare-over.bmp
Skin/qqs_myshare-press.bmp
Skin/qqs_myshare_mtop_toolbar.bmp
Skin/qqs_new-disable.bmp
Skin/qqs_new-nor.bmp
Skin/qqs_new-over.bmp
Skin/qqs_new-press.bmp
Skin/qqs_newshare-disable.bmp
Skin/qqs_newshare-nor.bmp
Skin/qqs_newshare-over.bmp
Skin/qqs_newshare-press.bmp
Skin/qqs_photo_frame.jpg
.jpg
Skin/qqs_photo_frame_bk.jpg
.jpg
Skin/qqs_pin-press-nor.bmp
Skin/qqs_pin-press-over.bmp
Skin/qqs_pin-press-press.bmp
Skin/qqs_pin-unpress-nor.bmp
Skin/qqs_pin-unpress-over.bmp
Skin/qqs_pin-unpress-press.bmp
Skin/qqs_player_screen_bottom_left.bmp
Skin/qqs_player_screen_bottom_right.bmp
Skin/qqs_player_screen_top_left.bmp
Skin/qqs_player_screen_top_right.bmp
Skin/qqs_pub_attend_nor.bmp
Skin/qqs_pub_attend_over.bmp
Skin/qqs_pub_attend_press.bmp
Skin/qqs_pub_bbs_nor.bmp
Skin/qqs_pub_bbs_over.bmp
Skin/qqs_pub_bbs_press.bmp
Skin/qqs_pub_invite_nor.bmp
Skin/qqs_pub_invite_over.bmp
Skin/qqs_pub_invite_press.bmp
Skin/qqs_qqbar-nor.bmp
Skin/qqs_qqbar-ove.bmp
Skin/qqs_qqbar-press.bmp
Skin/qqs_qqbar.bmp
Skin/qqs_qqchat-disable.BMP
Skin/qqs_qqchat-nor.BMP
Skin/qqs_qqchat-over.bmp
Skin/qqs_qqchat-press.BMP
Skin/qqs_resourcesbt-nor.bmp
Skin/qqs_resourcesbt-over.bmp
Skin/qqs_resourcesbt-press.bmp
Skin/qqs_restore-nor.bmp
Skin/qqs_restore-over.bmp
Skin/qqs_restore-press.bmp
Skin/qqs_right.bmp
Skin/qqs_send-disable.bmp
Skin/qqs_send-nor.bmp
Skin/qqs_send-over.bmp
Skin/qqs_send-press.bmp
Skin/qqs_shareflag0.bmp
Skin/qqs_shareflag1.bmp
Skin/qqs_simple_contrl-left.bmp
Skin/qqs_simple_contrl-line.bmp
Skin/qqs_simple_contrl-right.bmp
Skin/qqs_simple_nextres-disable.bmp
Skin/qqs_simple_nextres-nor.bmp
Skin/qqs_simple_nextres-over.bmp
Skin/qqs_simple_nextres-press.bmp
Skin/qqs_simple_pause-disable.bmp
Skin/qqs_simple_pause-nor.bmp
Skin/qqs_simple_pause-over.bmp
Skin/qqs_simple_pause-press.bmp
Skin/qqs_simple_play-disable.bmp
Skin/qqs_simple_play-nor.bmp
Skin/qqs_simple_play-over.bmp
Skin/qqs_simple_play-press.bmp
Skin/qqs_simple_prevres-disable.bmp
Skin/qqs_simple_prevres-nor.bmp
Skin/qqs_simple_prevres-over.bmp
Skin/qqs_simple_prevres-press.bmp
Skin/qqs_split_bottom.bmp
Skin/qqs_split_mid.bmp
Skin/qqs_split_top.bmp
Skin/qqs_state-left.bmp
Skin/qqs_state-middle.bmp
Skin/qqs_state-right.bmp
Skin/qqs_tab-l-default.bmp
Skin/qqs_tab-l-pass.bmp
Skin/qqs_tab-left.bmp
Skin/qqs_tab-m-default.bmp
Skin/qqs_tab-m-pass.bmp
Skin/qqs_tab-middle.bmp
Skin/qqs_tab-r-default.bmp
Skin/qqs_tab-r-pass.bmp
Skin/qqs_tab-right.bmp
Skin/qqs_tips_button_normal_left.bmp
Skin/qqs_tips_button_normal_mid.bmp
Skin/qqs_tips_button_normal_right.BMP
Skin/qqs_tips_button_over_left.bmp
Skin/qqs_tips_button_over_mid.bmp
Skin/qqs_tips_button_over_right.bmp
Skin/qqs_tips_button_press_left.bmp
Skin/qqs_tips_button_press_mid.bmp
Skin/qqs_tips_button_press_right.bmp
Skin/qqs_title-left.bmp
Skin/qqs_title-middle.bmp
Skin/qqs_title-right.bmp
Skin/qqs_titlelogo.bmp
Skin/qqs_toolbar-middle.bmp
Skin/qqs_toolbar-myshare-html.bmp
Skin/qqs_toolbar-myshare-l.bmp
Skin/qqs_toolbar-myshare-m.bmp
Skin/qqs_toolbar-myshare-m1.bmp
Skin/qqs_toolbar-myshare-m2.bmp
Skin/qqs_toolbar-myshare-r.bmp
Skin/qqs_upbt-disable.bmp
Skin/qqs_upbt-nor.bmp
Skin/qqs_upbt-over.bmp
Skin/qqs_upbt-press.bmp
Skin/qqs_upbttop-disable.bmp
Skin/qqs_upbttop-nor.bmp
Skin/qqs_upbttop-over.bmp
Skin/qqs_upbttop-press.bmp
Skin/skin.xml
.xml
Skin/xsplitter.cur
Skin/ysplitter.cur
TNProxy.dll
.dll regsvr32 windows:4 windows x86 arch:x86

9f8eadcf46806950de6799808a314be2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
MapViewOfFileEx
EnterCriticalSection
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
LocalAlloc
DeleteCriticalSection
LeaveCriticalSection
Sleep
LocalFree
InterlockedIncrement
GetTickCount
InterlockedDecrement
InitializeCriticalSection
GetCurrentThreadId
lstrlenA
FormatMessageA

user32

wsprintfA

ole32

CoGetInterfaceAndReleaseStream
CoUninitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
OleRun

oleaut32

VariantClear
SafeArrayUnaccessData
VariantCopy
VariantInit
SafeArrayAccessData
SafeArrayCreate
GetErrorInfo

ws2_32

inet_addr
WSAStartup
WSACleanup

msvcrt

memcmp
_CxxThrowException
memcpy
_adjust_fdiv
free
_initterm
_onexit
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_EH_prolog
memset
malloc
__dllonexit
_beginthreadex
??1type_info@@UAE@XZ

msvcp60

??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cs.txt
ijl20.dll
.dll windows:4 windows x86 arch:x86

bc86a5b208bd1488fc46e8d94c544782

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
CloseHandle
ReadFile
WriteFile
SetFilePointer
GetCommandLineA
GetVersion
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
CreateFileA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers

Exports

Exports

ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite

Sections

.text
Size: 608KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
js/display.js
.js
js/reslist.js
.js
libdb43.dll
.dll .ps1 windows:4 windows x86 arch:x86 polyglot

90f9a49add604bcfce5aaf6ef5476ff9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

msvcrt

realloc
malloc
_getcwd
free
srand
_ftime
strncmp
rand
strftime
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
atol
localtime
sscanf
printf
strncat
getenv
fgets
strchr
_isctype
__mb_cur_max
_pctype
strncpy
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
raise
signal
time
ctime
_errno
qsort
strtoul
strtol
_iob
_vsnprintf
fprintf
vfprintf
fflush
_snprintf
_ftol
fwrite
strerror
getc
fopen
fclose
_mbsrchr
memmove
_mbscmp
strrchr
_getpid
_open
_close

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0Init@ios_base@std@@QAE@XZ

kernel32

GetCurrentProcess
DuplicateHandle
SetEndOfFile
GetFileAttributesA
GetSystemInfo
Sleep
SetFilePointer
WriteFile
ReadFile
MoveFileA
MoveFileExA
DeleteFileA
GetDiskFreeSpaceA
CreateFileA
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
GetFileInformationByHandle
GetSystemTime
FindFirstFileA
FindNextFileA
GetLastError
FindClose
GetVersionExA
GetVersion
GetTempPathA
PulseEvent
InterlockedExchange
InterlockedIncrement
CreateEventA
WaitForSingleObject
CloseHandle
InterlockedDecrement
DisableThreadLibraryCalls

Exports

Exports

??0Db@@QAE@PAVDbEnv@@I@Z
??0DbDeadlockException@@QAE@ABV0@@Z
??0DbDeadlockException@@QAE@PBD@Z
??0DbEnv@@AAE@PAU__db_env@@I@Z
??0DbEnv@@QAE@I@Z
??0DbException@@QAE@ABV0@@Z
??0DbException@@QAE@H@Z
??0DbException@@QAE@PBD0H@Z
??0DbException@@QAE@PBD@Z
??0DbException@@QAE@PBDH@Z
??0DbLock@@IAE@U__db_lock_u@@@Z
??0DbLock@@QAE@ABV0@@Z
??0DbLock@@QAE@XZ
??0DbLockNotGrantedException@@QAE@ABV0@@Z
??0DbLockNotGrantedException@@QAE@PBD@Z
??0DbLockNotGrantedException@@QAE@PBDW4db_lockop_t@@W4db_lockmode_t@@PBVDbt@@VDbLock@@H@Z
??0DbMemoryException@@QAE@ABV0@@Z
??0DbMemoryException@@QAE@PAVDbt@@@Z
??0DbMemoryException@@QAE@PBDPAVDbt@@@Z
??0DbMpoolFile@@AAE@XZ
??0DbMultipleDataIterator@@QAE@ABVDbt@@@Z
??0DbMultipleIterator@@QAE@ABVDbt@@@Z
??0DbMultipleKeyDataIterator@@QAE@ABVDbt@@@Z
??0DbMultipleRecnoDataIterator@@QAE@ABVDbt@@@Z
??0DbRunRecoveryException@@QAE@ABV0@@Z
??0DbRunRecoveryException@@QAE@PBD@Z
??0DbSequence@@AAE@PAU__db_sequence@@@Z
??0DbSequence@@QAE@PAVDb@@I@Z
??0DbTxn@@AAE@PAU__db_txn@@@Z
??0DbTxn@@AAE@XZ
??0Dbt@@QAE@ABV0@@Z
??0Dbt@@QAE@PAXI@Z
??0Dbt@@QAE@XZ
??1Db@@UAE@XZ
??1DbDeadlockException@@UAE@XZ
??1DbEnv@@UAE@XZ
??1DbException@@UAE@XZ
??1DbLockNotGrantedException@@UAE@XZ
??1DbLogc@@AAE@XZ
??1DbMemoryException@@UAE@XZ
??1DbMpoolFile@@MAE@XZ
??1DbRunRecoveryException@@UAE@XZ
??1DbSequence@@UAE@XZ
??1DbTxn@@EAE@XZ
??1Dbc@@AAE@XZ
??1Dbt@@QAE@XZ
??4DbDeadlockException@@QAEAAV0@ABV0@@Z
??4DbException@@QAEAAV0@ABV0@@Z
??4DbLock@@QAEAAV0@ABV0@@Z
??4DbLockNotGrantedException@@QAEAAV0@ABV0@@Z
??4DbLogc@@QAEAAV0@ABV0@@Z
??4DbLsn@@QAEAAV0@ABV0@@Z
??4DbMemoryException@@QAEAAV0@ABV0@@Z
??4DbMultipleDataIterator@@QAEAAV0@ABV0@@Z
??4DbMultipleIterator@@QAEAAV0@ABV0@@Z
??4DbMultipleKeyDataIterator@@QAEAAV0@ABV0@@Z
??4DbMultipleRecnoDataIterator@@QAEAAV0@ABV0@@Z
??4DbPreplist@@QAEAAV0@ABV0@@Z
??4DbRunRecoveryException@@QAEAAV0@ABV0@@Z
??4Dbt@@QAEAAV0@ABV0@@Z
??_7Db@@6B@
??_7DbDeadlockException@@6B@
??_7DbEnv@@6B@
??_7DbException@@6B@
??_7DbLockNotGrantedException@@6B@
??_7DbMemoryException@@6B@
??_7DbMpoolFile@@6B@
??_7DbRunRecoveryException@@6B@
??_7DbSequence@@6B@
??_7DbTxn@@6B@
?_app_dispatch_intercept@DbEnv@@SAHPAU__db_env@@PAU__db_dbt@@PAU__db_lsn@@W4db_recops@@@Z
?_feedback_intercept@DbEnv@@SAXPAU__db_env@@HH@Z
?_paniccall_intercept@DbEnv@@SAXPAU__db_env@@H@Z
?_rep_send_intercept@DbEnv@@SAHPAU__db_env@@PBU__db_dbt@@1PBU__db_lsn@@HI@Z
?_stream_error_function@DbEnv@@SAXPBU__db_env@@PBD1@Z
?_stream_message_function@DbEnv@@SAXPBU__db_env@@PBD@Z
?abort@DbTxn@@QAEHXZ
?associate@Db@@UAEHPAVDbTxn@@PAV1@P6AH1PBVDbt@@2PAV3@@ZI@Z
?cleanup@Db@@AAEXXZ
?cleanup@DbEnv@@AAEXXZ
?close@Db@@UAEHI@Z
?close@DbEnv@@UAEHI@Z
?close@DbLogc@@QAEHI@Z
?close@DbMpoolFile@@QAEHI@Z
?close@DbSequence@@QAEHI@Z
?close@Dbc@@QAEHXZ
?commit@DbTxn@@QAEHI@Z
?count@Dbc@@QAEHPAII@Z
?cursor@Db@@UAEHPAVDbTxn@@PAPAVDbc@@I@Z
?dbremove@DbEnv@@UAEHPAVDbTxn@@PBD1I@Z
?dbrename@DbEnv@@UAEHPAVDbTxn@@PBD11I@Z
?del@Db@@UAEHPAVDbTxn@@PAVDbt@@I@Z
?del@Dbc@@QAEHI@Z
?describe@DbException@@AAEXPBD0@Z
?discard@DbTxn@@QAEHI@Z
?dup@Dbc@@QAEHPAPAV1@I@Z
?err@Db@@UAAXHPBDZZ
?err@DbEnv@@UAAXHPBDZZ
?error_policy@Db@@AAEHXZ
?error_policy@DbEnv@@AAEHXZ
?errx@Db@@UAAXPBDZZ
?errx@DbEnv@@UAAXPBDZZ
?fd@Db@@UAEHPAH@Z
?get@Db@@UAEHPAVDbTxn@@PAVDbt@@1I@Z
?get@DbLogc@@QAEHPAVDbLsn@@PAVDbt@@I@Z
?get@DbMpoolFile@@QAEHPAIIPAX@Z
?get@DbSequence@@QAEHPAVDbTxn@@HPA_JI@Z
?get@Dbc@@QAEHPAVDbt@@0I@Z
?get_DB@Db@@UAEPAU__db@@XZ
?get_DBT@Dbt@@QAEPAU__db_dbt@@XZ
?get_DB_ENV@DbEnv@@UAEPAU__db_env@@XZ
?get_DB_MPOOLFILE@DbMpoolFile@@UAEPAU__db_mpoolfile@@XZ
?get_DB_SEQUENCE@DbSequence@@UAEPAU__db_sequence@@XZ
?get_DB_TXN@DbTxn@@UAEPAU__db_txn@@XZ
?get_Db@Db@@SAPAV1@PAU__db@@@Z
?get_DbEnv@DbEnv@@SAPAV1@PAU__db_env@@@Z
?get_DbSequence@DbSequence@@SAPAV1@PAU__db_sequence@@@Z
?get_DbTxn@DbTxn@@SAPAV1@PAU__db_txn@@@Z
?get_Dbt@Dbt@@SAPAV1@PAU__db_dbt@@@Z
?get_app_private@Db@@UBEPAXXZ
?get_app_private@DbEnv@@UBEPAXXZ
?get_bt_minkey@Db@@UAEHPAI@Z
?get_byteswapped@Db@@UAEHPAH@Z
?get_cachesize@Db@@UAEHPAI0PAH@Z
?get_cachesize@DbEnv@@UAEHPAI0PAH@Z
?get_cachesize@DbSequence@@QAEHPAH@Z
?get_clear_len@DbMpoolFile@@QAEHPAI@Z
?get_const_DB@Db@@UBEPBU__db@@XZ
?get_const_DBT@Dbt@@QBEPBU__db_dbt@@XZ
?get_const_DB_ENV@DbEnv@@UBEPBU__db_env@@XZ
?get_const_DB_MPOOLFILE@DbMpoolFile@@UBEPBU__db_mpoolfile@@XZ
?get_const_DB_SEQUENCE@DbSequence@@UBEPBU__db_sequence@@XZ
?get_const_DB_TXN@DbTxn@@UBEPBU__db_txn@@XZ
?get_const_Db@Db@@SAPBV1@PBU__db@@@Z
?get_const_DbEnv@DbEnv@@SAPBV1@PBU__db_env@@@Z
?get_const_DbSequence@DbSequence@@SAPBV1@PBU__db_sequence@@@Z
?get_const_DbTxn@DbTxn@@SAPBV1@PBU__db_txn@@@Z
?get_const_Dbt@Dbt@@SAPBV1@PBU__db_dbt@@@Z
?get_data@Dbt@@QBEPAXXZ
?get_data_dirs@DbEnv@@UAEHPAPAPBD@Z
?get_db@DbSequence@@QAEPAVDb@@XZ
?get_dbname@Db@@UAEHPAPBD0@Z
?get_dbt@DbMemoryException@@QBEPAVDbt@@XZ
?get_dlen@Dbt@@QBEIXZ
?get_doff@Dbt@@QBEIXZ
?get_encrypt_flags@Db@@UAEHPAI@Z
?get_encrypt_flags@DbEnv@@UAEHPAI@Z
?get_env@Db@@UAEPAVDbEnv@@XZ
?get_env@DbException@@QBEPAVDbEnv@@XZ
?get_errfile@Db@@UAEXPAPAU_iobuf@@@Z
?get_errfile@DbEnv@@UAEXPAPAU_iobuf@@@Z
?get_errno@DbException@@QBEHXZ
?get_error_stream@Db@@UAEPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?get_error_stream@DbEnv@@UAEPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?get_errpfx@Db@@UAEXPAPBD@Z
?get_errpfx@DbEnv@@UAEXPAPBD@Z
?get_fileid@DbMpoolFile@@QAEHPAE@Z
?get_flags@Db@@UAEHPAI@Z
?get_flags@DbEnv@@UAEHPAI@Z
?get_flags@DbMpoolFile@@QAEHPAI@Z
?get_flags@DbSequence@@QAEHPAI@Z
?get_flags@Dbt@@QBEIXZ
?get_ftype@DbMpoolFile@@QAEHPAH@Z
?get_h_ffactor@Db@@UAEHPAI@Z
?get_h_nelem@Db@@UAEHPAI@Z
?get_home@DbEnv@@UAEHPAPBD@Z
?get_index@DbLockNotGrantedException@@QBEHXZ
?get_key@DbSequence@@QAEPAVDbt@@XZ
?get_lg_bsize@DbEnv@@UAEHPAI@Z
?get_lg_dir@DbEnv@@UAEHPAPBD@Z
?get_lg_max@DbEnv@@UAEHPAI@Z
?get_lg_regionmax@DbEnv@@UAEHPAI@Z
?get_lk_conflicts@DbEnv@@UAEHPAPBEPAH@Z
?get_lk_detect@DbEnv@@UAEHPAI@Z
?get_lk_max_lockers@DbEnv@@UAEHPAI@Z
?get_lk_max_locks@DbEnv@@UAEHPAI@Z
?get_lk_max_objects@DbEnv@@UAEHPAI@Z
?get_lock@DbLockNotGrantedException@@QBEPAVDbLock@@XZ
?get_lorder@Db@@UAEHPAH@Z
?get_lsn_offset@DbMpoolFile@@QAEHPAH@Z
?get_maxsize@DbMpoolFile@@QAEHPAI0@Z
?get_message_stream@Db@@UAEPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?get_message_stream@DbEnv@@UAEPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?get_mode@DbLockNotGrantedException@@QBE?AW4db_lockmode_t@@XZ
?get_mp_mmapsize@DbEnv@@UAEHPAI@Z
?get_mpf@Db@@UAEPAVDbMpoolFile@@XZ
?get_msgfile@Db@@UAEXPAPAU_iobuf@@@Z
?get_msgfile@DbEnv@@UAEXPAPAU_iobuf@@@Z
?get_obj@DbLockNotGrantedException@@QBEPBVDbt@@XZ
?get_op@DbLockNotGrantedException@@QBE?AW4db_lockop_t@@XZ
?get_open_flags@Db@@UAEHPAI@Z
?get_open_flags@DbEnv@@UAEHPAI@Z
?get_pagesize@Db@@UAEHPAI@Z
?get_pgcookie@DbMpoolFile@@QAEHPAU__db_dbt@@@Z
?get_priority@DbMpoolFile@@QAEHPAW4DB_CACHE_PRIORITY@@@Z
?get_q_extentsize@Db@@UAEHPAI@Z
?get_range@DbSequence@@QAEHPA_J0@Z
?get_re_delim@Db@@UAEHPAH@Z
?get_re_len@Db@@UAEHPAI@Z
?get_re_pad@Db@@UAEHPAH@Z
?get_re_source@Db@@UAEHPAPBD@Z
?get_rep_limit@DbEnv@@UAEHPAI0@Z
?get_shm_key@DbEnv@@UAEHPAJ@Z
?get_size@Dbt@@QBEIXZ
?get_tas_spins@DbEnv@@UAEHPAI@Z
?get_timeout@DbEnv@@UAEHPAII@Z
?get_tmp_dir@DbEnv@@UAEHPAPBD@Z
?get_transactional@Db@@UAEHXZ
?get_tx_max@DbEnv@@UAEHPAI@Z
?get_tx_timestamp@DbEnv@@UAEHPAJ@Z
?get_type@Db@@UAEHPAW4DBTYPE@@@Z
?get_ulen@Dbt@@QBEIXZ
?get_verbose@DbEnv@@UAEHIPAH@Z
?id@DbTxn@@QAEIXZ
?initial_value@DbSequence@@QAEH_J@Z
?initialize@Db@@AAEHXZ
?initialize@DbEnv@@AAEHPAU__db_env@@@Z
?join@Db@@UAEHPAPAVDbc@@0I@Z
?key_range@Db@@UAEHPAVDbTxn@@PAVDbt@@PAU__key_range@@I@Z
?lock_detect@DbEnv@@UAEHIIPAH@Z
?lock_get@DbEnv@@UAEHIIPBVDbt@@W4db_lockmode_t@@PAVDbLock@@@Z
?lock_id@DbEnv@@UAEHPAI@Z
?lock_id_free@DbEnv@@UAEHI@Z
?lock_put@DbEnv@@UAEHPAVDbLock@@@Z
?lock_stat@DbEnv@@UAEHPAPAU__db_lock_stat@@I@Z
?lock_stat_print@DbEnv@@UAEHI@Z
?lock_vec@DbEnv@@UAEHIIQAU__db_lockreq@@HPAPAU2@@Z
?log_archive@DbEnv@@UAEHQAPAPADI@Z
?log_compare@DbEnv@@SAHPBVDbLsn@@0@Z
?log_cursor@DbEnv@@UAEHPAPAVDbLogc@@I@Z
?log_file@DbEnv@@UAEHPAVDbLsn@@PADI@Z
?log_flush@DbEnv@@UAEHPBVDbLsn@@@Z
?log_put@DbEnv@@UAEHPAVDbLsn@@PBVDbt@@I@Z
?log_stat@DbEnv@@UAEHPAPAU__db_log_stat@@I@Z
?log_stat_print@DbEnv@@UAEHI@Z
?memp_fcreate@DbEnv@@UAEHPAPAVDbMpoolFile@@I@Z
?memp_register@DbEnv@@UAEHHP6AHPAU__db_env@@IPAXPAU__db_dbt@@@Z3@Z
?memp_stat@DbEnv@@UAEHPAPAU__db_mpool_stat@@PAPAPAU__db_mpool_fstat@@I@Z
?memp_stat_print@DbEnv@@UAEHI@Z
?memp_sync@DbEnv@@UAEHPAVDbLsn@@@Z
?memp_trickle@DbEnv@@UAEHHPAH@Z
?next@DbMultipleDataIterator@@QAE_NAAVDbt@@@Z
?next@DbMultipleKeyDataIterator@@QAE_NAAVDbt@@0@Z
?next@DbMultipleRecnoDataIterator@@QAE_NAAIAAVDbt@@@Z
?open@Db@@UAEHPAVDbTxn@@PBD1W4DBTYPE@@IH@Z
?open@DbEnv@@UAEHPBDIH@Z
?open@DbMpoolFile@@QAEHPBDIHI@Z
?open@DbSequence@@QAEHPAVDbTxn@@PAVDbt@@I@Z
?pget@Db@@UAEHPAVDbTxn@@PAVDbt@@11I@Z
?pget@Dbc@@QAEHPAVDbt@@00I@Z
?prepare@DbTxn@@QAEHPAE@Z
?put@Db@@UAEHPAVDbTxn@@PAVDbt@@1I@Z
?put@DbMpoolFile@@QAEHPAXI@Z
?put@Dbc@@QAEHPAVDbt@@0I@Z
?remove@Db@@UAEHPBD0I@Z
?remove@DbEnv@@UAEHPBDI@Z
?remove@DbSequence@@QAEHPAVDbTxn@@I@Z
?rename@Db@@UAEHPBD00I@Z
?rep_elect@DbEnv@@UAEHHHHIPAHI@Z
?rep_process_message@DbEnv@@UAEHPAVDbt@@0PAHPAVDbLsn@@@Z
?rep_start@DbEnv@@UAEHPAVDbt@@I@Z
?rep_stat@DbEnv@@UAEHPAPAU__db_rep_stat@@I@Z
?rep_stat_print@DbEnv@@UAEHI@Z
?runtime_error@DbEnv@@SAXPAV1@PBDHH@Z
?runtime_error_dbt@DbEnv@@SAXPAV1@PBDPAVDbt@@H@Z
?runtime_error_lock_get@DbEnv@@SAXPAV1@PBDHW4db_lockop_t@@W4db_lockmode_t@@PBVDbt@@VDbLock@@HH@Z
?set@DbMpoolFile@@QAEHPAXI@Z
?set_alloc@Db@@UAEHP6APAXI@ZP6APAXPAXI@ZP6AX1@Z@Z
?set_alloc@DbEnv@@UAEHP6APAXI@ZP6APAXPAXI@ZP6AX1@Z@Z
?set_app_dispatch@DbEnv@@UAEHP6AHPAV1@PAVDbt@@PAVDbLsn@@W4db_recops@@@Z@Z
?set_app_private@Db@@UAEXPAX@Z
?set_app_private@DbEnv@@UAEXPAX@Z
?set_append_recno@Db@@UAEHP6AHPAV1@PAVDbt@@I@Z@Z
?set_bt_compare@Db@@UAEHP6AHPAU__db@@PBU__db_dbt@@1@Z@Z
?set_bt_compare@Db@@UAEHP6AHPAV1@PBVDbt@@1@Z@Z
?set_bt_maxkey@Db@@UAEHI@Z
?set_bt_minkey@Db@@UAEHI@Z
?set_bt_prefix@Db@@UAEHP6AIPAU__db@@PBU__db_dbt@@1@Z@Z
?set_bt_prefix@Db@@UAEHP6AIPAV1@PBVDbt@@1@Z@Z
?set_cachesize@Db@@UAEHIIH@Z
?set_cachesize@DbEnv@@UAEHIIH@Z
?set_cachesize@DbSequence@@QAEHH@Z
?set_clear_len@DbMpoolFile@@QAEHI@Z
?set_data@Dbt@@QAEXPAX@Z
?set_data_dir@DbEnv@@UAEHPBD@Z
?set_dlen@Dbt@@QAEXI@Z
?set_doff@Dbt@@QAEXI@Z
?set_dup_compare@Db@@UAEHP6AHPAU__db@@PBU__db_dbt@@1@Z@Z
?set_dup_compare@Db@@UAEHP6AHPAV1@PBVDbt@@1@Z@Z
?set_encrypt@Db@@UAEHPBDI@Z
?set_encrypt@DbEnv@@UAEHPBDI@Z
?set_env@DbException@@QAEXPAVDbEnv@@@Z
?set_errcall@Db@@UAEXP6AXPBVDbEnv@@PBD1@Z@Z
?set_errcall@DbEnv@@UAEXP6AXPBV1@PBD1@Z@Z
?set_errfile@Db@@UAEXPAU_iobuf@@@Z
?set_errfile@DbEnv@@UAEXPAU_iobuf@@@Z
?set_error_stream@Db@@UAEXPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?set_error_stream@DbEnv@@UAEXPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?set_errpfx@Db@@UAEXPBD@Z
?set_errpfx@DbEnv@@UAEXPBD@Z
?set_feedback@Db@@UAEHP6AXPAV1@HH@Z@Z
?set_feedback@DbEnv@@UAEHP6AXPAV1@HH@Z@Z
?set_fileid@DbMpoolFile@@QAEHPAE@Z
?set_flags@Db@@UAEHI@Z
?set_flags@DbEnv@@UAEHIH@Z
?set_flags@DbMpoolFile@@QAEHIH@Z
?set_flags@DbSequence@@QAEHI@Z
?set_flags@Dbt@@QAEXI@Z
?set_ftype@DbMpoolFile@@QAEHH@Z
?set_h_ffactor@Db@@UAEHI@Z
?set_h_hash@Db@@UAEHP6AIPAU__db@@PBXI@Z@Z
?set_h_hash@Db@@UAEHP6AIPAV1@PBXI@Z@Z
?set_h_nelem@Db@@UAEHI@Z
?set_lg_bsize@DbEnv@@UAEHI@Z
?set_lg_dir@DbEnv@@UAEHPBD@Z
?set_lg_max@DbEnv@@UAEHI@Z
?set_lg_regionmax@DbEnv@@UAEHI@Z
?set_lk_conflicts@DbEnv@@UAEHPAEH@Z
?set_lk_detect@DbEnv@@UAEHI@Z
?set_lk_max@DbEnv@@UAEHI@Z
?set_lk_max_lockers@DbEnv@@UAEHI@Z
?set_lk_max_locks@DbEnv@@UAEHI@Z
?set_lk_max_objects@DbEnv@@UAEHI@Z
?set_lorder@Db@@UAEHH@Z
?set_lsn_offset@DbMpoolFile@@QAEHH@Z
?set_maxsize@DbMpoolFile@@QAEHII@Z
?set_message_stream@Db@@UAEXPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?set_message_stream@DbEnv@@UAEXPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?set_mp_mmapsize@DbEnv@@UAEHI@Z
?set_msgcall@Db@@UAEXP6AXPBVDbEnv@@PBD@Z@Z
?set_msgcall@DbEnv@@UAEXP6AXPBV1@PBD@Z@Z
?set_msgfile@Db@@UAEXPAU_iobuf@@@Z
?set_msgfile@DbEnv@@UAEXPAU_iobuf@@@Z
?set_pagesize@Db@@UAEHI@Z
?set_paniccall@Db@@UAEHP6AXPAVDbEnv@@H@Z@Z
?set_paniccall@DbEnv@@UAEHP6AXPAV1@H@Z@Z
?set_pgcookie@DbMpoolFile@@QAEHPAU__db_dbt@@@Z
?set_priority@DbMpoolFile@@QAEHW4DB_CACHE_PRIORITY@@@Z
?set_q_extentsize@Db@@UAEHI@Z
?set_range@DbSequence@@QAEH_J0@Z
?set_re_delim@Db@@UAEHH@Z
?set_re_len@Db@@UAEHI@Z
?set_re_pad@Db@@UAEHH@Z
?set_re_source@Db@@UAEHPBD@Z
?set_rep_limit@DbEnv@@UAEHII@Z
?set_rep_transport@DbEnv@@UAEHHP6AHPAV1@PBVDbt@@1PBVDbLsn@@HI@Z@Z
?set_rpc_server@DbEnv@@UAEHPAXPADJJI@Z
?set_shm_key@DbEnv@@UAEHJ@Z
?set_size@Dbt@@QAEXI@Z
?set_tas_spins@DbEnv@@UAEHI@Z
?set_timeout@DbEnv@@UAEHII@Z
?set_timeout@DbTxn@@QAEHII@Z
?set_tmp_dir@DbEnv@@UAEHPBD@Z
?set_tx_max@DbEnv@@UAEHI@Z
?set_tx_timestamp@DbEnv@@UAEHPAJ@Z
?set_ulen@Dbt@@QAEXI@Z
?set_verbose@DbEnv@@UAEHIH@Z
?stat@Db@@UAEHPAVDbTxn@@PAXI@Z
?stat@DbSequence@@QAEHPAPAU__db_seq_stat@@I@Z
?stat_print@Db@@UAEHI@Z
?stat_print@DbSequence@@QAEHI@Z
?strerror@DbEnv@@SAPADH@Z
?sync@Db@@UAEHI@Z
?sync@DbMpoolFile@@QAEHXZ
?truncate@Db@@UAEHPAVDbTxn@@PAII@Z
?txn_begin@DbEnv@@UAEHPAVDbTxn@@PAPAV2@I@Z
?txn_checkpoint@DbEnv@@UAEHIII@Z
?txn_recover@DbEnv@@UAEHPAVDbPreplist@@JPAJI@Z
?txn_stat@DbEnv@@UAEHPAPAU__db_txn_stat@@I@Z
?txn_stat_print@DbEnv@@UAEHI@Z
?upgrade@Db@@UAEHPBDI@Z
?verify@Db@@UAEHPBD0PAV?$basic_ostream@DU?$char_traits@D@std@@@std@@I@Z
?version@DbEnv@@SAPADPAH00@Z
?what@DbException@@UBEPBDXZ
?wrap_DB_ENV@DbEnv@@SAPAV1@PAU__db_env@@@Z
?wrap_DB_SEQUENCE@DbSequence@@SAPAV1@PAU__db_sequence@@@Z
?wrap_DB_TXN@DbTxn@@SAPAV1@PAU__db_txn@@@Z
__bam_adj_read
__bam_cadjust_read
__bam_cdel_read
__bam_curadj_read
__bam_pgin
__bam_pgout
__bam_rcuradj_read
__bam_relink_read
__bam_repl_read
__bam_root_read
__bam_rsplit_read
__bam_split_read
__crdel_metasub_read
__db_add_recovery
__db_addrem_read
__db_big_read
__db_cksum_read
__db_dbm_close
__db_dbm_delete
__db_dbm_fetch
__db_dbm_firstkey
__db_dbm_init
__db_dbm_nextkey
__db_dbm_store
__db_debug_read
__db_dispatch
__db_dumptree
__db_err
__db_fileid_reset
__db_get_flags_fn
__db_get_seq_flags_fn
__db_getlong
__db_getulong
__db_global_values
__db_hcreate
__db_hdestroy
__db_hsearch
__db_isbigendian
__db_loadme
__db_lsn_reset
__db_ndbm_clearerr
__db_ndbm_close
__db_ndbm_delete
__db_ndbm_dirfno
__db_ndbm_error
__db_ndbm_fetch
__db_ndbm_firstkey
__db_ndbm_nextkey
__db_ndbm_open
__db_ndbm_pagfno
__db_ndbm_rdonly
__db_ndbm_store
__db_noop_read
__db_omode
__db_overwrite
__db_ovref_read
__db_panic
__db_pg_alloc_read
__db_pg_free_read
__db_pg_freedata_read
__db_pg_init_read
__db_pg_new_read
__db_pg_prepare_read
__db_pgin
__db_pgout
__db_pr_callback
__db_r_attach
__db_r_detach
__db_rpath
__db_stat_pp
__db_stat_print_pp
__db_util_cache
__db_util_interrupted
__db_util_logset
__db_util_siginit
__db_util_sigresend
__db_verify_internal
__db_win32_mutex_init
__db_win32_mutex_lock
__db_win32_mutex_unlock
__dbreg_register_read
__fop_create_read
__fop_file_remove_read
__fop_remove_read
__fop_rename_read
__fop_write_read
__ham_chgpg_read
__ham_copypage_read
__ham_curadj_read
__ham_func2
__ham_func3
__ham_func4
__ham_func5
__ham_get_meta
__ham_groupalloc_read
__ham_insdel_read
__ham_metagroup_read
__ham_newpage_read
__ham_pgin
__ham_pgout
__ham_release_meta
__ham_replace_read
__ham_splitdata_read
__ham_test
__lock_id_set
__lock_list_print
__log_stat_pp
__os_calloc
__os_clock
__os_closehandle
__os_free
__os_get_errno
__os_id
__os_ioinfo
__os_malloc
__os_open
__os_openhandle
__os_read
__os_realloc
__os_set_errno
__os_sleep
__os_strdup
__os_ufree

Sections

.text
Size: 572KB - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcp60.dll
.dll windows:4 windows x86 arch:x86

1b1839992700df52b049b87961a724e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memmove
__CxxFrameHandler
free
localeconv
_Gettnames
_Getdays
_Getmonths
__mb_cur_max
atan2
cos
exp
ldexp
log
pow
sin
sqrt
??2@YAPAXI@Z
strtoul
_errno
strtol
sprintf
strcspn
fclose
fwrite
fputc
ungetc
fgetc
fgetpos
fseek
fsetpos
setvbuf
memchr
memset
ungetwc
fgetwc
_Strftime
fopen
_iob
setlocale
malloc
realloc
__crtCompareStringA
__lc_collate_cp
_unlock
__lc_handle
_lock
__setlc_active
__unguarded_readlc_active
__crtLCMapStringA
__lc_codepage
towlower
towupper
strcmp
_pctype
_isctype
_ftol
strtod
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
memcmp
memcpy
strlen
_CxxThrowException
wcslen
??4exception@@QAEAAV0@ABV0@@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
fflush
?what@exception@@UBEPBDXZ
fputwc

kernel32

DisableThreadLibraryCalls
MultiByteToWideChar
DeleteCriticalSection
InterlockedExchange
LeaveCriticalSection
Sleep
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte

Exports

Exports

??0?$_Complex_base@M@std@@QAE@ABM0@Z
??0?$_Complex_base@N@std@@QAE@ABN0@Z
??0?$_Complex_base@O@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locinfo@std@@QAE@ABV01@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_Winit@std@@QAE@XZ
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_alloc@std@@QAE@ABV01@@Z
??0bad_alloc@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_exception@std@@QAE@ABV01@@Z
??0bad_exception@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0domain_error@std@@QAE@ABV01@@Z
??0domain_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0facet@locale@std@@IAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0out_of_range@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??0overflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0range_error@std@@QAE@ABV01@@Z
??0range_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0runtime_error@std@@QAE@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??0underflow_error@std@@QAE@ABV01@@Z
??0underflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1?$_Mpunct@D@std@@UAE@XZ
??1?$_Mpunct@G@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@UAE@XZ
??1?$codecvt@GDH@std@@UAE@XZ
??1?$collate@D@std@@UAE@XZ
??1?$collate@G@std@@UAE@XZ
??1?$ctype@D@std@@UAE@XZ
??1?$ctype@G@std@@UAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$numpunct@D@std@@UAE@XZ
??1?$numpunct@G@std@@UAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_alloc@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_exception@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1domain_error@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??1length_error@std@@UAE@XZ
??1locale@std@@QAE@XZ
??1logic_error@std@@UAE@XZ
??1messages_base@std@@UAE@XZ
??1money_base@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1out_of_range@std@@UAE@XZ
??1overflow_error@std@@UAE@XZ
??1range_error@std@@UAE@XZ
??1runtime_error@std@@UAE@XZ
??1strstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??1underflow_error@std@@UAE@XZ
??4?$_Complex_base@M@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@N@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@M@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@N@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@O@std@@QAEAAV01@ABV01@@Z
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??4?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
??4?$complex@M@std@@QAEAAV01@ABM@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
??4?$complex@O@std@@QAEAAV01@ABO@Z
??4?$complex@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Locinfo@std@@QAEAAV01@ABV01@@Z
??4_Lockit@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_alloc@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_exception@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4domain_error@std@@QAEAAV01@ABV01@@Z
??4id@locale@std@@QAEAAV012@ABV012@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??4length_error@std@@QAEAAV01@ABV01@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??4logic_error@std@@QAEAAV01@ABV01@@Z
??4out_of_range@std@@QAEAAV01@ABV01@@Z
??4overflow_error@std@@QAEAAV01@ABV01@@Z
??4range_error@std@@QAEAAV01@ABV01@@Z
??4runtime_error@std@@QAEAAV01@ABV01@@Z
??4underflow_error@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAF@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBF@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??7ios_base@std@@QBE_NXZ
??8locale@std@@QBE_NABV01@@Z
??8std@@YA_NABMABV?$complex@M@0@@Z
??8std@@YA_NABNABV?$complex@N@0@@Z
??8std@@YA_NABOABV?$complex@O@0@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$complex@M@0@0@Z
??8std@@YA_NABV?$complex@M@0@ABM@Z
??8std@@YA_NABV?$complex@N@0@0@Z
??8std@@YA_NABV?$complex@N@0@ABN@Z
??8std@@YA_NABV?$complex@O@0@0@Z
??8std@@YA_NABV?$complex@O@0@ABO@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??9locale@std@@QBE_NABV01@@Z
??9std@@YA_NABMABV?$complex@M@0@@Z
??9std@@YA_NABNABV?$complex@N@0@@Z
??9std@@YA_NABOABV?$complex@O@0@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??9std@@YA_NABV?$complex@M@0@0@Z
??9std@@YA_NABV?$complex@M@0@ABM@Z

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcrt.dll
.dll windows:4 windows x86 arch:x86

b0d3278f6dd8a1a715873c57aae39d31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumSystemLocalesA
RtlUnwind
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
ResumeThread
CreateThread
ExitThread
CloseHandle
TlsSetValue
TlsGetValue
GetCurrentThreadId
TlsFree
SetLastError
GetCurrentThread
TlsAlloc
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetEnvironmentVariableW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
RaiseException
GetUserDefaultLCID
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
HeapSize
ReadConsoleA
SetConsoleMode
GetConsoleMode
SetEndOfFile
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctime64
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_heap_handle
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stat64
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_time64
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_utime64
_vsnprintf
_vsnwprintf
_waccess

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
presence.dll
.dll regsvr32 windows:4 windows x86 arch:x86

6a21c5d23c40b541bbc8f9291381adc2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedDecrement
Sleep
CloseHandle
InterlockedIncrement
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetTickCount

ws2_32

bind
closesocket
socket
htons
ntohl
htonl
ntohs
gethostbyname
getpeername
select
WSAStartup
setsockopt
listen
WSAGetLastError
connect
inet_ntoa
__WSAFDIsSet
WSACleanup
recv
accept
inet_addr
send
sendto
recvfrom
ioctlsocket

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z

msvcrt

atoi
exit
_purecall
__CxxFrameHandler
_EH_prolog
memset
memcpy
??2@YAPAXI@Z
strcpy
_CxxThrowException
memcmp
_beginthreadex
_iob
strlen
sprintf
time
memmove
strncpy
strstr
malloc
free
fprintf
_ftol
perror
rand
_initterm
_adjust_fdiv
__dllonexit
_onexit
??1type_info@@UAE@XZ

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resourceTempl.htm
.js
uninstQQShare.exe
.exe windows:4 windows x86 arch:x86

381e79edf6f32b225643e232be0965fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
GetCommandLineA
SetFileTime
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
MulDiv
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
CreateWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
CreateDialogParamA
EmptyClipboard
DestroyWindow
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
GetDlgItem

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
videodevice.dll
.dll regsvr32 windows:4 windows x86 arch:x86

9c89eaf9a0859716a42055b2ae54deef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
CloseHandle
LoadLibraryA
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
ReadFile
GetTickCount
GetModuleHandleA
lstrlenA
SetEvent
ResetEvent
InterlockedDecrement
GetModuleFileNameA
Sleep
MulDiv
CreateEventA
InterlockedExchange
GetProcAddress
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetLastError
FreeLibrary
WaitForMultipleObjects
GetCurrentThreadId
RaiseException
LocalAlloc
InterlockedIncrement

msvcrt

strrchr
_adjust_fdiv
??1type_info@@UAE@XZ
malloc
_initterm
realloc
_vsnprintf
isspace
free
strlen
tolower
??0exception@@QAE@XZ
__RTDynamicCast
_CxxThrowException
?what@exception@@UBEPBDXZ
strcat
strcpy
fgets
fopen
fclose
memmove
floor
ceil
sprintf
srand
rand
_ftol
_splitpath
??2@YAPAXI@Z
memset
??3@YAXPAX@Z
_purecall
memcmp
memcpy
abs
_EH_prolog
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ

msvcp60

??1_Lockit@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0_Lockit@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Xlen@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z

msvfw32

DrawDibRealize
DrawDibClose
DrawDibDraw
DrawDibBegin
DrawDibOpen

advapi32

RegCloseKey

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot
安装说明.txt
非常世纪资源网.url
.url

Sharing

General

Malware Config

Signatures

Files

381e79edf6f32b225643e232be0965fa

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 108KB

.ndata Size: - Virtual size: 40KB

.rsrc Size: 25KB - Virtual size: 28KB

c64c080ec8ac5892f21264871ed5ffc0

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 730B

.rdata Size: 512B - Virtual size: 507B

.data Size: 512B - Virtual size: 296B

.CRT Size: 512B - Virtual size: 4B

.reloc Size: 512B - Virtual size: 138B

9d433976e02d79532f0d635ee81d0b20

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 930B

97c84efb92e9e74c911abc996572ac5e

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 459B

.data Size: 512B - Virtual size: 244B

.reloc Size: 512B - Virtual size: 138B

6f2e799f21b27c53e83a536cafe04fbc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

msvcrt

Exports

Exports

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 108KB

.ndata
Size: - Virtual size: 40KB

.rsrc
Size: 25KB - Virtual size: 28KB

.text
Size: 1024B - Virtual size: 730B

.rdata
Size: 512B - Virtual size: 507B

.data
Size: 512B - Virtual size: 296B

.CRT
Size: 512B - Virtual size: 4B

.reloc
Size: 512B - Virtual size: 138B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 930B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 459B

.data
Size: 512B - Virtual size: 244B

.reloc
Size: 512B - Virtual size: 138B

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 41KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 560KB - Virtual size: 558KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 72KB - Virtual size: 80KB

.data1
Size: 4KB - Virtual size: 896B

.reloc
Size: 20KB - Virtual size: 17KB

.text
Size: 524KB - Virtual size: 522KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 16KB - Virtual size: 112KB

.rsrc
Size: 8KB - Virtual size: 6KB