c11525ae7776cbc8be18d014e5d54107_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c11525ae7776cbc8be18d014e5d54107_JaffaCakes118
Size

4.4MB
MD5

c11525ae7776cbc8be18d014e5d54107
SHA1

a0b399135a4df1acf0dd8605124676621d26b5ba
SHA256

1e88af7a351ca27eaa87253d1537b8a4d2ead0e03f9d33f2f4edcf00c00e0cb6
SHA512

638ea8d7ab09072494042bc0a40fbd2ad38959784734718700d2f4c438677a7986f86227fabe8480f3f63f3347b184f6f822757cff92d4b8551dc416ebc861a7
SSDEEP

98304:77LNwGjHgEGBuaZEqERxdVpr7H4TR7EHO+tn9gRY5eQSSz:uag9VERHVlbaWv9V

Score

3^/10

Malware Config

Signatures

Unsigned PE 44 IoCs

Checks for missing Authenticode signature.

resource
unpack002/$PLUGINSDIR/CmdLine.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/KillProcDLL.dll
unpack002/$PLUGINSDIR/procdll.dll
unpack002/ADManage.dll
unpack002/BalloonTip.dll
unpack002/COMToolKit.dll
unpack002/ExceptCatch.dll
unpack002/LiveAPI.dll
unpack002/LiveStream.dll
unpack002/MagicFlash.exe
unpack002/MiniQQLive.exe
unpack002/P2PDownload.dll
unpack002/Picture.dll
unpack002/Proxy.dll
unpack002/QQLive.dll
unpack002/QQLive.exe
unpack002/QQLive.ocx
unpack002/QQLiveInstaller.dll
unpack002/QQLiveOneClick.exe
unpack002/QQLivePlayer.exe
unpack002/QQLiveSrcDec.dll
unpack002/QQLiveUp.exe
unpack002/SetupShell.dll
unpack002/SoundCtrl.dll
unpack002/TNProxy.dll
unpack002/TVLoge.exe
unpack002/VCodec.dll
unpack002/VideoAdjust.dll
unpack002/VideoDsp.dll
unpack002/mfc42.dll
unpack002/miniqqlivesetup.exe
unpack003/$PLUGINSDIR/CmdLine.dll
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack003/$PLUGINSDIR/KillProcDLL.dll
unpack003/MiniQQLive.exe
unpack003/MiniQQLiveUninstall.exe
unpack004/$PLUGINSDIR/procdll.dll
unpack002/msvcp60.dll
unpack002/msvcr71.dll
unpack002/msvcrt.dll
unpack002/multiLogin.dll
unpack002/riched20.dll
unpack002/vqqsdl.dll

NSIS installer 3 IoCs

installer

resource	yara_rule
static1/unpack001/QQLive3.5.exe	nsis_installer_1
static1/unpack002/miniqqlivesetup.exe	nsis_installer_1
static1/unpack003/MiniQQLiveUninstall.exe	nsis_installer_1

Files

c11525ae7776cbc8be18d014e5d54107_JaffaCakes118
.rar
QQLive3.5.exe
.exe windows:4 windows x86 arch:x86

c6ec2286dd1d610e91f6cf961129a7e3

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29-01-1996 00:00

Not After

01-08-2028 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04-12-2003 00:00

Not After

03-12-2008 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3f:76:73:84:79:b8:43:31:60:48:9e:50:6e:6c:9f:4b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

28-02-2006 00:00

Not After

28-02-2007 23:59

Subject

CN=Tencent Technology(shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Research Department,O=Tencent Technology(shenzhen) Company Limited,L=shenzhen,ST=guangdong province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7e:a1:b7:12:c0:e6:e6:48:78:32:d1:d1:46:6e:e1:27:c6:14:e5:a2
Signer

Actual PE Digest

7e:a1:b7:12:c0:e6:e6:48:78:32:d1:d1:46:6e:e1:27:c6:14:e5:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetModuleHandleA
SetErrorMode
GetExitCodeProcess
WaitForSingleObject
ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
CloseHandle
SetFileTime
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
LoadLibraryA
ExitProcess
GetCurrentProcess
CopyFileA
lstrcpynA
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
GetTempFileNameA
lstrcpyA
lstrlenA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetSystemDirectoryA
RemoveDirectoryA
GlobalFree
MulDiv
GetProcAddress
FreeLibrary
MultiByteToWideChar
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA

user32

SetWindowTextA
SetTimer
DestroyWindow
CreateDialogParamA
ExitWindowsEx
CharNextA
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
ScreenToClient
GetMessagePos
CallWindowProcA
IsWindowVisible
LoadBitmapA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuA
CreatePopupMenu
GetSystemMetrics
EndDialog
SetClassLongA
IsWindowEnabled
SetWindowPos
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
InvalidateRect
SendMessageA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
DefWindowProcA

gdi32

GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SetBkColor
SelectObject

advapi32

RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA
SHGetPathFromIDListA

ole32

OleUninitialize
OleInitialize
CoCreateInstance

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/CmdLine.dll
.dll windows:4 windows x86 arch:x86

8d610adb5aa8fa0c852540818b19e77e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
lstrcpynA
GlobalAlloc
GlobalFree

user32

SendMessageA

msvcrt

_onexit
__dllonexit
??3@YAXPAX@Z
_mbsnbcpy
_mbsstr
strlen
strcat
strcpy
memset
atoi
atol
memcpy
??2@YAPAXI@Z

Exports

Exports

ParseCmdLine
SendCompleteMsg

Sections

.text
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 613B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

9d433976e02d79532f0d635ee81d0b20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetPrivateProfileIntA
GlobalAlloc
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
lstrcmpiA

user32

GetDlgCtrlID
GetClientRect
SetWindowRgn
LoadIconA
MapWindowPoints
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadImageA

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

97c84efb92e9e74c911abc996572ac5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
TerminateProcess
lstrcmpiA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
GetProcAddress
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 459B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/procdll.dll
.dll windows:4 windows x86 arch:x86

b081680a6bacb63fdf5fe18c7672c75a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
lstrcmpiA
CloseHandle
OpenProcess
LoadLibraryA
FreeLibrary
GetVersionExA
GetLongPathNameA
lstrcpyA
GlobalFree

Exports

Exports

IsProcRunning

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ADManage.dll
.dll windows:4 windows x86 arch:x86

33734e19fbf5db772bca817ce999f5ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord389
ord6453
ord537
ord800
ord5572
ord2915
ord535
ord5808
ord5204
ord4275
ord6374
ord1228
ord924
ord939
ord941
ord2764
ord2818
ord540
ord3127
ord3616
ord3229
ord5651
ord3613
ord3663
ord690
ord1988
ord5356
ord5207
ord860
ord350
ord858
ord2841
ord2448
ord5440
ord6383
ord5450
ord6394
ord2044
ord2107
ord3903
ord5834
ord3810
ord668
ord3126
ord818
ord3178
ord3742
ord567
ord2770
ord356
ord1105
ord922
ord2379
ord2614
ord1979
ord5442
ord3318
ord665
ord5186
ord354
ord6385
ord4278
ord6663
ord6215
ord4129
ord5710
ord6283
ord6282
ord938
ord932
ord5933
ord3402
ord2135
ord4299
ord2754
ord1949
ord4034
ord5683
ord6662
ord4202
ord1641
ord2763
ord857
ord1233
ord465
ord1770
ord1175
ord6648
ord6055
ord1182
ord823
ord342
ord1253
ord1168
ord825
ord2864
ord4080
ord4424
ord4627
ord3831
ord3079
ord3825
ord3081
ord3830
ord2976
ord3136
ord2985
ord3262
ord3147
ord4465
ord3259
ord2124
ord2982
ord5277
ord1727
ord2446
ord5261
ord6376
ord5065
ord3749
ord4441
ord2055
ord2648
ord5290
ord4837
ord3798
ord2385
ord4353
ord5163
ord1776
ord5241
ord4407
ord4058
ord4078
ord2781
ord1980
ord3181
ord1572

msvcrt

_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
time
srand
rand
fseek
ftell
fread
strncpy
malloc
free
memmove
_mbsnbcmp
_mbsstr
_mbsncmp
_mbschr
_vsnprintf
sprintf
rename
fprintf
_ftol
_adjust_fdiv
_mbscmp
atol
__CxxFrameHandler
atoi
_initterm
_fstat
_fileno
_stricmp
_purecall
fclose
fwrite
fopen

kernel32

ResumeThread
GetExitCodeThread
GetPrivateProfileIntA
ResetEvent
WritePrivateProfileStringA
CreateEventA
GetPrivateProfileStringA
CloseHandle
SetFileAttributesA
WaitForSingleObject
CopyFileA
SuspendThread
DeleteFileA
lstrlenA
FormatMessageA
LocalAlloc
GetLastError
GetModuleFileNameA
MultiByteToWideChar
GetFileAttributesA
CreateDirectoryA
GetLocalTime
GetProcAddress
CreateProcessA
RemoveDirectoryA
WideCharToMultiByte
lstrlenW
GetVersionExA
OpenProcess
GetTempFileNameA
WaitForMultipleObjects
GetTickCount
WinExec
GetTempPathA
Process32Next
Process32First
GetSystemDirectoryA
CreateToolhelp32Snapshot
GetCurrentProcessId
LocalFree
SetEvent

user32

GetWindowThreadProcessId
GetWindow
GetClassLongA
GetClientRect
IsWindowVisible
SetClassLongA
SendMessageA
KillTimer
SetTimer
GetDesktopWindow
IsWindow
RegisterWindowMessageA
EnableWindow
wsprintfA
PostMessageA
MessageBoxA

gdi32

CreateFontA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA

ole32

CoFreeLibrary
CoLoadLibrary
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString
VariantClear

urlmon

URLDownloadToCacheFileA

ws2_32

htonl
ntohl

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

winmm

mixerOpen
mixerClose
mixerGetNumDevs
mixerGetLineInfoA

Exports

Exports

??0CADInterface@@QAE@XZ
??1CADInterface@@UAE@XZ
??_7CADInterface@@6B@
?AddInsertIDReportItem@CADInterface@@QAEXKKKKABVCString@@@Z
?BeginPlay@CADInterface@@QAEJKI@Z
?DownLoadQueryFileOK@CADInterface@@AAEXXZ
?EndPlay@CADInterface@@QAEXIH@Z
?GetSafeADPlayWnd@CADInterface@@QAEPAVCWnd@@I@Z
?InitADPlay@CADInterface@@QAEHIPAUHWND__@@AAH@Z
?SetADQQInfo@CADInterface@@QAEXUtagADQQInfo@@@Z
?StartADQuery@CADInterface@@QAEXXZ
?StartADReport@CADInterface@@QAEXXZ
?StartRefreshADContent@CADInterface@@QAEXPAUHWND__@@@Z
?StopADQuery@CADInterface@@QAEXXZ
?StopADReport@CADInterface@@QAEXXZ
?StopRefreshADContent@CADInterface@@QAEXXZ

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BalloonTip.dll
.dll regsvr32 windows:4 windows x86 arch:x86

e0defd03e4267167a7cfe1ccd2e0942e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord1233
ord2379
ord3626
ord3663
ord3619
ord2414
ord3610
ord2089
ord922
ord640
ord6199
ord5789
ord1640
ord323
ord2859
ord1641
ord2243
ord6215
ord6197
ord6380
ord6379
ord3874
ord3797
ord3092
ord3573
ord755
ord2860
ord283
ord2754
ord470
ord6453
ord6605
ord3706
ord3571
ord2864
ord4287
ord2753
ord5785
ord289
ord5875
ord4480
ord656
ord5450
ord6394
ord5834
ord5440
ord6383
ord5710
ord539
ord1601
ord4129
ord5683
ord6442
ord2380
ord2078
ord4299
ord609
ord3574
ord3402
ord6374
ord5241
ord4396
ord2575
ord6877
ord926
ord4275
ord567
ord818
ord3742
ord4627
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord5163
ord2385
ord4407
ord1776
ord4078
ord6055
ord2107
ord2044
ord3903
ord2448
ord2841
ord6663
ord941
ord939
ord2818
ord4278
ord537
ord535
ord540
ord613
ord2452
ord561
ord3738
ord1575
ord5302
ord4079
ord4698
ord5307
ord4274
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord825
ord3953
ord800
ord924
ord1168
ord2725
ord1131
ord6467
ord823
ord858
ord2614
ord860
ord5572
ord2915
ord3346
ord2396
ord5199
ord1089
ord3922
ord1116
ord1176
ord5731
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2512
ord2554
ord4486
ord6375
ord815
ord5300

msvcrt

memcpy
_purecall
free
malloc
realloc
memset
memcmp
fclose
fopen
rename
fwrite
sprintf
fprintf
_vsnprintf
_mbschr
_mbsncmp
strlen
_mbsstr
_mbsnbcmp
_mbscmp
__CxxFrameHandler
_adjust_fdiv
_mbsnbcpy
atoi
sqrt
pow
wcslen
_mbsicmp
_wtoi
_wtol
swprintf
_ftol
strcmp
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_initterm
??1type_info@@UAE@XZ
_fstat
_fileno

kernel32

LoadResource
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
MultiByteToWideChar
lstrlenW
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
DeleteFileA
GetLocalTime
GetVersion
CloseHandle
ReadFile
CreateFileA
GetFileSize
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExA
LocalFree
LocalAlloc

user32

GetWindowDC
SetCursor
CreateWindowExA
RegisterWindowMessageA
CopyRect
SystemParametersInfoA
OffsetRect
DrawIconEx
SetPropA
GetWindow
WindowFromPoint
CharNextA
wsprintfA
SetTimer
GetDesktopWindow
IsWindow
PostMessageA
SetWindowLongA
GetWindowLongA
GetWindowRect
GetPropA
ReleaseDC
GetDC
SendMessageA
EnableWindow
ScreenToClient
GetParent
GetClassNameA
KillTimer
GetWindowRgn
ClientToScreen
GetWindowThreadProcessId
IsWindowVisible
GetWindowTextW
GetWindowTextA
DrawTextW
DrawTextA
IsWindowEnabled
RedrawWindow
GetClientRect
BeginPaint
EndPaint
GetTopWindow
RemovePropA
SetWindowRgn
LoadCursorA
SetWindowPos
CallWindowProcA
SetRect
LoadImageA
SendMessageTimeoutA
InvalidateRect
PtInRect
GetCursorPos

gdi32

SetBkMode
Rectangle
SelectClipRgn
ExcludeClipRect
ExtSelectClipRgn
CreateRectRgnIndirect
CreatePen
MoveToEx
LineTo
GetStockObject
RoundRect
GetTextExtentPoint32A
GetDeviceCaps
CreateBitmap
BitBlt
SetBkColor
SetTextColor
SetStretchBltMode
CreateDIBSection
SelectObject
StretchBlt
ExtCreateRegion
DeleteDC
GetDIBits
CreateDIBitmap
CreateCompatibleBitmap
OffsetRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateRectRgn
CombineRgn
FillRgn
CreateSolidBrush
FrameRgn
DeleteObject
GetObjectA
CreateFontIndirectA
CreateCompatibleDC

advapi32

RegQueryInfoKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey

comctl32

_TrackMouseEvent
InitCommonControlsEx

ole32

CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

LoadRegTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
SysStringLen
SysAllocStringLen
RegisterTypeLi
VariantClear

gdiplus

GdipCloneImage
GdipImageGetFrameDimensionsCount
GdipAlloc
GdipFree
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateFromHDC
GdipDrawImageRectI
GdipDeleteGraphics
GdipLoadImageFromFile
GdipDisposeImage
GdiplusShutdown
GdiplusStartup

msvcp60

?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Xran@std@@YAXXZ
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

msimg32

GradientFill

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
COMToolKit.dll
.dll regsvr32 windows:4 windows x86 arch:x86

6985333188035b9eefda31f1cc3b4191

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord3081
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord1089
ord5199
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord815
ord561
ord825
ord5500
ord1132
ord6467
ord1131
ord6354
ord2985
ord2512
ord800
ord3438
ord540
ord3663
ord860
ord912
ord858
ord823
ord4188
ord538
ord5440
ord6383
ord4274
ord6394
ord1799
ord446
ord743
ord4003
ord2727
ord2730
ord2729
ord4226
ord614
ord290
ord2448
ord941
ord940
ord2764
ord4202
ord6283
ord6282
ord2614
ord1168
ord535
ord5834
ord2044
ord3922
ord5731
ord6375
ord2554
ord4486
ord699
ord397
ord5450
ord600
ord1578
ord1176
ord1575
ord1116
ord1182
ord342
ord1577
ord1253
ord269
ord826
ord1197
ord1243
ord1255
ord1570

msvcrt

__CxxFrameHandler
_onexit
_mbscmp
__dllonexit
malloc
free
_initterm
??1type_info@@UAE@XZ
_adjust_fdiv

kernel32

LockResource
LoadResource
SizeofResource
FindResourceA
LocalFree
GetLastError
LocalAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CacheFile/AD/fail.xml
.xml
CacheFile/AD/origin.swf
CacheFile/LogeAd.htm
.html .js polyglot
CacheFile/ScrWords.htm
.html
CacheFile/ShowPay.htm
.html
CacheFile/ShowPayBg.bmp
CacheFile/index_loge_normal/images/web_qqlivepic.jpg
.jpg
CacheFile/index_loge_normal/index.htm
.html
CacheFile/loading.gif
.gif
CacheFile/player_smleft.bmp
CacheFile/player_smmid.bmp
CacheFile/player_smright.bmp
Config.xml
.xml
Emoticons/emote.xml
.xml
Emoticons/gif/0.gif
.gif
Emoticons/gif/1.gif
.gif
Emoticons/gif/10.gif
.gif
Emoticons/gif/11.gif
.gif
Emoticons/gif/12.gif
.gif
Emoticons/gif/13.gif
.gif
Emoticons/gif/14.gif
.gif
Emoticons/gif/15.gif
.gif
Emoticons/gif/16.gif
.gif
Emoticons/gif/17.gif
.gif
Emoticons/gif/18.gif
.gif
Emoticons/gif/19.gif
.gif
Emoticons/gif/2.gif
.gif
Emoticons/gif/20.gif
.gif
Emoticons/gif/21.gif
.gif
Emoticons/gif/22.gif
.gif
Emoticons/gif/23.gif
.gif
Emoticons/gif/24.gif
.gif
Emoticons/gif/25.gif
.gif
Emoticons/gif/26.gif
.gif
Emoticons/gif/27.gif
.gif
Emoticons/gif/28.gif
.gif
Emoticons/gif/29.gif
.gif
Emoticons/gif/3.gif
.gif
Emoticons/gif/30.gif
.gif
Emoticons/gif/31.gif
.gif
Emoticons/gif/32.gif
.gif
Emoticons/gif/33.gif
.gif
Emoticons/gif/34.gif
.gif
Emoticons/gif/35.gif
.gif
Emoticons/gif/36.gif
.gif
Emoticons/gif/37.gif
.gif
Emoticons/gif/38.gif
.gif
Emoticons/gif/39.gif
.gif
Emoticons/gif/4.gif
.gif
Emoticons/gif/40.gif
.gif
Emoticons/gif/41.gif
.gif
Emoticons/gif/42.gif
.gif
Emoticons/gif/43.gif
.gif
Emoticons/gif/44.gif
.gif
Emoticons/gif/45.gif
.gif
Emoticons/gif/46.gif
.gif
Emoticons/gif/47.gif
.gif
Emoticons/gif/48.gif
.gif
Emoticons/gif/49.gif
.gif
Emoticons/gif/5.gif
.gif
Emoticons/gif/50.gif
.gif
Emoticons/gif/51.gif
.gif
Emoticons/gif/52.gif
.gif
Emoticons/gif/53.gif
.gif
Emoticons/gif/54.gif
.gif
Emoticons/gif/55.gif
.gif
Emoticons/gif/56.gif
.gif
Emoticons/gif/57.gif
.gif
Emoticons/gif/58.gif
.gif
Emoticons/gif/59.gif
.gif
Emoticons/gif/6.gif
.gif
Emoticons/gif/60.gif
.gif
Emoticons/gif/61.gif
.gif
Emoticons/gif/62.gif
.gif
Emoticons/gif/63.gif
.gif
Emoticons/gif/64.gif
.gif
Emoticons/gif/65.gif
.gif
Emoticons/gif/66.gif
.gif
Emoticons/gif/67.gif
.gif
Emoticons/gif/68.gif
.gif
Emoticons/gif/69.gif
.gif
Emoticons/gif/7.gif
.gif
Emoticons/gif/70.gif
.gif
Emoticons/gif/71.gif
.gif
Emoticons/gif/72.gif
.gif
Emoticons/gif/73.gif
.gif
Emoticons/gif/74.gif
.gif
Emoticons/gif/75.gif
.gif
Emoticons/gif/76.gif
.gif
Emoticons/gif/77.gif
.gif
Emoticons/gif/78.gif
.gif
Emoticons/gif/79.gif
.gif
Emoticons/gif/8.gif
.gif
Emoticons/gif/80.gif
.gif
Emoticons/gif/81.gif
.gif
Emoticons/gif/82.gif
.gif
Emoticons/gif/83.gif
.gif
Emoticons/gif/84.gif
.gif
Emoticons/gif/85.gif
.gif
Emoticons/gif/86.gif
.gif
Emoticons/gif/87.gif
.gif
Emoticons/gif/88.gif
.gif
Emoticons/gif/89.gif
.gif
Emoticons/gif/9.gif
.gif
Emoticons/gif/90.gif
.gif
Emoticons/gif/91.gif
.gif
Emoticons/gif/92.gif
.gif
Emoticons/gif/93.gif
.gif
Emoticons/gif/94.gif
.gif
Emoticons/gif/95.gif
.gif
Emoticons/gif/vssver2.scc
ExceptCatch.dll
.dll windows:4 windows x86 arch:x86

be7c85b01a7f02b69af6639cefc29326

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord4837
ord4441
ord2648
ord3798
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3402
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3610
ord818
ord384
ord567
ord324
ord2302
ord4234
ord3571
ord3626
ord3663
ord2414
ord1641
ord6374
ord2096
ord5953
ord4710
ord2379
ord755
ord470
ord4299
ord2841
ord2448
ord2044
ord4353
ord5290
ord4278
ord6663
ord6883
ord801
ord541
ord4129
ord2764
ord5861
ord5683
ord6662
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord356
ord4202
ord2763
ord857
ord1572
ord465
ord1770
ord1175
ord6648
ord5440
ord6383
ord5450
ord6394
ord5834
ord1168
ord3227
ord3054
ord3425
ord3880
ord2514
ord686
ord656
ord641
ord665
ord537
ord941
ord861
ord2818
ord939
ord535
ord858
ord800
ord540
ord825
ord1182
ord823
ord342
ord1253
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord3597
ord4425
ord5280
ord1775
ord6052
ord4998
ord4853
ord4376
ord5265
ord2614
ord341
ord5858
ord654
ord4160
ord926
ord924
ord354
ord5186
ord3318
ord2915
ord5442
ord5572
ord5710
ord1979
ord6385
ord860
ord3810
ord3758
ord3408
ord2107
ord3903
ord1146

msvcrt

_onexit
free
_adjust_fdiv
_initterm
malloc
_vsnprintf
_mbsnbcmp
strchr
fclose
fopen
rename
__dllonexit
_ftol
srand
rand
strncpy
time
atol
wcslen
memmove
fprintf
_mbsstr
fwrite
sprintf
_mbsncmp
_mbschr
_mbscmp
_stricmp
_fileno
_fstat
__CxxFrameHandler

kernel32

WinExec
GetTempFileNameA
OpenProcess
WaitForMultipleObjects
CreateProcessA
GetProcAddress
RemoveDirectoryA
CreateDirectoryA
GetFileAttributesA
GetVersionExA
GlobalMemoryStatus
GetDiskFreeSpaceExA
CopyFileA
GetPrivateProfileStringA
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetLocalTime
lstrlenA
GetLastError
VirtualQuery
VirtualQueryEx
GetModuleFileNameA
CreateFileA
CloseHandle
GetCurrentProcess
GetModuleHandleA
SetFileAttributesA
DeleteFileA
SetUnhandledExceptionFilter
GetSystemDirectoryA
Process32Next
Process32First
GetCurrentProcessId
CreateToolhelp32Snapshot
GetTempPathA

user32

SetClassLongA
GetSystemMetrics
wsprintfA
EnableWindow
IsWindowVisible
IsWindow
GetWindowRect
KillTimer
MessageBoxA
SetTimer
LoadBitmapA
MessageBeep
GetDesktopWindow
GetClientRect
SendMessageA
PostMessageA
GetWindowThreadProcessId
GetWindow
GetClassLongA

gdi32

GetDeviceCaps
DeleteDC
CreateDCA
CreateFontA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

ImageList_AddMasked
ImageList_Draw
ImageList_SetBkColor

ole32

CoCreateInstance
CoLoadLibrary

oleaut32

VariantClear
SysFreeString

msvcp60

?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??1_Lockit@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??0_Lockit@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z

imagehlp

SymInitialize
SymFunctionTableAccess
StackWalk
SymSetOptions
SymLoadModule
SymGetModuleInfo
SymGetSymFromAddr

winmm

mixerOpen
mixerGetNumDevs
mixerClose
mixerGetLineInfoA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

?SetExceptionCatcher@@YAXABVCString@@H@Z

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GdiPlus.dll
.dll windows:5 windows x86 arch:x86

2a1ab6b72adad6b03d0746b0a5fa55d6

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04-12-2003 00:00

Not After

03-12-2008 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:9d:aa:11:d3:30:a8:95:60:ac:fa
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

01-07-1999 07:00

Not After

15-10-2005 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:06:51:3f:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Not Before

30-06-2003 23:22

Not After

30-08-2004 23:32

Subject

CN=Microsoft Windows XP Publisher,OU=Copyright (c) 2003 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4f:11:fb:cd:c0:44:ea:be:51:45:c5:b8:65:ea:1c:b3:ee:fd:20:31
Signer

Actual PE Digest

4f:11:fb:cd:c0:44:ea:be:51:45:c5:b8:65:ea:1c:b3:ee:fd:20:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SearchPathA
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
RaiseException
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemDefaultLCID
GetProcAddress
GetModuleHandleW
GetACP
GetVersionExA
LoadLibraryA
VirtualQuery
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
GetSystemInfo
HeapReAlloc
HeapFree
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
IsDBCSLeadByteEx
LocalReAlloc
MulDiv
SetLastError
LocalAlloc
LocalFree
GetFileTime
SearchPathW
InterlockedIncrement
GetOEMCP
CreateSemaphoreA
lstrcpyW
lstrcatW
LoadLibraryW
lstrcpyA
lstrcatA
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetProfileSectionA
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
GetLastError
VirtualFree
GlobalAlloc
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryA
FreeLibrary
HeapDestroy

user32

ReleaseDC
GetDC
LoadBitmapW
LoadBitmapA
wsprintfW
SystemParametersInfoA
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterWindowMessageA
RegisterClassA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
CreateIconIndirect
GetIconInfo
ClientToScreen
wvsprintfA
GetDCEx
GetWindowLongA
GetClassLongA

gdi32

GetNearestPaletteIndex
GetDIBColorTable
FillRgn
SetMiterLimit
CreateSolidBrush
StrokePath
GetGraphicsMode
SetPolyFillMode
FillPath
StrokeAndFillPath
GetWindowExtEx
ExtTextOutA
GetTextCharsetInfo
TranslateCharsetInfo
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
CombineRgn
SetPaletteEntries
ResizePalette
ExcludeClipRect
MoveToEx
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
StretchBlt
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreatePen
CreateDIBitmap
CreatePatternBrush
ExtSelectClipRgn
GetBkMode
GetTextAlign
ModifyWorldTransform
ExtCreateRegion
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
PolyPolygon
PlayMetaFileRecord
ExtCreatePen
GetWorldTransform
GetROP2
SetROP2
Rectangle
Polygon
IntersectClipRect
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
GetObjectW
DPtoLP
CreateDIBPatternBrushPt
ExtTextOutW
SetBitmapBits
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
GetMetaFileBitsEx
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
SetDIBits
CreateBrushIndirect
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
SetDIBColorTable
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
PolyPolyline
GetViewportExtEx
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
GdiFlush
PatBlt

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

advapi32

RegSetValueExA
RegCloseKey
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LiveAPI.dll
.dll regsvr32 windows:4 windows x86 arch:x86

5f84065564417d631425d9a41f9ae6d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord924
ord4160
ord1168
ord1601
ord6467
ord4129
ord539
ord5683
ord2764
ord939
ord6663
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord6375
ord2512
ord2554
ord4486
ord941
ord537
ord2818
ord4278
ord540
ord535
ord5572
ord2915
ord800
ord4274
ord860
ord858
ord823
ord2725
ord3953
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord815
ord826
ord600
ord269
ord1255
ord1253
ord1578
ord1197
ord1243
ord1570
ord1182
ord1577
ord342
ord1176
ord1116
ord1575

msvcrt

atoi
_mbscmp
__dllonexit
?terminate@@YAXXZ
_onexit
_except_handler3
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
memset
realloc
malloc
free
_purecall
memcpy
__CxxFrameHandler
memcmp

kernel32

LoadLibraryA
HeapDestroy
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpyA
lstrcatA
GetPrivateProfileIntA
CreateProcessA
WritePrivateProfileStringA
LocalFree
LocalAlloc
GetProcAddress

user32

CharNextA
IsWindow
GetWindow
GetPropA
SendMessageA
GetDesktopWindow
PostMessageA
MessageBoxA
RegisterWindowMessageA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysStringLen
LoadRegTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LiveStream.dll
.dll regsvr32 windows:4 windows x86 arch:x86

868231155733b4029ffc42a105b3dce1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

socket
ioctlsocket
closesocket
__WSAFDIsSet
htons
listen
WSAGetLastError
recv
send
inet_addr
htonl
accept
getpeername
select
bind
inet_ntoa
ntohs

kernel32

IsBadCodePtr
GetUserDefaultLCID
GetModuleFileNameA
MultiByteToWideChar
GetProcAddress
lstrlenA
WideCharToMultiByte
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapDestroy
FreeLibrary
LoadLibraryA
lstrcpyA
lstrcatA
lstrlenW
GetShortPathNameA
GetModuleHandleA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
CreateMutexA
CloseHandle
GetTickCount
GetPrivateProfileIntA
SetEvent
WaitForSingleObject
ResetEvent
CreateEventA
CreateSemaphoreA
ReleaseSemaphore
Sleep
WaitForMultipleObjects
CreateThread
ReleaseMutex
GetLocalTime
DeleteFileA
CreateDirectoryA
FindClose
FindFirstFileA
TerminateThread
GetCurrentThreadId
HeapReAlloc
CreateFileA
IsBadWritePtr
VirtualAlloc
VirtualFree
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsBadReadPtr
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
EnumSystemLocalesA
SetHandleCount
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
SetStdHandle
GetVersionExA
ExitThread
TlsSetValue
FlushFileBuffers
GetEnvironmentVariableA
GetCommandLineA
SetLastError
TlsFree
TlsGetValue
HeapSize
RtlUnwind
HeapFree
HeapAlloc
HeapCreate
GetTimeZoneInformation
GetSystemTime
RaiseException
GetCurrentProcess
TlsAlloc
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
TerminateProcess

user32

GetDC
ReleaseDC
PostMessageA
CharNextA

gdi32

GetDIBits
SetDIBitsToDevice
GetTextExtentPoint32A
CreateDIBitmap
ExtTextOutA
CreateFontIndirectA
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA

ole32

CoFreeLibrary
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoLoadLibrary
CoTaskMemFree

oleaut32

LoadRegTypeLi
VarUI4FromStr
SysAllocString
RegisterTypeLi
LoadTypeLi
SysFreeString
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MagicFlash.exe
.exe windows:4 windows x86 arch:x86

8d4bd6d63bcda9fa1ac550dc3b225236

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_controlfp
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
free
malloc
sprintf
memset
_ftol
_CxxThrowException
memcmp
_mbsicmp
__p___argv
__CxxFrameHandler
strstr
memcpy
??2@YAPAXI@Z
_setmbcp
??3@YAXPAX@Z
strlen
strcpy
__p___argc
atoi
strcmp
fread
fclose
ftell
fseek
fopen

mfc42

ord6453
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord2514
ord858
ord800
ord668
ord2915
ord2770
ord356
ord537
ord2621
ord1134
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord3742
ord818
ord567
ord4275
ord2688
ord3005
ord2135
ord1099
ord6197
ord3797
ord2379
ord5265
ord4376
ord4853
ord4998
ord6052
ord1775
ord5280
ord4425
ord3597
ord641
ord860
ord1146
ord1168
ord540
ord324
ord4234
ord4034
ord4710
ord755
ord470
ord1233
ord6380
ord6379
ord1108
ord861
ord435
ord1269
ord1572
ord1576
ord1265
ord1200
ord2818
ord3402
ord1949

kernel32

WideCharToMultiByte
lstrcmpiA
GetStartupInfoA
MultiByteToWideChar
DeleteFileA
GetCurrentProcess
WriteProcessMemory
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32First
Module32Next
CloseHandle
GetSystemInfo
GetModuleHandleA
InterlockedDecrement
GetLastError
Sleep
FormatMessageA
LocalFree
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA

user32

SetWindowRgn
InvalidateRect
PostQuitMessage
PostMessageA
MessageBoxA
GetDC
DestroyMenu
TrackPopupMenu
SetTimer
BeginPaint
wsprintfA
GetWindowRect
LoadMenuA
GetSubMenu
SetWindowLongA
GetWindowLongA
KillTimer
EndPaint
CallWindowProcA
GetCursorPos
GetClientRect
LoadIconA
EnableWindow
MoveWindow
ReleaseDC
IsWindow
AdjustWindowRectEx

gdi32

GetRgnBox
DeleteObject
CreateCompatibleDC
GetPixel
GetDeviceCaps
DeleteDC
ExtCreateRegion
SetPixel
CreateDIBSection
SelectObject
BitBlt

oleaut32

SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
SysFreeString
VariantChangeType

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MiniQQLive.exe
.exe windows:4 windows x86 arch:x86

142f644c538f82686146c2f295588034

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmSimulateHotKey
ImmIsIME

proxy

?IsIESetProxy@CIEProxyInfo@@QAEHXZ
??1CIEProxyInfo@@UAE@XZ
?GetUserProxySetting@CProxyTool@@QAEHAAHAAVCString@@AAG11@Z
??0CProxyTool@@QAE@XZ
??0CIEProxyInfo@@QAE@XZ
?CreateSocks5ProxyUDPSocket@CProxyTool@@QAEHAAI0AAUsockaddr_in@@ABVCString@@G222GAAV3@@Z
??1CProxyTool@@UAE@XZ

mfc42

ord5440
ord6383
ord2818
ord5450
ord6394
ord2864
ord924
ord3903
ord2107
ord2614
ord1979
ord5572
ord5442
ord2044
ord5834
ord665
ord5186
ord354
ord6385
ord4278
ord2915
ord941
ord6663
ord926
ord3092
ord6805
ord5981
ord6199
ord4287
ord5875
ord3318
ord3797
ord939
ord3573
ord3626
ord2414
ord1175
ord6699
ord6803
ord2233
ord6597
ord1768
ord6197
ord4274
ord283
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord4476
ord2029
ord1247
ord6117
ord2621
ord6375
ord4078
ord5710
ord539
ord4299
ord4284
ord3920
ord3706
ord1641
ord2380
ord3089
ord3874
ord6880
ord4123
ord2642
ord6883
ord801
ord541
ord4129
ord2764
ord861
ord5861
ord3663
ord2448
ord3619
ord795
ord6380
ord640
ord5789
ord1640
ord323
ord2859
ord5683
ord6662
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord4275
ord4202
ord2763
ord857
ord1572
ord465
ord1770
ord6648
ord1862
ord4220
ord2584
ord3654
ord812
ord686
ord559
ord384
ord2438
ord6144
ord2408
ord5862
ord807
ord3289
ord2097
ord4163
ord2120
ord554
ord3571
ord2567
ord2754
ord2753
ord825
ord567
ord540
ord860
ord818
ord800
ord3742
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord6055
ord5290
ord4353
ord6374
ord1576
ord5163
ord2385
ord5241
ord4407
ord1776
ord2841
ord537
ord6453
ord1644
ord1233
ord6270
ord2086
ord4234
ord1168
ord1146
ord3597
ord324
ord641
ord1775
ord4425
ord5280
ord4710
ord6052
ord2514
ord4376
ord4998
ord4853
ord4447
ord5265
ord4411
ord4919
ord5809
ord5480
ord3570
ord278
ord605
ord5478
ord966
ord1971
ord4335
ord5796
ord4863
ord5810
ord2031
ord5481
ord1639
ord6215
ord2379
ord823
ord535
ord858
ord3402
ord2077
ord3721
ord1134
ord2725
ord815
ord561
ord356

msvcrt

__p__commode
_adjust_fdiv
__set_app_type
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
srand
strncpy
_beginthreadex
time
_ftol
swprintf
_wtol
_wtoi
_except_handler3
_mbsicmp
memmove
_mbsnbcmp
_mbsstr
_mbsncmp
_mbschr
_vsnprintf
fprintf
sprintf
fwrite
rename
fopen
fclose
atoi
_mbscmp
atol
_mbsnbcpy
realloc
free
__CxxFrameHandler
wcslen
_controlfp
__p__fmode
rand
_fileno
_fstat
_setmbcp
_stricmp
_itoa

kernel32

GetStartupInfoA
Process32First
Process32Next
GetCurrentProcessId
WinExec
GetTempPathA
GetSystemDirectoryA
OpenProcess
WaitForMultipleObjects
GetTempFileNameA
RemoveDirectoryA
CreateDirectoryA
CreateProcessA
GetCurrentProcess
SetProcessWorkingSetSize
GetFileAttributesA
GetProcAddress
GetVersion
LoadLibraryA
GlobalMemoryStatus
GetDiskFreeSpaceExA
GetVersionExA
GetPrivateProfileStringA
lstrcpynA
CopyFileA
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
CreateFileA
GlobalReAlloc
ReadFile
lstrlenW
GetFileSize
GetModuleHandleA
CreateMutexA
WideCharToMultiByte
GetLocalTime
DeleteFileA
MultiByteToWideChar
lstrlenA
WritePrivateProfileStringA
GetModuleFileNameA
GetTickCount
SetEvent
GetPrivateProfileIntA
CreateEventA
ResetEvent
CloseHandle
CreateToolhelp32Snapshot
GetLastError

user32

GetWindowTextA
DrawTextW
DrawTextA
ClientToScreen
GetWindowTextW
DrawIconEx
GetWindowDC
IsWindowEnabled
RedrawWindow
InvalidateRect
ScreenToClient
GetTopWindow
GetWindowRgn
OffsetRect
GetWindowThreadProcessId
SetCursor
CreateWindowExA
GetWindowLongA
CopyRect
SystemParametersInfoA
GetSystemMetrics
IsZoomed
PtInRect
EnableMenuItem
InflateRect
GetKeyboardLayout
SetClassLongA
GetClassLongA
MessageBoxA
AppendMenuA
GetMenuItemInfoA
GetSysColor
EndPaint
WindowFromPoint
GetParent
GetClientRect
GetWindowRect
SetWindowPos
CallWindowProcA
SetRect
SetWindowRgn
SetWindowLongA
GetDC
ReleaseDC
LoadImageA
SendMessageTimeoutA
GetWindow
GetPropA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyIcon
PostMessageA
GetClassNameA
MoveWindow
SendMessageA
wsprintfA
GetDesktopWindow
RemovePropA
CreatePopupMenu
IsWindowVisible
SetForegroundWindow
GetCursorPos
IsWindow
SetPropA
LoadIconA
RegisterWindowMessageA
EnableWindow
SetTimer
KillTimer
BeginPaint

gdi32

CreatePen
MoveToEx
GetDeviceCaps
CreateBitmap
BitBlt
Ellipse
CreateFontA
CreateDCA
GetTextExtentPoint32A
Rectangle
CreateRectRgn
OffsetRgn
SelectClipRgn
GetObjectA
ExcludeClipRect
ExtSelectClipRgn
CreateRectRgnIndirect
CreateRoundRectRgn
GetDIBits
CreateSolidBrush
DeleteDC
LineTo
GetStockObject
RoundRect
FillRgn
SetBkMode
DeleteObject
SelectObject
CreateDIBitmap
CreateDIBSection
CombineRgn
ExtCreateRegion
StretchBlt
SetBkColor
CreateFontIndirectA
CreateCompatibleDC
SetStretchBltMode
SetTextColor

advapi32

RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ImageList_GetIcon
ImageList_GetImageCount
InitCommonControlsEx
_TrackMouseEvent

ole32

CoCreateInstance
CoLoadLibrary

oleaut32

VariantClear
SafeArrayCreateVector
SafeArrayAccessData
SysAllocStringLen
SafeArrayUnaccessData
SysFreeString
SafeArrayDestroy

urlmon

URLDownloadToFileA

wsock32

WSAGetLastError
ntohs
htonl
htons
ntohl
closesocket

msvcp60

?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?_Xran@std@@YAXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z

admanage

?StartRefreshADContent@CADInterface@@QAEXPAUHWND__@@@Z
??1CADInterface@@UAE@XZ
??0CADInterface@@QAE@XZ

msimg32

GradientFill

winmm

mixerClose
mixerGetNumDevs
mixerOpen
mixerGetLineInfoA

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
P2PDownload.dll
.dll regsvr32 windows:4 windows x86 arch:x86

dc000189564e7150735b44366ee97b7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup
ntohl
gethostname
inet_addr
gethostbyname
inet_ntoa
WSACleanup

kernel32

DeleteCriticalSection
MultiByteToWideChar
MoveFileA
CopyFileA
SetEvent
CreateDirectoryA
GetCurrentThreadId
GlobalLock
GlobalAlloc
GetCurrentProcess
InitializeCriticalSection
CreateEventA
GetLocalTime
DeleteFileA
GetModuleFileNameA
lstrlenA
GetLastError
lstrlenW
WideCharToMultiByte
InterlockedIncrement
GlobalUnlock
InterlockedDecrement
ResetEvent
DisableThreadLibraryCalls
WaitForMultipleObjects
GetTickCount
WaitForSingleObject
GetProcAddress
EnterCriticalSection
FormatMessageA
LocalFree
GetModuleHandleA
LeaveCriticalSection
CloseHandle
FlushInstructionCache
LoadLibraryA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapSize
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
GetSystemTime
GetCPInfo
TlsGetValue
ExitProcess
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TerminateProcess
Sleep
WriteFile
GetOEMCP
GetACP
GetCommandLineA
TlsFree
SetFilePointer
CreateFileA
RtlUnwind
GetTimeZoneInformation
TlsAlloc
SetLastError
GetVersion
HeapFree
HeapAlloc
TlsSetValue

user32

CreateWindowExA
BeginPaint
GetClientRect
wsprintfA
KillTimer
UnregisterClassA
SetWindowLongA
EndPaint
RegisterClassA
LoadCursorA
LoadIconA
GetWindowLongA
SetTimer
PostMessageA
ShowWindow
InvalidateRect
GetKeyState
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
CallWindowProcA
IsChild
GetFocus
SetFocus
IsWindow
DestroyWindow
DefWindowProcA

gdi32

TextOutA
CreateRectRgnIndirect
DeleteMetaFile
Rectangle
RestoreDC
SetWindowExtEx
CloseMetaFile
SaveDC
CreateMetaFileA
SetWindowOrgEx
SetViewportOrgEx
SetMapMode
DeleteDC
GetDeviceCaps
LPtoDP
SetTextAlign

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ole32

CoTaskMemFree
CoLoadLibrary
CoFreeLibrary
CoCreateInstance
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoTaskMemAlloc

oleaut32

VariantClear
OleCreatePropertyFrame
LoadRegTypeLi
SysStringLen
SysFreeString

atl

ord58
ord44
ord31
ord26
ord16
ord23
ord21
ord27
ord15
ord18
ord57
ord32
ord43
ord46
ord50
ord51
ord30

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Picture.dll
.dll regsvr32 windows:4 windows x86 arch:x86

e45ec9d08f84fb24f2f1e4acdf3ffef3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\Rtx340\Source\Client\Independent\Picture\Release\Picture.pdb

Imports

kernel32

SetFilePointer
LeaveCriticalSection
EnterCriticalSection
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GlobalAlloc
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
lstrcpyA
lstrcatA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
ExitProcess
GlobalLock
ReadFile
GlobalUnlock
lstrcpynA
InterlockedExchange
CreateFileA
WriteFile
CloseHandle
GetTickCount
GetModuleFileNameA
MulDiv
InterlockedDecrement
InterlockedIncrement
lstrcmpiA
lstrlenA
GetProcessHeap
HeapFree
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FlushInstructionCache

user32

CharNextA
ReleaseDC
GetDC
ShowWindow
KillTimer
wsprintfA
SendMessageA
IsWindowVisible
SetTimer
LoadCursorA
RegisterClassExA
CreateWindowExA
UnregisterClassA
SetFocus
IsChild
GetFocus
InvalidateRect
DefWindowProcA
DestroyWindow
WindowFromDC
FillRect
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
SetWindowLongA
GetWindowLongA
CallWindowProcA
IsWindow
GetKeyState
EndPaint
GetClientRect
BeginPaint
GetClassInfoExA

gdi32

RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileA
CloseMetaFile
SetViewportOrgEx
SetMapMode
LPtoDP
CreateDCA
DeleteMetaFile
CreateRectRgnIndirect
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
OleLoadFromStream
WriteClassStm
OleSaveToStream
StringFromGUID2
CoCreateInstance

oleaut32

VarUI4FromStr
VariantClear
VariantInit
OleCreatePropertyFrame
SysFreeString
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
SysAllocString
SysStringLen

rpcrt4

NdrStubCall2
NdrStubForwardingFunction
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrCStdStubBuffer2_Release

msvcr71

memset
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
wcsncpy
??2@YAPAXI@Z
realloc
__CxxFrameHandler
wcscmp
??3@YAXPAX@Z
??_U@YAPAXI@Z
strrchr
??_V@YAXPAX@Z
strncpy
_CxxThrowException
_except_handler3
_resetstkoflw
free
malloc

shlwapi

PathFindExtensionA

gdiplus

GdipGetImageHeight
GdipCloneImage
GdipDrawImageRectI
GdipCreateFromHDC
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipGetPropertyItem
GdipGetPropertyItemSize
GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipSaveImageToFile
GdipSaveImageToStream
GdipGetImageWidth
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 115B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Proxy.dll
.dll windows:4 windows x86 arch:x86

9147eb3dd539cff63d05273258db1b9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord5241
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4078
ord4425
ord3597
ord1775
ord4407
ord4234
ord4853
ord6334
ord4160
ord924
ord5683
ord6662
ord668
ord1980
ord3178
ord4058
ord2614
ord2770
ord356
ord4202
ord1641
ord2763
ord857
ord1572
ord465
ord1770
ord1175
ord3663
ord6648
ord5440
ord6383
ord5450
ord6394
ord5834
ord2514
ord858
ord641
ord823
ord540
ord537
ord800
ord6052
ord4710
ord4376
ord4998
ord825
ord342
ord5265
ord1182
ord941
ord1253
ord1168
ord3903
ord939
ord2818
ord535
ord2107
ord2044
ord5186
ord6385
ord354
ord5442
ord665
ord3318
ord2841
ord1979
ord2448
ord5572
ord860
ord2915
ord5710
ord1228
ord6663
ord6877
ord4129
ord4278
ord324
ord2764
ord2370
ord4627
ord2781

msvcrt

atol
__dllonexit
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
_ftol
time
srand
strncpy
rand
_splitpath
_onexit
memmove
_mbsnbcmp
_mbsstr
_mbschr
_mbscmp
_vsnprintf
fprintf
fwrite
rename
fopen
fclose
sprintf
atoi
__CxxFrameHandler
_mbsncmp
_fstat
_stricmp
_fileno

kernel32

GetPrivateProfileStructA
GetLocalTime
DeleteFileA
GetModuleHandleA
lstrlenA
MapViewOfFile
GetModuleFileNameA
CloseHandle
CreateFileMappingA
UnmapViewOfFile
OpenFileMappingA
GetExitCodeThread
GetLastError
TerminateThread
GetPrivateProfileIntA
WaitForSingleObject
GetFileAttributesA
CreateDirectoryA
lstrcpynA
GetProcAddress
MultiByteToWideChar
RemoveDirectoryA
GetVersionExA
WideCharToMultiByte
CreateProcessA
WaitForMultipleObjects
OpenProcess
lstrlenW
GetTempPathA
GetTickCount
GetTempFileNameA
GetSystemDirectoryA
Process32Next
WinExec
Process32First
GetCurrentProcessId
CreateToolhelp32Snapshot
GetPrivateProfileStringA

user32

IsWindow
IsWindowVisible
GetDesktopWindow
PostMessageA
GetClassLongA
SetClassLongA
MessageBoxA
EnableWindow
GetWindowThreadProcessId
GetWindow
wsprintfA

gdi32

CreateFontA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoLoadLibrary
CoUninitialize
CoInitialize

oleaut32

VariantClear

ws2_32

ntohs
bind
send
gethostname
htonl
ntohl
socket
recv
setsockopt
gethostbyname
WSAGetLastError
inet_ntoa
shutdown
closesocket
WSACleanup
WSAStartup
connect
htons
inet_addr

wininet

InternetQueryOptionA
InternetCloseHandle
InternetErrorDlg
InternetOpenA
InternetConnectA
HttpQueryInfoA
HttpOpenRequestA
HttpSendRequestA
InternetSetOptionA

winmm

mixerGetNumDevs
mixerOpen
mixerClose
mixerGetLineInfoA

Exports

Exports

??0CHttpAgent@@QAE@ABV0@@Z
??0CHttpAgent@@QAE@XZ
??0CIEProxyInfo@@QAE@ABV0@@Z
??0CIEProxyInfo@@QAE@XZ
??0CProxyTool@@QAE@ABV0@@Z
??0CProxyTool@@QAE@XZ
??0CSocks5Agent@@QAE@ABV0@@Z
??0CSocks5Agent@@QAE@XZ
??1CHttpAgent@@UAE@XZ
??1CIEProxyInfo@@UAE@XZ
??1CProxyTool@@UAE@XZ
??1CSocks5Agent@@UAE@XZ
??4CHttpAgent@@QAEAAV0@ABV0@@Z
??4CIEProxyInfo@@QAEAAV0@ABV0@@Z
??4CProxyTool@@QAEAAV0@ABV0@@Z
??4CSocks5Agent@@QAEAAV0@ABV0@@Z
??_7CHttpAgent@@6B@
??_7CIEProxyInfo@@6B@
??_7CProxyTool@@6B@
??_7CSocks5Agent@@6B@
?Base64Encode@CHttpAgent@@AAEHPBEHPADPAHK@Z
?CreateHttpAgent@CHttpAgent@@QAEHAAIPBDG1G11@Z
?CreateHttpProxyTCPSocket@CProxyTool@@QAEHAAIABVCString@@G111GAAV2@@Z
?CreateProxyTCPSocket@CProxyTool@@QAEHAAIABVCString@@GAAV2@@Z
?CreateSocks5ProxyTCPSocket@CProxyTool@@QAEHAAIABVCString@@G111GAAV2@@Z
?CreateSocks5ProxyUDPSocket@CProxyTool@@QAEHAAI0AAUsockaddr_in@@ABVCString@@G222GAAV3@@Z
?GetBrowserProxyAddr@CIEProxyInfo@@AAEHHVCString@@AAV2@AAG@Z
?GetHttpReplyCode@CHttpAgent@@AAEHPAD@Z
?GetIEProxyInfo@CIEProxyInfo@@QAEHHHAAVCString@@AAG00@Z
?GetProxyUserNamePswFromIE@CIEProxyInfo@@AAEHAAVCString@@0@Z
?GetUserProxySetting@CProxyTool@@QAEHAAHAAVCString@@AAG11@Z
?GetUserProxyTypeSetting@CProxyTool@@QAEHXZ
?IsAllowProxy@CSocks5Agent@@AAEHPAEJH@Z
?IsHTTPNeedAuthenticate@CIEProxyInfo@@QAEHXZ
?IsIESetProxy@CIEProxyInfo@@QAEHXZ
?IsUseProxy@CProxyTool@@QAEHXZ
?MakeUdpProxySendBuf@CProxyTool@@QAEHPAEH0AAHKG@Z
?ParserUdpProxyRecvBuf@CProxyTool@@QAEHPAEH0AAHAAVCString@@AAG@Z
?ProcProxyReq@CSocks5Agent@@AAEHAAIAAUtagPROXYINFO@1@AAKAAGHG@Z
?ProcProxyReqDest@CSocks5Agent@@AAEHAAIAAUtagPROXYINFO@1@AAKAAGHG@Z
?ProcProxyReqUserPassword@CSocks5Agent@@AAEHAAIAAUtagPROXYINFO@1@AAKAAGHG@Z
?SetProxyInfo@CSocks5Agent@@QAEXAAUtagPROXYINFO@1@PBDF1F11@Z
?StartSOCKET5ProxyTCP@CSocks5Agent@@QAEHAAUtagPROXYINFO@1@AAI@Z
?StartSOCKET5ProxyUDP@CSocks5Agent@@QAEHAAUtagPROXYINFO@1@GAAIAAUsockaddr_in@@@Z
?TestHttp@CProxyTool@@AAEXPAUHWND__@@ABVCString@@G11@Z
?TestProxy@CProxyTool@@QAEXPAUHWND__@@@Z
?TestSocks5@CProxyTool@@AAEXPAUHWND__@@ABVCString@@G11@Z

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
QQLive.dll
.dll regsvr32 windows:4 windows x86 arch:x86

362c6ef535f7393374f7ee567c3159da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
GetTickCount
InterlockedIncrement
InterlockedDecrement
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexA
ReleaseSemaphore
SetEvent
CreateEventA
CreateSemaphoreA
WaitForMultipleObjects
DisableThreadLibraryCalls
HeapDestroy
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
MultiByteToWideChar
lstrlenA
lstrcatA
WideCharToMultiByte
lstrlenW
GetModuleFileNameA
GetShortPathNameA
GetModuleHandleA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetSystemTime
TerminateThread
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
CreateFileA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
FlushFileBuffers
SetFilePointer
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
ReadFile
WriteFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
GetLastError
TerminateProcess
InterlockedExchange
RtlUnwind
RaiseException
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetTimeZoneInformation
GetLocalTime
ExitProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
ResumeThread
GetCommandLineA
GetVersion
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TlsAlloc
TlsFree
SetLastError

user32

MessageBoxA
CharNextA
PostMessageA

ole32

CoLoadLibrary
CoFreeLibrary
CoCreateInstance

oleaut32

RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString

ws2_32

closesocket
socket
setsockopt
bind
inet_ntoa
htonl
ntohs
sendto
__WSAFDIsSet
select
recvfrom
send
htons
inet_addr
gethostbyname
ioctlsocket
accept
recv
getpeername
connect
listen
gethostname
WSAStartup
WSACleanup
WSAGetLastError
ntohl

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ReleaseCommLib

Sections

.text
Size: 504KB - Virtual size: 501KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
QQLive.exe
.exe windows:4 windows x86 arch:x86

6461a5a6c2bbfed9efee04191dc123d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

proxy

?CreateProxyTCPSocket@CProxyTool@@QAEHAAIABVCString@@GAAV2@@Z
?IsIESetProxy@CIEProxyInfo@@QAEHXZ
?GetUserProxySetting@CProxyTool@@QAEHAAHAAVCString@@AAG11@Z
??1CIEProxyInfo@@UAE@XZ
??0CProxyTool@@QAE@XZ
?CreateSocks5ProxyUDPSocket@CProxyTool@@QAEHAAI0AAUsockaddr_in@@ABVCString@@G222GAAV3@@Z
??0CIEProxyInfo@@QAE@XZ
??1CProxyTool@@UAE@XZ
?IsUseProxy@CProxyTool@@QAEHXZ

exceptcatch

?SetExceptionCatcher@@YAXABVCString@@H@Z

multilogin

??1CQQLiveLogin@@UAE@XZ
??0CQQLiveLogin@@QAE@XZ
?SetLoginIpPort@CQQLiveLogin@@QAEXPBDF@Z
?GetQQInfo@CQQLiveLogin@@QAEPAUtagOWNERINFO@@XZ
?IsLoginOK@CQQLiveLogin@@QAE_NXZ
?SetLoginServer@CQQLiveLogin@@QAEX_N000@Z
?GetIpAndPort@CQQLiveLogin@@QAEPAUtagCONNECT@@AAH@Z
?GetInfo@CQQLiveLogin@@QAEPADXZ
?QQLiveEnumOnlineQQ@CQQLiveLogin@@QAEXXZ
?Login@CQQLiveLogin@@QAEXPAEFJPBDPAUHWND__@@J@Z
?StartPing@CQQLiveLogin@@QAEXXZ
?Uninit@CQQLiveLogin@@QAEXXZ
?GetQQInfoEx@CQQLiveLogin@@QAEXXZ
?ClearPingResult@CQQLiveLogin@@QAEXXZ

msvcrt

_controlfp
__set_app_type
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
strncpy
_mbsncmp
_setmbcp
_strnicmp
_fileno
_fstat
_stricmp
_ultoa
_ltoa
memmove
_mbsnbcmp
?terminate@@YAXXZ
_exit
__dllonexit
??1type_info@@UAE@XZ
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_splitpath
difftime
_beginthread
isdigit
fclose
fseek
fopen
fread
ftell
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_mbscmp
atol
_beginthreadex
wcslen
malloc
_wtoi
free
_mbschr
_onexit
_mbsstr
sprintf
islower
isupper
_mbsicmp
_wtol
swprintf
_ftol
rand
srand
time
fwrite
_purecall
realloc
rename
fprintf
_vsnprintf
atoi
_except_handler3
_mbsnbcpy
ceil
floor
tolower

mfc42

ord3021
ord955
ord3296
ord6650
ord6807
ord6857
ord6823
ord6591
ord6855
ord6859
ord6867
ord6847
ord6839
ord6846
ord6858
ord6816
ord6832
ord6845
ord6815
ord6835
ord4589
ord4588
ord4899
ord4370
ord4892
ord6817
ord5076
ord4340
ord4347
ord4720
ord4889
ord4531
ord4545
ord4543
ord6856
ord4529
ord4524
ord4963
ord4960
ord4526
ord6054
ord5240
ord5281
ord3748
ord1725
ord922
ord924
ord6691
ord4432
ord6812
ord6814
ord3005
ord6215
ord2764
ord861
ord1601
ord2841
ord2448
ord3742
ord2860
ord2078
ord2243
ord2379
ord4299
ord6453
ord941
ord3693
ord2380
ord5788
ord472
ord2859
ord4108
ord5440
ord6383
ord5450
ord6394
ord2044
ord2107
ord3903
ord5834
ord6614
ord1233
ord3706
ord6197
ord6379
ord1641
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord3317
ord5260
ord3619
ord3797
ord2580
ord4400
ord3630
ord682
ord755
ord816
ord640
ord4133
ord4297
ord6172
ord5789
ord5875
ord5785
ord1640
ord323
ord3920
ord562
ord470
ord4284
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord692
ord3803
ord2582
ord3370
ord4402
ord3640
ord693
ord4243
ord6242
ord6696
ord2862
ord2408
ord3301
ord3293
ord6762
ord539
ord4278
ord6663
ord6358
ord3571
ord2714
ord6880
ord4123
ord6442
ord3398
ord810
ord4271
ord5787
ord6877
ord5148
ord4694
ord4506
ord613
ord289
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord1644
ord3874
ord3089
ord1862
ord812
ord559
ord6144
ord5862
ord807
ord3289
ord2097
ord4163
ord2120
ord1175
ord554
ord1168
ord4129
ord2567
ord2753
ord654
ord341
ord3092
ord6320
ord5858
ord6140
ord2571
ord1572
ord3437
ord850
ord2754
ord1146
ord698
ord396
ord911
ord5592
ord462
ord2458
ord5572
ord2241
ord2915
ord1238
ord1200
ord844
ord6289
ord968
ord3470
ord1770
ord857
ord2614
ord1979
ord5442
ord3318
ord665
ord5186
ord354
ord6385
ord6199
ord4160
ord4224
ord2152
ord6662
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord356
ord2763
ord465
ord6648
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord5280
ord4425
ord3597
ord641
ord1768
ord2086
ord4476
ord324
ord2302
ord4234
ord6905
ord6907
ord3998
ord3996
ord4710
ord2233
ord2642
ord2370
ord6334
ord5981
ord2301
ord2289
ord6380
ord4287
ord2080
ord6377
ord3127
ord3616
ord5651
ord3126
ord3613
ord690
ord1988
ord5356
ord5207
ord350
ord389
ord1105
ord5953
ord6007
ord3286
ord2029
ord2077
ord1639
ord5810
ord5481
ord2031
ord4335
ord4863
ord5796
ord5478
ord1971
ord966
ord3570
ord605
ord278
ord4919
ord5480
ord5809
ord4447
ord4411
ord4881
ord6597
ord6514
ord6478
ord6800
ord466
ord6808
ord2135
ord1949
ord4034
ord2452
ord940
ord6283
ord6282
ord3610
ord656
ord4673
ord4274
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5683
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord2621
ord1134
ord2725
ord1223
ord1206
ord6876
ord1158
ord3870
ord6378
ord2820
ord6883
ord801
ord541
ord5861
ord1871
ord3692
ord2393
ord2461
ord786
ord519
ord5989
ord353
ord5678
ord5781
ord5736
ord6119
ord1570
ord1197
ord1270
ord1232
ord6143
ord772
ord6142
ord3986
ord5606
ord5860
ord500
ord2566
ord2405
ord6128
ord1187
ord614
ord2623
ord290
ord1799
ord4226
ord2486
ord455
ord3237
ord2818
ord939
ord537
ord5710
ord4202
ord2864
ord4125
ord3914
ord2122
ord3287
ord2096
ord2414
ord1088
ord2639
ord3573
ord3663
ord3626
ord556
ord283
ord384
ord3733
ord686
ord809
ord535
ord4407
ord858
ord567
ord860
ord4275
ord609
ord540
ord818
ord4424
ord800
ord3574
ord3079
ord4627
ord4080
ord3830
ord3825
ord3831
ord3081
ord3402
ord2976
ord3136
ord2985
ord3262
ord3147
ord4465
ord3259
ord2124
ord2982
ord5277
ord1727
ord2446
ord5261
ord6376
ord5065
ord3749
ord4441
ord2055
ord2648
ord5290
ord4837
ord3798
ord5163
ord4353
ord6374
ord4396
ord2385
ord5241
ord6055
ord1776
ord4078
ord5818
ord2575
ord3645
ord6605
ord5307
ord1576

kernel32

MulDiv
GetStartupInfoA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
ExitThread
OutputDebugStringA
FindResourceA
SizeofResource
LoadResource
LockResource
HeapAlloc
GetVersion
GetProcessHeap
GetDiskFreeSpaceExA
GlobalAddAtomA
GlobalMemoryStatus
lstrcpyA
LoadLibraryA
lstrcatA
GetShortPathNameA
GetCurrentThreadId
FreeLibrary
lstrcmpiA
HeapDestroy
GetCommandLineA
CreateMutexA
ReleaseMutex
TerminateProcess
SetEvent
Sleep
SetProcessWorkingSetSize
ResumeThread
GetPrivateProfileStringA
ResetEvent
GetLastError
CreateEventA
GetLocalTime
SetFileAttributesA
EnterCriticalSection
CopyFileA
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WritePrivateProfileStringA
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
GetSystemDirectoryA
WinExec
Process32Next
GetTempFileNameA
OpenProcess
GetTickCount
GetVersionExA
GetProcAddress
WaitForMultipleObjects
CreateDirectoryA
GetFileAttributesA
RemoveDirectoryA
GlobalUnlock
GlobalReAlloc
GlobalLock
GetFileSize
ReadFile
CreateFileA
GetPrivateProfileIntA
GetTempPathA
GetModuleHandleA
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
lstrlenW
WideCharToMultiByte
DeleteFileA
CloseHandle
lstrcpynA
GetModuleFileNameA
TerminateThread
DeleteCriticalSection
GetExitCodeThread
lstrlenA
MultiByteToWideChar
InitializeCriticalSection
GlobalFree
GlobalAlloc
HeapFree
GlobalHandle

user32

IsMenu
GetScrollInfo
EnableScrollBar
GetDoubleClickTime
GetWindowPlacement
UnregisterHotKey
RegisterHotKey
UnionRect
GetSystemMenu
LoadIconA
CharNextA
CheckMenuItem
EqualRect
SetCursorPos
wsprintfA
SystemParametersInfoA
IsRectEmpty
DrawIcon
ShowScrollBar
GetSysColorBrush
DrawEdge
GetScrollRange
GetScrollPos
CloseClipboard
GetKeyState
SetFocus
MoveWindow
ShowWindow
MessageBoxA
GetClassLongA
SetClassLongA
EnableWindow
SetRect
CallWindowProcA
GetDesktopWindow
SetPropA
EndPaint
BeginPaint
GetWindow
SetScrollInfo
DrawFrameControl
MapWindowPoints
FrameRect
WindowFromDC
GetMessagePos
DrawStateA
SetScrollPos
SetScrollRange
EmptyClipboard
SetClipboardData
CreatePopupMenu
IntersectRect
IsChild
RemovePropA
SetParent
LoadBitmapA
DefWindowProcA
GetClassInfoA
EnableMenuItem
OpenClipboard
DrawTextA
GetDC
GetMessageA
GetFocus
SetCursor
GetSubMenu
GetSystemMetrics
GetClassNameA
GetWindowLongA
CreateWindowExA
GetWindowDC
GetWindowRgn
ClientToScreen
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextA
DrawTextW
SendMessageA
IsWindowEnabled
GetTopWindow
PostMessageA
GetParent
ScreenToClient
GetCursorPos
SetWindowPos
SetTimer
PtInRect
GetClientRect
KillTimer
GetPropA
LoadCursorA
SetWindowRgn
CopyRect
IsIconic
IsWindow
GetWindowRect
DestroyIcon
LoadMenuA
RegisterWindowMessageA
SetRectEmpty
InvalidateRect
FillRect
DestroyCursor
SetActiveWindow
GetIconInfo
RedrawWindow
LoadImageA
WindowFromPoint
IsWindowVisible
SendMessageTimeoutA
IsZoomed
SetForegroundWindow
BringWindowToTop
GetForegroundWindow
GetCapture
ClipCursor
SetCapture
GetSysColor
SetWindowLongA
DispatchMessageA
ReleaseDC
ReleaseCapture
GetMenuItemInfoA
AppendMenuA
OffsetRect
DrawIconEx
InflateRect

gdi32

ExtTextOutA
CreateEnhMetaFileA
TextOutA
CloseEnhMetaFile
Polygon
SetPixel
CreatePalette
SelectPalette
SetDIBitsToDevice
StretchDIBits
SetWindowOrgEx
PlayEnhMetaFile
IntersectClipRect
CreatePatternBrush
SetBrushOrgEx
PatBlt
UnrealizeObject
Rectangle
CreateDCA
OffsetRgn
SelectClipRgn
ExcludeClipRect
ExtSelectClipRgn
CreatePen
MoveToEx
LineTo
GetStockObject
RoundRect
SetBkMode
CreateFontIndirectA
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
SetStretchBltMode
CreateDIBSection
ExtCreateRegion
GetDIBits
CreateDIBitmap
GetObjectA
CreatePolygonRgn
FillRgn
CreateSolidBrush
FrameRgn
Ellipse
SelectObject
DeleteObject
GetTextExtentPoint32A
DeleteDC
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
StretchBlt
CreateFontA
CreateRectRgnIndirect
CreateRectRgn
CreateRoundRectRgn
CombineRgn

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

shell32

DragQueryPoint
Shell_NotifyIconA
ShellExecuteA
DragQueryFileA
DragFinish

comctl32

ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Draw
_TrackMouseEvent
ImageList_GetImageCount
ImageList_Remove
InitCommonControlsEx
ImageList_GetIcon

ole32

CoLoadLibrary
CoUninitialize
StringFromGUID2
CoCreateInstance
CoFreeLibrary
CoInitialize
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
OleUninitialize

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
DispCallFunc
SysStringLen
LoadRegTypeLi
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysAllocString
LoadTypeLi
RegisterTypeLi

urlmon

URLDownloadToFileA
URLDownloadToCacheFileA

gdiplus

GdipDisposeImage
GdipLoadImageFromFile
GdipAlloc
GdipCloneImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipImageSelectActiveFrame
GdipFree
GdipGetImageHeight
GdipImageGetFrameDimensionsList
GdipLoadImageFromFileICM
GdipImageGetFrameDimensionsCount
GdipGetPropertyItem
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdiplusStartup
GdiplusShutdown
GdipGetImageWidth

msvcp60

?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0_Lockit@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??_7runtime_error@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV01@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Xran@std@@YAXXZ
?_Xlen@std@@YAXXZ

ws2_32

closesocket
WSAGetLastError
shutdown
WSACleanup
ioctlsocket
setsockopt
inet_ntoa
WSAStartup
connect
recv
send
sendto
select
socket
recvfrom
inet_addr
__WSAFDIsSet
htons
getsockopt
ntohl
gethostbyname
ntohs
htonl

msimg32

GradientFill

admanage

?SetADQQInfo@CADInterface@@QAEXUtagADQQInfo@@@Z
?StartRefreshADContent@CADInterface@@QAEXPAUHWND__@@@Z
?StopRefreshADContent@CADInterface@@QAEXXZ
??0CADInterface@@QAE@XZ
??1CADInterface@@UAE@XZ

winmm

mixerClose
mixerGetLineInfoA
mixerGetNumDevs
mixerOpen

setupshell

GetSettingValue
SaveSettingSingle
SetupUpdateNotify
RemoveUpdateNotify
ShowSetting
ShowSettingSingle

Sections

.text
Size: 860KB - Virtual size: 858KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
QQLive.ini
QQLive.ocx
.dll regsvr32 windows:4 windows x86 arch:x86

f886fa555ca66107be70be96afc26abb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
realloc
free
_beginthreadex
_mbsnbcpy
_stricmp
_fileno
_purecall
_fstat
_adjust_fdiv
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
wcslen
swprintf
strncpy
sprintf
atol
_ftol
sscanf
strchr
isdigit
time
_mbscmp
rand
srand
strstr
atoi
_mbsrchr
_splitpath
wcstombs
wcscmp
_CxxThrowException
?terminate@@YAXXZ
_initterm
memmove
fclose
fopen
rename
fwrite
fprintf
_vsnprintf
_mbschr
_mbsncmp
_mbsstr
_mbsnbcmp
fread
_mbsicmp
_wtoi
_wtol
fseek
ftell
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CxxFrameHandler

ws2_32

bind
send
select
recv
recvfrom
sendto
getpeername
listen
accept
WSAStartup
WSACreateEvent
WSAEventSelect
htonl
WSAResetEvent
WSAWaitForMultipleEvents
WSACloseEvent
WSASetEvent
closesocket
shutdown
inet_ntoa
htons
WSAGetLastError
gethostbyname
WSACleanup
gethostbyaddr
getsockname
setsockopt
ntohs
ntohl
gethostname
socket
inet_addr
connect

proxy

?MakeUdpProxySendBuf@CProxyTool@@QAEHPAEH0AAHKG@Z
?CreateProxyTCPSocket@CProxyTool@@QAEHAAIABVCString@@GAAV2@@Z
??1CProxyTool@@UAE@XZ
?CreateSocks5ProxyUDPSocket@CProxyTool@@QAEHAAI0AAUsockaddr_in@@ABVCString@@G222GAAV3@@Z
?CreateSocks5ProxyTCPSocket@CProxyTool@@QAEHAAIABVCString@@G111GAAV2@@Z
?IsUseProxy@CProxyTool@@QAEHXZ
??0CProxyTool@@QAE@XZ
?CreateHttpProxyTCPSocket@CProxyTool@@QAEHAAIABVCString@@G111GAAV2@@Z
?ParserUdpProxyRecvBuf@CProxyTool@@QAEHPAEH0AAHAAVCString@@AAG@Z

admanage

??1CADInterface@@UAE@XZ
??0CADInterface@@QAE@XZ
?GetSafeADPlayWnd@CADInterface@@QAEPAVCWnd@@I@Z
?SetADQQInfo@CADInterface@@QAEXUtagADQQInfo@@@Z
?EndPlay@CADInterface@@QAEXIH@Z
?InitADPlay@CADInterface@@QAEHIPAUHWND__@@AAH@Z
?StartADQuery@CADInterface@@QAEXXZ
?AddInsertIDReportItem@CADInterface@@QAEXKKKKABVCString@@@Z
?StopADReport@CADInterface@@QAEXXZ
?StartRefreshADContent@CADInterface@@QAEXPAUHWND__@@@Z
?StartADReport@CADInterface@@QAEXXZ
?StopADQuery@CADInterface@@QAEXXZ
?BeginPlay@CADInterface@@QAEJKI@Z

mfc42

ord3825
ord3831
ord4627
ord3830
ord3079
ord3597
ord4080
ord4425
ord4234
ord800
ord6199
ord641
ord861
ord540
ord941
ord4710
ord324
ord5204
ord3092
ord389
ord1228
ord537
ord6597
ord6650
ord6591
ord5808
ord6857
ord6823
ord6855
ord6832
ord6859
ord6867
ord6847
ord6814
ord6839
ord3229
ord6858
ord6816
ord6815
ord6807
ord6845
ord6856
ord6835
ord4589
ord4588
ord4899
ord4370
ord4892
ord6817
ord5076
ord4340
ord4347
ord4720
ord6846
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord1776
ord5240
ord5281
ord3748
ord1725
ord5260
ord6614
ord6691
ord4432
ord6812
ord6478
ord6800
ord535
ord539
ord465
ord466
ord2241
ord1238
ord4889
ord2818
ord1168
ord6808
ord6055
ord4424
ord3742
ord818
ord567
ord4275
ord2379
ord3815
ord6442
ord1233
ord6453
ord3663
ord3706
ord3626
ord2414
ord1641
ord6378
ord3138
ord6197
ord6380
ord6215
ord6605
ord2864
ord6514
ord5290
ord815
ord2724
ord3952
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3401
ord4622
ord3670
ord561
ord1134
ord6354
ord1216
ord6467
ord1227
ord1877
ord4249
ord2486
ord2687
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord1601
ord3681
ord743
ord446
ord1177
ord1226
ord1210
ord2439
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4299
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4113
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4648
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord4738
ord4409
ord4603
ord5008
ord4415
ord4992
ord3353
ord2976
ord3404
ord4539
ord2954
ord2384
ord6370
ord2983
ord3148
ord3260
ord4466
ord2986
ord3080
ord4081
ord4624
ord5825
ord723
ord3946
ord860
ord423
ord924
ord5322
ord5339
ord5334
ord5328
ord5332
ord2541
ord4949
ord4459
ord4502
ord4006
ord2727
ord2730
ord2729
ord5033
ord2795
ord858
ord1892
ord4252
ord1212
ord4570
ord4672
ord4843
ord5011
ord4713
ord6371
ord5286
ord4438
ord3279
ord4625
ord746
ord449
ord2278
ord3619
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord5873
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord3571
ord755
ord640
ord5785
ord5875
ord6172
ord5789
ord2753
ord2754
ord6194
ord6021
ord3081
ord323
ord470
ord5572
ord2915
ord4278
ord6663
ord2575
ord3721
ord4396
ord3402
ord3574
ord609
ord795
ord1270
ord1232
ord2688
ord2135
ord2614
ord5575
ord4160
ord4480
ord4224
ord4202
ord4129
ord2784
ord2078
ord2233
ord2764
ord5710
ord6877
ord1949
ord4034
ord6883
ord665
ord801
ord939
ord541
ord354
ord5861
ord1979
ord5442
ord3318
ord5186
ord4033
ord433
ord1832
ord5651
ord350
ord3126
ord3613
ord1871
ord538
ord5440
ord6383
ord5450
ord6394
ord3584
ord803
ord543
ord2841
ord2107
ord2393
ord3005
ord6385
ord1105
ord2448
ord2044
ord3903
ord3127
ord3616
ord690
ord1988
ord5356
ord5207
ord3810
ord4456
ord2642
ord2438
ord6270
ord1644
ord6662
ord940
ord6283
ord6282
ord2370
ord6334
ord6379
ord2380
ord2405
ord613
ord6880
ord289
ord4123
ord2243
ord5683
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord356
ord2763
ord857
ord1572
ord1770
ord1175
ord6648
ord5834
ord1862
ord4220
ord2584
ord3654
ord812
ord686
ord559
ord384
ord6144
ord2408
ord5862
ord807
ord3289
ord2097
ord4163
ord2120
ord554
ord2567
ord2859
ord269
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord1116
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4853
ord4376
ord5265
ord4979
ord2488
ord4920
ord1640
ord1131
ord1132

kernel32

CreateFileA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetModuleHandleA
CreateDirectoryA
GetSystemDirectoryA
SetFileAttributesA
GetLocalTime
ResumeThread
SuspendThread
Sleep
lstrcpynA
GetFileSize
GetFileAttributesA
RemoveDirectoryA
CreateProcessA
WaitForMultipleObjects
OpenProcess
GetTempFileNameA
GetTempPathA
WinExec
Process32Next
Process32First
GetCurrentProcessId
CreateToolhelp32Snapshot
OutputDebugStringA
EnterCriticalSection
GetCurrentThreadId
GetVersionExA
GlobalMemoryStatus
GetDiskFreeSpaceExA
CopyFileA
WritePrivateProfileStringA
DeleteFileA
lstrlenW
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileStructA
SetEvent
LoadLibraryA
FreeLibrary
GetProcAddress
GetTickCount
FormatMessageA
LocalAlloc
LocalFree
CreateEventA
ResetEvent
DeleteCriticalSection
InitializeCriticalSection
GetPrivateProfileIntA
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateFileMappingA
GetLastError
OpenFileMappingA
GetExitCodeThread
WaitForSingleObject
LeaveCriticalSection
ReadFile
TerminateThread

user32

AppendMenuA
GetMenuItemInfoA
GetClassLongA
DestroyIcon
GetWindowRgn
GetSysColor
CopyRect
GetClassNameA
GetWindowDC
MessageBoxA
ClientToScreen
GetWindowThreadProcessId
DrawIconEx
GetWindowTextW
GetWindowTextA
DrawTextW
IsWindowEnabled
GetTopWindow
GetWindow
BeginPaint
SetClassLongA
EndPaint
SetWindowPos
SetRect
RemovePropA
IsMenu
ScreenToClient
CreatePopupMenu
InflateRect
EnableMenuItem
GetDC
ReleaseDC
IsWindowVisible
SendMessageA
GetParent
GetFocus
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
CreateWindowExA
OffsetRect
ShowWindow
ReleaseCapture
IsZoomed
SetActiveWindow
SetCapture
SendMessageTimeoutA
DestroyCursor
RedrawWindow
wsprintfA
GetCursorPos
PtInRect
SystemParametersInfoA
WindowFromPoint
CheckMenuItem
LoadImageA
GetClassInfoA
DefWindowProcA
LoadCursorA
SetCursor
GrayStringA
DrawTextA
TabbedTextOutA
InvalidateRect
GetKeyState
KillTimer
SetRectEmpty
GetClientRect
GetSystemMetrics
EnableWindow
GetDesktopWindow
FindWindowExA
RegisterWindowMessageA
PostMessageA
IsWindow
SetPropA
GetWindowLongA
SetWindowLongA
GetPropA
CallWindowProcA
GetWindowRect
IsIconic
SetTimer
SetWindowRgn

gdi32

LineTo
GetStockObject
RoundRect
FillRgn
MoveToEx
SetBkMode
CreateFontIndirectA
SetTextColor
SetStretchBltMode
CreateDIBSection
CreatePen
TextOutA
GetObjectA
CreateDIBitmap
SelectObject
StretchBlt
CreateBitmap
SetBkColor
CreateDCA
GetDeviceCaps
DeleteDC
DeleteObject
Escape
ExtTextOutA
CreateSolidBrush
CreateRoundRectRgn
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateCompatibleBitmap
CreateCompatibleDC
LPtoDP
GetMapMode
DPtoLP
GetBkColor
BitBlt
CreateRectRgnIndirect
CombineRgn
OffsetRgn
ExtSelectClipRgn
ExcludeClipRect
SelectClipRgn
CreateRectRgn
Rectangle
GetTextExtentPoint32A
GetPixel
CreateFontA
Ellipse
GetDIBits
ExtCreateRegion
RectVisible

advapi32

RegQueryInfoKeyA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegFlushKey
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

InitCommonControlsEx
ImageList_GetImageCount
_TrackMouseEvent
ImageList_GetIcon

ole32

CoTaskMemFree
CoUninitialize
OleInitialize
CLSIDFromString
CoCreateInstance
CoFreeLibrary
CoLoadLibrary
CoInitialize
StringFromCLSID

oleaut32

SysStringLen
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysAllocString
SysAllocStringLen
SafeArrayCreateVector
SysFreeString
LoadRegTypeLi
VariantClear

urlmon

URLDownloadToCacheFileA

msvcp60

?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?_Xlen@std@@YAXXZ
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Xran@std@@YAXXZ
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z

wininet

InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetSetOptionA
InternetErrorDlg
InternetQueryOptionA

msimg32

GradientFill

winmm

mixerClose
mixerGetNumDevs
mixerOpen
mixerGetLineInfoA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
QQLiveInstaller.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c1da6ce35b2f0fbe17b3cb0455edcb31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
lstrlenW
CreateThread
TerminateThread
GetProcAddress
LoadLibraryA
DisableThreadLibraryCalls
GetShortPathNameA
GetModuleHandleA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
GetModuleFileNameA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
lstrcpyA
lstrcatA
InterlockedIncrement
InterlockedDecrement
FlushFileBuffers
SetStdHandle
DeleteFileA
Sleep
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetFileAttributesA
lstrlenA
MultiByteToWideChar
IsDBCSLeadByte
FreeLibrary
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA

user32

PostMessageA
CharNextA
DefWindowProcA
IsWindow
CreateWindowExA
RegisterClassExA

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumValueA

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

oleaut32

LoadTypeLi
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
RegisterTypeLi
VarUI4FromStr
SysFreeString

wininet

InternetCrackUrlA

urlmon

URLDownloadToCacheFileA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
QQLiveOneClick.exe
.exe windows:4 windows x86 arch:x86

ef655d3ec7c9ddd16f25e3ec3b315530

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord860
ord537
ord924
ord858
ord941
ord540
ord2915
ord4129
ord5572
ord5683
ord800

msvcrt

__set_app_type
__p__fmode
_adjust_fdiv
_controlfp
__dllonexit
_onexit
__p__commode
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcat
strlen
__CxxFrameHandler
_initterm
__setusermatherr
_except_handler3
_stricmp

kernel32

GetModuleFileNameA
FormatMessageA
GetLastError
GetModuleHandleA
GetStartupInfoA

user32

SendMessageTimeoutA
IsWindow
GetWindow
GetDesktopWindow
GetPropA

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QQLivePlayer.exe
.exe windows:4 windows x86 arch:x86

97c3dfaae95017840cbc2859b758264e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6453
ord324
ord4234
ord1168
ord1641
ord4710
ord4160
ord4287
ord2089
ord6377
ord4224
ord1175
ord354
ord3619
ord6663
ord4202
ord3097
ord5981
ord6199
ord755
ord2754
ord470
ord2086
ord3610
ord656
ord3874
ord6385
ord4673
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord941
ord2621
ord1134
ord3127
ord3616
ord4274
ord5651
ord3613
ord690
ord1988
ord5356
ord5207
ord350
ord389
ord1146
ord2302
ord1768
ord2863
ord6172
ord5789
ord1105
ord938
ord3810
ord5933
ord3920
ord3870
ord6378
ord6380
ord861
ord926
ord939
ord5710
ord6883
ord801
ord541
ord4129
ord5277
ord2124
ord1862
ord4220
ord2584
ord6376
ord3749
ord686
ord559
ord384
ord2438
ord6144
ord2408
ord5862
ord807
ord3289
ord2097
ord4163
ord2120
ord554
ord3571
ord2567
ord2753
ord1871
ord3692
ord2393
ord2461
ord3126
ord5442
ord5989
ord353
ord1949
ord6442
ord3706
ord5678
ord5781
ord5736
ord4133
ord4297
ord6119
ord1570
ord1197
ord640
ord5785
ord1640
ord323
ord2714
ord1270
ord1232
ord2818
ord772
ord6142
ord3986
ord5606
ord5860
ord500
ord5148
ord816
ord2566
ord562
ord2405
ord2860
ord2152
ord6128
ord1187
ord4034
ord2614
ord539
ord4284
ord3089
ord6880
ord4123
ord2642
ord5683
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord356
ord2763
ord857
ord1572
ord465
ord1770
ord6648
ord609
ord3574
ord3402
ord4396
ord2575
ord4411
ord4447
ord5809
ord5480
ord4919
ord278
ord605
ord3570
ord966
ord1971
ord5478
ord5796
ord4863
ord4335
ord2031
ord5481
ord5810
ord6215
ord2379
ord1639
ord535
ord858
ord823
ord2077
ord2029
ord4275
ord825
ord567
ord540
ord860
ord818
ord800
ord3742
ord4424
ord4627
ord4080
ord6055
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5186
ord3318
ord5834
ord1979
ord665
ord2044
ord3903
ord2107
ord6383
ord6394
ord5450
ord6283
ord5440
ord6282
ord4278
ord940
ord6662
ord2841
ord922
ord2448
ord5788
ord2859
ord472
ord6379
ord2380
ord3693
ord6242
ord6320
ord3815
ord6605
ord2078
ord4299
ord6270
ord1644
ord537
ord2135
ord2864
ord1233
ord3573
ord2414
ord3626
ord2915
ord3663
ord4476
ord283
ord5572
ord3797
ord6197
ord5875
ord289
ord6334
ord613
ord4376
ord4853
ord3092
ord924
ord3597
ord2301
ord641
ord1775
ord4425
ord5280
ord4998
ord6052
ord2514
ord786
ord5265
ord519
ord2446
ord1576
ord5065
ord5261
ord1727
ord2055
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord2648
ord4441
ord3654
ord812
ord2764
ord5861
ord6143

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_wtol
_wtoi
_mbsicmp
_mbsnbcmp
_mbsstr
_mbsncmp
_mbschr
_vsnprintf
fprintf
sprintf
rename
_except_handler3
isdigit
isupper
islower
tolower
memmove
floor
ceil
ftell
fread
fseek
_ftol
_purecall
strncpy
fopen
fwrite
fclose
time
srand
rand
atol
atoi
swprintf
wcslen
_mbscmp
realloc
free
__CxxFrameHandler
??1type_info@@UAE@XZ
_fstat
_ltoa
_stricmp
_setmbcp
_fileno

kernel32

GetSystemDirectoryA
WinExec
GetStartupInfoA
GetTempFileNameA
WaitForMultipleObjects
GetTempPathA
GetProcAddress
RemoveDirectoryA
CreateProcessA
GetFileAttributesA
GlobalReAlloc
CreateDirectoryA
GetFileSize
ReadFile
CreateFileA
GetModuleFileNameA
lstrcpynA
GetLocalTime
InitializeCriticalSection
FindResourceA
DeleteCriticalSection
LoadResource
LockResource
SizeofResource
MulDiv
HeapFree
GlobalHandle
HeapAlloc
GetModuleHandleA
GetProcessHeap
GlobalFree
GetVersionExA
GetVersion
GetDiskFreeSpaceExA
ResetEvent
GlobalMemoryStatus
SuspendThread
SetEvent
GlobalAddAtomA
CreateEventA
WaitForSingleObject
ResumeThread
SetFileAttributesA
MoveFileA
CopyFileA
DeleteFileA
GlobalAlloc
Sleep
GlobalUnlock
EnterCriticalSection
GlobalLock
GetTickCount
GetPrivateProfileStringA
LeaveCriticalSection
WideCharToMultiByte
GetPrivateProfileIntA
lstrlenW
CreateToolhelp32Snapshot
GetCurrentProcessId
WritePrivateProfileStringA
CloseHandle
OpenProcess
Process32First
Process32Next
lstrlenA
TerminateProcess
MultiByteToWideChar
GetLastError

user32

WindowFromDC
FrameRect
SetRect
GetMessagePos
MapWindowPoints
DrawFrameControl
ReleaseDC
CallWindowProcA
GetWindowDC
DrawEdge
DrawStateA
SetCursor
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
SetWindowPos
EnableScrollBar
FillRect
SetWindowLongA
CreateWindowExA
GetSysColorBrush
GetScrollInfo
DrawIconEx
InflateRect
CopyRect
GetMessageA
GetCapture
IsChild
ClientToScreen
IntersectRect
DefWindowProcA
GetMenuItemInfoA
DestroyIcon
GetClassInfoA
GetDC
GetWindowRect
GetDoubleClickTime
GetKeyState
LoadBitmapA
DrawTextA
DrawTextW
GetSysColor
DispatchMessageA
GetWindowRgn
SystemParametersInfoA
SetClassLongA
GetClassLongA
OffsetRect
GetWindowTextA
LoadCursorA
UnregisterHotKey
RemovePropA
IsIconic
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
SetRectEmpty
RegisterWindowMessageA
GetFocus
SetPropA
EnableMenuItem
InvalidateRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBoxA
LoadImageA
IsWindowVisible
BeginPaint
EndPaint
GetForegroundWindow
GetSystemMetrics
GetWindowThreadProcessId
SetParent
GetClientRect
PtInRect
CreatePopupMenu
ScreenToClient
SetCapture
ReleaseCapture
GetCursorPos
WindowFromPoint
GetParent
PostMessageA
GetClassNameA
SendMessageA
GetWindowTextW
SetWindowRgn
wsprintfA
GetTopWindow
RedrawWindow
SetForegroundWindow
IsWindowEnabled
IsZoomed
GetWindowLongA
RegisterHotKey
ShowWindow
SendMessageTimeoutA
IsWindow
GetPropA
SetTimer
EnableWindow
KillTimer
PostQuitMessage
GetDesktopWindow
GetWindow

gdi32

OffsetRgn
SelectPalette
ExcludeClipRect
ExtSelectClipRgn
CreateSolidBrush
RoundRect
FillRgn
CreateDIBSection
ExtCreateRegion
GetDIBits
CreateDIBitmap
CreatePen
CreateEnhMetaFileA
SetBkMode
TextOutA
CloseEnhMetaFile
Polygon
MoveToEx
LineTo
StretchBlt
CreateRoundRectRgn
CombineRgn
CreateRectRgn
GetTextExtentPoint32A
SetPixel
CreateRectRgnIndirect
CreateFontIndirectA
CreatePalette
CreateCompatibleDC
SetStretchBltMode
SetDIBitsToDevice
StretchDIBits
SetWindowOrgEx
PlayEnhMetaFile
GetObjectA
IntersectClipRect
SelectClipRgn
CreatePatternBrush
SetBrushOrgEx
PatBlt
CreateBitmap
UnrealizeObject
CreateCompatibleBitmap
BitBlt
SetTextColor
GetStockObject
SetBkColor
ExtTextOutA
Ellipse
GetDeviceCaps
Rectangle
CreateFontA
DeleteDC
CreateDCA
DeleteObject
SelectObject

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

DragQueryFileA
DragQueryPoint
DragFinish
Shell_NotifyIconA
ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_Draw
InitCommonControlsEx
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetImageInfo

ole32

CoCreateInstance
CoLoadLibrary
OleUninitialize
OleInitialize

oleaut32

SysAllocStringLen
VariantClear
SysFreeString

urlmon

URLDownloadToCacheFileA

msvcp60

?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Xran@std@@YAXXZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z

wsock32

closesocket
WSAGetLastError
htonl
ntohs
htons
ntohl

proxy

??0CProxyTool@@QAE@XZ
?IsIESetProxy@CIEProxyInfo@@QAEHXZ
??0CIEProxyInfo@@QAE@XZ
?CreateSocks5ProxyUDPSocket@CProxyTool@@QAEHAAI0AAUsockaddr_in@@ABVCString@@G222GAAV3@@Z
?GetUserProxySetting@CProxyTool@@QAEHAAHAAVCString@@AAG11@Z
??1CIEProxyInfo@@UAE@XZ
??1CProxyTool@@UAE@XZ

setupshell

GetSettingValue
ShowSetting
SetupUpdateNotify

admanage

?StartRefreshADContent@CADInterface@@QAEXPAUHWND__@@@Z
??0CADInterface@@QAE@XZ
??1CADInterface@@UAE@XZ
?StopRefreshADContent@CADInterface@@QAEXXZ

exceptcatch

?SetExceptionCatcher@@YAXABVCString@@H@Z

msimg32

GradientFill

winmm

mixerOpen
mixerClose
mixerGetNumDevs
mixerGetLineInfoA

Sections

.text
Size: 492KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
QQLiveSrcDec.dll
.dll regsvr32 windows:4 windows x86 arch:x86

2eb4f7046a577b1ce2ecff21f5ea5685

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

ntohl
WSAStartup
WSACleanup
closesocket
recv
send
connect
inet_addr
socket
WSAGetLastError
htons

kernel32

RaiseException
GetProcAddress
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
CloseHandle
TerminateThread
WaitForSingleObject
CreateThread
WideCharToMultiByte
GetACP
CreateSemaphoreA
InitializeCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
ResetEvent
GetCurrentProcess
GetCurrentThreadId
SetEvent
VirtualAlloc
VirtualFree
InterlockedExchange
FreeLibrary
LoadLibraryA
GetModuleHandleA
Sleep
ReleaseSemaphore
WriteFile
SetFilePointer
GetStringTypeA
GetLastError
GetVersionExA
GetCommandLineA
GetVersion
GetEnvironmentStrings
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
SetLastError
TlsFree
SetHandleCount
RtlUnwind
HeapFree
HeapAlloc
GetFileType
GetStartupInfoA
GetStdHandle
GetOEMCP
TlsSetValue
TlsAlloc
HeapCreate
HeapReAlloc
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
IsBadWritePtr
ExitProcess
TerminateProcess

user32

SetRectEmpty
wsprintfA

advapi32

RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegEnumKeyExA
RegSetValueA
RegSetValueExA
RegCreateKeyA

ole32

StringFromGUID2
CoLoadLibrary
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
P2PMediaStreamIoctl

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
QQLiveUp.exe
.exe windows:4 windows x86 arch:x86

9a267616eeb98f0c116191292aa60e96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord1776
ord5290
ord3402
ord3721
ord5265
ord4376
ord6055
ord4853
ord4998
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord818
ord1146
ord1168
ord860
ord540
ord567
ord324
ord2370
ord2302
ord4234
ord2642
ord3092
ord6215
ord4710
ord2379
ord755
ord470
ord1768
ord823
ord4160
ord6334
ord858
ord2818
ord4299
ord6453
ord2817
ord535
ord2614
ord2725
ord1134
ord3698
ord5572
ord5442
ord2915
ord3318
ord665
ord5186
ord354
ord537
ord2044
ord2107
ord3903
ord4278
ord941
ord6663
ord1929
ord4275
ord5875
ord1641
ord2860
ord3797
ord3874
ord2764
ord5440
ord6383
ord5450
ord6394
ord5834
ord3584
ord3643
ord803
ord696
ord543
ord394
ord6283
ord6282
ord6418
ord2393
ord1263
ord4673
ord909
ord4167
ord521
ord5628
ord4129
ord2820
ord548
ord4185
ord1166
ord5683
ord2763
ord2919
ord3742
ord6442
ord1233
ord2554
ord4486
ord6375
ord4274
ord765
ord2514
ord800
ord641
ord2414
ord795
ord3663
ord3626
ord3619
ord815
ord825
ord561
ord4622
ord3738
ord4424
ord3825
ord4080
ord3079
ord2976
ord3831
ord3830
ord3262
ord3081
ord2985
ord3259
ord3136
ord4465
ord5714
ord3147
ord2982
ord4698
ord5289
ord5307
ord5300
ord4079
ord5302
ord5199
ord3346
ord2396
ord5731
ord1089
ord3922
ord2448
ord2512
ord1979
ord2841
ord6307
ord1576

msvcrt

??1type_info@@UAE@XZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
atol
_beginthreadex
_purecall
memset
memcpy
_mbsicmp
atoi
fopen
fclose
_splitpath
_mbsnbcmp
sprintf
_mbsstr
_mbsncmp
_mbschr
_setmbcp
__CxxFrameHandler
_mbsrchr
time
_mbscmp
_controlfp

kernel32

lstrlenA
MultiByteToWideChar
GetModuleFileNameA
TerminateProcess
OutputDebugStringA
CreateMutexA
GetLastError
GetVersionExA
CreateDirectoryA
CloseHandle
DeleteFileA
WritePrivateProfileStringA
Sleep
GetPrivateProfileStringA
OpenProcess
GetFileAttributesExA
GetVersion
Process32First
Process32Next
GetFileAttributesA
InitializeCriticalSection
CreateToolhelp32Snapshot
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileA
SetEvent
CreateEventA
HeapFree
GetProcessHeap
ResetEvent
HeapAlloc
GetFileSize
WriteFile
SetFilePointer
WaitForSingleObject
SetEndOfFile
TerminateThread
WaitForMultipleObjects
SetThreadPriority
GetStartupInfoA
GetModuleHandleA
GetProcAddress

user32

EnableWindow
SystemParametersInfoA
GetWindowRect
GetClientRect
SetWindowLongA
InvalidateRect
DrawIcon
PostMessageA
SendMessageA
GetSystemMenu
GetSystemMetrics
EnableMenuItem
SetTimer
LoadIconA
GetDesktopWindow
IsIconic

gdi32

GetStockObject
CreateFontIndirectA
GetObjectA

shell32

ShellExecuteA
Shell_NotifyIconA

ole32

CoFreeLibrary
CoCreateInstance
CoLoadLibrary

wininet

HttpOpenRequestA
HttpSendRequestA
InternetConnectA
HttpQueryInfoA
InternetSetStatusCallback
InternetOpenA
InternetCloseHandle
InternetQueryOptionA
InternetErrorDlg
HttpAddRequestHeadersA
InternetReadFileExA

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SetupShell.dll
.dll windows:4 windows x86 arch:x86

2fcafa70638e6f86c65cdcf9ffd2bf00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

ntohl
htonl

mfc42

ord656
ord818
ord567
ord4275
ord3874
ord3610
ord2379
ord3873
ord6453
ord613
ord6215
ord2086
ord289
ord4224
ord4160
ord3631
ord683
ord2302
ord2642
ord924
ord3226
ord3803
ord6283
ord6282
ord922
ord4129
ord5875
ord283
ord3089
ord4476
ord3663
ord3573
ord3626
ord2414
ord1768
ord5953
ord6111
ord4694
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord4441
ord561
ord2864
ord6467
ord4407
ord860
ord5163
ord6374
ord539
ord324
ord4234
ord4284
ord3797
ord4710
ord3920
ord3706
ord3402
ord4424
ord4123
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord692
ord3619
ord2243
ord2754
ord2859
ord5683
ord6662
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord356
ord2764
ord4202
ord2763
ord6052
ord1572
ord465
ord1770
ord1175
ord6648
ord5440
ord6383
ord5450
ord6394
ord5834
ord2514
ord4998
ord5265
ord1176
ord800
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord1575
ord2055
ord2648
ord4837
ord3798
ord5280
ord4353
ord5290
ord1776
ord6055
ord6663
ord941
ord939
ord2818
ord4278
ord3903
ord2107
ord2044
ord537
ord6385
ord354
ord5186
ord665
ord3318
ord2915
ord5442
ord5572
ord1979
ord2448
ord2841
ord2614
ord823
ord858
ord6334
ord4853
ord4376
ord2380
ord4299
ord535
ord6199
ord6197
ord3092
ord5981
ord2370
ord641
ord825
ord540
ord1641
ord6880
ord815
ord2385
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord5241
ord1775
ord1168
ord2725
ord4078
ord1116
ord5710
ord3953
ord857

msvcrt

_purecall
_adjust_fdiv
malloc
_initterm
free
_onexit
??1type_info@@UAE@XZ
time
srand
atol
strncpy
rand
_ftol
swprintf
_wtol
_wtoi
_mbsicmp
wcslen
__RTDynamicCast
atoi
isdigit
memmove
_mbsnbcmp
_mbsstr
_mbsncmp
_mbschr
_mbscmp
_vsnprintf
fprintf
sprintf
fwrite
rename
fopen
fclose
__CxxFrameHandler
__dllonexit
_fstat
_fileno
_ltoa
_stricmp
_itoa

kernel32

LocalFree
CreateToolhelp32Snapshot
GetCurrentProcessId
Process32First
Process32Next
GetSystemDirectoryA
WinExec
GetTickCount
GetTempPathA
GetTempFileNameA
OpenProcess
WaitForMultipleObjects
GetVersionExA
CreateProcessA
GetProcAddress
RemoveDirectoryA
CreateDirectoryA
GetFileAttributesA
lstrcpynA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
CreateFileA
GetFileSize
CloseHandle
ReadFile
lstrlenW
WideCharToMultiByte
GetModuleHandleA
MultiByteToWideChar
GetPrivateProfileStructA
WritePrivateProfileStructA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetLocalTime
DeleteFileA
GetModuleFileNameA
lstrlenA
GetLastError
LocalAlloc

user32

GetSystemMetrics
SystemParametersInfoA
CopyRect
GetClassNameA
GetClassLongA
IsZoomed
RegisterWindowMessageA
PtInRect
SetCursor
GetWindowDC
OffsetRect
GetWindowRgn
EnableMenuItem
MessageBoxA
CreateWindowExA
GetWindowLongA
GetWindowTextA
SetClassLongA
DrawTextA
IsWindowEnabled
RedrawWindow
InvalidateRect
ScreenToClient
GetTopWindow
BeginPaint
EndPaint
GetCursorPos
GetParent
GetClientRect
GetWindowRect
SetWindowPos
CallWindowProcA
SetRect
SetWindowRgn
SetWindowLongA
GetDC
ReleaseDC
DrawTextW
ClientToScreen
GetWindowThreadProcessId
DrawIconEx
LoadImageA
SendMessageTimeoutA
GetWindowTextW
WindowFromPoint
GetCaretPos
wsprintfA
GetPropA
RemovePropA
SetPropA
GetDesktopWindow
GetWindow
IsWindow
EnableWindow
PostMessageA
IsWindowVisible
SendMessageA

gdi32

DeleteObject
GetDeviceCaps
CreateDIBitmap
GetDIBits
RoundRect
DeleteDC
CombineRgn
ExtCreateRegion
StretchBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
SetStretchBltMode
SetTextColor
SetBkColor
BitBlt
CreateBitmap
CreateFontIndirectA
SetBkMode
FillRgn
GetObjectA
GetStockObject
LineTo
MoveToEx
CreateSolidBrush
CreatePen
CreateRoundRectRgn
CreateRectRgnIndirect
ExtSelectClipRgn
ExcludeClipRect
SelectClipRgn
OffsetRgn
CreateRectRgn
Rectangle
GetTextExtentPoint32A
CreateFontA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent
InitCommonControlsEx

ole32

CoCreateInstance
CoLoadLibrary

oleaut32

SysAllocStringLen
SysFreeString
VariantClear

msvcp60

?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Xran@std@@YAXXZ
?_Xlen@std@@YAXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z

proxy

??0CProxyTool@@QAE@XZ
??1CProxyTool@@UAE@XZ
?TestProxy@CProxyTool@@QAEXPAUHWND__@@@Z

msimg32

GradientFill

winmm

mixerClose
mixerGetNumDevs
mixerOpen
mixerGetLineInfoA

Exports

Exports

GetSettingValue
RemoveUpdateNotify
SaveSettingSingle
SetSettingValue
SetupUpdateNotify
ShowSetting
ShowSettingSingle

Sections

.text
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Skin/AllInOne.bmp
Skin/Hand.cur
Skin/playing.gif
.gif
Skin/radio.gif
.gif
Skin/skin.ini
Skin/skin.xml
.xml
Skin/xsplitter.cur
Skin/ysplitter.cur
SoundCtrl.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c6731ffe55ee72834391e1148386bc4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord3953
ord6467
ord1131
ord2725
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord823
ord5302
ord6375
ord815
ord269
ord826
ord1116
ord4274
ord1176
ord1578
ord1255
ord600
ord1570
ord5300
ord4079
ord1253
ord1575
ord342
ord1182
ord1243
ord1197
ord4486
ord1168
ord2512
ord5731
ord2554
ord1089
ord5199
ord3346
ord1577
ord3922
ord2396

msvcrt

__CxxFrameHandler
_initterm
fopen
memset
sprintf
rename
fwrite
memcpy
fprintf
_vsnprintf
malloc
_adjust_fdiv
_purecall
free
realloc
memcmp
__dllonexit
_ftol
?terminate@@YAXXZ
_onexit
_except_handler3
fclose
??1type_info@@UAE@XZ
_fileno
_fstat

kernel32

LeaveCriticalSection
GetShortPathNameA
GetModuleHandleA
lstrlenA
GetLastError
GetModuleFileNameA
DeleteFileA
GetLocalTime
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
LocalAlloc
lstrcatA
LocalFree

user32

wsprintfA
CharNextA

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

oleaut32

LoadTypeLi
SysFreeString
LoadRegTypeLi
RegisterTypeLi
VarUI4FromStr
SysAllocString
SysStringLen

winmm

mixerOpen
mixerSetControlDetails
mixerGetNumDevs
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerClose

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TNProxy.dll
.dll regsvr32 windows:4 windows x86 arch:x86

0b79f592dbeca4d941e3a690c32d27cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InterlockedDecrement
HeapReAlloc
GetModuleHandleA
HeapAlloc
HeapFree
SetEnvironmentVariableA
InterlockedExchange
CompareStringA
GetLocaleInfoW
SetStdHandle
TlsGetValue
TlsAlloc
TlsFree
TlsSetValue
Sleep
CloseHandle
GetTickCount
SetUnhandledExceptionFilter
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
SetFilePointer
ReadFile
GetCurrentProcess
GetLastError
RtlUnwind
WideCharToMultiByte
GetCommandLineA
GetVersion
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
CreateThread
GetCurrentThreadId
ExitThread
GetStringTypeW
VirtualFree
ExitProcess
TerminateProcess
InterlockedIncrement
HeapSize
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
CompareStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
LCMapStringW
WriteFile
UnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
FlushFileBuffers
GetStringTypeA

ws2_32

htonl
connect
htons
ntohs
ntohl
gethostbyname
WSAStartup
WSACleanup
select
closesocket
ioctlsocket
setsockopt
socket
bind
sendto
recvfrom
recv
send
getpeername
listen
accept
inet_ntoa
__WSAFDIsSet
WSAGetLastError
gethostname
inet_addr

iphlpapi

GetAdaptersInfo
GetIfEntry

wininet

InternetGetConnectedState

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 632KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TVLoge.exe
.exe windows:4 windows x86 arch:x86

aff6560722027cbab31caa02bf955dc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

exceptcatch

?SetExceptionCatcher@@YAXABVCString@@H@Z

proxy

?CreateProxyTCPSocket@CProxyTool@@QAEHAAIABVCString@@GAAV2@@Z
??0CProxyTool@@QAE@XZ
?IsUseProxy@CProxyTool@@QAEHXZ
??1CProxyTool@@UAE@XZ

setupshell

RemoveUpdateNotify
GetSettingValue
ShowSetting
SetupUpdateNotify

mfc42

ord6394
ord5440
ord5450
ord6383
ord5572
ord2915
ord3127
ord3616
ord5651
ord3126
ord3613
ord690
ord1988
ord5356
ord5207
ord350
ord389
ord4402
ord3640
ord665
ord603
ord5443
ord273
ord5186
ord354
ord6905
ord6877
ord1105
ord3996
ord4160
ord2860
ord2438
ord6270
ord1644
ord3286
ord3910
ord6907
ord6007
ord3998
ord2614
ord6453
ord941
ord3708
ord781
ord6467
ord4003
ord2727
ord2730
ord2729
ord5937
ord6134
ord6136
ord3763
ord4220
ord2584
ord3654
ord1756
ord3771
ord5223
ord3283
ord1979
ord3318
ord2935
ord2516
ord360
ord5510
ord1158
ord3216
ord1647
ord429
ord4042
ord2652
ord1669
ord4277
ord6662
ord3721
ord795
ord6199
ord2116
ord3573
ord1641
ord3092
ord2642
ord939
ord5856
ord6605
ord3089
ord924
ord926
ord1871
ord3692
ord786
ord2393
ord2461
ord519
ord5989
ord353
ord3571
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord6172
ord5873
ord5789
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord640
ord2713
ord1640
ord323
ord5875
ord613
ord289
ord816
ord562
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord283
ord4224
ord2080
ord5981
ord3061
ord3874
ord3317
ord5241
ord3093
ord6283
ord4407
ord6070
ord4278
ord6663
ord5710
ord2764
ord539
ord2385
ord2841
ord2448
ord2044
ord2107
ord3903
ord2567
ord6197
ord6597
ord6514
ord6478
ord6800
ord465
ord466
ord2241
ord1238
ord6808
ord2135
ord6242
ord3815
ord6320
ord6379
ord4034
ord6805
ord6710
ord6699
ord5645
ord6762
ord6442
ord4853
ord3097
ord5442
ord2152
ord3767
ord6779
ord1567
ord268
ord3706
ord6813
ord3610
ord656
ord6380
ord2580
ord4400
ord3630
ord682
ord6846
ord5786
ord2405
ord5785
ord1146
ord2862
ord4774
ord2582
ord3370
ord693
ord4243
ord6696
ord3301
ord3293
ord6888
ord324
ord4234
ord4284
ord4710
ord3920
ord6194
ord809
ord2096
ord2408
ord6358
ord2714
ord6883
ord801
ord541
ord5861
ord4083
ord1803
ord4673
ord815
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord2086
ord6438
ord2621
ord1134
ord1223
ord1206
ord2725
ord6648
ord938
ord3810
ord5933
ord6378
ord3870
ord5683
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord356
ord2763
ord857
ord1572
ord1770
ord1862
ord812
ord559
ord6144
ord5862
ord807
ord3289
ord2097
ord4163
ord2120
ord554
ord654
ord341
ord5858
ord6140
ord2571
ord6839
ord6814
ord6847
ord6867
ord1775
ord6859
ord6832
ord6855
ord6823
ord6857
ord6807
ord6591
ord6650
ord823
ord861
ord4129
ord860
ord1601
ord2233
ord2818
ord4299
ord4376
ord641
ord825
ord540
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord1576
ord4078
ord6052
ord2514
ord4998
ord5265
ord800
ord922
ord1233
ord1088
ord556
ord2122
ord2754
ord6880
ord470
ord5788
ord2566
ord472
ord2753
ord4297
ord4133
ord3693
ord2380
ord755
ord384
ord2379
ord4275
ord2414
ord686
ord1949
ord1175
ord2859
ord1168
ord2243
ord858
ord6215
ord3663
ord535
ord2078
ord567
ord3626
ord3619
ord3574
ord818
ord609
ord5290
ord4424
ord3402
ord2575
ord4396
ord6055
ord6816
ord3742
ord2864
ord6614
ord4432
ord6691
ord3748
ord5260
ord1725
ord5240
ord4441
ord5281
ord4108
ord1776
ord6054
ord4524
ord4960
ord4963
ord4543
ord4529
ord4526
ord4889
ord4545
ord4531
ord4340
ord4720
ord4347
ord4892
ord5076
ord6817
ord4588
ord4370
ord4899
ord6856
ord4589
ord6835
ord6815
ord6845
ord6812
ord6385
ord6858
ord2302
ord4202
ord5834
ord537
ord6282
ord4123
ord3797

msvcrt

_XcptFilter
_exit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_acmdln
_onexit
__dllonexit
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_beginthread
difftime
srand
strcat
rand
_wtol
memmove
_mbsnbcmp
_mbsstr
_mbsncmp
_mbschr
strcpy
_vsnprintf
fprintf
__setusermatherr
__getmainargs
__set_app_type
swprintf
time
localtime
asctime
exit
floor
ceil
atol
strlen
strncpy
wcslen
_wtoi
abs
strcmp
_mbsnbcpy
memcmp
fopen
fwrite
fclose
strchr
atoi
_mbscmp
memcpy
_ftol
_mbsicmp
__CxxFrameHandler
_initterm
__p__fmode
_adjust_fdiv
__p__commode
sprintf
rename
_beginthreadex
_controlfp
??0exception@@QAE@ABQBD@Z
memset
_ultoa
_ltoa
_fstat
_fileno
_stricmp
_strnicmp
_setmbcp

kernel32

WinExec
WaitForMultipleObjects
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
RemoveDirectoryA
OutputDebugStringA
lstrcatA
UnmapViewOfFile
GetShortPathNameA
HeapDestroy
lstrcpyA
GetCommandLineA
FreeLibrary
lstrcmpiA
CreateToolhelp32Snapshot
GetCurrentProcessId
CreateMutexA
OpenProcess
TerminateProcess
Process32First
GetCurrentThreadId
GlobalMemoryStatus
Process32Next
lstrcpynA
GlobalReAlloc
GetDiskFreeSpaceExA
LoadLibraryA
GetProcAddress
GetModuleHandleA
CreateFileA
GetFileSize
GetVersion
TerminateThread
MulDiv
ReadFile
SetProcessWorkingSetSize
CreateProcessA
GetVersionExA
GetTempPathA
GetTempFileNameA
GetFileAttributesA
GetLastError
WideCharToMultiByte
GetLocalTime
GetTickCount
FormatMessageA
GetModuleFileNameA
LocalFree
FindResourceA
LocalAlloc
LoadResource
LockResource
SizeofResource
GlobalFree
GlobalHandle
GlobalAlloc
GetCurrentProcess
FlushInstructionCache
lstrlenW
InterlockedIncrement
GlobalLock
WritePrivateProfileStringA
InterlockedDecrement
CreateDirectoryA
GlobalUnlock
GetPrivateProfileIntA
ResumeThread
SetEvent
DeleteCriticalSection
InitializeCriticalSection
GetExitCodeThread
CloseHandle
SetFileAttributesA
CreateEventA
CopyFileA
GetPrivateProfileSectionA
DeleteFileA
WaitForSingleObject
ResetEvent
GetPrivateProfileStringA
LeaveCriticalSection
lstrlenA
EnterCriticalSection
MultiByteToWideChar
GetSystemDirectoryA
GetStartupInfoA

user32

CopyRect
SetWindowLongA
GetWindowLongA
BeginPaint
GetForegroundWindow
GetSystemMetrics
GetWindowThreadProcessId
EndPaint
SetParent
GetDesktopWindow
GetWindow
CheckMenuItem
GetFocus
GetDC
ReleaseDC
wsprintfA
SetRectEmpty
IsMenu
GetIconInfo
TabbedTextOutA
SetActiveWindow
SetWindowRgn
WindowFromPoint
GetCapture
SetCapture
GetMessageA
DispatchMessageA
ReleaseCapture
GetDlgCtrlID
GetSysColor
DrawFocusRect
LoadBitmapA
DestroyCursor
SendMessageTimeoutA
CallWindowProcA
GetTopWindow
IsWindowEnabled
CheckMenuRadioItem
MoveWindow
FlashWindow
SetClassLongA
DrawTextW
GetWindowTextA
GetWindowTextW
GetWindowRgn
OffsetRect
GetWindowDC
CreateWindowExA
GetClassNameA
IsZoomed
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
TrackMouseEvent
TranslateMessage
MessageBoxA
PostQuitMessage
ShowWindow
GetMenuItemInfoA
ClipCursor
CharNextA
LoadIconA
DrawIcon
DrawFrameControl
InflateRect
GrayStringA
DrawTextA
GetClassLongA
EnableWindow
SendMessageA
GetWindowRect
IsRectEmpty
SetRect
RedrawWindow
FillRect
IsIconic
GetKeyState
AppendMenuA
RemovePropA
DrawIconEx
DestroyIcon
ClientToScreen
CreatePopupMenu
EnableMenuItem
SetPropA
LoadImageA
GetPropA
SystemParametersInfoA
IsWindow
SetTimer
InvalidateRect
UpdateWindow
GetUpdateRect
IntersectRect
GetClientRect
KillTimer
GetCursorPos
ScreenToClient
PtInRect
IsWindowVisible
LoadCursorA
SetCursor
PostMessageA
SetWindowPos
RegisterWindowMessageA
GetParent

gdi32

SelectPalette
GetObjectA
GetStockObject
DeleteObject
SelectObject
CreatePolygonRgn
SetDIBitsToDevice
StretchDIBits
CreateSolidBrush
CreateCompatibleDC
Ellipse
CreateDCA
LPtoDP
GetMapMode
GetWindowExtEx
GetViewportExtEx
DPtoLP
GetBkColor
CreateFontA
OffsetRgn
ExcludeClipRect
ExtSelectClipRgn
MoveToEx
LineTo
RoundRect
SetBkMode
CreateBitmap
SetTextColor
CreateDIBSection
ExtCreateRegion
GetDIBits
CreateDIBitmap
CreateRoundRectRgn
SetStretchBltMode
CreateRectRgn
CombineRgn
FillRgn
FrameRgn
GetTextExtentPointA
GetCurrentObject
CreatePatternBrush
CreateFontIndirectA
SetBkColor
CreateRectRgnIndirect
SelectClipRgn
StretchBlt
DeleteDC
GetDeviceCaps
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetPixel
Rectangle
GetPixel
CreatePen
BitBlt
GetClipBox
CreateCompatibleBitmap
CreatePalette

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

shell32

ShellExecuteA

comctl32

ImageList_GetIconSize
InitCommonControlsEx
ImageList_GetIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Draw
ImageList_GetImageCount
ImageList_AddMasked

ole32

CoRegisterClassObject
CreateStreamOnHGlobal
CoLoadLibrary
CoRevokeClassObject
CoInitialize
CoUninitialize
CoCreateInstance
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes

olepro32

ord251

oleaut32

SysAllocString
SysStringLen
LoadRegTypeLi
SysAllocStringLen
VariantInit
RegisterTypeLi
LoadTypeLi
DispCallFunc
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
CreateErrorInfo
VariantChangeType
SetErrorInfo
VariantClear
SysFreeString
GetErrorInfo

urlmon

URLDownloadToCacheFileA
URLDownloadToFileA

gdiplus

GdipDeleteGraphics
GdipDrawImageRectI
GdipLoadImageFromFile
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipCloneImage
GdipLoadImageFromFileICM
GdiplusShutdown
GdiplusStartup
GdipDisposeImage

msvcp60

?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??0runtime_error@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Xran@std@@YAXXZ
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_Xlen@std@@YAXXZ
??1runtime_error@std@@UAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??_7runtime_error@std@@6B@
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

ws2_32

WSAGetLastError
connect
gethostbyname
htonl
ntohl
htons
inet_ntoa
ntohs
WSAStartup
WSACleanup
closesocket
shutdown
select
inet_addr
setsockopt
socket
getsockopt
ioctlsocket
recv
__WSAFDIsSet
send

msimg32

GradientFill

winmm

mixerGetNumDevs
mixerClose
mixerOpen
mixerGetLineInfoA

wininet

InternetCrackUrlA

Sections

.text
Size: 500KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
User.ini
VCodec.dll
.dll regsvr32 windows:4 windows x86 arch:x86

7bb281f2034c5cb2d33ce586943ce4e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
RtlUnwind

msvcrt

__CxxFrameHandler
_ftol
fclose
??2@YAPAXI@Z
fwrite
fseek
fopen
sprintf
free
??3@YAXPAX@Z
calloc
floor
_errno
_initterm
_adjust_fdiv
malloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VideoAdjust.dll
.dll windows:4 windows x86 arch:x86

84c1b427ab0ddc69d588f4a31fc8827a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord470
ord2379
ord613
ord6880
ord2753
ord289
ord2864
ord4123
ord924
ord1168
ord4129
ord5683
ord6662
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord356
ord2764
ord4202
ord2763
ord857
ord1572
ord4275
ord755
ord1175
ord6648
ord5440
ord6383
ord5450
ord6394
ord5834
ord1253
ord342
ord1182
ord1233
ord3619
ord2575
ord4396
ord3402
ord3574
ord609
ord2078
ord4299
ord2754
ord5875
ord5789
ord6453
ord2642
ord567
ord818
ord3742
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord1770
ord465
ord4353
ord5241
ord4407
ord354
ord535
ord537
ord2044
ord2107
ord3903
ord4278
ord2818
ord939
ord941
ord6663
ord5710
ord858
ord539
ord640
ord2405
ord6172
ord5873
ord5785
ord1640
ord323
ord1641
ord2414
ord3571
ord3626
ord3663
ord6055
ord4078
ord1776
ord2385
ord5163
ord2448
ord5290
ord800
ord3318
ord2915
ord6374
ord5442
ord5572
ord1979
ord665
ord2841
ord860
ord2614
ord5186
ord540
ord825
ord823
ord6385

msvcrt

memmove
fopen
malloc
__CxxFrameHandler
rename
fwrite
sprintf
fprintf
_vsnprintf
_mbscmp
_mbschr
_mbsncmp
_mbsstr
_mbsnbcmp
fclose
wcslen
_mbsicmp
_wtoi
_wtol
swprintf
_ftol
strncpy
atol
rand
srand
time
__dllonexit
_onexit
free
_initterm
_adjust_fdiv
_fstat
_fileno
_stricmp

kernel32

GlobalAlloc
CreateToolhelp32Snapshot
GetModuleFileNameA
lstrlenA
GetLastError
DeleteFileA
GetLocalTime
GetModuleHandleA
WideCharToMultiByte
lstrlenW
ReadFile
CloseHandle
GetFileSize
CreateFileA
MultiByteToWideChar
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
lstrcpynA
GetFileAttributesA
CreateDirectoryA
RemoveDirectoryA
GetProcAddress
CreateProcessA
GetVersionExA
WaitForMultipleObjects
OpenProcess
GetPrivateProfileIntA
GetTempFileNameA
GetTempPathA
GetTickCount
WinExec
GetSystemDirectoryA
Process32Next
Process32First
GetCurrentProcessId

user32

DestroyCursor
GetSysColor
PtInRect
EnableWindow
RegisterWindowMessageA
SetClassLongA
GetWindowLongA
SetCapture
CreateWindowExA
GetClassLongA
MessageBoxA
LoadCursorA
SetCursor
ReleaseCapture
SetTimer
GetClassNameA
GetWindowTextW
GetWindowDC
OffsetRect
GetWindowRgn
ClientToScreen
GetWindowThreadProcessId
IsWindowVisible
DrawIconEx
GetWindowTextA
DrawTextW
DrawTextA
IsWindowEnabled
RedrawWindow
InvalidateRect
ScreenToClient
GetTopWindow
GetWindow
BeginPaint
EndPaint
SetPropA
GetPropA
GetCursorPos
WindowFromPoint
SendMessageA
GetParent
GetDesktopWindow
GetClientRect
GetWindowRect
SetWindowPos
CallWindowProcA
PostMessageA
SetRect
RemovePropA
SetWindowRgn
IsWindow
SetWindowLongA
GetDC
LoadImageA
SendMessageTimeoutA
wsprintfA
ReleaseDC

gdi32

CreateSolidBrush
CreateFontA
CreateCompatibleBitmap
GetPixel
GetTextExtentPoint32A
Rectangle
CreateRectRgn
OffsetRgn
SelectClipRgn
ExcludeClipRect
ExtSelectClipRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreatePen
DeleteObject
MoveToEx
LineTo
GetStockObject
RoundRect
FillRgn
SetBkMode
CreateFontIndirectA
GetDeviceCaps
CreateBitmap
BitBlt
SetBkColor
SetTextColor
SetStretchBltMode
CreateCompatibleDC
CreateDIBSection
SelectObject
StretchBlt
ExtCreateRegion
CombineRgn
DeleteDC
GetDIBits
CreateDIBitmap
GetObjectA

advapi32

RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent
InitCommonControlsEx

ole32

CoFreeLibrary
CoCreateInstance
CoLoadLibrary

oleaut32

SysAllocStringLen
SysFreeString
VariantClear

msvcp60

?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Xran@std@@YAXXZ
?_Xlen@std@@YAXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z

msimg32

GradientFill

winmm

mixerGetNumDevs
mixerGetLineInfoA
mixerOpen
mixerClose

Exports

Exports

CreateVideoAdjustWnd
ResetVideoAdjustData

Sections

.text
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VideoDsp.dll
.dll regsvr32 windows:4 windows x86 arch:x86

0bf63c267984efe24b803e198e32c0eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindResourceA
WritePrivateProfileStringA
HeapDestroy
DisableThreadLibraryCalls
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetCurrentThreadId
MulDiv
GetTickCount
GetPrivateProfileIntA
GetCurrentProcess
GetShortPathNameA
GetModuleHandleA
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
lstrcpyA
lstrcatA
SizeofResource
LoadResource
LockResource
FlushInstructionCache
WideCharToMultiByte
GlobalLock
LeaveCriticalSection
GetLastError
lstrlenA
GetModuleFileNameA
DeleteFileA
GetLocalTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GlobalUnlock
GlobalAlloc
GlobalFree

user32

PostMessageA
IsWindow
RegisterWindowMessageA
CreateDialogParamA
DestroyWindow
GetDialogBaseUnits
ShowWindow
MoveWindow
WinHelpA
IsDialogMessageA
wsprintfA
SetWindowLongA
IsRectEmpty
ReleaseDC
LoadStringA
GetDC
CharNextA

gdi32

GetTextMetricsA
DeleteObject
GetTextExtentPointA
SelectObject
CreateFontIndirectA
GetDeviceCaps

advapi32

RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

SysStringLen
SysAllocStringLen
VarUI4FromStr
SysFreeString
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysAllocString

msdmo

MoFreeMediaType
MoCopyMediaType

msvcrt

malloc
realloc
_except_handler3
_purecall
_wcsicmp
??2@YAPAXI@Z
_ftol
?terminate@@YAXXZ
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
_fileno
_fstat
free
fclose
??3@YAXPAX@Z
_vsnprintf
fprintf
sprintf
fwrite
rename
__CxxFrameHandler
fopen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bmp/1.bmp
bmp/ArrowDown.gif
bmp/ArrowLeft.gif
bmp/ArrowRight.gif
bmp/ArrowUp.gif
bmp/BlackFriendFace.bmp
bmp/LogeMaster.bmp
bmp/MagicLoading.gif
.gif
bmp/NotFound.gif
.gif
bmp/VideoAdjust/video_slider_head.bmp
bmp/VideoAdjust/video_slider_middle.bmp
bmp/VideoAdjust/video_slider_saturation_channel.bmp
bmp/VideoAdjust/video_slider_tag.bmp
bmp/VideoAdjust/video_slider_thumb.bmp
bmp/VideoAdjust/video_slider_thumb_disable.bmp
bmp/default.bmp
bmp/default2.bmp
bmp/empty.bmp
bmp/hot.bmp
bmp/hot.gif
.gif
bmp/image_service_flag_1.bmp
bmp/infomation.bmp
bmp/main.bmp
bmp/man.bmp
bmp/moon.bmp
bmp/moon1.bmp
bmp/moon2.bmp
bmp/moon3.bmp
bmp/player_badge_card_badgeicon.bmp
bmp/player_ctrl_sound_slide_disable.bmp
bmp/player_ctrl_sound_slide_down.bmp
bmp/player_ctrl_sound_slide_hover.bmp
bmp/player_ctrl_sound_slide_normal.bmp
bmp/player_slider_bg.bmp
bmp/qqlive.bmp
bmp/radio.bmp
bmp/room.bmp
bmp/sendingBmp.gif
.gif
bmp/slider_channel_high.bmp
bmp/slider_channel_left.bmp
bmp/slider_channel_low.bmp
bmp/slider_channel_right.bmp
bmp/star.bmp
bmp/star1.bmp
bmp/star2.bmp
bmp/star3.bmp
bmp/sun.bmp
bmp/sun1.bmp
bmp/sun2.bmp
bmp/sun3.bmp
bmp/system.bmp
bmp/tvs.bmp
bmp/woman.bmp
bmp/woman_man.bmp
mfc42.dll
.dll regsvr32 windows:4 windows x86 arch:x86

1557eebc6134cee9eb9d0583a2b40341

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
?terminate@@YAXXZ
_except_handler3
_adjust_fdiv
_onexit
__dllonexit
??1type_info@@UAE@XZ
_mbsnbicmp
wcsncpy
wcscpy
_ltoa
_ultoa
swprintf
_itoa
modf
ceil
fabs
floor
labs
_ftol
_splitpath
_fullpath
atol
__p___argc
_EH_prolog
__p___argv
_beginthreadex
_endthreadex
_strdup
_mbsdec
_expand
strtod
strtol
strtoul
abs
calloc
_msize
_purecall
strftime
_mbctype
localtime
gmtime
time
_ismbcspace
atoi
_ismbcdigit
_mbsnbcmp
sprintf
strlen
_mbclen
vsprintf
_mbsrchr
_mbscspn
_mbsspn
_mbsstr
_mbsrev
_mbslwr
_mbsupr
_mbspbrk
_mbschr
wcslen
_mbscmp
realloc
fclose
fflush
fseek
ftell
fgets
fputs
fwrite
fread
clearerr
_open_osfhandle
_fdopen
__doserrno
_get_osfhandle
memset
_mbsinc
abort
free
malloc
memcmp
memmove
memcpy
_CxxThrowException
mktime
__CxxFrameHandler

kernel32

FindClose
FindFirstFileA
lstrcpyA
MultiByteToWideChar
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetShortPathNameA
GetModuleFileNameA
GlobalSize
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GlobalFree
GetFileAttributesA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LocalFree
FormatMessageA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
WaitForSingleObject
CreateSemaphoreA
DeleteFileA
LoadLibraryA
ReleaseMutex
InterlockedExchange
WaitForMultipleObjects
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
LockResource
LoadResource
FindResourceA
FreeLibrary
MulDiv
GetProfileIntA
VirtualProtect
FindResourceExA
SizeofResource
GetProcessVersion
GlobalFlags
GetTempFileNameA
GetDiskFreeSpaceA
LocalUnlock
LocalLock
GetTempPathA
SearchPathA
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
GetCurrentThread
SetErrorMode
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
FindNextFileA
GetTickCount
lstrlenW
CopyFileA
lstrcpyW
GetUserDefaultLCID
IsDBCSLeadByte
GetSystemDirectoryA
GetProcAddress
UnlockFile
MoveFileA
SetEndOfFile
FlushFileBuffers
LockFile
CloseHandle
ReadFile
SetFilePointer
WriteFile
DuplicateHandle
CreateFileA
GetCurrentProcess
lstrlenA
lstrcmpA
OutputDebugStringA
IsBadStringPtrA
IsBadReadPtr
IsBadWritePtr
GetLastError
IsBadStringPtrW
lstrcpynA
ReleaseSemaphore
SetLastError
CreateMutexA
GetVolumeInformationA
CreateEventA
RaiseException

gdi32

TextOutA
GetPolyFillMode
EnumFontFamiliesA
GetPixel
CreatePalette
GetPaletteEntries
RealizePalette
OffsetRgn
SetBrushOrgEx
CreateMetaFileA
CopyMetaFileA
LPtoDP
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
CreateDIBPatternBrushPt
CreateHatchBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
OffsetClipRgn
ExcludeClipRect
SelectClipRgn
OffsetWindowOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
StartDocA
EnumFontFamiliesExA
CreateDCA
CreateRectRgnIndirect
Rectangle
UnrealizeObject
PatBlt
CreateBitmap
CreatePatternBrush
CreatePen
CloseMetaFile
DeleteMetaFile
RectVisible
PtVisible
IntersectClipRect
GetViewportOrgEx
GetWindowOrgEx
SetWindowOrgEx
GetDeviceCaps
Escape
GetCurrentPositionEx
MoveToEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetTextFaceA
GetWindowExtEx
GetViewportExtEx
GetROP2
GetBkMode
GetTextAlign
GetNearestColor
GetBkColor
GetTextColor
SaveDC
GetStockObject
RestoreDC
GetCharWidthA
DeleteObject
CreateFontA
StretchDIBits
DeleteDC
CreateCompatibleBitmap
GetTextExtentPoint32A
ExtTextOutA
CreateSolidBrush
BitBlt
CreateFontIndirectA
CreateCompatibleDC
GetTextMetricsA
GetObjectA
SelectObject
SetTextColor
GetClipBox
SetBkColor
GetStretchBltMode

user32

SetCapture
CharToOemA
OemToCharA
UnhookWindowsHookEx
MsgWaitForMultipleObjects
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetWindow
SendMessageA
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetKeyState
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetParent
IsChild
MessageBoxA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
IsWindowVisible
EnableWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetFocus
DispatchMessageA
PeekMessageA
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
PostMessageA
LoadIconA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
SetCursor
IsWindowEnabled
GetDesktopWindow
ShowWindow
GetActiveWindow
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
LoadCursorA
GetSystemMetrics
WaitMessage
GetCursorPos
GetWindowThreadProcessId
WindowFromPoint
ClientToScreen
TranslateMessage
GetMessageA
DefFrameProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
RedrawWindow
LoadBitmapA
InflateRect
PtInRect
ReleaseDC
InvertRect
GetWindowDC
FillRect
SetTimer
KillTimer
SetRect
GetDC
IsZoomed
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
DrawTextA
GrayStringA
UnionRect
DrawFocusRect
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
wvsprintfA
GetAsyncKeyState
MapDialogRect
GetDialogBaseUnits
BeginPaint
EndPaint
TabbedTextOutA
GetSysColorBrush
GetClassNameA
SetWindowTextA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
DestroyIcon
SetCursorPos
DestroyCursor
FindWindowA
IsClipboardFormatAvailable
MessageBeep
RemoveMenu
ValidateRect
PostQuitMessage
UnregisterClassA
ShowOwnedPopups
InsertMenuA
GetMenuStringA
RegisterClipboardFormatA
CopyAcceleratorTableA
InSendMessage
PostThreadMessageA
CreateMenu
WindowFromDC
CountClipboardFormats
SetWindowContextHelpId
CharNextA
GetNextDlgGroupItem
ClipCursor
DrawEdge
EnumChildWindows
InvalidateRgn
FrameRect
LoadStringA
CharUpperA
wsprintfA

Exports

Exports

?classCCachedDataPathProperty@CCachedDataPathProperty@@2UCRuntimeClass@@B
?classCDataPathProperty@CDataPathProperty@@2UCRuntimeClass@@B
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 616KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
miniqqlivesetup.exe
.exe windows:4 windows x86 arch:x86

c6ec2286dd1d610e91f6cf961129a7e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetModuleHandleA
SetErrorMode
GetExitCodeProcess
WaitForSingleObject
ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
CloseHandle
SetFileTime
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
LoadLibraryA
ExitProcess
GetCurrentProcess
CopyFileA
lstrcpynA
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
GetTempFileNameA
lstrcpyA
lstrlenA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetSystemDirectoryA
RemoveDirectoryA
GlobalFree
MulDiv
GetProcAddress
FreeLibrary
MultiByteToWideChar
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA

user32

SetWindowTextA
SetTimer
DestroyWindow
CreateDialogParamA
ExitWindowsEx
CharNextA
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
ScreenToClient
GetMessagePos
CallWindowProcA
IsWindowVisible
LoadBitmapA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuA
CreatePopupMenu
GetSystemMetrics
EndDialog
SetClassLongA
IsWindowEnabled
SetWindowPos
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
InvalidateRect
SendMessageA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
DefWindowProcA

gdi32

GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SetBkColor
SelectObject

advapi32

RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA
SHGetPathFromIDListA

ole32

OleUninitialize
OleInitialize
CoCreateInstance

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/CmdLine.dll
.dll windows:4 windows x86 arch:x86

8d610adb5aa8fa0c852540818b19e77e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
lstrcpynA
GlobalAlloc
GlobalFree

user32

SendMessageA

msvcrt

_onexit
__dllonexit
??3@YAXPAX@Z
_mbsnbcpy
_mbsstr
strlen
strcat
strcpy
memset
atoi
atol
memcpy
??2@YAPAXI@Z

Exports

Exports

ParseCmdLine
SendCompleteMsg

Sections

.text
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 613B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

9d433976e02d79532f0d635ee81d0b20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetPrivateProfileIntA
GlobalAlloc
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
lstrcmpiA

user32

GetDlgCtrlID
GetClientRect
SetWindowRgn
LoadIconA
MapWindowPoints
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadImageA

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

97c84efb92e9e74c911abc996572ac5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
TerminateProcess
lstrcmpiA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
GetProcAddress
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 459B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
MiniQQLive.exe
.exe windows:4 windows x86 arch:x86

142f644c538f82686146c2f295588034

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmSimulateHotKey
ImmIsIME

proxy

?IsIESetProxy@CIEProxyInfo@@QAEHXZ
??1CIEProxyInfo@@UAE@XZ
?GetUserProxySetting@CProxyTool@@QAEHAAHAAVCString@@AAG11@Z
??0CProxyTool@@QAE@XZ
??0CIEProxyInfo@@QAE@XZ
?CreateSocks5ProxyUDPSocket@CProxyTool@@QAEHAAI0AAUsockaddr_in@@ABVCString@@G222GAAV3@@Z
??1CProxyTool@@UAE@XZ

mfc42

ord5440
ord6383
ord2818
ord5450
ord6394
ord2864
ord924
ord3903
ord2107
ord2614
ord1979
ord5572
ord5442
ord2044
ord5834
ord665
ord5186
ord354
ord6385
ord4278
ord2915
ord941
ord6663
ord926
ord3092
ord6805
ord5981
ord6199
ord4287
ord5875
ord3318
ord3797
ord939
ord3573
ord3626
ord2414
ord1175
ord6699
ord6803
ord2233
ord6597
ord1768
ord6197
ord4274
ord283
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord4476
ord2029
ord1247
ord6117
ord2621
ord6375
ord4078
ord5710
ord539
ord4299
ord4284
ord3920
ord3706
ord1641
ord2380
ord3089
ord3874
ord6880
ord4123
ord2642
ord6883
ord801
ord541
ord4129
ord2764
ord861
ord5861
ord3663
ord2448
ord3619
ord795
ord6380
ord640
ord5789
ord1640
ord323
ord2859
ord5683
ord6662
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord4275
ord4202
ord2763
ord857
ord1572
ord465
ord1770
ord6648
ord1862
ord4220
ord2584
ord3654
ord812
ord686
ord559
ord384
ord2438
ord6144
ord2408
ord5862
ord807
ord3289
ord2097
ord4163
ord2120
ord554
ord3571
ord2567
ord2754
ord2753
ord825
ord567
ord540
ord860
ord818
ord800
ord3742
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord6055
ord5290
ord4353
ord6374
ord1576
ord5163
ord2385
ord5241
ord4407
ord1776
ord2841
ord537
ord6453
ord1644
ord1233
ord6270
ord2086
ord4234
ord1168
ord1146
ord3597
ord324
ord641
ord1775
ord4425
ord5280
ord4710
ord6052
ord2514
ord4376
ord4998
ord4853
ord4447
ord5265
ord4411
ord4919
ord5809
ord5480
ord3570
ord278
ord605
ord5478
ord966
ord1971
ord4335
ord5796
ord4863
ord5810
ord2031
ord5481
ord1639
ord6215
ord2379
ord823
ord535
ord858
ord3402
ord2077
ord3721
ord1134
ord2725
ord815
ord561
ord356

msvcrt

__p__commode
_adjust_fdiv
__set_app_type
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
srand
strncpy
_beginthreadex
time
_ftol
swprintf
_wtol
_wtoi
_except_handler3
_mbsicmp
memmove
_mbsnbcmp
_mbsstr
_mbsncmp
_mbschr
_vsnprintf
fprintf
sprintf
fwrite
rename
fopen
fclose
atoi
_mbscmp
atol
_mbsnbcpy
realloc
free
__CxxFrameHandler
wcslen
_controlfp
__p__fmode
rand
_fileno
_fstat
_setmbcp
_stricmp
_itoa

kernel32

GetStartupInfoA
Process32First
Process32Next
GetCurrentProcessId
WinExec
GetTempPathA
GetSystemDirectoryA
OpenProcess
WaitForMultipleObjects
GetTempFileNameA
RemoveDirectoryA
CreateDirectoryA
CreateProcessA
GetCurrentProcess
SetProcessWorkingSetSize
GetFileAttributesA
GetProcAddress
GetVersion
LoadLibraryA
GlobalMemoryStatus
GetDiskFreeSpaceExA
GetVersionExA
GetPrivateProfileStringA
lstrcpynA
CopyFileA
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
CreateFileA
GlobalReAlloc
ReadFile
lstrlenW
GetFileSize
GetModuleHandleA
CreateMutexA
WideCharToMultiByte
GetLocalTime
DeleteFileA
MultiByteToWideChar
lstrlenA
WritePrivateProfileStringA
GetModuleFileNameA
GetTickCount
SetEvent
GetPrivateProfileIntA
CreateEventA
ResetEvent
CloseHandle
CreateToolhelp32Snapshot
GetLastError

user32

GetWindowTextA
DrawTextW
DrawTextA
ClientToScreen
GetWindowTextW
DrawIconEx
GetWindowDC
IsWindowEnabled
RedrawWindow
InvalidateRect
ScreenToClient
GetTopWindow
GetWindowRgn
OffsetRect
GetWindowThreadProcessId
SetCursor
CreateWindowExA
GetWindowLongA
CopyRect
SystemParametersInfoA
GetSystemMetrics
IsZoomed
PtInRect
EnableMenuItem
InflateRect
GetKeyboardLayout
SetClassLongA
GetClassLongA
MessageBoxA
AppendMenuA
GetMenuItemInfoA
GetSysColor
EndPaint
WindowFromPoint
GetParent
GetClientRect
GetWindowRect
SetWindowPos
CallWindowProcA
SetRect
SetWindowRgn
SetWindowLongA
GetDC
ReleaseDC
LoadImageA
SendMessageTimeoutA
GetWindow
GetPropA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyIcon
PostMessageA
GetClassNameA
MoveWindow
SendMessageA
wsprintfA
GetDesktopWindow
RemovePropA
CreatePopupMenu
IsWindowVisible
SetForegroundWindow
GetCursorPos
IsWindow
SetPropA
LoadIconA
RegisterWindowMessageA
EnableWindow
SetTimer
KillTimer
BeginPaint

gdi32

CreatePen
MoveToEx
GetDeviceCaps
CreateBitmap
BitBlt
Ellipse
CreateFontA
CreateDCA
GetTextExtentPoint32A
Rectangle
CreateRectRgn
OffsetRgn
SelectClipRgn
GetObjectA
ExcludeClipRect
ExtSelectClipRgn
CreateRectRgnIndirect
CreateRoundRectRgn
GetDIBits
CreateSolidBrush
DeleteDC
LineTo
GetStockObject
RoundRect
FillRgn
SetBkMode
DeleteObject
SelectObject
CreateDIBitmap
CreateDIBSection
CombineRgn
ExtCreateRegion
StretchBlt
SetBkColor
CreateFontIndirectA
CreateCompatibleDC
SetStretchBltMode
SetTextColor

advapi32

RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ImageList_GetIcon
ImageList_GetImageCount
InitCommonControlsEx
_TrackMouseEvent

ole32

CoCreateInstance
CoLoadLibrary

oleaut32

VariantClear
SafeArrayCreateVector
SafeArrayAccessData
SysAllocStringLen
SafeArrayUnaccessData
SysFreeString
SafeArrayDestroy

urlmon

URLDownloadToFileA

wsock32

WSAGetLastError
ntohs
htonl
htons
ntohl
closesocket

msvcp60

?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?_Xran@std@@YAXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z

admanage

?StartRefreshADContent@CADInterface@@QAEXPAUHWND__@@@Z
??1CADInterface@@UAE@XZ
??0CADInterface@@QAE@XZ

msimg32

GradientFill

winmm

mixerClose
mixerGetNumDevs
mixerOpen
mixerGetLineInfoA

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MiniQQLiveUninstall.exe
.exe windows:4 windows x86 arch:x86

c6ec2286dd1d610e91f6cf961129a7e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetModuleHandleA
SetErrorMode
GetExitCodeProcess
WaitForSingleObject
ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
CloseHandle
SetFileTime
GetFileAttributesA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
LoadLibraryA
ExitProcess
GetCurrentProcess
CopyFileA
lstrcpynA
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
GetTempFileNameA
lstrcpyA
lstrlenA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetSystemDirectoryA
RemoveDirectoryA
GlobalFree
MulDiv
GetProcAddress
FreeLibrary
MultiByteToWideChar
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA

user32

SetWindowTextA
SetTimer
DestroyWindow
CreateDialogParamA
ExitWindowsEx
CharNextA
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
ScreenToClient
GetMessagePos
CallWindowProcA
IsWindowVisible
LoadBitmapA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuA
CreatePopupMenu
GetSystemMetrics
EndDialog
SetClassLongA
IsWindowEnabled
SetWindowPos
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
InvalidateRect
SendMessageA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
DefWindowProcA

gdi32

GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SetBkColor
SelectObject

advapi32

RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA
SHGetPathFromIDListA

ole32

OleUninitialize
OleInitialize
CoCreateInstance

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/procdll.dll
.dll windows:4 windows x86 arch:x86

b081680a6bacb63fdf5fe18c7672c75a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
lstrcmpiA
CloseHandle
OpenProcess
LoadLibraryA
FreeLibrary
GetVersionExA
GetLongPathNameA
lstrcpyA
GlobalFree

Exports

Exports

IsProcRunning

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
miniSkin/AllInOne.bmp
miniSkin/Hand.cur
miniSkin/miniclient.ico
miniSkin/skin.ini
miniSkin/skin.xml
.xml
msvcp60.dll
.dll windows:4 windows x86 arch:x86

1b1839992700df52b049b87961a724e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memmove
__CxxFrameHandler
free
localeconv
_Gettnames
_Getdays
_Getmonths
__mb_cur_max
atan2
cos
exp
ldexp
log
pow
sin
sqrt
??2@YAPAXI@Z
strtoul
_errno
strtol
sprintf
strcspn
fclose
fwrite
fputc
ungetc
fgetc
fgetpos
fseek
fsetpos
setvbuf
memchr
memset
ungetwc
fgetwc
_Strftime
fopen
_iob
setlocale
malloc
realloc
__crtCompareStringA
__lc_collate_cp
_unlock
__lc_handle
_lock
__setlc_active
__unguarded_readlc_active
__crtLCMapStringA
__lc_codepage
towlower
towupper
strcmp
_pctype
_isctype
_ftol
strtod
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
memcmp
memcpy
strlen
_CxxThrowException
wcslen
??4exception@@QAEAAV0@ABV0@@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
fflush
?what@exception@@UBEPBDXZ
fputwc

kernel32

DisableThreadLibraryCalls
MultiByteToWideChar
DeleteCriticalSection
InterlockedExchange
LeaveCriticalSection
Sleep
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte

Exports

Exports

??0?$_Complex_base@M@std@@QAE@ABM0@Z
??0?$_Complex_base@N@std@@QAE@ABN0@Z
??0?$_Complex_base@O@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locinfo@std@@QAE@ABV01@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_Winit@std@@QAE@XZ
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_alloc@std@@QAE@ABV01@@Z
??0bad_alloc@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_exception@std@@QAE@ABV01@@Z
??0bad_exception@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0domain_error@std@@QAE@ABV01@@Z
??0domain_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0facet@locale@std@@IAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0out_of_range@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??0overflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0range_error@std@@QAE@ABV01@@Z
??0range_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0runtime_error@std@@QAE@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??0underflow_error@std@@QAE@ABV01@@Z
??0underflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1?$_Mpunct@D@std@@UAE@XZ
??1?$_Mpunct@G@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@UAE@XZ
??1?$codecvt@GDH@std@@UAE@XZ
??1?$collate@D@std@@UAE@XZ
??1?$collate@G@std@@UAE@XZ
??1?$ctype@D@std@@UAE@XZ
??1?$ctype@G@std@@UAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$numpunct@D@std@@UAE@XZ
??1?$numpunct@G@std@@UAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_alloc@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_exception@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1domain_error@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??1length_error@std@@UAE@XZ
??1locale@std@@QAE@XZ
??1logic_error@std@@UAE@XZ
??1messages_base@std@@UAE@XZ
??1money_base@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1out_of_range@std@@UAE@XZ
??1overflow_error@std@@UAE@XZ
??1range_error@std@@UAE@XZ
??1runtime_error@std@@UAE@XZ
??1strstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??1underflow_error@std@@UAE@XZ
??4?$_Complex_base@M@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@N@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@M@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@N@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@O@std@@QAEAAV01@ABV01@@Z
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??4?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
??4?$complex@M@std@@QAEAAV01@ABM@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
??4?$complex@O@std@@QAEAAV01@ABO@Z
??4?$complex@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Locinfo@std@@QAEAAV01@ABV01@@Z
??4_Lockit@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_alloc@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_exception@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4domain_error@std@@QAEAAV01@ABV01@@Z
??4id@locale@std@@QAEAAV012@ABV012@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??4length_error@std@@QAEAAV01@ABV01@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??4logic_error@std@@QAEAAV01@ABV01@@Z
??4out_of_range@std@@QAEAAV01@ABV01@@Z
??4overflow_error@std@@QAEAAV01@ABV01@@Z
??4range_error@std@@QAEAAV01@ABV01@@Z
??4runtime_error@std@@QAEAAV01@ABV01@@Z
??4underflow_error@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAF@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBF@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??7ios_base@std@@QBE_NXZ
??8locale@std@@QBE_NABV01@@Z
??8std@@YA_NABMABV?$complex@M@0@@Z
??8std@@YA_NABNABV?$complex@N@0@@Z
??8std@@YA_NABOABV?$complex@O@0@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$complex@M@0@0@Z
??8std@@YA_NABV?$complex@M@0@ABM@Z
??8std@@YA_NABV?$complex@N@0@0@Z
??8std@@YA_NABV?$complex@N@0@ABN@Z
??8std@@YA_NABV?$complex@O@0@0@Z
??8std@@YA_NABV?$complex@O@0@ABO@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??9locale@std@@QBE_NABV01@@Z
??9std@@YA_NABMABV?$complex@M@0@@Z
??9std@@YA_NABNABV?$complex@N@0@@Z
??9std@@YA_NABOABV?$complex@O@0@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??9std@@YA_NABV?$complex@M@0@0@Z
??9std@@YA_NABV?$complex@M@0@ABM@Z

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcr71.dll
.dll windows:4 windows x86 arch:x86

7acc8c379c768a1ecd81ec502ff5f33e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr71.pdb

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapAlloc
HeapFree
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection
RtlUnwind
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEnvironmentVariableA
SetEnvironmentVariableW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
HeapSize
VirtualProtect
GetSystemInfo
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
IsDBCSLeadByteEx
GetConsoleCP
ReadConsoleW
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@AAE@PBQBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_Fbad_cast@@QAEXXZ
??_Fbad_typeid@@QAEXXZ
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPAGIPBGPAD@Z
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CppXcptFilter
__CxxCallUnwindDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__buffer_overrun
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__security_error_handler
__set_app_type
__set_buffer_overrun_handler
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__uncaught_exception
__unguarded_readlc_active
__wargv
__wcserror
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_realloc
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_cgetws
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_cputws
_creat
_cscanf
_ctime64
_cwait
_cwprintf
_cwscanf
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_heap_handle
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwch
_getwche
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putwch
_putws
_pwctype
_read
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_scprintf
_scwprintf
_searchenv
_seh_longjmp_unwind
_set_SSE2_enable
_set_error_mode
_set_purecall_handler
_set_sbh_threshold
_set_security_error_handler
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snscanf
_snwprintf
_snwscanf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp

Sections

.text
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcrt.dll
.dll windows:4 windows x86 arch:x86

799e28bcbf4e94ca50e4b0a2c283ab7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumSystemLocalesA
RtlUnwind
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetEnvironmentVariableW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
RaiseException
GetUserDefaultLCID
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
HeapSize
ReadConsoleA
SetConsoleMode
GetConsoleMode
SetEndOfFile
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctime64
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stat64
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_time64
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_utime64
_vsnprintf
_vsnwprintf
_waccess
_wasctime

Sections

.text
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
multiLogin.dll
.dll windows:4 windows x86 arch:x86

89a362f12e2a437f06df39f716f2e703

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

proxy

??1CProxyTool@@UAE@XZ
??0CProxyTool@@QAE@XZ
?CreateProxyTCPSocket@CProxyTool@@QAEHAAIABVCString@@GAAV2@@Z
?IsUseProxy@CProxyTool@@QAEHXZ

mfc42

ord290
ord1799
ord2623
ord4226
ord2486
ord861
ord4622
ord614
ord4424
ord465
ord2458
ord6289
ord3470
ord968
ord455
ord3237
ord857
ord1572
ord850
ord3825
ord823
ord825
ord4080
ord3079
ord2976
ord3831
ord3830
ord3136
ord2985
ord3262
ord3147
ord4465
ord3259
ord342
ord2982
ord1182
ord1253
ord1168
ord2818
ord860
ord537
ord540
ord800
ord1770

msvcrt

_ftol
_mbsicmp
strncpy
srand
rand
_beginthreadex
__dllonexit
_onexit
fwrite
rename
fopen
fclose
_beginthread
difftime
time
sprintf
_vsnprintf
__CxxFrameHandler
free
?terminate@@YAXXZ
fprintf
_purecall
_adjust_fdiv
_initterm
malloc
_except_handler3
_fileno
_fstat
_strnicmp

kernel32

GetCurrentThreadId
lstrcpyA
SetEvent
GetLastError
CreateEventA
GetLocalTime
CloseHandle
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetExitCodeThread
DeleteCriticalSection
lstrlenA
GetModuleFileNameA
Sleep
GetTickCount
DeleteFileA
OutputDebugStringA
WideCharToMultiByte
WaitForMultipleObjects
ExitThread
lstrlenW
TerminateThread
WaitForSingleObject

user32

wsprintfA
IsWindow
PostMessageA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ole32

CoCreateInstance

oleaut32

VariantClear

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

ws2_32

connect
select
ntohl
ioctlsocket
htons
inet_addr
WSAGetLastError
socket
getsockopt
inet_ntoa
send
closesocket
shutdown
gethostbyname
sendto
recvfrom
recv
__WSAFDIsSet
htonl
ntohs

Exports

Exports

??0CQQLiveLogin@@QAE@XZ
??1CQQLiveLogin@@UAE@XZ
??_7CQQLiveLogin@@6BCCommuPostData@@@
??_7CQQLiveLogin@@6BICommuEvent@@@
?ClearPingResult@CQQLiveLogin@@QAEXXZ
?CreateThreadGetQQ@CQQLiveLogin@@AAEXXZ
?CreateThreadGetQQEx@CQQLiveLogin@@AAEXXZ
?CreateThreadGetQQLive@CQQLiveLogin@@AAEXPAEFJJ@Z
?GetInfo@CQQLiveLogin@@QAEPADXZ
?GetIpAndPort@CQQLiveLogin@@QAEPAUtagCONNECT@@AAH@Z
?GetQQInfo@CQQLiveLogin@@QAEPAUtagOWNERINFO@@XZ
?GetQQInfoEx@CQQLiveLogin@@QAEXXZ
?GetQQOnlineInfo@CQQLiveLogin@@QAEPAV?$vector@UtagOWNERINFO@@V?$allocator@UtagOWNERINFO@@@std@@@std@@XZ
?IsLoginOK@CQQLiveLogin@@AAE_NW4LOGINSTATUS@@@Z
?IsLoginOK@CQQLiveLogin@@QAE_NXZ
?Login@CQQLiveLogin@@QAEXPAEFJPBDPAUHWND__@@J@Z
?LoginQQ@CQQLiveLogin@@AAEXJPBD@Z
?OnDataRecv@CQQLiveLogin@@EAEXHFPAEK@Z
?OnGetQQExInfo@CQQLiveLogin@@QAEJAAUtagOWNERINFO@@J@Z
?OnGetQQInfo@CQQLiveLogin@@QAEJAAUtagOWNERINFO@@J@Z
?OnReceiveData@CQQLiveLogin@@AAEXXZ
?QQLiveEnumOnlineQQ@CQQLiveLogin@@QAEXXZ
?SetForceLoginQQServer@CQQLiveLogin@@QAEX_N@Z
?SetLoginIpPort@CQQLiveLogin@@QAEXPBDF@Z
?SetLoginServer@CQQLiveLogin@@QAEX_N000@Z
?StartPing@CQQLiveLogin@@QAEXXZ
?Uninit@CQQLiveLogin@@QAEXXZ

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
qqface/1.bmp
qqface/QQFace20.dat
riched20.dll
.dll windows:5 windows x86 arch:x86

b273fadc4482676e5c978e88480e0b9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedExchange
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetUserDefaultLCID
GetProfileIntA
FindAtomW
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryW
LoadLibraryA
GetProfileSectionW
GetProfileSectionA
CompareStringW
CompareStringA
CreateFileW
CreateFileA
GetStringTypeExW
GetStringTypeExA
GetModuleHandleA
LocalReAlloc
LocalAlloc
GetACP
lstrcmpiW
GetVersionExA
MulDiv
GlobalUnlock
GlobalHandle
GlobalLock
GlobalSize
GlobalReAlloc
GlobalFlags
GlobalFree
GlobalAlloc
GetThreadLocale
IsValidCodePage
SetFilePointer
CloseHandle
WriteFile
ReadFile
GetLastError
IsBadWritePtr
GetCurrentThreadId
FindAtomA
GetSystemDefaultLangID
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
FormatMessageA
lstrlenA
lstrcmpiA
LocalFree
GetLocaleInfoW
GetProcAddress
FreeLibrary
RaiseException
IsBadReadPtr
GetTickCount
Sleep
LocalLock
WideCharToMultiByte
MultiByteToWideChar
GetSystemDefaultLCID
LeaveCriticalSection
EnterCriticalSection

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

user32

IsChild
IsWindowEnabled
GetCapture
GetCaretPos
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
GetClipboardOwner
GetClipboardData
CharUpperW
MessageBoxA
UnregisterClassA
ShowScrollBar
EnableScrollBar
wvsprintfA
DefWindowProcA
DefWindowProcW
GetWindowLongA
GetWindowLongW
GetClassLongA
GetClassLongW
LoadBitmapA
LoadBitmapW
LoadCursorA
LoadCursorW
SetWindowLongA
SetWindowLongW
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
RegisterWindowMessageA
PostQuitMessage
MessageBoxW
GetKeyboardLayout
SendMessageA
FindWindowA
SystemParametersInfoA
GetKeyboardLayoutList
CharLowerA
CharLowerBuffW
CharUpperA
CharUpperBuffW
SendMessageW
UnregisterClassW
RegisterClassA
RegisterClassW
GetDoubleClickTime
GetForegroundWindow
WindowFromPoint
SystemParametersInfoW
GetDesktopWindow
IsWindow
GetWindow
SetScrollInfo
SetForegroundWindow
ScrollWindowEx
SetTimer
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetScrollPos
SetScrollRange
IsWindowVisible
MapWindowPoints
GetDlgItem
GetFocus
IsIconic
DestroyCaret
SetFocus
WindowFromDC
DestroyMenu
MessageBeep
RegisterClipboardFormatA
GetParent
TrackPopupMenu
SetCapture
GetAsyncKeyState
ReleaseCapture
GetMessageTime
GetMessagePos
IntersectRect
OffsetRect
InvertRect
CopyRect
ActivateKeyboardLayout
IsWindowUnicode
EnableWindow
GetDC
ReleaseDC
CreateWindowExW
CreateWindowExA
SetParent
ClientToScreen
MoveWindow
BeginPaint
FillRect
EndPaint
InflateRect
ShowWindow
InvalidateRect
SetWindowPos
UpdateWindow
GetClientRect
DrawFocusRect
GetCursorPos
ScreenToClient
GetWindowRect
PtInRect
GetKeyState
GetSysColor
DrawFrameControl
GetSystemMetrics
SetCursor
GetCursor
DestroyWindow
KillTimer

gdi32

SetBkMode
RestoreDC
SaveDC
RealizePalette
SelectPalette
SelectObject
GetCurrentObject
Rectangle
GetStockObject
SetROP2
CreateDIBSection
DeleteDC
StretchBlt
CreateCompatibleDC
DeleteObject
SetTextAlign
GetDeviceCaps
ExtTextOutW
GetPixel
SetWindowExtEx
SetWindowOrgEx
BitBlt
LineTo
MoveToEx
CreatePen
DeleteMetaFile
GetTextCharsetInfo
GetOutlineTextMetricsA
TranslateCharsetInfo
GetBkMode
DPtoLP
PatBlt
SetMapMode
CreateCompatibleBitmap
ExtTextOutA
CreateSolidBrush
SetMetaFileBitsEx
CreateBitmap
GetMetaFileBitsEx
SetViewportOrgEx
EnumMetaFile
CloseMetaFile
CreateMetaFileA
CreatePatternBrush
Escape
GetObjectType
CreatePalette
GetMapMode
LPtoDP
EnumFontFamiliesExW
GetCharWidthW
GetCharWidthA
CreateFontIndirectA
CreateFontIndirectW
GetObjectW
GetTextMetricsA
GetTextMetricsW
CreateICA
CreateICW
GetTextFaceA
GetTextFaceW
SetBkColor
SetTextColor
GetObjectA
IntersectClipRect

Exports

Exports

CreateTextServices
IID_IRichEditOle
IID_IRichEditOleCallback
IID_ITextHost
IID_ITextHost2
IID_ITextServices
REExtendedRegisterClass
RichEdit10ANSIWndProc
RichEditANSIWndProc

Sections

.text
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uninstall.exe.nsis
vqqsdl.dll
.dll regsvr32 windows:4 windows x86 arch:x86

08bd2e4a0f0db180d31c3ff0bd25eeea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
CloseHandle
CreateEventA
SetEvent
CreateSemaphoreA
ReleaseSemaphore
TerminateThread
WaitForMultipleObjects
GetTickCount
Sleep
CreateFileA
InterlockedExchange
ReleaseMutex
CopyFileA
CreateMutexA
InitializeCriticalSection
GetCurrentDirectoryA
GetTempPathA
GetLastError
DisableThreadLibraryCalls
HeapDestroy
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
MultiByteToWideChar
lstrlenA
lstrcatA
WideCharToMultiByte
lstrlenW
GetShortPathNameA
GetModuleHandleA
CreateProcessA

user32

PostMessageA
CharNextA

ole32

CoLoadLibrary
CoFreeLibrary
CoCreateInstance

oleaut32

RegisterTypeLi
VariantClear
LoadRegTypeLi
SysStringLen
SysAllocString
LoadTypeLi
SysFreeString

ws2_32

ioctlsocket
send
connect
sendto
recvfrom
socket
bind
recv
WSAGetLastError
closesocket
setsockopt
WSACleanup
WSAStartup
gethostname
inet_ntoa
htons
htonl
gethostbyname
ntohs
ntohl
__WSAFDIsSet
select
inet_addr
WSASetLastError
getsockname
getpeername
listen
accept

wininet

InternetCanonicalizeUrlA
InternetCrackUrlA

msvcp60

??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPADD@Z
??0bad_cast@std@@QAE@ABV01@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
??1_Winit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?setf@ios_base@std@@QAEHHH@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??_7bad_cast@std@@6B@
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0runtime_error@std@@QAE@ABV01@@Z
??1runtime_error@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7runtime_error@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
?_Doraise@bad_cast@std@@MBEXXZ
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z

msvcrt

atoi
clock
_beginthread
memmove
_errno
sscanf
exit
malloc
free
fprintf
_iob
perror
tolower
_splitpath
_stricmp
??1type_info@@UAE@XZ
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
strchr
strtol
strncpy
strcmp
isdigit
strrchr
strcat
__CxxFrameHandler
memset
memcpy
??2@YAPAXI@Z
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
strlen
_CxxThrowException
strcpy
_ftol
_purecall
time
_unlink
_telli64
memcmp
_open
_close
_write
_read
_lseeki64
rand
_commit
_access
_beginthreadex
srand
rename
sprintf
strstr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ReleaseCommLib

Sections

.text
Size: 440KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
whatsnew.txt
下载说明.htm
.html .js polyglot

Sharing

General

Malware Config

Signatures

Files

c6ec2286dd1d610e91f6cf961129a7e3

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

3f:76:73:84:79:b8:43:31:60:48:9e:50:6e:6c:9f:4bCertificate

Extended Key Usages

Key Usages

7e:a1:b7:12:c0:e6:e6:48:78:32:d1:d1:46:6e:e1:27:c6:14:e5:a2Signer

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 108KB

.ndata Size: - Virtual size: 44KB

.rsrc Size: 25KB - Virtual size: 28KB

8d610adb5aa8fa0c852540818b19e77e

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 928B

.rdata Size: 1024B - Virtual size: 613B

.data Size: 512B - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 4B

.reloc Size: 512B - Virtual size: 156B

9d433976e02d79532f0d635ee81d0b20

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 930B

97c84efb92e9e74c911abc996572ac5e

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

3f:76:73:84:79:b8:43:31:60:48:9e:50:6e:6c:9f:4b
Certificate

7e:a1:b7:12:c0:e6:e6:48:78:32:d1:d1:46:6e:e1:27:c6:14:e5:a2
Signer

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 108KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 25KB - Virtual size: 28KB

.text
Size: 1024B - Virtual size: 928B

.rdata
Size: 1024B - Virtual size: 613B

.data
Size: 512B - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 4B

.reloc
Size: 512B - Virtual size: 156B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 930B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 459B

.data
Size: 512B - Virtual size: 244B

.reloc
Size: 512B - Virtual size: 138B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 380B

.data
Size: 512B - Virtual size: 228B

.reloc
Size: 512B - Virtual size: 134B

.text
Size: 132KB - Virtual size: 129KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 768B

.reloc
Size: 12KB - Virtual size: 8KB

.text
Size: 96KB - Virtual size: 92KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 12KB - Virtual size: 10KB