Architecture |
IMAGE_FILE_MACHINE_AMD64
|
---|---|
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
Compilation Date | 2019-Dec-24 07:36:57 |
Detected languages |
English - United States
|
FileVersion | 1.0.0.0 |
OriginalFilename | falcon.exe |
ProductName | falcon |
ProductVersion | 1.0.0.0 |
Suspicious | Strings found in the binary may indicate undesirable behavior: |
Tries to detect virtualized environments:
|
Info | The PE is digitally signed. |
Signer: miHoYo Co.
Issuer: DigiCert Assured ID Code Signing CA-1 |
Safe | VirusTotal score: 0/71 (Scanned on 2020-03-12 07:16:56) | All the AVs think this file is safe. |
e_magic | MZ |
---|---|
e_cblp | 0x90 |
e_cp | 0x3 |
e_crlc | 0 |
e_cparhdr | 0x4 |
e_minalloc | 0 |
e_maxalloc | 0xffff |
e_ss | 0 |
e_sp | 0xb8 |
e_csum | 0 |
e_ip | 0 |
e_cs | 0 |
e_ovno | 0 |
e_oemid | 0 |
e_oeminfo | 0 |
e_lfanew | 0x118 |
Signature | PE |
---|---|
Machine |
IMAGE_FILE_MACHINE_AMD64
|
NumberofSections | 6 |
TimeDateStamp | 2019-Dec-24 07:36:57 |
PointerToSymbolTable | 0 |
NumberOfSymbols | 0 |
SizeOfOptionalHeader | 0xf0 |
Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Magic | PE32+ |
---|---|
LinkerVersion | 14.0 |
SizeOfCode | 0x18400 |
SizeOfInitializedData | 0x741600 |
SizeOfUninitializedData | 0 |
AddressOfEntryPoint | 0x0000000000015FDC (Section: .text) |
BaseOfCode | 0x1000 |
ImageBase | 0x140000000 |
SectionAlignment | 0x1000 |
FileAlignment | 0x200 |
OperatingSystemVersion | 6.0 |
ImageVersion | 1.0 |
SubsystemVersion | 6.0 |
Win32VersionValue | 0 |
SizeOfImage | 0x75e000 |
SizeOfHeaders | 0x400 |
Checksum | 0x76350f |
Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
SizeofStackReserve | 0x100000 |
SizeofStackCommit | 0x1000 |
SizeofHeapReserve | 0x100000 |
SizeofHeapCommit | 0x1000 |
LoaderFlags | 0 |
NumberOfRvaAndSizes | 16 |
OLEAUT32.dll |
#2
#9 |
---|---|
USER32.dll |
CharUpperW
|
Qt5Quick.dll |
?setSceneGraphBackend@QQuickWindow@@SAXW4GraphicsApi@QSGRendererInterface@@@Z
|
Qt5Widgets.dll |
?qt_metacast@QApplication@@UEAAPEAXPEBD@Z
?qt_metacall@QApplication@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z ?notify@QApplication@@UEAA_NPEAVQObject@@PEAVQEvent@@@Z ?event@QApplication@@MEAA_NPEAVQEvent@@@Z ?compressEvent@QApplication@@MEAA_NPEAVQEvent@@PEAVQObject@@PEAVQPostEventList@@@Z ?setWindowState@QWidget@@QEAAXV?$QFlags@W4WindowState@Qt@@@@@Z ?windowState@QWidget@@QEBA?AV?$QFlags@W4WindowState@Qt@@@@XZ ?raise@QWidget@@QEAAXXZ ?activateWindow@QWidget@@QEAAXXZ ??1QApplication@@UEAA@XZ ??0QApplication@@QEAA@AEAHPEAPEADH@Z ?staticMetaObject@QApplication@@2UQMetaObject@@B ?exec@QApplication@@SAHXZ |
Qt5Gui.dll |
??1QOffscreenSurface@@UEAA@XZ
?create@QOffscreenSurface@@QEAAXXZ ?functions@QOpenGLContext@@QEBAPEAVQOpenGLFunctions@@XZ ?makeCurrent@QOpenGLContext@@QEAA_NPEAVQSurface@@@Z ?create@QOpenGLContext@@QEAA_NXZ ??0QOffscreenSurface@@QEAA@PEAVQScreen@@@Z ?initializeOpenGLFunctions@QOpenGLFunctions@@QEAAXXZ ??1QOpenGLContext@@UEAA@XZ ??0QOpenGLContext@@QEAA@PEAVQObject@@@Z ?openUrl@QDesktopServices@@SA_NAEBVQUrl@@@Z ?glGetString@QOpenGLFunctions@@QEAAPEBEI@Z |
Qt5Qml.dll |
??1QQmlApplicationEngine@@UEAA@XZ
?rootObjects@QQmlApplicationEngine@@QEAA?AV?$QList@PEAVQObject@@@@XZ ?load@QQmlApplicationEngine@@QEAAXAEBVQUrl@@@Z ?setContextProperty@QQmlContext@@QEAAXAEBVQString@@PEAVQObject@@@Z ??0QQmlApplicationEngine@@QEAA@PEAVQObject@@@Z ?rootContext@QQmlEngine@@QEBAPEAVQQmlContext@@XZ |
Qt5Network.dll |
?get@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@@Z
??1QNetworkAccessManager@@UEAA@XZ ??0QNetworkAccessManager@@QEAA@PEAVQObject@@@Z ?setRawHeader@QNetworkRequest@@QEAAXAEBVQByteArray@@0@Z ?setUrl@QNetworkRequest@@QEAAXAEBVQUrl@@@Z ??1QNetworkRequest@@QEAA@XZ ??0QNetworkRequest@@QEAA@AEBVQUrl@@@Z ?staticMetaObject@QNetworkReply@@2UQMetaObject@@B ?qt_metacast@QLocalServer@@UEAAPEAXPEBD@Z ?qt_metacall@QLocalServer@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z ?nextPendingConnection@QLocalServer@@UEAAPEAVQLocalSocket@@XZ ?metaObject@QLocalServer@@UEBAPEBUQMetaObject@@XZ ?error@QNetworkReply@@QEBA?AW4NetworkError@1@XZ ?hasPendingConnections@QLocalServer@@UEBA_NXZ ?waitForReadyRead@QLocalSocket@@UEAA_NH@Z ?waitForDisconnected@QLocalSocket@@QEAA_NH@Z ?waitForConnected@QLocalSocket@@QEAA_NH@Z ?waitForBytesWritten@QLocalSocket@@UEAA_NH@Z ?state@QLocalSocket@@QEBA?AW4LocalSocketState@1@XZ ?connectToServer@QLocalSocket@@QEAAXAEBVQString@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z ??1QLocalSocket@@UEAA@XZ ??0QLocalSocket@@QEAA@PEAVQObject@@@Z ?listen@QLocalServer@@QEAA_NAEBVQString@@@Z ?errorString@QLocalServer@@QEBA?AVQString@@XZ ??1QLocalServer@@UEAA@XZ ??0QLocalServer@@QEAA@PEAVQObject@@@Z ?downloadProgress@QNetworkReply@@QEAAX_J0@Z ?attribute@QNetworkReply@@QEBA?AVQVariant@@W4Attribute@QNetworkRequest@@@Z ?head@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@@Z ?header@QNetworkReply@@QEBA?AVQVariant@@W4KnownHeaders@QNetworkRequest@@@Z ??1QNetworkInterface@@QEAA@XZ ?flags@QNetworkInterface@@QEBA?AV?$QFlags@W4InterfaceFlag@QNetworkInterface@@@@XZ ?hardwareAddress@QNetworkInterface@@QEBA?AVQString@@XZ ?allInterfaces@QNetworkInterface@@SA?AV?$QList@VQNetworkInterface@@@@XZ ??0QNetworkInterface@@QEAA@AEBV0@@Z ?incomingConnection@QLocalServer@@MEAAX_K@Z ?finished@QNetworkReply@@QEAAXXZ |
Qt5Core.dll |
?setupChildProcess@QProcess@@MEAAXXZ
?qt_metacall@QThread@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z ?qt_metacast@QThread@@UEAAPEAXPEBD@Z ?staticMetaObject@QThread@@2UQMetaObject@@B ?append@QByteArray@@QEAAAEAV1@PEBD@Z ?append@QByteArray@@QEAAAEAV1@D@Z ?reserve@QByteArray@@QEAAXH@Z ?qRegisterResourceData@@YA_NHPEBE00@Z ?qUnregisterResourceData@@YA_NHPEBE00@Z ??0QString@@QEAA@XZ ??0QString@@QEAA@AEBV0@@Z ??1QString@@QEAA@XZ ??1Connection@QMetaObject@@QEAA@XZ ?connect@QObject@@SA?AVConnection@QMetaObject@@PEBV1@PEBD01W4ConnectionType@Qt@@@Z ?disconnect@QObject@@SA_NPEBV1@PEBD01@Z ?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z ?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z ?customEvent@QObject@@MEAAXPEAVQEvent@@@Z ?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z ?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z ?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z ?qBadAlloc@@YAXXZ ??0QMessageLogger@@QEAA@PEBDH0@Z ?warning@QMessageLogger@@QEBAXPEBDZZ ?qErrnoWarning@@YAXPEBDZZ ??0QChar@@QEAA@UQLatin1Char@@@Z ?allocate@QArrayData@@SAPEAU1@_K00V?$QFlags@W4AllocationOption@QArrayData@@@@@Z ?deallocate@QArrayData@@SAXPEAU1@_K1@Z ?sharedNull@QArrayData@@SAPEAU1@XZ ?qstrcmp@@YAHAEBVQByteArray@@PEBD@Z ?qChecksum@@YAGPEBDI@Z ??0QByteArray@@QEAA@XZ ??1QByteArray@@QEAA@XZ ?resize@QByteArray@@QEAAXH@Z ?data@QByteArray@@QEAAPEADXZ ?constData@QByteArray@@QEBAPEBDXZ ??0QString@@QEAA@VQChar@@@Z ??0QString@@QEAA@VQLatin1String@@@Z ??4QString@@QEAAAEAV0@AEBV0@@Z ??4QString@@QEAAAEAV0@$$QEAV0@@Z ?truncate@QString@@QEAAXH@Z ?section@QString@@QEBA?AV1@VQChar@@HHV?$QFlags@W4SectionFlag@QString@@@@@Z ?toLower@QString@@QEGBA?AV1@XZ ?toLower@QString@@QEHAA?AV1@XZ ?append@QString@@QEAAAEAV1@AEBV1@@Z ??YQString@@QEAAAEAV0@VQChar@@@Z ?remove@QString@@QEAAAEAV1@AEBVQRegExp@@@Z ?utf16@QString@@QEBAPEBGXZ ?toLatin1@QString@@QEHAA?AVQByteArray@@XZ ?toUtf8@QString@@QEGBA?AVQByteArray@@XZ ?toLocal8Bit@QString@@QEHAA?AVQByteArray@@XZ ?fromLatin1@QString@@SA?AV1@PEBDH@Z ?fromUtf8@QString@@SA?AV1@AEBVQByteArray@@@Z ?number@QString@@SA?AV1@HH@Z ?number@QString@@SA?AV1@KH@Z ?fromAscii_helper@QString@@CAPEAU?$QTypedArrayData@G@@PEBDH@Z ??0QRegExp@@QEAA@AEBVQString@@W4CaseSensitivity@Qt@@W4PatternSyntax@0@@Z ??1QRegExp@@QEAA@XZ ??0QObject@@QEAA@PEAV0@@Z ??1QObject@@UEAA@XZ ?isOpen@QIODevice@@QEBA_NXZ ?read@QIODevice@@QEAA?AVQByteArray@@_J@Z ?write@QIODevice@@QEAA_JPEBD_J@Z ?errorString@QIODevice@@QEBA?AVQString@@XZ ??0QFile@@QEAA@XZ ??0QFile@@QEAA@AEBVQString@@@Z ??1QFile@@UEAA@XZ ?setFileName@QFile@@QEAAXAEBVQString@@@Z ?open@QFile@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z ??0QFileInfo@@QEAA@AEBVQFile@@@Z ??1QFileInfo@@QEAA@XZ ?absoluteFilePath@QFileInfo@@QEBA?AVQString@@XZ ??0QDir@@QEAA@AEBVQString@@@Z ??1QDir@@QEAA@XZ ?absolutePath@QDir@@QEBA?AVQString@@XZ ?tempPath@QDir@@SA?AVQString@@XZ ?applicationFilePath@QCoreApplication@@SA?AVQString@@XZ ??0QDataStream@@QEAA@PEAVQIODevice@@@Z ??1QDataStream@@QEAA@XZ ??5QDataStream@@QEAAAEAV0@AEAH@Z ?readRawData@QDataStream@@QEAAHPEADH@Z ?writeBytes@QDataStream@@QEAAAEAV1@PEBDI@Z ??0QLibrary@@QEAA@AEBVQString@@PEAVQObject@@@Z ??1QLibrary@@UEAA@XZ ?resolve@QLibrary@@QEAAP6AXXZPEBD@Z ?atEnd@QFileDevice@@UEBA_NXZ ?bytesAvailable@QIODevice@@UEBA_JXZ ?bytesToWrite@QIODevice@@UEBA_JXZ ?canReadLine@QIODevice@@UEBA_NXZ ?close@QFileDevice@@UEAAXXZ ?event@QObject@@UEAA_NPEAVQEvent@@@Z ?fileName@QFile@@UEBA?AVQString@@XZ ?isSequential@QFileDevice@@UEBA_NXZ ?metaObject@QFile@@UEBAPEBUQMetaObject@@XZ ?permissions@QFile@@UEBA?AV?$QFlags@W4Permission@QFileDevice@@@@XZ ?pos@QFileDevice@@UEBA_JXZ ?qt_metacall@QFile@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z ?qt_metacast@QFile@@UEAAPEAXPEBD@Z ?readData@QFileDevice@@MEAA_JPEAD_J@Z ?readLineData@QFileDevice@@MEAA_JPEAD_J@Z ?reset@QIODevice@@UEAA_NXZ ?resize@QFile@@UEAA_N_J@Z ?seek@QFileDevice@@UEAA_N_J@Z ?setPermissions@QFile@@UEAA_NV?$QFlags@W4Permission@QFileDevice@@@@@Z ?size@QFile@@UEBA_JXZ ?waitForBytesWritten@QIODevice@@UEAA_NH@Z ?waitForReadyRead@QIODevice@@UEAA_NH@Z ?writeData@QFileDevice@@MEAA_JPEBD_J@Z ?debug@QMessageLogger@@QEBA?AVQDebug@@XZ ?detach@QListData@@QEAAPEAUData@1@H@Z ?dispose@QListData@@QEAAXXZ ?dispose@QListData@@SAXPEAUData@1@@Z ?isEmpty@QListData@@QEBA_NXZ ?at@QListData@@QEBAPEAPEAXH@Z ?begin@QListData@@QEBAPEAPEAXXZ ?end@QListData@@QEBAPEAPEAXXZ ?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z ?setOrganizationDomain@QCoreApplication@@SAXAEBVQString@@@Z ?setOrganizationName@QCoreApplication@@SAXAEBVQString@@@Z ?setApplicationName@QCoreApplication@@SAXAEBVQString@@@Z ?installTranslator@QCoreApplication@@SA_NPEAVQTranslator@@@Z ??0QUrl@@QEAA@AEBVQString@@W4ParsingMode@0@@Z ??1QUrl@@QEAA@XZ ??1QDebug@@QEAA@XZ ??6QDebug@@QEAAAEAV0@PEBD@Z ??0QTranslator@@QEAA@PEAVQObject@@@Z ??1QTranslator@@UEAA@XZ ?load@QTranslator@@QEAA_NAEBVQString@@000@Z ?tr@QMetaObject@@QEBA?AVQString@@PEBD0H@Z ?indexOfEnumerator@QMetaObject@@QEBAHPEBD@Z ?enumerator@QMetaObject@@QEBA?AVQMetaEnum@@H@Z ?normalizedType@QMetaObject@@SA?AVQByteArray@@PEBD@Z ?invokeMethod@QMetaObject@@SA_NPEAVQObject@@PEBDW4ConnectionType@Qt@@VQGenericReturnArgument@@VQGenericArgument@@444444444@Z ??0QChar@@QEAA@H@Z ??0QByteArray@@QEAA@PEBDH@Z ??0QByteArray@@QEAA@$$QEAV0@@Z ??0QString@@QEAA@$$QEAV0@@Z ?arg@QString@@QEBA?AV1@_JHHVQChar@@@Z ?arg@QString@@QEBA?AV1@HHHVQChar@@@Z ?arg@QString@@QEBA?AV1@NHDHVQChar@@@Z ?arg@QString@@QEBA?AV1@AEBV1@HVQChar@@@Z ?arg@QString@@QEBA?AV1@AEBV1@0@Z ?indexOf@QString@@QEBAHVQChar@@HW4CaseSensitivity@Qt@@@Z ?indexOf@QString@@QEBAHAEBV1@HW4CaseSensitivity@Qt@@@Z ?mid@QString@@QEBA?AV1@HH@Z ?startsWith@QString@@QEBA_NAEBV1@W4CaseSensitivity@Qt@@@Z ?endsWith@QString@@QEBA_NAEBV1@W4CaseSensitivity@Qt@@@Z ?remove@QString@@QEAAAEAV1@HH@Z ?replace@QString@@QEAAAEAV1@AEBV1@0W4CaseSensitivity@Qt@@@Z ?fromUtf8@QString@@SA?AV1@PEBDH@Z ?fromLocal8Bit@QString@@SA?AV1@AEBVQByteArray@@@Z ?number@QString@@SA?AV1@NDH@Z ??8@YA_NAEBVQString@@0@Z ??M@YA_NAEBVQString@@0@Z ??4QString@@QEAAAEAV0@PEBD@Z ??8QString@@QEBA_NPEBD@Z ?isNull@QString@@QEBA_NXZ ?detach_grow@QListData@@QEAAPEAUData@1@PEAHH@Z ?append@QListData@@QEAAPEAPEAXXZ ?registerNormalizedType@QMetaType@@SAHAEBVQByteArray@@P6AXPEAX@ZP6APEAX1PEBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PEBUQMetaObject@@@Z ?registerNormalizedTypedef@QMetaType@@SAHAEBVQByteArray@@H@Z ?qt_qFindChild_helper@@YAPEAVQObject@@PEBV1@AEBVQString@@AEBUQMetaObject@@V?$QFlags@W4FindChildOption@Qt@@@@@Z ?setProperty@QObject@@QEAA_NPEBDAEBVQVariant@@@Z ?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z ??0QProcess@@QEAA@PEAVQObject@@@Z ??1QProcess@@UEAA@XZ ?start@QProcess@@QEAAXAEBVQString@@AEBVQStringList@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z ?waitForFinished@QProcess@@QEAA_NH@Z ?readAllStandardOutput@QProcess@@QEAA?AVQByteArray@@XZ ?close@QProcess@@UEAAXXZ ?execute@QProcess@@SAHAEBVQString@@@Z ?startDetached@QProcess@@SA_NAEBVQString@@@Z ?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ ??0QDateTime@@QEAA@XZ ??1QDateTime@@QEAA@XZ ??4QDateTime@@QEAAAEAV0@$$QEAV0@@Z ?toMSecsSinceEpoch@QDateTime@@QEBA_JXZ ?toSecsSinceEpoch@QDateTime@@QEBA_JXZ ?currentDateTime@QDateTime@@SA?AV1@XZ ?exists@QFile@@SA_NAEBVQString@@@Z ??0QFileInfo@@QEAA@AEBVQString@@@Z ?exists@QFileInfo@@QEBA_NXZ ?filePath@QFileInfo@@QEBA?AVQString@@XZ ?setPath@QDir@@QEAAXAEBVQString@@@Z ?toNativeSeparators@QDir@@SA?AVQString@@AEBV2@@Z ?isEmpty@QDir@@QEBA_NV?$QFlags@W4Filter@QDir@@@@@Z ?mkpath@QDir@@QEBA_NAEBVQString@@@Z ?exists@QDir@@QEBA_NXZ ?remove@QDir@@QEAA_NAEBVQString@@@Z ?separator@QDir@@SA?AVQChar@@XZ ??0QStorageInfo@@QEAA@AEBVQString@@@Z ??1QStorageInfo@@QEAA@XZ ?className@QMetaObject@@QEBAPEBDXZ ?bytesAvailable@QStorageInfo@@QEBA_JXZ ?freeNodeAndRebalance@QMapDataBase@@QEAAXPEAUQMapNodeBase@@@Z ?recalcMostLeftNode@QMapDataBase@@QEAAXXZ ?createNode@QMapDataBase@@QEAAPEAUQMapNodeBase@@HHPEAU2@_N@Z ?freeTree@QMapDataBase@@QEAAXPEAUQMapNodeBase@@H@Z ?createData@QMapDataBase@@SAPEAU1@XZ ?freeData@QMapDataBase@@SAXPEAU1@@Z ??1QVariant@@QEAA@XZ ??0QVariant@@QEAA@H@Z ??0QVariant@@QEAA@_N@Z ??0QVariant@@QEAA@PEBD@Z ??0QVariant@@QEAA@AEBVQString@@@Z ?key@QMetaEnum@@QEBAPEBDH@Z ?valueToKey@QMetaEnum@@QEBAPEBDH@Z ?fileName@QUrl@@QEBA?AVQString@@V?$QFlags@W4ComponentFormattingOption@QUrl@@@@@Z ??6QDebug@@QEAAAEAV0@_J@Z ??6QDebug@@QEAAAEAV0@AEBVQString@@@Z ??6QDebug@@QEAAAEAV0@AEBVQByteArray@@@Z ??0QMutex@@QEAA@W4RecursionMode@0@@Z ??1QMutex@@QEAA@XZ ?lock@QMutex@@QEAAXXZ ?unlock@QMutex@@QEAAXXZ ??1QException@@UEAA@XZ ?exit@QThread@@QEAAXH@Z ?start@QThread@@QEAAXW4Priority@1@@Z ?atEnd@QProcess@@UEBA_NXZ ?bytesAvailable@QProcess@@UEBA_JXZ ?bytesToWrite@QProcess@@UEBA_JXZ ?canReadLine@QProcess@@UEBA_NXZ ?isSequential@QProcess@@UEBA_NXZ ?metaObject@QProcess@@UEBAPEBUQMetaObject@@XZ ?open@QProcess@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z ?pos@QIODevice@@UEBA_JXZ ?qt_metacall@QProcess@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z ?qt_metacast@QProcess@@UEAAPEAXPEBD@Z ?readData@QProcess@@MEAA_JPEAD_J@Z ?readLineData@QIODevice@@MEAA_JPEAD_J@Z ?seek@QIODevice@@UEAA_N_J@Z ?rootPath@QStorageInfo@@QEBA?AVQString@@XZ ?size@QIODevice@@UEBA_JXZ ?waitForBytesWritten@QProcess@@UEAA_NH@Z ?waitForReadyRead@QProcess@@UEAA_NH@Z ?writeData@QProcess@@MEAA_JPEBD_J@Z ?shared_null@QListData@@2UData@1@B ?staticMetaObject@QObject@@2UQMetaObject@@B ?shared_null@QMapDataBase@@2U1@B ??0QByteArray@@QEAA@AEBV0@@Z ?deleteLater@QObject@@QEAAXXZ ??0QUrl@@QEAA@XZ ?toInt@QVariant@@QEBAHPEA_N@Z ?readAll@QIODevice@@QEAA?AVQByteArray@@XZ ??6QDebug@@QEAAAEAV0@H@Z ??0QVariant@@QEAA@XZ ?toString@QVariant@@QEBA?AVQString@@XZ ??0QSettings@@QEAA@AEBVQString@@W4Format@0@PEAVQObject@@@Z ??1QSettings@@UEAA@XZ ?setValue@QSettings@@QEAAXAEBVQString@@AEBVQVariant@@@Z ?value@QSettings@@QEBA?AVQVariant@@AEBVQString@@AEBV2@@Z ?contains@QSettings@@QEBA_NAEBVQString@@@Z ?event@QSettings@@MEAA_NPEAVQEvent@@@Z ?metaObject@QSettings@@UEBAPEBUQMetaObject@@XZ ?qt_metacall@QSettings@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z ?qt_metacast@QSettings@@UEAAPEAXPEBD@Z ??0QChar@@QEAA@D@Z ?trimmed@QString@@QEHAA?AV1@XZ ?fromWCharArray@QString@@SA?AV1@PEB_WH@Z ??0QString@@QEAA@AEBVQByteArray@@@Z ?toStdWString@QString@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ??0QThread@@QEAA@PEAVQObject@@@Z ??1QThread@@UEAA@XZ ?readLine@QIODevice@@QEAA?AVQByteArray@@_J@Z ?remove@QFile@@SA_NAEBVQString@@@Z ?suffix@QFileInfo@@QEBA?AVQString@@XZ ?event@QThread@@UEAA_NPEAVQEvent@@@Z ?realloc@QListData@@QEAAXH@Z ?nextNode@QMapNodeBase@@QEBAPEBU1@XZ ??0QVariant@@QEAA@AEBV0@@Z ??4QVariant@@QEAAAEAV0@AEBV0@@Z ?toLongLong@QVariant@@QEBA_JPEA_N@Z ?toMap@QVariant@@QEBA?AV?$QMap@VQString@@VQVariant@@@@XZ ?errorString@QJsonParseError@@QEBA?AVQString@@XZ ??1QJsonDocument@@QEAA@XZ ?toVariant@QJsonDocument@@QEBA?AVQVariant@@XZ ?fromJson@QJsonDocument@@SA?AV1@AEBVQByteArray@@PEAUQJsonParseError@@@Z ?setUrl@QUrl@@QEAAXAEBVQString@@W4ParsingMode@1@@Z ?toHex@QByteArray@@QEBA?AV1@XZ ??4QUrl@@QEAAAEAV0@AEBV0@@Z ??4QUrl@@QEAAAEAV0@AEBVQString@@@Z ?matches@QUrl@@QEBA_NAEBV1@V?$QUrlTwoFlags@W4UrlFormattingOption@QUrl@@W4ComponentFormattingOption@2@@@@Z ??0QVariant@@QEAA@_J@Z ?read@QIODevice@@QEAA_JPEAD_J@Z ?write@QIODevice@@QEAA_JAEBVQByteArray@@@Z ??0QCryptographicHash@@QEAA@W4Algorithm@0@@Z ??1QCryptographicHash@@QEAA@XZ ?addData@QCryptographicHash@@QEAAXPEBDH@Z ?result@QCryptographicHash@@QEBA?AVQByteArray@@XZ ??0QEventLoop@@QEAA@PEAVQObject@@@Z ??1QEventLoop@@UEAA@XZ ?exec@QEventLoop@@QEAAHV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z ?flush@QFileDevice@@QEAA_NXZ ?rename@QFile@@QEAA_NAEBVQString@@@Z ??0QSettings@@QEAA@PEAVQObject@@@Z ?beginGroup@QSettings@@QEAAXAEBVQString@@@Z ?endGroup@QSettings@@QEAAXXZ ?remove@QSettings@@QEAAXAEBVQString@@@Z ?toLatin1@QString@@QEGBA?AVQByteArray@@XZ ?isNull@QVariant@@QEBA_NXZ ?readyRead@QIODevice@@QEAAXXZ ?staticMetaObject@QIODevice@@2UQMetaObject@@B ?machineUniqueId@QSysInfo@@SA?AVQByteArray@@XZ ??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z ?isNull@QByteArray@@QEBA_NXZ ??4QString@@QEAAAEAV0@AEBVQByteArray@@@Z ?toByteArray@QUuid@@QEBA?AVQByteArray@@XZ ?createUuid@QUuid@@SA?AV1@XZ ?buildCpuArchitecture@QSysInfo@@SA?AVQString@@XZ ?prettyProductName@QSysInfo@@SA?AVQString@@XZ ?asprintf@QString@@SA?AV1@PEBDZZ ?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z ?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ ?qt_metacast@QObject@@UEAAPEAXPEBD@Z ?qt_metacall@QObject@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z |
MSVCP140.dll |
?_Xbad_function_call@std@@YAXXZ
|
KERNEL32.dll |
LocalFree
CloseHandle GetLastError ReleaseMutex WaitForSingleObject GetCommandLineW CreateMutexW InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter TerminateProcess GetCurrentProcess IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection GlobalMemoryStatusEx SetFilePointer SetEndOfFile GetFileSize GetModuleHandleA GetFileAttributesW FindFirstFileW FindClose GetProcAddress GetModuleHandleW GetCurrentThreadId SetLastError SetFileTime SetFileAttributesW DeleteFileW CreateFileW CreateDirectoryW WideCharToMultiByte WriteFile ReadFile GetFileInformationByHandle GetCurrentProcessId WaitForMultipleObjects Sleep OpenMutexW |
VCRUNTIME140.dll |
memset
_purecall _CxxThrowException __C_specific_handler __std_exception_copy __std_exception_destroy memcpy __CxxFrameHandler3 __std_terminate |
api-ms-win-crt-runtime-l1-1-0.dll |
_set_app_type
_seh_filter_exe _get_narrow_winmain_command_line _initterm _initterm_e _cexit _exit _initialize_narrow_environment _c_exit _register_thread_local_exe_atexit_callback _crt_atexit terminate _register_onexit_function _invalid_parameter_noinfo_noreturn _initialize_onexit_table _configure_narrow_argv exit |
api-ms-win-crt-heap-l1-1-0.dll |
free
_callnewh _set_new_mode malloc |
api-ms-win-crt-math-l1-1-0.dll |
__setusermatherr
|
api-ms-win-crt-stdio-l1-1-0.dll |
__p__commode
_set_fmode |
api-ms-win-crt-locale-l1-1-0.dll |
_configthreadlocale
|
SHELL32.dll |
CommandLineToArgvW
|
Signature | 0xfeef04bd |
---|---|
StructVersion | 0x10000 |
FileVersion | 1.0.0.0 |
ProductVersion | 1.0.0.0 |
FileFlags | (EMPTY) |
FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
FileType |
VFT_DLL
|
Language | English - United States |
FileVersion (#2) | 1.0.0.0 |
OriginalFilename | falcon.exe |
ProductName | falcon |
ProductVersion (#2) | 1.0.0.0 |
Resource LangID | English - United States |
---|
Characteristics |
0
|
---|---|
TimeDateStamp | 2019-Dec-24 07:36:57 |
Version | 0.0 |
SizeofData | 868 |
AddressOfRawData | 0x7135a4 |
PointerToRawData | 0x711da4 |
StartAddressOfRawData | 0x140713928 |
---|---|
EndAddressOfRawData | 0x140713930 |
AddressOfIndex | 0x140720050 |
AddressOfCallbacks | 0x14001b040 |
SizeOfZeroFill | 0 |
Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
Callbacks | (EMPTY) |
Size | 0x100 |
---|---|
TimeDateStamp | 1970-Jan-01 00:00:00 |
Version | 0.0 |
GlobalFlagsClear | (EMPTY) |
GlobalFlagsSet | (EMPTY) |
CriticalSectionDefaultTimeout | 0 |
DeCommitFreeBlockThreshold | 0 |
DeCommitTotalFreeThreshold | 0 |
LockPrefixTable | 0 |
MaximumAllocationSize | 0 |
VirtualMemoryThreshold | 0 |
ProcessAffinityMask | 0 |
ProcessHeapFlags | (EMPTY) |
CSDVersion | 0 |
Reserved1 | 0 |
EditList | 0 |
SecurityCookie | 0x14071f208 |
XOR Key | 0x6a9d1638 |
---|---|
Unmarked objects | 0 |
Imports (VS2008 SP1 build 30729) | 10 |
C objects (26213) | 1 |
Imports (VS 2015/2017 runtime 26706) | 4 |
C++ objects (VS 2015/2017 runtime 26706) | 29 |
C objects (VS 2015/2017 runtime 26706) | 10 |
ASM objects (VS 2015/2017 runtime 26706) | 3 |
C++ objects (VS2017 v15.4.* compiler 25547) | 1 |
Imports (VS2017 v15.4.* compiler 25547) | 12 |
Imports (26213) | 9 |
Total imports | 528 |
C++ objects (VS2017 v15.9.7-10 compiler 27027) | 35 |
Resource objects (VS2017 v15.9.7-10 compiler 27027) | 1 |
151 | 1 |
Linker (VS2017 v15.9.7-10 compiler 27027) | 1 |