ofdmain.dll - Online Dependency Analysis & Download

Description

ofdmain

Authors

File size

140.0 KB

Uploaded

2025-12-04 06:13

Views

SHA-256

1d56a6ac174f4da3dbff74a5a6f06e40

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 7

??0IKWpsHostMsgHandler@@QAE@$$QAU0@@Z #1 · 0x2680

??0IKWpsHostMsgHandler@@QAE@ABU0@@Z #2 · 0x2680

??0IKWpsHostMsgHandler@@QAE@XZ #3 · 0x2690

??4IKWpsHostMsgHandler@@QAEAAU0@$$QAU0@@Z #4 · 0x3780

??4IKWpsHostMsgHandler@@QAEAAU0@ABU0@@Z #5 · 0x3780

??_7IKWpsHostMsgHandler@@6B@ #6 · 0x155ec

xmain #7 · 0x10570

Imported DLLs & functions 278

api-ms-win-crt-heap-l1-1-0.dll 3

_callnewh 0x10015368

free 0x10015370

malloc 0x1001536c

api-ms-win-crt-runtime-l1-1-0.dll 14

_cexit 0x10015398

_configure_narrow_argv 0x10015380

_crt_atexit 0x10015394

_errno 0x100153ac

_execute_onexit_table 0x10015390

_initialize_narrow_environment 0x100153a4

_initialize_onexit_table 0x10015388

_initterm 0x1001539c

_initterm_e 0x100153a0

_invalid_parameter_noinfo 0x10015378

_invalid_parameter_noinfo_noreturn 0x10015384

_register_onexit_function 0x1001538c

_seh_filter_dll 0x1001537c

terminate 0x100153a8

api-ms-win-crt-stdio-l1-1-0.dll 1

__stdio_common_vsnwprintf_s 0x100153b4

api-ms-win-crt-string-l1-1-0.dll 1

_wcsicmp 0x100153bc

kbase.dll 3

_Xu2_vxprintf 0x100153c4

?background_sta@ks_apartment@@SAPAV1@XZ 0x100153cc

?default_mta@ks_apartment@@SAPAV1@XZ 0x100153c8

KERNEL32.dll 44

CloseHandle 0x10015068

CreateEventW 0x10015018

CreateMutexW 0x10015078

CreateToolhelp32Snapshot 0x100150a0

DeleteCriticalSection 0x10015028

DisableThreadLibraryCalls 0x10015004

EnterCriticalSection 0x10015034

FreeLibrary 0x10015054

GetCurrentProcess 0x10015040

GetCurrentProcessId 0x1001507c

GetCurrentThreadId 0x1001500c

GetExitCodeProcess 0x10015080

GetLastError 0x1001506c

GetModuleFileNameW 0x1001508c

GetModuleHandleA 0x10015090

GetModuleHandleW 0x10015050

GetProcAddress 0x10015094

GetSystemInfo 0x10015060

GetSystemTimeAsFileTime 0x10015008

InitializeCriticalSectionAndSpinCount 0x1001502c

InitializeSListHead 0x10015000

IsDebuggerPresent 0x10015014

IsProcessorFeaturePresent 0x10015038

LeaveCriticalSection 0x10015030

LoadLibraryExA 0x1001504c

MultiByteToWideChar 0x10015098

OpenProcess 0x10015084

OutputDebugStringW 0x100150ac

Process32FirstW 0x100150a4

Process32NextW 0x100150a8

QueryPerformanceCounter 0x10015010

RaiseException 0x10015064

ReadProcessMemory 0x10015088

ReleaseMutex 0x10015070

ResetEvent 0x10015020

SetEvent 0x10015024

SetUnhandledExceptionFilter 0x10015044

TerminateProcess 0x1001503c

UnhandledExceptionFilter 0x10015048

VirtualProtect 0x1001505c

VirtualQuery 0x10015058

WaitForSingleObject 0x10015074

WaitForSingleObjectEx 0x1001501c

WideCharToMultiByte 0x1001509c

krt.dll 10

??0KUWPCommonSettings@krt@@QAE@XZ 0x100153f4

??1KUWPCommonSettings@krt@@UAE@XZ 0x100153f8

?frameworks@dirs@krt@@YA?AVQString@kso_qt@@ABV34@PAX@Z 0x100153d4

?infoCollectSvr@serverinfo@krt@@YA?AVQString@kso_qt@@XZ 0x100153d8

?isDisableGlobalInfocollect@product@krt@@YA_N_N@Z 0x100153e8

?isEnabled@infocollect@krt@@YA_NW4EngineType@12@@Z 0x100153e0

?isPromeShelllessMode@product@krt@@YA_N_N@Z 0x100153e4

?language@i18n@krt@@YA?AVQString@kso_qt@@W4LangFormat@12@_N@Z 0x100153dc

?support@kcmc@krt@@YA_NPBD@Z 0x100153ec

?version@info@krt@@YA?AVQString@kso_qt@@XZ 0x100153f0

kso.dll 14

_kso_CreateRegistry 0x10015408

_kso_GetCollectDetail 0x10015424

_kso_GetExceptExecGuard 0x10015428

_kso_GetUserInformation 0x10015420

_kso_RegQueryValue 0x10015410

_kso_RegQueryValueI 0x10015418

_kso_RegSetValueI 0x1001541c

?CleanWhenExit@KExceptExitOpChecker@@QAE_NW4APPTYPE@1@@Z 0x10015430

?getInstance@KExceptExitOpChecker@@SAAAV1@XZ 0x1001542c

AddKeyValueSS 0x10015434

CloseDataContentHandle 0x10015414

CreateDataContent 0x1001540c

InitUseErrorReport 0x10015404

Serialize_S1 0x10015400

ksolite.dll 14

??0KCoreApplication@@QAE@AAHPAPADABVQString@kso_qt@@22_NPAUQPlatformIntegrationConfig@2@@Z 0x10015470

??0KTask@ksolite@@QAE@V?$function@$$A6AXXZ@std@@@Z 0x10015444

??1KCoreApplication@@UAE@XZ 0x10015440

??1KTask@ksolite@@UAE@XZ 0x1001546c

?addThread@KThreadPool@ksolite@@AAEXXZ 0x1001543c

?canAutoDelete@KRunnable@ksolite@@UAE_NXZ 0x10015448

?globalInstance@KThreadPool@ksolite@@SAPAV12@XZ 0x10015468

?instance@KDcInfoC@@SAPAV1@XZ 0x10015460

?isFirebasePlatform@KDcInfoCDetail@@YA_NXZ 0x1001545c

?metaObject@KTask@ksolite@@UBEPBUQMetaObject@kso_qt@@XZ 0x1001544c

?postGeneralEvent@KDcInfoC@@QAEXABVQString@kso_qt@@ABV?$QHash@VQString@kso_qt@@V12@@3@IIW4KDcProbability@@_N@Z 0x10015464

?qt_metacall@KTask@ksolite@@UAEHW4Call@QMetaObject@kso_qt@@HPAPAX@Z 0x10015450

?qt_metacast@KTask@ksolite@@UAEPAXPBD@Z 0x10015454

?run@KTask@ksolite@@EAEXXZ 0x10015458

libcurl.dll 4

curl_easy_cleanup 0x10015484

curl_easy_init 0x10015480

curl_easy_perform 0x10015478

curl_easy_setopt 0x1001547c

MSVCP140.dll 46

_Cnd_broadcast 0x100150dc

_Cnd_destroy_in_situ 0x100150e4

_Cnd_init_in_situ 0x100150e8

_Cnd_register_at_thread_exit 0x100150d8

_Cnd_unregister_at_thread_exit 0x100150d4

_Cnd_wait 0x100150e0

_Mtx_destroy_in_situ 0x100150f4

_Mtx_init_in_situ 0x100150f8

_Mtx_lock 0x100150f0

_Mtx_unlock 0x100150ec

?__ExceptionPtrAssign@@YAXPAXPBX@Z 0x10015114

?__ExceptionPtrCopy@@YAXPAXPBX@Z 0x10015118

?__ExceptionPtrCopyException@@YAXPAXPBX1@Z 0x10015108

?__ExceptionPtrCreate@@YAXPAX@Z 0x10015120

?__ExceptionPtrCurrentException@@YAXPAX@Z 0x1001510c

?__ExceptionPtrDestroy@@YAXPAX@Z 0x1001511c

?__ExceptionPtrToBool@@YA_NPBX@Z 0x10015110

?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z 0x10015138

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ 0x10015144

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ 0x10015128

?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z 0x100150c0

?_Syserror_map@std@@YAPBDH@Z 0x100150c8

?_Throw_C_error@std@@YAXH@Z 0x100150d0

?_Throw_future_error@std@@YAXABVerror_code@1@@Z 0x100150c4

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ 0x10015148

?_Xbad_alloc@std@@YAXXZ 0x10015104

?_Xbad_function_call@std@@YAXXZ 0x100150cc

?_Xlength_error@std@@YAXPBD@Z 0x10015100

?_Xout_of_range@std@@YAXPBD@Z 0x100150fc

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ 0x10015134

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z 0x1001513c

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ 0x100150bc

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x1001512c

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10015140

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10015168

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z 0x1001514c

?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ 0x100150b4

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z 0x10015150

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z 0x10015130

?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ 0x10015124

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ 0x10015154

?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ 0x100150b8

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ 0x10015158

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ 0x1001515c

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z 0x10015160

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z 0x10015164

Qt5CoreKso.dll 109

??0QByteArray@kso_qt@@QAE@PBDH@Z 0x10015300

??0QByteArray@kso_qt@@QAE@XZ 0x10015304

??0QChar@kso_qt@@QAE@H@Z 0x10015310

??0QChar@kso_qt@@QAE@UQLatin1Char@1@@Z 0x1001530c

??0QFile@kso_qt@@QAE@ABVQString@1@@Z 0x100151fc

??0QLibrary@kso_qt@@QAE@ABVQString@1@PAVQObject@1@@Z 0x10015210

??0QMessageLogger@kso_qt@@QAE@PBDH0@Z 0x10015318

??0QSettings@kso_qt@@QAE@W4Format@01@W4Scope@01@ABVQString@1@2PAVQObject@1@@Z 0x10015224

??0QString@kso_qt@@QAE@$$QAV01@@Z 0x100152d8

??0QString@kso_qt@@QAE@ABV01@@Z 0x100152e4

??0QString@kso_qt@@QAE@PBD@Z 0x10015280

??0QString@kso_qt@@QAE@VQLatin1String@1@@Z 0x100152e8

??0QString@kso_qt@@QAE@XZ 0x100152ec

??0QTextStream@kso_qt@@QAE@PAVQIODevice@1@@Z 0x100151d8

??0QVariant@kso_qt@@QAE@H@Z 0x100151b0

??0QVariant@kso_qt@@QAE@XZ 0x100151a8

??1QByteArray@kso_qt@@QAE@XZ 0x100152fc

??1QDateTime@kso_qt@@QAE@XZ 0x100151c8

??1QDebug@kso_qt@@QAE@XZ 0x100151e8

??1QFile@kso_qt@@UAE@XZ 0x10015200

??1QLibrary@kso_qt@@UAE@XZ 0x10015214

??1QMutexLocker@kso_qt@@QAE@XZ 0x1001520c

??1QSettings@kso_qt@@UAE@XZ 0x10015228

??1QString@kso_qt@@QAE@XZ 0x100152e0

??1QTextStream@kso_qt@@UAE@XZ 0x100151dc

??1QVariant@kso_qt@@QAE@XZ 0x100151ac

??4QString@kso_qt@@QAEAAV01@$$QAV01@@Z 0x100152d4

??4QString@kso_qt@@QAEAAV01@ABV01@@Z 0x100152dc

??4QString@kso_qt@@QAEAAV01@PBD@Z 0x1001527c

??6QDebug@kso_qt@@QAEAAV01@H@Z 0x100151ec

??6QTextStream@kso_qt@@QAEAAV01@ABVQString@1@@Z 0x100151e0

??6QTextStream@kso_qt@@QAEAAV01@PBD@Z 0x100151e4

??8kso_qt@@YA_NABVQString@0@0@Z 0x10015284

??BQByteArray@kso_qt@@QBEPBDXZ 0x100152f8

??YQString@kso_qt@@QAEAAV01@VQChar@1@@Z 0x100152b4

?allKeys@QSettings@kso_qt@@QBE?AVQStringList@2@XZ 0x10015230

?allocateNode@QHashData@kso_qt@@QAEPAXH@Z 0x10015194

?append@QByteArray@kso_qt@@QAEAAV12@D@Z 0x100152f0

?append@QListData@kso_qt@@QAEPAPAXXZ 0x10015178

?append@QString@kso_qt@@QAEAAV12@ABV12@@Z 0x100152b8

?append@QString@kso_qt@@QAEAAV12@PBD@Z 0x10015278

?arg@QString@kso_qt@@QBE?AV12@ABV12@HVQChar@2@@Z 0x100152cc

?arg@QString@kso_qt@@QBE?AV12@HHHVQChar@2@@Z 0x100152d0

?at@QListData@kso_qt@@QBEPAPAXH@Z 0x10015184

?begin@QListData@kso_qt@@QBEPAPAXXZ 0x10015320

?beginGroup@QSettings@kso_qt@@QAEXABVQString@2@@Z 0x1001522c

?childEvent@QObject@kso_qt@@MAEXPAVQChildEvent@2@@Z 0x10015244

?close@QFileDevice@kso_qt@@UAEXXZ 0x100151f4

?connectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z 0x10015248

?constData@QByteArray@kso_qt@@QBEPBDXZ 0x100152f4

?contains@QSettings@kso_qt@@QBE_NABVQString@2@@Z 0x1001523c

?currentDate@QDate@kso_qt@@SA?AV12@XZ 0x100151c4

?currentDateTime@QDateTime@kso_qt@@SA?AV12@XZ 0x100151d0

?currentSecsSinceEpoch@QDateTime@kso_qt@@SA_JXZ 0x100151d4

?customEvent@QObject@kso_qt@@MAEXPAVQEvent@2@@Z 0x1001524c

?debug@QMessageLogger@kso_qt@@QBE?AVQDebug@2@XZ 0x10015314

?detach_grow@QListData@kso_qt@@QAEPAUData@12@PAHH@Z 0x1001531c

?detach_helper@QHashData@kso_qt@@QAEPAU12@P6AXPAUNode@12@PAX@ZP6AX0@ZHH@Z 0x10015198

?detach@QListData@kso_qt@@QAEPAUData@12@H@Z 0x10015188

?disconnectNotify@QObject@kso_qt@@MAEXABVQMetaMethod@2@@Z 0x10015250

?dispose@QListData@kso_qt@@QAEXXZ 0x10015170

?dispose@QListData@kso_qt@@SAXPAUData@12@@Z 0x10015174

?end@QListData@kso_qt@@QBEPAPAXXZ 0x1001518c

?errorString@QLibrary@kso_qt@@QBE?AVQString@2@XZ 0x10015220

?event@QObject@kso_qt@@UAE_NPAVQEvent@2@@Z 0x10015254

?eventFilter@QObject@kso_qt@@UAE_NPAV12@PAVQEvent@2@@Z 0x10015258

?flush@QFileDevice@kso_qt@@QAE_NXZ 0x100151f8

?free_helper@QHashData@kso_qt@@QAEXP6AXPAUNode@12@@Z@Z 0x100151a0

?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z 0x1001526c

?fromLatin1@QChar@kso_qt@@SA?AV12@D@Z 0x10015308

?fromLatin1@QString@kso_qt@@SA?AV12@PBDH@Z 0x100152a4

?fromStdWString@QString@kso_qt@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z 0x10015274

?fromUtf16@QString@kso_qt@@SA?AV12@PBGH@Z 0x1001529c

?fromUtf8@QString@kso_qt@@SA?AV12@PBDH@Z 0x100152a0

?fromWCharArray@QString@kso_qt@@SA?AV12@PB_WH@Z 0x10015298

?indexOf@QString@kso_qt@@QBEHABV12@HW4CaseSensitivity@Qt@2@@Z 0x100152c8

?isEmpty@QListData@kso_qt@@QBE_NXZ 0x10015180

?load@QLibrary@kso_qt@@QAE_NXZ 0x1001521c

?lock@QMutex@kso_qt@@QAEXXZ 0x10015208

?mid@QString@kso_qt@@QBE?AV12@HH@Z 0x100152c4

?nextNode@QHashData@kso_qt@@SAPAUNode@12@PAU312@@Z 0x100151a4

?number@QString@kso_qt@@SA?AV12@_JH@Z 0x10015288

?number@QString@kso_qt@@SA?AV12@HH@Z 0x1001528c

?open@QFile@kso_qt@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@kso_qt@@@2@@Z 0x10015204

?qHash@kso_qt@@YAIABVQString@1@I@Z 0x10015268

?QStringList_join@QtPrivate@kso_qt@@YA?AVQString@2@PBVQStringList@2@PBVQChar@2@H@Z 0x10015190

?rehash@QHashData@kso_qt@@QAEXH@Z 0x1001519c

?remove@QSettings@kso_qt@@QAEXABVQString@2@@Z 0x10015238

?resolve@QLibrary@kso_qt@@QAEP6AXXZPBD@Z 0x10015218

?setApplicationName@QCoreApplication@kso_qt@@SAXABVQString@2@@Z 0x100151f0

?shared_null@QHashData@kso_qt@@2U12@B 0x10015264

?shared_null@QListData@kso_qt@@2UData@12@B 0x10015260

?size@QListData@kso_qt@@QBEHXZ 0x1001517c

?split@QString@kso_qt@@QBE?AVQStringList@2@ABV12@W4SplitBehavior@12@W4CaseSensitivity@Qt@2@@Z 0x100152b0

?split@QString@kso_qt@@QBE?AVQStringList@2@VQChar@2@W4SplitBehavior@12@W4CaseSensitivity@Qt@2@@Z 0x100152ac

?startsWith@QString@kso_qt@@QBE_NABV12@W4CaseSensitivity@Qt@2@@Z 0x100152c0

?startsWith@QString@kso_qt@@QBE_NVQLatin1String@2@W4CaseSensitivity@Qt@2@@Z 0x100152bc

?timerEvent@QObject@kso_qt@@MAEXPAVQTimerEvent@2@@Z 0x1001525c

?toInt@QString@kso_qt@@QBEHPA_NH@Z 0x10015294

?toInt@QVariant@kso_qt@@QBEHPA_N@Z 0x100151b4

?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ 0x10015270

?toString@QVariant@kso_qt@@QBE?AVQString@2@XZ 0x100151bc

?toStringEx@QDate@kso_qt@@QBE?AVQString@2@ABV32@@Z 0x100151c0

?toStringEx@QDateTime@kso_qt@@QBE?AVQString@2@ABV32@@Z 0x100151cc

?toUInt@QVariant@kso_qt@@QBEIPA_N@Z 0x100151b8

?toULong@QString@kso_qt@@QBEKPA_NH@Z 0x10015290

?utf16@QString@kso_qt@@QBEPBGXZ 0x100152a8

?value@QSettings@kso_qt@@QBE?AVQVariant@2@ABVQString@2@ABV32@@Z 0x10015234

?wakeOne@QWaitCondition@kso_qt@@QAEXXZ 0x10015240

VCRUNTIME140.dll 15

__current_exception 0x10015328

__current_exception_context 0x10015360

__CxxFrameHandler3 0x10015338

__std_exception_copy 0x10015344

__std_exception_destroy 0x10015340

__std_terminate 0x10015350

__std_type_info_destroy_list 0x1001535c

_CxxThrowException 0x1001533c

_except_handler4_common 0x10015358

_purecall 0x10015354

memcpy 0x10015334

memmove 0x10015330

memset 0x1001532c

strstr 0x1001534c

wcsrchr 0x10015348