Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4a8e0fb2e6aedca101e584644c8b9e06_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4a8e0fb2e6aedca101e584644c8b9e06_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
4a8e0fb2e6aedca101e584644c8b9e06_JaffaCakes118
Size
778KB
MD5
4a8e0fb2e6aedca101e584644c8b9e06
SHA1
66b09ba83aaebb46267857bab7ad39036327b6f4
SHA256
10f26653b1dcad299d0e8b76a325188cabe897bcfb88d8b9b0996280bb168778
SHA512
43c0cce5e664c5ed364065ec5f7dba65a8cbd6cfe98444a4fdaf3baa473261c4c2ffec4f40cf45139d48bd848fe409004b31e78993a1d31f06cc704c3f0fe367
SSDEEP
12288:FqcmRDqBBd8xkdEjg1l559zi3XdbC4DcTAXxD38OgeEiplvYTrqhyJ3ZAE2rMIH:z6qB7je1XZz8CpGTWhyJPaf
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\jenkins_Trunk\workspace\10.9Patch_SourceJob\qqpcmgr_proj\Basic\Output\BinFinal\QMCommon.pdb
WSASend
ntohl
ntohs
WSCGetProviderPath
WSCEnumProtocols
WSAStartup
WSACleanup
htonl
htons
send
GetProcessMemoryInfo
GetModuleBaseNameW
EnumProcesses
GetModuleFileNameExW
EnumProcessModules
CreatePipe
GetLastError
InterlockedExchange
CreateFileA
FindFirstFileW
CopyFileW
DeleteFileW
SetFilePointer
WriteFile
InterlockedCompareExchange
SwitchToThread
FindClose
GetPrivateProfileStringA
GetPrivateProfileIntA
SetEndOfFile
CreateDirectoryA
GetSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
GetDriveTypeW
GlobalMemoryStatus
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
HeapAlloc
GetFileAttributesW
GetProcessHeap
GetFileTime
SetFileAttributesW
lstrcpynA
lstrcpynW
HeapFree
FindNextFileW
GlobalAlloc
GetPrivateProfileStringW
ExpandEnvironmentStringsW
GlobalFree
ResetEvent
OpenEventW
CreateEventW
GetCurrentProcessId
OutputDebugStringW
InterlockedIncrement
SetEvent
RemoveDirectoryW
MoveFileExW
CreateDirectoryW
OpenMutexW
GlobalLock
lstrcmpiW
GlobalUnlock
CreateMutexW
Sleep
GetTempPathW
ProcessIdToSessionId
GetTickCount
GetExitCodeProcess
GetFullPathNameW
GetTimeFormatW
GetDateFormatW
MoveFileW
ReadProcessMemory
GetThreadSelectorEntry
VirtualQueryEx
RtlCaptureContext
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
Thread32Next
Thread32First
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetWindowsDirectoryW
GetLocalTime
GetSystemDefaultLangID
lstrcmpA
LocalFree
WaitForMultipleObjects
ReleaseMutex
InitializeCriticalSectionAndSpinCount
MapViewOfFileEx
CreateTimerQueueTimer
CreateFileMappingA
OpenFileMappingA
FormatMessageA
ChangeTimerQueueTimer
LoadLibraryW
GetFileSizeEx
LocalAlloc
GetSystemWindowsDirectoryW
DebugBreak
GetBinaryTypeW
GetSystemWow64DirectoryW
GetCommandLineW
GetEnvironmentVariableW
FileTimeToLocalFileTime
SetLastError
FileTimeToSystemTime
CreateFileW
GetLongPathNameW
IsDebuggerPresent
RaiseException
TlsAlloc
TlsFree
GetQueuedCompletionStatus
TlsGetValue
TlsSetValue
PostQueuedCompletionStatus
CreateIoCompletionPort
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetPrivateProfileIntW
CreateWaitableTimerW
OpenWaitableTimerW
SetWaitableTimer
WaitForMultipleObjectsEx
GetSystemTimeAsFileTime
FlushFileBuffers
SetThreadPriority
ResumeThread
CreateThread
OpenThread
GetModuleFileNameA
OpenFileMappingW
RegisterWaitForSingleObject
UnregisterWaitEx
VirtualAlloc
SuspendThread
FlushInstructionCache
SetThreadContext
GetThreadContext
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Process32FirstW
CreateToolhelp32Snapshot
GetComputerNameW
GetSystemTime
CreateProcessW
Process32NextW
TerminateProcess
GetModuleFileNameW
Module32NextW
CloseHandle
OpenProcess
GetCurrentDirectoryW
GetSystemDirectoryW
WaitForSingleObject
Module32FirstW
WriteProcessMemory
LoadLibraryExW
IsBadWritePtr
GetCurrentThreadId
GetCurrentProcess
GetModuleHandleW
GetCurrentThread
GetVersionExW
IsBadReadPtr
VirtualProtect
GetProcAddress
TerminateThread
VirtualQuery
lstrlenW
MultiByteToWideChar
lstrlenA
ReadFile
FreeLibrary
DuplicateHandle
DeviceIoControl
SizeofResource
LoadResource
WideCharToMultiByte
FindResourceW
FindResourceExW
LockResource
DeleteTimerQueueTimer
GetFileSize
GetProcessTimes
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjects
CharLowerBuffW
BringWindowToTop
FindWindowW
CreateWindowExW
GetClassNameW
SendMessageTimeoutW
SetActiveWindow
GetDesktopWindow
EqualRect
EnumWindows
SetForegroundWindow
WindowFromPoint
EnumThreadWindows
GetSystemMetrics
IsWindowVisible
ShowWindow
IsIconic
GetParent
GetClientRect
EmptyClipboard
SetWindowTextW
ExitWindowsEx
IsWindow
OpenClipboard
FindWindowExW
SendMessageW
CloseClipboard
MessageBoxW
GetWindowThreadProcessId
GetWindowTextW
EnableWindow
SetClipboardData
GetWindowLongW
DestroyIcon
GetWindowRect
DefWindowProcW
SetWindowPos
KillTimer
PostMessageW
PostQuitMessage
TranslateMessage
UnregisterClassW
SetTimer
MsgWaitForMultipleObjectsEx
GetQueueStatus
RegisterClassExW
DestroyWindow
WaitMessage
FindWindowA
SetPropW
RemovePropW
SetCursorPos
SystemParametersInfoW
GetForegroundWindow
GetDC
UnregisterClassA
GetCursorPos
LoadBitmapW
CreateIconIndirect
ReleaseDC
LoadImageW
SetFocus
SetWindowLongW
DeleteObject
CreateCompatibleDC
DeleteDC
BitBlt
SelectObject
CreateFontIndirectW
GetStockObject
GetDeviceCaps
CreateDCW
GetObjectW
GetSaveFileNameW
GetOpenFileNameW
RegFlushKey
OpenTraceW
FlushTraceW
StartTraceW
QueryTraceW
CloseTrace
SetTraceCallback
ProcessTrace
GetTraceEnableFlags
EnableTrace
ControlTraceW
CloseServiceHandle
EnumServicesStatusW
OpenSCManagerW
LookupAccountSidW
IsValidSid
RegLoadKeyW
SetEntriesInAclW
SetNamedSecurityInfoW
RegEnumKeyW
RegOpenKeyW
OpenProcessToken
AddAccessAllowedAceEx
LookupPrivilegeValueW
AdjustTokenPrivileges
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
AddAccessAllowedAce
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
SetFileSecurityW
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegNotifyChangeKeyValue
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
RegGetKeySecurity
RegDeleteKeyW
RegOpenKeyExW
RegSetKeySecurity
RegCreateKeyExW
GetUserNameW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetFolderPathA
SHCreateDirectoryExW
ord171
ShellExecuteExW
ExtractIconExW
ExtractIconW
DuplicateIcon
CommandLineToArgvW
ShellExecuteW
SHGetPathFromIDListW
SHGetFileInfoW
CoInitialize
CoCreateGuid
CoUninitialize
CoFreeUnusedLibrariesEx
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CLSIDFromProgID
StgIsStorageFile
StgOpenStorage
CoTaskMemFree
SafeArrayAccessData
VariantInit
SafeArrayGetLBound
VariantClear
SysAllocString
SafeArrayUnaccessData
SafeArrayGetUBound
VariantChangeType
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringByteLen
_snprintf_s
??_V@YAXPAX@Z
_wfopen_s
_snwprintf_s
fread
fclose
_wsplitpath_s
wcsncpy_s
memcpy
strchr
memmove_s
strlen
isalnum
memcpy_s
_mbslwr_s
strtoul
strncpy_s
_mbsstr
_mbschr
wcsncat_s
wcstoul
_wcslwr_s
free
isspace
tolower
isprint
malloc
strncmp
swscanf_s
_wmkdir
_wstat64
_stricmp
_strnset_s
strcmp
memmove
wcsstr
_wcsnicmp
_mktime64
_wfullpath
wcscmp
wcschr
strstr
_localtime64_s
wcsncmp
??_U@YAPAXI@Z
towlower
iswdigit
calloc
_time64
_wtol
_wtoi
wcstol
_snwscanf_s
_beginthreadex
rand
_getpid
srand
_errno
_strnicmp
sprintf_s
_snwscanf
realloc
_vsnwprintf_s
_difftime64
_wmakepath_s
_endthreadex
fwrite
_i64tow_s
_strtoui64
atoi
ceil
vswprintf_s
_vscwprintf
fflush
strrchr
_vsnprintf_s
_memicmp
fopen_s
ferror
fputc
fprintf
__CxxFrameHandler3
ftell
fseek
isalpha
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
__clean_type_info_names_internal
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_purecall
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
memcmp
_localtime64
_wcsicmp
swprintf_s
memset
wcslen
wcscpy_s
wcsrchr
wcscat_s
??2@YAPAXI@Z
swscanf
??3@YAXPAX@Z
wcsftime
_except_handler3
_CxxThrowException
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?copy@?$char_traits@_W@std@@SAPA_WPA_WPB_WI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?compare@?$char_traits@_W@std@@SAHPB_W0I@Z
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?compare@?$char_traits@D@std@@SAHPBD0I@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?freeze@strstreambuf@std@@QAEX_N@Z
??1strstreambuf@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??0strstreambuf@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_W@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
PathRemoveBlanksW
PathCombineW
PathRemoveExtensionW
PathRenameExtensionW
PathUnquoteSpacesW
PathRemoveArgsW
PathIsUNCW
PathParseIconLocationW
PathFindExtensionW
StrRStrIW
SHDeleteKeyW
wnsprintfW
SHGetValueW
StrRChrW
PathIsDirectoryW
SHSetValueW
SHDeleteValueW
PathIsRelativeW
PathIsRootW
StrChrW
StrStrIW
PathAddBackslashW
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathFindFileNameW
StrRChrIW
NetApiBufferFree
NetWkstaTransportEnum
Netbios
GetIpForwardTable
RasEnumConnectionsW
UnMapAndLoad
MapAndLoad
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
HttpQueryInfoW
InternetReadFile
InternetGetConnectedState
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
AddSthToFile
AddUnShowKb
AsyncStartProcess
CQMDetect_GetHardDiskSize
ChkSthFromFile
ChkUnShowKb
CreateCQMAutorunsEnumer
CreateCQMFileFind
CreateCQMFileInfo
CreateCQMFileInfo_2
CreateCQMParseCmd
CreateCQMRegistryHandle
CreateCQMRegistryHandle_2
CreateCQMRegistryHandle_3
CreateEncryptEngine
CreateEncryptFile
CreateHttpDownload
CreateQMCmdline
CreateQMCmdline_2
CreateWin64Helper
CreateWow64FsRedrt
DestroyCQMAutorunsEnumer
DestroyCQMFileFind
DestroyCQMFileInfo
DestroyCQMParseCmd
DestroyCQMRegistryHandle
DestroyEncryptEngine
DestroyEncryptFile
DestroyHttpDownload
DestroyQMCmdline
DestroyWin64Helper
DestroyWow64FsRedrt
DllGetVersion
FinalizeAsyncFramework
GetBufFromFile
GetKeyArrayLen
GetLogDir
GetLogFilePath
GetLogMonthBegin
GetMessageLoop
GetUnShoeKbList
IsAsyncFrameworkReady
IsLogOutOfDate
Load
QMActivePopupChild
QMAddRTPAutorun
QMAllowMessageForVista
QMBeginBackgroundMode
QMBeginSmartIO
QMBrowseDir
QMBrowseDirSimple
QMBuildEveryoneSD
QMCRC32
QMCRC32_2
QMCancelNodisturbFeedBack
QMCheckDrRtpAutoRun
QMCheckFile
QMCheckFullScreenWindow
QMCheckInstanceMutex
QMCheckProcess
QMCheckSystemTimeValid
QMCleanupAllFeedBack
QMClearRTPAutorun
QMClientConfigGetModule
QMConvertPathFmt
QMCopyFilePath
QMCopyTextToClipboard
QMCreateClientSwitch
QMCreateCmdLine
QMCreateCommonConfig
QMCreateConfigFile
QMCreateDownloader
QMCreateMutex
QMCreateShortCut
QMCreateShortCut_2
QMCreateShortcutObj
QMCreateShortcutObj2
QMCreateTaskContext
QMDecryptFile
QMDelSubKey
QMDelSubKeyNormal
QMDelValue
QMDelValueNormal
QMDeleteDirWithSelf
QMDeleteFileEx
QMDeleteFolder
QMDestoryDownloader
QMDestroyCommonConfig
QMDestroyConfigFile
QMDestroyShortcutObj
QMDetectBlackLspExist
QMDetect_GetCPUInfo
QMDetect_GetDispDeviceInfo
QMDetect_GetHardDiskInfo
QMDetect_GetHardDiskSize
QMDetect_GetMacInfo
QMDetect_GetMacInfo2
QMDetect_GetMemInfo
QMDetect_GetMemInfo2
QMDirEnumFolder
QMEnableDebugPrivilege
QMEnableFileSmashContextMenu
QMEnableProcessPrivilege
QMEncryptFile
QMEndSmartIO
QMEnumLoginQQ
QMExpandPatternStringA
QMExpandPatternStringW
QMFeedBackNodisturbInfo
QMFileEnumDir
QMFileGetCommonInfo
QMFileGetDefaultIcon
QMFileGetMD5
QMFileGetSize
QMFileOpenDlg
QMFileSmartGetCommonInfo
QMFileSmartGetFilePathFromCmdLine
QMFileVerifySign
QMFinalizeNodisturbEventsPublisher
QMFinalizeTaskMgr
QMFlushDNS
QMGetAllAccessSecurityAttributes
QMGetAllAccessSecurityAttributesEx
QMGetBitmapSize
QMGetBitmapSize_2
QMGetBlackList
QMGetBufferMd5
QMGetBufferMd5A
QMGetBufferMd5W
QMGetBufferMd5_2
QMGetBuildVer
QMGetCLSIDInfo
QMGetCallStackStr
QMGetCommonQQDRDataStorePath
QMGetComputerName
QMGetCurExeVersionA
QMGetCurPathRootPath
QMGetCurTime
QMGetCurrentDirectory
QMGetCurrentProcessPath
QMGetCurrentQQPath
QMGetDPIIconSize
QMGetDateStamp
QMGetDebugMode
QMGetDefIcon
QMGetDefaultExplore
QMGetDrTempFile
QMGetDwordIp
QMGetEncrpytFileContent
QMGetFileIconIndex
QMGetFileInformation
QMGetFileInformation_2
QMGetFileMD5
QMGetFileMD5A
QMGetFileMD5A_2
QMGetFileMD5W
QMGetFileMD5W_2
QMGetFileMD5_2
QMGetFileSign
QMGetFileSingleInformation
QMGetFileSizeEx
QMGetFileTimeFlex
QMGetFileVerInfoA
QMGetFileVerInfoW
QMGetFileVersion
QMGetFolderSize
QMGetIEFullPath
QMGetIEFullPathA
QMGetIEHistoryPath
QMGetIETempPath
QMGetIcon
QMGetIconDefault
QMGetIconFromCmdLine
QMGetIconFromFile
QMGetImMacID
QMGetImMacID3
QMGetImMacID3A
QMGetImMacID3W
QMGetImMacID3_2
QMGetImMacIDA
QMGetImMacIDW
QMGetImMacID_2
QMGetInstallDir
QMGetInstallVer
QMGetInstanceType
QMGetLeakLibTimeStamp
QMGetLeaklibFirstTimeStamp
QMGetLeaklibSecondTimeStamp
QMGetLenovoSignNameA
QMGetLenovoSignNameT
QMGetLenovoSignNameW
QMGetLocalPath
QMGetMainPath
QMGetModuleDirectory
QMGetModuleFileName
QMGetMyComputerIconIndex
QMGetNeedUpdateSoftwareCountFromQQSoftMgr
QMGetNodisturbEventsPublisher
QMGetNodisturbFeedBack
QMGetNumberVersionFromStringVersion
QMGetOSVersion
QMGetOemInfo
QMGetParentProcessPath
QMGetPathFromCmdLine
QMGetPathReleativeLevel
QMGetPeVersion
QMGetPerfConfig
QMGetProcessCmdLineAndImgPath
QMGetProcessCmdLineAndImgPathA
QMGetProcessCmdLineAndImgPathA_2
QMGetProcessCmdLineAndImgPathW
QMGetProcessCmdLineAndImgPathW_2
QMGetProcessCmdLineAndImgPath_2
QMGetProcessImgPath
QMGetProcessImgPath_2
QMGetProcessName
QMGetProcessUserName
QMGetProcessorsNum
QMGetQMMasterStorePath
QMGetQMMasterUserStorePath
QMGetQQDRDataStorePath
QMGetQQDrLeakEngineVersion
QMGetQQDrRtpVersion
QMGetQQDrVersion
QMGetQQInfoFromPCMgr
QMGetQQInfoFromQQ
QMGetQQPCMgrBuildVersion
QMGetQQPCMgrDefaultFont
QMGetQQPCMgrVersionString
QMGetRealPathInWOW64
QMGetRegLspHookStatus
QMGetScreenSize
QMGetSessionMutexName
QMGetShortCut
QMGetShortCutInfo
QMGetSpecialPath
QMGetSpecialPath_2
QMGetStrIp
QMGetStreamContext
QMGetStringCharWidth
QMGetSysTempPath
QMGetSystemDirectory
QMGetSystemLevel
QMGetTTFullPath
QMGetTXSignNameA
QMGetTXSignNameT
QMGetTXSignNameW
QMGetTaskMgr
QMGetTdMacID
QMGetTdMacIDA
QMGetTdMacIDW
QMGetTdMacID_2
QMGetTimeString
QMGetTrueInstance
QMGetUserName
QMGetVersionFromModulePath
QMGetWindowsVersion
QMGlobalConfigGetModule
QMInitTaskMgr
QMIs3GNetwork
QMIsAllowNodisturb
QMIsAppInstanceExist
QMIsCompoundDoc
QMIsDirectoryExist
QMIsDisableTips
QMIsDisableTipsProcessRun
QMIsDoubleInstances
QMIsDrUpdateProcessExist
QMIsFileChangable
QMIsFileExist
QMIsFileOccupy
QMIsFileSigned
QMIsFileSmashContextMenuEnabled
QMIsFullScreen
QMIsFullScreenWnd
QMIsInstallVersionValid
QMIsInternetOK
QMIsKeyExist
QMIsMgrInstance
QMIsMiniVersion
QMIsModuleRunAsCompatibleMode
QMIsNeedLimitSpeed
QMIsNeedLimitSpeedEx
QMIsNetMonExist
QMIsNetWorkOK
QMIsNetlimitProcessRun
QMIsNotDisturbStatus
QMIsOSNeedElevate
QMIsPEFile
QMIsProcessExist
QMIsQMTrayExist
QMIsQMUpdateProcessExist
QMIsQQDoctorExist
QMIsRtpExist
QMIsSingleInstance
QMIsTrayInstance
QMIsTrayNotDisturb
QMIsTrayNotDisturbDelay
QMIsValueExist
QMIsVistaSystem
QMIsWin10System
QMIsWinFullScreen
QMIsX64System
QMLDHookReason
QMLeaveBackgroundMode
QMLoadIconMetric
QMLoadIconWithSize
QMLocateFileByCmdLine
QMLocateFileFolder
QMLocateRecycle
QMLocateRegPath
QMLocateRegPathAndValue
QMLocateRegPathAndValue_2
QMMd5HashBuffer
QMMd5ToString
QMMd5ToStringA
QMMd5ToStringW
QMModifyShortCut
QMMoveDirectory
QMOpenURL
QMPathFileExistsX64
QMPathForFileInExeDir
QMPowerOff
QMPowerOffEx
QMProcessExist
QMProcessHandler_CloseProcess
QMProcessHandler_CloseProcess2
QMProcessHandler_FindExeFilePID
QMProcessHandler_FindModuleFilePID
QMProcessHandler_StartProcess
QMProcessHandler_WaitProcessExit
QMQueryNodisturbStatus
QMRC4De
QMRC4DeFile
QMRC4En
QMRC4EnFile
QMReadConfig
QMReadFile
QMReadFileAsync
QMReadFileToBuffer
QMRebootComputer
QMRebootDelFile
QMRecurSetRegSecurity
QMRegEnumSubKeys
QMRegEnumSubKeys_2
QMRegEnumSubKeys_3
QMRegEnumValues
QMRegEnumValues_2
QMRegEnumValues_3
QMRegGetRootKeyDesc
QMRegQueryStringValue
QMRegSmartCreateKey
QMRegSmartGetRootKey
QMRegSmartGetValue
QMRegSmartOpenKey
QMRegSmartOpenKey_2
QMRegSplitRootPathSubkey
QMRegTreeCopy
QMRegTreeCopy_2
QMRegTreeDel
QMRegTreeDel_2
QMRegTreeMove
QMRegValueCopy
QMRegValueDel
QMRegValueMove
QMRegValueMove_2
QMRegisterGetModule
QMRemoveCompatibleMode
QMResetBit
QMSPGetCurrentAppInstantPreWnd
QMSPSetCurrentAppInstantWnd
QMSearchKeyWord
QMSearchTextBySoso
QMSendMsgToParent
QMSetBit
QMSetClientSize
QMSetHistoryPath
QMSetInstanceType
QMSetInternetCachePath
QMSetPerfConfig
QMSetShortCut
QMSetSpecailFolderPath
QMSetStreamContext
QMSetTrueInstance
QMStartQMUpdate
QMStartQQMaster
QMStringToMd5
QMSystemTimeToTime
QMTSCreateDir
QMTSSetFileSecurity
QMTSSetRegSecurity
QMTeaDe
QMTeaDeBufToFile
QMTeaDeFile
QMTeaDeFileToBuf
QMTeaEn
QMTeaEnBufToFile
QMTeaEnFile
QMTeaEnFileToBuf
QMTeaEnLen
QMTryHookToResuseInject
QMURLEncodeKeyWord
QMVerAndSigGetModule
QMVerifyFileSignA
QMVerifyFileSignT
QMVerifyFileSignW
QMVerifyLenovoFileSignA
QMVerifyLenovoFileSignT
QMVerifyLenovoFileSignW
QMVerifyMSCatalogA
QMVerifyMSCatalogT
QMVerifyMSCatalogW
QMVerifyTXFileSignA
QMVerifyTXFileSignT
QMVerifyTXFileSignW
QMViewFileFolderProperties
QMWow64Path2AbsolutePath
QMWriteBufferToFile
QMWriteConfig
QMZTDe
QMZTDeBufToFile
QMZTDeFile
QMZTDeFileToBuf
QMZTEn
QMZTEnBufToFile
QMZTEnFile
QMZTEnFileToBuf
QMZTEnLen
QMZlibDe
QMZlibDeBufToFile
QMZlibDeFile
QMZlibDeFileEx
QMZlibDeFileToBuf
QMZlibEn
QMZlibEnBufToFile
QMZlibEnEx
QMZlibEnFile
QMZlibEnFileEx
QMZlibEnFileToBuf
QMZlibEnLen
QM_symmetry_decrypt2
QMhex_ttol
QQConfigGetModule
Save
SetValue
SetupAsyncFramework
UpdateUninstallInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ