Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
FoxmailSetup_7.2.25.306.exe
Resource
win10v2004-20240802-en
Target
FoxmailSetup_7.2.25.306.exe
Size
121.1MB
MD5
3b35027c36cbb658249aebc2e78827b1
SHA1
f8284c9d051120e369ee533b9d28b13b5b27a998
SHA256
4f4498590e33731e790ec9e9c667cb49727047e28a158f72e4495dfcf9a4b770
SHA512
0bdc840b57ee4286ced3cd427be3ab5ceaea4f278160d5c74e432585c0acc1d4590d0740accf71576da8fa13053e1e4300fc273e0ad6032c13478c17435ae2a1
SSDEEP
3145728:l/cbcWW53JZJ4TXX5sf7S6lYyu6Fg4mEwxG1h4T+oZ5dxny:lPZwuS9TTG1hfou
Checks for missing Authenticode signature.
resource |
---|
unpack001/$PLUGINSDIR/InstallOptions.dll |
unpack001/$PLUGINSDIR/QQDownHelper.dll |
unpack001/$PLUGINSDIR/nsExec.dll |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
AddEveryoneACL
CloseFoxmail
CloseFoxmailExt
ExtractFilePath
FindFoxmailInstance
FindFoxmailInstanceByName
FixDataError
FoxExec
FoxRegDll
GetExeFileVersion
GetFoxDefInstPath
GetOSLang
GetProductVersion
GetSystemDrive
GetUserDataPath
GetVersion
IsOldFoxmailPath
IsSystemPath
IsSystemVista
RemoveErrorAddrData
StrPos
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\Foxmail\rdm_Package\FoxmailSetupSource\InstallHelper\Release\InstallHelper.pdb
GetModuleBaseNameW
K32EnumProcessModules
EnterCriticalSection
lstrcpynW
LeaveCriticalSection
GetSystemDirectoryW
GlobalAlloc
WriteFile
GetModuleHandleExW
CreateNamedPipeW
InitializeCriticalSection
GetCurrentThreadId
UnmapViewOfFile
DisconnectNamedPipe
OutputDebugStringW
GetLocalTime
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
ConnectNamedPipe
ReadFile
IsBadWritePtr
GetStdHandle
CreatePipe
CreateProcessW
IsBadReadPtr
GetLogicalDriveStringsW
lstrcmpiW
lstrcmpW
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetCPInfo
FreeLibrary
LocalFree
FindResourceW
LoadResource
FindResourceExW
WriteConsoleW
SetEndOfFile
ReadConsoleW
SetStdHandle
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
GetModuleFileNameW
ExitProcess
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetStringTypeW
LCMapStringEx
EncodePointer
IsDebuggerPresent
GlobalFree
Process32FirstW
LockResource
Process32NextW
CreateToolhelp32Snapshot
InitializeCriticalSectionEx
K32GetModuleFileNameExW
WaitForMultipleObjects
TerminateProcess
GetLongPathNameW
SizeofResource
MultiByteToWideChar
CreateFileW
DeviceIoControl
ConvertThreadToFiber
GetModuleHandleW
GetCurrentProcessId
GetProcAddress
CreateThread
CloseHandle
TerminateThread
SetEvent
CreateEventW
OpenProcess
lstrcpyW
DuplicateHandle
GetVersionExW
WaitForSingleObject
DeleteFiber
GetCurrentProcess
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
GetParent
DialogBoxParamW
FillRect
GetDesktopWindow
GetDlgItem
GetClientRect
BringWindowToTop
MapWindowPoints
GetMonitorInfoW
IsWindow
GetShellWindow
SetWindowTextW
EndDialog
SendMessageW
MonitorFromWindow
SetWindowPos
GetWindowRect
GetWindow
GetWindowThreadProcessId
GetWindowLongW
wsprintfW
SetFocus
MoveWindow
DestroyWindow
PostMessageW
PostThreadMessageW
InvalidateRect
SetWindowLongW
TrackMouseEvent
ShowWindow
CreateWindowExW
CallWindowProcW
DefWindowProcW
EnableWindow
GetFocus
SetWindowRgn
CallNextHookEx
GetSystemMetrics
UnhookWindowsHookEx
LoadCursorW
EnumThreadWindows
SetWindowsHookExW
IsZoomed
GetAncestor
DrawTextW
UpdateLayeredWindow
GetDC
IsWindowVisible
MessageBoxW
ScreenToClient
SetTimer
ClientToScreen
GetDlgItemTextW
GetClassNameW
GetWindowDC
SetCursor
KillTimer
SetScrollPos
PtInRect
IsIconic
ReleaseDC
BeginPaint
EndPaint
GetWindowTextW
TextOutW
Rectangle
ExtSelectClipRgn
SetDCPenColor
SetTextColor
GetTextMetricsW
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
DeleteObject
DeleteDC
GetStockObject
CreateFontW
SetStretchBltMode
SetBkMode
GetStretchBltMode
CreateRoundRectRgn
CreatePatternBrush
CreateRectRgnIndirect
RegOpenKeyExA
DuplicateTokenEx
RegCloseKey
RegQueryValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
ShellExecuteExW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
CommandLineToArgvW
ShellExecuteW
CoCreateInstance
CoUninitialize
CLSIDFromProgID
OleRun
CoInitializeEx
CoCreateGuid
CoInitialize
GetErrorInfo
SysAllocString
SysFreeString
PathFileExistsW
StrStrIW
AlphaBlend
socket
closesocket
WSACleanup
htonl
htons
gethostbyname
WSAStartup
sendto
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GdipGetImageWidth
GdipCreateFromHDC
GdipDrawImageRectRectI
GdiplusShutdown
GdiplusStartup
GdipFree
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipCloneImage
GdipGetImageHeight
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
Netbios
NetApiBufferFree
NetWkstaTransportEnum
AddRule
CheckClickFastInstall
CheckFileLocked
CheckInstallType
CreateCustomPage
CreateFinishPage
CreateInstallPage
CreateWelcomePage
DestroyWnd
DirVerify
GentlyKillQQMusic
GetCheck
GetFileVersion
GetGUID
GetNetCardID
GetOSVersionStringInfo
GetParentProcessName
InitInstallDir
InitLangName
InitSkin
InitUpdateOrFastInstall
IsQQMusicRunning
KillProcessbyPath
Log
MoveWindowRect
NeedRunAfterInstall
RemoveRule
Report
ReportInstallProgress
RunAppAsUser
SetCheck
SetDirectoryAndCheckDrive
SetDirectoryText
SetFocusWnd
UIUpdateInstallProgress
UnInitSkin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiW
GetModuleHandleW
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcatW
WritePrivateProfileStringW
lstrcpynW
lstrlenW
lstrcpyW
GlobalFree
GlobalAlloc
OpenClipboard
DestroyIcon
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
SetWindowLongW
GetClientRect
SetWindowRgn
LoadIconW
LoadImageW
CreateWindowExW
MapDialogRect
GetClipboardData
GetWindowRect
CreateDialogParamW
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
SetCursor
DrawTextW
GetWindowLongW
DrawFocusRect
CallWindowProcW
PostMessageW
wsprintfW
CharNextW
MessageBoxW
CloseClipboard
GetDlgCtrlID
MapWindowPoints
SetWindowPos
PtInRect
GetWindowTextW
SetWindowTextW
SendMessageW
DestroyWindow
SelectObject
CreateRectRgn
GetObjectW
CombineRgn
DeleteObject
CreateCompatibleDC
GetDIBits
SetTextColor
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHGetDesktopFolder
GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW
CoTaskMemFree
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WTSFreeMemory
WTSQuerySessionInformationA
htonl
ntohl
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord5731
ord561
ord815
ord858
ord4129
ord2818
ord2764
ord4202
ord6648
ord5683
ord668
ord2781
ord2770
ord939
ord941
ord356
ord4277
ord940
ord535
ord922
ord6663
ord5710
ord6282
ord6283
ord4278
ord1255
ord1253
ord2512
ord2554
ord4486
ord6375
ord4274
ord2740
ord2801
ord1570
ord1197
ord6141
ord5859
ord713
ord414
ord3662
ord5821
ord882
ord879
ord3663
ord6571
ord269
ord826
ord600
ord1871
ord823
ord860
ord540
ord926
ord800
ord537
ord924
ord2915
ord5572
ord825
ord2864
ord326
ord2086
ord1768
ord6215
ord4123
ord2642
ord2446
ord641
ord6467
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1116
ord3738
ord1578
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
_stat
_access
time
srand
strcpy
strcat
strcmp
atoi
strstr
sscanf
strncpy
_splitpath
_mbsnbcat
_local_unwind2
_except_handler3
_stricmp
strlen
_mbsicmp
memset
memcpy
_mbscmp
_EH_prolog
__CxxFrameHandler
__dllonexit
GetVersionExA
LoadLibraryA
GetProcAddress
GetProcessHeap
HeapFree
HeapAlloc
OpenProcess
CloseHandle
FreeLibrary
lstrlenW
WideCharToMultiByte
lstrlenA
GetLastError
GetTickCount
Sleep
GetEnvironmentVariableA
GlobalFree
lstrcpyA
ProcessIdToSessionId
LocalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
TerminateProcess
WaitForSingleObject
LocalAlloc
GetCurrentProcessId
GetModuleHandleA
FindClose
FindNextFileA
MoveFileExA
FindFirstFileA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
CreateFileA
CopyFileA
MultiByteToWideChar
GetLogicalDriveStringsA
GetDiskFreeSpaceExA
GetDesktopWindow
SetActiveWindow
GetActiveWindow
RedrawWindow
FindWindowA
IsWindow
RegisterWindowMessageA
GetWindowThreadProcessId
PostMessageA
EnumWindows
SendMessageA
wsprintfA
EnableWindow
PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowTextA
SendMessageTimeoutA
GetLastActivePopup
IsWindowEnabled
RegDeleteValueA
GetUserNameA
LookupAccountNameA
ConvertSidToStringSidA
RegCreateKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
ShellExecuteA
SHGetSpecialFolderPathA
CoInitializeEx
CoUninitialize
CoCreateInstance
StringFromCLSID
CoTaskMemFree
CLSIDFromString
SysFreeString
SysAllocString
SysStringLen
wnsprintfA
SHDeleteValueA
SHDeleteKeyA
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JW4seekdir@ios_base@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
AddBTSetting
CanFileBeDeleted
CloseFoxmailInstance
CloseQQDownUpdateInstance
CopyDir
DefaultCLSIDMinusOne
DeleteDirectoryWithFile
DeleteHKCUKey
DeleteHKCUValue
ExtractFilePath
FindFoxmailInstance
FindProcessInstance
GetAppDataOwnDir
GetFoxDefInstPath
GetParentProcessName
IsDefaultTools
IsSystemVista
KillProcessInstance
MoveDirNoOverwriteUntilReboot
MoveFileDelayUntilReboot
MoveFileNoOverwriteUntilReboot
OpenFirewall
OpenUrlUseDefaultExplore
PostMutualUpdateMsg
QQCopyFile
ReadHKCUDWORD
ReadHKCUString
ReadVersionByFile
RecoverDefaultTools
RemoveFirewall
SetAsDefaultTools
ShowUpdatingInfo
TranferOldSetting
WaitFileBeDeleted
WriteHKCUDWORD
WriteHKCUString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpyW
MultiByteToWideChar
lstrlenA
lstrcmpiW
lstrlenW
ExitProcess
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
lstrcpynW
GetCommandLineW
Sleep
TerminateProcess
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
GetModuleHandleW
GetTickCount
GetStartupInfoW
CreatePipe
GetVersionExW
GlobalLock
DeleteFileW
lstrcatW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
CopyFileW
GetTempFileNameW
GlobalFree
GlobalAlloc
GetModuleFileNameW
GetProcAddress
PeekNamedPipe
GetCurrentProcess
CharPrevW
CharNextW
SendMessageW
FindWindowExW
wsprintfW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
Exec
ExecToLog
ExecToStack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
BeginGetUserStatusIcon
DoAction
EndGetUserStatusIcon
FreeUserInfo
GetActionCount
GetActionName
GetOneUserStatusIcon
GetServiceName
GetUserInfo
GetUserStatus
GetUserStatusIcon
IsServiceLogin
IsValidUser
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ