Trojan.Generic.14941952_3e3585771d
Trojan.Generic.14941952 (B) (Emsisoft), Trojan.Generic.14941952 (AdAware), Trojan.Win32.FlyStudio.FD, GenericEmailWorm.YR, GenericInjector.YR, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, EmailWorm
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
| Requires JavaScript enabled! |
|---|
MD5: 3e3585771d9064ef8987f4e3a2b75415
SHA1: 59d8a87b7a9d4710d8b39ce0a8ddba84a26b8812
SHA256: 11785920a20a619d4630d43bd160a34d4531363a1c19217d37a6821212821423
SSDeep: 98304:/XzACQ0OvJg9bCGp6FYskEhizIuAYV6xh0TU8CjX:IJi6 skCUAYV6xh0s
Size: 5066752 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MicrosoftVisualC50, MicrosoftVisualC, MicrosoftVisualCv50v60MFC, Armadillov171, UPolyXv05_v6
Company: no certificate found
Created at: 2015-07-17 02:07:43
Analyzed on: WindowsXP SP3 32-bit
Summary:
Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Payload
| Behaviour | Description |
|---|---|
| EmailWorm | Worm can send e-mails. |
Process activity
The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):
%original file name%.exe:1660
Mutexes
The following mutexes were created/opened:
No objects were found.
File activity
The process %original file name%.exe:1660 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9FHLABP4\desktop.ini (67 bytes)
C:\jedata.dll (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GF66CSMA\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\FGQUCZRW\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\92MRTWP4\desktop.ini (67 bytes)
Registry activity
The process %original file name%.exe:1660 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "78 71 AA 0C 7E 60 A8 5F AD D6 F8 16 04 FE 27 54"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Microsoft\Multimedia\DrawDib]
"vga.drv 1276x846x32(BGR 0)" = "31,31,31,31"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
Dropped PE files
| MD5 | File path |
|---|---|
| 114054313070472cd1a6d7d28f7c5002 | c:\jedata.dll |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
VersionInfo
Company Name:
Product Name: ????????V3.0?
Product Version: 3.0.2013.8
Legal Copyright: ?????? ????????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 3.0.2013.8
File Description: ?????
Comments: ??????????(http://www.eyuyan.com)
Language: Chinese (Simplified, PRC)
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 635826 | 638976 | 4.60735 | ce4f66b558684b92ab116a3fa95b532b |
| .rdata | 643072 | 3740020 | 3743744 | 4.75028 | a5feb24c14072923cf08112f6d6b1d62 |
| .data | 4386816 | 386443 | 73728 | 3.31264 | d05f8e86e72e68746a19999e82cefdd0 |
| .vmp0 | 4775936 | 581579 | 581632 | 5.49422 | 62e2c5fa26b292a7c26ab29446951e62 |
| .rsrc | 5357568 | 24280 | 24576 | 3.56771 | a82b2cd1f442a05151b1cad28c980b55 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
URLs
| URL | IP |
|---|---|
| hxxp://web.w1872.vhostgo.com/user/piaoyh.asp | |
| hxxp://www.aimeili2014.com/user/piaoyh.asp |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
ET POLICY Unsupported/Fake Windows NT Version 5.0
Traffic
POST /user/piaoyh.asp HTTP/1.1
Accept: */*
Accept-Language: en-us
Referer: hXXp://VVV.aimeili2014.com:80/user/piaoyh.asp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Content-Type: application/x-www-form-urlencoded
accept-languge: zh-CN
Accept-Encoding: gzip, deflate
Host: VVV.aimeili2014.com
Content-Length: 14
Connection: Keep-Alive
Cache-Control: no-cache
p=101E116E109E
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/8.0
X-Powered-By: ASP.NET
Date: Sun, 06 Sep 2015 21:07:42 GMT
Content-Length: 1163<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "hXXp://ww
w.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="hXXp://
VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content
-Type" content="text/html; charset=gb2312"/>..<title>404 - ..
................</title>..<style type="text/css">..<!--
..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica,
sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} .
.h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0
;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;
} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family
:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#55
5555;}..#content{margin:0 0 0 2%;position:relative;}...content-contain
er{background:#FFF;width:96%;margin-top:8px;padding:10px;position:rela
tive;}..-->..</style>..</head>..<body>..<div i
d="header"><h1>..........</h1></div>..<div id=
"content">.. <div class="content-container"><fieldset>.
. <h2>404 - ..................</h2>.. <h3>........
..............................................</h3>.. </field
set></div>..</div>..</body>..</html>..HTTP/
1.1 404 Not Found..Content-Type: text/html..Server: Microsoft-IIS/8.0.
.X-Powered-By: ASP.NET..Date: Sun, 06 Sep 2015 21:07:42 GMT..Content-L
ength: 1163..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Stric<<< skipped >>>
The Trojan connects to the servers at the folowing location(s):
.text
`.rdata
@.data
.vmp0
`.rsrc
.qNQJ
.RQN}"
C;.jl
.VX0A
zctK%x
t$(SSh
|$D.tm
~%UVW
u.hH4
u$SShe
kernel32.dll
shlwapi.dll
user32.dll
ntdll.dll
gdi32.dll
wininet.dll
CreateWindowStationA
CloseWindowStation
EnumWindows
{A068799B-7551-46b9-8CA8-EEF8357AFEA4}MSXML2.XMLHTTP
Microsoft.XMLHTTP
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
application/x-www-form-urlencoded
hXXp://
\jedata.dll
.rsrc
%S4WD
hg%fpM
S.Ac9SR
0.I%3s
,wAe.kI
aiUy'4xu
%c*@j
.eH'y
{&%U)lj%4U
xe%CNs
9F.cLe
hJK.ZH
O.qt0
KERNEL32.DLL
COMCTL32.dll
GDI32.dll
MSIMG32.dll
MSVCRT.dll
MSVFW32.dll
USER32.dll
SkinH_EL.dll
\SkinH_EL.dll
20140126
VVV.uukle.com
klekle.cc
YY.exe
config.ini
_14.!$6
Z8.PdR1
r%fP=
Q.RR )u
fs.xn
'g.Am
..gf`m
d;.NPz
.GX;G875
^8l.zE
.Nx?3
10000008
user/piaofh.asp
user/plyzxl.asp
user/piaoyh.asp
2013-01-01 08:00:00
@.reloc
kernel32.DLL
MsgWaitForMultipleObjects
GetAsyncKeyState
{E5000198-4471-40e2-92BC-D0BA075BDBB2}DNF.exe
0000000
.idata
.edata
P.vmp0
`.vmp1
.reloc
P.rsrc
version.dll
shell32.dll
1e.ro4A
oleaut32.dll
H0.gW
comctl32.dll
advapi32.dll
d.jF/"
r#'%C
6.Xdp
g|$^.Cn
>.bM8
>Z.Ye
w4R`$p%s*
f.zo~L^
wsock32.dll
Ë.L@
l.sQ{c-t{.FFb#I".wM
e.ENZ
xip.tu
@>.vO
%FX2Fsi
qKT.jLka
3.LD7
Uq
G,.gd
<.cFF=j
&8.XMj
$~O.Ba
)].Wd
/_{M%UQ%s6|
lVfeVg
!%uO
mh.ud
m%Csn%
kq84.QaI
)f%fg
.SuDYw
K)`p.frC
*%s!%
aR.dDb&<y
.xk 4g
ShellExecuteA
RegCloseKey
)%S{.'U}.Ue
l%S(8x$!(
1L%UJ
.vtbw
.iA5N
yyhKa%S
d.Zd=#R
x0r%F{.IPi)
Vj.jH
>M%X9
/8[<{~@ bc.lTk
ks_GetMsg
kssPlugin.dll
tole32.dll
56673405
yycommon.dll
yychannel.dll
yymainframe.dll
.ATencentdll.exe
TenSafe_1.exe
TenioDL.exe
CrossProxy.exe
tgp_gamead.exe
TXPlatform.exe
BackgroundDownloader.exe
Tencentdl.exe
h.rdata
H.data
b.vmp0
b.vmp1
".vmp2
DNF.EXE
ntoskrnl.exe
HAL.dll
:\%S
5:\%S
X:\ S
hal.dll
Super-EChXXp://VVV.super-ec.cnhXXp://VVV.eyybc.com/forum-17-1.html/forum-12-1.html/memcp.php/ip.asp/time.asp/gonggao.txt/ec-user6.php/ec-bd.php/ec-jh.php
hXXp://VVV.super-ec.cn
<input type="text" name="field_2new" size="25" value="" disabled class="txt" />" class="txt" />Function Getcpuid()
Set cpuSet = GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf("Win32_Processor")getcpuid=cpu.ProcessorId
psapi.dll
d:\dk\rwm\objfre_wxp_x86\i386\rwm.pdb
6g6x6
\Device\\\.\
F%*.*f
CNotSupportedException
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
COMCTL32.DLL
CCmdTarget
MSWHEEL_ROLLMSG
__MSVCRT_HEAP_SELECT
iphlpapi.dll
SHLWAPI.dll
MPR.dll
WINMM.dll
WS2_32.dll
VERSION.dll
GetProcessHeap
WinExec
GetWindowsDirectoryA
KERNEL32.dll
GetKeyState
SetWindowsHookExA
UnhookWindowsHookEx
RegisterHotKey
UnregisterHotKey
GetViewportOrgEx
WINSPOOL.DRV
RegOpenKeyExA
RegCreateKeyExA
ADVAPI32.dll
SHELL32.dll
ole32.dll
OLEAUT32.dll
WININET.dll
GetCPInfo
CreateDialogIndirectParamA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetViewportExtEx
comdlg32.dll
.PAVCException@@
.PAVCNotSupportedException@@
.PAVCFileException@@
(*.prn)|*.prn|
(*.*)|*.*||
Shell32.dll
Mpr.dll
Advapi32.dll
User32.dll
Gdi32.dll
Kernel32.dll
(&07-034/)7 '
?? / %d]
%d / %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|BMP
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
%s:%d
windows
out.prn
%d.%d
%d / %d
%d/%d
Bogus message code %d
(%d-%d):
%ld%c
<tr><td bgcolor=buttonface>Y</td><td bgcolor=white>%d</td></tr>
<tr><td bgcolor=buttonface>X</td><td bgcolor=white>%d</td></tr>
<tr><td bgcolor=buttonface>Height</td><td bgcolor=white>%d</td></tr>
<tr><td bgcolor=buttonface>Width</td><td bgcolor=white>%d</td></tr>
<tr><td bgcolor=buttonface>RECT</td><td bgcolor=white>(%d, %d)-(%d, %d)</td></tr>
<tr><td bgcolor=buttonface>Styles</td><td bgcolor=white>0xX</td></tr>
<tr><td bgcolor=buttonface>Control ID</td><td bgcolor=white>%d</td></tr>
<tr><td bgcolor=buttonface>Handle</td><td bgcolor=white>0xX</td></tr>
.comment {color:green}burlywood
\winhlp32.exe
%d%d%d
rundll32.exe shell32.dll,
.PAVCObject@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.PAVCResourceException@@
.PAVCUserException@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.PAVCArchiveException@@
zcÁ
#include "l.chs\afxres.rc" // Standard components
1!2F2X2d2y2
0,010[0`0
> >$>(>,>0>
2 3$3(3,3034383
; ;$;(;,;0;4;8;
6g6X6d6
5%5U5v5
5 5$5(5,5
; ;$;(;,;
7!8(888^8
? ?$?(?,?0?4?8?<?@?
0!1'1/151
:$;(;,;0;4;
1 1$1(1,1014181
1#1.1<1{18 8$8(8,808
? ?$?(?,?
= =$=0=4=8=
aAbcedisnatrdfsdfdfdgsds.....DNF.exe
hXXp://VVV.tt336.net
C:/kiss.ini
\svchost.ini
C:/jc.ini
/QQmusic/QQMUSICRESOURCE.DLL
Shell_TrayWnd.exe
f:\1161\Release\QQMusicService.pdb
ExceptCatch.dll
MSVCR80.dll
_amsg_exit
_wcmdln
_crt_debugger_hook
%SE;D
cOXY/P.Z0.0.QR00/ZPP0000000/0PPZR.BI@/DE0,
<assemblyIdentity type="win32" name="Microsoft.VC80.CRT" version="8.0.50727.4053" processorArchitecture="x86" publicKeyToken="1fc8b3b9a1e18e3b"></assemblyIdentity>
Thawte Certification1
hXXp://ocsp.thawte.com0
.hXXp://crl.thawte.com/ThawteTimestampingCA.crl0
hXXp://ts-ocsp.ws.symantec.com07
hXXp://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
hXXp://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
.Class 3 Public Primary Certification Authority0
<VeriSign Class 3 Public Primary Certification Authority - G50
hXXp://crl.verisign.com/pca3.crl0
hXXps://VVV.verisign.com/cps0
#hXXp://logo.verisign.com/vslogo.gif04
hXXp://ocsp.verisign.com0>
2Terms of use at hXXps://VVV.verisign.com/rpa (c)101.0,
/hXXp://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
hXXps://VVV.verisign.com/rpa0
hXXp://ocsp.verisign.com0;
/hXXp://csc3-2010-aia.verisign.com/CSC3-2010.cer0
hXXps://VVV.verisign.com/cps0*
#hXXp://crl.verisign.com/pca3-g5.crl04
hXXp://ocsp.verisign.com0
/QQmusic/ExceptCatch.dll
Yu.hA
xOQ$xOQ\xOQnxOQ.yOQ
Microsoft Windows NT
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows 2003
Microsoft Windows Vista
Microsoft Windows 7
Microsoft Windows 7 later
Microsoft Windows 95
Microsoft Windows 98
Microsoft Windows Me
Microsoft Windows Me later
MiniDumpWriteDump FAILED!errcode[0x%x]
Can't find the DBGHELP.DLL!
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*
Content-Disposition: form-data; name="ReportType"
HTTP/1.1
/fcgi-bin/cgi_music_crashreport_pc.cgi
f:\1161\pdb\ExceptCatch.pdb
HttpOpenRequestA
HttpSendRequestA
RegOpenKeyExW
RegOpenKeyW
QQMusicCommon.dll
MSVCP80.dll
imagehlp.dll
_malloc_crt
PSAPI.DLL
Y0-6}
00tM%0U
<assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
/QQmusic/QQMusicCommon.dll
D$XPSSh
D$8PSSh
<7%uP
9.tCSW
F8PhøP
VWt.It
inflate 1.2.3 Copyright 1995-2005 Mark Adler
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
0:P1.2.3
zip 1.01 Copyright 1998-2004 Gilles Vollant - hXXp://VVV.winimage.com/zLibDll
127.0.0.1
0.0.0.0
ConfigInfo_WebAssist
System\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}%s\Connection
ProcessHost
ErrorReport
%d;
:PX
-_.!*'()
2.5.4.3
WinHttpOpen
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
proxy_port
InternetCrackUrlW
InternetCanonicalizeUrlW
f:\1161\pdb\QQMusicCommon.pdb
GetWindowsDirectoryW
CreatePipe
RegNotifyChangeKeyValue
RegCreateKeyExW
ShellExecuteW
SHFileOperationW
NetWkstaTransportEnum
NETAPI32.dll
GdiplusShutdown
gdiplus.dll
DNSAPI.dll
WINTRUST.dll
CryptMsgGetParam
CertCreateCertificateContext
CertGetNameStringW
CertFreeCertificateContext
CryptMsgClose
CertCloseStore
CRYPT32.dll
??$PushParam@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@CParamOnShareMemory@@QAEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
??0CMsgLoopThread@@QAE@XZ
??0CQMSHFileOperation@@QAE@ABV0@@Z
??0CQMSHFileOperation@@QAE@ABV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@PAUHWND__@@@Z
??0UrlHelper@@QAE@ABV0@@Z
??0UrlHelper@@QAE@XZ
??1CMsgLoopThread@@UAE@XZ
??1CQMSHFileOperation@@QAE@XZ
??1UrlHelper@@UAE@XZ
??4CQMSHFileOperation@@QAEAAV0@ABV0@@Z
??4UrlHelper@@QAEAAV0@ABV0@@Z
??4WindowsIniMFC@@QAEAAV0@ABV0@@Z
??RSongSortString_bigger@qqmusic@@QBEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
??RSongSortString_less@qqmusic@@QBEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
??_7CMsgLoopThread@@6B@
??_7UrlHelper@@6B@
?AddNewLyricContent@CQrcParser@@QAEXHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?AnyOperationAborted@CQMSHFileOperation@@QAEHXZ
?CallQQAPIRichStatue@QM@@YAHKHJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0H@Z
?CheckAutoRenameFileName@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?CheckParentDirectory@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?CheckValidFolderPath@qqmusic@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?CompressAndEncodeData@CUtil@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?CompressFiles@CUtil@@SAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@H@Z
?CompressOneFile@CUtil@@CAHAAPAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ConverString@CQrcParser@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ConvertToMultiDldFileName@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?ConvertToMultiDldKey@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?CopyFileW@CQMSHFileOperation@@QAEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?CopyFileW@CQMSHFileOperation@@QAEHABV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@@Z
?CopyFileW@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0H@Z
?CreateDirectoryW@QM@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?CreateDirectoryW@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?CreateObjectFromFile@QM@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAUIUnknown@@ABU_GUID@@2PAPAX@Z
?CreateTempFilePath@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?CreateTempFilePath@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@H@Z
?Decode16@QM@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?DeleteFileW@CQMSHFileOperation@@QAEHXZ
?DeleteFilesWithExtName@qqmusic@@YAXABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@@Z
?DoILikeOperation@@YAJHKH@Z
?Encode16@QM@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?EncodeBase64@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PBEH@Z
?EqualSplit@CSplitHLP@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@1@Z
?EscapeText@CMarkup@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@UMCD_CSTR@@H@Z
?ExecuteQueue@CQMCommandQueue@@QAEXXZ
?ExludeFolder@CQMFileFind@@QAEXABV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@@Z
?ExludeType@CQMFileFind@@QAEXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ExportMemLog@qqmusic@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?File2Json@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAX@Z
?FindAssociateFile@qqmusic@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?FindExtension@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV23@@Z
?FindFilesStepByStep@CQMFileFind@@QBEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@HPAVCQMFildFindStep@@@Z
?FindProcessByProcessMap@CUtil@@SAHAAV?$set@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@U?$less@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@4@@std@@@Z
?FolderHasFile@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?FormatAtlString@qqmusic@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@IZZ
?FormatBitRate@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@J@Z
?FormatDuration@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@J@Z
?FormatMegaSize@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@J@Z
?FormatSize@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@JH@Z
?FormatSpeed@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@J@Z
?FormatString@qqmusic@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@IZZ
?GetAlbumPicPath@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?GetAppDataFolder@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetAppDataFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetAppDefDnldFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetArchiveFileName@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_W@Z
?GetArchiveName@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_W@Z
?GetAttrib@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@UMCD_CSTR@@@Z
?GetAttribName@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?GetCachePath@CCachePathMgr@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetCachedCookie@@YAXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAV12@@Z
?GetChildAttrib@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@UMCD_CSTR@@@Z
?GetChildData@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetChildSubDoc@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetChildTagName@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetCueRawFileName@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_W@Z
?GetCurrentUserDesktopFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetDNSAddress@CUtil@@SAHAAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@@Z
?GetDNSAddressString@CUtil@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetData@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetDeclaredEncoding@CMarkup@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@UMCD_CSTR@@@Z
?GetDeepestSubdirectory@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV23@@Z
?GetDefaultCachePath@CCachePathMgr@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetDefaultFont@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetDiskSpaceInfo@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAK1@Z
?GetDoc@CMarkup@@QBEABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetDocumentsSettingFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetDoubleValue@CSplitHLP@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAN@Z
?GetDownloadPicPath@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@00H@Z
?GetDriveLabel@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV23@@Z
?GetElemContent@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetError@CMarkup@@QBEABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetExeFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetFileExtension@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV23@H@Z
?GetFileHashKey@qqmusic@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetFileMainSubVersion@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAI1@Z
?GetFileNameFormPath@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?GetFileNameFormPath@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?GetFileNameWithoutExtension@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?GetFileNameWithoutExtension@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?GetFilePathDriveType@qqmusic@@YAKABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetFileProductName@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV23@@Z
?GetFileVerString@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV23@@Z
?GetFolder@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAUHINSTANCE__@@@Z
?GetGKey@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetGUID@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetIEVersion2@qqmusic@@YAIAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetIEVersion@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetILoginHost@@YAJPAPAUILoginHost@@@Z
?GetIPAddressByName@CUtil@@SAXV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@AAV?$multimap@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@U?$less@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@V?$allocator@U?$pair@$$CBV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@@std@@@4@@3@@Z
?GetIQQMPReport@@YAJPAPAUIQQMPReport@@@Z
?GetIQQMPReportStatInfo@@YAJPAPAUIQQMPReportStatInfo@@@Z
?GetIniInt@WindowsIniMFC@@SAHPA_W0H0_N@Z
?GetIniString@WindowsIniMFC@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PA_W000_N@Z
?GetInprocServerFullPath@qqmusic@@YAJPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetInprocServerFullPath@qqmusic@@YAJU_GUID@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetIntValue@CSplitHLP@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAH@Z
?GetInternetCacheFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetKey@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetLocale@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetLogicDriveStrings@qqmusic@@YAXAAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@@Z
?GetLoginningSafeHwnd@@YAPAUHWND__@@XZ
?GetLyricContent@CQrcParser@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?GetMainPortalSafeHwnd@@YAPAUHWND__@@XZ
?GetMaxFreeSpace@CCachePathMgr@@AAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetModuleFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAUHINSTANCE__@@@Z
?GetNetworkModulePath@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAUHINSTANCE__@@@Z
?GetNormalDownloadPath@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?GetOSVersion@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetP2PCachePath@CCachePathMgr@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetParentFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?GetParentProcessName@CUtil@@SAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetPassValue@@YAJXZ
?GetProgramFilesFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetQMDLCachePath@CCachePathMgr@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetQQAPIUinStr@QM@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetQQNick@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetQQSignature@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@I@Z
?GetQQmusicVKey@CUtil@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetQrcStringFromeFile@CQrcParser@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV23@@Z
?GetRoot@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAUHINSTANCE__@@@Z
?GetScreenResolution@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetSearchId@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetSharedInstance_ErrorReport@qqmusic@@YAPAVIConfigInfo@@XZ
?GetSpecialFolderPath@CUtil@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@HH@Z
?GetStrValue@CIniFileParser@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_W00@Z
?GetStringValue@CSplitHLP@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAV23@@Z
?GetSubDoc@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetSupportType@CQMFileFind@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetSystemDllPath@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV23@@Z
?GetTagName@CMarkup@@QBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetTempFolder@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetTempFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetURLHash16Encoded@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?GetUintValue@CSplitHLP@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAI@Z
?GetVecDiskPath@qqmusic@@YAHAAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@@Z
?GetWhirlCachePath@CCachePathMgr@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetWholeFileName@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?GetWholeFileVersion@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAI111@Z
?GetWindowsFolder@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GuessAuthorName@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?GuessAuthorNameWithSep@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?HashStr@QM@@YAKAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IsAvailable@FunctionalModule@@AAEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IsCacheCanWriteFile@CCachePathMgr@@QAE_NV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IsCanWriteFile@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IsDigitString@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IsLegalUrl@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAH@Z
?IsLocalFile@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IsLossLessUrl@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IsQMDLHttpPlay@qqmusic@@YAHXZ
?IsShareInstanceExit@qqmusic@@YAHPBD@Z
?IsSongNameBiggerByCHN@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?IsSongNameLessByCHN@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?IsSpecialFile@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?IsValidFileElseDel@CQMImageHlp@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IsValidRootPath@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?IsWindows2KOrLater@qqmusic@@YAHXZ
?IsWindows7OrLater@qqmusic@@YAHXZ
?IsWindowsVista@QM@@YAHXZ
?IsWindowsVistaOrLater@qqmusic@@YAHXZ
?IsWindowsXPOrLater@qqmusic@@YAHXZ
?Json2String@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAX@Z
?LoadAtlString@qqmusic@@YAHIAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?LoadData@CEncryptFile@@QAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?LoadDll@CDllLoadWrapper@@QAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?LoadQrc@CQrcParser@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?LoadStringW@qqmusic@@YAHIAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?MD5Hash@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?Map2String@CSplitHLP@@QAEHV?$map@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@U?$less@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@V?$allocator@U?$pair@$$CBV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@@std@@@4@@std@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?MeasureStringSize@CUseGDIPlus@@QAE?AVSize@Gdiplus@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAVFont@3@@Z
?MessageLoop@CMsgLoopThread@@UAEIXZ
?ModifyWindowStyle@qqmusic@@YAHPAUHWND__@@HKKI@Z
?MoveFileW@CQMSHFileOperation@@QAEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?OpenFileDir2@qqmusic@@YAXABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?OpenFileDir@qqmusic@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?OpenFolder@QM@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?OpenOneKeyRepairTools@qqmusic@@YAXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?OpenRepairWnd@qqmusic@@YAXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ParseURL@QM@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAW4INTERNET_SCHEME@@AAV23@2AAG@Z
?ParseUrl@UrlHelper@@QAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?PathFileEqual@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?PathFileExistsW@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?PostWindowsMessage@BoostAsyncThread@@QAEXIIJ@Z
?PreTranslateMessage@CQMMouseWheelWithoutFocus@@SAHPAUtagMSG@@@Z
?PreTranslateMouseLeave@CQMMouseWheelWithoutFocus@@KAXPAUtagMSG@@@Z
?PreTranslateMouseMove@CQMMouseWheelWithoutFocus@@KAXPAUtagMSG@@@Z
?PreTranslateMouseWheel@CQMMouseWheelWithoutFocus@@KAHPAUtagMSG@@@Z
?PreTranslateNcMouseLeave@CQMMouseWheelWithoutFocus@@KAXPAUtagMSG@@@Z
?PreTranslateNcMouseMove@CQMMouseWheelWithoutFocus@@KAXPAUtagMSG@@@Z
?ProcLineData@CIniFileParser@@IAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAUtagSectionData@1@@Z
?ProcessMsgOnMainThread@qqmusic@@YAXUtagMSG@@@Z
?ReadDrivePortsInWin9X@CHddFetcher@@KA_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z
?ReadEncryptFileToBuf@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?ReadFileToBuf@QM@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ReadFileToBuf@QM@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ReadFileToBuf@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?ReadStreamToBuf@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAV23@@Z
?ReadTextFile@CMarkup@@SA_NUMCD_CSTR@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAV34@PAH2@Z
?ReadUnicodeFileToBuf@QM@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ReadUnicodeFileToBuf@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?ReadUtf8FileToWstring@QM@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?RenameFile@CQMSHFileOperation@@QAEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ReplaceDomain@qqmusic@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ReportBehaviorData@@YAJABQA_W0ABH@Z
?RevisePathName@qqmusic@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV23@@Z
?Run@CMsgLoopThread@@UAEIXZ
?SaveData@CEncryptFile@@QAEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SaveDoubleValue@CSplitHLP@@QAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@N@Z
?SaveGbkQrc@CQrcParser@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SaveIntValue@CSplitHLP@@QAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@H@Z
?SaveMemroyLog@qqmusic@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SaveQrc@CQrcParser@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?SaveQrcStringToFile@CQrcParser@@QAEXABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?SaveStringValue@CSplitHLP@@QAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@1@Z
?SaveUintValue@CSplitHLP@@QAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@I@Z
?SendInstallPCMgrMsg@qqmusic@@YAXK@Z
?SendWindowsMessage@BoostAsyncThread@@QAEXIIJ@Z
?SetCachePath2@CCachePathMgr@@QAEXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SetCachePath@CCachePathMgr@@QAEXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SetDoc@CMarkup@@QAE_NABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SetIniInt@WindowsIniMFC@@SAXPA_W0H0_N@Z
?SetIniString@WindowsIniMFC@@SAXPA_W000_N@Z
?SetLyricContent@CQrcParser@@QAEXHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SetWebFormWndAndGetID@@YAJJPAI@Z
?SplitArchiveFileName@qqmusic@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@1@Z
?SplitCommaNumbers@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$vector@HV?$allocator@H@std@@@std@@@Z
?SplitString@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@ABV23@@Z
?StopThread@CMsgLoopThread@@UAEHK@Z
?String2Map@CSplitHLP@@QAEHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAV?$map@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@U?$less@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@V?$allocator@U?$pair@$$CBV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@@std@@@4@@std@@@Z
?TerminalProcessByAppPath@CUtil@@SAHAAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@@Z
?ToDoubleValue@CSplitHLP@@QAENV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ToIntValue@CSplitHLP@@QAEHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ToUintValue@CSplitHLP@@QAEIV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?URLDecode@CSplitHLP@@QAEXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?URLDecode@qqmusic@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?URLEncode@CSplitHLP@@QAEXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?URLEncode@qqmusic@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?UTF8URLDecode@qqmusic@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?UTF8URLEncode@qqmusic@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?UnescapeText@CMarkup@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@UMCD_CSTR@@H@Z
?WriteBufToFile@QM@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?WriteBufToFile@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?WriteBufToStream@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@00@Z
?WriteEncryptBufToFile@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?WritePronouncement@CCachePathMgr@@AAEXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?WriteTextFile@CMarkup@@SA_NUMCD_CSTR@@ABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAV34@PAH2@Z
?WriteUnicodeBufToFile@qqmusic@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?_QMGetInstallDir@qqmusic@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?a2t@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?a2t@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAD@Z
?f2t@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@M@Z
?i2t@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?prof_check_data_begin@qqmusic@@YAXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@W4_E_PROF_MODULE_TYPE@@0PBD2KH@Z
?prof_check_data_end@qqmusic@@YAXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@W4_E_PROF_MODULE_TYPE@@0PBD2KH@Z
?prof_check_finished@qqmusic@@YAXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?prof_get_startup_time_info@qqmusic@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?prof_time_check_join_obj@qqmusic@@YAXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@W4_E_PROF_MODULE_TYPE@@0HPBD2KH@Z
?split@CUtil@@SAXABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@V23@@Z
?t2a@QM@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?t2f@QM@@YANV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?t2i@QM@@YAHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?t2u@QM@@YAIV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?u2t@QM@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@I@Z
?x_CreateNode@CMarkup@@KA_NAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@HPB_W@Z
?x_DocChange@CMarkup@@IAEXHHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?x_EncodeCDATASection@CMarkup@@KA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_W@Z
?x_GetAttrib@CMarkup@@IBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@HPB_W@Z
?x_GetData@CMarkup@@IBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?x_GetElemContent@CMarkup@@IBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?x_GetLastError@CMarkup@@KA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?x_GetPath@CMarkup@@IBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?x_GetSubDoc@CMarkup@@IBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?x_GetTagName@CMarkup@@IBE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?x_GetToken@CMarkup@@KA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABUTokenPos@1@@Z
?x_IntToStr@CMarkup@@KA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?x_ReadText@CMarkup@@KA_NAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAUFilePos@1@@Z
?x_WriteText@CMarkup@@KA_NABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAUFilePos@1@@Z
<4,$?7/'
(3-!0,1'8"5.*2$
.?AVCDeleteFilesFindStep@?1??DeleteFilesWithExtName@qqmusic@@YAXABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@@Z@
.?AVUrlHelper@@
.?AVCProcessHost@@
.?AVIProcessHost@@
.?AV?$bind_t@_NV?$mf1@_NVCProcessHost@@_N@_mfi@boost@@V?$list2@V?$value@PAVCProcessHost@@@_bi@boost@@V?$value@_N@23@@_bi@3@@_bi@boost@@
.?AVCGetResultFromKeyThreadQueue@@
.?AVCAsyncGetResultByKeyThread@@
.?AVCMsgLoopThread@@
0 0S0
9*959;9`9
:/:4:[:`:
8 8(8.868
;$<.<><{<>(?,?4?8?
RASAPI32.dll
RegCreateKeyA
WSOCK32.dll
InternetOpenUrlA
HttpQueryInfoA
InternetCrackUrlA
InternetCanonicalizeUrlA
VVV.dywt.com.cn
X-X-X-X-X-X
hXXp://VVV.baidu.com
1.1.3
;3 #>6.&
'2, / 0&7!4-)1#
HTTP/1.0
%s <%s>
Reply-To: %s
From: %s
To: %s
Subject: %s
Date: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
SMTP
right-curly-bracket
left-curly-bracket
c:\%original file name%.exe
5312848
e,Gy.Cz
vq.iE?
msgO
5Ni.KZn)F-
.bu xO_=)
.Li;I
.ZT4.
}.qZEb(
"}.qZ0t
.ZThFr<X
.qVIr
.RM=o0gGI:
.jD\RJ
"}.qNQfH8
.Uj5~
P^:e.VS
.qBHp/
.qNIf
w%cP qf
-1}#N
.jDP^Jd@
.VSu)
.RQNQNQ
]z%5S
&y.qZ
i.KS
kI:q.ayU
.qB]2X
.q.qFDd;
.qB]Z0
.VSv(
m.UVIn1j
*u.VS
.qF=~
"}.qZ
2m.qFYj5
p%sP1cH
.rZ>y&
;Oq.eI;
.qZE^Af
.Wd t
}:e.qZERMR
ra>m2q.uQ
|Hf.Uf
.qN`PGd
>a.qV4
.ZTTZ:tDj2?
&y.Uj5n@x
5O}*H5.Ki
.Un@|^
.bL8LA
*u.Uf9~!v
.qZEr
.qB]>
#gu*m2a>a>q.mA[
l Y.WR
.VSa-
.Ka>u9O
zNQB]>a.qJUb
.qJUjDL8
.jDLS<r
.Rq=w
*u.qF
.qJU^A
a.qRMR\${HfNI.RU.}
v.qN65.m
k.pDv!
.q.qN<
%s;q={3u.qNQR8x
~.qNQB]J
6i.Ub=
Bq.qjc
.jDt:N
v.Ub=z%z
.nbQ{.qFDh7p
.Uf9ZT0
.VS23
D$@%s
4$`h%D
.qNQJUn
j)v9f-rYF}
&y.qR8
.qVp~
.VS~2
1, 0, 6, 6
- Skin.dll
9.5.25.212
\SystemRoot\system32\ntkrnlpa.exe
\SystemRoot\system32\ntoskrnl.exe
(*.*)
451.454.456.54445
(hXXp://VVV.eyuyan.com)
1.0.0.0
s\\.\QBSpdDevice
QQMusicLaunch.prf
\DosDevices\%S
QQMusicService.log
11.61.3314.0410
QQMusicService.exe
QQMusic %u.%u.%u.u
GetModuleHandle(kernel32.dll) failed with errno %u.
GetProcAddress(SetUnhandledExceptionFilter) failed with errno %u.
VirtualProtect() failed with errno %u.
\*.dmp
SetExceptionCatcher(), g_strExeName = %s
Assert failed!! File:%s, line:%d, operation:NULL != pIVersionDll
[Build %d.%d.%d]
%s [Build %d.%d.%d]
-%y%m%d%H%M%S
dbghelp.dll
[Crash]GetCallStackWithContext:dwLevel=%d, eip=%x, ebp=%x, esp=%x
[Crash]Add frame: offset=%x, param0=%x, param1=%x, param2=%x, param3=%x
[Crash]strModuleName:%s
[Crash]Invalid module info:%s
[Crash]CrashInfo:%s
0xX[%X] %s:
0xX Error:0xX
[%d,%d,%d,%d]
EXCEPTION_FLT_DENORMAL_OPERAND
EXCEPTION_FLT_INVALID_OPERATION
ErrCode:0xX
%s%u_MemoryLog
%Y%m%d%H%M%S
zipOpenNewFileInZip failed with return value %d.
CompressOneFile:CAN'T open %s.
zipWriteInFileInZip faied with return err: %d.
[QQMusic_ExceptCatch]IsUploadDump u is:%u, uploadRate is:%u
hXXp://tv.qq.com/
[QQMusic_ExceptCatch]UpLoadDump strfrmdata is:%s
cstat.pc.music.qq.com
[QQMusic_ExceptCatch]UpLoadDump endLine is:%s
[QQMusic_ExceptCatch]UpLoadDump dataLen is:%u, bUpLoadDumpFile is:%u
[QQMusic_ExceptCatch]UpLoadDump dwReadSize is:%u
[QQMusic_ExceptCatch]UpLoadDump strHeaders is:%s
[QQMusic_ExceptCatch]UpLoadDump buffer len is:%u
[QQMusic_ExceptCatch]UploadCrashInfo uploadMode is:%u
R:%d*%d
Win:%d.%d.%d-%d, %s
L:%d,%d,%d,%d,%d,%d,%d,%d
p2pcore.dll
.\XVersion.cpp
(%s:%d.%d.%d.%d)
qqmusicplayer.dll
%d.%d.%d.%d
0xX
0xX
0xX
CachePath.ini
TestCache.dat
[P2P]CCachePathMgr::SetCachePath:%s
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
QQMusic.dll
f:\1161\source\qqmusiccommon\QQMusicInterface_Common.h
Assert failed!! File:%s, line:%d, operation:hInstance
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr)
QQMusicApi.dll
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(GetISkinMgr(&pSkinMgr)) && pSkinMgr
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(GetIQQMPAccount(&pAccount)) && pAccount
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pAccount->get_VIP(&bVIP))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pAccount->get_QQUin(&nQQUin))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pAccount->get_Key(&bstrKey))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pAccount->get_QQNick(&bstrQQNick))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pAccount->get_GUID(&bstrGUID))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pAccount->get_GKey(&bstrGKey))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pAccount->get_HighQualityCapability(&bHighQuality))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(GetILyricHost(&pLyricHost)) && pLyricHost
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pLyricHost->GetLyricPaneSafeHwnd((ULONG*)&hWnd))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pLyricHost->GetLyricMiniPaneSafeHwnd((ULONG*)&hWnd))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pLyricHost->GetDesktopLyricSafeHwnd((ULONG*)&hWnd))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pLyricHost->GetSearchLyricSafeHwnd((ULONG*)&hWnd))
WebWnd
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pSkinMgr->GetVolumeSafeHwnd((ULONG*)&hWnd))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pSkinMgr->GetSkinColorSafeHwnd((ULONG*)&hWnd))
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(GetILoginHost(&pLoginHost)) && pLoginHost
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(pLoginHost->GetLoginningSafeHwnd((ULONG*)&hWnd))
Assert failed!! File:%s, line:%d, operation:pQQMPReport
Create Event failed with errno %u.
Create ManagerFilesThreadImp Thread failed with errno %u.
call LoadFromMedium for %s failed with errno %u.
.\EncryptFileMgr.cpp
Assert failed!! File:%s, line:%d, operation:pParam
Assert failed!! File:%s, line:%d, operation:pThis->m_hEvent
wait quit event in ManagerFilesThreadImp failed with errno %u.
call SaveToMedium failed with errno %u.
Assert failed!! File:%s, line:%d, operation:pbsBuf
Assert failed!! File:%s, line:%d, operation:parpFileName
call SaveToMedium for %s failed with errno %u.
WebPerformSync
WebPerformAsync
FakeAsyncXmlCmd
ClientInterfaceForWeb
.\ExternalDisp.cpp
Assert failed!! File:%s, line:%d, operation:m_cRef == 0
Assert failed!! File:%s, line:%d, operation:NULL != pDispParams
Assert failed!! File:%s, line:%d, operation:pDispParams->cArgs == 2
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(GetIQMApiCli(&m_pQMApiCli)) && m_pQMApiCli
External.ClientInterfaceForWeb enter: cmd: %s
External.ClientInterfaceForWeb out. ret: 0x%x
External.ClientWriteLogFromWeb enter: strLogData: %s
Assert failed!! File:%s, line:%d, operation:pDispParams->cArgs == 3
External.ClientStorage enter: opt: %s
Assert failed!! File:%s, line:%d, operation:NULL != pVarResult
External.ClientStorage out.
Assert failed!! File:%s, line:%d, operation:pDispParams->cArgs == 1
CExternalDisp::Invoke, Error dispIdMember is:%u, bstrCmd is [%s]
ReportIEAndJSError
call pEncryptFile->LoadData failed with errno %u.
get CEncryptFile for %s failed with errno %u.
call pEncryptFile->SaveData failed with errno %u.
.\FilePath.cpp
Assert failed!! File:%s, line:%d, operation:!strDrive.IsEmpty()
Assert failed!! File:%s, line:%d, operation:strDir.GetLength() > 2
%s%s.%s
%s%s%s
Assert failed!! File:%s, line:%d, operation:hFile != INVALID_HANDLE_VALUE
Assert failed!! File:%s, line:%d, operation:!strExt.IsEmpty()
Assert failed!! File:%s, line:%d, operation:GetTempFileName(strTempFolder, strExt, 0, szTempFile)
Assert failed!! File:%s, line:%d, operation:!strAppDefDnldFolder.IsEmpty()
Assert failed!! File:%s, line:%d, operation:!pathName.IsEmpty()
\/:*?"<>|
Explorer.exe
/e,/select,"%s"
explorer.exe
Assert failed!! File:%s, line:%d, operation:!strFileName.IsEmpty()
Assert failed!! File:%s, line:%d, operation:strExtension[0] == _T('.')CheckValidFolderPath1, strFolderPath is:%s.
CheckValidFolderPath3 szDestPath is:%s,nDriveNumber is:%d.
CheckValidFolderPath4 strRoot is:%s
Assert failed!! File:%s, line:%d, operation:PathFileExists(strRoot)
CheckValidFolderPath5 strFolderPath is:%s
Assert failed!! File:%s, line:%d, operation:qqmusic::PathIsDirectory(strFolderPath)
Assert failed!! File:%s, line:%d, operation:!folderPath.IsEmpty()&&!fileName.IsEmpty()
Assert failed!! File:%s, line:%d, operation:pathName.GetLength() < MAX_PATH
%s(%d).%s
Assert failed!! File:%s, line:%d, operation:i < 65536
%s_%s_%d.jpg
Assert failed!! File:%s, line:%d, operation:bDirectory == qqmusic::PathIsDirectory(str2)
Assert failed!! File:%s, line:%d, operation:PathIsRoot(driveString)
{lX-X-x-XX-XXXXXX}CLSID\%s\InprocServer32
.zip|
.rar|
QQMusic_Network.dll
Assert failed!! File:%s, line:%d, operation:!strPath.IsEmpty()
Assert failed!! File:%s, line:%d, operation:!strTemp.IsEmpty()
Assert failed!! File:%s, line:%d, operation:::CreateDirectory(strTemp, NULL)
%dkbps
%dKB/S
Û/S
%d:d:d
d:d
\\.\PhysicalDrive%d
\\.\Scsi%d:
\\?\%c:
.\IniFileParser.cpp
Assert failed!! File:%s, line:%d, operation:GetFileInformationByHandle(hFile, &FileInfo)
Assert failed!! File:%s, line:%d, operation:dwFileSize > 0
Assert failed!! File:%s, line:%d, operation:pData
Assert failed!! File:%s, line:%d, operation:ReadFile(hFile, pData, dwFileSize, &dwRead, NULL) && dwRead == dwFileSize
Assert failed!! File:%s, line:%d, operation:nIndex > 0
Assert failed!! File:%s, line:%d, operation:lpszSection && lpszName
QQMusicResource.dll
SaveMemroyLog failed with errno %u.
.\Log.cpp
Assert failed!! File:%s, line:%d, operation:NULL != pIPsApiDll
%sLog\%s\%s_%u_ExportMemoryLog_%s.log
Assert failed!! File:%s, line:%d, operation:strFilePath.length()
Assert failed!! File:%s, line:%d, operation:lpszFormat
d-d-d d:d:d:d
Assert failed!! File:%s, line:%d, operation:oFileLogProvider && oMemoryLogProvider
%sLog\%s\
%s%s(%u.%u)uuuuuu.log
Assert failed!! File:%s, line:%d, operation:0
Assert failed!! File:%s, line:%d, operation:FALSE
Assert failed!! File:%s, line:%d, operation:hKey
Assert failed!! File:%s, line:%d, operation:loger->m_hEvent
Assert failed!! File:%s, line:%d, operation:lErrorCode == ERROR_SUCCESS
Assert failed!! File:%s, line:%d, operation:strMemoryName.length()
Assert failed!! File:%s, line:%d, operation:m_hFileMapping
Assert failed!! File:%s, line:%d, operation:m_lpMapPoint
0900936iso-ir-581028598iso_8859-81201255iso_8859-8-i1200932cswindows31j
0628597greek81201258windows-1258
1201257windows-12570738598logical
1201256windows-12560651932euc-jp
1201255windows-1255
2701143x-ebcdic-finlandsweden-euro1201254windows-1254
0801251x-cp12511201253windows-12531400949ks_c_5601_19871528599iso_8859-9:1989
0801250x-cp12501201252windows-1252
1201251windows-12511528598iso_8859-8:1988
1201250windows-12502301149x-ebcdic-icelandic-euro
1150220iso-2022-jp1100874windows-874
1901145x-ebcdic-spain-euro1620127iso_646.irv:1991
0551932x-euc1250221_iso-2022-jp1000932csshiftjis
http-equiv
<>=\/?!"';
length %d
(%d nulls removed)
to %d wide chars
from wide length %d
.\Misc.cpp
Assert failed!! File:%s, line:%d, operation:NULL != strOrigin
Assert failed!! File:%s, line:%d, operation:strOrigin[0] != L'\"' && strOrigin[_tcslen(strOrigin)-1] != L'\"'
Assert failed!! File:%s, line:%d, operation:strOriginURL != NULL
Navigate url[%s]
Assert failed!! File:%s, line:%d, operation:AddQuotes(strOriginURL, strOpenURL)
ShellExecute open url failed!retCode[0x%x]
NavigateByIE url[%s]
Assert failed!! File:%s, line:%d, operation:!strIEPath.IsEmpty()
\Internet Explorer\iexplore.exe
iexplore.exe not be found. [%s]
Assert failed!! File:%s, line:%d, operation:AddQuotes(strIEPath, strQuotesIEPath)
Assert failed!! File:%s, line:%d, operation:AddQuotes(strOriginURL, strQuotoesOpenURL)
Create IE process failed!errCode[0x%x]
Assert failed!! File:%s, line:%d, operation:!strNumbers.IsEmpty()
Assert failed!! File:%s, line:%d, operation:!strCombin.IsEmpty()
tWebAssist.dat
listOSF.dat
tErrorMsg.dat
SetCookie.dat
.flac
DiagTools.exe
nLeft: %d, nRight: %d, nTop: %d, nBottom: %d
"QQUin=%u&&strMainProcMemLog=%s&&guid=%s&&key=%s&&left=%d&&right=%d&&top=%d&&bottom=%d&&showfeed=%d"
QQMusicNetwork.dat
Assert failed!! File:%s, line:%d, operation:qqmusic::ReadEncryptFileToBuf(strFilePath, strDoc)
Assert failed!! File:%s, line:%d, operation:markup.SetDoc(strDoc)
Assert failed!! File:%s, line:%d, operation:markup.FindElem(_T("QQMusicNetwork"))httpplay
qmdlhttpplay
qqpcrtp.exe
{68415E0B-C49E-49a9-B125-26B8C92311A5}004SendInstallPCMgrMsg SendMsgTimeout, error code: %u
SendInstallPCMgrMsg success
SendInstallPCMgrMsg,not find ipc window
.\ParamOnShareMemory.cpp
Assert failed!! File:%s, line:%d, operation:m_lpMapViewPtr
Assert failed!! File:%s, line:%d, operation:*GetMemoryPtr(m_OffsetOfParamNums) < MAX_PARAM_NUM
f:\1161\Source\Include\QQMusicCommon\ParamOnShareMemory.h
Assert failed!! File:%s, line:%d, operation:pParam && dwBytes > 0
.\QMCommandQueue.cpp
Assert failed!! File:%s, line:%d, operation:NULL != cmd
.\QMFileFind.cpp
Assert failed!! File:%s, line:%d, operation:it != m_wildcard.end()
Assert failed!! File:%s, line:%d, operation:!strFolderPath.IsEmpty()
f:\1161\source\include\qqmusiccommon\SimpleThread.inl
Assert failed!! File:%s, line:%d, operation:!IsRunning()
.\QMService.cpp
Assert failed!! File:%s, line:%d, operation:NULL != task
Assert failed!! File:%s, line:%d, operation:GetCurrentThreadId() == m_dwCurrentThreadId
.\QMStrCvt.cpp
Assert failed!! File:%s, line:%d, operation:pstr
Assert failed!! File:%s, line:%d, operation:INT_MAX/2 > nCvtLen
Assert failed!! File:%s, line:%d, operation:pwstrCvt
Assert failed!! File:%s, line:%d, operation:nNewLen != 0
Assert failed!! File:%s, line:%d, operation:false
Assert failed!! File:%s, line:%d, operation:LOWORD(dwCode) == dwCode
Assert failed!! File:%s, line:%d, operation:pwstr
Assert failed!! File:%s, line:%d, operation:pDestStr
Assert failed!! File:%s, line:%d, operation:nRet > 0
Assert failed!! File:%s, line:%d, operation:pBufNew
Assert failed!! File:%s, line:%d, operation:nNewLen > 0
Assert failed!! File:%s, line:%d, operation:pbufNew
.\QQMusicVersion.cpp
Assert failed!! File:%s, line:%d, operation:0 != nAppVersion
\StringFileInfo\xx\ProductName
%d*%d
\mshtml.dll
%d.%d.%d-%d, %s
%d,%d,%d,%d,%d,%d,%d,%d
errQrc.qrc
QrcMaker.dll
Lyric_%d
<QrcHeadInfo SaveTime="%d" Version="100"/>
<LyricInfo LyricCount="%d">
x.\SplitHLP.cpp
Assert failed!! File:%s, line:%d, operation:pMapinfo
%s=%s
\ \?\#\-\[\]\(\)\
\<\>\~\ \:\/
\_]*)?({[^]*)?({[^http:
YesterdayVVV.beetin.com
Leonna LewisVVV.beetin.com
SpiritVVV.beetin.com
VVV.456Vv.com
[email protected]
S.H.E.VVV.qq.com
VVV.qq.com
call VVV.qq.com(1)
The Bee Gees[club.xiala.com]
search.qq_music.com-
search.qq-music.qq.com-
VVV.2651.cn
hXXp://music.zsnet.com-
hXXp://rainkelly.net
hXXp://VVV.rainkelly.net
slrfeel.com-Jay Chou
(music.qq.com)
[club.xiala.com]
CQMPThreadBase::BeginThread, err is:%d
CQMPThreadBase::StopThread, TerminateThread id is:%u
CQMPThread::CMThread_Run ThreadPoolRun begin, pti is:%u, the_player is:%u
CQMPThread::CMThread_Run ThreadPoolRun end, pti is:%u, the_player is:%u
CQMPThread::SetSink pti is:%u, sink is:%u
CQMPThread::SetSink pti is:%u
CQMPThread::StopThread m_nThreadID is:%u, m_pti is:%u
CQMPThreadPool::~CQMPThreadPool begin, list size is:%u
CQMPThreadPool::GetQmpThread begin, sink is:%u
CQMPThreadPool::GetQmpThread use idle thread, thread id is:%u
CQMPThreadPool::GetQmpThread use new thread, thread id is:%u
CQMPThreadPool::Stop begin, list size is:%u
https
.\Util.cpp
Assert failed!! File:%s, line:%d, operation:iRes == Z_OK && dwDestLen > 0
Assert failed!! File:%s, line:%d, operation:szCmd
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(StringCchCopy(szCmd, _tcslen(lpszCmd) 1, lpszCmd))
CUtil::CreateProcessWithCurrentProcessToken(), OpenProcessToken failed, err = %d
CUtil::CreateProcessWithCurrentProcessToken(), CreateProcessAsUser failed, err = %d
CUtil::CreateProcessWithCurrentProcessToken(), AssignProcessToJobObject failed, err = %d
Assert failed!! File:%s, line:%d, operation:lpszAppPath
Assert failed!! File:%s, line:%d, operation:!vecAppPaths.empty()
Assert failed!! File:%s, line:%d, operation:_tcslen(szBuffer) != 0
Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
Assert failed!! File:%s, line:%d, operation:ERROR_SUCCESS == RegDeleteValue(hKey, szBuffer)
,errno = %d.
ykernel32.dll
.ERRNO= %u.
DnsQuery for %s failed with errno %u.
urlmon.dll
CUtil::CompressOneFile:CAN'T open %s.
CUtil zipWriteInFileInZip faied with return err: %d.
CUtil zipOpenNewFileInZip failed with return value %d.
.\WindowFunc.cpp
Assert failed!! File:%s, line:%d, operation:pHwnd
Assert failed!! File:%s, line:%d, operation:hThreadSnap != INVALID_HANDLE_VALUE
Assert failed!! File:%s, line:%d, operation:hTempThread
is:%u
.\prof\prof.cpp
Assert failed!! File:%s, line:%d, operation:perceptiveMillisec != 0 && codeMillisec != 0
[Prof] %s
_d_d_d_d_d_d
[Login]
[Level%d]
ProfVector::vec_data_join(), strKey = %s, nTimeWorth = %d
%s__%d__%s__%d
version=%d, time=%d, cold=%d, auto=%d
QBIE.dll
err = %u
GetQQMusicMemInfo(), Process ID: %u
GetQQMusicMemInfo(), GetProcessMemoryInfo failed, err = %d
QQMusicExternal.exe
ConfigInfo2.dat
QQMusicInternal.ini
mole.ini
SyncListKey.ini
LoginNum
InfoLogin
.\QMCA\QMca_api.cpp
Assert failed!! File:%s, line:%d, operation:GetVersionEx((OSVERSIONINFO*)&OSVerInfoEx)
Assert failed!! File:%s, line:%d, operation:length%2==0
Assert failed!! File:%s, line:%d, operation:!strURL.IsEmpty()
Assert failed!! File:%s, line:%d, operation:NULL != pIWININETDll
Assert failed!! File:%s, line:%d, operation:::GetLastError() == ERROR_INSUFFICIENT_BUFFER
Assert failed!! File:%s, line:%d, operation:bRet
CA_File Open error code is:%u. %s
.\QMCA\QMca_qqapi.cpp
Assert failed!! File:%s, line:%d, operation:NULL != pParams
Assert failed!! File:%s, line:%d, operation:VT_I4 == vValue.vt
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && pMainCreator
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && pDisp
Assert failed!! File:%s, line:%d, operation:pQQAPI
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && pObjectDisp
Assert failed!! File:%s, line:%d, operation:pObject
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && pParamDisp
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && vResult.vt == VT_DISPATCH
Assert failed!! File:%s, line:%d, operation:pResult
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && vSignature.vt == (VT_I1 | VT_ARRAY)
%s,%u
[%u]CallRichStatue begin
[%u]CallRichStatue CoCreateInstance error CallRichStatue_CoCreateInstance_QQMainCreator_Fail
[%u]CallRichStatue EnumIMObject error CallRichStatue_MainCreator_EnumIMObject_Fail
[%u]CallRichStatue stackpDisp size is 0 error CallRichStatue_stackpDisp_Empty
[%u]CallRichStatue QueryInterface FAILED
[%u]CallRichStatue GetObj FAILED
[%u]CallRichStatue pObject FAILED
[%u]CallRichStatue GetObj2 FAILED
[%u]CallRichStatue QueryInterface2 FAILED
[%u]CallRichStatue Call FAILED
[%u]CallRichStatue end
Assert failed!! File:%s, line:%d, operation:pDisp
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && pQQAPI
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && VT_DISPATCH == vPorerty.vt
Assert failed!! File:%s, line:%d, operation:pParams
Nick
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && vQQName.vt == VT_BSTR
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && vQQFace.vt == VT_I4
Assert failed!! File:%s, line:%d, operation:SUCCEEDED(hr) && vQQStat.vt == VT_I2
Assert failed!! File:%s, line:%d, operation:GetQQUin(pParams, oQQInfo.m_uUin)
EnumOnlineQQ, EnumIMObject hr[0x%x]
EnumOnlineQQ, GetQQInfo, info stat is:%u, uUin is:%u
EnumOnlineQQ, before sort vecQQInfo size is:%u
EnumOnlineQQ, end sort vecQQInfo size is:%u
.\QMCA\QMca_stream.cpp
Assert failed!! File:%s, line:%d, operation:lpszFilePath && lpszStreamPath
Assert failed!! File:%s, line:%d, operation:QM::CreateDirectory(strFilePath)
Assert failed!! File:%s, line:%d, operation:m_pStream
f:\1161\source\qqmusiccommon\asyncapi\AsyncAPIBase.h
qqmusic.exe
<AsyncAPI>:%s GetResultFromAPI!
<AsyncAPI>:%s ParseWStringToKey Error!
<AsyncAPI>:%s ParseValueToWString Error!
<AsyncAPI>:%s GetResultFromStrKey Success!, key:%s, value:%s
<AsyncAPI>:%s GetResultInternal!
<AsyncAPI>:%s ParseKeyToWString Error!
<AsyncAPI>:%s GetResultInternal, key is empty!
<AsyncAPI>:%s GetResultInternal, key is %s, value is empty!
<AsyncAPI>:%s ParseWStringToValue Error!
<AsyncAPI>:%s GetResultInternal Success!, key:%s, value:%s
<AsyncAPI> GetValueFromKey,
<AsyncAPI> GetValueFromKey, %s, %s
WinHttp.dll
Failed to load winhttp module
.\AsyncAPI\AsyncDetectIEProxyImpl.cpp
Assert failed!! File:%s, line:%d, operation:index != std::wstring::npos
Assert failed!! File:%s, line:%d, operation:usPort > 1 && usPort < 65535
http=
https=
Assert failed!! File:%s, line:%d, operation:!strServerPort.empty()
Assert failed!! File:%s, line:%d, operation:String2IPPort(strServerPort, strServer, usPort)
hostent2.dat
<gethostbyname> %s
h_name:%s, h_addrtype:%d, h_length:%d
h_aliases[%d]: %s
h_addr_list[%d]: %s
<AsyncAPI> classname:%s, key:%s, old value:%s, new value:%s
<AsyncAPI> classname:%s, key:%s, value:%s
.\AsyncAPI\AsyncThreadMgr.cpp
CreatePltfrmSdkItfOwn(), error eType = %d
f:\1161\source\qqmusiccommon\platformsdkwrapper\PlatformSdkTemplateWrapper.h
Shlwapi.dll
WVersion.dll
msimg32.dll
rExceptCatch.dll
PSAPI.dll
arkIOStub.dll
rjgImage.dll
SETUPAPI.dll
CFGMGR32.dll
PlatformSdkWrapper Call Error, dll=%s, Func=%s
PlatformSdkWrapper OwnCall Error, dll=%s, Func=%s
.\UISupport\MemDC.cpp
Assert failed!! File:%s, line:%d, operation:m_hMemDC
Assert failed!! File:%s, line:%d, operation:!m_hMemDC
Assert failed!! File:%s, line:%d, operation:!m_hMemBitmap
[%x]SetSafeWindowPos::rcTitle l:%d t:%d r:%d b:%d
[%x]SetSafeWindowPos::MonitorFromRect hMonitor:%x hMonitorTitle:%x
[%x]SetSafeWindowPos::MonitorFromRect hMonitor:%x hMonitorTitle:%x
[%x]SetSafeWindowPos::rcWork l:%d t:%d r:%d b:%d
[%x]SetSafeWindowPos::GetMonitorInfo
[%x]SetSafeWindowPos::SSWP_ALLWORKAREA l:%d t:%d r:%d b:%d
[%x]SetSafeWindowPos::SSWP_ALLWORKAREA left
[%x]SetSafeWindowPos::SSWP_ALLWORKAREA top
[%x]SetSafeWindowPos::SSWP_ALLWORKAREA right
[%x]SetSafeWindowPos::SSWP_ALLWORKAREA bottom
[%x]SetSafeWindowPos::SetWindowPos[%d] l:%d t:%d r:%d b:%d
[%x]SetSafeWindowPos::rcNear l:%d t:%d r:%d b:%d
[%x]SetSafeWindowPos::SSWP_BOTTOM l:%d t:%d r:%d b:%d
[%x]SetSafeWindowPos::SSWP_RIGHT l:%d t:%d r:%d b:%d
[%x]SetSafeWindowPos::SSWP_LEFT l:%d t:%d r:%d b:%d
[%x]SetSafeWindowPos::SSWP_TOP l:%d t:%d r:%d b:%d
[%x]CenterMonitorWindow hPlayerWnd:%x
[%x]CenterMonitorWindow hMonitor:%x
[%x]CenterMonitorWindow::GetMonitorInfo l:%d
[%x]CenterMonitorWindow::MONITORINFOF_PRIMARY
[%x]CenterMonitorWindow::SetWindowPos l:%d t:%d w:%d h:%d
[%x]CenterMonitorWindow::CenterWindow
.\UISupport\MonitorHelper.cpp
qqmusic::MusicSetWindowPos, hwnd is:%u, hwnd after is:%u, x,y,cx,cy is:%u,%u,%u,%u, flag is:%u
qqmusic::MusicSetWindowPos, hwnd is:%u, hwnd after is:%u, x,y,cx,cy is:%u,%u,%u,%u, flag is:%u,str is:%s
.\UISupport\UIHelper.cpp
Assert failed!! File:%s, line:%d, operation:hWnd != NULL
static BOOL ModifyWindowStyle SWP_NOSIZE | SWP_NOMOVE | SWP_NOZORDER | SWP_NOACTIVATE
Albumdefault.png
AlbumHQMusic.png
AlbumReflection.png
AlbumReflection2.png
.\UISupport\UseGDIPlus.cpp
All Files (*.*)
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
#Unable to load mail system support.
Access to %1 was denied..An invalid file handle was associated with %1.<%1 could not be removed because it is the current directory.6%1 could not be created because the directory is full.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Disk full while accessing %1..An attempt was made to access %1 past its end.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
3.0.2013.8
%original file name%.exe_1660_rwx_00FB0000_0003E000:
`.rsrc
L$(h%f
SSh0j
msctls_hotkey32
TVCLHotKey
THotKey
\skinh.she
}uo,x6l5k%x-l h
9p%s m)t4`#b
e"m?c&y1`Ð<
SetViewportOrgEx
SetViewportExtEx
SetWindowsHookExA
UnhookWindowsHookEx
EnumThreadWindows
EnumChildWindows
`c%US.4/
!#$<#$#=
.text
`.rdata
@.data
.rsrc
@.UPX0
`.UPX1
`.reloc
hJK.ZH
O.qt0
KERNEL32.DLL
COMCTL32.dll
GDI32.dll
MSIMG32.dll
MSVCRT.dll
MSVFW32.dll
USER32.dll
SkinH_EL.dll
1, 0, 6, 6
- Skin.dll
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
- Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\9FHLABP4\desktop.ini (67 bytes)
C:\jedata.dll (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GF66CSMA\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\FGQUCZRW\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\92MRTWP4\desktop.ini (67 bytes) - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.