Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 231af98afa9420da45dbeff33867e39f --

Hashes
MD5: 231af98afa9420da45dbeff33867e39f
SHA1: 981ec5fdddae071a6ed35f12b54ac2e14e157dba
SHA256: a48b12f387447754eef8dad75bce8957384a84adea1a2fe2d40d759dee947af4
SSDEEP: 12288:iE5AsovaAaJ6+VcDad+xgEN8URAMqvAB2ND:iErAaJpWDa0NXRAMqvAB2ND
Details
File Type: PE32
Yara Hits
CuckooSandbox/vmdetect | YRP/Armadillo_v1xx_v2xx_additional | YRP/Microsoft_Visual_Cpp_60_DLL_additional | YRP/Microsoft_Visual_Cpp_v70_DLL | YRP/Microsoft_Visual_Cpp_v50v60_MFC | YRP/Microsoft_Visual_Cpp_60_DLL_Debug | YRP/Armadillo_v1xx_v2xx | YRP/Microsoft_Visual_Cpp_v60_DLL | YRP/Microsoft_Visual_Cpp_60_DLL | YRP/Microsoft_Visual_Cpp_60 | YRP/Armadillov1xxv2xx | YRP/IsPE32 | YRP/IsDLL | YRP/IsWindowsGUI | YRP/HasOverlay | YRP/HasDigitalSignature | YRP/HasDebugData | YRP/HasRichSignature | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/Antivirus | YRP/VMWare_Detection | YRP/Dropper_Strings | YRP/SEH__vectored | YRP/vmdetect | YRP/Check_OutputDebugStringA_iat | YRP/anti_dbg | YRP/inject_thread | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/CRC32_poly_Constant | YRP/CRC32_table | YRP/MD5_Constants | YRP/BASE64_table | YRP/Str_Win32_Winsock2_Library | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API | YRP/Str_Win32_Http_API |
Parent Files
0286b13c4007773104e528219fcc420f
Strings
		!This program cannot be run in DOS mode.
gzDvxqD
gzDvx~D
g{DQfzD
gzDYa|D
gzDaG~D
gzDRich
`.rdata
@.data
@.reloc
tbf90t]SW
PSSSSSS
PSSSSSS
F(_t&9^
n9^ tij
89^ t3j
n9^ tij
89^ t3j
;F(t^9}
SSQPSS
QQSVW3
SVWj	Y
SVWj	Y
SVWj	Y
PSSht|
PWShd}
QSVSSSPW
PSVSSS
QSVSSSPW
PSVSSS
QQVWh(
\t'h ~
~$;~(t
uF9>vG
PSSSSS
PSSSSS
6SSPVh@
F,PWVh
PVVVVVV
n9^ tij
89^ t3j
QQSUVWj
Jt	Ju(
u49^\u/j
n9^ tij
89^ t3j
n9^ tij
89^ t3j
T$ YYB
It3It"It
<x_uw8Z
<<t[j0
te<<ua
<"u	SQh
G F;0r
 Wj1_f
uT9^,t
tlHt Ht
~(9~$u
F,;F$|
Yu<WWWW
)F\)F|
FP;FTt
k|_^][Y
YY_^[]
^<9^<u
8;^(r	
udSSSW
t	;Fht
W9^Hu&h
FhPWVh
9XTt3h
Y9C,u+
9~lu89~
WWWWWWWWWWh
^lPWVh
9ChtQWW
9FhtPSS
V9^PtQ
9FhtQSS
]9^PtX
9FhtTSWW
9FhtTSWW
9FhtTSWW
9GhtSSS
u{9{8t
CC@@;E
SSSSSS
SSSSSS
49.t'S
QQSVWj 
HtEHu\
SSQPSS
PSSht|
PWShd}
ca1Bns50CDzUxei4QIwlsm1ORTW8Y6vV5L
 inflate 1.1.3 Copyright 1995-1998 Mark Adler 
Qkkbal
- unzip 0.15 Copyright 1998 Gilles Vollant 
Qkkbal
vmware
ppp/slip
Description
Physical Address
127.0.0.1
0.0.0.0
PathFileExistsW
PathAddBackslashW
PathRemoveFileSpecW
PathRemoveBackslashW
PathAppendW
PathIsDirectoryW
PathFindFileNameW
SHLWAPI.dll
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VERSION.dll
MFC42u.DLL
__CxxFrameHandler
wcslen
memset
strlen
wcschr
wcsncpy
_snwprintf
wcscmp
wcscpy
memcpy
fclose
fwrite
_wfopen
swprintf
sprintf
_purecall
_wcslwr
wcsstr
isprint
isspace
tolower
malloc
isalnum
strncpy
swscanf
strncmp
_snprintf
_wstati64
_wmkdir
_wsplitpath
wcstoul
_ultow
_ui64tow
_except_handler3
_wcsicmp
_CxxThrowException
??0exception@@QAE@ABV0@@Z
strcpy
strcmp
memcmp
strchr
strrchr
strtoul
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_beginthreadex
memmove
fprintf
sscanf
isalpha
wcscat
wcsrchr
calloc
wcsncat
_wcsnicmp
strncat
wprintf
fflush
_getpid
towlower
_strlwr
__dllonexit
_onexit
?terminate@@YAXXZ
MSVCRT.dll
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
LoadLibraryW
GetModuleFileNameW
GetLastError
GetProcAddress
CreateDirectoryW
MultiByteToWideChar
WideCharToMultiByte
lstrcpynW
FreeLibrary
CloseHandle
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WaitForSingleObject
CreateProcessW
GetVersionExW
SystemTimeToFileTime
GetSystemTime
GetProcessTimes
GetCurrentProcess
WriteFile
CreateFileW
GetCurrentProcessId
GetTickCount
ExpandEnvironmentStringsW
CopyFileW
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
DeleteFileW
GetPrivateProfileIntW
LocalFree
GetCommandLineW
InterlockedExchange
SleepEx
OutputDebugStringW
GlobalFree
lstrcpyW
GlobalAlloc
OutputDebugStringA
lstrcpyA
lstrcpynA
CreateMutexW
InterlockedCompareExchange
TerminateThread
RaiseException
LockResource
LoadResource
SizeofResource
FindResourceW
CreateThread
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
GetDiskFreeSpaceExW
DeviceIoControl
QueryDosDeviceW
GetDriveTypeW
GetLogicalDrives
ReadFile
GetFileSize
FindClose
FindFirstFileW
lstrlenW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
GetPrivateProfileStructW
WritePrivateProfileSectionW
WritePrivateProfileStringW
WritePrivateProfileStructW
GetCurrentDirectoryW
GetWindowsDirectoryW
GetSystemDirectoryW
GetTempPathW
GetFullPathNameW
ResumeThread
InterlockedDecrement
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
OpenMutexW
OpenEventW
CreateNamedPipeW
OpenSemaphoreW
GetVersion
lstrcmpiW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
CreateEventW
SetEvent
UnhandledExceptionFilter
SetErrorMode
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
TerminateProcess
WaitForMultipleObjects
WriteProcessMemory
ReadProcessMemory
SetUnhandledExceptionFilter
VirtualAlloc
VirtualAllocEx
GetLocalTime
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetSystemDefaultLangID
GetSystemInfo
VirtualQuery
LoadLibraryA
SetFilePointer
LocalFileTimeToFileTime
GetFileAttributesW
SetFileTime
FileTimeToSystemTime
GetFileInformationByHandle
IsBadReadPtr
ResetEvent
IsBadWritePtr
DuplicateHandle
CreatePipe
GetStdHandle
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
LocalAlloc
KERNEL32.dll
SendMessageTimeoutW
FindWindowW
GetWindowThreadProcessId
GetClassNameW
EnumWindows
PostMessageW
CharUpperW
IsWindowVisible
GetPropW
IsWindow
GetWindow
GetDesktopWindow
SetPropW
DispatchMessageW
TranslateMessage
GetMessageW
SendMessageW
RemovePropW
PostQuitMessage
SetTimer
CreateWindowExW
ShowWindow
DestroyWindow
DefWindowProcW
RegisterClassExW
UnregisterClassW
SetWindowLongW
IsIconic
FindWindowA
USER32.dll
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
LookupAccountNameW
RegDeleteValueW
RegDeleteKeyW
LookupAccountSidW
GetTokenInformation
OpenProcessToken
RegEnumKeyExW
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityInfo
CloseServiceHandle
OpenServiceW
OpenSCManagerW
QueryServiceConfigW
RegOpenKeyW
ADVAPI32.dll
SHGetSpecialFolderPathW
CommandLineToArgvW
ShellExecuteW
SHELL32.dll
CoUninitialize
CoCreateGuid
CoInitialize
CLSIDFromProgID
CoInitializeEx
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoLoadLibrary
CoFreeLibrary
ole32.dll
OLEAUT32.dll
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGPAG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?_Xran@std@@YAXXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@II@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??_7out_of_range@std@@6B@
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?nothrow@std@@3Unothrow_t@1@B
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Doraise@bad_cast@std@@MBEXXZ
??0bad_cast@std@@QAE@ABV01@@Z
??_D?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??_7bad_cast@std@@6B@
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBGI@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find_last_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
MSVCP60.dll
WS2_32.dll
NetApiBufferFree
NetWkstaTransportEnum
Netbios
NETAPI32.dll
HttpQueryInfoW
InternetOpenUrlW
InternetOpenW
InternetGetConnectedState
InternetReadFile
InternetCloseHandle
WININET.dll
_callnewh
_strcmpi
QQPCDetector.dll
GetDectectorResultEx
NsisGetDectectorResultA
NsisGetDectectorResultEx
NsisRunDetectorA
NsisRunDetectorEx
NsisWaitDetectorCompleteA
NsisWaitDetectorCompleteEx
QQBrowserModuleEntry
QQBrowserProcessParamVersion
RunDetectorEx
SetDriverService
WaitDetectorCompleteEx
CancelDetector
GetDectectorResult
InitDetector
InitDownloader
InitLoadLoadParam
NsisGetDectectorResult
NsisRunDetector
NsisWaitDetectorComplete
ReleaseDR
RunDetector
RunDetectorWithNotification
SetGroupId
UnInitDetector
WaitDetectorComplete
SetDllDirectoryW
GetModuleFileNameExW
WaitDetectorCompleteEx
GetDectectorResultEx
RunDetectorEx
SetGroupId
UnInitDetector
InitDetector
CancelDetector
WaitDetectorComplete
GetDectectorResult
RunDetector
%d.%d.%d.%d
master.etl.desktop.qq.com
masterconn11.qq.com
SCSIDISK
GetAdaptersInfo
PnpInstanceID
MediaSubType
%s\Connection
System\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}
ConvertSidToStringSidW
WTSFreeMemory
WTSQuerySessionInformationW
ProcessIdToSessionId
GetModuleHandleExW
{8CEFC9E6-A2B4-4c2a-823C-6903A31139FA}
GetFileSizeEx
.?AVexception@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
invalid vector<T> subscript
QueryServiceStatusEx
IsWow64Process
NtQuerySystemInformation
config
forceexcute
ruleex
downloadfile
downloadmodule
driver
object
regvalue
service
checkorderid
mainexename
version
keyvalue
keyname
appname
EncryptCode
fsEncrypt
folder
subkey
mainkey
regcontent
errorMessage
MixMode
downloadtype
bforceload
forcelaucherparam
forcelaunchname
cancelfunctionname
initfunctionname
functionname
moduletype
needrecord
pushinterval
maxfailcount
pushpolicy
versiondigit
checkversion
productname
productid
wording
command
filename
EntryName
QQPCDownload\install\
IsSupportNoReName
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
3+&7k!I~F,@#y$^d
.?AVbad_lexical_cast@fund@QMDDetector@@
.?AVbad_cast@std@@
.?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@
bad cast
&#x%02X;
%s='%s'
%s="%s"
<!--%s-->
<![CDATA[%s]]>
standalone="
standalone="%s" 
encoding="
encoding="%s" 
version="
version="%s" 
<?xml 
<![CDATA[
Error when TiXmlDocument added to document, because TiXmlDocument can only be at the root.
Error parsing CDATA.
Error null (0) or unexpected EOF found in input stream.
Error document empty.
Error parsing Declaration.
Error parsing Comment.
Error parsing Unknown.
Error reading end tag.
Error: empty tag.
Error reading Attributes.
Error reading Element value.
Failed to read Element name
Error parsing Element.
Memory allocation failed.
Failed to open file
No error
&apos;
&quot;
standalone
encoding
QDKeyName
QDSubKey
QDFilePath2
QDFilePath
NotifyQDInstallFlags
NotifyQDSupplyid
NotifyQDFlags
NotifyQQParam
NotifyQQDestSupplyid
NotifyQQCmdFlags
NotifyQQCmd
bNofityQM
bNofityQQ
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
Qkkbal
-%d%03x%05x%d%x%x
%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x
GetNativeSystemInfo
UnInit
GetGuid
ReleaseIReportClient
CreateIReportClient
!3f@&d8F-j*n95ep
incompatible version
buffer error
insufficient memory
data error
stream error
file error
stream end
need dictionary
invalid distance code
invalid literal/length code
invalid bit length repeat
too many length or distance symbols
invalid stored block lengths
invalid block type
incomplete dynamic bit lengths tree
oversubscribed dynamic bit lengths tree
incomplete literal/length tree
oversubscribed literal/length tree
empty distance tree with lengths
incomplete distance tree
oversubscribed distance tree
incorrect data check
incorrect header check
invalid window size
unknown compression method
ct_init: 256+dist != 512
ct_init: dist != 256
ct_init: length != 256
code %d bits %d->%d
bit length overflow
gen_codes: max_code %d 
inconsistent bit counts
dyn trees: dyn %ld, stat %ld
dist tree: sent %ld
lit tree: sent %ld
bl tree: sent %ld
bl code %2d 
bl counts: 
too many codes
not enough codes
bad compressed size
opt %lu(%lu) stat %lu(%lu) stored %lu lit %u dist %u 
dist data: dyn %ld, stat %ld
lit data: dyn %ld, stat %ld
last_lit %u, last_dist %u, in %ld, out ~%ld(%ld%%) 
ct_tally: bad match
bad d_code
invalid length
output buffer too small for in-memory compression
bad pack level
wild scan
no future
insufficient lookahead
Code too clever
more < 2
Call UPDATE_HASH() MIN_MATCH-3 more times
Zip-bug: internal initialisation not completed
Zip-bug: trying to seek the unseekable
Zip-bug: tried to change mind, but not allowed
Zip-bug: an internal error during flation
Caller: mixing creation and opening of zip
Caller: not enough space allocated for memory zipfile
Caller: there was a previous error
Caller: additions to the zip have already been ended
Zip-bug: the anticipated size turned out wrong
Caller: the file had already been partially unzipped
Caller: can only get memory of a memory zipfile
Still more data to unzip
Zipfile is corrupt or not a zipfile
Error reading file
Caller: faulty arguments
File not found in the zipfile
Success
Culdn't duplicate handle
Couldn't create/open file
Failed to allocate memory
Error writing to file
unknown zip result code
CDownload: DownloadNotify invalid pointer!
$MD5Version: 1.0.0 November-19-1997 $
$Id: md5.c,v 1.1.1.1 2004/05/17 13:23:36 rcrittenden0569 Exp $
0123456789abcdef
update%d%02d%02d%02d%02d%02d.log
LogView_qqpcmgr
Unknown
(%d) %02d:%02d:%02d.%03d000 %s: %s
%s Len=%d
%s Len=%d (RealLen=%d, too long)
ReleaseCommLib
fs_report.qq.com
fs_h2u.qq.com
fs_conn.qq.com
fs_hello.qq.com
xuanfengnet.qq.com
stun.qq.com
fs_tcp_conn.qq.com
pdlxf.qq.com
DllGetClassObject
bluetooth
wireless
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpReadData
WinHttpCloseHandle
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpSetStatusCallback
.?AVCNoTrackObject@@
.?AVAFX_MODULE_STATE@@
.?AV_AFX_DLL_MODULE_STATE@@
.?AVtype_info@@
!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
xHj{hl
tjHHt0
VWj@Y3
0SVWh4
dr_packet.dat
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventA
CloseHandle
ResetEvent
SetEvent
GetModuleFileNameA
WriteFile
SetFilePointer
GetFileSize
CreateFileA
ExpandEnvironmentStringsA
WaitForSingleObject
GetTickCount
IsBadReadPtr
DeviceIoControl
GetLastError
GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
ReadFile
DeleteFileA
CopyFileA
FindClose
FindFirstFileA
KERNEL32.dll
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
ADVAPI32.dll
SHGetSpecialFolderPathA
SHELL32.dll
CoUninitialize
CoCreateGuid
CoInitialize
ole32.dll
__CxxFrameHandler
strlen
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
memset
fclose
fprintf
strrchr
_except_handler3
_beginthreadex
isprint
isspace
tolower
_snprintf
malloc
isalnum
strncpy
swscanf
strncat
strncmp
strchr
_stati64
_mkdir
_splitpath
strtoul
MSVCRT.dll
__dllonexit
_onexit
_initterm
_adjust_fdiv
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?nothrow@std@@3Unothrow_t@1@B
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
MSVCP60.dll
WS2_32.dll
NetApiBufferFree
NetWkstaTransportEnum
Netbios
NETAPI32.dll
_stricmp
_callnewh
dr.dll
CreateIReportClient
GetGuid
ReleaseIReportClient
UnInit
!3f@&d8F-j*n95ep
0123456789ABCDEF
nettest.exe
qqpctray.exe
domain_name_
dr.ini
c_%d = %d
domain_name_%d = %s
%ALLUSERSPROFILE%\Application Data\Tencent\QQPCMgr\
125.39.120.82
113.105.95.120
thread exception 
\\.\PhysicalDrive%d
SCSIDISK
\\.\Scsi%d:
GetAdaptersInfo
iphlpapi.dll
PnpInstanceID
MediaSubType
%s\Connection
System\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}
$MD5Version: 1.0.0 November-19-1997 $
$Id: md5.c,v 1.1.1.1 2004/05/17 13:23:36 rcrittenden0569 Exp $
\Global.db
\Tencent\Desktop
\Tencent\DeskUpdate
353;3t3
5#5B5\5
6!6'6V8`8l8v8
:4;N;y;
;#<9<G<N<Y<`<f<n<|<
=U=\=f=u=?>S>
50;0\0
2*2@2E2Y2h2t2
454w4|4
5/5E5\5b5
626@6R6o6
6D7f7k7}7
8#9A9Y9
:5;D;_;s;
<-<@<|<
>"?s?x?
0?0O0|0
7F7O7U7\7b7k7q7x7}7
9.9a9z9
:*:0:5:A:G:
=,>G>N>
0B0G0T0
3]4c4k4q4{4
<%<><M<~<
7E7K7S7Z7f7o7
464a4z4
5 5-5R5
767B7V7i7n7}7
9H9T9p9
9H:X:i:
;U;a;};
;-<=<N<e<u<
<9=E=]=
?$?2?B?`?e?|?
1%131P1`1n1
2!2=2l2
3$3A3Q3_3|3
06S6Y6
8)878y8
8+9B9R9Y9e9
:C:\:u:
<(<9<O<n<s<
=%=N=d=
>8>K>]>q>
?$?2?>?Q?X?o?
0.0?0R0`0m0{0
132X2j2
474D4d4
5"585]5o5z5
6"686H6f6x6
7 707A7S7d7r7
808:8H8T8v8
9B9T9j9w9
:J:X:i:v:
:	;,;3;Q;s;
>)>m>t>
0J0h0m0y0
181>1D1J1
3$3*303@3h3
5"535D5M5R5a5j5s5|5
6-6M6V6[6m6
7+7C7[7i7n7}7
8$858>8G8L8]8f8o8t8
9"999?9M9R9a9j9s9|9
:%:.:3:A:F:X:a:f:u:z:
;!;*;/;=;N;S;a;f;
l2p2t2x2|2
3(3D3L3T3`3h3
4,484T4`4|4
5(5D5P5l5t5|5
6,646<6D6L6X6t6|6
7$7,787T7\7h7
8,888T8`8|8
9(9D9P9l9x9
:$:0:L:T:\:h:
;,;4;<;D;L;T;\;d;l;x;
<$<0<L<T<\<d<l<t<|<
=$=0=L=T=`=|=
>,>4><>D>P>l>t>
?4?@?\?h?
0H0L04282
C:\General\bin\dr.pdb
Western Cape1
Durbanville1
Thawte1
Thawte Certification1
Thawte Timestamping CA0
121221000000Z
201230235959Z0^1
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
http://ocsp.thawte.com0
.http://crl.thawte.com/ThawteTimestampingCA.crl0
TimeStamp-2048-10
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
121018000000Z
201229235959Z0b1
Symantec Corporation1402
+Symantec Time Stamping Services Signer - G40
http://ts-ocsp.ws.symantec.com07
+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
TimeStamp-2048-20
E+QLI4
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA0
130117000000Z
160216235959Z0
	guangdong1
shenzhen1503
,Tencent Technology(Shenzhen) Company Limited1>0<
5Digital ID Class 3 - Microsoft Software Validation v21503
,Tencent Technology(Shenzhen) Company Limited0
/http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
https://www.verisign.com/rpa0
http://ocsp.verisign.com0;
/http://csc3-2010-aia.verisign.com/CSC3-2010.cer0
VeriSign, Inc.1
VeriSign Trust Network1:08
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
<VeriSign Class 3 Public Primary Certification Authority - G50
100208000000Z
200207235959Z0
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA0
https://www.verisign.com/cps0*
https://www.verisign.com/rpa0
[0Y0W0U
	image/gif0!0
#http://logo.verisign.com/vslogo.gif04
#http://crl.verisign.com/pca3-g5.crl04
http://ocsp.verisign.com0
VeriSignMPKI-2-80
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA
E+QLI4
Symantec Corporation100.
'Symantec Time Stamping Services CA - G2
150114124936Z0#
020P0Z0f0
1#1V1y1
5h5s5{5
5"6+686y6
70757D7X7`7j7w7
=.=N=X=z=
021S1e1n1
2 2.2b2
424D4V4
5/585N5e5w5
5+6U6x6
8 8/8G8e8
;#;G;T;e;x;
="=0=O=j=
>3>@>Q>[>d>
>a?g?o?u?
4.4r4y4
6?7P7\7u7z7
:&:,:?:F:V:o:z:
;*;7;D;Q;^;k;x;
;1<6<U<\<r<{<
=/=6=<=B=H=S=]=f=
>"><>k>x>
?A?v?}?
0+121>1^1d1q1
2H2O2]2c2z2
3%3+363<3G3M3X3^3i3o3z3
5.585N5`5f5}5
6T6d6n6t6y6
7!7)717=7E7J7o7w7
:.:Z:c:l:|:
:*;@;q;
<9=Z=c=n=
=&>?>E>P>m>u>
?&?.?<?B?R?W?`?q?z?
10?0U0`0o0
061?1H1P1Z1b1g1q1|1
2$2,222<2O2z2
7'707D7
292D2T2l2
213<3L3d3
3)444D4\4
4!5,5<5T5
6$646L6w6
7,7D7o7
8$8<8g8y8
949_9q9
:,:W:i:{:
;$;O;a;s;
<G<Y<k<
=?=Q=c=
>7>I>[>
?/?A?S?
'090K0{0
111C1s1x1
2)2;2k2p2}2
3!333c3h3u3
4+4[4`4m4
5#5S5X5e5
6K6P6]6
7C7H7U7
8;8@8M8
93989E9y9
9+:0:=:q:|:
;);5;A;M;Y;e;q;};
2%3<3Y3
3+4B4_4
415H5e5
576N6k6
6=7T7q7
7C8Z8w8
8/8@8V8g8
9-9`9e9v9
:;:@:Q:
;,;_;d;u;
<:<?<P<
="===K=m=
1)202<2_2
3*3P334
4 5'5N5_5t5
5 626:6I6j6
677T7o7z7
;_;|;'<Y<y<
4/565V5f6
<(=1=8=K=Z=o=
=7>=>N>Y>q>
>#?)?;?l?
0$04090I0
3&3>3l3
6$6*646
=!=&=6=I=N=^=q=v=
? ?,?5?I?
4!4-464K4
8(818E8u8	9)9_9
0*0:1s1
222B3{3
7b7l7u7{7
7(8.868<8F8
829B9Z9
1&6/656?6J6^6
6%7]7l7s7
9%:@:d:p:
?-?:?G?n?
151I1X1c1m1
4:4?4V4d4p4y4
6.6>6L6i6}6
7#838@8]8m8z8
9*9=9H9
:U;d;s;
212D2Z2
3.3?3M3[3l3
3 4.4<4U4|4
5'5@5k5q5
6(6F6\6k6
7/7>7]7r7
82878K8Y8c8l8s8|8
9#909D9J9O9e9x9
:F:K:X:j:z:
;);>;e;t;
<&<9<I<X<|<
=*=9=_=m=z=
>%>/>;>D>J>T>_>e>
2/2@2G2L2R2W2|2
4;4L4[4m4
5<5B5K5Z5c5
5I6c6t6
7'7:7F7_7
8,8I8v8
9Q9k9z9
:!:0:6:;:J:]:i:
;!;[;o;
;-<A<R<a<g<l<{<
=9=^=g=
> >1>@>F>K>Z>m>y>
?,?f?z?
1,1:1p1y1
2"212D2P2i2
3!3I3_3
4*4;4^4x4
445J5U5
576X6_6i6
7 7)777y7
8#8=8^8v8
9#9:9|9
:":::R:
;);@;K;S;`;k;
<Q<f<}<
+0^0s0
101b1~1
4$4R4d4
4+555T5
7,737q7z7
7#8,8;8B8O8j8z8
939[9b9i9p9w9~9
< =)=~=
=->4>Q>
?>?E?P?]?
	0&040B0U0j0x071G1O1X1s1x1
2U2\2y2
3#3)353;3r3w3
3H4U4u4|4
5#5<5b5h5
717?7L7[7b7
<.<9<I<[<c>
1	2&2C2
2!363G3U3^3c3
3(4<4H4
505N5]5
748F8q8
:4:`:e:j:t:{:
:$;9;@;U;`;g;
<#<+<`<
?%?2?r?
3=4F4T4p4u4{4
7-868D8`8e8k8u8{8
9&919B9r9
;A;V;y;~;
=@=M=a=
0>0L0Q0V0e0l0|0
1$2>2C2U2f2k2p2
929Y9u9
9F:L:[:
;R;W;f;
0 0,0]0f0
6;6@6N6|6
6Y7_7g7m7w7
:#;i<v<
=$=-=A=k=
0/151=1D1P1Y1m1
5-6T6Y6f6
<2=9=Y=i=z>
2#383F3T3
6<7A7q7
?*?6?h?
1+1Z1j1s1
979P9i9
<.<D<`<|<
=2=N=j=
060L0p0
2"2>2Z2
6^6w6|6
7+7:7B7Q7
96:E:N:p:
:3;B;{;
<!<.<l<
5 595P5[5f5q5|5
6!6.6:6D6J6n61:I:y:~:
;/;A;q;v;
<'<9<i<n<{<
=1=a=f=s=
>)>Y>^>k>
?!?Q?V?c?
0I0N0[0
1A1F1S1
1	292>2K2
31363C3w3
3)4.4;4o4z4
4!5&535g5r5
6+6_6j6z6
;%;0;O;j;x;
<8<D<Q<W<a<y<
>D>P>V>a>k>
2;2R2l2
373G3V3e3{3
424<4L4\4x4
5(5F5]5g5w5
636>6Y6w6
7,7O7d7k7
8,8H8^8
9*9A9K9[9k9
:$<8<U=_=j=~=
>*???D?J?r?x?
2+32393C3
444@4F4
5+6Q6`6m6
8%8@8P8
9*9Y9`9i9o9
:2:;:H:X:
;&;2;Y;
= >J>^>e>y>
?%?1?C?V?e?
00060]0b0s0
1+1;1t1
3&3T4Z4
565;5J5t5
6$6+6?6F6c6
777=7O7V7]7g7
718@8O8
=#>)>1>8>D>M>a>
0"0B0Q0b1r1
727v7{7
8-828>8V8[8h8
9/9Z9l9~9
:':R:d:v:
;J;\;n;
<B<T<f<
=:=L=^=
>2>D>V>
>*?<?N?~?
"040F0v0{0
1,1>1n1s1
2$262f2k2x2
3.3^3c3p3
4&4V4[4h4
5=5m5}5
>#?:?W?
1+101D1
?1?C?U?
)0;0M0}0
0!131E1u1z1
2+2=2m2r2
3#353e3j3w3
4-4]4b4o4
5%5U5Z5g5
6M6R6_6
7E7J7W7
8=8B8O8
959:9G9{9
9-:2:?:s:~:
: ;O;l;
;><U<r<
<D=[=x=
=J>a>~>
1%2e2j2~2
4A4I4p4
495M5a5g5l5
6,6>6M6\6z6
8'8B8G8W8h8
9/9A9F9R9`9
:/:J:P:k:
<><S<d<r<
=*=K=]=n=|=
>Y>_>g>m>w>
3"3+3?3
9X:^:n:t:
474I4]4o4
5#686e6
878B8i8
9?9X9y9
>K>e>n>
00<0m0|0
2-373X3o3
5%5n5u5
1*2;2c2
8W9x9g:
;'<><q<C=
>b>Q?t?{?
4/494E4Y4_4e4q4w4
5'5;5E5Q5e5o5{5
:/:6:=:G:
=*=S=k=
?Q?Z?f?l?
1'1V1_1
1a2h2o2y2
4#454T4f4|4
555;5b5{5
6$6>6H6T6~6
;)</<7<><J<S<g<
3'3/373@3F3O3U3c3n3v3~3
4(4:4?4L4
5!5'525:5A5G5Y5`5h5q5}5
7%797D7P7Y7
748?8N8a8{8
:=:V:\:
=4=J=`=
=1><>A>H>U>n>{>
>U?i?x?
u0C2y2
757U7n7
8(8C8i8:9
:":0:k:t:
;(;J;Z;h;};
='=8===L=\=x=
>>>Y>g>
>C?Z?a?
S0\0e0m0w0
2!31383E3J3R3W3]3d3i3o3v3{3
5&565F5\5
<l=1?f?
>0B0F0J0N0R0V0Z0^0b0
7?8`8t9x9|9
=:>?>s>x>
1<2S2j2
7c8I9j9n9r9v9z9~9
8*868B8N8
< <A<^<l<t<
=(=O=g=
>2>u>z>
1"1I1N1[1
3%434i4
1M1T1Z1
3[495]5
>?>T>e>v>
4X5b5J6
=#>/>;>G>S>_>
?"?G?P?Y?b?
2(2<2W2v2`3
8>8Y8`8l8
859l9s9
;T;d;m;
<%<.<V<c<{<
="=@=J=i=}=
>,>J>Q>q>}>
?5?I?Y?x?
070>0d0n0
2*2O2t2
4)4I4S4
5-5Y5c5
696F6S6`6
7(7;7D7R7r7
888`8t8
9"9>9H9k9u9
9$:1:W:a:
=%=5=d=u=
=0k0z0
0/1?1S1u1
2)2D2Y2h2
4,4<4k4|4
7,7;7J7\7
8%828;8G8S8p8
9&9E9W9
4,535S5o6
8#8)8<8B8S8b8x8}8
9#969I9y9
:+:9:K:c:
:0;7;H;Y;r;
<I<W<m<
=/=5=O=
>?>D>Q>
?*?=?M?h?
0V0[0b0u0
0#131m1y1
2 2.2v2
4A4L4]4
595G5U5b5p5~5
6*6D6O6
7:7F7i7{7S8{8
95:<:L:[:u:
;8;B;K;U;m;
2(292?2L2l2
3%3-363K3P3`3w3
4%4E4K4\4n4z4
5"545@5l5r5
60666G6Y6e6
7"727>7W7^7l7
9-929G9k9|9
>>>C>U>e>n>
?+?;?Q?q?v?
#04090H0X0n0
0'181=1L1h1~1
2-2Z2i2x2
4"434L4|4
6"686G6`6
797N7o7{7
8'858?8H8O8X8a8~8
9 9&9+9A9T9i9x9
9":':4:F:V:[:m:|:
;A;P;`;{;
<%<4<X<i<{<
=;=I=V=d=
>Q>j>}>
?'?5?M?a?l?~?
0#0)0:0I0O0`0o0
0;1G1N1}1
2,333M3T3
6Q7g7}7
8(8.858>8F8Y8i8x8
949R9Y9g9q9
<5=J=e=w=
1>1G1M1o1
2!2*272B2O2q2}2
2	3!3@3V3u3
384c4p4
7!7&7?7E7h7~7
8%868D8R8^8}8
9-9?9Q9d9q9
:(:5:V:c:
;G<P<]<h<u<
0&0,0g0l0}0
1$11171H1d1|1
1#2>2C2T2`2e2|2
3<3d3i3r3z3
4E4r4~4
9-9I9`;
<'<,<:<`<
=9=?=G=N=Z=c=w=
1+3]3{3
344;4[4k5
9>9C9P9e9
<Q<b<i<v<
<1=I=e=
>@>R>m>v>
?1?7?Z?
4090g0
121[1i1
2?2\2c2
2#343H3Z3e3
334E4[4j4s4
6Q6#717Q7h7
9#:1:F:
<9<@<S<i<z<
=(=5=V=^=}=
>.>H>V>e>}>
"0.070K0Q0k0
383>3\3
3W4v4{4
5!575K5c5:7U7n7}7
9(9@9a9
91:Y:y:
;#;=;M;a;y;
<!<&<@<F<`<f<w<
=*=0=A=S=X=h=|=
>/>D>a>g>x>
?*?4?H?R?
0"040B0L0`0j0
0%1+1<1N1\1f1z1
2&2+2;2G2W2\2p2
4$4/4C4R4
9+9E9J9_9y9~9
:/:C:H:Z:n:s:
:	;';R;`;t;
<0<A<R<c<s<*=g=y=
2$363V3
7!7>7N7\7y7
9-9;9R9f9t9
:m:$;9;R;p;u;
<4<B<N<W<}<
>%>9>G>a>
?)?G?_?n?w?
=0W0l0
8%8,8G8U8[8a8h8
9#9)909F9T9Z9`9g9
:!:(:<:A:\:j:p:v:{:
;';5;;;A;H;c;q;w;};
<$<*<0<6<<<B<H<N<T<Z<`<f<l<r<x<~<
= =&=,=2=8=>=D=J=P=_=o=~=
>>?J?T?
4"4(4.444:4@4F4L4T4~4
5*525@5E5J5O5Z5g5q5
5(6D6J6P6V6\6b6h6n6t6z6
7"7(7.747:7@7F7L7R7X7^7d7j7p7v7|7
8$8*80868<8B8H8N8T8Z8`8f8l8r8x8~8
9 9&9,92989>9D9J9P9V9\9b9h9n9t9z9
:":(:.:4:::@:F:L:R:X:^:d:j:p:v:|:
;$;*;0;6;<;B;H;N;T;Z;`;f;l;r;x;~;
< <&<,<2<8<><D<J<t<z<
="=(=2=8=>=D=J=P=V=\=b=h=n=t=z=
=1>E>Y>i>r>{>
?9?U?y?
0)0.0G0X0d0i0}0
202L2Q2h2
3,313H3d3i3
4(4D4I4`4|4
5$5)5@5\5a5x5
6	6 6<6A6X6t6y6
7!787M7a7u7
8)8=8Q8e8y8
9-9A9U9i9}9
:1:E:Y:m:
;!;5;I;];q;
<%<9<M<a<u<
=)===Q=d=p=u=
>!>&>5>A>M>Y>e>j>
1)1=1Q1e1y1
2)2.2=2B2Q2V2e2j2
3"3+303A3J3S3X3i3r3{3
4 454E4N4W4`4l4u4~4
5)5/5=5B5Q5Z5c5l5u5~5
6%6=6F6K6a6j6o6
7#797B7G7]7f7k7}7
8'989D9I9Y9b9g9
:%:I:]:
;/;I;s;
<1<P<g<
=+=R=g=
>)>S>a>j>o>
?C?`?w?
010>0o0}0
191M1]1b1q1v1
4	555Q5e5
6A6_6u6~6
8$8@8E8\8x8}8
9 9%9<9X9]9t9
:8:=:T:p:u:
;-;A;U;i;};
<1<E<Y<m<
=!=5=I=]=q=
>">'>5>:>L>U>Z>i>n>
141M1R1m1}1
252E2N2W2k2t2y2
2U3e3j3
4 4%4<4X4]4t4
585=5T5p5u5
646P6U6l6
7%797M7a7u7
8!858I8]8q8
9%999M9a9u9
:0:5:L:h:m:
;,;H;M;d;
<(<-<D<`<e<|<
=)===Q=e=y=
>->A>U>i>}>
?1?E?Y?m?
,0A0Q0h0t0
1!1'151>1G1P1Y1e1q1}1
232A2F2Y2m2
303P3p3
4 4@4U4i4}4
676K6]6
7,8I8|8
919H9~9
:-:2:A:J:O:]:i:r:w:
;";8;O;];b;q;v;
<-<A<Q<Z<_<s<
<*===S=e=
>->A>U>s>
?-?A?T?`?l?q?
0 0<0H0T0d0
1)121;1T1]1b1q1v1
2&222>2J2V2b2n2s2
2$3*393B3K3P3a3j3s3|3
4)4.4=4F4O4X4a4j4v4
555H5T5
5#626A6b6w6
7)7I7R7[7g7s7
7)8=8M8R8a8f8u8z8
9#919M9d9u9z9
: :,:8:A:M:Y:e:q:}:
;$;0;<;H;Q;Z;c;l;u;z;
<-<6<?<D<U<^<g<l<}<
@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1
@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
004080<0@0D0H0L0P0\0`0d0h0l0p0t0x0|0
0P1T1X1\1`1d1h1l1p1t1x1
2 2,202@2D2H2
3,3<3@3P3l3t3|3
4$4,484T4\4h4
5$505L5T5`5|5
6$606L6T6`6|6
7,787T7`7|7
8$8,848<8D8L8T8\8d8l8t8
9$909L9T9`9|9
:,:8:T:\:h:
;4;@;\;d;p;
< <<<H<d<l<x<
=(=D=P=l=t=
>$>0>L>X>t>|>
?$?,?8?T?`?|?
0,040@0\0h0
141<1H1d1p1
2,282T2`2|2
3(3D3P3l3x3
444@4\4h4
5$505L5X5t5
6 6<6H6d6p6
7,787T7`7|7
8(8D8P8l8x8
949@9\9h9
:$:0:L:X:t:
; ;<;H;d;p;
<,<8<T<`<|<
=(=D=P=l=x=
>(>D>L>X>t>
?,?4?@?\?d?l?x?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1P1l1t1|1
242@2\2h2
3$303L3T3`3|3
4 4<4H4d4p4
545<5H5d5l5t5
6(6D6L6T6`6|6
7$7,747<7D7L7T7`7|7
8 8<8H8d8l8t8|8
9$9,949<9D9P9l9t9|9
:$:0:L:T:\:h:
;,;4;<;H;d;p;
<,<4<<<D<L<X<t<|<
=(=D=P=l=t=
>4><>D>L>X>t>|>
?$?0?L?X?t?|?
0$0,080T0`0|0
1 1<1D1L1X1t1
2$2,282T2`2|2
3$3,343<3H3d3l3t3|3
4 4<4D4L4X4t4
5$505L5X5t5|5
6(6D6L6T6\6h6
7$707L7T7\7h7
848@8\8d8l8x8
9$9,9@9L9`9l9
:(:D:L:T:\:d:l:t:
;(;D;P;l;x;
<$<0<L<X<t<|<
=$=,=4=@=\=h=
>,>8>T>`>|>
? ?<?D?P?l?t?|?
0(0D0L0T0\0d0p0
1$1,141<1D1L1T1\1h1
2 2<2D2P2l2t2|2
3$303L3X3t3|3
444<4H4d4p4
5 5<5D5P5l5x5
6(6D6L6X6t6
7$707L7T7`7|7
8,888T8\8h8
9$909L9X9t9
: :<:H:d:p:
;,;8;T;`;|;
<(<D<P<l<x<
=4=@=\=h=
>$>0>L>X>t>
?$?0?L?X?t?|?
0$0,080T0`0|0
1,141@1\1d1l1t1|1
2$202L2T2\2d2l2x2
3$3,343@3\3h3
4$4,484T4\4d4p4
5$5,545<5D5L5T5\5d5p5
6 6<6D6L6T6\6d6l6t6|6
7,787T7`7|7
8,848@8\8h8
949<9H9d9p9
: :<:D:P:l:x:
;(;D;L;X;t;
<$<,<4<<<D<L<T<\<h<
=$=0=L=X=t=
> ><>H>d>l>
?(?D?P?l?x?
040@0\0h0
1$101L1X1t1
2 2<2H2d2p2
3,343@3\3h3
444<4H4d4p4
5 5<5D5P5l5x5
6(6D6L6X6t6
7$707L7T7`7|7
8(8D8P8l8x8
949@9\9h9
:$:0:L:X:t:
; ;<;H;d;p;
<,<8<T<`<|<
=(=D=P=l=x=
>$>,>4><>H>d>l>t>
?$?,?4?<?D?L?T?\?d?l?t?|?
0,080T0`0|0
141<1H1d1l1x1
2$2,282T2`2|2
3 3<3H3d3p3
444@4\4h4
5$5,545<5H5d5p5
646<6H6d6p6
747<7D7L7T7\7d7l7t7|7
8(8D8L8T8`8|8
9(9D9L9T9`9|9
:,:4:@:\:h:
;(;D;L;X;t;|;
<$<,<8<T<`<|<
=,=8=T=`=|=
>4>@>\>h>
?,?4?T?t?x?
0$0,040<0H0d0p0
1$101L1X1t1
2(2D2P2l2x2
3$3,343<3D3L3T3\3d3l3t3
4$404L4T4\4h4
545<5D5L5T5`5|5
6$606L6T6\6d6l6t6|6
7(7D7L7X7t7|7
8 8<8D8P8l8t8
9$9,949<9D9L9T9`9|9
:4:<:D:L:T:\:d:l:t:|:
;$;0;L;T;`;|;
<$<,<4<<<H<d<p<
=,=4=<=H=d=p=
>,>8>T>`>|>
?(?D?P?l?x?
0 0<0D0P0l0x0
1 1<1D1L1X1t1
2$2,242<2D2L2X2t2|2
3$3,343<3D3L3X3t3|3
4$404L4T4\4h4
0 0$0(0,0004080<0@0D0H0L0P0T0
C:\General\bin\release\QQPCDetector.pdb
Western Cape1
Durbanville1
Thawte1
Thawte Certification1
Thawte Timestamping CA0
121221000000Z
201230235959Z0^1
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
http://ocsp.thawte.com0
.http://crl.thawte.com/ThawteTimestampingCA.crl0
TimeStamp-2048-10
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
121018000000Z
201229235959Z0b1
Symantec Corporation1402
+Symantec Time Stamping Services Signer - G40
http://ts-ocsp.ws.symantec.com07
+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
TimeStamp-2048-20
E+QLI4
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA0
130117000000Z
160216235959Z0
	guangdong1
shenzhen1503
,Tencent Technology(Shenzhen) Company Limited1>0<
5Digital ID Class 3 - Microsoft Software Validation v21503
,Tencent Technology(Shenzhen) Company Limited0
/http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
https://www.verisign.com/rpa0
http://ocsp.verisign.com0;
/http://csc3-2010-aia.verisign.com/CSC3-2010.cer0
VeriSign, Inc.1
VeriSign Trust Network1:08
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
<VeriSign Class 3 Public Primary Certification Authority - G50
100208000000Z
200207235959Z0
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA0
https://www.verisign.com/cps0*
https://www.verisign.com/rpa0
[0Y0W0U
	image/gif0!0
#http://logo.verisign.com/vslogo.gif04
#http://crl.verisign.com/pca3-g5.crl04
http://ocsp.verisign.com0
VeriSignMPKI-2-80
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA
E+QLI4
Symantec Corporation100.
'Symantec Time Stamping Services CA - G2
150423105756Z0#
}#9nm&