Observed string: "!This program cannot be run in DOS mode.Richm.text`.rdata@.data.rsrc@.relocSVWPh($Ahx%Ah($Ah<%AhL%AY_^[h`%AY_^[Y_^[Y_^[Y_^[Y_^[Y_^[Y_^[h(:AY_^[Y_^[YHWjh($Ahx%Ah($Ah<%AhL%AhH:AY_^[Y_^[hh:AY_^[Y_^[4SVWY_^[Y_^[4SVWY_^[Y_^[8SVWY_^[Y_^[8SVWY_^[Y_^[PQVWt6WShd&AY_^[Y_^[hD'Ahx'AhD(Ah`)Ar5SQRucSVWQPVRtv9]QSVWPQVWtmf9_^[]tFj\S_^[]hh+Ahx+Ahxcsm%@VA%HVASVW3ntel5ineI5Genut#=`=LVA=LVA=LVA=LVA5HVA_^[3hPVA=HVA=`[A=`[AsZkMj(h j-h@j7hHjSh`jXhxjfhXjjhph4Ah`AjOh`jqhxjBhPSleepConditionVariableCSWakeAllConditionVariablebad allocationUnknown exceptionbad array new lengthstring too longAntiInjectNewExitAntiInjectNewquery session[%u] info failed: %usession id[%u] user name: %sSession[%u] Tray Exist = %dSave UserWantSid: %dCreateToolhelp32Snapshot failed: %uOpen Process[%u] failed: %uTerminate Process[%u] failed: %uTerminate Process[%u] successTerminate qqpctray.exe, pid=%u, sid=%uquery sid[%u] user token fail: %u, user not logonquery sid[%u] user token fail: %uquery user token fail: %uZwQueryInformationProcesstray[%u] cmd line: %s, trayonly=%dTerminate trayonly, pid=%u, sid=%usession=%u, tray=%u, tray0=%dSid[%u], state=%u, tray=%dWTSEnumerateSessions failed: 0x%08xSid[%u] command line result: tray=%d, pcmgr=%dtray already exist or setup mode, not start traynone tray, start traywinserver adminuser want ui, switch tray to this sessionwinserver none ui or not adminuser, not start traypersonal system want ui, switch tray to this sessionwinserver not user action, not switch trayother none zero session has %u tray instance, not start traypersonal system, switch session0 tray to this sessionunknown cmd, maybe tray disable loadQQMasterMainQMServiceExecuteQMStartElevateQMGetProcessPrivilegeQMImpersonateCurrentUserQMRevertToSelfQMCreateProcessCHECK failed: (index) < (current_size_): D:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.hCHECK failed: (index) >= (0): CHECK failed: (index) < (current_size_): D:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.hCHECK failed: (n) >= (0): D:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.hCHECK failed: (index) >= (0): CHECK failed: (index) < (current_size_): D:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.hCHECK failed: (index) < (current_size_): D:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.hCHECK failed: (n) >= (0): D:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.hCHECK failed: (index) >= (0): D:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.hD:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.hCHECK failed: (index) >= (0): D:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.hD:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\3rdparty\repo\protobuf3\src\google\protobuf\repeated_ptr_field.h n;^Qkkbali]Wb9a&gMGiIwn>Jj#.zf+o*7RegOpenKeyTransactedWmap/set too longGetQMStuckF 3AIsWow64Processinvalid string positionGetQMLogExGetQMIpcManagerGetQMApcDispatcherQMIsFileExistQMGetInstallDirQMIsAppInstanceExistQMTryHookToResuseInjectQMSetInstanceTypeQMSetTrueInstanceGet function "%s" address failed.RSDS.n'UnD:\qci_workspace\root-workspaces\__qci-pipeline-10989745-3\Basic\Output\BinFinal\QQPCTray.pdbGCTL.text$di.text$mn.text$x.text$yd.idata$5.00cfg.CRT$XCA.CRT$XCAA.CRT$XCL.CRT$XCU.CRT$XCZ.CRT$XIA.CRT$XIAA.CRT$XIAC.CRT$XIC.CRT$XIZ.CRT$XLA.CRT$XLZ.CRT$XPA.CRT$XPZ.CRT$XTA.CRT$XTZ.rdata.rdata$T.rdata$r.rdata$sxdata.rdata$voltmd.rdata$zzzdbg.rtc$IAA.rtc$IZZ.rtc$TAA.rtc$TZZ.tls.tls$.tls$ZZZ.xdata$x.idata$2.idata$3.idata$4.idata$6.data.data$r.data$rs.bss.rsrc$01.rsrc$02StrStrIWPathRemoveFileSpecWPathAppendWPathAddBackslashWPathFileExistsWSHLWAPI.dllInitializeMMMojoShutdownMMMojommmojo.dllLoadLibraryWGetProcAddressGetLastErrorSetLastErrorGetModuleFileNameWCloseHandleCreateToolhelp32SnapshotProcess32FirstWProcess32NextWOpenProcessTerminateProcessVerSetConditionMaskVerifyVersionInfoWGetModuleHandleWOpenMutexWProcessIdToSessionIdGetCurrentProcessIdSleepHeapDestroyHeapAllocHeapFreeHeapReAllocHeapSizeGetProcessHeapCreateProcessWFreeLibrarySetDllDirectoryWLoadLibraryExWIsDebuggerPresentGetCurrentProcessInitializeCriticalSectionExRaiseExceptionDeleteCriticalSectionGetModuleHandleExWGetTempPathWQueryPerformanceCounterCreateFileWReadFileSetFilePointerWriteFileLoadResourceLockResourceSizeofResourceFindResourceWFindResourceExWGetCurrentThreadIdInitializeCriticalSectionAndSpinCountEnterCriticalSectionLeaveCriticalSectionSwitchToThreadCreateEventWSetEventUnhandledExceptionFilterlstrcmpiWGetNativeSystemInfoVirtualQueryKERNEL32.dllRegisterWindowMessageWUSER32.dllRegCloseKeyRegOpenKeyExWRegQueryValueExWRegSetValueExWOpenProcessTokenGetTokenInformationDuplicateTokenCreateWellKnownSidCheckTokenMembershipADVAPI32.dll?_Xlength_error@std@@YAXPBD@Z?_Xout_of_range@std@@YAXPBD@ZMSVCP140.dllWTSFreeMemoryWTSQueryUserTokenWTSEnumerateSessionsWWTSAPI32.dllEnumProcessesEnumProcessModulesGetModuleBaseNameWGetModuleFileNameExWPSAPI.DLL__CxxFrameHandler3__std_terminate__std_exception_copy__std_exception_destroymemcpymemmovememsetwcsrchr_except_handler4_common_CxxThrowException__current_exception__current_exception_contextVCRUNTIME140.dll_invalid_parameter_noinfo_noreturn_errno__stdio_common_vswprintf_sfreewcslen_wcsicmp_invalid_parameter_noinfo__p___argc_wcsnicmp__p___wargvwcsncpy_ssetlocalewcsncmp_time64wcscpy_swmemcpy_swcsnlenmalloc_callnewh_initialize_onexit_table_register_onexit_function_crt_atexit_cexit_seh_filter_exe_set_app_type__setusermatherr_configure_wide_argv_initialize_wide_environment_get_wide_winmain_command_line_initterm_initterm_eexit_exit_set_fmode_c_exit_register_thread_local_exe_atexit_callback_configthreadlocale_set_new_mode__p__commodeterminate_controlfp_sapi-ms-win-crt-runtime-l1-1-0.dllapi-ms-win-crt-stdio-l1-1-0.dllapi-ms-win-crt-heap-l1-1-0.dllapi-ms-win-crt-string-l1-1-0.dllapi-ms-win-crt-locale-l1-1-0.dllapi-ms-win-crt-time-l1-1-0.dllapi-ms-win-crt-math-l1-1-0.dllOutputDebugStringWResetEventWaitForSingleObjectExSetUnhandledExceptionFilterIsProcessorFeaturePresentGetStartupInfoWGetSystemTimeAsFileTimeInitializeSListHeadn:_:T:Y:_:T:N::n:_:Y:R:T:U:V:U:]:C::i:R:_:T:@:R:_:T::y:U:W:J:[:T:C::v:S:W:S:N:_:^:.?AVexception@std@@.?AVbad_alloc@std@@.?AVbad_array_new_length@std@@.?AVCAtlException@ATL@@.?AVtype_info@@.?AVCQMIpcPipe@IPC@@.?AVCAtlStringMgr@ATL@@.?AUIAtlStringMgr@ATL@@.?AUIAtlMemMgr@ATL@@.?AVCWin32Heap@ATL@@.?AV?$CSingletonEx@VCQMDllStackShell@QMStuck@@@QMStuckUtils@@.?AVCQMDllStackShell@QMStuck@@.?AUIQMStack@QMStuck@@.?AUIUnknown@@.?AVCQMStackShell@QMStuck@@IHDRIDATxj@)?l&hg?\.2VoreLqf$n%Cs5fnU&KAp]@E!@]@8;XCs?0,4p~2zF^.}ly?C,N.FOy[EOz>FaB!7DO{6u1l~{/=Zx`7/Ln>Qi9Ck.h<%'v?~h*[fTvlOO{M2|"|\JXpp[5sZ*-L;/hoJb*J"K!#Zx9^KKx2PW/5~YON\JX%3/`)?A?7@Gdr\;jqn^Z(()X*t'.`<\JX}^/Ber~2r N{K=m(W`kgkyM1Z%4/axaK58eI2~50nBQ\k5w1VH04lO>"Q}_7v9D9c nb}_35{6 eE?EJ*{93_X.7gIDATatpnIENDa^__________________________________^`a^__________________________________^`jcb__________________________________bby:&&;ucb__________________________________bby9&000000000000000000000000000000000000&6zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz12222222222222222222222222222222222221222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222Z[]]]]]]]]]]]]]]]][Z22222222222222222222222222222222222222222222222222220*222222222222222222222!.2222222222222222.!2222222222222/\8$22222222222222222222!.2222222222222222.!222222222222.0#2222222222222222222!.2222222222222222.!22222222222-5"222222222222222222!.2222222222222222.!2222222222-8!22222222222222222!.2222222222222222.!222222222,< 2222222222222222!.2222222222222222.!22222222,222222222222222!.2222222222222222.!2222222-l*20U22222222222222!.2222222222222222.!222222-*2220T2222222222222!.2222222222222222.!22222/+222220222222222222!.2222222222222222.!22222%Gq,2222222022222222222!.2222222222222222.!222222,22222222222222222222!.2222222222222222.!2222221!.222222222222O222222222!.2222222222222222.!2222222102222222222222122222222!.2222222222222222.!2222222222222222222222202222222!.2222222222222222.!2222222222222222222222220222222!.2222222222222222.!22222222222222222222222220F(22222!.2222222222222222.!2222222222222222222222222224,222222222222222222222222222222222J3(222222Z[]]]]]]]]]]]]]]]][Z22222222222222222222222222222#,2222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz12222222222222222222222222222222222221jcb__________________________________bcx9&&:ucb__________________________________bcx7'000000000000000000000000000000000000&6`^__________________________________^``^__________________________________^`^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^374444445:$(''''''($:54444445;"[CEEEEEEEJJEEEEEEEEJLNLLLLLLNL9^^^^^^^^G&^^^^^^^^&G^^^^^^^^S\@AAAAAAAAAAAAAAAAA?P^^^^^^^^O8^^^^^^^^D%^^^^^^^^%D^601106^R]BE??AEEEEEEEEEEEEE?O^XVWWVX^N8^^^^^^^^D%^^^^^^^^%D^+]B=TYVVHZ=AEEAIUTTTTUI?O^U?EE?U^N8^^^^^^^^D%^^^^^^^^%D^ ]@T=?IZ=AEAIUTTTTUI?O^U?EE?U^N8^^^^^^^^D%^^^^^^^^%D^+]A?EEAHZ?AEA??????A?O^T*^A????%$7?????D=??????????=B??<'E A??????)8;????D=??????????=B????3?????????-"x6???D=??????????=B???????????????+,=??DACCCCCCCCCCAB????????????????/#ve$??DB?????????????????.!sF2??DhpoooooooooophB??????????????????4%1???DB???????????????????=????DB????????????????????????DB????????????????????????DB????????????????????????DJqkjjjjjjjjjjjjjjjjjjjjkqJBB@@@@@@@@@@@@@@@@@@@@@@BDnllllllllllllllllllllllllmmllllllllllllllllllllllllmtmoooooooooooooooooooooooooooomtolnnnnnnnnnnnnnnnnnnnnnnnnnnnnlq!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFHLGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGNLGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGNLGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGNLGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGNLGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGNLGGGGGGGGGGGA?GGGGGGGGGGGGGGGGGNLGGGGGGGGGG<6;7GGGGGGGGGGGGGGGGN{!MKKKKKKKKKKKKM!{LGGGGGGGGG=B1GGGGGGGGGGGGGGGNGGGGGGGGGGGGGGLGGGGGGGGF#3IGGGGGGGGGGGGGNGGGGGGGGGGGGGGLGGGGGGGJ4KGGGGGGGGGGGGNGGGGGGGGGGGGGGLGGGGGGG2GGGGGGGGGGGGNGGGGGGGGGGGGGGLGGGGG;$.GGGGGGGGGGGNGGGGGGGGGGGGGGLGGGG9@,GGGGGGGGGGNGGGGGGGGGGGGGGLGGGA)}CGGLE,KGGGGGGGGNGGGGGGGGGGGGGGLGGG(r=GGGGJ-'KGGGGGGGNGGGGGGGGGGGGGGLGGG8R8GGGGGGC*KGGGGGGNGGGGGGGGGGGGGGLGGGG5'0:GGGGGGGGC%IGGGGGNGGGGGGGGGGGGGGLGGGGG?DGGGGGGGGGGMO%GGGGGNGGGGGGGGGGGGGGLGGGGGGGGGGGGGGGGGGJQ&GGGGNGGGGGGGGGGGGGGLGGGGGGGGGGGGGGGGGGGJ[4GGGN{!MKKKKKKKKKKKKM!{LGGGGGGGGGGGGGGGGGGGGF ak/GGGNLGGGGGGGGGGGGGGGGGGGGGD"iq6AGGGNLGGGGGGGGGGGGGGGGGGGGGGC3+>GGGGNLGGGGGGGGGGGGGGGGGGGGGGGF" (Indicator: "query user") in Source: QQPCTray.exe, Observed string: "query user token fail: %u" (Indicator: "query user") in Source: 00000000-00001836.00000000.189998.0121D000.00000002.mdmp