0.9
低危

261e0774f3a058c53d2c5bdc3e7060a08fa13513701ab90459e3394307a1bc5d

261e0774f3a058c53d2c5bdc3e7060a08fa13513701ab90459e3394307a1bc5d.exe

分析耗时

194s

最近分析

374天前

文件大小

319.2KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN WORM LUDBARUMA
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.68
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Emotet-AI [Trj] 20200717 18.4.3895.0
Baidu Win32.Worm.VB.k 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200718 2013.8.14.323
McAfee W32/Rontokbro.gen@MM 20200717 6.0.6.653
Tencent Trojan-Ransom.Win32.Blocker.kalr 20200718 1.0.0.1
静态指标
行为判定
动态指标
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 66 个反病毒引擎识别为恶意 (50 out of 66 个事件)
ALYac Trojan.VB.OJW
APEX Malicious
AVG Win32:Emotet-AI [Trj]
Acronis suspicious
Ad-Aware Trojan.VB.OJW
AhnLab-V3 Backdoor/Win32.IRCBot.R1456
Antiy-AVL Worm/Win32.Ngrbot
Arcabit Trojan.VB.OJW
Avast Win32:Emotet-AI [Trj]
Avira TR/Agent.gdnw
Baidu Win32.Worm.VB.k
BitDefender Trojan.VB.OJW
BitDefenderTheta AI:Packer.8A7BF8D01D
Bkav W32.TakuburaN.Trojan
CAT-QuickHeal Worm.Ludbaruma.A3
ClamAV Win.Worm.Untukmu-5949608-0
Comodo TrojWare.Win32.Injector.FZZA@57zyc0
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.40903b
Cylance Unsafe
Cynet Malicious (score: 100)
Cyren W32/S-2ee348b2!Eldorado
DrWeb Trojan.DownLoader7.3730
ESET-NOD32 Win32/VB.ORD
Emsisoft Trojan.VB.OJW (B)
Endgame malicious (high confidence)
F-Prot W32/S-2ee348b2!Eldorado
F-Secure Trojan.TR/Agent.gdnw
FireEye Generic.mg.3c4658e40903bdfe
Fortinet W32/Regrun.PKE!tr
GData Win32.Worm.Ludbaruma.A
Invincea heuristic
Jiangmin Trojan.Regrun.dz
K7AntiVirus Trojan ( 0040f6141 )
K7GW P2PWorm ( 0050fa4b1 )
Kaspersky Trojan-Ransom.Win32.Blocker.kpuo
Lionic Trojan.Win32.Regrun.tnq1
MAX malware (ai score=89)
Malwarebytes Trojan.AVDis.CS
MaxSecure Trojan-Ransom.Win32.Blocker.kpuo
McAfee W32/Rontokbro.gen@MM
MicroWorld-eScan Trojan.VB.OJW
Microsoft Worm:Win32/Ludbaruma.A
NANO-Antivirus Trojan.Win32.Regrun.dxtouo
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM41.1.A25B.Malware.Gen
Rising Ransom.Blocker!8.12A (TFE:dGZlOgWKyi/lv9zO9g)
SUPERAntiSpyware Trojan.Agent/Gen-VBCrypt
Sangfor Malware
SentinelOne DFI - Malicious PE
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2006-11-27 17:24:01

PE Imphash

135e92fc9902f3140f2e5a51458efdf0

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0002308c 0x00024000 5.71785854992499
.data 0x00025000 0x00001090 0x00001000 0.0
.rsrc 0x00027000 0x0000203c 0x00003000 2.9182998287488253

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00027384 0x00000ea8 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00027384 0x00000ea8 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00027384 0x00000ea8 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x00027354 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_VERSION 0x00027150 0x00000204 LANG_ENGLISH SUBLANG_ENGLISH_US None

Imports

Library MSVBVM60.DLL:
0x401000 __vbaVarTstGt
0x401004 __vbaVarSub
0x401008 __vbaNextEachAry
0x40100c _CIcos
0x401010 _adj_fptan
0x401014 __vbaVarMove
0x401018 __vbaFreeVar
0x40101c __vbaLenBstr
0x401020 __vbaStrVarMove
0x401024 __vbaFreeVarList
0x401028 __vbaEnd
0x40102c __vbaPut3
0x401030 _adj_fdiv_m64
0x401034 __vbaFreeObjList
0x401038 None
0x40103c _adj_fprem1
0x401040 None
0x401044 __vbaRecAnsiToUni
0x401048 __vbaCopyBytes
0x40104c __vbaStrCat
0x401050 __vbaVarCmpNe
0x401054 __vbaForEachCollAd
0x401058 __vbaLsetFixstr
0x40105c __vbaSetSystemError
0x401064 __vbaLenVar
0x401068 _adj_fdiv_m32
0x40106c None
0x401070 __vbaVarXor
0x401074 __vbaAryDestruct
0x401078 None
0x40107c __vbaLateMemSt
0x401080 None
0x401084 __vbaExitProc
0x401088 None
0x40108c __vbaOnError
0x401090 __vbaObjSet
0x401094 _adj_fdiv_m16i
0x401098 __vbaObjSetAddref
0x40109c _adj_fdivr_m16i
0x4010a0 None
0x4010a4 __vbaStrFixstr
0x4010a8 None
0x4010ac None
0x4010b0 __vbaBoolVarNull
0x4010b4 _CIsin
0x4010b8 None
0x4010bc None
0x4010c0 None
0x4010c4 __vbaVarCmpGt
0x4010c8 __vbaChkstk
0x4010cc None
0x4010d0 __vbaFileClose
0x4010d4 EVENT_SINK_AddRef
0x4010d8 None
0x4010dc __vbaGet3
0x4010e0 __vbaStrCmp
0x4010e4 None
0x4010e8 __vbaAryConstruct2
0x4010ec __vbaVarTstEq
0x4010f0 __vbaObjVar
0x4010f4 DllFunctionCall
0x4010f8 __vbaVarOr
0x4010fc __vbaRedimPreserve
0x401100 _adj_fpatan
0x401108 __vbaRedim
0x40110c __vbaRecUniToAnsi
0x401110 EVENT_SINK_Release
0x401114 None
0x401118 _CIsqrt
0x40111c __vbaVarAnd
0x401124 __vbaExceptHandler
0x401128 __vbaPrintFile
0x40112c __vbaStrToUnicode
0x401130 _adj_fprem
0x401134 _adj_fdivr_m64
0x401138 None
0x40113c None
0x401140 None
0x401144 __vbaFPException
0x401148 __vbaInStrVar
0x40114c None
0x401150 __vbaStrVarVal
0x401154 __vbaVarCat
0x401158 __vbaI2Var
0x40115c None
0x401160 None
0x401164 None
0x401168 _CIlog
0x40116c __vbaFileOpen
0x401170 __vbaNew2
0x401174 __vbaInStr
0x40117c _adj_fdiv_m32i
0x401180 _adj_fdivr_m32i
0x401184 __vbaStrCopy
0x401188 __vbaFreeStrList
0x40118c __vbaVarNot
0x401190 _adj_fdivr_m32
0x401194 _adj_fdiv_r
0x401198 None
0x40119c __vbaVarTstNe
0x4011a0 __vbaVarSetVar
0x4011a4 __vbaI4Var
0x4011a8 __vbaVarCmpEq
0x4011ac __vbaForEachAry
0x4011b0 __vbaVarAdd
0x4011b4 __vbaLateMemCall
0x4011b8 __vbaStrToAnsi
0x4011bc __vbaVarDup
0x4011c0 __vbaFpI2
0x4011c4 __vbaVarMod
0x4011c8 __vbaFpI4
0x4011cc None
0x4011d4 None
0x4011d8 __vbaLateMemCallLd
0x4011dc _CIatan
0x4011e0 __vbaStrMove
0x4011e4 None
0x4011e8 None
0x4011ec __vbaStrVarCopy
0x4011f0 None
0x4011f4 _allmul
0x4011f8 None
0x4011fc _CItan
0x401200 None
0x401204 __vbaNextEachCollAd
0x401208 None
0x40120c __vbaAryUnlock
0x401210 _CIexp
0x401214 __vbaFreeObj
0x401218 __vbaFreeStr

L!This program cannot be run in DOS mode.
Richya
`.data
MSVBVM60.DLL
nR.HE=
7ObT5:O3f
ddddddddddddd
IIIIIIIIIIIIIId7I
ttttttttj
<<<<<<<T
1111111(o
Id7(1IIIIIIIIIIII
IIIII`
[fPFMlllll
[sTtpk_glllll
[wwwwnhGFlllll
[i>wTTTTTTTTwpNIMlll
[i)<<<<<<<<<<<<<<:nK_l
[i}<<<<<<<<<<<<<<<<<wl
[c*(((((((((((((((((wl
[>6cj0
"' 6Hx
.LjR=W
.Jbjx=l
[[[[[Y
[[[[[[
[[[[[[[
[q~b[Fllll
[c}ha[]dlll
[f}nKB\`lll
[f}ttttttttttnKG[llll
[@SStha[llll
[XwwwwwwwwwwwwwwSSSTTpNJBllll
[SSSSSSSSSSSSSSTTTTTTTTT:kK^l
[<<<<<<<<<<<<<<<<<<<<<<<<<<u9l
[A><<<<<<<<<<<<<<<<<<<<<<<<<<l
[V211111111111111111111111111l
[2(((((((((((((((((((((((((([l
[|%##########################Kl
[*'5[Dj{
"'/5H[DPY
! 6J[[Lj=
! 6J[[DDDDl
-Yjoz{
[[[[[jxzW
[[[[[[[[
[[[[[[[[7
Timer2
Timer1
nR.HE=
VB5!*
Fungsi
Getdrive
Proses
7ObT5s
nR.HE=
Timer1
+3qC:\Program Files\Microsoft Visual Studio\VB98\VB6.OLB
Timer2
PatchTaskManager
IsMePresent
MakeDuplicateFile
CreateDefaultFile
AmbilDomain
AmbilComputer
AmbilDrive
SpreadEmailOutlook
InfeksiMySharing
InfeksiFloppy
InfeksiFlashDisk
InfeksiNetworkDrive
advapi32.dll
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
GetDriveTypeA
RegQueryValueExA
RegSetValueA
kernel32
user32
CloseWindow
GetFileAttributesA
CopyFileA
SetFileAttributesA
shell32.dll
ShellExecuteA
DeleteFileA
ReadProcessMemory
mpr.dll
WNetGetUserA
WNetGetConnectionA
WNetAddConnectionA
netapi32.dll
NetUserGetLocalGroups
NetUserGetInfo
NetUserGetGroups
GetUserNameA
CreateDirectoryA
WriteProcessMemory
shlwapi.dll
PathIsDirectoryA
RtlMoveMemory
GetFileType
MoveFileExA
GetLogicalDriveStringsA
GetLogicalDrives
MAPI32.DLL
BMAPIFindNext
MAPISendDocuments
BMAPIReadMail
SendMessageA
FindWindowA
FindWindowExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
kernel32.dll
GetSystemDirectoryA
GetWindowsDirectoryA
TerminateProcess
DeleteService
CreateToolhelp32Snapshot
LockWindowUpdate
GetCurrentProcess
GetCurrentProcessId
FindClose
GetProcAddress
CallWindowProcA
psapi.dll
EnumProcesses
OpenProcess
Process32First
Process32Next
ExitWindowsEx
RegisterServiceProcess
FreeLibrary
LoadLibraryA
CloseHandle
OpenProcessToken
GetModuleFileNameExA
EnumProcessModules
comdlg32.dll
GetFileTitleA
Module32First
Module32Next
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
GetVersionExA
FindFirstFileA
FindNextFileA
ShowWindow
GetParent
GetForegroundWindow
GetWindowTextA
PostMessageA
DestroyWindow
+3qPV@
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
lstrlenA
lstrcpyA
__vbaRedimPreserve
VBA6.DLL
__vbaNextEachCollAd
__vbaAryDestruct
__vbaVarCmpGt
__vbaVarAnd
__vbaForEachCollAd
__vbaStrVarCopy
__vbaExitProc
__vbaLateMemSt
__vbaVarLateMemCallLdRf
__vbaVarSetVar
__vbaI2Var
__vbaLateMemCallLd
__vbaObjSetAddref
__vbaAryUnlock
__vbaNextEachAry
__vbaObjVar
__vbaLateMemCall
__vbaVarLateMemCallLd
__vbaVarNot
__vbaInStr
__vbaForEachAry
__vbaFileClose
__vbaPut3
__vbaFileOpen
__vbaVarAdd
__vbaI4Var
__vbaCopyBytes
__vbaStrVarMove
__vbaVarCmpNe
__vbaLsetFixstr
__vbaFixstrConstruct
__vbaVarCmpEq
__vbaVarDup
__vbaVarTstEq
__vbaInStrVar
__vbaVarOr
__vbaBoolVarNull
__vbaStrCopy
__vbaStrToUnicode
__vbaLenBstr
__vbaFreeVar
__vbaStrCat
__vbaStrMove
__vbaStrCmp
__vbaEnd
__vbaFreeStrList
__vbaSetSystemError
__vbaStrVarVal
__vbaStrToAnsi
__vbaFreeVarList
__vbaVarCat
__vbaVarMove
__vbaObjSet
__vbaFreeObjList
__vbaFreeStr
__vbaFreeObj
__vbaHresultCheckObj
__vbaNew2
__vbaOnError
__vbaRedim
__vbaFpI4
__vbaStrFixstr
__vbaRecAnsiToUni
__vbaRecUniToAnsi
__vbaVarTstNe
__vbaVarSub
__vbaVarTstGt
__vbaAryConstruct2
__vbaFpI2
__vbaLenVar
__vbaVarXor
__vbaVarMod
__vbaGet3
__vbaPrintFile
nFindWhat
nReplaceWith
AddName
SVWeE
} j|h\c@
E@=4YB
} jXh\c@
} jdh\c@
MTEPEPj
} jXh\c@
} j\hLl@
P~PpP`P~PPP@P~P0P P~P
P~PPP~PPP~~PPPj~
Mf~PPPPP
P P0P@PPP`PpPj
EPEP}PEP}Phtl@
EPEPEPj
EPEP[}PE
EPEPEPl|PP
} jdh\c@
MP|MN|
} jPh\c@
MzPhl@
MzPhl@
fHEPEPEPj
} jPh\c@
MoyE e
MRyPhl@
M=yPEPWyPuhl@
yPEP yP&
yEPEPEPEPEPEPEPEPj
} jPh\c@
MwPhl@
MwPEPwPuhl@
MvwPhl@
MawPEP{wP
dwEPEPEPEPEPEPEPEPj
7w$MtwE
MvPhl@
MvPEPvP>vEPEPEPEPj
MpvPhl@
M[vPEPuvP
^vEPEPEPEPj
MuPuHP
MuEPEPEPj
uDuHHPu3u
EPtMsuE
EPEPEPj
} jPh\c@
} jXh\c@
PpP`P8r`PEPrP(r
rPuhl@
MqPhl@
MqPEPqP
qEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPj
hqDEPEPj
PpP`PzpEP
MpP`PEPpPVp
MxpPhl@
McpPmj
EPEPEPEPEPEPEPj
Lp `PpPj
PpP`P]o`PEPoPMo
MRoPMCoP1o
M3oPhl@
oPEP8oP
!oEPEPEPEPEPEPEPEPEPEPj
n,`PpPj
pP`P6n
EX$AW^HBU
QgJMXER
tYHj\C+
cBOZ@"
*VAe[F
4ofZ!7G
l(Hu_H
RoZode:O@(i
EX$AW^HBU
QgJMXER
bYtoh*8c|kT
a@J~2?b
} jhh\c@
flfHMk
dPEPEPhP
dPEPEPhPx
M(j(m@
dPEPEPhP
} jXh\c@
PghPP@Plh`P@PGhfHMh@P`PPPpPj
} jXh\c@
PfPP@Pf`P@PffHMRg@P`PPPpPj
pP,fpP`Pf
@Pe@P0Pe
`PPPPeP0PP PeP
PePefX0P@P`PpPj
\pyeE4
PEPeXh
} jdhLl@
} jXh\c@
PXcPP@P]c`P@P8cfHMc@P`PPPpPj
PEPcXh
} jdhLl@
} jXh\c@
pP`Pja
P-aPP@P2a`P@P
afHMa@P`PPPpPj
PEP^aXh
} jdhLl@
} jXh\c@
pP`P?_
_`P@P^fHM_@P`PPPpPj
PEP3_Xh
} jdhLl@
} jXh\c@
P\PP@P\`P@P\fHMn]@P`PPPpPj
} jdhLl@
} jXh\c@
PZPP@PZ`P@PZfHMC[@P`PPPpPj
PEPZXh
} jdhLl@
} jXh\c@
PXPP@PX`P@PaXfHM
Y@P`PPPpPj
PEPXXh
} jdhLl@
} jXh\c@
PVVPP@P[V`P@P6VfHMV@P`PPPpPj
PEPVXh
} jdhLl@
} jXh\c@
pP`PhT
P+TPP@P0T=4YB
} jXh\c@
PPR`P@P0PRP
PPPRPPRPRf8EPEPj
P P@P`PPPpPj
EPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPj
QDEPEPj
PPPPPP
P P0P@PPP`PpPj
(SVWeEp
QQSVWeE
MSVWeE
HP4OPj
HPPNPj
} j\hLl@
@D;|t(E
HP[LPj
KHDPKP\j
)KDPHPj
HP}KPj
\HP7KPh
KHDPJP\j
KJDPHPj
uHPJPT
JHDP-JPuj
IDPHPj
PP~IHuj
PP#IDuj
PPH@uj
PtPmH<uj
DPP\G0uj
U,NG,,
PPF(uj
PTPKF$uj
P$PE uj
$P4P)D
PCPPCPj
PCPPCPj
dPvCPTPoCPj
4PJCP$PCCPj
PBPPBPj
PBPPBPj
tPBPdPBPj
DPnBP4PgBPj
PAPPAPj
PAPtPAPj
TPAPDPAPj
P_AP_Af
P P$P(P,P0P4P8P<P@PDPHPj
;ADTPdPPPPPPP
P$PDPTPtPPPPPP
P4PDPdPtPPPPPPP$P4Pj i@
HPB?Pj
EHH?E0
ux>HDP>Puj
>DPHPj
@1>Duj
>DPHPj
\DQ=P<
@t=D\j
P==DPHPj
<PPP;Pj
P;PPPj;PP;P;f
p<;t%E7
HPw;Pu
HP8;Pj
EH>;E<
XHP:Ph
ut:HDPz:PXj
:DPHPj
PPQ9DXj
d9DPHPj
p@9t%E?
3f=(PB
@PDPHPj
@PdPHPq
@8@PH7P6
`v7DPHPj
@PdP`Pp
Hh6P>6
6P5,PB
H5PDq5P_5
@^5Phl@
<(5Phl@
8P<P@PDPHPj
} jPh\c@
} jXh\c@
8|2P4j2PX2
0W2Phl@
$?2P PV2PHhl@
<1Phl@
,1P(P1P
P P$P(P,P0P4P8P<PDP@PHPj
H41PEP|
<P@PDPHPj
Hw0PDe0PS0
@R0Phl@
<:0P8PQ0Pc:04P8P<P@PDPHPj
H/Phl@
3f=&PB
@PDPHPj
<PPPHPg
@4@PH-P$-
p-DPHPj
<PPPpPf
H,P,ff
fEfEf;
EPH7,P+
D+Phq@
@+P<+P+
8+Phl@
4h+Phl@
(P,P0P4P8P<P@PDPHPj
EPH*P)
EPDG*Phq@
@/*P<PF*P$f/*4P8P<P@PDPHPj
EPH{)P(
DB)Phq@
@*)P<PA)P\*)4P8P<P@PDPHPj
EPHv(P'
D:(Phq@
@"(P<P9(P["(4P8P<P@PDPHPj
EP|Hn'P&
4['4x4
xD2'Phq@
'P<P1'PZ
'4P8P<P@PDPHPj
EPtHf&P%
DS&Phq@
<P@PDPHPj
EPpH%P
D%Phq@
<P@PDPHPj
} jPh\c@
} jXh\c@
("P$P"PHhl@
<"Phl@
0k"P,P"PUk"
P P$P(P,P0P4P8P<PDP@PHPj
EPdHu!P
<P@PDPHPj
EP`H P
\Dz Ph
@b P<Py PSb 4P8P<P@PDPHPj
} jPh\c@
} jXh\c@
P P$P(P,P0P4P8P<PDP@PHPj
0P4P8P<P@PDPHPj
$P(P,P0P4P8P<P@PDPHPj
8P<P@PDPHPj
} jPh\c@
} jXh\c@
P P$P(P,P0P4P8P<PDP@PHPj
8P<P@PDPHPj
0P4P8P<P@PDPHPj
P P$P(P,P0P4P8P<P@PDPHPj
P$P4PDPTPdPtPPPPPPPPP
P$P4PDPTPdPtPPPPPPPPP
P$P4PDPTPdPtPPPPPPPPPj/3
UQQh!@
3uuuuu
uuuutdTD4$
EPEPEPEPEPEPj
PEPPEPPn
EPEPEPEPEPEPj
EPEPPEPP#n
EPEPEPEPj
Etj"Pu
PEPEPPEPEPPPEPPtPdPP
PEPPEPP&m
EPEPEPj
*dPtPEPEPEPEPEPj
EEj"Pu
PEPEPPPEPPEPtPxPPdPdPTPDPPPP4P<P$P
PEPPEPPzk
EPEPEPj
P$P4PDPTPdPtPEPEPEPEPEPj
MPh8y@
PEPPEPPsj
EPEPEPEPEPEPEPj
g Ej"Pw:_
EEj"Pu
QEPEPEPLPPEP;PEPtP*P:
PEPPEPPi
EPEPEPj
tPEPEPEPEPEPj
zEPEPEPEPEPEPEPj
P$P4PDPTPdPtPEPEPEPEPEPj
UQQh!@
@SVWeE
MUM}wPh`l@
E^EWPuEPEPj
EEWPuEPEPS
MUM}Phz@
EWPPEPEPS
MUM}xPhw@
aEEWPuEPEPS_
M3UM}%Ph
EEWPuEPEPS
MUM}Ph\x@
EWPWEPEPS
hEEWPu
EPEPSf
SW<_{@
WVPHPPPj
WVPPPPj
}:HfNH
f^H]h.A
EuPh0N
uuuuxhd}
VEj@PEP}E
P8WSLL;~pWP+PEP
VEj@PE}PEPE
MEPEPEPj
MQMh0N
QddQPH'Lu
EPPuVEPEPj
uuuV:\8dPduPEuPPSH)u
EEPEPE
PEPEVPPhPEPQPQE
EPEPEPj
Emh;2A
&EPEPj
EPEPEPj
MQWLlW
MMIEPo[
j,XTSVWeE
MP5@PB
jj EPEPj
jj yEPEPj
j4XSVWeE0
MvPhP@
MAPhP@
UMEPEPE
EPEPEPj
UM_EPEPE
EPEPEPj
EPEPEPj
lSVWeEp
E]Ph{@
]]]]P\
uEPEPEPj
_;toSEh0|@
PEP5PM
EPEPEPj
SEhL|@
SEh\|@
MMEPh{@
uEPxP|Pj
;tuSEh0|@
MAf;t%
EPxP|Pj
SEhL|@
]]]|x5
PEP.PM
SEh\|@
MMEPh{@
EPxP|Pj
;tuSEh0|@
PEPP4M`f;t%
EPxP|Pj
|PMSMEPj
uuuuu|l\L<,
uEP PPEPMj
u|PEPj
EP PEPj
EPEP{
P&PEP
MCPhl@
|PEPlPDP
<P\PlP|PEPj
:M<PLP\PlP|PEPj
MYMQMMM9M
,SVWeE
EPEPEPj
T;t1EP
EPEPEPj
EPMMEEPj
SVWeE
uuuu|ld`j
EPmEPPEP`MfVh~@
PUPdP0PEP`PM#;
P|PEPnPVh
PlPEPWPEPSPgEPEPj
EPEPEPEPEPj
@SVWeE(
WEhL|@
PEPPQM
}f;t7WEh\|@
SVWeE8
tPpPP#! PxPh
(MnlPpPtPj
PkPPtPPPPPmPPdPP(PPEPtPTPdP
P4PDP$PP
PPP4PPPPPP$PPPPPtP
PdP`PTP}P4P
PUPPPP
PP-PPPPPP
PtPPdPPTPP4PP$PP
PPPPPpPPPPPPHPPePtPPdP PTP=P4PP$PP
PPtPPPPPPdPPPPPtPTPdPPTPP4PDP$PXP
PuPP4PP0PPMPP$PP
PP%P%f
P4PDPtPPPPP
P4PDPtPPPPP
P4PDPtPPPPP
P$P4PPPP
P4PDPtPPPPP
P4PDPtPPj.G
dPhPlPpPtPj
} jPh\c@
} jXh\c@
0 d5P#
`"Phl@
PPP!Pthl@
\PXPPLPPPTPXP\P`PdPhPpPlPtPj
T0DPHPj
lPpPtPj
tPpPPpPtPj
tsPpPP
m@PxPh
LPPPTPXP\P`PdPhPlPpPtPj
Z0DPHPj
PPPPPPP
P$P4PDPTPdPtPPPPPPPPP
P$P4PDPTPdPtPPPPPPPPP
P$P4PDPTPdPtPPPPPPPPP
P$P4PDPTPdPtPPPPPPPPP
P$P4PDPTPdPtPPPPPPPPP
P$P4Pj[p
UQQh!@
3pjPY`jP Y3}
]lhd`\XTPLHD@<840,
hPdPP'
dPh]Pj
\`PW%\l\`PdPhPj
h#PdP:P!dPhPj
S]E&Pj
LPPPTPXP\P`PdPhPj
Pp0hRP
jPh\c@
jXh\c@
424SWl4
\uPhl@
D]P@PtPz]4P8P<P@PDPHPLPPPTPXP\PdP`PhPj
`~PdP;
XQPhl@
TPXP\P`PdPhPj
P PWqEPVP
PpPW=
`PdP`PdPhPj
XKPhl@
T3PPPJP3LPPPTPXP\P`PdPhPj
jPh\c@
Pw,dRP
jXh\c@
<5P8PLPhV
4P8P<P@PDPHPLPPPTPXP\PdP`PhPj
n,P0Pj
TPXP\P`PdPhPj
P4dPhPj
4P8P<P@PDPHPLPPPTPXP\P`PdPhPj
',P0Pj
jLX~SVWeE(
EfEfEf;E
SVWeEp
EPEP8El@
EfEfEf;E
M+PEPEP
M|EPEPj
fMu]fE
EfEfEf;E
M1Phl@
@fEMgM
dSVWeE
]]]8EuPEPE
MGPhl@
j<XWSVWeE0
XHM4EFj
XHM4pE
XHM4*E
XHM4Etj
XHM4E.j
EfEfEf;E
PEPEPIEP
MxM^,E
j,XSVWeE
EPLPuj
jLXvSVWeE@
EfEfEf;E
M+PEPEP
MYM?,E
EP5Pu,p
uEPpEM4E
fhu[fE
hfEfEf;d
M)Phl@
@flM\M
EPtPEP
_^[UQQh!@
jJY3jJYSj
|l\L<,
D<P|PtPW
4,PlP;|j
\P|PlPj
PPV[Ph,
2LP\PlP|Pj
P'PdPEP
EPEPEPj
MMEPEPEPEPj
SVWeE@
EPEPEPj
fth=4YB
WVPiEURP
jXSVPJUe
jXSVPuhl@
EPEPEPEPj
jlXSVWeEP
EPGPuj
EPEPuuj
EPEPEP5PE
MM5EPEPj
3EVPuuuu
uuuuupMEPEh
MEPEPj
PEuPPM
EVEEPE
MX}EPExPEPEVP
MMkEPEPEPj
M@M8EPEPEPEPj
dSVWeE
M0EPEPSL
6EPPY
EPEPEM?f9}t]u]6
+VEPEPEPm
M(EPEPj
UQQh!@
E7P~PeuW
MfE_^d
jlXSVWeE
EPNPuj
EPEPuuj
EPEPEP<PL
MM<EPEPj
hSVWeE
MEPEPj
EPEPXE`l@
Mgf;u4E
"EPEPj
1EPEPj
PSVWeE0
PE3P]]
Ebf9]t
j$XSVWeE@
PuoEouu
j(XSVWeEx
0EP|PE
0EPfPuIEIuu
_^[UQQh!@
lSVWeE
EEEPEP]~EP
EPuVWj
EPEuPu,E9u
4EP1P+
EHMunEhWA
MMEEEPj
MfE_^d
QSVWeE
P4PhQ@
4PPhQ@
SVWeE(
EPj(u^9E
EP,Phl@
EEPEPEk
SVWeEp
EPEPPEPPGEPEPEPEPj
EPEPPEPPEPEPEPj
EPEPPEPPUEPEPEPj
M.Ph`l@
EPEPPEPPEPEPEPEPj
EPEPPEPP5EPEPEPEPj
EPEPPEPPqEPEPEPEPEPEPj
M/Phw@
EPEPPEPPEPEPEPEPEPEPj
MrPh\x@
EPEPPEPP
EPEPEPEPj
MPh`l@
EPEPPEPPyEPEPEPEPj
j"EPn1EE
j"dP=PEPEP5PEPEP'PPtP
PdPTPP
EPEPPEPPaEPEPEPj
TPdPtPEPEPEPEPj
EPEPPEPPoEPEPEPEPEPEPEPj
j"EPl/EE
j"tP;EPEPEP6PPEP%PtPdP
EPEPPEPPsEPEPEPj
dPtPEPEPEPEPj
EPEPPEPPEPEPEPj
j"EPEE
EPEPEPSPPEPBPtPdP.PPTP
EPEPPEPP,EPEPEPj
P$P4PDPTPdPtPEPEPEPEPj
EPEPEPR
PtPdP-
PP$P~P
P~PPP~P}
EPEPPEPP+EPEPEPj
P$P4PDPTPdPtPEPEPEPEPj
j"EP}EE
EPEPEPQ}PPEP@}PtPdP,}PPTP
}PDP4P
}PP$P|P
P|PPP|P{
EPEPPEPP*EPEPEPj
P$P4PDPTPdPtPEPEPEPEPj
j"EP{EE
EPEPEPP{PPEP?{PtPdP+{PPTP
{PDP4P
{PP$PzP
PzPPPzPy
EPEPPEPP)EPEPEPj
P$P4PDPTPdPtPEPEPEPEPj
j"EPyEE
EPEPEPOyPPEP>yPtPdP*yPPTP
yPDP4P
yPP$PxP
PxPPPxPw
EPEPPEPP(EPEPEPj
P$P4PDPTPdPtPEPEPEPEPj
EPEPPEPPXEPEPEPj
PEPEPPEPEPj
PEPEPPEPEPj
PEPEPP EPEPj
PEPEPPEPEPj
PEPEPP\EPEPj
PEPEPPEPEPj
PEPEPPEPEPj
PEPEPP6EPEPj
PEPEPPEPEPj
PEPEPPrEPEPj
EPEPEPEPEPEPEPj
P$P4PDPTPdPtPEPEPEPEPj
pSVWeE
EPdMErPh
M0rPEPJrP(3rEPEPEPEPj
MqPEPqP%qEPEPEPEPj
\MTqPhz@
M?qPEPYqP
BqEPEPEPEPj
XMpPh@@
MpPEPpP1pEPEPEPEPj
TM`pPhw@
MKpPEPepP
NpEPEPEPEPj
MoPEPoP=oEPEPEPEPj
LMloPhd{@
MWoPEPqoP
ZoEPEPEPEPj
HMnPh`l@
MnPEPnPInEPEPEPEPj
DM{nPKn
MknE@e
@MKnPh`l@
M6nPEPPnP
9nEPEPEPEPEPEPj
<MmPhy@
MmPEPmP mEPEPEPEPj
jPh\c@
jXh\c@
8MkPh`l@
MkPEPkPuhl@
MkPhl@
MkPEPkP
kEPEPEPEPEPEPEPEPEPEPj
Nk,EPEPj
jPh\c@
jXh\c@
4MiPQi
MqiE0e
0MTiPh`l@
M?iPEPYiPuhl@
hEPEPEPEPEPEPEPEPEPEPEPEPj
h4EPEPj
jPh\c@
jXh\c@
,MfPhy@
MfPEPfPuhl@
MfPhl@
MfPEPfP
fEPEPEPEPEPEPEPEPEPEPj
]f,EPEPj
jPh\c@
jXh\c@
(MdPh@
M{dPEPdPuhl@
MYdPuDd
MFdPhl@
M1dPEPKdPQ4dEPEPEPEPEPEPEPEPEPEPj
c,EPEPj
jPh\c@
jXh\c@
MObE$e
$M2bPh8y@
bPEP7bPuhl@
MaPhl@
MaPEPaPaEPEPEPEPEPEPEPEPEPEPj
a,EPEPj
jPh\c@
jXh\c@
M_Ph@
M_PEP_Puhl@
M_Phl@
Mu_PEP_P
x_EPEPEPEPEPEPEPEPEPEPj
C_,EPEPj
jPh\c@
jXh\c@
Mv]Phz@
Ma]PEP{]Puhl@
M?]Pu*]
M,]Phl@
]PEP1]P7
]EPEPEPEPEPEPEPEPEPEPj
\,EPEPj
jPh\c@
jXh\c@
[Puhl@
MZPhl@
MZPEPZP
ZEPEPEPEPEPEPEPEPEPEPj
Z,EPEPj
jPh\c@
jXh\c@
MXPEPXPuhl@
MXPunX
MpXPhl@
M[XPEPuXP{^XEPEPEPEPEPEPEPEPEPEPj
)X,EPEPj
jPh\c@
jXh\c@
M\VPh\x@
MGVPEPaVPuhl@
VEPEPEPEPEPEPEPEPEPEPj
U,EPEPj
jPh\c@
jXh\c@
MSPhd{@
TPuhl@
MSPhl@
MSPEPSP
SEPEPEPEPEPEPEPEPEPEPj
mS,EPEPj
jPh\c@
jXh\c@
MQPh`l@
MQPEPQPuhl@
MiQPuTQ
MAQPEP[QPaDQEPEPEPEPEPEPEPEPEPEPj
Q,EPEPj
jPh\c@
jXh\c@
OPh`l@
OPuhl@
MNPEPNP
NEPEPEPEPEPEPEPEPEPEPEPEPj
|N4EPEPj
jPh\c@
jXh\c@
MLPhy@
MLPEPLPuhl@
MxLPucL
MPLPEPjLPp
SLEPEPEPEPEPEPEPEPEPEPj
L,EPEPj
jPh\c@
jXh\c@
MQJPh@
M<JPEPVJPuhl@
}IEPEPEPEPEPEPEPEPEPEPj
I,EPEPj
jPh\c@
jXh\c@
MGPh8y@
MGPEPGPuhl@
MGPEPGPzGEPEPEPEPEPEPEPEPEPEPj
bG,EPEPj
jPh\c@
jXh\c@
MEPEPEPuhl@
M^EPuIE
M6EPEPPEPVx9EEPEPEPEPEPEPEPEPEPEPj
E,EPEPj
jPh\c@
jXh\c@
M7CPhz@
M"CPEP<CPuhl@
MBPEPBPuBEPEPEPEPEPEPEPEPEPEPj
B,EPEPj
jPh\c@
jXh\c@
M@Phw@
M@PEP@Puhl@
Mz@PEP@Ps}@EPEPEPEPEPEPEPEPEPEPj
H@,EPEPj
jPh\c@
jXh\c@
Mf>PEP>Puhl@
MD>Pu/>
>PEP6>P<q>EPEPEPEPEPEPEPEPEPEPj
=,EPEPj
jPh\c@
jXh\c@
<Ph\x@
<PEP"<Puhl@
M;PEP;Pn;EPEPEPEPEPEPEPEPEPEPj
;,EPEPj
jPh\c@
jXh\c@
M9Phd{@
M9PEP9Puhl@
M9Pus9
M`9PEPz9Plc9EPEPEPEPEPEPEPEPEPEPj
.9,EPEPj
jPh\c@
jXh\c@
Ma7Ph`l@
ML7PEPf7Puhl@
7EPEPEPEPEPEPEPEPEPEPj
6,EPEPj
jPh\c@
jXh\c@
M4Ph`l@
M4PEP4Puhl@
Mw4PEP4Pgz4EPEPEPEPEPEPEPEPEPEPEPEPj
=44EPEPj
jPh\c@
jXh\c@
Mp2Phy@
M[2PEPu2Puhl@
M92Pu$2
2PEP+2P1e
2EPEPEPEPEPEPEPEPEPEPj
1,EPEPj
jPh\c@
jXh\c@
0Puhl@
M/PEP/Pb/EPEPEPEPEPEPEPEPEPEPj
/,EPEPj
jPh\c@
jXh\c@
M-Ph8y@
M-PEP-Puhl@
M}-Puh-
MU-PEPo-Pu`X-EPEPEPEPEPEPEPEPEPEPj
#-,EPEPj
jPh\c@
jXh\c@
MV+Ph@
MA+PEP[+Puhl@
^*EPEPEPEPEPEPEPEPEPEPj
*,EPEPj
jPh\c@
jXh\c@
M(Phz@
M(PEP(Puhl@
M(PEP(P[(EPEPEPEPEPEPEPEPEPEPj
g(,EPEPj
jPh\c@
jXh\c@
M&Phw@
M&PEP&Puhl@
Mc&PuN&
M;&PEPU&P[Y>&EPEPEPEPEPEPEPEPEPEPj
&,EPEPj
jPh\c@
jXh\c@
M'$PEPA$Puhl@
M#PEP#PV#EPEPEPEPEPEPEPEPEPEPj
#,EPEPj
jPh\c@
jXh\c@
M!Ph\x@
M!PEP!Puhl@
!PEP!PT!EPEPEPEPEPEPEPEPEPEPj
M!,EPEPj
jPh\c@
jXh\c@
MPhd{@
MkPEPPuhl@
MIPu4
M!PEP;PAR$EPEPEPEPEPEPEPEPEPEPj
,EPEPj
EPEPEPEPj
EPEPEPEPj
EPEPEPEPj
EPEPEPEPj
EPEPEPEPj
EPEPEPEPj
EPEPEPEPj
EPEPEPEPj
EPEPEPEPj
EPEPEPEPEPEPj
EPEPEPEPj
MEPEPEPEPEPEPEPEPEPEPEPEPj
4EPEPj
_^[UQe
dSVWeEP @
jB^jZXf;
PEPEPE
[UQQh!@
SVWeE` @
3MEEEE
EEEEtdTD4$
Ej"^VP
PEPEP@
PEPEP!
$P4PDPTPdPtPEPEPEPEPEPEPj
EPEPEPEPEPEPj
4Ej"P~
PEPEPK
PEPEP,
EPEPEPEPEPj
EPEPEPEPEPEPj
PEPEPH
PtPdP#
P$P4PDPTPdPtPEPEPEPEPEPEPj
PEj"P7
PDP4P\
4PDPTPdPtPEPEPEPEPEPEPj
PEPEP-
P$P4PDPTPdPtPEPEPEPEPEPEPj
EPEPEPEPEPj
$Ej"Pq
EPEPEPEPEPEPj
j"EuPQ
P$P4PDPTPdPtPEPEPEPEPEPEPj
UQQh!@
SVWeEp @
UQQh!@
SVWeE @
SVWeE @
fEhPxPEPEPj
XfEfEf;T
PhPHP8P
P8P(PHPhPXPxPEPEPj
PfEfEf;L
EPEPEP=
PhPHPu
fHPEPY
EPEPEPj
HPXPhPxPEPEPj
EPEPEPj
P(P8PHPXPhPxPEPEPj
mSVWeE
!;X>XE
PlPh<S@
XHPLPPPj
29XOXE
Z;XXEE
`pupP`PzXX
RPpPWX
00P PX
@@P0PXx
PPP:PPPPPP<PP`PPPP@P
PPPPPPPPPPPpP`P
PPPP@P P
PtPPPP/PPLPPPpP
P`P$PPP0P PP
PPPPPPfT0PPP@PPPPPPP P@P0PpPPPPPP
P0P P`PPpPPPPP
uA1XXTE
HcPDPzP'c@PDPHPLPPPj
HPDPP'DPHPLPPPj
} jPh\c@
} jXh\c@
0VP,PmPPhl@
$(P,P0P4P8P<P@PDPLPHPPPj
0 P$Pj
PPhTS@
P2XPPhTS@
PPhTS@
Pp2XPPhTS@
lPPh<S@
PlPh<S@
(P,P0P4P8P<P@PDPHPLPPPj
U0 P$Pj
P P0P@PPP`PpPPPPPPPPP
P P0P@PPP`PpPPPPPPPPP
P P0P@PPP`PpPPPPPPPPP
MSVBVM60.DLL
__vbaVarTstGt
__vbaVarSub
__vbaNextEachAry
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
__vbaPut3
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaStrCat
__vbaVarCmpNe
__vbaForEachCollAd
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaVarXor
__vbaAryDestruct
__vbaLateMemSt
__vbaExitProc
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaStrFixstr
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGet3
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
__vbaObjVar
DllFunctionCall
__vbaVarOr
__vbaRedimPreserve
_adj_fpatan
__vbaFixstrConstruct
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaInStrVar
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaFileOpen
__vbaNew2
__vbaInStr
__vbaVarLateMemCallLdRf
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaVarNot
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarTstNe
__vbaVarSetVar
__vbaI4Var
__vbaVarCmpEq
__vbaForEachAry
__vbaVarAdd
__vbaLateMemCall
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarMod
__vbaFpI4
__vbaVarLateMemCallLd
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
__vbaNextEachCollAd
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr
[q~b[Fllll
[c}ha[]dlll
[f}nKB\`lll
[f}ttttttttttnKG[llll
[@SStha[llll
[XwwwwwwwwwwwwwwSSSTTpNJBllll
[SSSSSSSSSSSSSSTTTTTTTTT:kK^l
[<<<<<<<<<<<<<<<<<<<<<<<<<<u9l
[A><<<<<<<<<<<<<<<<<<<<<<<<<<l
[V211111111111111111111111111l
[2(((((((((((((((((((((((((([l
[|%##########################Kl
[*'5[Dj{
"'/5H[DPY
! 6J[[Lj=
! 6J[[DDDDl
-Yjoz{
[[[[[jxzW
[[[[[[[[
[[[[[[[[7
[fPFMlllll
[sTtpk_glllll
[wwwwnhGFlllll
[i>wTTTTTTTTwpNIMlll
[i)<<<<<<<<<<<<<<:nK_l
[i}<<<<<<<<<<<<<<<<<wl
[c*(((((((((((((((((wl
[>6cj0
"' 6Hx
.LjR=W
.Jbjx=l
[[[[[Y
[[[[[[
[[[[[[[
ddddddddddddd
IIIIIIIIIIIIIId7I
ttttttttj
<<<<<<<T
1111111(o
Id7(1IIIIIIIIIIII
IIIII`
L!This program cannot be run in DOS mode.
sisisi
ldsiRichsi
`.data
Dealahoya
Sample AddIn Project
S4Or#0+=
g{rO3f
MDIForm1
MDIForm1
6(d4
 8) f7
8+!"#
 !8*!e6
9+" ""
!!9+"f7
9," ##
!"":,"f8
qr ss
:,#"#$
!##:,#f8
ps t!u!w#x#z#{"|"{ |
;,#"#$
!$$;-$g9
op r!u"w#y%{(}(
)))((&$"
:-$#$%
"$$:.$f9
r p q!s"v"x#y&{&|(
()*+,++,++*(&$!
;-$"$%
$%%;.%g8
pr!p!q"t#u$w$x&z&|&~'
)*+,./3577776420-)%
<.$#%%
%&&</&h9
q s"q"r#t$t%x%x%z'{&~'
+,-/1468:<<<;<:852/-(%!
</%$%&
$%%=.%g:
rt!r!s"s#t$x%w&y'z'}(~)*-..024679:;<=>>>==<:8530,)&#
=.%$&&
%&&>/&h9
q s"q"r#t$u%w&x'z({(~)
+,-//134578:;>?@AACCBA@?=9640-)&!}
>/&%''
$&'=0'i:
r!t#r#s$u%v&x'y({)|)}*+,-./02234679:=>>?@A@@A@?><:9520.*(&
#}!zw
?0'&((
%&&>1(h;
r"t$q"r#t$v%w&x'z({(~)
+-./02345789:;<;<=<==<=<;:9874321/-+*
(}'{%y#w"tr
>0(%')
&''?1(j;
r"t$p#q#s$v%v&w(y)z(})~*
--./23446788999:;:;:9;:8887654331/.-+
*}({'y&v#t#r!po
?1(&()
 ())A3*k= H
q#s$p#q$s%t&v'w'x(y){*|+},
012334566779:;:;999876653210
*})|'z&y%w$t"s"q!o nl
A3*(*) 
! )**B3+l> I
js$t%q$r%t&u'w(x(y)z*|+},~-
-/01034456778889:9:99987554210/.--*
)})|&z&y%w$u#t#r"q!p nl
k<A4+)**!
! ())B4*n>J
mw%x&t%u&w'x(z){)|*}+
,-..012245567889:9:;:;:9:9866543210/.,+*
(}'|&z%x$w$u#t"s!q on
B5*))*
! )**C4+n= I
y$y&u%u&w'y(z({*}*~*
+,-./01345567788989:9:9898766543210/.,+)
(}&|%z$y#x#v"u!s qpo
l=C5+**+!
"!!+++B5-h="F
p!p#m"m#n$p%q%r&t'u'v(x)y*z+|,}-~.
222123232112210
-~,|+z)y(w&v%t#s"r!q p nm
h>"B6.,,,#!!
$""---A7/\;%{@
c e g"g#h#i$k%l%m&m'o(p'p&p'r'p&q&s't(s't(u(t(t'u(t's&t&u(t(t't&s(r'p&o&o%n%m$j"i!gf
^=(B82/0/%##
#!!--,<4/N7'c8
\] \] ^ ] \] ]\
O7(=50/.-#"!
!)((3.+=/&G.T1
-($$"!
&##+'&,&#-$ 0&
&##%###"""!""! " " " #!
#!" # #! $"!'$#('%('%'%$&%#&%%&#$'$#'&$'%$'##&#"$! "
# #!# "
"! %#"'%$(&%(&%'$#&$#'%$&##'$#(&$&%#%$"%#"#!!
" "!!#!!#!" " #! #! !
#!$"!$$#&&%('')*(+*)*)'&%#
$"!&$$(%$'%%&$%&%$&$$&$#%#"&$#%##&##(&%100@??JKJLMLHHHGGGFFGFGFGGGHGGGFGEDE?>?322%#"
!'%$(&%'%%&#$'#"&$$$##$!!%#"&%$*))544ECDNMNMLLHGHGFFFFGFFEGGGIHIFFGA@?998.-,# 
" !'&&(&&&%$%$#%%$&%$%$##""$##*))100;;:GGGNONONMKJIBA@765.--+++
$!!*%$.('/)(.*)-+*.*(-*(.('-)(,((,('/+*?;:XVUkjitsrtttttttttttsuuuvvvuttsqqjhhVSR;86-('+'&.*(.*)/*)/*)/**.**,((,'&-)'.*)400EBB_]^rpqwuvvttusssrrttsvuuxvvtrslkj`_^KIH511)$$+&%.*)/*).*).*)/*).+)-)(+&%,('3..=99OMKfedvvtyyxuttihhXWWKKKGGG
'##-('1+*4-,4.-5/.60/4/.4.-4/.3.-1+*3-+D@>a_^}||gcbLFF944.(',&%3-,6106005//3.-3.-3-,1+*611JGGmkk}{{YUU?::4--.''.('3-,61070/5/.4.-2,+3,+50/>98WSR|zyrppjjj
# )&&0+*4.-70/810:21;43:21;21:329215-,5.,F>>`\\vrqOIH2*),$#6/.<54<44;32:21;219103,+6/.KEDpll
a[[B;;0((.&%7/.=65<54:21910:1090/5.-;43XRQ
&""*((-)(.)(1+*6.-910;21;11:21;32:216.-6-,A87SMLqmm
pjiG@?7..6.,7/.90/;21<43<33:105,+4-,C=;`[Z
_XX>653+*7..921:10:21;32<21:0/5,+7/.NHGupp
&##(%%$! !
$ *&%/)(1*)3+*3+*4,+4,+3+*3+*5-,810IBAmhg
mggKEE2+*( ,$#4,,7//6.-4,+1)(1))4--=76RLLzvv
ZSS>76/((*#".'&5-,7/.6-,4+*0)(1*)921GA@c]]
'$$)&%%!
%! (#"*$#,%%-&&.'%.'&/('0((+##"
'>87`[Z
hdd;55#
-&&/)(.''-&&.''-&&(!!
'""GBBrmm
|yxTON3/.$
/'&0*)/('-&%,&%+%$' !
/'(]WW
)'&2.-821;4380/0*)+&%*%$("")!!("!)!"*##+$$&
("!;65a][
^[[:67)##!
& *$$+%%*##$
-((HCCqnn
~zzPKK1+,% "
'"!*%$*%$(#""
>89b^^yvv
-)(?87UJHcURYMJC981+*+&%(##& $
842_]\b^_954
'!!'""'!!$"
&""B>>ron
yttLGG.)(
(#"(#"& #
+%$944ECBQNNXVV[ZY
2,+JA?j\[
olrc`ODC70/.('+%%'!!$!
854\YX
[XW/,+
$ GCBrmm
uqqIDD'""
%""-++301533
6./RGGwji
qpWLK;222++/))+%%'""#
3//]ZX
`\Z:64
'#"@==njj
ywvIEE+&%
#800UJJ{mlttYNM?446-.4-.0++-(&(""
/,+YVV
_\Z/,+
=::ojj
rnnFBA#
% 7//NCCh\[xkjm`_PEE=338//7004..2-+.'&$ 
/,,VTS
RON*'&
A==jih
nig@;;
'!!5..A77H?>MCBI?>@77:22900920921:106/.-&%!
(('QPO~{y
}{SPO0--
533ecb
hbb=99!
*%%6//<349104--6--:21<44<45=54?76@87>6560.+%%!
/--XTR
romB??
D@?snm
TQP.-+
%!("#0+*<65@99:423.-70/?76B::C<;B:9D<;F>=F>=A<::440**#
+''OJI}|
~QOM&"!
?;:kgf
d``<88
)""+&%50/B;:HBAE>=A:9C<:GA?JCAIBAHA@JCBLEDLEDKDCG@@=651)(( & ("!*#"+%$,%%%
' <65\WW
YTR2-+"
+"!*#")"#+#",%$,%$$
,%$NIHutsiddF@@+$#"
*#",%$-%$(""!
1+*D=<TJIYPO\QQZPNUKIPIFNGENGFQJITMLTMLOHGHA@?765.,/'&/'&1))0)(/''.&&,%$0((C<;d]]
nhhNGF7/.,%$.'&1)(1*)2**1((.&%.&%/'&70.NGGuqp
{yxXSRA991)(,#".&%1)(3+*3-,-'&
(#"D=<`TSsfd~qowjgcWTUMJRJHTLKXPO\TS[SQOGF@;98103,+2*)4+*6..3,+,$$*#"2,+D>>faahccD==80/4-,1*)2+*4,+5.-70/3+**"!*#";43VPP{vv
||VPO9212*)4,+3+*2*)4,*6.-610.('
+&%H@>g[Ytrzwm`]ZQNXOM[RQ^UT]USXPNHB@9311+*1*)2,)3,+5--2+*,$$0*)E?>faa
rnmE??)!!) 1**4-,3,+3,+4-,5--1*),%$5.-SLK}yx
~~ZTT910&
)! 2+*5.-4-,4,+7//721-((
5/.?87QIFh\Ztr|zseabXTbXUe][`WUTKJF@?:320*),'%.('.)'+%$(!!)"".((?;:fcb
ifeHCC2,,%
'-&&0))1+*0)(+$#' !*$$710OJHzvu
~TPP943,%$%
)" -&&/)(/('0)(2,+2-,,((#
UMK\SPi][}qn~zxugdh]Xh_[h`][SQE>=2,-+%%)#!(#!+%$+%$$
& :55[WWeaa611#
&!!'!!)##+$$,&%*$#"
,&'KFGtop
}{yOKK,&&
)#"(!!' !(""*%$,'&-((-))-)))&%
e\Xmb_|qn|xxvxlgka]d[WYRPIA@4.-% "
832]XX
hee>::
)"#D?@rmm
|yxPLK/+*
&! %#
%($"+'&,((+(',((
tie}pmvrvr{ploeaVOL=76,''"
2-,YTS
ZXW300
'"!B>=nji
zwvIED($#
% )%$,('-)(,)(
rgcqfbpfcrieqiee^ZFA?($#
/+*RNM
|ebb0--
=98iec
xvuKHG%"!
%!!(%$+'(,)',)(
TMJRKHSMKSNLLHF732"
3//ZWVea`>;:
'$#>;;khg
}zzLJI-*)
"$!!&$#(%%)&%
53152153220/)'&"
$!!744WSS
a__310
(&%EBAjgg
}{zNJJ'%#
"#!!$!!$!!$""%##
&%$&%$$#"" !!!# "
/,+QNNyuuife=;;
644b_^
|yxQNM/,,
" " !
""!!#!!# #""###
"! !!
! " !
:88khh
b``;99&%%
$""DCC{xw
NLL,++
 
!! "!!
! 
CAA~zyyyw@??
! 
)''NMMbbb///
! 

!!!
! FDDmnl211
! "!!!
*))RPQ
VVV"""
$##!
MDIForm1
VB5!*
TextConv
Dealahoya
Dealahoya
~bB>E1
92zP_Az
S4Or#0+=
Q@ezs
AllowAddNew
AllowArrows
AllowDelete
AllowUpdate
Appearance
BackColor
BorderStyle
ColumnHeaders
DataSource
DataMember
DefColWidth
ForeColor
RightToLeft
TabAcrossSplits
TabAction
WrapCellPointer
DataFormats
MSDATGRD.OCX
MSDataGridLib.DataGrid
DataGrid
MSADODC.OCX
MSAdodcLib.Adodc
frmAbout
frmODBCLogon
frmMSysModules2
frmOptions
MDIForm1
Dealahoya
USER32
CallWindowProcA
VBA6.DLL
USER32
RegQueryValueExA
A^L26F
G5Jf:O3f
+3qC:\Program Files\Microsoft Visual Studio\VB98\VB6.OLB
advapi32
RegOpenKeyExA
RegCloseKey
StartSysInfo
GetKeyValue
+3q"=h
USER32
SetMetaRgn
8<Dg!&;C%O$
92zP_Az
pFzhdGH
~bB>E1
cmdRefresh
cmdUpdate
picButtons
"grdDataGrid
J[df#iC:\WINDOWS\system32\MSDATGRD.oca
MSDataGridLib
cmdDelete
cmdAdd
cmdClose
,datPrimaryRS
C!3.rI
C:\WINDOWS\system32\MSADODC.oca
MSAdodcLib
"_=lEA=[C[fv
g{f>($*KJj
CS4Or#0+=
WI0-MW
MDIForm
"_:O3f
frmOptions
Options
92zP_Az
ZDg!&;C%O$
frmODBCLogon
ODBC Logon
frmAbout
About MyApp
~bB>E1
=W:O3f
frmMSysModules2
MSysModules2
picButtons
cmdAdd
cmdUpdate
&Update
cmdDelete
&Delete
cmdRefresh
&Refresh
cmdClose
&Close
grdDataGrid
MSDataGridLib.DataGrid
MS Sans Serif
MS Sans Serif
datPrimaryRS
datPrimaryRS
MSAdodcLib.Adodc
MS Sans Serif;
Sample AddIn Project
KeyRoot
KeyName
SubKeyRef
KeyVal
'4%'D%nhnd
jT%ntnp
T`1x5T
qP<lPqx
#$*# o
#(Pi,/(
#$*# P2
#T*#PF
#L*#HF
#D*#@P
XTPLHD@lxJqt
hlt50d(
r/X50ld
ll\ltl [
#T*#PF
#L*#HF
#D*#@P
XTPLHD@
qT<lXl
XlTqp/Xlp
X4lXll^
qT<lXl
`XlTqp2
4`1`54
4`1`54ldq
qT<lTqp/
qT<lTqp/
`#lllh;/6
lpltiltl
`#lllh;/6
q\<l\qx
MSVBVM60.DLL
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
6(d4
 8) f7
8+!"#
 !8*!e6
9+" ""
!!9+"f7
9," ##
!"":,"f8
qr ss
:,#"#$
!##:,#f8
ps t!u!w#x#z#{"|"{ |
;,#"#$
!$$;-$g9
op r!u"w#y%{(}(
)))((&$"
:-$#$%
"$$:.$f9
r p q!s"v"x#y&{&|(
()*+,++,++*(&$!
;-$"$%
$%%;.%g8
pr!p!q"t#u$w$x&z&|&~'
)*+,./3577776420-)%
<.$#%%
%&&</&h9
q s"q"r#t$t%x%x%z'{&~'
+,-/1468:<<<;<:852/-(%!
</%$%&
$%%=.%g:
rt!r!s"s#t$x%w&y'z'}(~)*-..024679:;<=>>>==<:8530,)&#
=.%$&&
%&&>/&h9
q s"q"r#t$u%w&x'z({(~)
+,-//134578:;>?@AACCBA@?=9640-)&!}
>/&%''
$&'=0'i:
r!t#r#s$u%v&x'y({)|)}*+,-./02234679:=>>?@A@@A@?><:9520.*(&
#}!zw
?0'&((
%&&>1(h;
r"t$q"r#t$v%w&x'z({(~)
+-./02345789:;<;<=<==<=<;:9874321/-+*
(}'{%y#w"tr
>0(%')
&''?1(j;
r"t$p#q#s$v%v&w(y)z(})~*
--./23446788999:;:;:9;:8887654331/.-+
*}({'y&v#t#r!po
?1(&()
 ())A3*k= H
q#s$p#q$s%t&v'w'x(y){*|+},
012334566779:;:;999876653210
*})|'z&y%w$t"s"q!o nl
A3*(*) 
! )**B3+l> I
js$t%q$r%t&u'w(x(y)z*|+},~-
-/01034456778889:9:99987554210/.--*
)})|&z&y%w$u#t#r"q!p nl
k<A4+)**!
! ())B4*n>J
mw%x&t%u&w'x(z){)|*}+
,-..012245567889:9:;:;:9:9866543210/.,+*
(}'|&z%x$w$u#t"s!q on
B5*))*
! )**C4+n= I
y$y&u%u&w'y(z({*}*~*
+,-./01345567788989:9:9898766543210/.,+)
(}&|%z$y#x#v"u!s qpo
l=C5+**+!
"!!+++B5-h="F
p!p#m"m#n$p%q%r&t'u'v(x)y*z+|,}-~.
222123232112210
-~,|+z)y(w&v%t#s"r!q p nm
h>"B6.,,,#!!
$""---A7/\;%{@
c e g"g#h#i$k%l%m&m'o(p'p&p'r'p&q&s't(s't(u(t(t'u(t's&t&u(t(t't&s(r'p&o&o%n%m$j"i!gf
^=(B82/0/%##
#!!--,<4/N7'c8
\] \] ^ ] \] ]\
O7(=50/.-#"!
!)((3.+=/&G.T1
-($$"!
&##+'&,&#-$ 0&
&##%###"""!""! " " " #!
#!" # #! $"!'$#('%('%'%$&%#&%%&#$'$#'&$'%$'##&#"$! "
# #!# "
"! %#"'%$(&%(&%'$#&$#'%$&##'$#(&$&%#%$"%#"#!!
" "!!#!!#!" " #! #! !
#!$"!$$#&&%('')*(+*)*)'&%#
$"!&$$(%$'%%&$%&%$&$$&$#%#"&$#%##&##(&%100@??JKJLMLHHHGGGFFGFGFGGGHGGGFGEDE?>?322%#"
!'%$(&%'%%&#$'#"&$$$##$!!%#"&%$*))544ECDNMNMLLHGHGFFFFGFFEGGGIHIFFGA@?998.-,# 
" !'&&(&&&%$%$#%%$&%$%$##""$##*))100;;:GGGNONONMKJIBA@765.--+++
$!!*%$.('/)(.*)-+*.*(-*(.('-)(,((,('/+*?;:XVUkjitsrtttttttttttsuuuvvvuttsqqjhhVSR;86-('+'&.*(.*)/*)/*)/**.**,((,'&-)'.*)400EBB_]^rpqwuvvttusssrrttsvuuxvvtrslkj`_^KIH511)$$+&%.*)/*).*).*)/*).+)-)(+&%,('3..=99OMKfedvvtyyxuttihhXWWKKKGGG
'##-('1+*4-,4.-5/.60/4/.4.-4/.3.-1+*3-+D@>a_^}||gcbLFF944.(',&%3-,6106005//3.-3.-3-,1+*611JGGmkk}{{YUU?::4--.''.('3-,61070/5/.4.-2,+3,+50/>98WSR|zyrppjjj
# )&&0+*4.-70/810:21;43:21;21:329215-,5.,F>>`\\vrqOIH2*),$#6/.<54<44;32:21;219103,+6/.KEDpll
a[[B;;0((.&%7/.=65<54:21910:1090/5.-;43XRQ
&""*((-)(.)(1+*6.-910;21;11:21;32:216.-6-,A87SMLqmm
pjiG@?7..6.,7/.90/;21<43<33:105,+4-,C=;`[Z
_XX>653+*7..921:10:21;32<21:0/5,+7/.NHGupp
&##(%%$! !
$ *&%/)(1*)3+*3+*4,+4,+3+*3+*5-,810IBAmhg
mggKEE2+*( ,$#4,,7//6.-4,+1)(1))4--=76RLLzvv
ZSS>76/((*#".'&5-,7/.6-,4+*0)(1*)921GA@c]]
'$$)&%%!
%! (#"*$#,%%-&&.'%.'&/('0((+##"
'>87`[Z
hdd;55#
-&&/)(.''-&&.''-&&(!!
'""GBBrmm
|yxTON3/.$
/'&0*)/('-&%,&%+%$' !
/'(]WW
)'&2.-821;4380/0*)+&%*%$("")!!("!)!"*##+$$&
("!;65a][
^[[:67)##!
& *$$+%%*##$
-((HCCqnn
~zzPKK1+,% "
'"!*%$*%$(#""
>89b^^yvv
-)(?87UJHcURYMJC981+*+&%(##& $
842_]\b^_954
'!!'""'!!$"
&""B>>ron
yttLGG.)(
(#"(#"& #
+%$944ECBQNNXVV[ZY
2,+JA?j\[
olrc`ODC70/.('+%%'!!$!
854\YX
[XW/,+
$ GCBrmm
uqqIDD'""
%""-++301533
6./RGGwji
qpWLK;222++/))+%%'""#
3//]ZX
`\Z:64
'#"@==njj
ywvIEE+&%
#800UJJ{mlttYNM?446-.4-.0++-(&(""
/,+YVV
_\Z/,+
=::ojj
rnnFBA#
% 7//NCCh\[xkjm`_PEE=338//7004..2-+.'&$ 
/,,VTS
RON*'&
A==jih
nig@;;
'!!5..A77H?>MCBI?>@77:22900920921:106/.-&%!
(('QPO~{y
}{SPO0--
533ecb
hbb=99!
*%%6//<349104--6--:21<44<45=54?76@87>6560.+%%!
/--XTR
romB??
D@?snm
TQP.-+
%!("#0+*<65@99:423.-70/?76B::C<;B:9D<;F>=F>=A<::440**#
+''OJI}|
~QOM&"!
?;:kgf
d``<88
)""+&%50/B;:HBAE>=A:9C<:GA?JCAIBAHA@JCBLEDLEDKDCG@@=651)(( & ("!*#"+%$,%%%
' <65\WW
YTR2-+"
+"!*#")"#+#",%$,%$$
,%$NIHutsiddF@@+$#"
*#",%$-%$(""!
1+*D=<TJIYPO\QQZPNUKIPIFNGENGFQJITMLTMLOHGHA@?765.,/'&/'&1))0)(/''.&&,%$0((C<;d]]
nhhNGF7/.,%$.'&1)(1*)2**1((.&%.&%/'&70.NGGuqp
{yxXSRA991)(,#".&%1)(3+*3-,-'&
(#"D=<`TSsfd~qowjgcWTUMJRJHTLKXPO\TS[SQOGF@;98103,+2*)4+*6..3,+,$$*#"2,+D>>faahccD==80/4-,1*)2+*4,+5.-70/3+**"!*#";43VPP{vv
||VPO9212*)4,+3+*2*)4,*6.-610.('
+&%H@>g[Ytrzwm`]ZQNXOM[RQ^UT]USXPNHB@9311+*1*)2,)3,+5--2+*,$$0*)E?>faa
rnmE??)!!) 1**4-,3,+3,+4-,5--1*),%$5.-SLK}yx
~~ZTT910&
)! 2+*5.-4-,4,+7//721-((
5/.?87QIFh\Ztr|zseabXTbXUe][`WUTKJF@?:320*),'%.('.)'+%$(!!)"".((?;:fcb
ifeHCC2,,%
'-&&0))1+*0)(+$#' !*$$710OJHzvu
~TPP943,%$%
)" -&&/)(/('0)(2,+2-,,((#
UMK\SPi][}qn~zxugdh]Xh_[h`][SQE>=2,-+%%)#!(#!+%$+%$$
& :55[WWeaa611#
&!!'!!)##+$$,&%*$#"
,&'KFGtop
}{yOKK,&&
)#"(!!' !(""*%$,'&-((-))-)))&%
e\Xmb_|qn|xxvxlgka]d[WYRPIA@4.-% "
832]XX
hee>::
)"#D?@rmm
|yxPLK/+*
&! %#
%($"+'&,((+(',((
tie}pmvrvr{ploeaVOL=76,''"
2-,YTS
ZXW300
'"!B>=nji
zwvIED($#
% )%$,('-)(,)(
rgcqfbpfcrieqiee^ZFA?($#
/+*RNM
|ebb0--
=98iec
xvuKHG%"!
%!!(%$+'(,)',)(
TMJRKHSMKSNLLHF732"
3//ZWVea`>;:
'$#>;;khg
}zzLJI-*)
"$!!&$#(%%)&%
53152153220/)'&"
$!!744WSS
a__310
(&%EBAjgg
}{zNJJ'%#
"#!!$!!$!!$""%##
&%$&%$$#"" !!!# "
/,+QNNyuuife=;;
644b_^
|yxQNM/,,
" " !
""!!#!!# #""###
"! !!
! " !
:88khh
b``;99&%%
$""DCC{xw
NLL,++
 
!! "!!
! 
CAA~zyyyw@??
! 
)''NMMbbb///
! 

!!!
! FDDmnl211
! "!!!
*))RPQ
VVV"""
$##!
76749607097374937563457408670349764376^;>g
w39A9I
@FIIYYT\\QZX^T
TeUPiinhbmoa`pe`dtff{wzz{y=qqcvp{yww
(8-//3/-$",-%%( 88:?/39>05145524
O|JOOZOODvLCEIFF_ZZZ\\]QPPUWw[W5ljeemm`h``bggkafx}y|}}z|~qs}ttqt
+.++(. /!/""#&&&8895<<9;3?310699hEDONX
a/j&"d0q>|
XIQ/|M.CJB5i1[\^(Og
Dh*~/`amt
+[%PY$cc
-;%**/
g7G}#(}
864"4K/EM&k"
v1ZwaIl
d@49dCYU
?ca\jG
tD#M%H
bg9Cc_
SZ(^!P
M`i98t]c](S
5u]a5I?B+]FOTH2
%WmHs-
(?4Sa|4
h}#q7u{
/dn!?&
x4ZlkfDQ'o
6Tx n<qNI#CCEZe"5RP
o.I@Hy
Qg`QM 5?A5u
H =av+]2
K }kV:
+")ef_i`
:d4!q+
w]15-AH*
ygZdJ@
Ptn.bT
t Wa++jt
<vUq^M
|cc-3`6
Myy{dTYr!
koso73n~
<Z+pAA
\rcmEt
Ye+9O
]v:up4
ZAF\n;T>qZ_
'-{><M
5:uP+8
eF&9\mt
\t,B(P
9~,X}g
lD~ddi
mvguT#[rg#
,hNXLm
A+_%Yr9urz
rJ62=}
&!hLH" -v
f2y,ro
u{&<<Om<1DGK
7!o/G2*,_y
(`UlCmT:]&=}[Xe
PX]ZnEE
o/%<q?{
{00F/"
BQQ`]W4=Y^`a
KQ|?ICfkO|
Tn|Q4a
f=<j_l
%k]cVcu
o&x3 $
818-T5>0#f0(
!VV.FIu
LlL&*V
/MVgdt'M
[lL_MBQX+(S|_W">I&xcaC|PjLlf
%qt?&q
! k~&s>
VvUQ"%w;
H#/B>+
n/39Zt
a(4u9i
[9;g9h~ig
7`5p$[
yau||l{
H{hb=[pO]UY
-]]y#O
041e?)
p;;d,l'
rjnAb{:<:F4+%
P-Ai\gN#m
!Fi!3'
&v+a.m78|'{`wG
<{[NT4=M
q _Pbr
x68xv:
beGMbq/Y'O-Gtp(w?e
n{qocF_T!2T[(
XEnt`@
GM$b:D93x
trm487
hR%wiA
4;H7%>
K!cMA7
8XWgo4I
%]%[7+9W
yP'C~lMpt+
%nOL7`
^q 0{G
"qGgm^)-A}C
$i$3tc1i
.iXF IA
V2SCut
P,JP)TX]nt`q;
A`~)T>
X#6/93
)P{wJS&u~sQ(^WO6
gl|J"EE
}h5C:'!z
a|JThz|oA^u
cpm{w@
HZ$XPg:
`O'2M:a
w'LfDC52q)'adM!JDlH@
P~!JfF
uW9h$$%u*A
$@XN/s;
!1^rjp
na&i5E
n$YpUr
QZ?ahQP?T#
sc}zVO
k"5@L{w
k5H"vR
Pq:6OWMETfYL
b0:gfR?
mFmrh^l-9&K
wu1VUs
{@C]O0&<gN]h6C~g
cURq'S
P=39yI{
_#lDEG%
zJoJN|n
F;th9%
E;~8R+
r>c}Hw
qIaluW$
F3Nj?(I'
jd o3&+),m
XB7BJ2CF
|f/u;4
gfrNQ;f)
]t3Ea/T(O__
5:k1P@
k%j.cxwxF
],QEa#aIF|{;k9*x*[
+vrSMR
}[Gm,qa
^D-r{)~
*K+\4j
7CF[P9%B
6x}/"r?J/t
-~?rL&g
\%Ia62zG
'V8k+q
voCUHf"
xkW697
S0Wx;">6i
NS9aRci
\SmWf
:?$<0*u/ov3
44*Gy:X,
xxKw'!
kp(1]W
`DC.$UyR]7
Z\;nho7k;
8$:'SDOJ
chy;6xMcxw?5]bvG
X`7,X|noi
["'<T>
eo !=:iGc
`~ybne5W U
%;;<_\
Lqi,\%bej
,0#=pB:
KyvWX4?fy7
wXZ^2|i
lTj.uG
\]-0@6
}&a6p_O+
_L7#'pb|9?]k/:
iNlZ/F
%JGO@"XV
vefRX'3Xz?7
x8C M>iBhX=>S
@v_.Dp1l
N;14^]
]Dy!!j
u>;xlD#$
<VW|;;2=
`MzNU#
l5]"OA}~09~u`ZR
z8"Iv}
wTd9L}ejT
C8JAoMOCRzl
KR-Bu YG
:b^B8J
7WCk^U7Ul
6wUy$+`v
f&FH_j
F`HK@ae
J?;v-"hW
\-q#lMT{?*q(T
/Qu\P/4R
[8+$i2
D76hQJOOz'f
eIJ5 ,v
zR);)<y
sQb00G
*d2a!D%YBGR
t'e*hQ*e_
yd=9>"T*rIA~
V}ay?D
.P#!GjD/
&JCY>
h;W.?05
Si4n}A/v>n{B3|p;uI2z
M{$En: \er.
e^I:FLMd
*Q2<+Br&K.2v
;wtif;
LkT PPR'
gA&;bE
jwk$3Xd]
RA/(jlxp
0rZY3=cF~
"+61nil
a(-U:;5@a0
sV`mesK~iL"e]
.b{^rN
T_Yl%P
o;3^"92
CTNYSA~mLi>
X}Tg@vl
PpsR|*ts!
HHJJOCNNGEAMEGBDWW[[RZ^^PUQ]STVSknkkhn`oaobbcfffxxyu||y{s
sqpvyy
+'**+)-!!#& ++''6>::<9=17027727776749607097374937563457408670349764376
L!This program cannot be run in DOS mode.
`.sdata
@.reloc
&*BSJB
v2.0.50727
#Strings
>`
, N p
!<!^!!!!!
"*"L"n"""""
#:#\#~####
$3$`$$$$*%o%%%
&T&y&&&&&&&&&
'-'='M']'m'}'''''''''
(2(S((
)9)[)}))))
*'*I*k*****
+7+Y+{++++
,%,G,i,,,,,
-5-W-y----
.#.E.g.....
/3/U/w/////!0C0e00000
111S1u111112A2c22222
3/3Q3s33333
4?4a44444
545Z555%Ay
<Module>
mscorlib
Microsoft.VisualBasic
POINTAPI11
POINTAPI61
LARGE_INTEGER1
PALETTEENTRY1
COORD11
ResourceReader
Module1
jsdhfs8A
EVENTLOGRECORD1
WAVEHDR11
POINTAPI71
CANDIDATEFORM1
RECT31
POINTAPI111
COMPOSITIONFORM1
POINTAPI21
MIDIHDR11
PMwgc4CkRLWr
fknsakogfb
Mijiohuih
hjyiu67f
MIXERLINECONTROLS111
KERNINGPAIR
LARGE_INTEGER
WAVEOUTCAPS
PERF_COUNTER_DEFINITION
PROCESS_INFORMATION
FONTSIGNATURE
NEWTEXTMETRIC
NEWTEXTMETRICEX
MCI_WAVE_OPEN_PARMS
MENUITEMINFO
WAVEINCAPS
MIDIINCAPS11
MIXERCONTROLDETAILS11
MIXERCAPS11
MIXERCONTROL11
MIXERLIaNECONTROLS111
SECURITY_QUALITY_OF_SERVICE
SESSION_BUFFER
SID_AND_ATTRIBUTES
SIDANDATTRIBUTES
TOKEN_GROUPS
WINDOWPOS
System
Object
OleUninitializeq
OffsetViewportOrgExq
lpPoint
AccessCheckAndAuditAlarmq
SubsystemName
HandleId
ObjectStructureName
ObjectName
SecurityDescriptor
DesiredAccess
ByValGenericMapping
ObjectCreation
GrantedAccess
AccessStatus
pfGenerateOnClose
a9z/X9.dll
PdhAddCounterq
QueryHandle
CounterPath
CounterHandle
SiiX.dll
7PQJ5I
AbortPrinterq
hPrinter
SWW.drv
ActivateKeyboardLayoutq
QueryServiceObjectSecurityq
ByValhService
ByValdwSecurityInformation
ByVallpSecurityDescriptor
ByValcbBufSize
ByValpcbBytesNeeded
cxgA.dll
AddAccessAllowedAcqqe
dwAceRevision
AccessMask
haM+.dll
AqbortDoc
RaiseExcqeption
dwExceptionCode
dwExceptionFlags
nNumberOfArguments
lpArguments
VFsv0G
AddAqccessDeniedAce
HkI.dll
gkdrE+
ReaqdConsole
hConsoleInput
lpBuffer
nNumberOfCharsToRead
lpNumberOfCharsRead
lpReserved
AqngleArc
dwRadius
eStartAngle
eSweepAngle
AngleArc
AllqocateLocallyUniqueId
iW2Qp.dll
AddaJob
pcbNeeded
hEk7o.drv
System.Reflection
Assembly
wGhDNdXsB
wWhdunc
icUgg.dll
MprIBhArB
FlEEWUj
wtlGJ.dll
peDzvKzbD
VkYktUe
bWTcX.dll
HDpYrVLrx
PtLemxB
kLkRv.dll
VlmIsnbGK
XDamleS
rPLLK.dll
VtkZdLjOo
OZFyHsC
MOCxx.dll
SghVrcTzM
XCZNAJB
MiolJ.dll
zwJaqKyhN
NSSdxOp
BGfJc.dll
EsvRnAweb
mPuFjIf
MVJoy.dll
ZqYyKuafy
TiDckuW
sspgq.dll
LgEJvHWYt
LJAeMcL
pLLYk.dll
IamZfUWjV
tyroXFX
VklRD.dll
hBqxBwhmC
oCOoYTu
iNbFU.dll
DoInxINdO
cYeBWRp
Cuqlh.dll
raHwwjxbh
GrVUfjS
ccznV.dll
XvJcZsSsv
jPlHnAH
nNNmO.dll
ZmUMiBRbn
vEdzWKl
DCzfK.dll
lFTxPZEWg
gJNaFuD
KzNVY.dll
quefYUwed
AjXpJVh
zDPyH.dll
iPzAGJOiA
gMCPtXS
FLRvT.dll
vHWYtLJAe
McLjvlT
kLgEJ.dll
fUWjVtyro
XFXnSAq
DIamZ.dll
BwhmCoCOo
YTuGyKC
UhBqx.dll
xINdOcYeB
WRpTPKI
hDoIn.dll
wjxbhGrVU
fjSfkUR
VraHw.dll
ZsSsvjPlH
nAHDBgR
OXvJc.dll
iBRbnvEdz
WKlkObm
KZmUM.dll
PZEWggJNa
FuDaEGE
YlFTx.dll
YUwedAjXp
JVhbfZG
Hquef.dll
GJOiAgMCP
tXSMpLL
TiPzA.dll
tLJAeMcLj
vlTIVkl
JvHWY.dll
VtyroXFXn
SAqtiNb
ZfUWj.dll
CoCOoYTuG
yKCxCuq
xBwhm.dll
OcYeBWRpT
PKIdccz
nxINd.dll
hGrVUfjSf
kURsnNN
wwjxb.dll
vjPlHnAHD
BgRSDCz
cZsSs.dll
nvEdzWKlk
ObmkKzN
MiBRb.dll
ggJNaFuDa
EGEmzDP
xPZEW.dll
dAjXpJVhb
fZGHFLR
fYUwe.dll
AgMCPtXSM
pLLYkLg
AGJOi.dll
YENxZNCup
nXCtgpF
YtLJd.dll
ScgvqfdRI
PWqhiLm
LbIOU.dll
SiuPhIzbB
bPRCLgS
evAba.dll
mryDuszoH
BNVwnUF
HaNiY.dll
oJLfJXotF
wWWwavM
qKjUb.dll
kwskfmJyd
gbCJzce
GMZsX.dll
VrzXXpMeX
lVWnuCh
qqMtH.dll
FhPgDtjte
VgsOkRO
rKKlW.dll
DlnLqJcjk
hxyNyAa
YGdZv.dll
sUvfWDxzi
ZxKrkMj
AdKEv.dll
ZNCupnXCt
gpFecHo
dYENx.dll
qfdRIPWqh
iLmEVnT
UScgv.dll
hIzbBbPRC
LgSpwBp
aSiuP.dll
uszoHBNVw
nUFjTRZ
YmryD.dll
JXotFwWWw
avMlNcG
boJLf.dll
fmJydgbCJ
zceoEAm
Xkwsk.dll
XpMeXlVWn
uChuBax
HVrzX.dll
DtjteVgsO
kROTJio
WFhPg.dll
qJcjkhxyN
yAaVdjl
vDlnL.dll
WDxziZxKr
kMjeuIx
vsUvf.dll
pnXCtgpFe
cHorLbI
xZNCu.dll
IPWqhiLmE
VnTLevA
vqfdR.dll
BbPRCLgSp
wBpmHaN
PhIzb.dll
HBNVwnUFj
TRZBqKj
Duszo.dll
FwWWwavMl
NcGfGMZ
fJXot.dll
dgbCJzceo
EAmyqqM
kfmJy.dll
XlVWnuChu
BaxtrKK
XXpMe.dll
eVgsOkROT
JioTYGd
gDtjt.dll
khxyNyAaV
djlaAdK
LqJcj.dll
iZxKrkMje
uIxldYE
fWDxz.dll
tgpFecHor
LbIOUSc
upnXC.dll
hiLmEVnTL
evAbaSi
RIPWq.dll
CLgSpwBpm
HaNiYmr
bBbPR.dll
wnUFjTRZB
qKjUboJ
oHBNV.dll
wavMlNcGf
GMZsXkw
tFwWW.dll
JzceoEAmy
qqMtHVr
ydgbC.dll
nuChuBaxt
rKKlWFh
eXlVW.dll
OkROTJioT
YGdZvDl
teVgs.dll
NyAaVdjla
AdKEvsU
jkhxy.dll
rkMjeuIxl
dYENxZN
ziZxK.dll
ecHorLbIO
UScgvqf
CtgpF.dll
EVnTLevAb
aSiuPhI
qhiLm.dll
pwBpmHaNi
YmryDus
RCLgS.dll
jTRZBqKjU
boJLfJX
VwnUF.dll
lNcGfGMZs
Xkwskfm
WwavM.dll
oEAmyqqMt
HVrzXXp
CJzce.dll
uBaxtrKKl
WFhPgDt
WnuCh.dll
TJioTYGdZ
vDlnLqJ
sOkRO.dll
VdjlaAdKE
vsUvfWD
yNyAa.dll
euIxldYEN
xZNCupn
KrkMj.dll
rLbIOUScg
vqfdRIP
FecHo.dll
LevAbaSiu
PhIzbBb
mEVnT.dll
mHaNiYmry
DuszoHB
SpwBp.dll
BqKjUboJL
fJXotFw
FjTRZ.dll
fGMZsXkws
kfmJydg
MlNcG.dll
yqqMtHVrz
XXpMeXl
eoEAm.dll
trKKlWFhP
gDtjteV
huBax.dll
TYGdZvDln
LqJcjkh
OTJio.dll
aAdKEvsUv
fWDxziZ
aVdjl.dll
ldYENxZNC
upnXCtg
jeuIx.dll
OUScgvqfd
RIPWqhi
orLbI.dll
baSiuPhIz
bBbPRCL
TLevA.dll
ValueType
AclRevision
AclSize
AceCount
lowpart
highpart
peGreen
peBlue
peFlags
C5smNZ
FindResource
hModule
lpName
lpType
GetModuleHandle
moduleName
kernel32
GetModuleHandleA
SizeofResource
hResInfo
LoadResource
ReadResource
filename
jhjhjhj
NH4u6p
HU4c/X9.dll
Polylineq
nCount
AddAuditAqccessAce
dwAccessMask
bAuditSuccess
bAuditFailure
pZ1.dll
ReaqdPrinter
pNoBytesRead
d0b.drv
ReadEqventLog
hEventLog
dwReadFlags
dwRecordOffset
nNumberOfBytesToRead
pnBytesRead
pnMinNumberOfBytesNeeded
qF+.dll
ReadConqsoleOutputAttribute
ByValhConsoleOutput
lpAttribute
nLength
dwReadCoord
lpNumberOfAttrsRead
HOnvq8b
AnimatePalqette
hPalette
wStartIndex
wNumEntries
lpPaletteColors
AddFontReqsource
lpFileName
ChangeServqiceConfig
hService
ByValdwServiceStructure
dwStartStructure
dwErrorControl
lpBinaryPathName
lpLoadOrderGroup
lpdwTagId
lpDependencies
ByVallpServiceStartName
lpPassword
lpDisplayName
SHxo.dll
maicutata
Locale
dwCmpFlags
lpString1
cchCount1
lpString2
cchCount2
ImmGetqIMEFileName
uBufLen
fIR0.dll
waveqOutPause
hWaveOut
meHO.dll
waveOqutUnprepareHeader
lpWaveOutHdr
8rcY.dll
RegQqueryValue
lpSubKey
lpValue
lpcbValue
uQv.dll
cw07Kl
SenqdMessage
wParam
lParam
SendMessageA
ImmSqetCandidateWindow
lpCandidateForm
ImmSetCandidateWindow
SetArcqDirection
ArcDirection
SqetClipboardData
wFormat
InterqnetConnect
hInternetSession
sServerName
nServerPort
sUsername
sPassword
lService
lFlags
lContext
ays5.dll
DVEKWR
ImmSetSqtatusWindowPos
m8l1.dll
ImmSeqtCompositionWindow
ByVallpCompositionForm
ogX.dll
IsCharqAlphaNumeric
LocalRqeAlloc
wBytes
wFlags
LockReqsource
hResData
mciGetqDeviceIDFromElementID
ByValdwElementID
ByVallpstrStructure
+d+k0U.dll.dll
MAXPNAMELEN11
mcqiSendString
lpstrCommand
lpstrReturnString
uReturnLength
hwndCallback
CQA.dll
mciSendStringA
JErmDqOMS
HhrqXda
Vpzee.dll
FBLcSrbKS
Wuhjgzt
HLuRT.dll
BJWoaYidm
AyluLzJ
sgkpP.dll
TWBlLAUKo
bZIJfoD
yUuks.dll
AifxMdsEU
OmMguKn
KvUIY.dll
AZyIwUtvV
vOEXRqA
FcPoo.dll
netSKaliF
PPOFbTD
GCBuT.dll
iHTNHYZrD
DnmqpcN
SRwYp.dll
jqajdnHJs
fvXEyxw
FATVZ.dll
IGlZYCNwZ
kCmpyXg
MMNrG.dll
VsLpVqmfs
ybxKfDL
dqFfA.dll
CgPwVSkmW
nTgohZu
GNieU.dll
xJlvSChTj
rTqMEoW
ZowSl.dll
eXJelOrKq
blVNYMt
cGSiT.dll
avvDJZSpn
kwPDuPF
HXknU.dll
sKgIuILDt
GaXyaul
zCrhL.dll
wxRlNZXLB
OHVdFFe
HPdgC.dll
MJrgBVAAs
zUoEiYB
zkMGo.dll
bPqwvbIyD
hYskSZP
tWacW.dll
HypsrRyAx
jtnhuxY
NKMRt.dll
VqmfsybxK
fDLGMek
AVsLp.dll
VSkmWnTgo
hZuycmR
UCgPw.dll
SChTjrTqM
EoWdjJj
lxJlv.dll
lOrKqblVN
YMtdeOJ
TeXJe.dll
JZSpnkwPD
uPFwBIX
UavvD.dll
uILDtGaXy
aulANui
LsKgI.dll
NZXLBOHVd
FFeZCFd
CwxRl.dll
BVAAszUoE
iYBpBCH
oMJrg.dll
vbIyDhYsk
SZPgpao
WbPqw.dll
rRyAxjtnh
uxYfdqF
tHyps.dll
sybxKfDLG
MekFGNi
pVqmf.dll
WnTgohZuy
cmRzZow
wVSkm.dll
jrTqMEoWd
jJjEcGS
vSChT.dll
qblVNYMtd
eOJKHXk
elOrK.dll
nkwPDuPFw
BIXzzCr
DJZSp.dll
tGaXyaulA
NuijHPd
IuILD.dll
BOHVdFFeZ
CFdHzkM
lNZXL.dll
szUoEiYBp
BCHitWa
gBVAA.dll
DhYskSZPg
paofNKM
wvbIy.dll
xjtnhuxYf
dqFfAVs
srRyA.dll
KfDLGMekF
GNieUCg
fsybx.dll
ohZuycmRz
ZowSlxJ
mWnTg.dll
MEoWdjJjE
cGSiTeX
TjrTq.dll
NYMtdeOJK
HXknUav
KqblV.dll
DuPFwBIXz
zCrhLsK
pnkwP.dll
yaulANuij
HPdgCwx
DtGaX.dll
dFFeZCFdH
zkMGoMJ
LBOHV.dll
EiYBpBCHi
tWacWbP
AszUo.dll
kSZPgpaof
NKMRtHy
yDhYs.dll
huxYfdqFf
AVsLpVq
Axjtn.dll
fpYieldProc
dwYieldData
gdrgrds.dll
7468kj5
uy8l7rf
uDeviceID
lpCaps
57dsfg4S.dll
reg4ey34.dklk
ccCFe5
hMidiIn
lpMidiInHdr
ef44.dll
443n1+
rejh3443
hmxobj
pumxID
fgvf4.dll
i78i57ik
ery437y3
BoM.dll
mixerGetNumDevs
e7y647
eyhg53b
kukyuk
fert45g
TAWV.dll
mixerMessage
dwCallback
dwInstance
fdwOpen
Tqv8.dll
mmioCqlosae
uFlags
6ad.dll
mmioClose
mixerqGetLineaControls
fdwControls
fD5.dll
mixerGetLineControlsA
mixerGqetDevCaps
pmxcaps
cbmxcaps
yte.dll
mixerGetDevCapsA
mixerGqetControlDetails
fdwDetails
Mtn.dll
mixerGetControlDetailsA
ka7A.dll
awkg6x
awkg6x.dll
O9BQc.dll
wnTUch
wnTUch.dll
l0SOs.dll
OpkHSf
OpkHSf.dll
kWS9.dll
JtNrHU
JtNrHU.dll
a8Py9b
8Py9b.dll
gyK71.dll
qAYF.dll
wXLxR.dll
QSbAw.dll
CJj9X.dll
TL5LS.dll
EYL5y.dll
rJZCA.dll
kC4M.dll
oeZl57c
oeZl57c.dll
ap15.dll
KDKZ.dll
hubS.dll
SwAj.dll
KNzzTE
KNzzTE.dll
hYvhx.dll
fgesgtf4w
f356zdrgtf
llllliu
f4657rffg
LoadLibraryA
GetProcAddress
Bumbac
Norton
AddPrintProvidor
pProvidorInfo
YPrNMA.drv
BACKGROUND_GREEN
MAXPNAMELEN
MAXPNAMELELN
ilcSuijWc
MgOwxht
GaIya.dll
nHZCFdEzt
DGoSJtg
OWPdm.dll
UApACHitW
BcfpcDw
zlCEZ.dll
UxwpaofSL
MRJHypd
hkNlb.dll
xjMfFFfvP
sYaOqmq
etmeu.dll
eknWAieUO
gxGVDkd
fbTmD.dll
NwLkXmbyX
gtCpzee
hUuuc.dll
grqXdpUhW
IRGyuET
fOdSe.dll
zhhfltBtP
pCagkpO
kbKMG.dll
llyLzHejN
hwyYzja
YxsmA.dll
LXrfiSwzG
iwKvUUY
BZyov.dll
mNfuJbWCb
EJqcPco
ssEYO.dll
IWZJfPiqV
inFoVyT
UkcCc.dll
VCqvTShRE
LCNJgTv
pkiFV.dll
nnqocBjVx
DdDBKpZ
ZurDM.dll
vXHlzqimO
brNMBeG
bHrsd.dll
XmbyXgtCp
zeeHHjn
oNwLk.dll
dpUhWIRGy
uETFaKx
egrqX.dll
ltBtPpCag
kpOsJmc
Gzhhf.dll
zHejNhwyY
zjaRmBl
AllyL.dll
iSwzGiwKv
UUYPxfx
vLXrf.dll
JbWCbEJqc
PcoAutI
OmNfu.dll
fPiqVinFo
VyTnwrA
cIWZJ.dll
TShRELCNJ
gTvuHKs
VVCqv.dll
cBjVxDdDB
KpZhMaj
Mnnqo.dll
zqimObrNM
BeGXwkZ
dvXHl.dll
XgtCpzeeH
HjnDfOd
kXmby.dll
WIRGyuETF
aKxSkbK
XdpUh.dll
PpCagkpOs
JmcaYxs
fltBt.dll
NhwyYzjaR
mBlKBZy
LzHej.dll
GiwKvUUYP
xfxMssE
fiSwz.dll
bEJqcPcoA
utIgUkc
uJbWC.dll
VinFoVyTn
wrAtpki
JfPiq.dll
ELCNJgTvu
HKsGZur
vTShR.dll
xDdDBKpZh
MajdbHr
ocBjV.dll
ObrNMBeGX
wkZLoNw
lzqim.dll
pzeeHHjnD
fOdSegr
yXgtC.dll
yuETFaKxS
kbKMGzh
hWIRG.dll
gkpOsJmca
YxsmAll
tPpCa.dll
YzjaRmBlK
BZyovLX
jNhwy.dll
vUUYPxfxM
ssEYOmN
zGiwK.dll
cPcoAutIg
UkcCcIW
CbEJq.dll
oVyTnwrAt
pkiFVVC
qVinF.dll
JgTvuHKsG
ZurDMnn
RELCN.dll
BKpZhMajd
bHrsdvX
VxDdD.dll
MBeGXwkZL
oNwLkXm
mObrN.dll
HHjnDfOdS
egrqXdp
Cpzee.dll
FaKxSkbKM
Gzhhflt
GyuET.dll
sJmcaYxsm
AllyLzH
agkpO.dll
RmBlKBZyo
vLXrfiS
yYzja.dll
PxfxMssEY
OmNfuJb
KvUUY.dll
AutIgUkcC
cIWZJfP
qcPco.dll
nwrAtpkiF
VVCqvTS
FoVyT.dll
uHKsGZurD
MnnqocB
NJgTv.dll
hMajdbHrs
dvXHlzq
DBKpZ.dll
XwkZLoNwL
kXmbyXg
NMBeG.dll
DfOdSegrq
XdpUhWI
eHHjn.dll
SkbKMGzhh
fltBtPp
TFaKx.dll
aYxsmAlly
LzHejNh
OsJmc.dll
KBZyovLXr
fiSwzGi
aRmBl.dll
MssEYOmNf
uJbWCbE
YPxfx.dll
gUkcCcIWZ
JfPiqVi
oAutI.dll
tpkiFVVCq
vTShREL
TnwrA.dll
GZurDMnnq
ocBjVxD
vuHKs.dll
dbHrsdvXH
lzqimOb
ZhMaj.dll
LoNwLkXmb
yXgtCpz
GXwkZ.dll
SegrqXdpU
hWIRGyu
nDfOd.dll
MGzhhfltB
tPpCagk
xSkbK.dll
mAllyLzHe
jNhwyYz
caYxs.dll
ovLXrfiSw
zGiwKvU
lKBZy.dll
YOmNfuJbW
CbEJqcP
xMssE.dll
CcIWZJfPi
qVinFoV
IgUkc.dll
FVVCqvTSh
RELCNJg
Atpki.dll
DMnnqocBj
VxDdDBK
sGZur.dll
wesPTipJV
hbfZGHF
jdbHZ.dll
OiAgdXPrX
SNpLKYY
OOBGJ.dll
JAeMcyjcl
TCVklEq
emLtL.dll
yroZDZbMA
qtuNbqY
UGTpt.dll
COoYKyFtK
Cxouqlh
whmoi.dll
ZeBWJpRVK
Usxcznp
XBdOP.dll
rCUfhSfkU
JansNnC
jxvgG.dll
PUenBHSBf
RNDClfK
sSsvj.dll
HdzWykkIS
GYtzdVT
BRSDA.dll
HNaFuDpEw
EFIMPyH
LEHgg.dll
TipJVhbfZ
GHFLRAK
ZwesP.dll
dXPrXSNpL
KYYugWr
JOiAg.dll
cyjclTCVk
lEqIamu
LJAeM.dll
DZbMAqtuN
bqYhsMz
tyroZ.dll
KyFtKCxou
qlhDoIF
iCOoY.dll
JpRVKUsxc
znpraGw
PZeBW.dll
hSfkUJans
NnCXvrc
GrCUf.dll
Lagune
mciqSetYieldProc
mciSetYieldProc
midqInGetDevCaps
DkI0.dll
midiInGetDevCapsA
midiqInAddBuffer
KUt.dll
midiInAddBuffer
MAXPNAMELEN211
mixerGqetID
vzcD.dll
mixerGetID
MIXER_SHORT_NAME_CHARS11
mixerqGetNumDevs
MIXER_LONG_NAME_CHARS11
mixerMqessage
dwParam1
dwParam2
mixerqOpen
mixerOpen
mmioCqlose
mixerqGetLineControls
NCBNAMSZ
ANYSIZE_ARRAY
W5trvj
DDDDDDDDD
ecRv5R
szwmiy
SectionA
VvlADO
BYoJ2k
MGlWmk
ewq34q234
das34aw33
Length
Reserved
RecordNumber
TimeGenerated
TimeWritten
EventID
ClosingRecordNumber
StringOffset
UserSidLength
UserSidOffset
DataLength
DataOffset
EventStructure
NumStrings
EventCategory
ReservedFlags
Bottom
lpData
dwBufferLength
dwBytesRecorded
dwUser
dwFlags
dwLoops
lpNext
dwIndex
dwStyle
ptCurrentPos
rcArea
aLQHqO
cbStruct
dwControlID
cChannels
cbDetails
paDetails
fdwSupport
cDestinations
gfghrf
rgrghrf
ulkulk
vnvcb45
nygjt43
fh5uguj
fhfdhdf4
jhtriu54
dwLineID
dwControl
cControls
cbmxctrl
pamxctrl
wFirst
wSecond
iKernAmount
FSDRF43
FA32QA
wChannels
dwFormats
dwSupport
ByteLength
CounterNameTitleIndex
CounterNameTitle
CounterHelpTitleIndex
CounterHelpTitle
DefaultScale
DetailLevel
CounterStructure
CounterSize
CounterOffset
hProcess
hThread
dwProcessId
dwThreadId
tmHeight
tmAscent
tmDescent
tmInternalLeading
tmExternalLeading
tmAveCharWidth
tmMaxCharWidth
tmWeight
tmOverhang
tmDigitizedAspectX
tmDigitizedAspectY
tmFirstChar
tmLastChar
tmDefaultChar
tmBreakChar
tmItalic
tmUnderlined
tmStruckOut
tmPitchAndFamily
tmCharSet
ntmFlags
ntmSizeEM
ntmCellHeight
ntmAveWidth
ntmFontSig
wDeviceID
lpstrDeviceStructure
lpstrElementName
lpstrAlias
dwBufferSeconds
MulticastDelegate
TargetObject
TargetMethod
IAsyncResult
AsyncCallback
BeginInvoke
ase32ew
das43fsa
DelegateCallback
DelegateAsyncState
EndInvoke
DelegateAsyncResult
Invoke
cbSize
fStructure
fState
hSubMenu
hbmpChecked
hbmpUnchecked
dwItemData
dwStructureData
vDriverVersion
szPname
dwControlStructure
fdwControl
cMultipleItems
Bounds
Metrics
szShortName
szName
Impersonationlevel
ContextTrackingMode
EffectiveOnly
local_name
remote_name
rcvs_outstanding
sends_outstanding
Attributes
GroupCount
Groups
hWndInsertAfter
Microsoft.VisualBasic.CompilerServices
StandardModuleAttribute
STAThreadAttribute
System.Runtime.InteropServices
Marshal
DllImportAttribute
kernel32.dll
Random
System.Diagnostics
Process
GetCurrentProcess
ProcessModule
get_MainModule
get_ModuleName
BitConverter
ToInt32
CopyArray
NextBytes
ProjectData
Exception
SetProjectError
ClearProjectError
System.Security.Cryptography
MD5CryptoServiceProvider
RC2CryptoServiceProvider
ICryptoTransform
System.Text
Encoding
get_ASCII
GetBytes
HashAlgorithm
ComputeHash
SymmetricAlgorithm
set_Key
CipherMode
set_Mode
CreateDecryptor
Convert
FromBase64String
TransformFinalBlock
GetString
Environment
OperatingSystem
get_OSVersion
Version
get_Version
get_Major
Boolean
RuntimeTypeHandle
GetTypeFromHandle
Delegate
GetDelegateForFunctionPointer
GCHandle
Operators
CompareString
Interaction
MsgBoxResult
MsgBoxStyle
MsgBox
GCHandleType
AddrOfPinnedObject
IntPtr
GetType
PtrToStructure
Strings
ConditionalCompareObjectNotEqual
op_Explicit
UInt32
Conversions
ToInteger
StructLayoutAttribute
LayoutKind
MarshalAsAttribute
UnmanagedType
InAttribute
OutAttribute
DebuggableAttribute
DebuggingModes
System.Runtime.CompilerServices
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
God.exe
WrapNonExceptionThrows
_CorExeMain
mscoree.dll
@@@@@@@@@
@@@@@@@@
@@@@@@
@@@@@@@@
@@@@@@@@
@@@@@@@@@
@@@@@@@
@@@@@@@@@
)11RZck{{
!))!91JRZs{
y!)!119B
yBJJZR
}Zkkcsks{
!)BRRcZcsk{
)11RZck{{
!))!91JRZs{
y!)!119B
yBJJZR
}Zkkcsks{
!)BRRcZcsk{
)11RZck{{
!))!91JRZs{
y!)!119B
yBJJZR
}Zkkcsks{
!)BRRcZcsk{
B*\AD:\vb\vrs\Project1.vbp
SERVICES.EXE
LSASS.EXE
WINLOGON.EXE
xk.exe
ThunderRT6FormDC
msvbvm60.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
HideFileExt
Hidden
ShowSuperHidden
Notepad.exe C:\My Documents\My Pictures\4u.txt
IExplorer
WINLOGON
Services
Mig~mig
RegEdit_RegEdit
Registry Editor
Folder Options
Local Settings
Open With
ExploreWClass
CabinetWClass
WorkerW
OPTIONS
FORMAT
RebarWindow32
ComboBoxEx32
ComboBox
#32770
\XK\Folder.htt
\desktop.ini
\XK\New Folder.exe
Documents and Settings\All Users\Start Menu\Programs\Startup
ProcessManager.exe
NVCOD.exe
Documents and Settings\All Users\Start Menu\Programs\Startup\
Empty.pif
Vpc32.exe
Avwinsfx.exe
Rtvscan.exe
Avgctrl.exe
Nvc581_reng.exe
Avgwin.exe
PCMAV.exe
MSIexec.exe
AvgSetup.exe
Vshwin.exe
SYSTEM
Avsynmgr.exe
NVC.exe
Vsmain.exe
Avgcc.exe
Avconsol.exe
Avgmsvr.exe
Alogserv.exe
RegistryEditor.exe
Vsstat.exe
Avgw.exe
NAV.exe
Avgwb.dat
KAVSVC.exe
KAV.exe
Avgemc.exe
Avgupsvc.exe
ZANDA.exe
ZLH.exe
NJEEVES.exe
NIP.exe
CCLAW.exe
SAF.exe
NOD32KUI.exe
NOD32KRN.exe
AVP.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
\Application Data\WINDOWS\CSRSS.EXE
System Monitoring
\Application Data\WINDOWS\LSASS.EXE
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Explorer.exe
IExplorer.exe
exefile\shell\open\command
shell.exe
Userinit
userinit.exe,
Data.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug
Debugger
Shell.exe
\Application Data\WINDOWS\WINLOGON.EXE
\Application Data\WINDOWS\SERVICES.EXE
\Application Data\WINDOWS\SMSS.EXE
Windows Task Manager
taskmgr.exe
Microsoft Windows Network
isFull
IsEmpty
Outlook.Application
GetNamespace
AddressLists
AddressEntries
CreateItem
Recipients
Ini Data yang anda minta.
Subject
Ini Data yang sangat penting Mohon di simpan .
windir
.doc.exe
Attachments
\\127.0.0.1
Floppy (A:)
Scripting.FileSystemObject
Drives
DriveType
DriveLetter
Startup
WorkerA
ReBarWindow32
\Local Settings
SysListView32
SeShutdownPrivilege
Control Panel\Desktop\
SCRNSAVE.EXE
Mig~mig.SCR
ScreenSaverIsSecure
ScreenSaveTimeOut
Software\Microsoft\Windows\CurrentVersion\Run\
MSMSGS
Service
SYSTEM\CurrentControlSet\Control\SafeBoot\
AlternateShell
lnkfile\shell\open\command
piffile\shell\open\command
batfile\shell\open\command
comfile\shell\open\command
exefile
File Folder
Software\Policies\Microsoft\Windows\System\
DisableCMD
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
NoFolderOptions
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\
Software\Microsoft\Windows\CurrentVersion\Policies\System\
DisableRegistryTools
<head>
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\
SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore
DisableConfig
DisableSR
SOFTWARE\Policies\Microsoft\Windows\Installer
LimitSystemRestoreCheckpointing
DisableMSI
Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState
FullPathAddress
\Application Data\WINDOWS
\Application Data\WINDOWS\LSASS.exe
Mig2.scr
\All Users\Start Menu\Programs\Startup\Empty.pif
C:\My Documents\My Pictures\4u.txt
<html>
<meta http-equiv=
content-type
content=
text/html; charset=Windows-1252
</head>
<body style=
margin: 0
scroll=no>
<object id=FileList border=0 tabindex=1
classid=
application/x-oleobject\
clsid:1820FED0-473E-11D0-A96C-00C04FD705A2
style=
width: 100%; height: 100%
tabIndex=-1>
</object>
</body>
</html>
<script>
objectstr=
<OBJECT ID=\
RUNIT\
WIDTH=0 HEIGHT=0 TYPE=\
objectstr+=
CODEBASE=\
New Folder.exe#version=1,1,1,1\
<PARAM NAME=\
_Version\
VALUE=\
65536\
</OBJECT>
<HTML><H1></H1></HTML>
document.writeln(objectstr);
document.close();
</script>
[.ShellClassInfo]
ConfirmFileOp=0
[{5984FFE0-28D4-11CF-AE66-08002B2E1262}]
PersistMoniker=file://XK\Folder.htt
[ExtShellFolderViews]
{5984FFE0-28D4-11CF-AE66-08002B2E1262}={5984FFE0-28D4-11CF-AE66-08002B2E1262}
UNTUKMU
Apa yang aku lakukan dapat menyakitimu
Apa yang kau lakukan takkan menyakitiku
Berulang kali kau lakukan Tak akan aku rasakan
Aku paksa,tuk terus lukaimu..
Seperti yang kau lakukan padaku ..
Senyumku adalah dukamu
Sedihmu adalah tawaku
Sakitmu adalah milikku
Tangismu adalah milikku
Masih ada lagi yang ku kejar saat ini
Saat ini akan ku mulai mengejar yang lain
Lepaskan tawaku saat ini
By : Bolozer 21 land of my memory
XKxkXKxkXKxkXkXkxkXKxKxKxkXKxKxKxK1121985020519832006
Winlogon.exe
CSRSS.exe
Services.exe
lsass.exe
Mig~mig.scr
smss.exe
\Application Data\
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
040904B0
CompanyName
ProductName
FileVersion
0.00.0020
ProductVersion
0.00.0020
InternalName
OriginalFilename
DATA.exe
)11RZck{{
!))!91JRZs{
y!)!119B
yBJJZR
}Zkkcsks{
!)BRRcZcsk{
)11RZck{{
!))!91JRZs{
y!)!119B
yBJJZR
}Zkkcsks{
!)BRRcZcsk{
)11RZck{{
!))!91JRZs{
y!)!119B
yBJJZR
}Zkkcsks{
!)BRRcZcsk{
NPRSSTVWXY[\]^`abcdefgghijijjijihihffedcb`^]\[ZXWUTTSRPN
JORSTUVWXZ[\^`abefghijklmmnopoppopononmlkjihfdcb`_][ZXWVUTSROJ
MQSTUVWXY[\]_acdegijklmnoopqrqrrqrqpqponlkjigedca`^\[YXWVUTSQN
OQOPRSTUXYY[\^`bcdfhijklmnoopqpqqpqpoponmkjihfdcb`_][ZYXUTSRRQRO
KQRPPRTUVXYZ\]_acdfhjklmnopqqrsrssrsrqrqpomlkjhfdca`^\[YXVUTSQQSQK
KRRPRSUVWYZ\^_acefhjlmnopqrsstutuututstsrqonmljhfecb`^]ZYWVUTRQRRK
LQSQRTVWXZ[]_`bdfhjkmopqrstuuvwvwwvwvuvutrqpomkjhfdca_^\ZXWVUSRSRL
DMRRRSTVWY[\_`bdfhikmoqrstuvwwxyxyyxyxwwvutsrqomkihfdba_^[YXVUSQRQMC
LRSRSUWXZ\]`acegijlnprstuvwxyz{z{{z{zyyxwutsrpnljigecb`_\ZYWVTRSRL
MQSSTVXY[]^abdfhjlnprsuvwxyz{|}|}}|}|{{zywvusrpnljhfdca`][ZXWUSTSM
DNRSRTVWYZ\^abdfhjloqstvwxyz{|}~}~~}~}||{zxwvtsqomkigeca_][YXVTRSRND
MRTSUWXZ[]_bcegikmprtuwxy{|}~
~~}{zxwvtrpnljhfdb_^\ZYWUSTSM
NSUTVXY[\^`cdfhjlnqsuvxy{|~
~|{yxwusqomkigec`_][ZXVTUTN
MTTSUWYZ\^`cdfhjlnqsuwyz|}
}|zywusqomkhfdc`^\ZYWUSTSM
NSUTVXZ[]_adegikmortvxz{}~
~}{zxvtrpnligeda_][ZXVTUTN
FMRTTVX[\^`befhjlnpsuwy{|~
}|zywusqomjhfeb`^\[YWUVSO
MRTSUW[\^`beegimoqsuwxz}}
~}{ywusqomjhfda_][ZXVTVTN
UWZ[]_adegjmoqtvxy{}~
}|zxvtrpnkigeb`^\[YWUUSO
ZYZ\]`cfhjnprtvxy{}~
~~{yxvtqomjhffca_][XVVUSO
hilnpsuwxz|}
~~{yywurpnkigfca_][WUVVT
jkmoqsvx{}~
}|zxvtrpnkigfc`^\[XVVUSO
prtwyz|~
~|{ywusqomjhfeb_][ZXVUUT
}|zxxvtrpnkigfc`^\[XVVVT
~}{zxwusqomjhfeb`^\ZXVUUT
}|zywvtrpnligeda_][YWUSTSN
}|zxwusqomkjhecb`^\ZZXVTUT
sqomkifdba__][YWUSTSN
_^\ZYVTRSRM
XVTRRQM
*\AC:\Documents and Settings\
\Maz-milocevic4\Maz-milocevic4\FlashGames.vbp
sCDE57A55-8B86-11D0-b3C6-00A0C90AEA82
C4145310-469C-11d1-B182-00A0C922E820
@@@@@@
@@@@@@@
@@@@@@@
@@@@@@
@@@@@@@
@@@@@@@
@@@@@@
@@@@@@@
@@@@@@@
@@@@@@
@@@@@@@
@@@@@@@
@@@@@@
@@@@@@@
@@@@@@@
@@@@@@
@@@@@@@
@@@@@@@
@@@@@@
@@@@@@@
@@@@@@@
@@@@@@
SOFTWARE\Microsoft\Shared Tools Location
MSINFO
SOFTWARE\Microsoft\Shared Tools\MSINFO
About
\MSINFO32.EXE
System Information Is Unavailable At This Time
moUpuCsY
6534896790767349067340673497697604767649760349
kwwMPSK
76749607097374937563457408670349764376
OHracw
EBvNKiDci
GTGtrpRzQCGgGR
QQPUFyF
AAyDpipugvzCuSwb
QxQicue
PFwKUDqdEanB
FkwwMP
VANMdgjbz
QCGgGRebyTslhs
kJkvpHrNx
znnOQj
vAlszP
OvMzDd
jLfKjAMAysHeNZebmD
pHrNxNKVnBJKT
sQUCrLCtG
dechSLSwJI
oMcUEpJmq
fMePTtT
NxINKnBJKTsmPRy
hDCfMeP
TsmPRyEY
pJmqAkxQQyG
iCHPFl
vMzDdQOIbuQpvrCFUqr
MoveFirst
Fields
MoveNext
Data error event hit err:
{down}
Place code here to set options w/o closing dialog!
Place code here to set options and close dialog!
ilocev
\KickM
PROVIDER=Microsoft.Jet.OLEDB.3.51;Data Source=C:\Program Files\Microsoft Visual Studio\VB98\NWIND.MDB;f
PROVIDER=Microsoft.Jet.OLEDB.3.51;Data Source=C:\Program Files\Microsoft Visual Studio\VB98\NWIND.MDB;
select Flags,Form,Module,Name,ReplicationVersion,Type,TypeInfo,Version from MSysModules2
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
040904B0
Comments
REW is room acoustics analysis software for measuring
CompanyName
REW is room acoustics analysis software for measuring
FileDescription
REW is room acoustics analysis software for measuring
LegalCopyright
REW is room acoustics analysis software for measuring
LegalTrademarks
REW is room acoustics analysis software for measuring
ProductName
REW is room acoustics analysis software for measuring
FileVersion
1.00.0029
ProductVersion
1.00.0029
InternalName
TextConv
OriginalFilename
TextConv.exe
NPRSSTVWXY[\]^`abcdefgghijijjijihihffedcb`^]\[ZXWUTTSRPN
JORSTUVWXZ[\^`abefghijklmmnopoppopononmlkjihfdcb`_][ZXWVUTSROJ
MQSTUVWXY[\]_acdegijklmnoopqrqrrqrqpqponlkjigedca`^\[YXWVUTSQN
OQOPRSTUXYY[\^`bcdfhijklmnoopqpqqpqpoponmkjihfdcb`_][ZYXUTSRRQRO
KQRPPRTUVXYZ\]_acdfhjklmnopqqrsrssrsrqrqpomlkjhfdca`^\[YXVUTSQQSQK
KRRPRSUVWYZ\^_acefhjlmnopqrsstutuututstsrqonmljhfecb`^]ZYWVUTRQRRK
LQSQRTVWXZ[]_`bdfhjkmopqrstuuvwvwwvwvuvutrqpomkjhfdca_^\ZXWVUSRSRL
DMRRRSTVWY[\_`bdfhikmoqrstuvwwxyxyyxyxwwvutsrqomkihfdba_^[YXVUSQRQMC
LRSRSUWXZ\]`acegijlnprstuvwxyz{z{{z{zyyxwutsrpnljigecb`_\ZYWVTRSRL
MQSSTVXY[]^abdfhjlnprsuvwxyz{|}|}}|}|{{zywvusrpnljhfdca`][ZXWUSTSM
DNRSRTVWYZ\^abdfhjloqstvwxyz{|}~}~~}~}||{zxwvtsqomkigeca_][YXVTRSRND
MRTSUWXZ[]_bcegikmprtuwxy{|}~
~~}{zxwvtrpnljhfdb_^\ZYWUSTSM
NSUTVXY[\^`cdfhjlnqsuvxy{|~
~|{yxwusqomkigec`_][ZXVTUTN
MTTSUWYZ\^`cdfhjlnqsuwyz|}
}|zywusqomkhfdc`^\ZYWUSTSM
NSUTVXZ[]_adegikmortvxz{}~
~}{zxvtrpnligeda_][ZXVTUTN
FMRTTVX[\^`befhjlnpsuwy{|~
}|zywusqomjhfeb`^\[YWUVSO
MRTSUW[\^`beegimoqsuwxz}}
~}{ywusqomjhfda_][ZXVTVTN
UWZ[]_adegjmoqtvxy{}~
}|zxvtrpnkigeb`^\[YWUUSO
ZYZ\]`cfhjnprtvxy{}~
~~{yxvtqomjhffca_][XVVUSO
hilnpsuwxz|}
~~{yywurpnkigfca_][WUVVT
jkmoqsvx{}~
}|zxvtrpnkigfc`^\[XVVUSO
prtwyz|~
~|{ywusqomjhfeb_][ZXVUUT
}|zxxvtrpnkigfc`^\[XVVVT
~}{zxwusqomjhfeb`^\ZXVUUT
}|zywvtrpnligeda_][YWUSTSN
}|zxwusqomkjhecb`^\ZZXVTUT
sqomkifdba__][YWUSTSN
_^\ZYVTRSRM
XVTRRQM
RT_RCDATA
dnasjsajsa
9043829483924,mflmdsfl
f093w4u0rt8h32t-h423-th32489-th324ht89
hdd0a8UknYtMsNX6DnqgBg==
XBIsGImQ8+RSgzTVc5H1kg==
eQGoraDiSyAZWW3SkGTglQ==
5velewDC+WmUkJ1ovRBZuw==
tSAydml16tOqiXqhcjb0iw==
53sEcEVq696rrJjb7DSZzA==
3/PtiskiYybniItuAKNqCRBFzSf5uhR7
/+pyH2SKu6LAs/C9T9O1mVKE0igKgmLB
NVoMAbl8ya+0zjd0DHpVCA==
85j/77JqRhzW716vGC2ZUg==
KVcSL16XjARLrhdCQgnxLa0R966nvm4+
xNhHvDOEN3HANy69E4H9aB8iXrEoPN1o
SHCafr4t5sUhVmpiKXRLqg==
la9AXTk/s8ABNV8/U0NAsw==
xIHMywKf+evTNLg2Fy5LawgLmZw1adx1
0fbkR7g6EJM+HVs/WWqorg1p91tuYjM0
np/D2Jb/zl0=
RWP6l2wKvgw=
tysxDoJG4/k3w1rUNbl50nuxS4zkHGc3
ql5KydzwVMzLfBV+W3fAUABVFCp2ICwA
3r8SeIcExGnA/GZzWpEbsA==
I+YjnhyCk6lHZEMDH03bMg==
/xX/arzBMX8ggHMS8AAyuQ==
Kd2eWKdlolXGwVbKRMyrDw==
j+MUD9fCpCw145TvT4rnBg==
LhMmghE7OWv8SJ4Ps/h1Mw==
YsDdFGBtmkCT/2/YgJsQmw8rAxELqfK2
7o1nmPWU+sWHDLH8hZquTbU1ujI0f6Wh
1luQZaY4lJoiFgF6IXwYYg==
x8irXTv8hX73r3hKchdm4g==
BZ/7N4+fqvIaJkcjeR/PMg==
oVFAoC/OkCxh29CLI06HjA==
abcdefgh
=--92e4n87876
\dg426
54654688nut856435328
345t346hdfhdfh4

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.