2.1
中危
DACN
0.15
FACILE
1.00
IMCLNet
0.76
MFGraph
0.00
反病毒引擎
未检测
暂无反病毒引擎检测结果
静态指标
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(1 个事件)
| section | .imports |
一个或多个进程崩溃
(1 个事件)
动态指标
分配可读-可写-可执行内存（通常用于自解压）
(2 个事件)
检查是否有任何人类活动正在进行，通过不断检查前景窗口是否发生变化
一个进程试图延迟分析任务。
(1 个事件)
| description | DGOUVD.EXE 试图睡眠 181.6 秒，实际延迟分析时间 181.6 秒 | |||
在文件系统上创建可执行文件
(9 个事件)
| file | C:\Program Files (x86)\WVSEWG.EXE |
| file | C:\PerfLogs\OWJLF.EXE |
| file | C:\Users\OUBSVUU.EXE |
| file | C:\nqoxhrpblg\GLNU.EXE |
| file | C:\nqoxhrpblg\ZASE.EXE |
| file | C:\Python27\TESZRU.EXE |
| file | C:\Users\AWUYCUA.EXE |
| file | C:\Program Files (x86)\DGOUVD.EXE |
| file | C:\Users\HHPPBRN.EXE |
可执行文件使用UPX压缩
(2 个事件)
| section | UPX0 | description | 节名称指示UPX | ||||||
| section | UPX1 | description | 节名称指示UPX | ||||||
网络通信
与未执行 DNS 查询的主机进行通信
(2 个事件)
| host | 114.114.114.114 | |||
| host | 8.8.8.8 | |||
在 Windows 启动时自我安装以实现自动运行
(2 个事件)
| service_name | WVSEWG.EXE | service_path | C:\Program Files (x86)\WVSEWG.EXE | ||||||
| reg_key | HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ZASE.EXE | reg_value | C:\nqoxhrpblg\ZASE.EXE | ||||||
创建了一个服务，但该服务并未启动
(1 个事件)
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
1992-06-20 06:22:17
PE Imphash
26496ab6355e75472c49cf2dc4f6cc6c
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| UPX0 | 0x00001000 | 0x00045000 | 0x00045000 | 6.5135919789232375 |
| UPX1 | 0x00046000 | 0x00027000 | 0x00027000 | 4.6528706026513325 |
| .rsrc | 0x0006d000 | 0x00001000 | 0x00000a00 | 2.9535559075959674 |
| .imports | 0x0006e000 | 0x00002000 | 0x00001e00 | 4.536475767098713 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_CURSOR | 0x00065dfc | 0x00000134 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00065dfc | 0x00000134 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00065dfc | 0x00000134 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00065dfc | 0x00000134 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00065dfc | 0x00000134 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00065dfc | 0x00000134 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00065dfc | 0x00000134 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x00067b74 | 0x000002b4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_RCDATA | 0x0006872c | 0x00000851 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_RCDATA | 0x0006872c | 0x00000851 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_RCDATA | 0x0006872c | 0x00000851 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_RCDATA | 0x0006872c | 0x00000851 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_RCDATA | 0x0006872c | 0x00000851 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00068ff8 | 0x00000014 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00068ff8 | 0x00000014 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00068ff8 | 0x00000014 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00068ff8 | 0x00000014 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00068ff8 | 0x00000014 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00068ff8 | 0x00000014 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00068ff8 | 0x00000014 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
Imports
Library KERNEL32.DLL:
• 0x45a254 lstrcpyA
• 0x45a258 WriteFile
• 0x45a25c WinExec
• 0x45a260 WaitForSingleObject
• 0x45a264 VirtualQuery
• 0x45a268 VirtualAlloc
• 0x45a26c TerminateProcess
• 0x45a270 SuspendThread
• 0x45a274 Sleep
• 0x45a278 SizeofResource
• 0x45a27c SetThreadLocale
• 0x45a280 SetFilePointer
• 0x45a284 SetFileAttributesA
• 0x45a288 SetEvent
• 0x45a28c SetErrorMode
• 0x45a290 SetEndOfFile
• 0x45a294 ResumeThread
• 0x45a298 ReadFile
• 0x45a29c OpenProcess
• 0x45a2a0 OpenMutexA
• 0x45a2a4 MulDiv
• 0x45a2a8 LockResource
• 0x45a2ac LoadResource
• 0x45a2b0 LoadLibraryA
• 0x45a2b4 LeaveCriticalSection
• 0x45a2b8 InitializeCriticalSection
• 0x45a2bc GlobalUnlock
• 0x45a2c0 GlobalReAlloc
• 0x45a2c4 GlobalHandle
• 0x45a2c8 GlobalLock
• 0x45a2cc GlobalFree
• 0x45a2d0 GlobalDeleteAtom
• 0x45a2d4 GlobalAlloc
• 0x45a2d8 GlobalAddAtomA
• 0x45a2dc GetVersionExA
• 0x45a2e0 GetVersion
• 0x45a2e4 GetTickCount
• 0x45a2e8 GetThreadLocale
• 0x45a2ec GetSystemInfo
• 0x45a2f0 GetProcAddress
• 0x45a2f4 GetModuleHandleA
• 0x45a2f8 GetModuleFileNameA
• 0x45a2fc GetLocaleInfoA
• 0x45a300 GetLastError
• 0x45a304 GetExitCodeThread
• 0x45a308 GetDriveTypeA
• 0x45a30c GetDiskFreeSpaceA
• 0x45a310 GetCurrentThreadId
• 0x45a314 GetCurrentProcessId
• 0x45a318 GetCPInfo
• 0x45a31c FreeResource
• 0x45a320 FreeLibrary
• 0x45a324 FormatMessageA
• 0x45a328 FindResourceA
• 0x45a32c FindNextFileA
• 0x45a330 FindFirstFileA
• 0x45a334 FindClose
• 0x45a338 FileTimeToLocalFileTime
• 0x45a33c FileTimeToDosDateTime
• 0x45a340 EnumCalendarInfoA
• 0x45a344 EnterCriticalSection
• 0x45a348 DeleteFileA
• 0x45a34c DeleteCriticalSection
• 0x45a350 CreateThread
• 0x45a354 CreateMutexA
• 0x45a358 CreateFileA
• 0x45a35c CreateEventA
• 0x45a360 CompareStringA
• 0x45a364 CloseHandle
Library KERNEL32.DLL:
• 0x45a214 TlsSetValue
• 0x45a218 TlsGetValue
• 0x45a21c LocalAlloc
• 0x45a220 GetModuleHandleA
• 0x45a224 GetModuleFileNameA
Library KERNEL32.DLL:
• 0x45a118 GetCurrentThreadId
• 0x45a11c DeleteCriticalSection
• 0x45a120 LeaveCriticalSection
• 0x45a124 EnterCriticalSection
• 0x45a128 InitializeCriticalSection
• 0x45a12c VirtualFree
• 0x45a130 VirtualAlloc
• 0x45a134 LocalFree
• 0x45a138 LocalAlloc
• 0x45a13c InterlockedDecrement
• 0x45a140 InterlockedIncrement
• 0x45a144 VirtualQuery
• 0x45a148 WideCharToMultiByte
• 0x45a14c MultiByteToWideChar
• 0x45a150 lstrlenA
• 0x45a154 lstrcpynA
• 0x45a158 lstrcpyA
• 0x45a15c LoadLibraryExA
• 0x45a160 GetThreadLocale
• 0x45a164 GetStartupInfoA
• 0x45a168 GetProcAddress
• 0x45a16c GetModuleHandleA
• 0x45a170 GetModuleFileNameA
• 0x45a174 GetLocaleInfoA
• 0x45a178 GetLastError
• 0x45a17c GetCommandLineA
• 0x45a180 FreeLibrary
• 0x45a184 FindFirstFileA
• 0x45a188 FindClose
• 0x45a18c ExitProcess
• 0x45a190 ExitThread
• 0x45a194 CreateThread
• 0x45a198 WriteFile
• 0x45a19c UnhandledExceptionFilter
• 0x45a1a0 SetFilePointer
• 0x45a1a4 SetEndOfFile
• 0x45a1a8 RtlUnwind
• 0x45a1ac ReadFile
• 0x45a1b0 RaiseException
• 0x45a1b4 GetStdHandle
• 0x45a1b8 GetFileSize
• 0x45a1bc GetSystemTime
• 0x45a1c0 GetFileType
• 0x45a1c4 CreateFileA
• 0x45a1c8 CloseHandle
Library advapi32.dll:
• 0x45a22c ReportEventA
• 0x45a230 RegisterEventSourceA
• 0x45a234 RegSetValueExA
• 0x45a238 RegQueryValueExA
• 0x45a23c RegOpenKeyExA
• 0x45a240 RegFlushKey
• 0x45a244 RegCreateKeyExA
• 0x45a248 RegCloseKey
• 0x45a24c DeregisterEventSource
Library advapi32.dll:
• 0x45a74c StartServiceCtrlDispatcherA
• 0x45a750 SetServiceStatus
• 0x45a754 RegisterServiceCtrlHandlerA
• 0x45a758 OpenServiceA
• 0x45a75c OpenSCManagerA
• 0x45a760 DeleteService
• 0x45a764 CreateServiceA
• 0x45a768 CloseServiceHandle
Library comctl32.dll:
• 0x45a6f0 ImageList_SetIconSize
• 0x45a6f4 ImageList_GetIconSize
• 0x45a6f8 ImageList_Write
• 0x45a6fc ImageList_Read
• 0x45a700 ImageList_GetDragImage
• 0x45a704 ImageList_DragShowNolock
• 0x45a708 ImageList_SetDragCursorImage
• 0x45a70c ImageList_DragMove
• 0x45a710 ImageList_DragLeave
• 0x45a714 ImageList_DragEnter
• 0x45a718 ImageList_EndDrag
• 0x45a71c ImageList_BeginDrag
• 0x45a720 ImageList_Remove
• 0x45a724 ImageList_DrawEx
• 0x45a728 ImageList_Draw
• 0x45a72c ImageList_GetBkColor
• 0x45a730 ImageList_SetBkColor
• 0x45a734 ImageList_ReplaceIcon
• 0x45a738 ImageList_Add
• 0x45a73c ImageList_GetImageCount
• 0x45a740 ImageList_Destroy
• 0x45a744 ImageList_Create
Library gdi32.dll:
• 0x45a36c UnrealizeObject
• 0x45a370 StretchBlt
• 0x45a374 SetWindowOrgEx
• 0x45a378 SetWinMetaFileBits
• 0x45a37c SetViewportOrgEx
• 0x45a380 SetTextColor
• 0x45a384 SetStretchBltMode
• 0x45a388 SetROP2
• 0x45a38c SetPixel
• 0x45a390 SetEnhMetaFileBits
• 0x45a394 SetDIBColorTable
• 0x45a398 SetBrushOrgEx
• 0x45a39c SetBkMode
• 0x45a3a0 SetBkColor
• 0x45a3a4 SelectPalette
• 0x45a3a8 SelectObject
• 0x45a3ac SaveDC
• 0x45a3b0 RestoreDC
• 0x45a3b4 Rectangle
• 0x45a3b8 RectVisible
• 0x45a3bc RealizePalette
• 0x45a3c0 PlayEnhMetaFile
• 0x45a3c4 PatBlt
• 0x45a3c8 MoveToEx
• 0x45a3cc MaskBlt
• 0x45a3d0 LineTo
• 0x45a3d4 IntersectClipRect
• 0x45a3d8 GetWindowOrgEx
• 0x45a3dc GetWinMetaFileBits
• 0x45a3e0 GetTextMetricsA
• 0x45a3e4 GetTextExtentPointA
• 0x45a3e8 GetTextExtentPoint32A
• 0x45a3ec GetSystemPaletteEntries
• 0x45a3f0 GetStockObject
• 0x45a3f4 GetPixel
• 0x45a3f8 GetPaletteEntries
• 0x45a3fc GetObjectA
• 0x45a400 GetEnhMetaFilePaletteEntries
• 0x45a404 GetEnhMetaFileHeader
• 0x45a408 GetEnhMetaFileBits
• 0x45a40c GetDeviceCaps
• 0x45a410 GetDIBits
• 0x45a414 GetDIBColorTable
• 0x45a418 GetDCOrgEx
• 0x45a41c GetCurrentPositionEx
• 0x45a420 GetClipBox
• 0x45a424 GetBrushOrgEx
• 0x45a428 GetBitmapBits
• 0x45a42c ExcludeClipRect
• 0x45a430 DeleteObject
• 0x45a434 DeleteEnhMetaFile
• 0x45a438 DeleteDC
• 0x45a43c CreateSolidBrush
• 0x45a440 CreatePenIndirect
• 0x45a444 CreatePalette
• 0x45a448 CreateHalftonePalette
• 0x45a44c CreateFontIndirectA
• 0x45a450 CreateDIBitmap
• 0x45a454 CreateDIBSection
• 0x45a458 CreateCompatibleDC
• 0x45a45c CreateCompatibleBitmap
• 0x45a460 CreateBrushIndirect
• 0x45a464 CreateBitmap
• 0x45a468 CopyEnhMetaFileA
• 0x45a46c BitBlt
Library ole32.dll:
• 0x45a6e8 IsEqualGUID
Library oleaut32.dll:
• 0x45a1f4 VariantChangeTypeEx
• 0x45a1f8 VariantCopyInd
• 0x45a1fc VariantClear
• 0x45a200 SysStringLen
• 0x45a204 SysFreeString
• 0x45a208 SysReAllocStringLen
• 0x45a20c SysAllocStringLen
Library user32.dll:
• 0x45a474 WindowFromPoint
• 0x45a478 WinHelpA
• 0x45a47c WaitMessage
• 0x45a480 UpdateWindow
• 0x45a484 UnregisterClassA
• 0x45a488 UnhookWindowsHookEx
• 0x45a48c TranslateMessage
• 0x45a490 TranslateMDISysAccel
• 0x45a494 TrackPopupMenu
• 0x45a498 SystemParametersInfoA
• 0x45a49c ShowWindow
• 0x45a4a0 ShowScrollBar
• 0x45a4a4 ShowOwnedPopups
• 0x45a4a8 ShowCursor
• 0x45a4ac SetWindowsHookExA
• 0x45a4b0 SetWindowTextA
• 0x45a4b4 SetWindowPos
• 0x45a4b8 SetWindowPlacement
• 0x45a4bc SetWindowLongA
• 0x45a4c0 SetTimer
• 0x45a4c4 SetScrollRange
• 0x45a4c8 SetScrollPos
• 0x45a4cc SetScrollInfo
• 0x45a4d0 SetRect
• 0x45a4d4 SetPropA
• 0x45a4d8 SetMenuItemInfoA
• 0x45a4dc SetMenu
• 0x45a4e0 SetForegroundWindow
• 0x45a4e4 SetFocus
• 0x45a4e8 SetCursor
• 0x45a4ec SetClassLongA
• 0x45a4f0 SetCapture
• 0x45a4f4 SetActiveWindow
• 0x45a4f8 SendMessageA
• 0x45a4fc ScrollWindow
• 0x45a500 ScreenToClient
• 0x45a504 RemovePropA
• 0x45a508 RemoveMenu
• 0x45a50c ReleaseDC
• 0x45a510 ReleaseCapture
• 0x45a514 RegisterWindowMessageA
• 0x45a518 RegisterClipboardFormatA
• 0x45a51c RegisterClassA
• 0x45a520 PtInRect
• 0x45a524 PostQuitMessage
• 0x45a528 PostMessageA
• 0x45a52c PeekMessageA
• 0x45a530 OffsetRect
• 0x45a534 OemToCharA
• 0x45a538 MsgWaitForMultipleObjects
• 0x45a53c MessageBoxA
• 0x45a540 MapWindowPoints
• 0x45a544 MapVirtualKeyA
• 0x45a548 LoadStringA
• 0x45a54c LoadKeyboardLayoutA
• 0x45a550 LoadIconA
• 0x45a554 LoadCursorA
• 0x45a558 LoadBitmapA
• 0x45a55c KillTimer
• 0x45a560 IsZoomed
• 0x45a564 IsWindowVisible
• 0x45a568 IsWindowEnabled
• 0x45a56c IsWindow
• 0x45a570 IsRectEmpty
• 0x45a574 IsIconic
• 0x45a578 IsDialogMessageA
• 0x45a57c IsChild
• 0x45a580 InvalidateRect
• 0x45a584 IntersectRect
• 0x45a588 InsertMenuItemA
• 0x45a58c InsertMenuA
• 0x45a590 InflateRect
• 0x45a594 GetWindowThreadProcessId
• 0x45a598 GetWindowTextA
• 0x45a59c GetWindowRect
• 0x45a5a0 GetWindowPlacement
• 0x45a5a4 GetWindowLongA
• 0x45a5a8 GetWindowDC
• 0x45a5ac GetTopWindow
• 0x45a5b0 GetSystemMetrics
• 0x45a5b4 GetSystemMenu
• 0x45a5b8 GetSysColor
• 0x45a5bc GetSubMenu
• 0x45a5c0 GetScrollRange
• 0x45a5c4 GetScrollPos
• 0x45a5c8 GetScrollInfo
• 0x45a5cc GetPropA
• 0x45a5d0 GetParent
• 0x45a5d4 GetWindow
• 0x45a5d8 GetMessageA
• 0x45a5dc GetMenuStringA
• 0x45a5e0 GetMenuState
• 0x45a5e4 GetMenuItemInfoA
• 0x45a5e8 GetMenuItemID
• 0x45a5ec GetMenuItemCount
• 0x45a5f0 GetMenu
• 0x45a5f4 GetLastActivePopup
• 0x45a5f8 GetKeyboardState
• 0x45a5fc GetKeyboardLayoutList
• 0x45a600 GetKeyboardLayout
• 0x45a604 GetKeyState
• 0x45a608 GetKeyNameTextA
• 0x45a60c GetIconInfo
• 0x45a610 GetForegroundWindow
• 0x45a614 GetFocus
• 0x45a618 GetDesktopWindow
• 0x45a61c GetDCEx
• 0x45a620 GetDC
• 0x45a624 GetCursorPos
• 0x45a628 GetCursor
• 0x45a62c GetClipboardData
• 0x45a630 GetClientRect
• 0x45a634 GetClassNameA
• 0x45a638 GetClassInfoA
• 0x45a63c GetCapture
• 0x45a640 GetActiveWindow
• 0x45a644 FrameRect
• 0x45a648 FindWindowExA
• 0x45a64c FindWindowA
• 0x45a650 FillRect
• 0x45a654 EqualRect
• 0x45a658 EnumWindows
• 0x45a65c EnumThreadWindows
• 0x45a660 EndPaint
• 0x45a664 EnableWindow
• 0x45a668 EnableScrollBar
• 0x45a66c EnableMenuItem
• 0x45a670 DrawTextA
• 0x45a674 DrawMenuBar
• 0x45a678 DrawIconEx
• 0x45a67c DrawIcon
• 0x45a680 DrawFrameControl
• 0x45a684 DrawFocusRect
• 0x45a688 DrawEdge
• 0x45a68c DispatchMessageA
• 0x45a690 DestroyWindow
• 0x45a694 DestroyMenu
• 0x45a698 DestroyIcon
• 0x45a69c DestroyCursor
• 0x45a6a0 DeleteMenu
• 0x45a6a4 DefWindowProcA
• 0x45a6a8 DefMDIChildProcA
• 0x45a6ac DefFrameProcA
• 0x45a6b0 CreateWindowExA
• 0x45a6b4 CreatePopupMenu
• 0x45a6b8 CreateMenu
• 0x45a6bc CreateIcon
• 0x45a6c0 ClientToScreen
• 0x45a6c4 CheckMenuItem
• 0x45a6c8 CallWindowProcA
• 0x45a6cc CallNextHookEx
• 0x45a6d0 BeginPaint
• 0x45a6d4 CharLowerBuffA
• 0x45a6d8 CharLowerA
• 0x45a6dc AdjustWindowRectEx
• 0x45a6e0 ActivateKeyboardLayout
Library user32.dll:
• 0x45a1d0 GetKeyboardType
• 0x45a1d4 LoadStringA
• 0x45a1d8 MessageBoxA
• 0x45a1dc CharNextA
Library wsock32.dll:
• 0x45a770 WSACleanup
• 0x45a774 WSAStartup
• 0x45a778 WSAGetLastError
• 0x45a77c WSAAsyncGetHostByName
• 0x45a780 WSAAsyncSelect
• 0x45a784 gethostname
• 0x45a788 gethostbyname
• 0x45a78c socket
• 0x45a790 setsockopt
• 0x45a794 send
• 0x45a798 recv
• 0x45a79c inet_ntoa
• 0x45a7a0 inet_addr
• 0x45a7a4 htons
• 0x45a7a8 connect
• 0x45a7ac closesocket
• 0x45a7b0 accept
L!This program must be run under Win32
.imports
Boolean
Integer
Cardinal
String
Variant@
TObject
TObject
System
IUnknown
System
TInterfacedObject%
;u3YZ]_^[
SVWUL$
]_^[SVWUL$
uZ]_^[
SVWUdE
YZ]_^[
_^[U3Uh.
d2d"h4E
]US=,E
d2d"=EE
u3ZYYd
#_^[SVWU
YZ]_^[SVW
SVW<$L$
]_^[USVW
d1d!=EE
2E3ZYYd
E_^[YY]
UQSVW30E
3Uhf$@
d1d!=EE
E3ZYYd
E_^[Y]
YZ]_^[
d2d"=EE
}3ZYYd
E_^[Y]
< v;"u
SV3Uh-)@
d0d Uf3UX
F3ZYYd
Ek<1fU
9uDJt
1^[^8u
SVWPts11
-ti+tf$tfxtaXt\0u
FxtOXtJt
Y12_^[F
FuP*Bt
QuM3Uh
EP&3ZYYd
f%fUf?f
SOFTWARE\Borland\Delphi\RTL
FPUMaskValue
Iu9u_^[
]U3UhZ/@
33ZYYd
_^[YY]
_^[RQS|
PRQQTj
YZXtoH
S1VWUd
SPRQT$(j
9t7H;Ou
Ku]_^[
YZXtl1d
SPRQT$(H
R=[|$(g7
ZTUWVSPRTj
Zd$,1Yd
t=HtN`
r6t0R=
t/=t&,*&"
3Uh~8@
d2d";~
!P n_^[]
Ku^[SV
tG?=DE
^Portions Copyright (c) 1983,99 Borland
U1Uh6@
QR>ZX1Yd
PVS=_^[]
XRHlZX
PQmZXSVW
ISVRP1L
nKuZXt
JZ^[X$
thtkFW)w
9uXJt
8uAJt
t,JIt&S
St-Xt&J|
t0JN|*9}&~")9~
tVSVWU
t@t1SVW
1Z)_^[
$:X<$t
$sZ]_^[
tKt:SVW
OWVJx f
VWf_^t
1Z)_^[SVW3
Mu]_^[
%UWVSj
r*PRf8
u'PX%E
USVW}Q
_^[]UQS3EB
^[USEf
d0d UE3ZYYd
]3Uh~M@
d0d UE3ZYYd
PRsZXt$JA~
XRJ'ZXf
U3QQQQSV3UhP@
d0d f;
u-EEPEtUXKU=+EEPEUXUP3ZYYd
USVW}Q
3UhcQ@
d0d f;
X_^[89f
p,)p'p"
SV3UhiT@
d0d EEPEEZ3ZYYd
^[YY]USV3
d0d u]Ef8
fXE3ZYYd
USVWME]
3mEE;Et
u5];}}
MO|"GE
SVWEEEhtZ@
E8\u8Ex
E_^[]kernel32.dll
GetLongPathNameA
+ur3Uhd[@
;u;tmC}
t@EPSj
^[]Software\Borland\Locales
Software\Borland\Delphi\Locales
t93Uh_]@
d0d ]ES
u_^[YY]
UQE3Uh]@
d2d"E@
t3ZYYd
3Zmt3QP
Ht Ht.I
Hu]"F$\_@
H H$@Ht
QRPXZYx
@~!@PQ@
PRZX[B5pE
_^|HtE=
@aQYR@
b@"E@|oe@p+
BkU'9p|B0<RB~QC/j\
Cv)/&D
dEJzEb
9;5S]=];Z T7aZ%]g']
R`%uYnb
5{RPD$
USVW3\$
USVW\$
3USVW3\$
USVW\$
U3Uhj@
83ZYYd
U3Uhk@
d0d -(E
U3Uh]m@
QRPPPP
S] S]$SQRPj
UQSVWEh8x@
Magellan MSWHEEL
MouseZ
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
U3Uhx@
U3Uhx@
U3Uh{@
Exception|@
EAbort|@
EHeapException0}@
EOutOfMemory@
EInOutError}@
EExternal<~@
EExternalException~@
EIntError~@
EDivByZeroL
ERangeError
EIntOverflow@
EMathErrorX@
EInvalidOp@
EZeroDivide
EOverflow`@
EUnderflow@
EInvalidPointer
EInvalidCast@
EConvertError
EAccessViolation@
EPrivilege@
EStackOverflow@
EControlC8@
EVariantError@
EAssertionFailed@
EAbstractErrorP@
EIntfCastError@
EWin32Error
ESafecallException
TActiveThreadArray
$TMultiReadExclusiveWriteSynchronizerUj
SVW3Uh
d0d VWU
E'5_^[Y]
BFKu_^[
BFKu_^[
9t*^ar
PGP{P7Pj
_^[SVWU
| v;}
N|7 vU+A
P'Pi^[
PB[SVWQj
$Z_^[SVWQj
$Z_^[Qj
u%EPPEPEPEPu
[SVW3W
3URURURURPZ
EUE3RPEUM
E3RPEUM
1FW)^_
1t$Far
)t[^_
D$ D$$
3w(_^[SV
9t%t^]E-u
*t"0r<9w7k
uPEX_^[[]
EIPEPE
Z_^[UQSVWM]
U_^[Y]
U3QQQQQQSVW3Uh
JCDHyYU
JC8HVYUkC
JE*YUC
u3ZYYd
SV3Uhy@
V3Uh#@
d0d EP
E"0^Y]
U3QQQQSVW3Uh@
kU_^[]
EEN_^[]
L$Dd4E
PD$HPj
d0d EPU
d0d EPU8EU
_^[YY]
TErrorRec
TExceptRec
]]3Uh@
D3ZYYd
t<HtHU
r3t7G=
SV3E3Uhg@
UE3Uh3@
d0d E{%
d0d U<E
T)t7D$
+G]_^[
SVWU=E
i]_^[SVWU3
YZ]_^[
u^[SVW
_^[SVWU,qE
IuS3Uh@
d0d %p=E
EnEfEP@
E3u?EP@
m/d/yy
mmmm d, yyyy
:mm:ss
YM3Uh@
w33ZYYd
US3E3UhF@
`3ZYYd
kernel32.dll
GetDiskFreeSpaceExA
tN(;F,t;
u2iC,u
C C$3C 3C,C4
USRE3Uh
d0d }3Uh@
E3ZYYd
INFNANU
+E[^_]
N[YCV5E
N^$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)U@WVSE
<'t$<"t
33EUU<#t&<0t%<.t,<,t3<'t5<"t1<Et:<et6<;tF
-<#t'<0t#<.t<,t<'t
<Et$<et <;tS
-u2AF>0t
KE;E~10}
00fJu2}
3m[^_]
< tN33
EEBN33
|3ZYYd
U3Uh$@
d0d -E
{3ZYYd
U3Uhi@
U3Uh1@
SVWt;1
uKu_^[SVW1
6_^[SW:?
SVW3Uh@
d0d Ez|M
EQ{on_^[Y]
[[~[USV1
|3ZYYd
TAlignment
taLeftJustify
taRightJustify
taCenter @
TBiDiMode
bdLeftToRight
bdRightToLeft
bdRightToLeftNoAlign
bdRightToLeftReadingOnly@
THelpContext
TShortCut
TNotifyEvent
Sender
TObject@
THelpEvent
Command
Integer
CallHelp
Boolean
Booleanp@
EStreamError@
EFCreateError(@
EFOpenError@
EFilerError@
EReadError0@
EWriteError@
EClassNotFound@
EResNotFound@
EListError@
EBitsError@
EStringListError@
EComponentError@
EOutOfResources
EInvalidOperationh@
TList@
TThreadList$@
TBitsx@
TPersistent@
TPersistentx@
Classes
TCollectionItemT@
TCollectionItem
Classes
TCollection @
TCollection@
Classes
IStringsAdapter$
Classes
TStringsT@
TStrings@
Classes
TStringItem
TStringListx@
TStringList@
Classes
TStreamL@
THandleStream@
TFileStream @
TCustomMemoryStream@
TMemoryStream
TResourceStream
TStreamAdapter
TFilerl@
TReader@
TThread
TComponentName$@
IDesignerNotify$
Classes
TComponent@
TComponent@
Classes
TBasicActionLink@
TBasicAction@
TBasicAction|@
Classes
TIdentMapEntry
d0d ]E
W3ZYYd
Ea]oW[]USVWE E
EUE`Ot
EW$3E3ZYYd
VE_^[YY]
MU3Uhy@
d2d"NEbEtI
8dNE:^EUcu&EKu
EuNEE;
uE3ZYYd
E[U_^[]
U3Uhz@
d0d E
d0d qME]E
@t3ZYYd
T3ZYYd
EZT^[]
Nuu]]USVW E
QDKu3ZYYd
TIntConstUt
USVWE3E(E
ES#FKu3ZYYd
RE_^[YY]
UQSVWUu
Nu3_^[Y]
USVWMu
E_^[YY]
FKu_^[
U3Uhf@
d0d 3;5T@
bHE8XEPusxs
EUO^[]
R3Uh&@
d0d Ef@ f#
d0d UEGYE}
>3ZYYd
VLO3ZYYd
/K^[SVW
RNYZ^[
SV3Uh@
d0d UvU
ESM^[Y]S
SVWU;tE|
,]_^[SVW
d0d E@
CUEtC3ZYYd
d0d Ex
EE3Uh@
d0d E@
SVWUQ;s
w>t&<$
PRQB6YZXSVWQ
M3Uhz@
1,G3ZYYd
ELF^[]
M3Uh5@
>Nf,At3f
eO3ZYYd
<L3ZYYd
EJD_^[]
%s[%d]
UQSVWE
d0d Eq
GKu3ZYYd
EY_^[Y]
UQSEE@
NH[USV
MM3Uh@
:If<tDf<Ufz<}
J3ZYYd
GqA_^[]
USVWUEEUR
GEf;EE8
2E3Uh@
HCOu3ZYYd
E,2Z@EUR
'itdf:
]:tBF
t<hPh@
d0d Eh
EThN?_^[Y]
MUE3Uh@
EZ8W8CNu3ZYYd
=3ZYYd
EC=_^[]
Q<3ZYYd
USUEEPhH@
Strings
MMUE3Uh@
;u;N|0F3
A;E_^[]
SVW3Uh@@
d0d UcU
;_^[Y]
E3Uh(@
d0d E3Uh
S$3ZYYd
EM:3ZYYd
A@+:_^[]
DW3ZYYd
E?9[Y]
MMUE3Uho@
uN|)FE
uN|@FE
CENu3ZYYd
>8_^[]
MUE3Uh@
K|#C3M
FKu3ZYYd
EX>f8_^[]
FKu]_^[UQSVWMM
S$_^[Y]
Q\3ZYYd
E07^Y]
E3UhV@
d0d Ed3Uh9@
+E3 >U
Q,3ZYYd
73ZYYd
E<6^[YY]
d0d ;tdE3Uh@
Eb3ZYYd
k63ZYYd
E@<N6_^[YY]
MUE3Uh@
d0d E$
t3ZYYd
E:5En$
EY;g5]
Qh3ZYYd
E:4^[Y]
SV3Uh'
d0d E;U
Q,3ZYYd
:,4^[Y]
d0d E3Uh
u3ZYYd
E633ZYYd
E]9k3[YY]
MUE3Uhn
d0d EV5
K| C3M
FKuE(5
E82_^[]SV
3F F$3F(F,
SVWUL$
$Z^[SVW
USVMUE]uE
]CN;};u~
UE|];]|^[]
d0d t-;]~
u3ZYYd
+E_^[]USh
E3ZYYd
E=$W+E[YY]
d0d U3ZYYd
E:"T)[Y]
S%^[S3
d0d U3ZYYd
Ei!([Y]
3]_^[USVWt
U3E3Uh
0&3ZYYd
UQSVWM
PEPVH_{
PVt`PC
&USVWt
TPropFixup@
SVWU3w
d0d 3Etg[
u}3ZYYd
E)#E_^[YY]
@O[]US
d2d",E
d2d"3p
|3ZYYd
FKu3ZYYd
!3ZYYd
o!3ZYYd
*P!_^[]
USVWUE=,E
Ku3ZYYd
. _^[YY]
UQSVWE=,E
Ku3ZYYd
_^[Y]S
Cp*%^[]
EEPpcr
EpR$[]
$Z[SVW
C<S8|$
USVW,E
Ku3ZYYd
_^[]USVW3
UE3Uh(
d0d E@0
@E3E@0J
l3ZYYd
3C0_^[
d0d uLEXB
^[Y]UE
USVW3Uh
S,3ZYYd
USVW3Uh
USVW3Uh?
RB,3ZYYd
MMUE3Uh- A
d0d MUE
E@,EE@
d0d EE}
d0d EfH
E@,MUf
t"E@4Uw}
E@4U3ZYYd
EUP,EU
UB03Uh A
E3ZYYd
[Y]USVWE
E@,EE@(Ef
UB,3Uhr!A
EUP,EUP(
t t6DT$
U3Uh}%A
MUE3Uhl'A
d0d 3Uh!'A
d2d"UE
.uEpP+
UYEECqE
E3ZYYd
_^[YY]
@@0`_^[]
U3QQQQQQS3Uh)A
UEq&LUE
]]]MUE3Uh,A
d0d Ex
ET<$UE*
[]USVW
IuQSVWUE3Uh/A
d0d E1
3Uht/A
d0d 3Uh5/A
d0d MUE
UB43Uh /A
d0d EP
u/E@4X
EKu3ZYYd
E@4"E3
-3ZYYd
E3UhR0A
d0d 3Uh%0A
_^[YY]
Z^[SVQ3
S3Uh1A
d0d U}
u3ZYYd
[]UQUE
UE3Uh)4A
d0d E|
QYqUEdUY[EQU|YHUY?U
Y3ZYYd
S3Uhq4A
d0d U4q3ZYYd
[Y]USV3
d0d t*MU
tK3ZYYd
]3Uh5A
i3ZYYd
SVWfxB
_^[SVQ
CdS`<$
<$| <$
P|:3HE
UQSVWE
3E3Uh_8A
C$S 3ZYYd
b53Uh8A
@3ZYYd
Pp9EE_^[Y]
TThreadWindow
PJ=hpsE
S43Uh9A
d0d =LE
33Uh@:A
d0d =LE
P8;3ZYYd
UQSVE3Uh:A
^[Y]UQSVWt
_^[Y]SVq
US3C(E
P#9j@jj
Pf3TD$
$$SVWt
pGNu_^[
SVWUL$
GKuYZ]_^[
UQSVW3EF t
SfK @[
EGu6;_
S _^[]
K|"C3G
EKu3Z]_^[
tot-SHu"4$D$
GMuZ]_^[
;C0t:C@p
R0_^[]
@@SVWUG@p
CNu]_^[
S^[USVWU
33ZYYd
33ZYYd
3UhgHA
33ZYYd
33ZYYd
d0d 3EE
EEE3UhJA
EPSEPE
(3ZYYd
23ZYYd
^3ZYYd
33UhaKA
d0d t;C
3C 3C$C,
USVW(E
kFKu3ZYYd
U3UhLA
B!3ZYYd
TColor
EInvalidGraphicMA
EInvalidGraphicOperation@
TFontPitch
fpDefault
fpVariable
fpFixedPNA
TFontName`NA
TFontCharset
TFontStyle
fsBold
fsItalic
fsUnderline
fsStrikeOut@
TFontStyles
TPenStyle
psSolid
psDash
psDashDot
psDashDotDot
psClear
psInsideFrame<OA
TPenMode
pmBlack
pmWhite
pmCopy
pmNotCopy
pmMergePenNot
pmMaskPenNot
pmMergeNotPen
pmMaskNotPen
pmMerge
pmNotMerge
pmMask
pmNotMask
pmNotXor@
TBrushStyle
bsSolid
bsClear
bsHorizontal
bsVertical
bsFDiagonal
bsBDiagonal
bsCross
bsDiagCrossPA
TGraphicsObjectPA
TGraphicsObjectPA
Graphics
IChangeNotifier$
Graphics
TFontQA
TFontQA
Graphics
Charset4MA
Color<
HeightLNA
Pitch<
SizeNA
Style@
TPenRA
Graphics
Color8OA
ModeNA
Style<
WidthSA
TBrush
TBrushSA
Graphics
ColorOA
Style@
TCanvasTA
TCanvasTA
Graphics
Brush<
CopyModeQA
TProgressEvent
Sender
TObject
TProgressStage
PercentDone
RedrawNow
Boolean
StringHVA
TGraphic@
TGraphicHVA
Graphics
TPicture@
TPicture,WA
Graphics
TSharedImage@
TMetafileImageXA
TMetafile
TMetafileXA
Graphics
TBitmapImage@
TBitmapHZA
TBitmapYA
Graphics
TIconImage
TIcon|[A
Graphics
TResourceManager@
P YE3Uhl]A
d2d"E@
t!Ef;p
E!E^[YY]UUE}
EEE3Uh
d1d!EH
E]USVWM
EE;3Uh^A
E3ZYYd
E_^[YY]
E3ZYYd
ES_^[Y]
UQSVEE_3Uho_A
d2d"EX
u3ZYYd
USV3EE
-3ZYYd
:^[YY]
clBlack
clMaroon
clGreen
clOlive
clNavy
clPurple
clTeal
clGray
clSilver
clLime
clYellow
clBlue
clFuchsia
clAqua
clWhite
clScrollBar
clBackground
clActiveCaption
clInactiveCaption
clMenu
clWindow
clWindowFrame
clMenuText
clWindowText
clCaptionText
clActiveBorder
clInactiveBorder
clAppWorkSpace
clHighlight
clHighlightText
clBtnFace
clBtnShadow
clGrayText
clBtnText
clInactiveCaptionText
clBtnHighlight
cl3DDkShadow
cl3DLight
clInfoText
clInfoBk
clNone
ANSI_CHARSET
DEFAULT_CHARSET
SYMBOL_CHARSET
MAC_CHARSET
SHIFTJIS_CHARSET
HANGEUL_CHARSET
JOHAB_CHARSET
GB2312_CHARSET
CHINESEBIG5_CHARSET
GREEK_CHARSET
TURKISH_CHARSET
HEBREW_CHARSET
ARABIC_CHARSET
BALTIC_CHARSET
RUSSIAN_CHARSET
THAI_CHARSET
EASTEUROPE_CHARSET
OEM_CHARSET
E3UhgA
d0d ]}3UhgA
E33ZYYd
EE3Uh5hA
[Y]S;P
UUU3UhiA
d0d Ex
E3E3E3E
Default
PjHLP^
E3UhlA
d0d ]}3UhlA
EO3ZYYd
E2UE[YY]
)3ZYYd
d0d Ex
txE3Uh\oA
d0d ]3Uh?oA
{3ZYYd
EyUEB~[YY]
i3ZYYd
Ez[Y]VWuE
d2d"Ex
R`E63EE@
UQSVWM
$YZ^[SV
g3UhuA
d0d {P
t3ZYYd
C8P0hE
VW<$L$
YZ^[SVQ
C4S0[Sfx*
C,S([S
3Uh*zA
d0d UE
$|3ZYYd
)Y]US33UhzA
)3ZYYd
L[USVW}
E3Uh:|A
d0d EPj
EPEPEbj
d0d EPEPEP~E}
tdEPEP
EPEPh
EPEPEPj
VEPN3ZYYd
USVWMUu
PE3UhS}A
PE PE$PE(PE,PEPEPW3ZYYd
d0d VSE$PyPEEPEPEj
PE$PEj
EPE$P}
jEPEPE
PE PE$PVSj
PE(PE,PEPEPWYhF
EPE(PE,PEPEPW4EPW
EPEPEP3ZYYd
EPEPzEPIS
E_^[](
<$?O~&
YZ_^[U
UEEPUMIx3Efx
d0d jhEP5
SEP3ZYYd
d2d"jhEP3
S4t)<$
EPEP}E3UhA
E3UhPA
USVWE3
_^[YY]U
SVWMUE]
d2d"UME0V
E3ZYYd
cE}O~L
+;]|&U
d0d EP
EEE3Uh
VEPEPEPEPVWEPEPE
}3ZYYd
E2`3ZYYd
TjTPku
C ;C$s
T_^[USV
UE3Uh)A
WEPEEP`j
E3ZYYd
EPEPQEP *
EPV3UhNA
MUEU3E3E3E3E3Uh'A
d2d"E7EE,EE!EE
UE,3ZYYd
_^[]SVt
USUEEP
:E3UhA
E3UhdA
E.z;u E"z
E3ZYYd
{E3UhA
QP3ZYYd
EUo^Y]
QP^UQVh
{E3UhoA
QT3ZYYd
TFileFormat
TFileFormatsList@
U3QQQQSVt
]_^[USVW3
]MU3Uh;A
7T3ZYYd
Ku33ZYYd
TClipboardFormatsSVt
YRE3Uh,A
:R3ZYYd
_^[YY]
cY^[SVW
UQSVW3EtI
Q03ZYYd
E6D_^[]
^[]USUEEPh
ltj3C t
P S @$C$
R$3t jVP}P>
C 3TjdP"kD$TdPD$PPC
SVW3C tix
3TjdP2kD$PdPD$LPC
{kPWkY+
SVWXUd
j} EMFt
E;E^ 3UhXA
d0d UEd
dUdjEPEP{
UhSVWMUU
EQE^ 3Uh
d0d UME8W
F fUfP
3E3E3E
EPEPp{
njPjdC
UEN|_^[]
SVW3UhVA
d0d _$UEU
_$3ZYYd
_^[YY]
p ?TjdRD$LPkD$XdPVb
?TjdRD$HPkD$TdPVr
Mf(f+d~
|$( EMFt
C @ F C
d0d EPEPC @
e3ZYYd
UEM{^[YY]
PfEEfEj
E3Uh#A
d0d EPj
PoEEpE3Uh
d0d EPj
cUMc3ZYYd
UE"P3ZYYd
v0^[]U
P:E+EF
TBitmapCanvas`A
TBitmapCanvas4A
Graphics
DE3Uh"A
d0d E@
|YEUE@EEt33UhA
d0d E0
EYM}u3ZYYd
UQSVE}
/D3UhA
Ku3ZYYd
^[Y]SVWt
w^[UQSEEx
d2d"E@\t
B3ZYYd
UQSVEExX
EV3UhA
d0d E@Xy
E@X@ @
E@X@ p
VSAUB\
P\E@X@ p
jVS UB`S
sA3ZYYd
EJ^[Y]
EEPMEVEPE3Uh
d0d PSj
EP3ZYYd
EPEPbEP9EPj
~8^[]@(
u<fP&f
UhSVWMUE3EE
xPjTEP
^EEPE3UhA
PEPuLE5
jzE3Uh
EPEPE}
@ 3+Pj
EPEPEPEP~=E
EPEPE}
@ ;Eu>E
@ 3+Pj
EPEPE3UhmA
d0d 3Uh\A
d0d 3E3
EPEPNE
33-hPEPE
d0d EPEP
jSEPVEPt3ZYYd
EP9C3ZYYd
jEPEP7
,{3ZYYd
SV3tF3
EPjTSd
3E3E3Uh/A
MEEPm<Ej
EPEP:E}
jBEPEPj
SEP Et*j
EPEPEPj
EP9VEP
EPEPg3ZYYd
E_^[]SVWt
yw %=sE
_^[SV|
F F$ny
d0d t;F pE@ iF UB F
F,UB,F0UB0#E3
3E3E3UhcA
d0d ;5PE
EEPC$PM
8EEPC @pPj
&<|E(}
t"jPE@
t8EPE@
EPEPEPE@
3E3E3UhA
PEP%EG
PF PEPj
E@ PF PF
P3ZYYd
PT6|_^[]
F(^4F0A
A @ 3+
R HP3Y
SVWUo
ZnEPjTS}
^[USVW
pE3UhA
d0d EX
rUBl3ZYYd
tEppw.xhlE
d2d"E@ UEB 3ZYYd
_^[YY]
UdSVWUE3E3E3E
XhEEE3Uh#A
d2d"3UhA
}(u-fC
UEgHC 3
bE3UhqA
3EYfE3UhA
EGEP.Ej
PEPoE3E
EPEPGE
E3ZYYd
s3ZYYd
EPxELezsj
ERF3ZYYd
Yss3ZYYd
H U3+E
fhdPjTEPE
@$E3ZYYd
oE5krr3ZYYd
d0rdPEPEPM
_^[]SVW
Df<$BMt
E3UhwA
d0d EPj
utjVWw
T]_^[SVW
s ;~ t8sVW
w F0fx
3fD$$fD$&fD$
bE3UhCA
d0d EPFpPj
U3ZYYd
VnnC H
F hlt4S@
@F @lP
tOE0D$
fT$"fP
fT$$fD$&
fD$(T$
T$*e>U,MDX>,
^3E3EEPC$P~
d0d C @
PNjj_^[]
G F G F
USVW^ {
`E3UhA
_E3UhA
dE_fNg
+_E3Uh
d0d Ep
cE'_ffE}C yEC _^[Y]
SVWjHXE
lr oSVbN
TPatternManagerSVt
EE3UhAA
d0d E@
cE_^[YY]
E3Uh3A
R PEPE
E3ZYYd
l_EZgbbE_^[]UE^EEEE
ZEgSE@
p3ZYYd
TOrderedList@
TStack
U3UhyA
UQSVWM
Ef3UhKA
d0d 33
tMu1=E
EGbEfP
\_^[Y]
GetMonitorInfoA
GetSystemMetrics
MonitorFromRect
SEP^[]
MonitorFromWindow
MonitorFromPoint
ugtc>(r^j
j0gtK3F
GetMonitorInfoA
DISPLAY
ugtc>(r^j
GetMonitorInfoW
DISPLAY
ugtc>(r^j
GetMonitorInfo
DISPLAY
EteEPV
twEPEPEPfEPEPEP
t6WEPEP
WEPEPwu
PEPVhB
EnumDisplayMonitors
USER32.DLL
U3UhEA
EM3ZYYd
comctl32.dll
InitializeFlatSB
UninitializeFlatSB
FlatSB_GetScrollProp
FlatSB_SetScrollProp
FlatSB_EnableScrollBar
FlatSB_ShowScrollBar
FlatSB_GetScrollRange
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollRange
TTextLayout
tlCenter
tlBottomA
TCustomLabel@
TCustomLabelA
StdCtrls
TLabelA
TLabelA
StdCtrls%
Align@
Alignment7B
Anchors
AutoSize
BiDiMode@7B
Caption4MA
Color88B
Constraints2B
DragCursor6B
DragKind6B
DragMode
Enabled
FocusControlQA
ParentBiDiMode
ParentColor
ParentFont
ParentShowHintXSC
PopupMenu
ShowAccelChar
ShowHint
Transparent4A
Layout
Visible
WordWrap@
OnClick>B
OnContextPopup@
OnDblClick:B
OnDragDrop
OnDragOver
OnEndDock
OnEndDrag8B
OnMouseDownX9B
OnMouseMove8B
OnMouseUp<B
OnStartDock:B
OnStartDragA
TEditCharCase
ecNormal
ecUpperCase
ecLowerCase@
TCustomEditA
TCustomEdittA
StdCtrls
TabStop
TEditA
StdCtrls2
Anchors
AutoSelect
AutoSize
BiDiMode
BorderStyleA
CharCase4MA
Color88B
Constraints
Ctl3D2B
DragCursor6B
DragKind6B
DragMode
EnabledQA
HideSelectiontCB
ImeModeCB
ImeName<
MaxLength
OEMConvert
ParentBiDiMode
ParentColor
ParentCtl3D
ParentFont
ParentShowHint(
PasswordCharXSC
PopupMenu
ReadOnly
ShowHint(7B
TabOrder
TabStop@7B
Visible@
OnChange@
OnClick>B
OnContextPopup@
OnDblClick:B
OnDragDrop
OnDragOver
OnEndDock
OnEndDrag@
OnEnter@
OnExit9B
OnKeyDown9B
OnKeyPress9B
OnKeyUp8B
OnMouseDownX9B
OnMouseMove8B
OnMouseUp<B
OnStartDock:B
OnStartDrag
TDrawItemEvent
Control
TWinControl
Integer
TOwnerDrawState@
TMeasureItemEvent
Control
TWinControl
Integer
Height
Integer@
TButtonActionLinkA
TButtonControl@
TButtonControlA
StdCtrls
TButton$A
TButton,A
StdCtrls%
Action7B
Anchors
BiDiMode
Cancel@7B
Caption88B
Constraints
Default2B
DragCursor6B
DragKind6B
DragMode
EnabledQA
Font\C
ModalResult
ParentBiDiMode
ParentFont
ParentShowHintXSC
PopupMenu
ShowHint(7B
TabOrder
TabStop
Visible@
OnClick>B
OnContextPopup:B
OnDragDrop
OnDragOver
OnEndDock
OnEndDrag@
OnEnter@
OnExit9B
OnKeyDown9B
OnKeyPress9B
OnKeyUp8B
OnMouseDownX9B
OnMouseMove8B
OnMouseUp<B
OnStartDock:B
OnStartDrag@
TListBoxStyle
lbStandard
lbOwnerDrawFixed
lbOwnerDrawVariable
TCustomListBox@
TCustomListBox
StdCtrls
TabStop
TListBox@
TListBox
StdCtrls4
Align7B
Anchors
BiDiMode
BorderStyle4MA
Color<
Columns88B
Constraints
Ctl3D2B
DragCursor6B
DragKind6B
DragMode
Enabled
ExtendedSelectQA
FonttCB
ImeModeCB
ImeName
IntegralHeight<
ItemHeightP@
MultiSelect
ParentBiDiMode
ParentColor
ParentCtl3D
ParentFont
ParentShowHintXSC
PopupMenu
ShowHint
SortedtA
Style(7B
TabOrder
TabStop<
TabWidth
Visible@
OnClick>B
OnContextPopup@
OnDblClick:B
OnDragDrop
OnDragOver
OnDrawItem
OnEndDock
OnEndDrag@
OnEnter@
OnExit9B
OnKeyDown9B
OnKeyPress9B
OnKeyUpxA
OnMeasureItem8B
OnMouseDownX9B
OnMouseMove8B
OnMouseUp<B
OnStartDock:B
OnStartDrag@
TListBoxStrings
TListBoxStringsT
StdCtrls
SVW3Uh
\VWE1PEC3P
jPqfjjWh
[VWEF1PE
QjP/f%VWE 1PE2P
f3ZYYd
Eo.}(_^[Y]
Q@T$ f
f<E`vE
tdVWt$
f*"0_^[
RtSV:/
SVW3Uh
E*$_^[Y]
E4(B"[Y]SV
PaYZ^[
ME<z3ZYYd
|a E_^[]
3&t`(g
@b{E3Uh
d0d E]{
Ec{ _^[YY]SV
^[EDIT
#C@C@[
YFXlPPSyYD$8PSXWSeYSj
$D$8;~
R$tGE@(
BUTTON
SVW3UhB
M3Uh^ B
d0d PWh
_^[]Uj
SVW3Uh B
YZ]_^[
SV3Uh B
SVW3Uhg!B
PT}!UTE
_^[Y]SVW
]]E3Uh"B
d0d E3Uh"B
_^[]S@
]E3Uh!$B
d0d EE@
d0d ;t_M
SVWWVh
P3P_^[
_^[SVj
PMu"4$D$
Q@D$ PLtLZ
(]_^[SVW
!G$_^[
LISTBOX
WVC4PC0Pj
^[SVWC
SVWUfG
YZ]_^[
[UpSVW}
3Uhv/B
d0d f"
GPmC3ZYYd
[SVWUz
^[U3Uh0B
U3Uh%1B
!3ZYYd
s'hd1B
Delphi Picture
Delphi Component
THintAction,2B
THintAction1B
StdActns
U3Uh2B
TCursor
TAlign
alNone
alBottom
alLeft
alRight
alClient3B
TDragObject
TBaseDragControlObject4B
TDragControlObject
TDragDockObject5B
TControlCanvas5B
TControlCanvas5B
Controls
TControlActionLink6B
TDragMode
dmManual
dmAutomatic@
TDragKind
dkDrag
dkDock,7B
TTabOrder
TCaptionT7B
TAnchorKind
akLeft
akRight
akBottom7B
TAnchors
TConstraintSize
TSizeConstraints@
TSizeConstraints
Controls
MaxHeight7B
MaxWidth7B
MinHeight7B
MinWidth@
TMouseEvent
Sender
TObject
Button
TMouseButton
TShiftState
Integer
Integer@
TMouseMoveEvent
Sender
TObject
TShiftState
Integer
Integer9B
TKeyEvent
Sender
TObject
TShiftState9B
TKeyPressEvent
Sender
TObject
TDragOverEvent
Sender
TObject
Source
TObject
Integer
Integer
TDragState
Accept
Boolean:B
TDragDropEvent
Sender
TObject
Source
TObject
Integer
Integer:B
TStartDragEvent
Sender
TObject
DragObject
TDragObject
TEndDragEvent
Sender
TObject
Target
TObject
Integer
Integerd;B
TDockDropEvent
Sender
TObject
Source
TDragDockObject
Integer
Integer;B
TDockOverEvent
Sender
TObject
Source
TDragDockObject
Integer
Integer
TDragState
Accept
Boolean0<B
TUnDockEvent
Sender
TObject
Client
TControl
NewTarget
TWinControl
Boolean<B
TStartDockEvent
Sender
TObject
DragObject
TDragDockObject<B
TGetSiteInfoEvent
Sender
TObject
DockClient
TControl
InfluenceRect
MousePos
TPoint
CanDock
Boolean@
TCanResizeEvent
Sender
TObject
NewWidth
Integer
NewHeight
Integer
Resize
Boolean=B
TConstrainedResizeEvent
Sender
TObject
MinWidth
Integer
MinHeight
Integer
MaxWidth
Integer
MaxHeight
Integer@
TMouseWheelEvent
Sender
TObject
TShiftState
WheelDelta
Integer
MousePos
TPoint
Handled
Boolean@
TMouseWheelUpDownEvent
Sender
TObject
TShiftState
MousePos
TPoint
Handled
Boolean>B
TContextPopupEvent
Sender
TObject
MousePos
TPoint
Handled
Boolean?B
TControl@
TControl?B
Controls
Width<
Height2B
Cursor
TWinControlActionLinkxCB
TImeMode
imDisable
imClose
imOpen
imDontCare
imSAlpha
imAlpha
imHira
imSKata
imKata
imChinese
imSHanguel
imHanguel@
TImeName
TBorderWidth
IDockManager$
Controls
$5%&'/
,3489:<CB
TWinControl
TWinControlDB
Controls
HelpContextHB
TGraphicControlPIB
TGraphicControlHB
Controls
TCustomControlJB
TCustomControlIB
Controls
THintWindowKB
THintWindow
Controls
TDockZone
TDockTree8NB
TMouse
UQS]vE
Vy&^[3^[
crDefault
crArrow
crCross
crIBeam
crSizeNESW
crSizeNS
crSizeNWSE
crSizeWE
crUpArrow
crHourGlass
crDrag
crNoDrop
crHSplit
crVSplit
crMultiDrag
crSQLWait
crAppStart
crHelp
crHandPoint
crSizeAll
crSize
TSiteListSVW
PO!u[]
F_^[YY]
FKuB_^[
SVWQ3C
J H J$H$J(H(J,H,
SPhTTB
USVW3Uh
tPHt8wUC
w_^[YY]
F8C8^[
F8f8_^[]
S _^[]
^[Y]SV
PTSTPXSXPlSlVpD{D
^Vp\{\
PF8f^[]
^[SVW<$
PVCDP"
;B$t'E
PUPUEPhtXB
EPEPEPB
E_^[]UE
USVW}U3Ej
RLtzE{
t uuEP
3EE_^[]
MMM=tE
SVW3XE
;B8t=XE
SVW=tE
P8f\IXE
xXu$XE
_'u-|$
3F(F,t
YZ_^[USVWU5TE
d2d"3E
uKUfY=TE
EUPDUPH(M33{yUM
EUPDUPH]SHEp8
F8MByEUPLUPPEWpDx\
UE3ZYYd
[]USE33EE
d2d"XE
E3UhfB
d2d"XE
UUYt)=tE
M3ZYYd
EPEPEP
YZ]_^[
PE3UhhB
d0d E@
H|l@EE
t?3UhhB
D3ZYYd
EMu3ZYYd
E3UhriB
d0d E@
|YEUE~EEf
t33UhJiB
d0d E
M}u3ZYYd
^[UQSEExX
3Uh1jB
EP`E@X
QDUB\UC|3ZYYd
C\PC`P
SV;sXt
sX^[SV
t1JtPJtq
fe^[;N
fA^[;N
MM3UhlB
)U3ZYYd
EZER`E_^[]
%s (%s)
S3Uh{mB
vPTXyt
@lC(oB
Q`F\3F\FdFXFT
@$SV;s$t
Q`^[SVW
t[f3tJT$
RtjWSO
S3CKvE
SVWfKD
rfcD{$
u$;~lu
F<PF8PN4V0
fxZ^[USVW
tr;^0u
;F<tX3
F4F|^$tIC
C8PC<PK4
C8PC<P
SVRC<PK4
C8PRK4
^[USVW}
U[pEfHD
;tDt E
_^[]SVW
M3Uh]xB
d0d {$
YZ_^[SVW
YZ_^[SV
u7fXyB
f;u!}EEE
$PWF0P
$PWF4PpD$
$PWF8P,D$
F<P+D$
$PWF4P
$PW^X:P
SV:VLt
MU3Uhj{B
d0d G@ t;G
_^[YY]SVW<$
Q@C8+D$
$PC<+D$
SV;s$t=;u
Z^[:PHt
SV3Uhy}B
d0d UEt
m3ZYYd
CXi;Ctt
CXUCtj
h|[S$4
3]USV3
d0d {$
C4PC0PVfC<PC8Pj
V3ZYYd
PWg~NN
t8C@@t2U
tWE@$o_
E@$@@@u
PEPE@$-\
PGeVp$t
USEExG
P%E3UhB
d1d!UR4
K<QE@0
K8QRPEPE@$MU>9
EPE@$"[
umC8C8|$
Q(@CDPC
STRSDRH
]_^[USfw[]
EP+E3Uh
d0d F@PEP
SEu++P}W
PE+PEPhI
SE+E+PE+PVEPahI
E+E+PSWVEPGEPEPr3ZYYd
EPEPB_^[]
USVWMt
V4F0TE
EEE^$t
EEEPEP
UEnTVu
PTEUPXEWxDu
XEPMUf'3ZYYd
E6PE_^[]
t2+PD$
P33RL$
Z_^[USf
C,S(E[]
Q_^[SVW
Ht*gFTt
USUEEPh
IsControl
t-t"y@0;
UQSVWMFA
Ufr_^[Y]
@lSVWU3
$^ffD^
f;u~CdP
C$P`CJ
C$PXCI
+B<PEPK
+EEU_^[]
ULY0E@
[YY]Uj
j_^[YY]
^[SVft
SVW3UhB
T3ZYYd
UQSVE3
Iu^[Y]
t$,D$,\$
l$0D$0\$
|$4D$4\$$D$
P8RP<RH4P0
S|[SVWf"t
L$$33?T$$
SVW<$f
@\S ;P
U3Uh*B
EUE2I]K|0C3E
EVHFKu
FKu3ZYYd
EMg^[]
t$t+:R4;P4
USVWUE}
EX0Ep4E@8EE@<EE@${>
Q@EEEE
MEx$W<G8:E@Q
U+BxU+
U+Bx]+1E@Q
PEPE@xPS
U+B|U+
U+B|u+1E@Q
PEPE@|PEy
d0d EPEP
S|3ZYYd
t+t4GE
d0d EPEP
S|3ZYYd
E@8;Eu
EU+P<E
SEU+P<E
EU+P<E
:_Kukt$
H|-@EE
A$YEMu_^[YY]
USMUEED
Q,UbYt~UE
YU3Y3ZYYd
d0d UE
3=USVWE
$E3UhB
d0d E[EE,
E =U+W8+W0FKuEX
K| C3j
!FKu3ZYYd
USVWUEE}
=EE3UhB
d2d"EH
E?<FOu
Ef3ZYYd
0JEq=xK
JE<<EX
f@FOu_^[]
(3C$^[SVW
:]_^[3
$K|!C3
GKuZ]_^[
t\{4C$PV
P^u4C$PVj
Nu$C$PVE
C$PVC4P&{4C$%
UCL3ZYYd
_^[]U@SV3
@3UhGB
us{@tj^
LPEPEP
EPEPETNB
EEEPfu
FT3FT/
f~3ZYYd
C PC4Pj
UQEEfHD
d0d EL
FKu3_^[
P$s$t j
GNu_^[
USVWEExG
j3}FKuEL
:EtREUh
E3ZYYd
=_^[YY]
UQSVWE3UhdB
d0d 3UhSB
d0d ]C,S(3ZYYd
+C0|'E
USVMU3E}
KuE^[]
;X$uuj
;{u$~$
SVWUE][
Pa3UhB
d2d"E4
O|TG3E4
u+@@@t%P4
P8RP4R@0PS+E}
PUy_^[]
K8S4C0 D$
K4S07C<PC8Pj
PUzfcD
K8S4JC0H D$
C<@PD$
K8AS4C0l D$
]_^[U
E3UhNB
d0d EP
EPEP-EP
v_^[]SV
^[SVWQ8
fx8fuMT
f{hft\
SVW3UhB
d0d $E
Evp_^[Y]Uj
S3Uh*B
d0d $E
v)p[Y]
USVWfU
UQSVWM
fi_^[Y]
$Z_^[SVW
_^[YY]
SVW`~"K
OKu_^[
d0d :D
USVWUEEx
7E3UhyB
d2d"E@
@8MUffE|
PXRUHTUP8EH
Ec;uNE@GE3Uh6B
Efe3ZYYd
E]^[YY]
Z[SVWQ
Z[SVWQ
YZ_^[SVWDE
SEPEPM
MUfaEx
x}E_^[]
USVWEE
RLtPCB
GNuE_^[YY]
tREfx
Pu8Ju/E
Q^[SVW
SVWfND
ef=r^[
f~][Sfr][SV
u*TC32;u
YZ]_^[SH$t
uU4$t/fDZt
f+Zu@v$u
YZ]_^[SVWF
USVW;s0u
[s0{4E
SVWUL$
$fVGNuYZ]_^[
EE#3UhB
E[^[Y]
SVWUL$
P<RP8RP4
]_^[Vp$t
SVX$t-t
D1N|dF3
ENu]_^[
^[SVV*P
C<PC8Pj
Pkf,Q[
SV3UhB
d0d :|
Uf|OUH
}3ZYYd
E}T^[Y]
<_^[SVWUQl
$NuZ]_^[
USVWME3E
LE3UhB
d0d UEfMEx
;uu3ZYYd
E_KyRE_^[]
USVUEE
FKu^[YY]
USVWFdx
S8_^[]
F8U+U+
EV<M+M+
d1d!3E3E3E3E3E3E3E3E
EPEPMU<CK,
E+E+C8+EE}
U+U+S<+UU}
eM_^[]
^[USVWMUEE
d1d!EN|oFE
H8QH<QH4+
S|ENu3ZYYd
A8M+M+M
s7E+E~&M
A<M+M+M
USVWUEE%
EiPE3UhB
d2d"EPEFP
EPE Pj
|EPEPEP
EPEPEPEPEP~u
PEPEPpEPEPEPEPEP
EPEPEPE0
EPE4PGUE
Q_^[]SVW
F3Uh[B
c3Uh8B
F3ZYYd
UEEP1E3UhB
d0d E@<PEPEH833j
EPEP-3ZYYd
U3Uh&B
PEPjUENP
E J-D[]
V3Uh+B
h3ZYYd
>I(C^YY]
USVW}Q
EjPE@<PE@8PEPEPjEP#E
Rt3ZYYd
USVW}Q
UQSVWM]
PSjEKP
UMEPS/~EPSuE+E
PEE3UhB
EPuEPj
zEPEPj
EPW3ZYYd
EPw@[]USVW
t&sp{hE
UQSVWM3
FlPNhVpnE
USVWM3
t9;wdt4;
UEPEPGdP
CdP3Cd[SVW
3YZ_^[
:^[SVfKD
ofcD^[
x|3Uh6B
@=3ZYYd
PF Z+ C
USV3EF
tCEp83UhiB
P89E^[]
USVWEE@
EU{Yt E@
;Odt"MI
MI ;Hh|"E@
t+E@ ;B } E@
ELZMEP
/z_^[]USVWt
/4MUE3
d0d E{K| C3j
FKuE@d:3ZYYd
J(H0J,H4E@
V0P(V4P,Vd
@lHlxl
U@dYEYY]
3USVWM
}+}E+EEC
{EEPEP
Hud{dEG
SdB Cd@
SdB Cd@
Rt_^[]
UQSVWU
FhC Fd@ FhE
FH3F@FD
}Fd@ y
[mG C G
+C0uuU
Q@EPnu
_^[]USVMUE3EE3
YE^[]UQSV
MUE3Uh
d0d EPdE
uN|UFE
ENuEPh
EXdVE;Eu
0E;E}(
E>+3ZYYd
E1+_^[]
@lPh_^[]
@hi_^[]
)EE+C4
)EC8U+U+
)EC<U+U+
{3ZYYd
Ej(3ZYYd
E8i(3ZYYd
Ew!(_^[]USVW
Fj33#E
~C0EC4EC8S<UU
Pf_^[]
3Fdc ^[]
At$;C8u
U3QQQQSVW
d0d u;UE
NUXk.M
xNEPU0E
gNUX*.M
;u$Fdx
;Fdu5FhG Fd@ FhFd
S P hVh
)#_^[]SVW
RvuvWt$
USEE,3Uh
EV(d"[YY]
d0d UE
RUB|YC
RUhY3ZYYd
E'!^[YY]USVW3
MUE3Uh
d0d EPp
d0d E@
K|-C3E@
EYFKu3ZYYd
UE@d34YwE
ET&b _^[]
@;Xdt'U
CXPC\PM_C`P
SPP C`P
XPCXPYhI
+QRPCXP
YVCXPY
RR ;S }'{
RY[]USU
B EUCd@
IYE[YY]USVW
t`US^UI^E;E
_^[]SVWtK
W4G0T$
BP_^[]
\EUPPUPTUYE
MPEPYu
:\EEEEf{
uF4V0{
)EE+F4
)EF8U+U+
)EF<U+U+
)EU\_UC
]C4S03ZYYd
gt!PN{
d0d =E
USER32
WINNLSEnableIME
IMM32.DLL
ImmGetContext
ImmReleaseContext
ImmGetConversionStatus
ImmSetConversionStatus
ImmSetOpenStatus
ImmSetCompositionWindow
ImmSetCompositionFontA
ImmGetCompositionStringA
ImmIsIME
ImmNotifyIME
PkKfPE
JD$$D$(
D$,D$0
JD$4D$8
{qPJfRE
Delphi%.8X
ControlOfs%.8X%.8X
U3Uh$C
3ZYYd
TContainedAction@
TContainedActionh%C
ActnList
Category&C
TCustomActionList&C
TCustomActionList&C
ActnList
TCustomAction'C
TCustomActiond'C
ActnList
TActionLinkSV
|1SLz$W
^[SVC
SVW~Lt
SVW~Lt
^[Y]SVWH
USVUEE@$X
K|$C3E@$P
FKu^[YY]
u*;~,u
3FL^[SVWf{2
C4S0C$p
R0GNuC
G$Ef;hhu
CNu3]_^[
FxAF|9
R0]_^[
:]XtFE@x
R0]_^[SVWU
:]YtFE@x
R0]_^[SVWU;k\tFC@x
R0]_^[SVWU
R0]_^[
SVWU;kdtFC@x
R0]_^[SVWUf;khtGC@x
QXFOufkh
R0]_^[
:]jtFE@x
R0]_^[SVWF
U3Uh13C
TChangeLink3C
TImageIndex
TCustomImageList@
TCustomImageList
ImgList
G@3G@GHt
S3Uh56C
C8 C<
=E3Uh6C
d0d EXDE@$PE@(PEPm9
R,33uEP
Z<3ZYYd
>^E@Ht
SVW3Uh8C
d0d s,VV3C5
PC$PC(PH{0u!UE
_^[Y]USV
u{E3Uh_9C
X{E3UhB9C
d0d EGM
EpPE@0P
E3ZYYd
EEfE^[]
SV3Uh :C
d0d ;|!UpE
@PC0Pf
PC<PPj
P;PEPPe
Q4CHo~@
4C$PEPK(33EPCHB~ZD8j
CH#~V;PEPPDE
C$PEPM
EPC$PC(PE
EPC$PC(PE
PVz3_^[]
S0_^[]
USVWUEE@$PEPEH(33[E?
3UhD>C
9wE3Uh'>C
d0d EP$E
Q4EP(E
Q4EP(E
Q@EP(N|mF3
99PSEP&E{U5j
9PSEPMUECNu3ZYYd
E/I3ZYYd
,3ZYYd
F5C5F7C7V4
C$PC(PPS|P
F5C5F7C7V4
F6C6F<C<
C$PC(PP
SV3UhP@C
d0d t9
R ;C$|
R,;C(}!UdE
c^V3ZYYd
^[Y]SV:V4t
[SVWUFL
8F@t"x
fWEOuf~Z
F\VX]_^[
FOu]_^[
?E3UhLBC
E3Uh/BC
E3ZYYd
$3ZYYd
USUEUE EPh(FC
Bitmap
pE3UhEC
pE3UhxEC
pEEP(E
Q@EP$E
EEEP(E
Q@EP$E
Q4E@$PEPEH(33#E
3Uh[EC
R UJ$H
R,UJ(N
E@$PEPEH(EP$
EPEtPEtUY-E@$PEPEH(EP$
hEPEtPEtUYn-MUEMCN
E3ZYYd
d0d Et
RY3ZYYd
6[Y]SVWD$
E3Uh!GC
d0d Et
NX3ZYYd
2[Y]@PSxP
U3UhGC
EMenuError0HC
TMenuBreak
mbNone
mbBreak
mbBarBreakhHC
TMenuChangeEvent
Sender
TObject
Source
TMenuItem
Rebuild
BooleanHC
TMenuDrawItemEvent
Sender
TObject
ACanvas
TCanvas
Selected
Boolean
TAdvancedMenuDrawItemEvent
Sender
TObject
ACanvas
TCanvas
TOwnerDrawStatexIC
TMenuMeasureItemEvent
Sender
TObject
ACanvas
TCanvas
Integer
Height
Integer@
TMenuItemAutoFlag
maAutomatic
maManual
maParent
TMenuAutoFlag
TMenuActionLink@KC
TMenuItemKC
TMenuItem@KC
ActionIC
AutoHotkeysIC
AutoLineReductionDZA
Bitmap,HC
Caption
Checkedd4C
SubMenuImages
Default
EnabledT
GroupIndex@
HelpContext
Hint3C
ImageIndex
RadioItem@
ShortCut
Visible@
OnClickHC
OnDrawItem
OnAdvancedDrawItemtIC
OnMeasureItem@
TMenuOC
TMenu<OC
Items@
TMainMenu|PC
TMainMenu0PC
AutoHotkeys
AutoLineReduction
AutoMerge
BiDiModed4C
Images
OwnerDraw
ParentBiDiModedHC
OnChangeQC
TPopupAlignment
paLeft
paRight
paCenter
TTrackButton
tbRightButton
tbLeftButton@RC
TMenuAnimations
maLeftToRight
maRightToLeft
maTopToBottom
maBottomToTop
maNone@
TMenuAnimation
TPopupMenu\SC
TPopupMenu
Alignment
AutoHotkeys
AutoLineReduction
AutoPopup
BiDiMode@
HelpContextd4C
ImagesRC
MenuAnimation
OwnerDraw
ParentBiDiMode
TrackButtondHC
OnChange@
OnPopupUC
TPopupList
TMenuItemStack$
1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ
UQUfE3}
Y]USfE=j
SVfE3Uh-YC
d0d ]3
AAvAE3
2MEDYC
tL~E t
23ZYYd
lPdZ;|9XP
n_^[USVW3
UEE3Uh
d0d 33E
u3ZYYd
_^[YY]
([USVM
:Bw$EU
E^[]USVWME3E3E33t
@3E;u~
@3EE:Ew
EEUEMUYE
@3:Ev}
CfCDC4
FP3F8CQFl;QfFDft
]]M3UhbC
d0d {2
u$uhbC
UfCTduE
CDE3E3E3EEEg
~ C$%P
CDPVjW
EE_^[]
RR(e3]
USEEXdt%
EEP\bC
SV3UhcC
d0d U=E
N|@F3;,$}
X3ENuZ]_^[S
ShortCutText
3UhwgC
PEPEPE
PE{PE6PE
SVW3UhIpC
B3UhkC
+Q;}JE
+Q;}JE
@fXTftUE
@]3ZYYd
SVW3UhxC
@t;}7E
B3Uh?tC
+Q;}NE
+Q;}JE
@fXTft^E
M3ZYYd
ER`_^[Y]
t?EPMU
tBEPfE
UJY_^[]
]MU3Uh|C
d0d f>
&EF$|C
3f~Tft
PMUYE+E
Q8^[SVW
P3:S3u
GNu_^[SVW
:^,tB^,~Xt'F
:^-tg^-
Q87~Xt'F
FDP P3
:^3t1~Xt
CP8i^[
Q8;P4t
CXt4m}
UQSVEE'K|
FKu^[Y]
:].tJt:}X
t4EXO|%G3
Q8]_^[
CPM|.CP;h
CPg@3:F3v
CPgP3N3
CPg^X^|Fx
Q8]_^[
CPe3GX3GxG|{(
F|Vx^[
3F8O~8
R<FKu_^[
S:S1t S1{,
SVWJ;u
g_^[SVW
@Y8W8CNu
]]MU3Uh.C
A3ZYYd
;%_^[]
E3E3UhC
d2d";H
tXUEYuJ
UUEYtL$E
E8W`FKuM
b3ZYYd
COu%K|$
$YZ]_^[
[UQSVWt
@8Fx^d
@(fN[]
SVF(f,^[
[UQSVWE
SD;t+E
2N|$F3E
E_^[Y]
xHZ]_^[
F(:_^[
f;Bt,E
tz3Uh=C
E_^[YY]
d0d UE3&YE3ZYYd
D$0D$$D$(P
USVEEPEE
E3`SE+Ph
;]r^[]
R4*Yx0
tcE@$EUR5U3UhC
O^[SfxB
USVf8C
SVfU3UhC
EEPES$
33ZYYd
PEEH|w@E3h
uFMu}}
}yEH|q@E3h
_^[]UQSVW
Xtt3EE
PVW_^[Y]
@(P0:PLt
UQSVWU
U_^[Y]
@(R(M3
H(I\;J(u
0V8C,t
UQSVWE3UhC
E3UhMC
K|tC3}
ExHMUyE}
PlE3UhfC
P|EEf@
P3ZYYd
dE3UhC
d0d EPJE3UhC
d0d UE2
UEH3ZYYd
%FHFLF(
@$F,FQ
SPf,P3CXf
WVUC(YPYZ]_^[SVWUG
CNu]_^[
S0_^[]
<&uO$E
C;}]_^[
SV3Uh9C
d0d UEPUEZH3ZYYd
U3Uh@C
TScrollBarInc
TScrollBarStyle
ssRegular
ssFlat
ssHotTrackTC
TControlScrollBarxC
TControlScrollBarTC
ButtonSize4MA
ColorC
Incrementh
Margin
ParentColor<
Position<
Smooth<
Style<
ThumbSize
Tracking
Visible@
TWindowState
wsNormal
wsMinimized
wsMaximizedC
TScrollingWinControlC
TScrollingWinControlC
HorzScrollBartC
VertScrollBardC
TFormBorderStyle
bsNone
bsSingle
bsSizeable
bsDialog
bsToolWindow
bsSizeToolWin
TBorderStyle
TScrollBox@
TScrollBox0C
Forms1
Align7B
Anchors
AutoScroll
AutoSize
BiDiMode
BorderStyle88B
Constraints
DockSite2B
DragCursor6B
DragKind6B
DragMode
Enabled4MA
Ctl3DQA
ParentBiDiMode
ParentColor
ParentCtl3D
ParentFont
ParentShowHintXSC
PopupMenu
ShowHint(7B
TabOrder
TabStop
VisibleD=B
OnCanResize@
OnClick=B
OnConstrainedResize>B
OnContextPopup@
OnDblClick`;B
OnDockDrop;B
OnDockOver:B
OnDragDrop
OnDragOver
OnEndDock
OnEndDrag@
OnEnter@
OnExit<B
OnGetSiteInfo8B
OnMouseDownX9B
OnMouseMove8B
OnMouseUp
OnMouseWheel>B
OnMouseWheelDown>B
OnMouseWheelUp@
OnResize<B
OnStartDock:B
OnStartDrag,<B
OnUnDock4C
IDesigner @
IOleForm$
TFormStyle
fsNormal
fsMDIChild
fsMDIForm
fsStayOnTop
TBorderIcon
biSystemMenu
biMinimize
biMaximize
biHelp
TBorderIcons
TPosition
poDesigned
poDefault
poDefaultPosOnly
poDefaultSizeOnly
poScreenCenter
poDesktopCenter
poMainFormCenter
poOwnerFormCenter
TDefaultMonitor
dmDesktop
dmPrimary
dmMainForm
dmActiveForm
TPrintScale
poNone
poProportional
poPrintToFit@
TModalResult
TCloseEvent
Sender
TObject
Action
TCloseActionC
TCloseQueryEvent
Sender
TObject
CanClose
BooleanC
TShortCutEvent
TWMKey
Handled
BooleanlC
TCustomFormC
TCustomFormlC
TForm<C
TFormPC
FormsO
Action
ActiveControl2B
Align7B
Anchors
AutoScroll
AutoSize
BiDiMode
BorderIcons`C
BorderStyle
BorderWidth@7B
Caption<
ClientHeight<
ClientWidth4MA
Color88B
Constraints
UseDockManager
DefaultMonitor
DockSite6B
DragKind6B
DragMode
Enabled
ParentFontQA
FormStyle<
Height
HelpFiletC
HorzScrollBarx[A
KeyPreviewxPC
OldCreateOrderKC
ObjectMenuItem
ParentBiDiMode<
PixelsPerInchXSC
PopupMenu0C
Position
PrintScale
Scaled
ShowHinttC
VertScrollBar
Visible<
Width\C
WindowStateKC
WindowMenu@
OnActivateD=B
OnCanResize@
OnClickxC
OnCloseC
OnCloseQuery=B
OnConstrainedResize>B
OnContextPopup@
OnCreate@
OnDblClick@
OnDestroy@
OnDeactivate`;B
OnDockDrop;B
OnDockOver:B
OnDragDrop
OnDragOver
OnEndDock<B
OnGetSiteInfo@
OnHide@
OnHelp9B
OnKeyDown9B
OnKeyPress9B
OnKeyUp8B
OnMouseDownX9B
OnMouseMove8B
OnMouseUp
OnMouseWheel>B
OnMouseWheelDown>B
OnMouseWheelUp@
OnPaint@
OnResizeC
OnShortCut@
OnShow<B
OnStartDock,<B
OnUnDockC
TCustomDockForm
TCustomDockFormC
PixelsPerInchC
TDataModule
TDataModuleC
OldCreateOrder@
OnCreate@
OnDestroyC
TMonitor@
TScreenC
TScreen4C
THintInfo@
TApplicationC
TApplication
t %PjVcj7j
d0d 3UhC
E3ZYYd
f3ZYYd
<eE_^[]SVt,
;X$t@Sit6SWt,jS
TPUtilWindow
SV3UhC
d0d UEPE-hEZ
fi`^[YY]
`3ZYYd
Ee_^[]USVWt
USVEEX
to3E3EE@
cK|:C3Ex
+X_^[]USMUEjE@
USVWUEEx
EEH<EUEE
33E3E3
t ft-ft;JEP
t%ft6ftG
SV;S$t6u
SV;S0t6u
USVWMUEu
KE3UhPC
EvN|7F3
U+W8+W0
N| F3j
J3ZYYd
]3ZYYd
S ]_^[
SVWU;t}C
]_^[SVW
d0d E3ZYYd
UE3ZYYd
K^[US3
UE3UhC
p3UhtC
lJ3ZYYd
I3ZYYd
UCUEE@
UE$3ZYYd
UQSVWEEf
tA3UhC
d0d ]U
_^[Y]UQSVWEEf
tA3UhUC
d0d ]U
F_^[Y]
_^[SVWU
UQSVEE
d2d"E3
;B4t/ED
@4PEpXxP}
E3ZYYd
EB^[Y]
PixelsPerInch
TextHeight
IgnoreFontProperty
WVkXGvPz
Tv]_^[
V/jPx~P0
PjPY~PV{C<+F
;uB1LH|6@EE
EMu_^[YY]
SVWUL$
$XX )D$
tKN|7F3
=3ZYYd
C$;t%;t!u
S,_^[]
Ef@ f#
zvE3UhC
d0d E@
P]vE3UhrC
d0d EP
P|EzEf@
Pu93ZYYd
EPxE3UhC
fuE3UhC
d0d EPLuE3UhvC
d0d UE4{
US~3ZYYd
EzEPEPt83ZYYd
E183ZYYd
K|!C3E
FKu3^[]
t.+t_E
Q@EPE@
/Ht=j?Pu%%%
PwwCO|-G3
}C\FOuZ_^[
d2d"ExP
t1E@$u
Qd3ZYYd
v_^[S3
GFKu_^[
FKu3_^[
SVWU3j
Po]_^[
d0d tp
H|a@E3
R4sPio;t
R4PVP|qI
t6*t+j
EI6W0_^[]
P*Po^[
uwC8Pk<U
uwC8Pk<U
C8PC<PL$
F(Z_^[
qP_iC
PjPjPj
MDICLIENT
EB EEPj
SVW3Uh
tptE;t ;u
u0f u!U|E
f 3ZYYd
E+%_^[Y]
UQSVWU3
P`E@D
UfBD3Uh
@l;tTt*
;EuEp$t%
5z3ZYYd
f#PDEfPD"
U6P$a]_^[
d0d E
d0d E8
3a 3ZYYd
_f [Y]SVWU
O|BGD$
f#CDfCD0TP
V[TP[@^[
ufP[uUj
SVW3Uh
UFLr6U
US3t.E
USVWUF
UMYEXECU0
UFl%YM33zUMYEXE
B PB$PJ
UQSVE^
Ef@ f#
E3ZYYd
?Sf||fF
ME3Uh]&D
d0d E@
3Uh@&D
d2d"E@
d0d Efv
@8|UE+p<y7
3E@8PE@<P
t*^8E+X8y
^0F<U+B<y
3E@8PE@<P
@8SE+p<y7
3E@8PE@<P
EIPQQE
PE'PQE@8UR<
<ME\Zj
3UhG%D
d0d Ef
^M;u!EPNu
PPP3ZYYd
_^[YY]
T?E3UhJ'D
d0d FXU
USVWE3Uh(D
_^[YY]3S
S3Uh)D
RLu!U|E
,3ZYYd
3UhP,D
d0d $=ExG
j HPpK;KE
f@8fE3
E3Uh0,D
d2d"E;3Uh+D
EqP_JEcG;t
3E3ZYYd
EPIE yE
i3ZYYd
E^[]UQSVWEEh
PYGNu_^[Y]
USVWC
t1F(PQH|$@30
@(FQx2
R<GNuU/Y_^[]
UQSVWEEh
GNu3_^[Y]
UQSUC
UQSVWEEh
t]En~N|NF3
GNu3_^[Y]
UQSUC
K|-C3E
FKu3^[]
USVUEE
EE^[]USVW}
]MU3Uh52D
d0d >HupEJAE3
U+KMU2
SVWUzO|&G3
gzYfwEOu
]_^[USVWu
_^[YY]
E3Uh4D
UEqH3ZYYd
SGFGNu_^[US3
UE3UhH6D
t{3Uh(6D
R03ZYYd
{+3ZYYd
R0USVt
UUEE@
y3Uhn7D
d0d ExH
UQSVWEEfx:
t;3Uh7D
d0d ]UC<S83ZYYd
)_^[Y]
UQSVWEEfxB
d0d ]UCDS@3ZYYd
C EEPh:D
Height
HorizontalOffset
VerticalOffset
H|6@EE
EMu_^[YY]
)7jZVW4C4Vj
D9CLP;D
^[Y]SVWU
Et?E|7Ex/EH'ED E@
ELcGNuEL
C\;Cht
CX;Cdt
SVW_Pt3C
A5WT;t
R2_^[SVW
E3UhAD
d0d Ex(
UB(E,Pj@U3H
3UhgAD
$3ZYYd
EX(3ZYYd
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
layout text
SVWUf;s8tsfs8fuZT0t$
W1+;u.4Pj
3PWj W2
ZP2C<YZ]_^[
Pj<j g3t
Cx&D$<T
j)(3t0$
t$t+:R4;P4
C0EC4Ej=E
t.t4GE
EVEPMU
+uE)EC8;u
S<;Ut~3
wt$}ED
DE+C<U
@)0'+E
USVWEE
@@K:Eu E
uaCK:EuYC
YEOu_^[YY]
UMUEUYtg
Y3ZYYd
ZEf3UhHD
E 3ZYYd
t<3Uh5ID
jIf+YZ
3WV8+t
TApplication
3CP3CtCL
PX"PP(\\t
@Pm%C|
MAINICON
P/(F$P$F4t
3UhiOD
C4EPHzE
.'fu!U
(C$C|z
C4PjC$PX'$E
PjC$P&j
C$P %j
#3ZYYd
X8;P<u
3sl;PPu
g^[USVW]
;B$uGjSi$
P#4$jV#
YZ^[3Q
@@$PE U
SV EPE
@@$P{ []
USVWUE3UhXD
d2d"E3
K|2C3E
E@$PZ t
E@$P U Y
E@$PK
E@$P)
SEV UB
U/Y3ZYYd
#_^[YY]
vcltest3.dll
RegisterAutomation
s8F8PF4PF0PC8KPC$P
t ;s$t
SV3Uh[D
t7UE^u
C|3ZYYd
_^[SVW3s8t:
uV.G8t
]_^[SVWU3
u.~8t#mP{
$Z]_^[
SVWQ3j
FOu_^[]
UQSVWM
8W,3ZYYd
}~8_^[Y]
3Uh~`D
{'E@8t_
t3ZYYd
^[Y;P;;Z<^[
E@$P4E
EE;Et`E(
EPE@$P
3UhqbD
d1d!SWVE@$P)
E3ZYYd
E;Et8j
M3Uh?cD
d0d EV
tD|t9$
t5^$F8t
PF@>PSo
SV:Sxt3
P,stSL
CtU3Ct^[
;N|LF3
GNu_^[SVWT
;s<tK{<
C<&s<{<
C<&YZ_^[USVW3
MME3UhfD
d0d ER
d0d Ef
En3ZYYd
)K| C3j
3%FKu_^[
CD@tvCDf
d0d Ef%3ZYYd
E4N^[Y]
UQSVWEEx$
GNuU3&Y_^[Y]
fGz_yf
_^[SfCzft
SVWUT$
;^Pu0T$
u|FHD$
FH^PD$
$ ]_^[S
stt-&vt"Ct
3UhFlD
d2d"MUE6
EE}EE)E3ZYYd
<3ZYYd
RBt^[]UpSVW3
u3UhDpD
@PEEEEE
Q<3E3E
E+EPE+EPEPZ
@PpttE3E
QhEPEP
EPEPEP0
xPT|PXxU
xP\|P`
Ht n8;t
YZ]_^[
U3UhqD
P93ZYYd
U3UhqD
U3UhMrD
U3UhrD
U3UhrD
U3UhrD
TImage@
TImageTsD
ExtCtrls
Align7B
Anchors
AutoSize
Center88B
Constraints2B
DragCursor6B
DragKind6B
DragMode
Enabled
IncrementalDisplay
ParentShowHintdWA
PictureXSC
PopupMenu
ShowHint
Stretch
Transparent
Visible@
OnClick>B
OnContextPopup@
OnDblClick:B
OnDragDrop
OnDragOver
OnEndDock
OnEndDrag8B
OnMouseDownX9B
OnMouseMove8B
OnMouseUpUA
OnProgress<B
OnStartDock:B
OnStartDragxD
TTimerxD
TTimerxD
ExtCtrls
Enabled|
Interval@
OnTimerUQSVt
33Vb^[
USEE@
E@8PE@<P33
d0d E
=3ZYYd
tBdt7<
UQSVWM]
R,;C8|
R ;C<|
#C@C@t"<
#C@C@<
w^[UQSVW
u?3UhN
d0d Ef
PVE@(PC
C(PNs$t@{8
C(Pdu!U
E>L^[Y]
C4S0[U3UhD
uSj4D$
TMessageForm@
TMessageFormxD
Dialogs
Cancel
Ignore
NoToAll
YesToAll
]]]]fMUE3Uh
E{E}URXE{}Uj
EP333}XEU
PEPjUE
PE|PE+E
PEPEA@PEPE&|IP'3E<lzE
7UEXtRM
Z'Hj j MU
>UUEPO
E+E+G8EEPEPMU
-3ZYYd
fPE_^[]
Message
USVfMUu
fMUOE3UhD
d0d EU
E3ZYYd
EE_E^[]
D$$D$(
"D$,D$0
PqfTzE
commdlg_help
commdlg_FindReplace
WndProcPtr%.8X%.8X
u+f=TzE
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=
S3UhgD
bH3ZYYd
[Y]USVW3
MMMEE3UhD
UY}@t!
]EfU<GM
13ZYYd
MMMMUEE
d0d E>E
EE=ABE
EE=E=E0EU
53ZYYd
U3UhuD
ERegistryExceptionD
TRegistryS
d0d E\E\
E2EPEPj
NMU3ZYYd
SVWUQ3
USVW3EE
Plt$uE
MaiStrUSVW3
d0d Ed
EfEn|_^[YY]
UE~3UhBD
d0d Ex
d0d EU
EJEB3Uh
d0d EUEUUE
]UEq3UhD
U33ZYYd
_^[YY]
kernel32.dll
CreateToolhelp32Snapshot
Heap32ListFirst
Heap32ListNext
Heap32First
Heap32Next
Toolhelp32ReadProcessMemory
Process32First
Process32Next
Process32FirstW
Process32NextW
Thread32First
Thread32Next
Module32First
Module32Next
Module32FirstW
Module32NextW
U3UhAD
TEventLogger
TDependencyLD
TDependency
SvcMgr
IsGroup@
TDependencies4D
TDependenciesD
SvcMgr
TServiceThreadD
TServiceType
stWin32
stDevice
stFileSystem@
TErrorSeverity
esIgnore
esNormal
esSevere
esCriticalHD
TStartType
stBoot
stSystem
stAuto
stManual
stDisabledD
TServiceEvent
Sender
TServiceD
TContinueEvent
Sender
TService
Continued
BooleanD
TPauseEvent
Sender
TService
Paused
Boolean(D
TStartEvent
Sender
TService
Started
Boolean@
TStopEvent
Sender
TService
Stopped
Boolean
TServicepD
TService
SvcMgr
AllowStop
AllowPause0D
Dependencies
DisplayNameD
ErrorSeverity
Interactive
LoadGroup
Password
ServiceStartNameD
ServiceTypeDD
StartType|
TagID<
WaitHintD
BeforeInstallD
AfterInstallD
BeforeUninstallD
AfterUninstallD
OnContinueD
OnExecuteD
OnPauseD
OnShutdown$D
OnStart\D
OnStop@
TServiceApplicationD
TServiceApplication4D
SvcMgr
^[Y]SVM
d0d EE{
P3ZYYd
EO]^[YY]
EPK3Uh:D
d2d"E@0
d2d"E@0
ZGUE@0
S3ZYYd
MUE3Uh D
d0d E@
XX7EPUE
E5E-E%3_^[]
Ct ^[SV
Cx^[VFT
3GTBN|-F3
GT{BN|:F3
Z]_^[SV3
d0d {d
UCd3ZYYd
EVd^[Y]
SVWM3UhD
d0d K| C3EU
R<3ZYYd
_^[]USVW3
UUUE3UhD
d0d 3Uh^D
E3UhMD
E23ZYYd
ETb_^[]
d0d Ef
U3ZrEU{M
S3ZYYd
^[YY]SVAz
y^[USVW3
]MU3UhHD
COu3ZYYd
SVWU35K| C3
EFKu]_^[
MMMU3Uh/D
d0d U3spf
CtuPWU
EaPVClWPENP
PEPgEE
d2d"3Uh
|3ZYYd
EPF{3ZYYd
:${_^[]
d0d EPDu
^[YY]USVW3
]MUE3Uh
d0d ECH
Uy3ZYYd
t3ZYYd
|x3ZYYd
p~ED~E<~Jx_^[]
UQSVWM
st>3UhiD
_^[Y]j
uSf@r[
TServiceTableEntryArray
TServiceStartThreadUQSVt
{3ZYYd
UU3UhD
d0d PD
3EzN|"F3
EGNuuFVE
E3Uh\D
23ZYYd
Els3ZYYd
INSTALL
SILENT
UNINSTALL
U3UhaD
U3ZYYd
U3Uh5D
U3UhmD
TNMRegHD
TNMReg<D
TOnHostResolved
Sender
TComponentD
TOnStatus
Sender
TComponent
Status
StringD
THandlerEvent
Handled
Boolean8D
ESockErrorD
EAbortErrorD
TThreadTimer@
TThreadTimerD
Enabled|
Interval@
OnTimer
TPowersock@
TPowersock
TimeOut<
ReportLevel@
OnDisconnect@
OnConnectD
OnInvalidHostdD
OnHostResolvedD
OnStatus@
OnConnectionFailedDD
AboutSVWt
Create
B3ZYYd
UEqqj}
Destroy
7*j3E3UhD
d0d E{
VIiEE`
g3ZYYd
EBmPg_^[]
Connecting
Already connected
Host Lookup Timed Out
Host Lookup Canceled
Null Remote Address
Connection Timed out
Connection Canceled
Connection Failed
Disconnecting
@3fQfj
Checking Connection
Not Connected
Canceling
]UE3Uh`D
d0d xD
d3ZYYd
Eic^[]
Sending Buffer
Socket send aborted
63ZYYd
EAiOc[Y]
EFm3Uh{D
qkU?3ZYYd
Ehb[Y]
Writeln
MUE3UhD
uZED8$PE
|,@E3=
t-Mf3'E
uMBE$+
FE$++VENkGO;xr
&YGD8PE
`3ZYYd
Eifw`_^[]
ReadLn
Socket readln aborted
SVW3UhYD
d0d pD
WF|00rHt
WF|09w/Et
WFT2fUEgF
Ze3ZYYd
e^_^[]
Transaction
MU3UhD
Eq1PEL1Z+=
tE0E0;t
EHcV]^[]
SendStream
Socket send aborted
Accepting
Accepting Canceled
Error creating Data Connection
Socket send aborted
SVWfU3UhD
c3ZYYd
`Z_^[]
Looking Up Error Message
Unknown Error No.
Timer Triggered
Timer On
Timer Off
IuSVW3UhD
Q43Uh"D
P3ZYYd
lWW3ZYYd
3&WW3ZYYd
\V_^[]
Initializing Winsock
Version=
High Version=
Description=
System=
Max Sockets=
Max Udp pack size=
Initializaton of windows sockets failed
USVW3UhD
d0d fz
d0d f2
Q&U_^[]
SV3UhD
PmuaC
EYS^[Y]
Request Close Socket
]M3UhD
Y3ZYYd
EXR_^[YY]
UQSVWM
E\3Uh>D
d0d 3Uh
d0d 3;
OR3ZYYd
R_^[Y]
Data Available
Clearing Input
PC$Phf
Resolve Host
Host Lookup Timed Out
Host Lookup Canceled
Host Lookup Failed
u?3UhD
d0d Ef8I3ZYYd
s$t5{8
No Timer
C4S0[USVW3
]]UEEW3UhD
SEK;Xr
F-H;u&EUK;Zr
TUE^UC;t
S3ZYYd
RERL_^[]
DSVm%y
UUiE_^[]
PsockWindowClass
CSVa%y
UE_^[]
TmrWindowClass
UUMethods
uuMime
uuCodeD
TNMUUProcessorD
TNMUUProcessorD
Method@
OnBeginEncode@
OnEndEncode@
OnBeginDecode@
OnEndDecodeSVt
IuSVWE3UhD
]UC,S(3UhD
d0d EiJ
HNUEO\5
HNUEO\5
HNUEUO\5
HXNUE-O
NUEN;uF\5
HMUENE
HMUEiN\5
HiMUE>NE
EURHLUED
MEMPEUO
]UC4S0D3ZYYd
JEJD_^[]
TExStringListD
TExStringListXD
NMExtstr
MMUE3Uh\D
d0d Ex
HE]+]y
HEE@;Eu
H|O@E3
Mt#EPI
CMu3ZYYd
HEGA^[]
QD3ZYYd
ECGQA_^[YY]
U3UhAD
TS_BufferStreamUQSVWt
_^[Y]SV
RP3;T$
$Z_^[SVWUQ
RP3;T$
$Z]_^[
RP3;T$
$Z]_^[SVWU
v=;t:{
YZ]_^[
Invalid seek origin = %d
Seek error
PutBack overflow
C$S [Sfx*
C,S([U3UhYD
TSubType
mtPlain
mtEnriched
mtSgml
mtTabSeperated
mtHtmlD
THeaderInComplete
handled
Boolean
hiType
IntegerD
TRecipientNotFound
Recipient
String$D
TMailListReturn
MailAddress
StringPD
TFileItem
Filename
StringD
TPostMessage
TPostMessageD
NMsmtp
FromAddress
FromNamet@
ToAddresst@
ToCarbonCopyt@
ToBlindCarbonCopyt@
Bodyt@
Attachments
Subject
LocalProgram
ReplyTo
TNMSMTPD
TNMSMTP
NMsmtp
OnPacketSentD
OnConnectionRequired@
OnConnect
UserID
PostMessageD
FinalHeader
EncodeType
ClearParamslD
SubType
CharsetD
OnRecipientNotFoundD
OnHeaderIncomplete@
OnSendStart@
OnSuccess@
OnFailureLD
OnEncodeStartLD
OnEncodeEnd D
OnMailListReturnLD
OnAttachmentNotFoundD
OnAuthenticationFailedUSVWt
E_^[YY]
us-ascii
UUE3UhL
d0d EX3Uh
d0d UEUE`
:UME0V<UE
J=2XEf
23ZYYd
,13ZYYd
Authentication failed
UE3Uh&
d0d M<
03ZYYd
EJ03ZYYd
E 6-0[YY]
IuSVWE3Uh
\6UME8W<Efx
ME8W<Efx
ME8W<Efx
)3ZYYd
/E/)_^[]
Incomplete Header
MAIL FROM:<
RCPT TO:<
IuSVW3Uh
+1,uh8
t3tUtw
-Ej-PE1/
,E,PE`.
,E),PE-
#3ZYYd
)E[)i#_^[]
From:
Subject
X-Mailer
Reply-To
Mime-Version: 1.0
Content-Type: text/enriched; charset=
Content-Type: text/sgml; charset=
Content-Type: text/tab-separated-values; charset=
Content-Type: text/html; charset=
Content-Type: text/plain; charset=
====================54535
Content-Type: multipart/mixed; boundary="
IuQSVWUE3Uhm
L)E(PEK*
KE3UhC
d2d"E3ZYYd
U3ZYYd
Content-Type: application/octet-stream; name="
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="
-t3ZYYd
UE&3UhY
d0d Up
'~%SEP
UZ"3ZYYd
Txthaoma
TxtMima
Timer1
Button1
Timer2
ListBox1
Timer3
NMSMTP1
Timer1Timer
Timer2Timer
FormCreate
Button1Click
TxthaomaChange
TxtMimaChange
Timer3Timer
NMSMTP1Connect
NMSMTP1SendStart
FormClose
TForm1
TForm1t
d0d U\
UEwnUE
3a3ZYYd
auto_share
S3Uh E
Q43ZYYd
S3UhH E
Q43ZYYd
S3Uh E
IuQSVW3Uh!E
UEdkUMxEULkUE
S<3ZYYd
yonghu_ming
youxiang_mima
AUTH LOGIN
X-Mailer: Foxmail 4.2 [cn]
X-Mailer
Multipart/Alternative; boundary="----=_NextPart_000_000A_01BF9F1A"
Content-Type
U3UhI#E
Timer1
Timer1Timer
FormCreate
TForm2
TForm2#E
U3UhY%E
StopFireWall_ThreadU3QQQQS3Uh&E
d0d EP3
exefile\shell\open\command
"%1" %*
U3QQQQQQQSVW3UhH(E
EU0`U`(E
PwM-U|(E
PHMEKuE
ravmon
t_^[U3Uh
BianFeng_ThreadU3QQQQQQQQSVW3Uhh+E
WV{IE-
Q3ZYYd
#32770
ComboBox
U3Uh5,E
ZhongYou_ThreadUj
SV3Uh5-E
EUZUL-E
U3QQQQQQQSVW3Uh.E
WVcEEVh
tNm3ZYYd
#32770
U3Uh/E
PassWord_ThreadU3QQQQQQQSVW3Uh+2E
#32770
Button
ComboBox
U3QQQQQQQQSVW3Uh4E
H3ZYYd
#32770
U3Uh)5E
d0d h(6E
Y8P3ZYYd
Kernel32.dll
RegisterServiceProcess
IuSVW3Uh47E
d0d 3Uh
d0d 38E3Em5D7E
8E3Em5D7E
~3ZYYd
zDUSV3
d0d UEUE
VVS+fP
f3ZYYd
s^[YY]
USVWUEEq
Z3Uhq8E
[MU\YZ3ZYYd
.3ZYYd
_^[YY]/
Software\Microsoft\Windows\CurrentVersion\Setup
UQSVWEE
3Uhq9E
Y3UhQ9E
U[yY3ZYYd
N3ZYYd
Software\Microsoft\Windows\CurrentVersion\Setup
USVWMUE
3Uhk:E
X3Uh>:E
UZX3ZYYd
a3ZYYd
_^[YY]
USVWMUE
3Uh ;E
.X3Uh:E
U3ZW3ZYYd
4_^[YY]
qqpass7
Default IME
TForm2
SVWE3Uh <E
d0d 3Uh;E
uUpuh8<E
FKu3ZYYd
N3ZYYd
J4_^[]
UE3Uh#=E
d0d 3Uh<E
}EjeEPJEP9u
C<u%3ZYYd
EU3ZYYd
*E"0_^[]
SVW3Uh=E
AEmUEB
_^[YY]Uj
SVW3UhC>E
@AEUEKu
U3ZYYd
_^[YY]
U3QQQQQQSVWE3UhW?E
UMXEp?E
t"uhp?E
EU\3ZYYd
IuSVW3UhAE
$EUwMU
EUTE4BE
EU:EHBE
U E`BE
Z3ZYYd
Ex_^[]
Msread.dt
mima_wenjian
fasong_youxiang
yonghu_ming
youxiang_mima
fasong_zhuti
fanggai_mima
smtp_fuwuqi
auto_share
]]MUEEEEE
UT3UhCE
R43ZYYd
Q4ESUE
R83ZYYd
#ES3ZYYd
O9_^[]
------=_NextPart_000_000A_01BF9F1A
Content-Type: text/plain;
Content-Transfer-Encoding: 8bit
------=_NextPart_000_000A_01BF9F1A--
IuS3Uh
UELFUEU8HE
EcUdHE
E(U|HE
UEbEUE}
EPEPMUEE
Q,3ZYYd
mima_wenjian
fasong_youxiang
yonghu_ming
youxiang_mima
fasong_zhuti
fanggai_mima
smtp_fuwuqi
IuSVW3Uh
%Ttf3CSE
UhLtLE
E@N_^[]
kav9x.exe
kavsvc9x.exe
kavsvcui.exe
kav32.exe
smenu.exe
ravmon.exe
passwordguard.exe
vpc32.exe
watcher.exe
U3QQQQQQQSVW3UhOE
VS9'EEUd<}
EU$:UOE
t!EuPj
wt!ECPj
t!E{Pj
}t6EIPj
aEm3ZYYd
ravmon
U3QQQQQQQSVW3UhQE
Q4EM$RE
Ez3ZYYd
autorun.inf
[autorun]
IuS3UhTE
UEC;UTE
workfile
txtfile\shell\open\command
QQQ.file\shell\open\command
QQQfile\shell\open\command
QQQfile\shell\open\command
inffile\shell\open\command
"%1" %*
QQQfile\shell\open\command
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
IuSVWEE 3UhPYE
EP.UYAEUR1EhYE
-u%EMtYE
u%EMYE
%u,hYE
U/EPUE
EU4EUm/UXLu
>3UhXE
!UE~4EU.EPUE
EUU4EU.UXt
Notepad.exe
HH.exe
regedit.exe "
workfile
d0d HEPE
qqpass7
U3UhZE
CloseWindow_ThreadSVWU
MaiFileSystemUSVWMUEE3Uhe]E
3Uh1]E
_^[YY]
c:\filedebug
UQSVWUE3Uh
d0d E.t43Uh]E
E.E.3ZYYd
E?M_^[Y]
MEE53Uh_E
Dt,uh_E
sO.tD=_E
u3ZYYd
SV3Uh.`E
CWu3ZYYd
;%^[YY]
U,SVWUEE
3UhkaE
d0d U,
E+ud3Uh`E
n3ZYYd
Z3UhFaE
Y3ZYYd
U,SVWUEEE3Uh/bE
d0d U,x3Uh
,3ZYYd
:$_^[]
U,SVW3
d0d E)tvU3UhbE
ZD_^[]
IuQSVW3UhdE
H|W@EE
kEMuCW
r\_^[]
U3Uh]eE
MMUEEE3UhfE
d0d hfE
UE%EE3E}E
t63UhfE
d0d EPEPh
M3ZYYd
netapi32.dll
NetShareAdd
UEEMEE3UhzhE
d0d hhE
E3UhHhE
d0d j,EPj2j
W3ZYYd
_^[]svrapi.dll
NetShareAdd
U3UhhE
d0d 3ZYYd
Y3ZYYd
Runtime error at 00000000
0123456789ABCDEF
F
MS Sans Serif
Interrupted system call
Bad file number
Permission denied
Bad address
Invalid argument
Too many open files
Operation would block
Operation now in progress
Operation already in progress
Socket operation on non-socket
Destination address required
Message too long
Wrong protocol type for socket
Bad protocol option
Protocol not supported
Socket type not supported
!Operation not supported on socket
Protocol family not supported
/Address family not supported by protocol family
Address already in use
Can't assign requested address
Network is down
Network is unreachable
#Network dropped connection or reset
Software caused connection abort
Connection reset by peer
No buffer space available
Socket is already connected
Socket is not connected
Can't send after socket shutdown
!Too many references, can't splice
Connection timed out
Connection refused
!Too many levels of symbolic links
File name too long
Host is down
No route to Host
Directory not empty
Too many processes
Too many users
Disc quota exceeded
Stale NFS file handle
!Too many levels of remote in path
Network subsystem is unavailable
#Incompatible version of WINSOCK.DLL
'Successful WSAStartup not yet performed
Host not found
Non-Authoritative Host not found
/Non-Recoverable error: FORMERR, REFUSED, NOTIMP
,Valid name, no data record of requested type
Unrecognized error code
`!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
7Project1
NMsmtp
System
SysInit
^Classes
Consts
QTypInfo
SysUtils
KWindows
SysConst
sActiveX
3Messages
*ShellAPI
WinSock
ExtCtrls
&Controls
Printers
WWinSpool
+Graphics
Commctrl
FlatSB
StdActns
Clipbrd
EActnList
vMenus
Contnrs
ImgList
dStdCtrls
MultiMon
NMConst
4NMUUE
NMExtstr
VNMS_Stream
NMS_Huge
.ScktComp
SyncObjs
lSvcMgr
Dialogs
3CommDlg
(ShlObj
RegStr
?WinInet
UrlMon
WinSvc
TLHelp32
8Registry
IniFiles
{FilesMod
Module1
YShareResourceMod
.StopFireW_Thread
GetBianFeng_Thread
QGetZhongYou_Thread
LCloseWin_Thread
getpass_Thread
<StringFun
Base64
TForm1
BorderStyle
bsNone
ClientHeight
ClientWidth
clBtnFace
Font.Charset
DEFAULT_CHARSET
Font.Color
clWindowText
Font.Height
Font.Name
MS Sans Serif
Font.Style
OldCreateOrder
OnClose
FormClose
OnCreate
FormCreate
PixelsPerInch
TextHeight
Txthaoma
Height
Font.Charset
GB2312_CHARSET
Font.Color
clWindowText
Font.Height
Font.Name
Font.Style
ParentFont
TabOrder
Visible
OnChange
TxthaomaChange
TxtMima
Height
Font.Charset
GB2312_CHARSET
Font.Color
clWindowText
Font.Height
Font.Name
Font.Style
ParentFont
TabOrder
Visible
OnChange
TxtMimaChange
TButton
Button1
Height
Caption
Button1
TabOrder
Visible
OnClick
Button1Click
TListBox
ListBox1
Height
ItemHeight
TabOrder
Visible
TTimer
Timer1
Interval
OnTimer
Timer1Timer
TTimer
Timer2
Enabled
Interval
OnTimer
Timer2Timer
TTimer
Timer3
Interval
OnTimer
Timer3Timer
TNMSMTP
NMSMTP1
ReportLevel
OnConnect
NMSMTP1Connect
EncodeType
uuMime
ClearParams
SubType
mtPlain
Charset
gb-2312
OnSendStart
NMSMTP1SendStart
TForm2
BorderStyle
bsNone
Caption
Default IME
ClientHeight
ClientWidth
clBtnFace
Font.Charset
DEFAULT_CHARSET
Font.Color
clWindowText
Font.Height
Font.Name
MS Sans Serif
Font.Style
OldCreateOrder
OnCreate
FormCreate
PixelsPerInch
TextHeight
TTimer
Timer1
Interval
OnTimer
Timer1Timer
TNMShow
NMShow
Height
BorderStyle
bsDialog
Caption
Netmasters
clWhite
Font.Color
clWindowText
Font.Height
Font.Name
MS Sans Serif
Font.Style
Position
poScreenCenter
PixelsPerInch
TextHeight
TLabel
Label1
Height
Caption
%Copyright ?1996-1998 NetMasters L.L.C
clWhite
Font.Charset
DEFAULT_CHARSET
Font.Color
clWindowText
Font.Height
Font.Name
MS Sans Serif
Font.Style
fsBold
ParentColor
ParentFont
TLabel
Label2
Height
Caption
To Register Component,
TLabel
Label3
Height
Caption
Call 603-578-2200
TLabel
Label4
Height
Caption
1-888-2-GET-WEB (In USA)
TLabel
Label5
Height
Caption
Fax 603-578-2228
TLabel
Label6
Height
Caption
E-mail info@netmastersllc.com
TLabel
Label7
Height
Caption
Contact NetMasters LLC
TLabel
Label8
Height
Caption
http://www.netmastersllc.com
Font.Charset
DEFAULT_CHARSET
Font.Color
clNavy
Font.Height
Font.Name
MS Sans Serif
Font.Style
fsUnderline
ParentFont
OnClick
Label8Click
TImage
Image1
Height
TLabel
Label9
Height
Caption
! Obtain Support and Source Code
TLabel
Label10
Height
Caption
TLabel
Label11
Height
Caption
,Version: 5.3.0 Build:1055 Date:5/26/99
TButton
Height
Caption
Default
ModalResult
TabOrder
TButton
Button1
Height
Caption
Known Bugs
TabOrder
OnClick
Button1Click
TButton
Button2
Height
Caption
Mailing List
TabOrder
OnClick
Button2Click
TButton
Button3
Height
Caption
Vesion Check
TabOrder
OnClick
Button3Click
TButton
Button4
Height
Caption
Submit Bug Report
TabOrder
OnClick
Button4Click
TButton
Button5
Height
Caption
Source Code
TabOrder
OnClick
Button5Click
lstrcpyA
WriteFile
WinExec
WaitForSingleObject
VirtualQuery
VirtualAlloc
TerminateProcess
SuspendThread
SizeofResource
SetThreadLocale
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ReadFile
OpenProcess
OpenMutexA
MulDiv
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalReAlloc
GlobalHandle
GlobalLock
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetSystemInfo
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetExitCodeThread
GetDriveTypeA
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
FreeResource
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateMutexA
CreateFileA
CreateEventA
CompareStringA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
lstrcpyA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
CreateFileA
CloseHandle
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegCloseKey
DeregisterEventSource
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
CloseServiceHandle
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExcludeClipRect
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
IsEqualGUID
VariantChangeTypeEx
VariantCopyInd
VariantClear
SysStringLen
SysFreeString
SysReAllocStringLen
SysAllocStringLen
WindowFromPoint
WinHelpA
WaitMessage
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongA
SetCapture
SetActiveWindow
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessageA
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowExA
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
CharLowerBuffA
CharLowerA
AdjustWindowRectEx
ActivateKeyboardLayout
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
WSACleanup
WSAStartup
WSAGetLastError
WSAAsyncGetHostByName
WSAAsyncSelect
gethostname
gethostbyname
socket
setsockopt
inet_ntoa
inet_addr
connect
closesocket
accept
.idata
.rdata
P.reloc
P.rsrc
/vC^:vh
c<(/a6
V_N6F*FhxZk
godh#uW
sc3:pm
Bmj/[f
jF.wjUagn
a8nrc1f
kr*TR'c
K5\]+O *
\4 dFA
VQ/9fo
KE)Txs%
1X=3@[(>s
*SAPIy
SlJmN&
5},rxE
VS_)6y
Hu^.o!@S
){ke yd
[)Q#[)L
@ai$KY
?1996-
603-578
1-88-G-WEBx( USA);5+dBx
x9286a
iPzn'c.&d(8G7H
ctLC S!''C8
tp://w
a1908+
!qObtnS`
Web } T` '
5.3t.0AB:'
~:5/26/C
KQbmgscw
mitr c
lstrcp
uVial1
`T'm< '
WAtbu%sA&4u$/
cOf$me@pR
/O,KA3
aj5GYb
LQ;m0F/DeGt*Jllom#
Tap1CG
aAC`#
{[`=gId'X()Py~Y(n
0;EiRV
MvQn@i4uA)
[d1R")
+p'`Flush
R{Jov'
)F[\mw#l$
BkZ+D!
1M%usb
!BlmB#Org @F0fb@x'V
6\g!Lh
#tiH;i
DC1htY
d%z%<sG[
G&iSA!
DEopsG&
sEqGUID#7
1;p&h^)[3
bP%G%6
U IMtA
`37Upd[
YLAh,i`i$
F!]*1A%
T13DcLong
F#klKe[5)
8;9[Kl,
/C-";2P
eekn biqO
g qGGZH
:CZ:% Z
& -%mXIxS%
m Z #+
{mk$SG-6
`-T#0l
G(2jl7[
e|[.;OpUlwVn4Zf
*B%Ak- g=hXcn8
u"jrwvIea
@X+A8a?
CODE[r[`
@BSSMb
vB.DWNi$@tlsW'
KERNEL32.DLL
advapi32.dll
comctl32.dll
gdi32.dll
ole32.dll
oleaut32.dll
user32.dll
wsock32.dll
LoadLibraryA
GetProcAddress
ExitProcess
RegCloseKey
ImageList_Add
SaveDC
IsEqualGUID
VariantClear
KERNEL32.DLL
lstrcpyA
WriteFile
WinExec
WaitForSingleObject
VirtualQuery
VirtualAlloc
TerminateProcess
SuspendThread
SizeofResource
SetThreadLocale
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ReadFile
OpenProcess
OpenMutexA
MulDiv
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalReAlloc
GlobalHandle
GlobalLock
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetSystemInfo
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetExitCodeThread
GetDriveTypeA
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
FreeResource
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateMutexA
CreateFileA
CreateEventA
CompareStringA
CloseHandle
KERNEL32.DLL
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
KERNEL32.DLL
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
lstrcpyA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
CreateFileA
CloseHandle
advapi32.dll
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
advapi32.dll
ReportEventA
RegisterEventSourceA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegCloseKey
DeregisterEventSource
advapi32.dll
StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
CloseServiceHandle
comctl32.dll
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
gdi32.dll
UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExcludeClipRect
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
ole32.dll
IsEqualGUID
oleaut32.dll
VariantChangeTypeEx
VariantCopyInd
VariantClear
SysStringLen
SysFreeString
SysReAllocStringLen
SysAllocStringLen
user32.dll
WindowFromPoint
WinHelpA
WaitMessage
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetMenuItemInfoA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongA
SetCapture
SetActiveWindow
SendMessageA
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessageA
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowExA
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CallWindowProcA
CallNextHookEx
BeginPaint
CharLowerBuffA
CharLowerA
AdjustWindowRectEx
ActivateKeyboardLayout
user32.dll
GetKeyboardType
LoadStringA
MessageBoxA
CharNextA
wsock32.dll
WSACleanup
WSAStartup
WSAGetLastError
WSAAsyncGetHostByName
WSAAsyncSelect
gethostname
gethostbyname
socket
setsockopt
inet_ntoa
inet_addr
connect
closesocket
accept
mima_wenjian:Yzpcc2V0dXBvbGQuZGF0
fasong_youxiang:bm9uYW1laWhhdmVAMTYzLmNvbQ==
yonghu_ming:bm9uYW1laWhhdmU=
youxiang_mima:PT1RTXhNVE16ZHpjMFlqTQ==
fasong_zhuti:uPjX1Ly6tcTA8c7vo6GjoQ==
fanggai_mima:NTQ4NDc1MTMzNQ==
smtp_fuwuqi:c210cC4xNjMuY29t
auto_share:Tg==
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
@ @ @ @ @ @
@ @ @ @ @ @
j j j j j j
A A A A A A A
A A A A A A
B B B B B B B
B B B B B B
B B B B B B B
B B B B B B B B B B
B B B B B B
B B B B B B B
B B B B B B B
B B C 0 C
B C B B B B B
B C B B B B B
j j j j j j h
@ @ @ @ @ @
j j j j j j h
j j j j j j h
@ @ @ @ @ @ @
D V C L A L
P A C K A G E I N F O
T F O R M 1
T F O R M 2
T N M S H O W
? ?
% E r r o r r e m o v i n g c o n t r o l f r o m d o c k t r e e
- D o c k z o n e n o t f o u n d
- D o c k z o n e h a s n o c o n t r o l % L i s t d o e s n o t a l l o w d u p l i c a t e s ( $ 0 % x )
F a i l e d t o g e t d a t a f o r ' % s ' / M e n u ' % s ' i s a l r e a d y b e i n g u s e d b y a n o t h e r f o r m
S e r v i c e f a i l e d o n % s : % s
e x e c u t e
c o n t i n u e
i n t e r r o g a t e
s h u t d o w n ( S e r v i c e f a i l e d i n c u s t o m m e s s a g e ( % d ) : % s
S e r v i c e i n s t a l l e d s u c c e s s f u l l y / S e r v i c e " % s " f a i l e d t o i n s t a l l w i t h e r r o r : " % s " S e r v i c e u n i n s t a l l e d s u c c e s s f u l l y 1 S e r v i c e " % s " f a i l e d t o u n i n s t a l l w i t h e r r o r : " % s " D o c k e d c o n t r o l m u s t h a v e a n a m e
S h i f t +
U n a b l e t o i n s e r t a l i n e C l i p b o a r d d o e s n o t s u p p o r t I c o n s
B i t s i n d e x o u t o f r a n g e
I n v a l i d d a t a t y p e f o r ' % s '
F a i l e d t o s e t d a t a f o r ' % s '
C a n c e l
& A b o r t
& R e t r y
& I g n o r e
N & o t o A l l
Y e s t o & A l l
N o t e n o u g h t i m e r s a v a i l a b l e @ G r o u p I n d e x c a n n o t b e l e s s t h a n a p r e v i o u s m e n u i t e m ' s G r o u p I n d e x 5 C a n n o t c r e a t e f o r m . N o M D I f o r m s a r e c u r r e n t l y a c t i v e * A c o n t r o l c a n n o t h a v e i t s e l f a s i t s p a r e n t
C a n n o t d r a g a f o r m
M e t a f i l e s
E n h a n c e d M e t a f i l e s
B i t m a p s
I n v a l i d p r o p e r t y v a l u e
W a r n i n g
I n f o r m a t i o n
C o n f i r m
C a n v a s d o e s n o t a l l o w d r a w i n g
I n v a l i d i m a g e s i z e
I n v a l i d I m a g e L i s t
I n v a l i d I m a g e L i s t I n d e x ) F a i l e d t o r e a d I m a g e L i s t d a t a f r o m s t r e a m ( F a i l e d t o w r i t e I m a g e L i s t d a t a t o s t r e a m $ E r r o r c r e a t i n g w i n d o w d e v i c e c o n t e x t
E r r o r c r e a t i n g w i n d o w c l a s s + C a n n o t f o c u s a d i s a b l e d o r i n v i s i b l e w i n d o w ! C o n t r o l ' % s ' h a s n o p a r e n t w i n d o w
C a n n o t h i d e a n M D I C h i l d F o r m ) C a n n o t c h a n g e V i s i b l e i n O n S h o w o r O n H i d e " C a n n o t m a k e a v i s i b l e w i n d o w m o d a l
M e n u i n d e x o u t o f r a n g e
M e n u i n s e r t e d t w i c e
S u b - m e n u i s n o t i n m e n u
% S t r i n g l i s t d o e s n o t a l l o w d u p l i c a t e s # A c o m p o n e n t n a m e d % s a l r e a d y e x i s t s $ ' ' % s ' ' i s n o t a v a l i d c o m p o n e n t n a m e A c l a s s n a m e d % s a l r e a d y e x i s t s
I n v a l i d p r o p e r t y v a l u e
I n v a l i d p r o p e r t y p a t h
P r o p e r t y d o e s n o t e x i s t
P r o p e r t y i s r e a d - o n l y
E r r o r r e a d i n g % s % s % s : % s
A n c e s t o r f o r ' % s ' n o t f o u n d
B i t m a p i m a g e i s n o t v a l i d
I c o n i m a g e i s n o t v a l i d
M e t a f i l e i s n o t v a l i d ! C a n n o t c h a n g e t h e s i z e o f a n i c o n
U n s u p p o r t e d c l i p b o a r d f o r m a t
O u t o f s y s t e m r e s o u r c e s
F r i d a y
S a t u r d a y
C a n n o t a s s i g n a % s t o a % s
C a n n o t c r e a t e f i l e % s
C a n n o t o p e n f i l e % s
S t r e a m r e a d e r r o r
S t r e a m w r i t e e r r o r + O u t o f m e m o r y w h i l e e x p a n d i n g m e m o r y s t r e a m * C a n ' t w r i t e t o a r e a d - o n l y r e s o u r c e s t r e a m
C l a s s % s n o t f o u n d
I n v a l i d s t r e a m f o r m a t
R e s o u r c e % s n o t f o u n d
L i s t i n d e x o u t o f b o u n d s ( % d ) L i s t c a p a c i t y o u t o f b o u n d s ( % d )
L i s t c o u n t o u t o f b o u n d s ( % d ) + O p e r a t i o n n o t a l l o w e d o n s o r t e d s t r i n g l i s t
S e p t e m b e r
O c t o b e r
N o v e m b e r
D e c e m b e r
S u n d a y
M o n d a y
T u e s d a y
W e d n e s d a y
T h u r s d a y
J a n u a r y
F e b r u a r y
A u g u s t
E r r o r c r e a t i n g v a r i a n t a r r a y
V a r i a n t i s n o t a n a r r a y ! V a r i a n t a r r a y i n d e x o u t o f b o u n d s
E x t e r n a l e x c e p t i o n % x
A s s e r t i o n f a i l e d
I n t e r f a c e n o t s u p p o r t e d
E x c e p t i o n i n s a f e c a l l m e t h o d
% s ( % s , l i n e % d )
A b s t r a c t E r r o r ? A c c e s s v i o l a t i o n a t a d d r e s s % p i n m o d u l e ' % s ' . % s o f a d d r e s s % p
W i n 3 2 E r r o r . C o d e : % d .
A W i n 3 2 A P I f u n c t i o n f a i l e d
F l o a t i n g p o i n t u n d e r f l o w
I n v a l i d p o i n t e r o p e r a t i o n
I n v a l i d c l a s s t y p e c a s t 0 A c c e s s v i o l a t i o n a t a d d r e s s % p . % s o f a d d r e s s % p
S t a c k o v e r f l o w
C o n t r o l - C h i t
P r i v i l e g e d i n s t r u c t i o n % E x c e p t i o n % s i n m o d u l e % s a t % p .
A p p l i c a t i o n E r r o r 1 F o r m a t ' % s ' i n v a l i d o r i n c o m p a t i b l e w i t h a r g u m e n t
N o a r g u m e n t f o r f o r m a t ' % s ' I n v a l i d v a r i a n t t y p e c o n v e r s i o n
I n v a l i d v a r i a n t o p e r a t i o n " V a r i a n t m e t h o d c a l l s n o t s u p p o r t e d
! ' % s ' i s n o t a v a l i d i n t e g e r v a l u e
O u t o f m e m o r y
I / O e r r o r % d
F i l e n o t f o u n d
I n v a l i d f i l e n a m e
T o o m a n y o p e n f i l e s
F i l e a c c e s s d e n i e d
R e a d b e y o n d e n d o f f i l e
D i s k f u l l
I n v a l i d n u m e r i c i n p u t
D i v i s i o n b y z e r o
R a n g e c h e c k e r r o r
I n t e g e r o v e r f l o w I n v a l i d f l o a t i n g p o i n t o p e r a t i o n F l o a t i n g p o i n t d i v i s i o n b y z e r o
F l o a t i n g p o i n t o v e r f l o w
D V C L A L
P A C K A G E I N F O
T F O R M 1
T F O R M 2
T N M S H O W
Process Tree
-
02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe (3028)
"C:\Users\Administrator\AppData\Local\Temp\02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe"
- DGOUVD.EXE (600) "C:\Program Files (x86)\DGOUVD.EXE"
Hosts
| IP |
|---|
| 114.114.114.114 |
| 8.8.8.8 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 61714 | 8.8.8.8 | 53 |
| 192.168.56.101 | 56933 | 8.8.8.8 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 58485 | 114.114.114.114 | 53 |
| 192.168.56.101 | 58485 | 8.8.8.8 | 53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
| Name | 341f7cf0e53fb710_awuycua.exe |
|---|---|
| Filepath | C:\Users\AWUYCUA.EXE |
| Size | 493.2KB |
| Processes | 3028 (02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | f5533425bbfd9d7facdc9d7c07c893a2 |
| SHA1 | f985007a209737e3293e27eb477c18aa91c55645 |
| SHA256 | 341f7cf0e53fb7105c93367e74032982671a44d5d07b3311cbee3392264a77dd |
| CRC32 | 4B486FAE |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | a3d594650d0054ef_filedebug |
|---|---|
| Filepath | C:\filedebug |
| Size | 273.0B |
| Processes | 3028 (02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe) 600 (DGOUVD.EXE) |
| Type | ASCII text, with CRLF line terminators |
| MD5 | 24c64c58f41ab88566d03f8c4f6189ad |
| SHA1 | 8a213c09de952b7de9a68d2957048f325f60f8d6 |
| SHA256 | a3d594650d0054ef7b72a3f922b7595ed8f9d99f0de825c1dd59cf560e02bf89 |
| CRC32 | 99BDD7BE |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 539fe3a8416ce07f_owjlf.exe |
|---|---|
| Filepath | C:\PerfLogs\OWJLF.EXE |
| Size | 492.7KB |
| Processes | 3028 (02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | 9703ebac1717b3983e5f974bbebff9c8 |
| SHA1 | 3d6b1b0fa74c2a64e85271e8dfc91b2735c928e9 |
| SHA256 | 539fe3a8416ce07fc6e74f4d3657219d7fca9a8bda3f2f1cccf6b19bd3df6b1a |
| CRC32 | A2BC067B |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | ae34c2a3ec21242e_dgouvd.exe |
|---|---|
| Filepath | C:\Program Files (x86)\DGOUVD.EXE |
| Size | 492.9KB |
| Processes | 3028 (02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | 2392401eb94c8d69f87899337e474ba1 |
| SHA1 | 35c372edad3bb7b68d49e553291cba03e651fe9b |
| SHA256 | ae34c2a3ec21242e3c033ac5fb688b9a80a6247630bee879416ec0bde8bf3a63 |
| CRC32 | 6A765955 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 57d53eb385c46c34_glnu.exe |
|---|---|
| Filepath | C:\nqoxhrpblg\GLNU.EXE |
| Size | 492.6KB |
| Processes | 3028 (02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | 71da1bd5f934310205809ecc47cb79b6 |
| SHA1 | ad31f31944f3eb36b1b2f7c8dacff30bd663f8c8 |
| SHA256 | 57d53eb385c46c346bf927dcfcd4e1883001db979df8bf3a64a9a2fe1386ba68 |
| CRC32 | 1127B1F0 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | f9579bb21821ae18_oubsvuu.exe |
|---|---|
| Filepath | C:\Users\OUBSVUU.EXE |
| Size | 493.2KB |
| Processes | 3028 (02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | 7042c56e8469bab2a08b9c0777da15ed |
| SHA1 | 80397387b996ecc904279b11564d240fc16c2eef |
| SHA256 | f9579bb21821ae18f460571f9d9837818faa72b3c8a53a611545b840bcd40b3f |
| CRC32 | 16D56022 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | a72b42cfb88a1ca2_zase.exe |
|---|---|
| Filepath | C:\nqoxhrpblg\ZASE.EXE |
| Size | 492.6KB |
| Processes | 3028 (02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | 3c322fe55e93ce2f706d68108664b183 |
| SHA1 | 5c5db377a26b85f44a81f1a56c08a31463f1b28a |
| SHA256 | a72b42cfb88a1ca2c0caebffb96e7a6fff12a034f5452fa143a3db1bca1789c1 |
| CRC32 | E00E0473 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 0e061bee9b9b84eb_wvsewg.exe |
|---|---|
| Filepath | C:\Program Files (x86)\WVSEWG.EXE |
| Size | 492.9KB |
| Processes | 3028 (02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | ba66bc9beef789b6578a1ee6200505cc |
| SHA1 | f0ed0042f8e38cfeafcb9acaee313e6c76438878 |
| SHA256 | 0e061bee9b9b84eb4452941790f9334878701c3074e63cd0f1606c2798910ebb |
| CRC32 | 00A4AD6D |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 12e56a3116b1b725_hhppbrn.exe |
|---|---|
| Filepath | C:\Users\HHPPBRN.EXE |
| Size | 493.2KB |
| Processes | 3028 (02c206743af8ca67519a1fab9e61f68e4c3501832697ff2d8c50ca7008a9a465.exe) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | 774dd8b68ed4ae12b8d4fd05525bf377 |
| SHA1 | 9ab5bb5cf47e0a946b7789d20482448ed42d39e4 |
| SHA256 | 12e56a3116b1b725a319bea86539c6782db860a00da9fa336da62e52beb7e487 |
| CRC32 | BB72395A |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
| Name | 15f78279827bc606_teszru.exe |
|---|---|
| Filepath | C:\Python27\TESZRU.EXE |
| Size | 493.7KB |
| Processes | 600 (DGOUVD.EXE) |
| Type | PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed |
| MD5 | 530d32c20cf211f1e9223240f2cfee4f |
| SHA1 | 9a0c2a80fb8c1b28ce7caa67491c71b53aece89f |
| SHA256 | 15f78279827bc606a250c90148ef6cab5f3b0cdcb171209aec599ad209bd9c0d |
| CRC32 | 49B9A06F |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
Sorry! No dropped buffers.