MD5: 226cdd70d29bedc75add085cff37a481
SHA1: 63a538269a95bbf3d21e30eaa6286d5af76cb33c
SHA256: 473e144165d62798df2cfe97c0539405fb7b6bf4459b49b71c74610ec4ba39fc
SSDeep: 98304:Wymr3TkH6ec9S9jdZAIUS9DzTKbjxLMmg zhE:W5Tyc9ojO Dzam2
Size: 4456448 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2017-08-19 07:49:26
Analyzed on: Windows7 SP1 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:3684

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:3684 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\System32\MSINET.OCX (267 bytes)
C:\Windows\System32\MSCOMCTL.OCX (50 bytes)
C:\Windows\System32\COMDLG32.OCX (307 bytes)
C:\Windows\System32\drivers\etc\hosts (3 bytes)

The Trojan deletes the following file(s):

C:\Windows\System32\drivers\etc\hosts (0 bytes)

Registry activity

The process %original file name%.exe:3684 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Interface\{2C247F24-8591-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{2C247F22-8591-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32]
"(Default)" = "C:\Windows\system32\COMDLG32.OCX"

[HKCR\Interface\{66833FE4-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{DD9DA664-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{48E59291-9880-11CF-9754-00AA00C00908}\TypeLib]
"Version" = "1.0"

[HKCR\CLSID\{C27CCE42-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\MSComDlg.CommonDialog.1\CLSID]
"(Default)" = "{F9043C85-F6F2-101A-A3C9-08002B2F49FB}"

[HKCR\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}\InprocServer32]
"(Default)" = "C:\Windows\system32\MSINET.OCX"

[HKCR\Interface\{2C247F26-8591-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\TypeLib\{48E59290-9880-11CF-9754-00AA00C00908}\1.0\0\win32]
"(Default)" = "C:\Windows\system32\MSINET.OCX"

[HKCR\Interface\{2C247F26-8591-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{C27CCE33-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\MSComctlLib.Slider\CLSID]
"(Default)" = "{F08DF954-8592-11D1-B16A-00C0F0283628}"

[HKCR\CLSID\{C27CCE36-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "Image Property Page Object"

[HKCR\Interface\{2C247F21-8591-11D1-B16A-00C0F0283628}]
"(Default)" = "IImageList"

[HKCR\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32]
"(Default)" = "C:\Windows\system32\COMDLG32.OCX"

[HKCR\CLSID\{C27CCE36-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{BDD1F053-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{C27CCE35-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "ImageList General Property Page Object"

[HKCR\CLSID\{C27CCE33-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "TabStrip General Property Page Object"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\MiscStatus]
"(Default)" = "0"

[HKCR\Interface\{F08DF952-8592-11D1-B16A-00C0F0283628}]
"(Default)" = "ISlider"

[HKCR\Interface\{DD9DA660-8594-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\MSINET.OCX, 1"

[HKCR\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\FLAGS]
"(Default)" = "2"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Interface\{1EFB6599-857C-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{35053A21-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{BDD1F049-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{1EFB6595-857C-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx, 1"

[HKCR\CLSID\{C27CCE3E-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{C74190B7-8589-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\Version]
"(Default)" = "2.0"

[HKCR\MSComctlLib.TabStrip\CLSID]
"(Default)" = "{1EFB6596-857C-11D1-B16A-00C0F0283628}"

[HKCR\Interface\{48E59291-9880-11CF-9754-00AA00C00908}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\Version]
"(Default)" = "2.0"

[HKCR\Interface\{DD9DA665-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\MiscStatus\1]
"(Default)" = "172433"

[HKCR\MSComctlLib.Toolbar.2\CLSID]
"(Default)" = "{66833FE6-8583-11D1-B16A-00C0F0283628}"

[HKCR\Interface\{8E3867AA-8586-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\MiscStatus]
"(Default)" = "0"

[HKCR\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{083039C2-13F4-11D1-8B7E-0000F8754DA1}\TypeLib]
"Version" = "1.2"

[HKCR\Interface\{C74190B4-8589-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{BDD1F049-858B-11D1-B16A-00C0F0283628}]
"(Default)" = "IListView"

[HKCR\Interface\{8E3867AA-8586-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}]
"(Default)" = "Microsoft ImageList Control 6.0 (SP6)"

[HKCR\Interface\{C74190B7-8589-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\MSComctlLib.ProgCtrl.2\CLSID]
"(Default)" = "{35053A22-8589-11D1-B16A-00C0F0283628}"

[HKCR\Interface\{66833FE4-8583-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\MSComctlLib.ImageListCtrl.2]
"(Default)" = "Microsoft ImageList Control 6.0 (SP6)"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\Version]
"(Default)" = "2.0"

[HKCR\Interface\{2C247F26-8591-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}]
"(Default)" = "Common Dialog Help Property Page Object"

[HKCR\Interface\{BDD1F04E-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\MSComDlg.CommonDialog\CurVer]
"(Default)" = "MSComDlg.CommonDialog.1"

[HKCR\Interface\{8E3867A4-8586-11D1-B16A-00C0F0283628}]
"(Default)" = "IPanels"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\MiscStatus\1]
"(Default)" = "132499"

[HKCR\Interface\{66833FE5-8583-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{DD9DA665-8594-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{48E59291-9880-11CF-9754-00AA00C00908}]
"(Default)" = "IInet"

[HKCR\Interface\{C74190B5-8589-11D1-B16A-00C0F0283628}]
"(Default)" = "ITreeViewEvents"

[HKCR\Interface\{C8A3DC00-8593-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\MSComctlLib.ProgCtrl\CLSID]
"(Default)" = "{35053A22-8589-11D1-B16A-00C0F0283628}"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\Version]
"(Default)" = "2.0"

[HKCR\MSComctlLib.ListViewCtrl]
"(Default)" = "Microsoft ListView Control 6.0 (SP6)"

[HKCR\Interface\{8E3867A4-8586-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{1EFB6597-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}\InprocServer32]
"(Default)" = "C:\Windows\system32\MSINET.OCX"

[HKCR\MSComctlLib.Toolbar.2]
"(Default)" = "Microsoft Toolbar Control 6.0 (SP6)"

[HKCR\Interface\{8E3867A4-8586-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{C27CCE3E-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "ListView General Property Page Object"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\MiscStatus]
"(Default)" = "0"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\VersionIndependentProgID]
"(Default)" = "InetCtls.Inet"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Interface\{1EFB6594-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\MiscStatus\1]
"(Default)" = "172433"

[HKCR\Interface\{8E3867A2-8586-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\MSComctlLib.SBarCtrl]
"(Default)" = "Microsoft StatusBar Control 6.0 (SP6)"

[HKCR\Interface\{DD9DA664-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\Interface\{35053A21-8589-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}]
"(Default)" = "Internet Control URL Property Page Object"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\MiscStatus\1]
"(Default)" = "132497"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}]
"(Default)" = "Microsoft StatusBar Control 6.0 (SP6)"

[HKCR\Interface\{DD9DA664-8594-11D1-B16A-00C0F0283628}]
"(Default)" = "IImageCombo"

[HKCR\Interface\{2C247F26-8591-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{C27CCE41-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "ListView Columns Property Page Object"

[HKCR\MSComctlLib.Slider]
"(Default)" = "Microsoft Slider Control 6.0 (SP6)"

[HKCR\Interface\{2C247F22-8591-11D1-B16A-00C0F0283628}]
"(Default)" = "ImageListEvents"

[HKCR\Interface\{48E59292-9880-11CF-9754-00AA00C00908}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{DD9DA664-8594-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{66833FE9-8583-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{BDD1F055-858B-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{BDD1F050-858B-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{C27CCE41-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Interface\{BDD1F053-858B-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\MiscStatus]
"(Default)" = "0"

[HKCR\Interface\{C74190B5-8589-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{BDD1F04C-858B-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{8E3867A4-8586-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{48E59292-9880-11CF-9754-00AA00C00908}\TypeLib]
"(Default)" = "{48E59290-9880-11CF-9754-00AA00C00908}"

[HKCR\Interface\{DD9DA665-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{2C247F21-8591-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{1EFB6594-857C-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}]
"(Default)" = "Microsoft Toolbar Control 6.0 (SP6)"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\MSComctlLib.ImageListCtrl.2\CLSID]
"(Default)" = "{2C247F23-8591-11D1-B16A-00C0F0283628}"

[HKCR\Interface\{BDD1F049-858B-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{2C247F24-8591-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{BDD1F051-858B-11D1-B16A-00C0F0283628}]
"(Default)" = "IColumnHeader"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx, 4"

[HKCR\Interface\{1EFB6594-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx, 12"

[HKCR\MSComctlLib.Slider.2\CLSID]
"(Default)" = "{F08DF954-8592-11D1-B16A-00C0F0283628}"

[HKCR\CLSID\{C27CCE34-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\CLSID\{C27CCE3A-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{1EFB6595-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{BDD1F04C-858B-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{48E59291-9880-11CF-9754-00AA00C00908}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}]
"(Default)" = "Microsoft TabStrip Control 6.0 (SP6)"

[HKCR\MSComctlLib.ImageListCtrl\CLSID]
"(Default)" = "{2C247F23-8591-11D1-B16A-00C0F0283628}"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\ProgID]
"(Default)" = "MSComctlLib.Toolbar.2"

[HKCR\MSComctlLib.ListViewCtrl.2\CLSID]
"(Default)" = "{BDD1F04B-858B-11D1-B16A-00C0F0283628}"

[HKCR\MSComctlLib.SBarCtrl.2\CLSID]
"(Default)" = "{8E3867A3-8586-11D1-B16A-00C0F0283628}"

[HKCR\Interface\{66833FED-8583-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{8E3867A2-8586-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{1EFB6599-857C-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASMANCS]
"FileTracingMask" = "4294901760"

[HKCR\Interface\{DD9DA665-8594-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{BDD1F04C-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{F08DF953-8592-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASMANCS]
"FileDirectory" = "%windir%\tracing"

[HKCR\Interface\{C74190B7-8589-11D1-B16A-00C0F0283628}]
"(Default)" = "INodes"

[HKCR\Interface\{DD9DA660-8594-11D1-B16A-00C0F0283628}]
"(Default)" = "IComboItem"

[HKCR\Interface\{C74190B8-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{1EFB6595-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{66833FED-8583-11D1-B16A-00C0F0283628}]
"(Default)" = "IButtonMenu"

[HKCR\Interface\{F08DF953-8592-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{C27CCE39-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "StatusBar General Property Page Object"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32]
"(Default)" = "C:\Windows\system32\MSINET.OCX"

[HKCR\MSComctlLib.ProgCtrl\CurVer]
"(Default)" = "MSComctlLib.ProgCtrl.2"

[HKCR\Interface\{083039C2-13F4-11D1-8B7E-0000F8754DA1}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\Version]
"(Default)" = "2.0"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASAPI32]
"FileDirectory" = "%windir%\tracing"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\VersionIndependentProgID]
"(Default)" = "MSComDlg.CommonDialog"

[HKCR\TypeLib\{48E59290-9880-11CF-9754-00AA00C00908}\1.0\HELPDIR]
"(Default)" = ""

[HKCR\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\HELPDIR]
"(Default)" = ""

[HKCR\MSComctlLib.ImageComboCtl.2\CLSID]
"(Default)" = "{DD9DA666-8594-11D1-B16A-00C0F0283628}"

[HKCR\Interface\{66833FE4-8583-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{C27CCE34-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "Tab Property Page Object"

[HKCR\Interface\{2C247F21-8591-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{66833FE9-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{F9043C87-F6F2-101A-A3C9-08002B2F49FB}\TypeLib]
"(Default)" = "{F9043C88-F6F2-101A-A3C9-08002B2F49FB}"

[HKCR\MSComctlLib.Toolbar\CurVer]
"(Default)" = "MSComctlLib.Toolbar.2"

[HKCR\CLSID\{C27CCE3B-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "Progress Bar General Property Page Object"

[HKCR\Interface\{BDD1F049-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{C74190B5-8589-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{BDD1F051-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{BDD1F050-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Interface\{C74190B5-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\MSComctlLib.ImageComboCtl.2]
"(Default)" = "Microsoft ImageComboBox Control 6.0 (SP6)"

[HKCR\Interface\{2C247F22-8591-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{1EFB6597-857C-11D1-B16A-00C0F0283628}]
"(Default)" = "ITabs"

[HKCR\Interface\{8E3867A2-8586-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{8E3867AA-8586-11D1-B16A-00C0F0283628}]
"(Default)" = "IPanel"

[HKCR\CLSID\{C27CCE3D-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32]
"(Default)" = "C:\Windows\system32\COMDLG32.OCX"

[HKCR\MSComctlLib.TabStrip\CurVer]
"(Default)" = "MSComctlLib.TabStrip.2"

[HKCR\Interface\{66833FE7-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{2C247F21-8591-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{66833FE7-8583-11D1-B16A-00C0F0283628}]
"(Default)" = "IButtons"

[HKCR\Interface\{1EFB6597-857C-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{BDD1F04A-858B-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\VersionIndependentProgID]
"(Default)" = "MSComctlLib.ListViewCtrl"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{66833FEB-8583-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\Version]
"(Default)" = "2.0"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\VersionIndependentProgID]
"(Default)" = "MSComctlLib.ImageListCtrl"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKCR\MSComctlLib.SBarCtrl\CurVer]
"(Default)" = "MSComctlLib.SBarCtrl.2"

[HKCR\MSComctlLib.ListViewCtrl.2]
"(Default)" = "Microsoft ListView Control 6.0 (SP6)"

[HKCR\Interface\{C74190B7-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{C27CCE32-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{BDD1F050-858B-11D1-B16A-00C0F0283628}]
"(Default)" = "IColumnHeaders"

[HKCR\InetCtls.Inet.1]
"(Default)" = "Microsoft Internet Transfer Control 6.0 (SP6)"

[HKCR\Interface\{DD9DA660-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\InetCtls.Inet\CurVer]
"(Default)" = "InetCtls.Inet.1"

[HKCR\Interface\{C8A3DC00-8593-11D1-B16A-00C0F0283628}]
"(Default)" = "IControls"

[HKCR\Interface\{BDD1F053-858B-11D1-B16A-00C0F0283628}]
"(Default)" = "IListSubItems"

[HKCR\MSComctlLib.ImageComboCtl]
"(Default)" = "Microsoft ImageComboBox Control 6.0 (SP6)"

[HKCR\TypeLib\{48E59290-9880-11CF-9754-00AA00C00908}\1.0]
"(Default)" = "Microsoft Internet Transfer Control 6.0 (SP6)"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{F9043C87-F6F2-101A-A3C9-08002B2F49FB}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\CLSID\{C27CCE32-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "TreeView General Property Page Object"

[HKCR\Interface\{DD9DA664-8594-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{C27CCE3C-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{2C247F24-8591-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{BDD1F04A-858B-11D1-B16A-00C0F0283628}]
"(Default)" = "ListViewEvents"

[HKCR\Interface\{2C247F24-8591-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{8E3867AA-8586-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{BDD1F053-858B-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Interface\{66833FE9-8583-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\MSComDlg.CommonDialog.1]
"(Default)" = "Microsoft Common Dialog Control, version 6.0 (SP6)"

[HKCR\Interface\{BDD1F055-858B-11D1-B16A-00C0F0283628}]
"(Default)" = "IListSubItem"

[HKCR\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}]
"(Default)" = "Common Dialog Color Property Page Object"

[HKCR\Interface\{083039C2-13F4-11D1-8B7E-0000F8754DA1}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}]
"(Default)" = "Microsoft ProgressBar Control 6.0 (SP6)"

[HKCR\Interface\{DD9DA662-8594-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\MiscStatus]
"(Default)" = "0"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{1EFB6595-857C-11D1-B16A-00C0F0283628}]
"(Default)" = "ITabStripEvents"

[HKCR\Interface\{35053A21-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{66833FE4-8583-11D1-B16A-00C0F0283628}]
"(Default)" = "IToolbar"

[HKCR\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}]
"(Default)" = "Common Dialog Print Property Page Object"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\VersionIndependentProgID]
"(Default)" = "MSComctlLib.Toolbar"

[HKCR\Interface\{1EFB6594-857C-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\Version]
"(Default)" = "1.2"

[HKCR\MSComctlLib.ImageListCtrl\CurVer]
"(Default)" = "MSComctlLib.ImageListCtrl.2"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASMANCS]
"EnableFileTracing" = "0"

[HKCR\Interface\{1EFB6594-857C-11D1-B16A-00C0F0283628}]
"(Default)" = "ITabStrip"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx, 1916"

[HKCR\Interface\{C8A3DC00-8593-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\InetCtls.Inet]
"(Default)" = "Microsoft Internet Transfer Control 6.0 (SP6)"

[HKCR\Interface\{1EFB6599-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{35053A20-8589-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{F9043C87-F6F2-101A-A3C9-08002B2F49FB}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{66833FE5-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{F08DF952-8592-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\MSComctlLib.ImageListCtrl]
"(Default)" = "Microsoft ImageList Control 6.0 (SP6)"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}]
"(Default)" = "Microsoft ListView Control 6.0 (SP6)"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx, 3"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}]
"(Default)" = "Microsoft Common Dialog Control, version 6.0 (SP6)"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{BDD1F04C-858B-11D1-B16A-00C0F0283628}]
"(Default)" = "IListItems"

[HKCR\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}]
"(Default)" = "Internet Control General Property Page Object"

[HKCR\MSComctlLib.Toolbar]
"(Default)" = "Microsoft Toolbar Control 6.0 (SP6)"

[HKCR\Interface\{DD9DA660-8594-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\ProgID]
"(Default)" = "MSComctlLib.ListViewCtrl.2"

[HKCR\Interface\{F9043C87-F6F2-101A-A3C9-08002B2F49FB}]
"(Default)" = "ICommonDialogEvents"

[HKCR\Interface\{F08DF953-8592-11D1-B16A-00C0F0283628}]
"(Default)" = "ISliderEvents"

[HKCR\Interface\{1EFB6595-857C-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx, 2"

[HKCR\Interface\{BDD1F04A-858B-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{BDD1F055-858B-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{C27CCE3B-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{C74190B5-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}]
"(Default)" = "Microsoft Internet Transfer Control 6.0 (SP6)"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\MiscStatus]
"(Default)" = "0"

[HKCR\Interface\{8E3867A4-8586-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\VersionIndependentProgID]
"(Default)" = "MSComctlLib.Slider"

[HKCR\Interface\{F08DF953-8592-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{DD9DA660-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{C27CCE39-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}]
"(Default)" = "IStatusBar"

[HKCR\Interface\{35053A20-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\MSComctlLib.Slider.2]
"(Default)" = "Microsoft Slider Control 6.0 (SP6)"

[HKCR\MSComctlLib.Toolbar\CLSID]
"(Default)" = "{66833FE6-8583-11D1-B16A-00C0F0283628}"

[HKCR\MSComctlLib.SBarCtrl.2]
"(Default)" = "Microsoft StatusBar Control 6.0 (SP6)"

[HKCR\Interface\{66833FE7-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{C8A3DC00-8593-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\VersionIndependentProgID]
"(Default)" = "MSComctlLib.ImageComboCtl"

[HKCR\MSComctlLib.TreeCtrl\CurVer]
"(Default)" = "MSComctlLib.TreeCtrl.2"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\ProgID]
"(Default)" = "MSComDlg.CommonDialog.1"

[HKCR\MSComctlLib.TreeCtrl]
"(Default)" = "Microsoft TreeView Control 6.0 (SP6)"

[HKCR\Interface\{C74190B4-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\TypeLib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0\HELPDIR]
"(Default)" = ""

[HKCR\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx, 10"

[HKCR\Interface\{C74190B8-8589-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{48E59291-9880-11CF-9754-00AA00C00908}\TypeLib]
"(Default)" = "{48E59290-9880-11CF-9754-00AA00C00908}"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{35053A21-8589-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\TypeLib]
"Version" = "2.0"

[HKCR\TypeLib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0]
"(Default)" = "Microsoft Windows Common Controls 6.0 (SP6)"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\ProgID]
"(Default)" = "MSComctlLib.ProgCtrl.2"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx, 16"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASMANCS]
"ConsoleTracingMask" = "4294901760"

[HKCR\Interface\{35053A20-8589-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{2C247F22-8591-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\TypeLib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0\FLAGS]
"(Default)" = "2"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASAPI32]
"FileTracingMask" = "4294901760"
"EnableConsoleTracing" = "0"

[HKCR\MSComctlLib.ListViewCtrl\CurVer]
"(Default)" = "MSComctlLib.ListViewCtrl.2"

[HKCR\Interface\{8E3867A2-8586-11D1-B16A-00C0F0283628}]
"(Default)" = "IStatusBarEvents"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\MiscStatus]
"(Default)" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASMANCS]
"MaxFileSize" = "1048576"

[HKCR\InetCtls.Inet.1\CLSID]
"(Default)" = "{48E59293-9880-11CF-9754-00AA00C00908}"

[HKCR\Interface\{1EFB6599-857C-11D1-B16A-00C0F0283628}]
"(Default)" = "ITab"

[HKCR\InetCtls.Inet\CLSID]
"(Default)" = "{48E59293-9880-11CF-9754-00AA00C00908}"

[HKCR\Interface\{1EFB6597-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32]
"(Default)" = "C:\Windows\system32\COMDLG32.OCX"

[HKCR\CLSID\{C27CCE3F-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{66833FE7-8583-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{F9043C87-F6F2-101A-A3C9-08002B2F49FB}\TypeLib]
"Version" = "1.2"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Interface\{DD9DA662-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\ProgID]
"(Default)" = "MSComctlLib.Slider.2"

[HKCR\Interface\{66833FEB-8583-11D1-B16A-00C0F0283628}]
"(Default)" = "IButtonMenus"

[HKCR\Interface\{35053A20-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{C74190B8-8589-11D1-B16A-00C0F0283628}]
"(Default)" = "INode"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\COMDLG32.OCX, 1"

[HKCR\Interface\{BDD1F04E-858B-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{C27CCE3D-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "Slider Appearance Property Page Object"

[HKCR\Interface\{BDD1F04A-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{48E59292-9880-11CF-9754-00AA00C00908}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\TypeLib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0\0\win32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{35053A21-8589-11D1-B16A-00C0F0283628}]
"(Default)" = "IProgressBarEvents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCR\MSComctlLib.TreeCtrl.2]
"(Default)" = "Microsoft TreeView Control 6.0 (SP6)"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\Version]
"(Default)" = "2.0"

[HKCR\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}]
"(Default)" = "Common Dialog Open Property Page Object"

[HKCR\Interface\{DD9DA662-8594-11D1-B16A-00C0F0283628}]
"(Default)" = "IComboItems"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\MiscStatus]
"(Default)" = "0"

[HKCR\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32]
"(Default)" = "C:\Windows\system32\COMDLG32.OCX"

[HKCR\Interface\{083039C2-13F4-11D1-8B7E-0000F8754DA1}]
"(Default)" = "ICommonDialog"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCR\TypeLib\{48E59290-9880-11CF-9754-00AA00C00908}\1.0\FLAGS]
"(Default)" = "2"

[HKCR\Interface\{C74190B8-8589-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{66833FEB-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\Version]
"(Default)" = "2.0"

[HKCR\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{C27CCE40-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "ListView Images Property Page Object"

[HKCR\Interface\{BDD1F04E-858B-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\MiscStatus]
"(Default)" = "0"

[HKCR\Interface\{DD9DA662-8594-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{2C247F26-8591-11D1-B16A-00C0F0283628}]
"(Default)" = "IImage"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{C27CCE38-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\MiscStatus\1]
"(Default)" = "237969"

[HKCR\Interface\{C74190B4-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{C74190B7-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{C27CCE35-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{DD9DA665-8594-11D1-B16A-00C0F0283628}]
"(Default)" = "DImageComboEvents"

[HKCR\MSComctlLib.ImageComboCtl\CLSID]
"(Default)" = "{DD9DA666-8594-11D1-B16A-00C0F0283628}"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\MiscStatus\1]
"(Default)" = "165265"

[HKCR\Interface\{BDD1F050-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\MSComctlLib.SBarCtrl\CLSID]
"(Default)" = "{8E3867A3-8586-11D1-B16A-00C0F0283628}"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\ProgID]
"(Default)" = "MSComctlLib.TabStrip.2"

[HKCR\Interface\{BDD1F051-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{66833FE7-8583-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\Version]
"(Default)" = "2.0"

[HKCR\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\ToolboxBitmap32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx, 17"

[HKCR\CLSID\{C27CCE42-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "ImageComboBox General Property Page Object"

[HKCR\Interface\{66833FE9-8583-11D1-B16A-00C0F0283628}]
"(Default)" = "IButton"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{66833FEB-8583-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{66833FE5-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{1EFB6599-857C-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{2C247F24-8591-11D1-B16A-00C0F0283628}]
"(Default)" = "IImages"

[HKCR\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}]
"(Default)" = "Common Dialog Font Property Page Object"

[HKCR\MSComctlLib.TabStrip]
"(Default)" = "Microsoft TabStrip Control 6.0 (SP6)"

[HKCR\Interface\{66833FE4-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{BDD1F04E-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\VersionIndependentProgID]
"(Default)" = "MSComctlLib.TabStrip"

[HKCR\Interface\{DD9DA662-8594-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3E 00 00 00 09 00 00 00 00 00 00 00"

[HKCR\CLSID\{C27CCE3F-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "ListView Sort Property Page Object"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\TypeLib]
"(Default)" = "{48E59290-9880-11CF-9754-00AA00C00908}"

[HKCR\MSComctlLib.TabStrip.2]
"(Default)" = "Microsoft TabStrip Control 6.0 (SP6)"

[HKCR\Interface\{BDD1F049-858B-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}]
"(Default)" = "Microsoft TreeView Control 6.0 (SP6)"

[HKCR\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32]
"(Default)" = "C:\Windows\system32\COMDLG32.OCX"

[HKCR\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASAPI32]
"EnableFileTracing" = "0"

[HKCR\Interface\{48E59292-9880-11CF-9754-00AA00C00908}]
"(Default)" = "DInetEvents"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\MiscStatus]
"(Default)" = "0"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\Version]
"(Default)" = "1.0"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\ProgID]
"(Default)" = "MSComctlLib.ImageComboCtl.2"

[HKCR\Interface\{F08DF952-8592-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}\MiscStatus\1]
"(Default)" = "131473"

[HKCR\MSComctlLib.ImageComboCtl\CurVer]
"(Default)" = "MSComctlLib.ImageComboCtl.2"

[HKCR\Interface\{8E3867A1-8586-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{66833FED-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\ProgID]
"(Default)" = "InetCtls.Inet.1"

[HKCR\Interface\{66833FE9-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{BDD1F04C-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\MSComctlLib.ProgCtrl]
"(Default)" = "Microsoft ProgressBar Control 6.0 (SP6)"

[HKCR\Interface\{2334D2B1-713E-11CF-8AE5-00AA00C00905}]
"(Default)" = "IVBDataObject"

[HKCR\CLSID\{C27CCE3A-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "Panel Property Page Object"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASAPI32]
"MaxFileSize" = "1048576"

[HKCR\Interface\{BDD1F050-858B-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{BDD1F04A-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\0\win32]
"(Default)" = "C:\Windows\system32\COMDLG32.OCX"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\MiscStatus]
"(Default)" = "0"

[HKCR\Interface\{083039C2-13F4-11D1-8B7E-0000F8754DA1}\TypeLib]
"(Default)" = "{F9043C88-F6F2-101A-A3C9-08002B2F49FB}"

[HKCR\MSComctlLib.TreeCtrl.2\CLSID]
"(Default)" = "{C74190B6-8589-11D1-B16A-00C0F0283628}"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}]
"(Default)" = "Microsoft Slider Control 6.0 (SP6)"

[HKCR\Interface\{2C247F22-8591-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{BDD1F04E-858B-11D1-B16A-00C0F0283628}]
"(Default)" = "IListItem"

[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\TypeLib]
"(Default)" = "{F9043C88-F6F2-101A-A3C9-08002B2F49FB}"

[HKCR\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2]
"(Default)" = "Microsoft Common Dialog Control 6.0 (SP6)"

[HKCR\MSComctlLib.TabStrip.2\CLSID]
"(Default)" = "{1EFB6596-857C-11D1-B16A-00C0F0283628}"

[HKCR\CLSID\{C27CCE38-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "Button Property Page Object"

[HKCR\Interface\{C74190B8-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{C74190B4-8589-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\MSComctlLib.TreeCtrl\CLSID]
"(Default)" = "{C74190B6-8589-11D1-B16A-00C0F0283628}"

[HKCR\CLSID\{C27CCE37-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "Toolbar General Property Page Object"

[HKCR\Interface\{C74190B4-8589-11D1-B16A-00C0F0283628}]
"(Default)" = "ITreeView"

[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\VersionIndependentProgID]
"(Default)" = "MSComctlLib.ProgCtrl"

[HKCR\Interface\{BDD1F053-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{C27CCE40-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\ProgID]
"(Default)" = "MSComctlLib.TreeCtrl.2"

[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}]
"(Default)" = "Microsoft ImageComboBox Control 6.0 (SP6)"

[HKCR\Interface\{2C247F21-8591-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\VersionIndependentProgID]
"(Default)" = "MSComctlLib.SBarCtrl"

[HKCR\Interface\{8E3867AA-8586-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{35053A20-8589-11D1-B16A-00C0F0283628}]
"(Default)" = "IProgressBar"

[HKCR\MSComctlLib.Slider\CurVer]
"(Default)" = "MSComctlLib.Slider.2"

[HKCR\Interface\{8E3867A2-8586-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\CLSID\{C27CCE3C-8596-11D1-B16A-00C0F0283628}]
"(Default)" = "Slider General Property Page Object"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{66833FED-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\ProgID]
"(Default)" = "MSComctlLib.SBarCtrl.2"

[HKCR\Interface\{BDD1F055-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\MSComctlLib.ProgCtrl.2]
"(Default)" = "Microsoft ProgressBar Control 6.0 (SP6)"

[HKLM\SOFTWARE\Microsoft\Tracing\226cdd70d29bedc75add085cff37a481_RASMANCS]
"EnableConsoleTracing" = "0"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\MSComDlg.CommonDialog]
"(Default)" = "Microsoft Common Dialog Control, version 6.0 (SP6)"

[HKCR\Interface\{66833FE5-8583-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\MSComctlLib.ListViewCtrl\CLSID]
"(Default)" = "{BDD1F04B-858B-11D1-B16A-00C0F0283628}"

[HKCR\MSComDlg.CommonDialog\CLSID]
"(Default)" = "{F9043C85-F6F2-101A-A3C9-08002B2F49FB}"

[HKCR\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}]
"(Default)" = "IVBDataObjectFiles"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\VersionIndependentProgID]
"(Default)" = "MSComctlLib.TreeCtrl"

[HKCR\Interface\{48E59292-9880-11CF-9754-00AA00C00908}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{F08DF952-8592-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}\ProgID]
"(Default)" = "MSComctlLib.ImageListCtrl.2"

[HKCR\Interface\{BDD1F051-858B-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{1EFB6597-857C-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{66833FED-8583-11D1-B16A-00C0F0283628}\TypeLib]
"Version" = "2.0"

[HKCR\Interface\{F08DF952-8592-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{F08DF953-8592-11D1-B16A-00C0F0283628}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\Interface\{66833FE5-8583-11D1-B16A-00C0F0283628}]
"(Default)" = "IToolbarEvents"

[HKCR\Interface\{66833FEB-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{BDD1F051-858B-11D1-B16A-00C0F0283628}\TypeLib]
"(Default)" = "{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}"

[HKCR\CLSID\{C27CCE37-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"(Default)" = "C:\Windows\system32\mscomctl.ocx"

[HKCR\Interface\{BDD1F055-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following registry key(s):

[HKCR\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}]
[HKCR\CLSID\{C27CCE37-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE3A-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE3C-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE3B-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE39-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE32-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE3D-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C74190B6-8589-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE3E-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}]
[HKCR\CLSID\{C27CCE42-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE34-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]
[HKCR\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}]
[HKCR\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}]
[HKCR\CLSID\{C27CCE3F-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}]
[HKCR\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE36-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}]
[HKCR\CLSID\{2C247F23-8591-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}]
[HKCR\CLSID\{C27CCE33-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}]
[HKCR\CLSID\{C27CCE41-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE38-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{C27CCE40-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}]
[HKCR\CLSID\{C27CCE35-8596-11D1-B16A-00C0F0283628}]
[HKCR\CLSID\{F08DF954-8592-11D1-B16A-00C0F0283628}]

The Trojan deletes the following value(s) in system registry:

[HKCR\CLSID\{C27CCE41-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE3B-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE40-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE33-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE36-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}\InprocServer32]
"ThreadingModel"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCR\CLSID\{C27CCE34-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE32-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE38-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32]
"ThreadingModel"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCR\CLSID\{C27CCE39-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE3D-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE37-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE35-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKCR\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE42-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\CLSID\{C27CCE3E-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE3A-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCR\CLSID\{C27CCE3C-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCR\CLSID\{C27CCE3F-8596-11D1-B16A-00C0F0283628}\InprocServer32]
"ThreadingModel"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

[HKCR\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}\InprocServer32]
"ThreadingModel"

Dropped PE files

HOSTS file anomalies

The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 3812 bytes in size. The following strings are added to the hosts file listed below:

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name:
Product Name: LieerD
Product Version: 1.00
Legal Copyright:
Legal Trademarks:
Original Filename: IN Jamu.exe
Internal Name: IN Jamu
File Version: 1.00
File Description:
Comments:
Language: English (United States)

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://pekalonganindo.com/fileindo2/PBIndo.txt	108.167.161.55
dns.msftncsi.com	131.107.255.255

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /fileindo2/PBIndo.txt HTTP/1.1

Accept: image/gif,image/x-xbitmap,image/jpeg,image/pjpeg,*/*

User-Agent: Microsoft URL Control - 6.01.9782

Host: pekalonganindo.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 404 Not Found

Server: nginx/1.12.1

Date: Sat, 16 Sep 2017 02:46:47 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

Expires: Wed, 11 Jan 1984 05:00:00 GMT

Cache-Control: no-cache, must-revalidate, max-age=0

Link: <hXXp://pekalonganindo.com/index.php/wp-json/>; rel="hXXps://api.w.org/"
4f..<!DOCTYPE html>.<html lang="en-US" class="no-js no-svg"&g
t;.<head>.<meta charset="..81..UTF-8">.<meta name="view
port" content="width=device-width, initial-scale=1">.<link rel="
profile" href="hXXp://gmpg.org/xfn/11">....78..<script>(funct
ion(html){html.className = html.className.replace(/\bno-js\b/,'js')})(
document.documentElement);</script>...36..<title>Page not 
found – Pekalongan Indo</title>...3a..<link rel='dns-pr
efetch' href='//fonts.googleapis.com' />...2d..<link rel='dns-pr
efetch' href='//s.w.org' />...47..<link href='hXXps://fonts.gsta
tic.com' crossorigin rel='preconnect' />...8a..<link rel="altern
ate" type="application/rss xml" title="Pekalongan Indo » Feed" h
ref="hXXp://pekalonganindo.com/index.php/feed/" />...9c..<link r
el="alternate" type="application/rss xml" title="Pekalongan Indo &raqu
o; Comments Feed" href="hXXp://pekalonganindo.com/index.php/comments/f
eed/" />...118...<!-- This site uses the Google Analytics by Mon
sterInsights plugin v 6.2.3 - hXXps://VVV.monsterinsights.com/ -->.
<!-- Normally you will find the Google Analytics tracking code here
, but the webmaster disabled your user group. -->.<!-- / Google 
Analytics by MonsterInsights -->....3f....<script type="text/jav
ascript">....window._wpemojiSettings = ..8ba..{"baseUrl":"https:\/\
/s.w.org\/images\/core\/emoji\/2.3\/72x72\/","ext":".png","svgUrl":"ht
tps:\/\/s.w.org\/images\/core\/emoji\/2.3\/svg\/","svgExt":".svg",
<<< skipped >>>

The Trojan connects to the servers at the folowing location(s):

.text

`.data

.rsrc

@.vmp0

.vmp1

MSINET.OCX

InetCtlsObjects.Inet

COMDLG32.OCX

MSComDlg.CommonDialog

mscomctl.ocx

MSComctlLib.ProgressBar

VBA6.DLL

shell32.dll

ShellExecuteA

%Program Files% (x86)\Microsoft Visual Studio\VB98\VB6.OLB

IC:\Windows\SysWow64\MSINET.oca

C:\Windows\SysWOW64\mscomctl.oca

user32.dll

GetAsyncKeyState

PSAPI.DLL

;!!!{%**

.NTT[kro

//' ))"%

.sy{s

Paint.NET v3.5.10

2010:04:24 16:11:12

IEC hXXp://VVV.iec.ch

.IEC 61966-2.1 Default RGB colour space - sRGB

CRT curv

.NW~F

V?.wf

{].FT

RI.eB

%v.Xo

?.FA#

SWeB

/%F&5y

".pT*2>T

Trm.cPTy

.NwFr

Te.arya

$nW.Ry

Í6:

ONECIT.Inc

VVV.pekalongan-kommuniti.com

strURL

92.222.90.20 VVV.pekalongan-kommuniti.net

92.222.90.20 pekalongan-kommuniti.net

92.222.90.20 VVV.rezpektor-key.net

92.222.90.20 rezpektor-key.net

92.222.90.20 vista-tigabelas.blogspot.com

92.222.90.20 vista-tigabelas.blogspot.co.id

92.222.90.20 vista-tigabelas.blogspot.de

92.222.90.20 VVV.gelo-cheats.com

92.222.90.20 gelo-cheats.com

92.222.90.20 bancyberz.com

92.222.90.20 VVV.bancyberz.com

92.222.90.20 gudang-ngecit.com

92.222.90.20 VVV.gudang-ngecit.com

92.222.90.20 mediadisk.net

92.222.90.20 cupit-cheat.com

92.222.90.20 VVV.cupit-cheat.com

92.222.90.20 VVV.mediadisk.net

92.222.90.20 propekalongan-kommunity.blogspot.co.id

92.222.90.20 VVV.propekalongan-kommunity.blogspot.co.id

92.222.90.20 propekalongan-kommunity.blogspot.com

92.222.90.20 VVV.propekalongan-kommunity.blogspot.com

92.222.90.20 propekalongan-kommunity.blogspot.sg

92.222.90.20 VVV.propekalongan-kommunity.blogspot.sg

92.222.90.20 kotakciter.blogspot.co.id

92.222.90.20 VVV.kotakciter.blogspot.co.id

92.222.90.20 kotakciter.blogspot.com

92.222.90.20 VVV.kotakciter.blogspot.com

92.222.90.20 kotakciter.blogspot.sg

92.222.90.20 VVV.kotakciter.blogspot.sg

92.222.90.20 kotakciter.blogspot.co.uk

92.222.90.20 VVV.kotakciter.blogspot.co.uk

92.222.90.20 VVV.vazdancer.net

92.222.90.20 vazdancer.net

92.222.90.20 mediadisk1.net

92.222.90.20 mediadisk2.net

92.222.90.20 VVV.mediadisk2.net

92.222.90.20 mediadisk3.net

92.222.90.20 VVV.mediadisk3.net

92.222.90.20 mediadisk4.net

92.222.90.20 VVV.mediadisk4.net

92.222.90.20 mediadisk5.net

92.222.90.20 VVV.mediadisk5.net

92.222.90.20 mediadisk6.net

92.222.90.20 VVV.mediadisk6.net

92.222.90.20 mediadisk7.net

92.222.90.20 VVV.mediadisk7.net

92.222.90.20 mediadisk8.net

92.222.90.20 VVV.mediadisk8.net

92.222.90.20 mediadisk9.net

92.222.90.20 VVV.mediadisk9.net

92.222.90.20 duniaku.net

92.222.90.20 VVV.duniaku.net

92.222.90.20 mrsnapznet.us

92.222.90.20 VVV.mrsnapznet.us

139.99.6.25 blackxat.com

139.99.6.25 VVV.blackxat.com

139.99.6.25 black-xat.com

139.99.6.25 VVV.xlack-xat.com

92.222.90.20 bandicam.com

92.222.90.20 VVV.bandicam.com

92.222.90.20 ssl.bandisoft.com

92.222.90.20 fairplay.pb.garena.co.id

92.222.90.20 wellbia.com

92.222.90.20 VVV.wellbia.com

92.222.90.20 VVV.tribunnews.com

92.222.90.20 kapanlagi.com

92.222.90.20 VVV.kapanlagi.com

92.222.90.20 merdeka.com

92.222.90.20 VVV.merdeka.com

92.222.90.20 zm1.november-lax.com

92.222.90.20 gamesecurity.garenanow.com

92.222.90.20 VVV.adnetworkperformance.com

92.222.90.20 n162adserv.com

92.222.90.20 447pihoz.tech

92.222.90.20 rdsa2012.com

92.222.90.20 VVV.blkget.com

92.222.90.20 Popads.net

92.222.90.20 VVV.Popads.net

92.222.90.20 Onclickads.net

92.222.90.20 VVV.Onclickads.net

92.222.90.20 ampclicks.com

92.222.90.20 match.mixplugin.com

92.222.90.20 track.funshopfun.com

92.222.90.20 cdn.adplxmd.com

92.222.90.20 cdn.todigroup.com

92.222.90.20 VVV.blkget8.com

92.222.90.20 Offerjuice.me

92.222.90.20 VVV.Offerjuice.me

92.222.90.20 VVV.ab4hr.com

92.222.90.20 track.frwdx.com

92.222.90.20 adsrvmedia.adk2x.com

92.222.90.20 zo6.realsuperblite.com

92.222.90.20 srv.revdepo.com

92.222.90.20 VVV.trackingclick.net

92.222.90.20 xml.adfclick1.com

92.222.90.20 prjcq.com

92.222.90.20 servicegetbook.net

92.222.90.20 damaral.com

92.222.90.20 Cliponyu.com

92.222.90.20 49.media.tumblr.com

92.222.90.20 40.media.tumblr.com

92.222.90.20 41.media.tumblr.com

92.222.90.20 45.media.tumblr.com

.reloc

Internet Control URL Property Page

INET98.CHM

FTp/L#

rL#.OL#

hhctrl.ocx

CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32

%ld - %s

hXXp://

PTF://

hXXps://

Microsoft URL Control - 6.01.9782

SSShp&M#

WININET.dll

KERNEL32.dll

USER32.dll

ole32.dll

ADVAPI32.dll

OLEAUT32.dll

GDI32.dll

InternetCreateUrlA

InternetCrackUrlA

InternetOpenUrlA

HttpSendRequestA

HttpOpenRequestA

HttpQueryInfoA

FtpFindFirstFileA

FtpRemoveDirectoryA

FtpGetCurrentDirectoryA

FtpCreateDirectoryA

FtpSetCurrentDirectoryA

FtpRenameFileA

FtpPutFileA

FtpGetFileA

FtpDeleteFileA

GetProcessHeap

GetWindowsDirectoryA

MsgWaitForMultipleObjects

GetKeyState

CreateDialogIndirectParamA

RegCloseKey

RegCreateKeyExA

RegOpenKeyExA

RegDeleteKeyA

RegEnumKeyExA

RegOpenKeyA

GetViewportExtEx

SetViewportExtEx

SetViewportOrgEx

OL#%s%s.DLL

%s%s.DLL

%u\%s.dll

{lX-X-X-XX-XXXXXX}

CLSID\%s

%s Object

%s.%s.%ld

%s.%s

%s.%s\CurVer

%s\InprocServer

VERSION.DLL

stdole2.tlbWWW

0?NicFTPWWW

icHTTPWW

icHTTPSW,

icUrlOpenFailedW

icBadUrl

0NSicNoExecuteW

`icFtpCommandFailedWW

qicUnsupportedTypeWWW

icUnsupportedCommand

0-gicInvalidOperationWW

icExecutingW

0jHicInvalidForFtpW

hicInvalidURL

icIncorrectPasswordW

icLoginFailureWW

icInetInvalidOperationWW

[icOperationCancelled

00XicSecCertDateInvalid

0.(icSecCertCnInvalidWW

0WwicHttpToHttpsOnRedir

icHttpsToHttpOnRedir

.icPostIsNonSecureWWW

BicClientAuthCertNeededWW

icHttpsHttpSubmitRedirWW

icFtpTransferInProgressW

icFtpDropped

icFtpNoPassiveModeWW

ficHttpHeaderNotFound

icHttpDownlevelServerWWW

icHttpInvalidServerResponseW

icHttpInvalidHeaderW

icHttpInvalidQueryRequestWWW

icHttpHeaderAlreadyExistsWWW

0`>icHttpRedirectFailed

0~ icHttpCookieNeedsConfirmationWWW

7icHttpCookieDeclined

0DSicHttpRedirectNeedsConfirmationW

icSecInvalidCert

icSecCertRevoked

}|RemotePortWW

StillExecutingWW

URLW

Password

OpenURLW

yOperationWWW

~_URLX

MSINet.Ocx

FTPWWW

HTTPWW

Secure HTTPWWW

Unable to open URL

URL is malformedWW&

Protocol not supported for this method

You must execute an operation before retrieving dataWW

FTP command failed

Not a valid or supported commandWW

Invalid operation argument

Still executing last requestWW,

This call is not valid for an FTP connectionWW

Invalid URLWWW

Incorrect password

Login failureW

Invalid operationW

Operation cancelledWWW

Security certificate date invalidW#

Security certificate number invalidWWW

HTTP to HTTPS on redirectW

HTTPS to HTTP on redirectW

Client authorization certificate neededWWW

HTTPS HTTP submit redirWWW

FTP - Transfer in progress

FTP - Connection droppedWW

FTP - no passive modeW

HTTP - Header not foundWWW

HTTP - Downlevel serverWWW

HTTP - Invalid server response

HTTP - Invalid HeaderW

HTTP - Invalid query requestWW

HTTP - Header already existsWW

HTTP - Redirect failed

HTTP - cookie needs confirmationWW

HTTP - cookie declined"

HTTP - redirect needs confirmation

Invalid certWW

Cert revokedWW

Protocol to use for this URLWW

Returns/Sets the internet port to be used on the remote computerWW5

Returns/Sets the URL used by this controlW*

Password to use for authentication;

Open a URL&

Method used to cancel the request currently being executed

2 2>2`2~2

ocx\msinet.dbg

Thawte Certification1

hXXp://ocsp.verisign.com0

0hXXp://crl.verisign.com/ThawteTimestampingCA.crl0

"hXXp://crl.verisign.com/tss-ca.crl0

9hXXp://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl0

hXXp://msdn.microsoft.com/vbasic0

)`'(*`'{

kernel32.dll

cmctl198.chm

HHtnHt.HHt

FTPFX'

FTPTX'

t.Ht#H

HHt7Ht.HH

)`'(*`'7

X'SSh

d]'%d]'

ColumnHeader(%d)

X'SSSh

Panel%d

;[''9['49['

Tab%d

ListImage%d

Button%d

:commctrl_DragListMsg

&>]'4>]'

Ht.Ht

X'SShO

FTPV

MSCOMCTL.ocx

['ButtonMenu%d

_']

`'SHELL32.DLL

winmm.dll

msvb_lib_hotkey

FTPQ

FtPQ

u.WWhG

}.hw'

tVSSh

comdlg32.dll

GetCPInfo

SetWindowsHookExA

UnhookWindowsHookEx

MapVirtualKeyA

VkKeyScanA

EnumChildWindows

GetKeyNameTextA

SetKeyboardState

GetKeyboardState

GetKeyboardLayout

CallMsgFilterA

RegCreateKeyA

,c'OLEAUT32.DLL

Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

OLEAUT32.DLL

imm32.dll

%d.%d.%d.%d

%s %s

%%0Ý

0xX

windows

Software\Microsoft\Windows\CurrentVersion\Explorer\NoFirstClickActivate

MSWHEEL_ROLLMSG

MSH_SCROLL_LINES_MSG

AppEvents\Schemes\Apps\.Default\%s\.current

OLE32.DLL

comctl32.dll

stdole2.tlbWWW|B

.IImagesW

x}pbFormatSupportedWWW

ccSetNotSupportedAtRuntimeWW

0NmccSetNotSupportedWWW

0UÌGetNotSupportedWWW

CccNonUniqueKeyWW

OccInvalidKey

.aKeyDownW

KeyCodeW

KeyPress

#KeyAscii4

MKeyUpWWW4

pvKeyWWW

KeyW

dzpbstrKey

PSubkeyWW

0 %sbrInset

.lvwManualWWW

0yUlvwReportWWW

SortKeyW

psKeyWWW

c5ReportIconWW

.ophImageListW

Microsoft Windows Common Controls 6.0 (SP6)WWW

MSCOMCTL.OCXWW

cmctl198.chmWW

Constants for the OLEDragMode property (but not the DragMode or OLEDropMode properties).WWX

Constants for the OLEDropMode property (but not the DragMode or OLEDragMode properties).WWC

State transition constants for the DragOver and OLEDragOver events.WWW

Clipboard format constants.WWW3

Drop effect constants for OLE drag and drop events.WWW

TabWidthStyle constants.WW

TabStyle constants.WWW

Placement constants.WW

Returns a reference to a collection of Tab objects in the TabStrip control.WWWK

An individual object, analogous to a page, contained in a TabStrip control.WWW

Toolbar Button Style constants.WWW

Toolbar Value constants.WW

Toolbar Style constants.WW!

Displays a hierarchical list of Node objects, each of which consists of a label and an optional bitmap.WWW

Determines the placement of the background picture.WWW

Displays a collection of ListItems such as files or folders.WW%

An item in a ListView control that contains the index of icons associated with it, text, and an array of strings representing subitems that are displayed in Report view.W!

Contains a collection of ListImage objects, each of which can be referred to by its index or keyWW&

A bitmap or icon of any size that can be used in other controls.WW

A calibrated control with a slider for setting or selecting values.WWW"

An object that represents an entry in the listbox portion of the combobox control.

Constants for the Style property of a ComboBox control.WWW

Clears all data and formats in a DataObject object.WWW>

Determines if a specified clipboard format is supported by the DataObject object.WE

Adds a supported format and possibly its data to a DataObject object.W7

A collection of filenames used by the vbCFFiles format.WWWn

Returns the number of filenames in the Files collection of a DataObject object (vbCFFiles format only).WWWW

Adds a filename to the Files collection of a DataObject object (vbCFFiles format only).WWWc

Clears all filenames stored in the Files collection of a DataObject object (vbCFFiles format only).WWW\

Removes a filename from the Files collection of a DataObject object (vbCFFiles format only).WW

Accepts no OLE drag/drop operations.WW9

Source control dragged into target.WWW%

Text (.txt file).W

Bitmap (.bmp file).WWW

Metafile (.wmf file).W

Enhanced metafile (.emf file).*

Filename list (Microsoft Windows Explorer)

Rich Text Format (.rtf file).W<

No OLE drag/drop operation has taken place/would take place.WW@

A mask to indicate that a copy has taken place/would take place.WW@

A mask to indicate that a move has taken place/would take place.WWI

Expected at least one argument.WWW1

Non-intrinsic OLE drag and drop formats used with SetData require Byte array data. GetData may return more bytes than were given to SetData.WN

Key is not unique in collectionWWW

Invalid keyWWW$

Returns/sets a value that determines whether a form or control can respond to user-generated events.WW

Sets a custom mouse icon.WZ

Returns/sets the style appearance (tab or button) of a TabStrip control.WWd

Returns/sets a fixed height of a TabStrip control, but only if the TabWidthStyle is set to tabFixed.WWK

Returns/sets the width and justification of all tabs in a TabStrip control.WWW?

Returns the top coordinate of the internal area of the control.WWW@

Returns the left coordinate of the internal area of the control.WW7

Returns the height of the internal area of the control.WWW6

Returns/Sets whether this control can act as an OLE drop target.WW/

Forces a complete repaint of a form or control.WWWC

Starts an OLE drag/drop event with the given control as the source.WWWU

Returns/sets a value that determines whether the tab under the cursor is highlighted.Wk

Returns/sets a value that determines whether multiple tabs can be selected while holding down the CTRL key.WWW\

Returns/sets a value that indicates on which side of the control the tabs will be displayed.WW

Returns/sets a value that determines whether separators are drawn between buttons on a tabstrip that has the tabButton or tabFlatButton styles.WWW@

Returns/sets a value that determines the minimum width of a tab.WWb

Occurs when the user presses and then releases a mouse button over an object.WA

Occurs when the user presses a key while an object has the focus.W6

Occurs when the user presses and releases an ANSI key.B

Occurs when the user releases a key while an object has the focus.L

Occurs when the user presses the mouse button while an object has the focus.WW%

Occurs when the user moves the mouse.WM

Generated when a Tab object is clicked, or the tab's Value setting has been changed. Used to check parameters before actually generating a Click event.WWW

Returns a specific member of a Collection object either by position or by key.,

Removes a specific member from a collection.WW$

Removes all objects in a collection.WW'

Adds a Tab object to a Tabs collection.WWWS

Returns/sets the text displayed in an object's title bar or below an object's icon.WWW.

Returns/sets the index of an object in a collection. Read-only at run time.WWW<

Returns/sets the unique string of an object in a collection.WWF

Returns/sets the width of an object.WW%

Returns/sets the height of an object.Wg

Returns/sets the distance between the internal top edge of an object and the top edge of its container.WWWi

Returns/sets the distance between the internal left edge of an object and the left edge of its container.WO

Returns/sets a value which determines if a ListItem or Node object is selected.WWW?

Returns/sets the index or key of a ListImage object to be used.WWWD

Returns/sets a value that indicates whether the Tab is highlighted..WW

Returns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.WWWI

Returns/sets a value which determines if users can customize the Toolbar.WH

Returns a reference to a Toolbar control's collection of Button objects.WW

Returns/sets the ImageList control to be used for storing normal images.WW*

Help context of topic to be displayed when inquiring help from Toolbar Customize dialog.WWG

Help file to be used when inquiring help from Toolbar Customize dialog.WWWZ

Saves a Toolbar configuration in an initialization (.ini) file.WWWa

Restores a toolbar, created with a Toolbar control, to its original state after being customized.Wp

Returns/sets the ImageList control to be used for storing images displayed when a button is in a disabled state.WWh

Returns/sets the ImageList control to be used for storing images displayed when a button is highlighted.WW>

Returns/sets a value that determines whether button text is displayed below or to the right of the button image.WWD

Occurs when the user clicks on a Button object in a Toolbar control.WWn

Occurs when you press and release a mouse button and then press and release it again over an object.WWA

Occurs when the user selects an item from a button dropdown menu.WT

Occurs when the user clicks the dropdown arrow on a button with Style = tbrDropdown.WW[

Adds a Button object to a Buttons collection and returns a reference to the created object.WWWL

Returns/sets a value that determines whether an object is visible or hidden.WW$

Returns/sets the value of an object.WW

Returns/sets the description displayed when the user clicks a Button object during a customization operation.WJ

Adds a ButtonMenu object to a ButtonMenus collection and returns a reference to the created object.WWWE

Returns/sets the text displayed in the ButtonMenu item.WWW

Returns/sets the text displayed when a StatusBar control's Style property is set to Simple.WWW<

Similar to the standard Click event, but the PanelClick event occurs when a user presses and then releases a mouse button over any of the StatusBar control's Panel objects.WW

Similar to the standard DblClick Event, the PanelDblClick occurs when a user presses and then releases a mouse button twice over a StatusBar control's Panel object.WWX

Adds a Panel object to a Panels collection and returns a reference to the created Panel.WW

Returns/sets a control's maximum value.WWW'

Returns/sets a control's minimum value.WWW3

Returns or sets a control's current Value property.WWW,

Returns/sets the border style for an object.WWf

Returns a reference to a Node or ListItem object and highlights the object with the system highlight color.WWW[

Returns/sets a value that determines if a user can edit the label of a ListItem or Node object.WWW?

Returns/sets the style of lines displayed between Node objects.WWW4

Returns a reference to a collection of Node objects.WWV

Indicates whether the elements of a control are automatically sorted alphabetically.WW

Returns a reference to the ListItem object or Node object located at the coordinates of x and y. Used with drag and drop operations.WWW

Returns the number of Node objects that fit in the internal area of a TreeView control.WWW>

Begins a label editing operation on a ListItem or Node object.g

Returns/sets a value which determines if the control displays a checkbox next to each item in the tree.WWW

Returns/sets a value which determines if the entire row of the selected item is highlighted and clicking anywhere on an item's row causes it to be selected.WWd

Returns/sets a value which determines if items are highlighted as the mousepointer passes over them.WWy

Returns/sets a value which determines if selecting a new item in the tree expands that item and collapses the previously selected item.WWW`

Occurs when a user attempts to edit the label of the currently selected ListItem or Node object.WWV

Occurs when a Node object is clicked.WE

Occurs when Checkboxes = True and a Node object is checked/unchecked.WW

Adds a Node object to a Nodes collection and returns a reference to the created object.WWWL

Returns a specific item of a Collection object either by position or by key.WW8

Returns a reference to the first child of a Node object.WW4

Returns the number of child nodes a Node object has.WWB

Returns/sets the Index or Key of an image in an ImageList control used when the Node is expanded.WB

Returns a reference to the last Node object in a hierarchy level.WA

Returns/sets a reference to the parent of a Node object.WWE

Returns a reference to the previous Node object in a hierarchy level.WB

Returns/sets the Index or Key of an image in an ImageList control which is displayed when a Node object is selected.WW3

Returns/sets the text to be displayed in a control.WWWY

Creates a composite image from an icon and a caption for use in drag and drop operations.W^

Returns/sets the background color used to display text for a Node object.Wf

Aligns background picture to the upper left.WW-

Aligns background picture to the lower left.WW-

Aligns background picture to the center.WW2

Report

Returns/sets how the icons in a ListView control's Icon or SmallIcon view are arranged.WWW<

Returns a reference to a collection of ColumnHeader objects.WWZ

Returns/sets whether or not a ListView control's column headers are hidden in Report view.[

Returns or sets a value that determines if labels are wrapped when the ListView is in Icon view.WW

Returns/sets a value indicating whether a user can make multiple selections in the ListView control and how the multiple selections can be made.WWF

Returns/sets the current sort key.Z

Finds an item in the list and returns a reference to that item.WWWC

Retrieves a reference of the first item visible in the client area.WWW?

Returns/sets whether a user can reorder columns in report view.WWWg

Returns/sets a value which determines if the control displays a checkbox next to each item in the list.WWW0

Returns/sets whether the scrollbars appear flat.WWB

Returns/sets whether hover selection is enabled.WW4

Returns/sets the background picture for the control.WW#

Returns/sets the picture alignment.WWWE

Returns/sets the ImageList control to be used for ColumnHeader icons.Wp

Occurs when a ColumnHeader object in a ListView control is clicked.WWW4

Returns/sets the state of a ListView control Object item.WE

Returns/sets the index of an icon in an associated ImageList control.WK

Returns/sets the index of an small icon in an associated ImageList control.WWWC

Returns/sets an array of strings representing the ListIitem's data.WWWD

Returns/sets a collection of ListSubItems belonging to the ListItem.WWM

Returns/sets a value that determines where an object is displayed on a form.WW]

Returns current position of column.WWW1

Returns the number of SubItems in the collection.WH

Adds a ListSubItem object to a ListSubItems collection only at run time.WW?

Returns/sets the text to display text for a ListSubItem object.WWWP

Returns/sets the foreground color used to display text for a ListSubItem object.WWm

Returns/sets the subitem's report view iconWWW

Returns/sets the width of ListImage objects in an ImageList control.WWd

Returns/sets a value which determines the color to be transparent in ImageList graphical operations.WW_

Returns/sets a value which determines if the ImageList control will use the MaskColor property.WWWQ

Returns a handle to an ImageList control.Wg

Creates a composite third image out of two ListImage objects and returns a reference to the new object.WWWa

Returns/sets the increment value when the PageDown or PageUp key is pressed.WWM

Returns/sets the increment value when the left or right arrow key is pressed.W,

Returns/sets the maximum value of a control.WW,

Returns/sets the minimum value of a control.WWI

Returns/sets the orientation of a Slider control, horizontal or vertical.WE

Returns/sets the value where a selection starts.WW'

Returns/sets the length of a selection.WWW4

Returns/sets where ticks appear on a Slider control.WWN

Sets the SelLength to 0.WW8

Returns the number of visible ticks on a Slider control.WWR

Returns a specific member of a Collection object either by position or by keyWO

Index into ImageList control where the normal image for this item can be found.WWWU

Number of spaces to indent the text for the item. Each indent is equal to 10 pixels.WA

Returns/sets a value which determines if a ComboItem is selected.WQ

Removes the item at the given index from the collection.WW[

ComboBox control style that allows typing in a text box or selection from a drop-down list.WWWj

Only allows selection from the drop-down list in a ComboBox control.WW-

Returns/sets the background color of an object.WWW\

Returns/sets a value that determines whether an object can respond to user-generated events.WWQ

Returns a handle to the control.WWj

Returns/sets a value indicating whether the contents in an Image Combo control can be edited.Ws

Returns/sets a value indicating the type of mouse pointer displayed when the mouse is over the control at run time.WWW8

Returns a reference to the currently selected ComboItem.WW/

Returns/sets the number of characters selected.WWWw

Returns/sets the starting point of text selected; indicates the position of the insertion point if no text is selected.WWW

Returns/sets the string containing the currently selected text; consists of a zero-length string if no characters are selected.WWW5

(Windows NT Only) Returns/sets a value that determines whether the edit box uses the slash ('/'), backslash ('') and period ('.') characters as word delimiters.WWS

Retrieves a reference of the first item visible in the list portion of the control.WWW'

Forces a complete repaint of a control.WWW3

Occurs when the contents of a control have changed.WWWF

Occurs when the list portion of the Image Combo is about to drop down.

= =$=(=,=

7 7$7(7,70747

3!3-3e3l3q3v3}3

8#9-979M9U9b9}9

:(:0:8:=:

7p7C7[7

0a1r1!2X3{3

2%2U2s2 3:3

6 6$6(6,60646[6

1%1X1|1

4!4-434?4

5"5/5<5_5

= =$=(=,=0=

= =$=(=,=0=4=8=<=

11D1

8!8%8)8-8185898?8

9%9S9u9

383>3=4}4

4!4%4)4-414

0I0%1S1[1p1w1E2]2s2~2

8!8 858>8

ocx\mscomctl.dbg

CmDialogWndClass

cmdlg98.chm

Iz!.Iz!

Ez!&Nz!:Nz!.Pz!BPz!

FTP3z!

MbP?hhctrl.ocx

WINSPOOL.DRV

Windows

%s,%s,%s

%s.drv

Ports

z!{lX-X-X-XX-XXXXXX}

SSSh0:{!

cdlGetNotSupportedWW

0{ cdlSetNotSupportedWW

0B.cdlMemAllocFailureWW

.cdlNoFontsWW

cdlHelpKeyWW

cdlHelpPartialKeyWWWX

cdlPortraitWX

HelpKeyW

pbstrHelpKey

ComDlg32.OcxWW

cmdlg98.chmWWW

Sets or returns state of Collate check box.WWW%

Prevents a warning message when there is no default printer.WW5

Sets or returns the state of the Pages option button.WE

Returns a device context for the printer selection.WWW

Dialog box displays the Help button.WW!

Sets support for multiple copies.W,

Sets initial color value for the dialog box.WWK

Entire dialog box is displayed, including the Define Custom Colors section.WWW<

Disables the Define Custom Colors section of the dialog box.WW"

Generates a message box if the selected file already exists.WW

Allows invalid characters in the returned file name.WW:

Extension of returned file name is different from the one set by DefaultExt.WW%

User can enter only names of existing files.WWF

The returned file will not have the Read Only attribute set.WW

Windows 95 Open A File dialog box template.WWW

Long filenames.WWW;

Dialog box lists only screen fonts supported by the system.WWW5

Dialog box lists only fonts supported by the printer.W4

Dialog box lists available screen and printer fonts.WW7

Dialog enables strikeout, underline, and color effects.WWW$

Dialog box enables the Apply button.WW@

Dialog box allows only fonts that use the Windows character set.WW3

Dialog box should not allow vector-font selections.WWWL

Dialog box should not allow graphic device interface (GDI) font simulations.WWH

Selects font sizes within the range specified by Min and Max properties.WW0

Dialog box should select only fixed-pitch fonts.WWL

Allows only the selection of fonts available to both the screen and printer.WWG

Displays an error if a user selects a font or style that doesn't exist.WWW>

No font style selected.WWW

Couldn't allocate memory for FileName or Filter.WW

Cancel was selected.WW!

Call to Windows Help failed.WW*

The function failed to load a specified string.WWW1

The function failed to lock a specified resource.WH

The function was unable to allocate memory for internal data structures.WWD

The function was unable to lock the memory associated with a handle.WW

No fonts exist.WWW=

File name is invalid.WC

An attempt to subclass a listbox failed due to insufficient memory.WWWB

DevMode and DevNames data structures describe two different printers.WH

The printer-device driver failed to initialize a DEVMODE data structure.WW3

The PrintDlg function failed during initialization.WWWK

The PrintDlg function failed to load the specified printer's device driver.WWW!

No printer device-drivers were found.WB

The Common Dialog function failed to parse the strings in WIN.INI.H

The printer device driver failed to initialize a DevMode data structure.WWK

The [devices] section of WIN.INI does not contain an entry for the printer.WWW:

No template provided by the application.WW/

Application did not provide an instance handle.WWW#

Displays Help for a particular topic.WO

Notifies the Help application that the specified Help file is no longer in use.WWW.

Display Help for using the Help application itself.WWW 

Set the current Index for multi-index Help.WWW2

Displays a topic identified by a context number.WW8

Creates a Help file that displays text in only one font.WW'

Displays Help for a particular keyword.WWW'

Displays Help for a particular command.WWW'

Call the search engine in Windows Help.WWW"

Portrait printer paper orientation#

Sets the string displayed in the title bar of the dialog box.WQ

Returns/sets the default filename extension for the dialog box.WWW(

Returns/sets the initial file directory.WW

Returns/sets the selected color.WW"

Specifies the name of the font that appears in each row for the given level.WW

Returns/sets italic font styles.WW'

Returns/sets strikethrough font styles.WWW#

Returns/sets underline font styles.WWW8

Returns/sets the value for the first page to be printed.WWR

Returns/sets the maximum font size (Font dialog) or print range (Print dialog).WWWH

Returns/sets a value that determines the number of copies to be printed.WWP

Indicates whether an error is generated when the user chooses the Cancel button.WWC

Returns/sets the name of the Help file associated with the project.WWW/

Returns/sets the type of online Help requested.WWWB

Returns/sets the keyword that identifies the requested Help topic.f

Returns/sets a default filter for an Open or Save As dialog box.WW8

Returns/sets the context ID of the requested Help topic.WWX

Specifies the size (in points) of the font that appears in each row for the given level.WW4

Returns/sets the type of dialog box to be displayed.WWT

Returns/sets the maximum size of the filename opened using the CommonDialog control.WWI

Returns a handle (from Microsoft Windows) to the object's device context.WQ

Displays the CommonDialog control's Open dialog box.WW7

Displays the CommonDialog control's Save As dialog box.WWW5

Displays the CommonDialog control's Printer dialog box.WWW8

Runs Winhelp.EXE and displays the Help file you specify.WW&

2 2(2,2024282

6%7S7Y7s7

ocx\ComDlg32.dbg

advapi32.dll

mscoree.dll

_CorExeMain

<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>

<requestedExecutionLevel level="asInvoker" uiAccess="false"/>

/VeriSign Universal Root Certification Authority0

hXXps://d.symcb.com/cps0%

hXXps://d.symcb.com/rpa0.

hXXp://s.symcd.com06

%hXXp://s.symcb.com/universal-root.crl0

hXXps://d.symcb.com/rpa0@

/hXXp://ts-crl.ws.symantec.com/sha256-tss-ca.crl0

hXXp://ts-ocsp.ws.symantec.com0;

/hXXp://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(

/1(0&0$0"

LhXXp://pki-crl.symauth.com/ca_39aecdf6e69f23707758d28c95e6a627/LatestCRL.crl07

hXXp://pki-ocsp.symauth.com0

ehXXp://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.crl0

%Xn>%

".EY=T;

PvnN.nS

.VBpH

.WN0I

b%1SI

.dG9s

h1.tS.~NG>

.rD=TL

Y`.CZa0w

.KS1}

Z3%dWr

.yE<u

.qBV^Y

5 O.MW

G'%D?

.jmbI

E.lw|F

`.rdata

@.data

@.reloc

SHA1 block transform for x86, CRYPTOGAMS by <appro@openssl.org>

SHA256 block transform for x86, CRYPTOGAMS by <appro@openssl.org>

DlSHA512 block transform for x86, CRYPTOGAMS by <appro@openssl.org>

RC4 for x86, CRYPTOGAMS by <appro@openssl.org>

6-9'6-9'

$6.:$6.:

*?#1*?#1

>8$4,8$4,

AES for x86, CRYPTOGAMS by <appro@openssl.org>

AES for Intel AES-NI, CRYPTOGAMS by <appro@openssl.org>

Camellia for x86 by <appro@openssl.org>

Montgomery Multiplication for x86, CRYPTOGAMS by <appro@openssl.org>

GHASH for x86, CRYPTOGAMS by <appro@openssl.org>

GF(2^m) Multiplication for x86, CRYPTOGAMS by <appro@openssl.org>

w%s( 

)<,u%S

9|$,v%U

3\$83\$0

3|$@3|$(3|$

t.SWV

FtPWW

D$!2D$#2D$-$'2D$92D$?

FtPU

asio.misc

asio.misc error

value.unicode

value.ascii

value.url

value.moniker

value.file

certReq

1.3.6.1.4.1.311.2.1.11

1.3.6.1.4.1.311.2.1.12

1.3.6.1.4.1.311.2.4.1

1.2.840.113549.1.9.25.4

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.3.3.1

d.otherName

d.rfc822Name

d.dNSName

d.directoryName

d.ediPartyName

d.uniformResourceIdentifier

d.iPAddress

d.registeredID

d.other

d.data

d.sign

d.enveloped

d.signed_and_enveloped

d.digest

d.encrypted

cert

key_enc_algor

enc_key

x509 certificate routines

DSO support routines

passed a null parameter

error:lX:%s:%s:%s

setct-CertReqTBE

setct-CertReqTBEX

setct-CertResTBE

setCext-certType

setCext-cCertRequired

setAttr-Cert

set-rootKeyThumb

JOINT-ISO-ITU-T

joint-iso-itu-t

msSmartcardLogin

Microsoft Smartcardlogin

proxyCertInfo

Proxy Certificate Information

certicom-arc

certificateIssuer

X509v3 Certificate Issuer

id-PasswordBasedMAC

password based MAC

dhKeyAgreement

id-Gost28147-89-CryptoPro-KeyMeshing

id-Gost28147-89-None-KeyMeshing

challengePassword

extendedCertificateAttributes

nsCertExt

Netscape Certificate Extension

LocalKeySet

Microsoft Local Key set

nsCertType

Netscape Cert Type

nsBaseUrl

Netscape Base Url

nsRevocationUrl

Netscape Revocation Url

nsCaRevocationUrl

Netscape CA Revocation Url

nsRenewalUrl

Netscape Renewal Url

nsCaPolicyUrl

Netscape CA Policy Url

nsCertSequence

supportedApplicationContext

Netscape Certificate Sequence

subjectKeyIdentifier

userPassword

X509v3 Subject Key Identifier

userCertificate

keyUsage

cACertificate

X509v3 Key Usage

privateKeyUsagePeriod

certificateRevocationList

X509v3 Private Key Usage Period

crossCertificatePair

supportedAlgorithms

certificatePolicies

X509v3 Certificate Policies

authorityKeyIdentifier

X509v3 Authority Key Identifier

anyExtendedKeyUsage

Any Extended Key Usage

extendedKeyUsage

X509v3 Extended Key Usage

TLS Web Server Authentication

TLS Web Client Authentication

pbeWithSHA1And3-KeyTripleDES-CBC

pbeWithSHA1And2-KeyTripleDES-CBC

keyBag

pkcs8ShroudedKeyBag

certBag

localKeyID

x509Certificate

sdsiCertificate

id-smime-mod-msg-v3

id-smime-ct-publishCert

id-smime-aa-msgSigDigest

id-smime-aa-encrypKeyPref

id-smime-aa-signingCertificate

id-smime-aa-smimeEncryptCerts

id-smime-aa-ets-otherSigCert

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-certValues

id-smime-aa-ets-certCRLTimestamp

id-mod-qualified-cert-88

id-mod-qualified-cert-93

id-mod-attribute-cert

id-it-caProtEncCert

id-it-signKeyPairTypes

id-it-encKeyPairTypes

id-it-caKeyUpdateInfo

id-it-unsupportedOIDs

id-it-keyPairParamReq

id-it-keyPairParamRep

id-it-revPassphrase

id-regCtrl-oldCertID

id-regCtrl-protocolEncrKey

id-regInfo-certReq

id-cmc-getCert

id-cmc-confirmCertAcceptance

id-ecPublicKey

set-msgExt

set-certExt

certificate extensions

setct-AcqCardCodeMsg

setct-PCertReqData

setct-PCertResTBS

setct-CertReqData

setct-CertReqTBS

setct-CertResData

setct-CertInqReqTBS

setct-AcqCardCodeMsgTBE

openssl.cnf

Stack part of OpenSSL 1.0.1u 22 Sep 2016

ASN.1 part of OpenSSL 1.0.1u 22 Sep 2016

cert_info

value.set

value.single

%*s%s:

%s algorithm "%s" unsupported

Public Key

x509_pkey

evp_pkey

ssl_cert

ssl_sess_cert

%s(%d): OpenSSL internal error, assertion failed: %s

lhash part of OpenSSL 1.0.1u 22 Sep 2016

fips mode not supported

BIO_get_port

broken pipe

no accept port specified

no port defined

no port specified

unsupported method

d2i_AutoPrivateKey

d2i_PrivateKey

d2i_PublicKey

d2i_X509_PKEY

i2d_DSA_PUBKEY

i2d_EC_PUBKEY

i2d_PrivateKey

i2d_PublicKey

i2d_RSA_PUBKEY

X509_PKEY_new

bad password read

digest and key type not supported

private key header missing

streaming not supported

unable to decode rsa key

unable to decode rsa private key

unknown public key type

unsupported any defined by type

unsupported cipher

unsupported encryption algorithm

unsupported public key type

unsupported type

wrong public key type

d2i_ECPrivateKey

DO_EC_KEY_PRINT

ECKEY_PARAM2TYPE

ECKEY_PARAM_DECODE

ECKEY_PRIV_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PUB_DECODE

ECKEY_PUB_ENCODE

ECKEY_TYPE2PARAM

EC_KEY_check_key

EC_KEY_copy

EC_KEY_generate_key

EC_KEY_new

EC_KEY_print

EC_KEY_print_fp

EC_KEY_set_public_key_affine_coordinates

i2d_ECPrivateKey

i2o_ECPublicKey

o2i_ECPublicKey

PKEY_EC_CTRL

PKEY_EC_CTRL_STR

PKEY_EC_DERIVE

PKEY_EC_KEYGEN

PKEY_EC_PARAMGEN

PKEY_EC_SIGN

gf2m not supported

invalid private key

keys not set

missing private key

not a supported NIST prime

passed null parameter

unsupported field

zlib not supported

data too large for key size

data too small for key size

digest too big for rsa key

illegal or unsupported padding mode

invalid keybits

key size too small

operation not allowed in fips mode

operation not supported for this keytype

rsa operations not supported

unsupported mask algorithm

unsupported mask parameter

unsupported signature type

PKEY_RSA_CTRL

PKEY_RSA_CTRL_STR

PKEY_RSA_SIGN

PKEY_RSA_VERIFY

PKEY_RSA_VERIFYRECOVER

RSA_BUILTIN_KEYGEN

RSA_check_key

RSA_generate_key

RSA_generate_key_ex

COMPUTE_KEY

DH_compute_key

DH_generate_key

GENERATE_KEY

PKEY_DH_DERIVE

PKEY_DH_KEYGEN

invalid public key

DSA_generate_key

PKEY_DSA_CTRL

PKEY_DSA_KEYGEN

ECDH_compute_key

AESNI_INIT_KEY

AES_INIT_KEY

CAMELLIA_INIT_KEY

D2I_PKEY

DSAPKEY2PKCS8

DSA_PKEY2PKCS8

ECDSA_PKEY2PKCS8

ECKEY_PKEY2PKCS8

EVP_CIPHER_CTX_set_key_length

EVP_PKCS82PKEY

EVP_PKCS82PKEY_BROKEN

EVP_PKEY2PKCS8_broken

EVP_PKEY_copy_parameters

EVP_PKEY_CTX_ctrl

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_dup

EVP_PKEY_decrypt

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt_old

EVP_PKEY_derive

EVP_PKEY_derive_init

EVP_PKEY_derive_set_peer

EVP_PKEY_encrypt

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt_old

EVP_PKEY_get1_DH

EVP_PKEY_get1_DSA

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_get1_RSA

EVP_PKEY_keygen

EVP_PKEY_keygen_init

EVP_PKEY_new

EVP_PKEY_paramgen

EVP_PKEY_paramgen_init

EVP_PKEY_sign

EVP_PKEY_sign_init

EVP_PKEY_verify

EVP_PKEY_verify_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_recover_init

FIPS_CIPHER_CTX_SET_KEY_LENGTH

PKCS5_PBE_keyivgen

PKCS5_v2_PBE_keyivgen

PKCS5_V2_PBKDF2_KEYIVGEN

PKEY_SET_TYPE

aes key setup failed

bad key length

bn pubkey error

camellia key setup failed

command not supported

ctrl operation not implemented

different key types

expecting an rsa key

expecting a dh key

expecting a dsa key

expecting a ecdsa key

expecting a ec key

invalid key length

invalid operation

keygen failure

method not supported

no key set

no operation set

operaton not initialized

private key decode error

private key encode error

public key not rsa

unsuported number of rounds

unsupported algorithm

unsupported keylength

unsupported key derivation function

unsupported key size

unsupported prf

unsupported private key algorithm

unsupported salt type

d2i_PKCS8PrivateKey_bio

d2i_PKCS8PrivateKey_fp

DO_PK8PKEY

DO_PK8PKEY_FP

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

PEM_PK8PKEY

PEM_READ_BIO_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_WRITE_PRIVATEKEY

error converting private key

expecting private key blob

expecting public key blob

keyblob header parse error

keyblob too short

problems getting password

public key no rsa

read key

unsupported encryption

unsupported key components

no recipient matches certificate

no recipient matches key

operation not supported on this type

private key does not match certificate

signer certificate not found

signing not supported for this key type

unable to find certificate

unknown operation

unsupported cipher type

unsupported content type

PKCS7_add_certificate

certificate verify error

decrypted key is wrong length

encryption not supported for this key type

ADD_CERT_DIR

GET_CERT_BY_SUBJECT

X509_check_private_key

X509_get_pubkey_parameters

X509_load_cert_crl_file

X509_load_cert_file

X509_PUBKEY_get

X509_PUBKEY_set

X509_REQ_check_private_key

X509_STORE_add_cert

X509_verify_cert

cant check dh key

cert already in hash table

key type mismatch

key values mismatch

loading cert dir

no cert set for us to verify

public key decode error

public key encode error

unable to get certs public key

unknown key type

R2I_CERTPOL

S2I_ASN1_SKEY_ID

S2I_SKEY_ID

V2I_AUTHORITY_KEYID

V2I_EXTENDED_KEY_USAGE

extension setting not supported

no issuer certificate

no proxy cert policy language defined

no public key

operation not defined

policy syntax not currently supported

unable to get issuer keyid

unsupported option

PKCS12_key_gen_uni

PKCS12_MAKE_KEYBAG

PKCS12_MAKE_SHKEYBAG

PKCS12_newpass

PKCS12_PBE_keyivgen

PKCS8_add_keyusage

key gen error

unsupported pkcs12 mode

PKCS12_add_localkeyid

PKCS12_key_gen_asc

WIN32_JOINER

functionality not supported

unimplemented public key method

ENGINE_cmd_is_executable

ENGINE_ctrl_cmd

ENGINE_ctrl_cmd_string

ENGINE_get_pkey_asn1_meth

ENGINE_get_pkey_meth

ENGINE_load_private_key

ENGINE_load_public_key

ENGINE_load_ssl_client_cert

ENGINE_UNLOAD_KEY

cmd not executable

failed loading private key

failed loading public key

invalid cmd name

invalid cmd number

error parsing url

no certificates in chain

unsupported requestorname type

OCSP_cert_id_new

OCSP_parse_url

PARSE_HTTP_LINE1

ESS_ADD_SIGNING_CERT

ESS_CERT_ID_NEW_INIT

ESS_SIGNING_CERT_NEW_INIT

TS_CHECK_SIGNING_CERTS

TS_MSG_IMPRINT_set_algo

TS_REQ_set_msg_imprint

TS_RESP_CTX_set_certs

TS_RESP_CTX_set_signer_cert

TS_TST_INFO_set_msg_imprint

TS_VERIFY_CERT

ess add signing cert error

ess signing certificate error

invalid signer certificate purpose

unsupported md algorithm

unsupported version

CMS_add0_cert

CMS_add0_recipient_key

CMS_add0_recipient_password

CMS_add1_recipient_cert

CMS_decrypt_set1_key

CMS_decrypt_set1_password

CMS_decrypt_set1_pkey

CMS_EncryptedData_set1_key

CMS_GET0_CERTIFICATE_CHOICES

cms_msgSigDigest_add1

CMS_RecipientInfo_ktri_cert_cmp

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_set0_password

CMS_RecipientInfo_set0_pkey

CMS_SIGNERINFO_VERIFY_CERT

certificate already present

certificate has no keyid

error getting public key

error setting key

invalid encrypted key length

invalid key encryption parameter

msgsigdigest error

msgsigdigest verification failure

msgsigdigest wrong length

not key transport

not supported for this key type

no key

no key or cert

no msgsigdigest

no password

no private key

unsupported compression algorithm

unsupported kek algorithm

unsupported key encryption algorithm

unsupported recipient type

unsupported recpientinfo type

0123456789

Big Number part of OpenSSL 1.0.1u 22 Sep 2016

CONF part of OpenSSL 1.0.1u 22 Sep 2016

EVP part of OpenSSL 1.0.1u 22 Sep 2016

X.509 part of OpenSSL 1.0.1u 22 Sep 2016

OPENSSL_ALLOW_PROXY_CERTS

unable to get issuer certificate

unable to get certificate CRL

unable to decrypt certificate's signature

unable to decode issuer public key

certificate signature failure

certificate is not yet valid

certificate has expired

format error in certificate's notBefore field

format error in certificate's notAfter field

self signed certificate

self signed certificate in certificate chain

unable to get local issuer certificate

unable to verify the first certificate

certificate chain too long

certificate revoked

invalid CA certificate

invalid non-CA certificate (has CA markings)

proxy certificates not allowed, please set the appropriate flag

unsupported certificate purpose

certificate not trusted

certificate rejected

authority and subject key identifier mismatch

key usage does not include certificate signing

unable to get CRL issuer certificate

key usage does not include CRL signing

key usage does not include digital signature

invalid or inconsistent certificate extension

invalid or inconsistent certificate policy extension

Unsupported extension feature

name constraints minimum and maximum not supported

unsupported name constraint type

unsupported or invalid name constraint syntax

unsupported or invalid name syntax

Invalid certificate verification context

Issuer certificate lookup error

public_key

X509_PUBKEY

.\crypto\asn1\x_pubkey.c

\X

keyid

X509_CERT_AUX

X509_CERT_PAIR

AUTHORITY_KEYID

Key Compromise

keyCompromise

Cessation Of Operation

cessationOfOperation

Certificate Hold

certificateHold

name.fullname

name.relativename

%*sOnly User Certificates

%*sOnly CA Certificates

%*sOnly Attribute Certificates

%d.%d.%d.%d/%d.%d.%d.%d

x -

x%c

%sx - <SPACES/NULS>

Certificate:

%8sVersion: %lu (0x%lx)

%s%lu (%s0x%lx)

s%s

Issuer:%c

Subject:%c

Subject Public Key Info:

sPublic Key Algorithm:

sUnable to load Public Key

x%s

%s - d:d:d%.*s %d%s

%s - d:d:d %d%s

priv [ %d ]

cont [ %d ]

appl [ %d ]

<ASN1 %d>

.\crypto\ec\ec_key.c

RSA part of OpenSSL 1.0.1u 22 Sep 2016

Diffie-Hellman part of OpenSSL 1.0.1u 22 Sep 2016

DSA part of OpenSSL 1.0.1u 22 Sep 2016

EVP_CIPHER_key_length(cipher) <= (int)sizeof(md_tmp)

keylen <= sizeof key

CONF_def part of OpenSSL 1.0.1u 22 Sep 2016

[%s] %s=%s

[[%s]]

rsa_keygen_bits

rsa_keygen_pubexp

hexkey

RAND part of OpenSSL 1.0.1u 22 Sep 2016

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

ddddddZ

ddddddZ

MD5 part of OpenSSL 1.0.1u 22 Sep 2016

SHA1 part of OpenSSL 1.0.1u 22 Sep 2016

SHA-256 part of OpenSSL 1.0.1u 22 Sep 2016

SHA-512 part of OpenSSL 1.0.1u 22 Sep 2016

PROXY_CERT_INFO_EXTENSION

'() ,-./:=?

<unsupported>

othername:<unsupported>

X400Name:<unsupported>

EdiPartyName:<unsupported>

email:%s

DNS:%s

URI:%s

IP Address:%d.%d.%d.%d

CERTIFICATEPOLICIES

d.cpsuri

d.usernotice

%*sCPS: %s

%*sOrganization: %s

%*sNumber%s:

%*sExplicit Text: %s

value.parameters

value.implicitlyCA

privateKey

publicKey

EC_PRIVATEKEY

p.other

p.onBasis

p.tpBasis

p.ppBasis

p.prime

p.char_two

value.named_curve

pub_key

priv_key

pubkey

pkeyalg

pkey

PKCS8_PRIV_KEY_INFO

%lu:%s:%s:%d:%s

%*sAlias: %s

%*sKey Id:

%sX

%s:%s

%*s%s

%*s<Not Supported>

Private-Key: (%d bit)

Public-Key: (%d bit)

Private-Key

Public-Key

%s: (%d bit)

PKCS#3 DH Private-Key

PKCS#3 DH Public-Key

private-key:

public-key:

recommended-private-length: %d bits

EC part of OpenSSL 1.0.1u 22 Sep 2016

.\crypto\dh\dh_key.c

Dynamic engine loading support

IBM_4758_LOAD_PRIVKEY

IBM_4758_LOAD_PUBKEY

IBM 4758 CCA hardware engine support

IBM 4758 CCA RSA key handle

AEP_MOD_EXP_CRT

missing key components

mod exp crt failed

Aep hardware engine support

AEP_ModExpCrt

Atalla hardware engine support

ASI_RSAPrivateKeyOpFn

HWCRHK_GET_PASS

HWCRHK_LOAD_PRIVKEY

HWCRHK_LOAD_PUBKEY

private key algorithms disabled

CHIL hardware engine support

HWCryptoHook_RSALoadKey

HWCryptoHook_RSAGetPublicKey

HWCryptoHook_RSAUnloadKey

HWCryptoHook_ModExpCRT

nFast HWCryptoHook RSA key handle

pass phrase

Current card: "%s"

Insert card "%s"

bad key size

CryptoSwift hardware engine support

swAttachKeyParam

CSWIFT_MOD_EXP_CRT

Nuron hardware engine support

SUREWAREHK_LOAD_PRIVKEY

SUREWAREHK_LOAD_PUBKEY

SureWare hardware engine support

SureWareHook_Load_Privkey

SureWareHook_Info_Pubkey

SureWareHook_Load_Rsa_Pubkey

SureWareHook_Load_Dsa_Pubkey

SureWareHook RSA key handle

SureWareHook DSA key handle

ENGINE_load_privkey

ENGINE_load_pubkey

UBSEC_DH_COMPUTE_KEY

UBSEC_DH_GENERATE_KEY

UBSEC_MOD_EXP_CRT

UBSEC_RSA_MOD_EXP_CRT

UBSEC hardware engine support

rsa_mod_exp_crt_ioctl

ubsec_max_key_len_ioctl

/dev/ubskey

VIA PadLock (%s, %s)

cant get key

error adding cert

error getting key provider info

function not supported

getuserkey error

invalid dsa public key blob magic number

invalid public key blob

invalid rsa public key blob magic number

pubkey export error

pubkey export length error

unsupported algorithm nid

unsupported padding

unsupported public key algorithm

list_certs

List all certificates in store

lookup_cert

Lookup and output certificates

key_type

Key type: 1=AT_KEYEXCHANGE (default), 2=AT_SIGNATURE

Set list options (1=summary,2=friendly name, 4=full printout, 8=PEM output, 16=XXX, 32=private key info)

Set key lookup method (1=substring, 2=friendlyname, 3=container name)

certificate store name, default "MY"

Certificate store flags: 1 = system store

CAPI_CERT_GET_FNAME

CAPI_GET_KEY

CAPI_GET_PKEY

CAPI_LOAD_PRIVKEY

CERT_SELECT_DIALOG

CLIENT_CERT_SELECT

Setting store name to %s

Setting flags to %d

Setting debug level to %d

Setting debug file to %s

Setting key type to %d

aiKeyAlg=0x

capi_get_provname, index=%d

capi_get_provname, returned name=%s, type=%d

%d. %s, type %d

Listing containers CSP=%s, type = %d

Got max container len %d

Container name %s, len=%d, index=%d, flags=%d

%d. %s

No Private Key

Private Key Info:

Provider Name: %s, Provider Type %d

Container Name: %s, Key Type %d

capi_cert_get_fname

Friendly Name "%s"

<Can't parse certificate>

Opening certificate store %s

Listing certs for store %s

Certificate %d

capi_get_key, contname=%s, provname=%s, type=%d

capi_ctx_set_provname, name=%s, type=%d

Can't Parse Certificate %d

ENGINE_set_pkey_meths failed

ENGINE_set_pkey_asn1_meths failed

ENGINE_set_cmd_defns failed

PKEY

PKEY_CRYPTO

PKEY_ASN1

keyfunc

keylength

j <= (int)sizeof(ctx->key)

.\crypto\pkcs12\p12_key.c

%s.dll

KERNEL32.DLL

ECDSA part of OpenSSL 1.0.1u 22 Sep 2016

ADVAPI32.DLL

NETAPI32.DLL

USER32.DLL

?456789:;<=

!"#$%&'()* ,-./0123

Key Encipherment

keyEncipherment

Key Agreement

keyAgreement

Certificate Sign

keyCertSign

EXTENDED_KEY_USAGE

PKEY_USAGE_PERIOD

%*sZone: %s, User:

.\crypto\x509v3\v3_skey.c

.\crypto\x509v3\v3_akey.c

%*scrlUrl:

%*sPolicy Text: %s

%s %s%lu (%s0x%lx)

ASN1 OID: %s

Field Type: %s

Basis Type: %s

DES part of OpenSSL 1.0.1u 22 Sep 2016

libdes part of OpenSSL 1.0.1u 22 Sep 2016

IDEA part of OpenSSL 1.0.1u 22 Sep 2016

RC2 part of OpenSSL 1.0.1u 22 Sep 2016

:Blowfish part of OpenSSL 1.0.1u 22 Sep 2016

CAST part of OpenSSL 1.0.1u 22 Sep 2016

AES part of OpenSSL 1.0.1u 22 Sep 2016

.pp@0

aEÐ

 (#EÚ

ÚE<<0

MD4 part of OpenSSL 1.0.1u 22 Sep 2016

SHA part of OpenSSL 1.0.1u 22 Sep 2016

RIPE-MD160 part of OpenSSL 1.0.1u 22 Sep 2016

CERTIFICATE

GOST2001_KEYGEN

GOST_SIGN_KEYGEN

PKEY_GOST01CP_DECRYPT

PKEY_GOST01CP_ENCRYPT

PKEY_GOST01CP_KEYGEN

PKEY_GOST01_PARAMGEN

PKEY_GOST2001_DERIVE

PKEY_GOST94CP_DECRYPT

PKEY_GOST94CP_ENCRYPT

PKEY_GOST94CP_KEYGEN

PKEY_GOST94_PARAMGEN

PKEY_GOST_CTRL

PKEY_GOST_CTRL01_STR

PKEY_GOST_CTRL94_STR

PKEY_GOST_MAC_CTRL

PKEY_GOST_MAC_CTRL_STR

PKEY_GOST_MAC_KEYGEN

bad key parameters format

bad pkey parameters format

cannot pack ephemeral key

error computing shared key

error packing key transport info

error parsing key transport info

incompatible peer key

invalid mac key length

key is not initalized

key is not initialized

key parameters missing

mac key not set

no peer key

no private part of non ephemeral keypair

public key undefined

unsupported cipher ctl command

unsupported parameter set

Private key:

Public key:

Parameter set: %s

Public key:

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

d.signedData

d.envelopedData

d.digestedData

d.encryptedData

d.authenticatedData

d.compressedData

d.allOrFirstTier

d.receiptList

otherCertFormat

otherCert

CMS_OtherCertificateFormat

d.certificate

d.extendedCertificate

d.v1AttrCert

d.v2AttrCert

CMS_CertificateChoices

d.issuerAndSerialNumber

d.subjectKeyIdentifier

d.crl

certificates

keyEncryptionAlgorithm

encryptedKey

CMS_KeyTransRecipientInfo

keyAttrId

keyAttr

CMS_OtherKeyAttribute

CMS_RecipientKeyIdentifier

d.rKeyId

CMS_KeyAgreeRecipientIdentifier

CMS_RecipientEncryptedKey

CMS_OriginatorPublicKey

d.originatorKey

CMS_OriginatorIdentifierOrKey

recipientEncryptedKeys

CMS_KeyAgreeRecipientInfo

keyIdentifier

keyDerivationAlgorithm

CMS_PasswordRecipientInfo

d.ktri

d.kari

d.kekri

d.pwri

d.ori

ECDH part of OpenSSL 1.0.1u 22 Sep 2016

certs

issuerKeyHash

OCSP_CERTID

reqCert

value.byName

value.byKey

value.good

value.revoked

value.unknown

OCSP_CERTSTATUS

certId

certStatus

crlUrl

Verifying - %s

PEM part of OpenSSL 1.0.1u 22 Sep 2016

Enter PEM pass phrase:

phrase is too short, needs to be at least %d chars

key_info

key_agreement_info

GOST_KEY_TRANSPORT

encrypted_key

GOST_KEY_INFO

ephem_key

GOST_KEY_AGREEMENT_INFO

key_params

GOST_KEY_PARAMS

GOST_CLIENT_KEY_EXCHANGE_PARAMS

.\engines\ccgost\gost94_keyx.c

gkt->key_agreement_info->eph_iv->length == 8

gkt->key_info->encrypted_key->length == 32

gkt->key_info->imit->length == 4

.\engines\ccgost\gost2001_keyx.c

value.other

value.x509cert

value.sdsicert

value.keybag

value.shkeybag

value.safes

value.bag

nkey <= EVP_MAX_KEY_LENGTH

.\crypto\evp\evp_key.c

operation canceled

address_family_not_supported

operation_in_progress

operation_not_supported

protocol_not_supported

operation_would_block

address family not supported

inappropriate io control operation

not supported

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

Visual C   CRT: Not enough memory to complete call to strerror.

Operation not permitted

Inappropriate I/O control operation

Broken pipe

operator

GetProcessWindowStation

D:\GasAntihack\workspace\gmodule\gah3-lol\workspace\Release\x86\launcher3\launcher.pdb

WS2_32.dll

ReportEventA

CryptDestroyKey

CryptGetUserKey

CryptExportKey

CertOpenStore

CertCloseStore

CertEnumCertificatesInStore

CertFindCertificateInStore

CertDuplicateCertificateContext

CertFreeCertificateContext

CertGetCertificateContextProperty

CRYPT32.dll

zcÁ

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="hXXp://VVV.w3.org/2001/XMLSchema-instance"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><applicationRequestMinimum><PermissionSet class="System.Security.PermissionSet" version="1" ID="Custom" SameSite="site"></PermissionSet><defaultAssemblyRequest permissionSetReference="Custom"></defaultAssemblyRequest></applicationRequestMinimum><ms_asmv3:requestedPrivileges xmlns:ms_asmv3="urn:schemas-microsoft-com:asm.v3"><ms_asmv3:requestedExecutionLevel xmlns:ms_asmv3="urn:schemas-microsoft-com:asm.v3" level="asInvoker" uiAccess="false"></ms_asmv3:requestedExecutionLevel></ms_asmv3:requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS></application></compatibility></assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING

4'4-444|6

>$?(?,?0?4?

8 9$9(9,9

9 9$9(9,90949

< <$<(<,<

5 5$5(5,5054585

:%;2;?;^;

4M4h4o4z4

5"6(6,60646

?!?.?8?^?

9':9:?:]:

< <$<0<8<@<

2 2$2(2,2024282<2

(7,70747

2Terms of use at hXXps://VVV.verisign.com/rpa (c)101.0,

hXXp://sf.symcb.com/sf.crl0a

hXXps://d.symcb.com/rpa0

hXXp://sf.symcd.com0&

hXXp://sf.symcb.com/sf.crt0

<VeriSign Class 3 Public Primary Certification Authority - G50

DhXXp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0

hXXps://VVV.verisign.com/cps0*

hXXps://VVV.verisign.com/rpa0

#hXXp://logo.verisign.com/vslogo.gif04

#hXXp://crl.verisign.com/pca3-g5.crl04

#hXXp://logo.verisign.com/vslogo.gif0

&hXXps://VVV.globalsign.com/repository/03

"hXXp://crl.globalsign.net/root.crl0

&hXXps://VVV.globalsign.com/repository/0

1hXXp://crl.globalsign.com/gs/gstimestampingg2.crl0T

8hXXp://secure.globalsign.com/cacert/gstimestampingg2.crt0

hXXp://sv.symcb.com/sv.crl0a

hXXp://sv.symcd.com0&

hXXp://sv.symcb.com/sv.crt0

hXXp://s2.symcb.com0

hXXp://VVV.symauth.com/cps0(

hXXp://VVV.symauth.com/rpa00

hXXp://s1.symcb.com/pca3-g5.crl0

.vmp0

`.reloc

@.rsrc

.Ph40

T.HtQ

%s"<g

-----BEGIN PUBLIC KEY-----

-----END PUBLIC KEY-----

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\ggplugincore.cpp

move fail; last error: %d

error: game plugin(%d) save auth token fail!

error: game plugin(%d) process promotion data fail!

error: game plugin(%d) process auth success fail!

error: game plugin(%d) process auth fail fail!

error: game plugin(%d) process promotion success fail!

error: game plugin(%d) process promotion fail fail!

PluginNS::CGGPluginCore::OnWebAuthSuccess

PluginNS::CGGPluginCore::OnWebAuthFail

toupdate plugin:%s

new plugin:%s

Logic Error(%s:%d):Error Code:%d

can not get the xml node named:%s

url_gameplugins_root

url_gameplugins_root_I

error: plugin core get game plugin(%d) exception!

c:\work\garenaplus\working\tool\boost\include\boost\exception\detail\exception_ptr.hpp

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\ggnetplugin\fo3plugin.cpp

error: game plugin(%d) username, password or GCA have not getted correctly!

langlist_plugin_supported

gamepanel_button_support

com.garena.ui.layout

com.xll.ui.xmlui

com.xll.ui.uihost

c:\work\garenaplus\working\im\myutils\pluginkernel\pluginautoptr.h

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\ggnetplugin\honplugin.cpp

error: game plugin(%d) username or password have not getted correctly!

flag_gameregion_supported

langlist_game_supported

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\ggnetplugin\lolplugin.cpp

plugin(%d): retrive user info or GCA info fail!

register.xml is not empty, version:%d

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\xmlconfig\gamepluginsreg.cpp

display.xml is not empty, version:%d

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\xmlconfig\xmlgamedisplayconfig.cpp

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\tcpprocessor\authfailprocessor.cpp

Auth error code: %d

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\tcpprocessor\encryptedauthfailprocessor.cpp

Encrypted auth error code: %d

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\ui\coregamewindow.cpp

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\update\pluginrdupdate.cpp

register.xml is merged into common, version:%d

com.garena.http.downloader

display.xml is merged into common, version:%d

PluginAutoPtr<class IHttpDownloader>::Create

c:\work\garenaplus\working\im\imclient\ggplugins\ggplugin\update\pluginupdate.cpp

com.garena.http.client

PluginAutoPtr<class IHttpClient>::Create

CXmlKeyBind

CXmlKeyItem

Setting file: %s --

GetNamedSecurityInfo error:%d

SetEntriesInAcl error:%d

SetNamedSecurityInfo error:%d

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\path\path.cpp

Setting file: %s   

url_gamerinfo

info: game(%d) active exit monitored!

info: game(%d) active created monitored!

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\plugin\gameplugin\netgameplugin.cpp

timeout_betakeycheck

timeout_betakey

url_betakey

error_betakey_md5

error_betakey_server

url_serverstatus

url_gameversion

error: game plugin(%d) retrive username, password or gca fail!

session_token_url

port_auth_conn_server

plugin %d, sart game faile, last error:%d

port_gamebuddy_import_server

domain_gamebuddy_import_server

url_stats

c:\work\garenaplus\working\tool\boost\include\boost\property_tree\detail\json_parser_read.hpp

com.garena.plugindata.myinfo

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\hostdata\pluginhost.cpp

gca product id: %d expired time: %d

game gca flag: %d

com.garena.plugininf.gamemgr

com.garena.plugininf.request

com.garena.plugininf.core

"md5password": "

{"md5password":"

%u.%u.%u.%u

write file faild %d

open and write file faild %d

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\file\fileutil.cpp

auth_http_fail

url_cdn_root

game_betakeyactivate

game_betakeychecking

game_sms_1hourlimit

url_downloader

url_install

url_open_redirect_bystart

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\ui\netgamewindow.cpp

plugin(%d): betakey invalid

url_betakey_activate

update_err_url

url_home_beta

url_topup

url_support

url_button_top1

url_button_top2

url_button1

url_button2

url_button3

url_home

url_flash_install

url_bg_link

url_flash_resource

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\ui\gamewindow.cpp

read mpg file error, error code: %d

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\waveplayer\waveplayer.cpp

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\plugin\gameplugin\mobilegameplugin.cpp

com.garena.plugininf.eventreg

plugin %d, sart mobile game failed, last error:%d

appId:%d, redirectUri: %s

plugin %d, mobile game request auth!

url_apk

d.png

p.png

h.png

n.png

url_rss

url_banner

error: game(url:%s) init ggdownloader fail!

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\downloader\ggdownloader.cpp

error: game(url:%s) create ggdownloader fail!

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\gca\cafeupdate.cpp

update game by third app(%s)

Download patch:%d

cmd-strip-fist-componet

param-cmd

install emulator patch:%d

tcp.net_auth

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\action\netgameauth.cpp

error: game(%d) connect to authentication server fail!

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\tcpclient\ntcpclient.h

ggpbase::CNTcpClient<class ggpbase::CTcpNetAuth>::CTcpSocketEvent::OnConnected

error: game plugin(%d) tcp connected!

ggpbase::CNTcpClient<class ggpbase::CTcpNetAuth>::CTcpSocketEvent::OnRecvException

error: game plugin(%d) tcp recvive exception, error code(%d)!

error: game plugin(%d) tcp connect fail!

ggpbase::CNTcpClient<class ggpbase::CTcpNetAuth>::CTcpSocketEvent::OnConnectFailed

error: game plugin(%d) tcp connection exception!

ggpbase::CNTcpClient<class ggpbase::CTcpNetAuth>::CTcpSocketEvent::OnSendException

error: game plugin(%d) tcp send exception!

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\tcpclient\npacketrouter.h

ggpbase::CNPacketRouter<class ggpbase::CTcpNetAuth>::__OnPacketReceive

error: game plugin(%d) packet error!

ggpbase::CNPacketRouter<class ggpbase::CTcpNetAuth>::__HandlePacket

error: game plugin(%d) packet processor not match!

tcp.net_prom

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\action\netgameprom.cpp

ggpbase::CNTcpClient<class ggpbase::CTcpNetProm>::CTcpSocketEvent::OnConnected

ggpbase::CNTcpClient<class ggpbase::CTcpNetProm>::CTcpSocketEvent::OnRecvException

ggpbase::CNTcpClient<class ggpbase::CTcpNetProm>::CTcpSocketEvent::OnConnectFailed

ggpbase::CNTcpClient<class ggpbase::CTcpNetProm>::CTcpSocketEvent::OnSendException

ggpbase::CNPacketRouter<class ggpbase::CTcpNetProm>::__OnPacketReceive

ggpbase::CNPacketRouter<class ggpbase::CTcpNetProm>::__HandlePacket

common_install_btn_website

install_openwebsite

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\ui\langselectlayerwindow.cpp

update layer fail, last error(%d)

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\ui\overflashlayerwindow.cpp

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\action\flashdownloader.cpp

url_emulator_download

url_emulatorversion

url_emulatorversion_I

c:\work\garenaplus\working\im\imclient\ggplugins\ggpbase\resource\resourceupdate.cpp

start to update %s from version(%s)

update rss finished from %s

save fail from %s

format fail from %s

download rss fail from %s.

encrypt fail from %s

%s is not in server side, should be deleted!

[d-d-d d:d:d d tid:0xx]

[%s(%d) %s]

Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag

boost::filesystem::directory_iterator::operator  

.dni^

F.ZlGc

SHFileOperationW

SHELL32.dll

SHLWAPI.dll

MSVCP90.dll

CommonLib.dll

PluginKernel.dll

DibModule.dll

CxImage.dll

_ExtExecCtrlAPI2@0

ggspawn.dll

MSVCR90.dll

_malloc_crt

_amsg_exit

_crt_debugger_hook

FileLoader.dll

PluginModule.dll

VersionModule.dll

MSIMG32.dll

LIBEAY32.dll

XLL.dll

ImageModule.dll

libmpg123.dll

WINMM.dll

ggdownloader.dll

InternetCrackUrlW

HttpQueryInfoW

HttpSendRequestW

HttpOpenRequestW

HttpEndRequestW

HttpSendRequestExW

InternetCanonicalizeUrlW

IPHLPAPI.DLL

SETUPAPI.dll

GetWindowsDirectoryW

RegOpenKeyW

RegEnumKeyExW

RegOpenKeyExW

ShellExecuteW

ggplugin.dll

.?AV?$CSingletonSupportT@VCGGPluginCore@PluginNS@@@ggpbase@@

.?AVCGGWebPlugin@PluginNS@@

.?AVCWebGamePlugin@ggpbase@@

.?AVCGGWebPluginWindow@UI@@

.?AVCWebGameWindow@UI@@

.?AVCXmlKeyBind@ggpbase@@

.?AVCXmlKeyItem@ggpbase@@

.?AVCHttpDownloader@ggpbase@@

.?AV?$CSingletonSupportT@VCGameSetting@ggpbase@@@ggpbase@@

.PB_W

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@D@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@D@classic@spirit@boost@@U?$optional@V?$chset@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@D@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@DV?$allocator@D@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

.?AVCBetakeyCheckImp@ggpbase@@

.?AV?$CNTcpClient@VCTcpNetAuth@ggpbase@@@ggpbase@@

.?AVCTcpSocketEvent@?$CNTcpClient@VCTcpNetAuth@ggpbase@@@ggpbase@@

.?AVITcpSocketHandler@@

.?AV?$CNTcpClient@VCTcpNetProm@ggpbase@@@ggpbase@@

.?AVCTcpSocketEvent@?$CNTcpClient@VCTcpNetProm@ggpbase@@@ggpbase@@

.?AVCAsyncHttpImp@?A0x31decd4a@ggpbase@@

.?AVCHttpClient@ggpbase@@

.?AVwindows_file_codecvt@@

"%xb3

%Cg5clh/

h7%Dh

_yv.KUZ

K.PPa

UÚ3

VYm%UWZ

='.yz/p

(Z#i.Wd

lh/

ih.dm

oc!%f

4.Vaf

@%%6S

.WM Zd

|.ea3

|G^%U

=&>,>5>:>

3<3w3

;-<6<?<}<

> ?$?(?,?

0D0

<&=8=&>8>

6074787<7

2 2$2(2,202

5o6X6i6s6{6

8 8$8(8,8084888

5]5j5z5

6(646@6|6

8%8S8f8

1$1*10161

2!2=2`2

7'737<7^7

2,2O2X2d2p2|2

8!8-898\8

8'838<8_8

>%>1>=>`>

< <$<(<|<

9 9$9(9,909|9

3 3$3(3,3034383<3

4 4$4(4,40444

3 3$3(3,30343

6,686@6`6

2$2,282`2

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

<assemblyIdentity type="win32" name="Microsoft.VC90.CRT" version="9.0.21022.8" processorArchitecture="x86" publicKeyToken="1fc8b3b9a1e18e3b"></assemblyIdentity>

hXXp://sv.symcb.com/sv.crl0f

.upx0

C:\work\GarenaPlus\Working\im\imclient\ggplugins\Release\ggplugin.pdb

00X0~0

11U1e1~1

7!7-7P7e7q7}7

?'?3?<?_?

11X1

5Q5=5`5

88S8j8

2*2/252:2_2

4 4$4(4,4044484

2 2$2(2,20242

? ?$?(?,?0?4?8?<?@?

0,080@0`0

<$<,<8<`<

2,282@2\2|2

1.2.3

deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly

inflate 1.2.3 Copyright 1995-2005 Mark Adler

<fd:%d>

%c%c%c%c%c%c%c%c%c%c

MSVCRT.dll

zlib1.dll

hXXps://secure.comodo.net/CPS0C

2hXXp://crl.comodoca.com/COMODORSACodeSigningCA.crl0t

2hXXp://crt.comodoca.com/COMODORSACodeSigningCA.crt0$

hXXp://ocsp.comodoca.com0

"COMODO RSA Certification Authority0

3hXXp://crl.usertrust.com/AddTrustExternalCARoot.crl05

hXXp://ocsp.usertrust.com0

;hXXp://crl.comodoca.com/COMODORSACertificationAuthority.crl0q

/hXXp://crt.comodoca.com/COMODORSAAddTrustCA.crt0$

hXXp://VVV.usertrust.com1

1hXXp://crl.usertrust.com/UTN-USERFirst-Object.crl05

|$(h%C

4$h5Œ

b:\.S

x:\ S

.gjDx

).Wsp

pd,`%U

f.fJffn

.xtqE

"5.sC

.VK:t

a.XP_.xC

.CQQ&

}p.Zx

To.qR

n%CxaC

.hXa8

.?%S8W

po!%uO

pvo.Pt/

.kk^t

Z.mr;

f-j}B

N".nT

G.Gls

WfÚ

!.wxf

.Be5T

.UPi,

s"f.Acm

yExEt

"1.jP\

5Z.lJ

\.aWs

u!.gi

lv@%x

.kxB)

n.om^p

.Cl38

.KHP;

.pFPe

A%s!B

.rX@=

U%Ci-

DX.DP

%c:1t

CRts"

%Uw]9

7.Ex 0

TC%C`

mg%Uq

TFtP)q

j.twi~

duR.NE

\P.bz

T.xR:

"Êt

q).QL

e.jV=V

]sBS.vY

.XJ"%/

p*&^.jZ}

9,=.pp|

b$"%C

?%S:vE

,.udf

ETÎ

.au@>3

.WpVb

V.EH-

)'%UG

b%SRw@K

F%suZ

#%x<h

ma;cMDw

x%X@5

.jSba

9.QA.t>

` %S.

$>K1%d

n:v%x?

N.NFN^Jn

u-ye}u}}}

q%u-yE}]}

r.rNr~r

q%u5yM}

r.rNrfrvr

x.xFxv

r.rNrvr

.Ql*&

%1S(3-

sf

9|`.Rqb

IUY%sSo%2

.Qa*M

gd^%f

3?%f*

)k%s8W

.Jz/w

O_r)%Us

.Is&r

Ô`e

.QM4=R

a.JwK

.eD3Y

u=.eU

rA%fV

!e.}%u

.dL7jQ

bzd.Za

SÞU

!%u%1

c/-2}

,.fS5

99Z$t.%F

]9.%u

i-.Um

.Lx}=TYF

em.MU7w

_kfC'1CFùkyC

Q.ml~5!

URLM

X`I%f

Hrrm.lv

.EpA@G'

{.dAK4

"HR%d

#z5%X2rF9

We.oG

z X-b}"r

.PZcG

M4.It

`.CX5X

oU.mEy

.aB:G

b.%X){

tIUN%s

jKv.af

F`x%S

v~{ÊM

C:\E&

rk.iiv

EÍq

.lig,n

Fm.eb

~.Eti

.wai37D

I%fU3

V%ci~

.EijG

&.Bn=

i{É

&.Ozdb

:.vc#&

i(%cu9

&.SZ50

j1%fN9{aR

.DmKqq

udPW

T-N9}

m".FO

^EBN-%UV

H.bjKP

,.lvo

Z.bbWd

r.Fp$

.Jz;^

#y.DBlKI|

.JB26

W.GCx2

Er-%x

!K) Ýc

Nn~%Fz:

E:\{`

!hr-s}s

.kTf@d

RQ.KCsfv

nJscl%d

.rhyf

%UJ@_v

7.WU:

.KNG_

6)%Cmz`

_y.XU

BR~jÚ

.KB7P

&.rI_

rTcP

.cVkQD:m

.Q.vV

%uz)7

9.ii#

-9J%u

.JK Z!

!%)-159=

#%sSe

=þy

V,J}%f

C/yI%X'

vM%D;

K@'.ROJ

.ebYi

udP`1P}

CQ.sC

LS.Xs

.%c=w

fö&7

%cnc4M

MSVBVM60.DLL

&.px5

'G%xA

.yUoW

.TX,&$=*~

%c<ZB

L%Ucsh

"&.aP

rHx0.gr5

w.BWg

lJÊXi

2e]3

OcRt

QUDP.

%c-b"

TxCrt0

.Bim$]!

jH.ys

aP.aU

crTDCr

b<n.Ea

D{.Fo

eP.Nw30

"t.krx

p.jgz#

b_A%ub

rv.Zbh

ìRT

(FC%c

.GS M

\Tcp_

Jy.DD"

NA%Cj9

%DS;>Q

bRN.BVQ

1%D$a

x:\ S

Wuser32.dll

C:\Users\Admin

S*\AD:\-Mesengger\Garena Corp Program\GasAntihack\gah3-pb\Project1.vbp

78E1BDD1-9941-11cf-9756-00AA00C00908

28C4C820-401A-101B-A3C9-08002B2F49FB

9368265E-85FE-11d1-8BE3-0000F8754DA1

\PerX.ini

Can't find LoadLibrary API from kernel32.dll

pbid.exe

PointBlank.exe

BBTalk.exe

ggdllhost.exe

C:\Windows\system32\Tasks\svchost.exe

C:\windows\system32\zrpt5.dll

cmd.exe /c icacls C:\Windows\SysWOW64\zrpt5.dll /reset

cmd.exe /c icacls C:\windows\system32\zrpt5.dll /grant %username%:(DE)

\Apps\PBID\pbid.exe

cmd.exe /c icacls C:\windows\system32\zrpt5.dll /grant everyone:(DE)

C:\windows\Fonts\manda1.tff

%Documents and Settings%\All Users\Application Data\GarenaMessenger\app.ini

C:\ProgramData\GarenaMessenger\app.ini

\Apps\PBID\USG\USG.mpr

\Apps\PBID\pbid.ss

\Apps\PBID\zlib1.dll

Apps\PBID\USG\zlib1.dll

\Plugins\ggplugin.dll

c:\windows\system32\drivers\etc\hosts

IN Jamu.exe

GarenaMessenger.exe

hXXp://pekalonganindo.com/fileindo2/PBIndo.txt

C:\Windows\TheMondex.ini

hXXp://VVV.pekalongancomuniti.com

\Apps\PBID\USG\USG.apr

Apps\PBID\USG\USG.apr

hXXp://pekalonganindo.com/fileindo2/truq.dll1

c:\Windows\system32\MSINET.OCX

c:\Windows\system32\MSCOMCTL.OCX

c:\Windows\system32\COMDLG32.OCX

@*\AD:\-Mesengger\Garena Corp Program\GasAntihack\gah3-pb\Project1.vbp

RemotePort

Pass&word

6.01.9782

is a registered trademark of Microsoft Corporation. Windows(tm) is a trademark of Microsoft Corporation.

Returns/Sets the remote computer@Returns/Sets the internet port to be used on the remote computer

5Returns information received from the remote computer9Returns a response code received from the remote computer6Returns the low-level internet handle for this control.Returns whether this control is currently busy)Returns/Sets the URL used by this control5Returns/Sets the Document to be retrieved from server

>Returns/Sets the proxy behavior for this control's connections7Event interface for Microsoft Internet Transfer Control#Microsoft Internet Transfer Control&Issue a request to the remote computer:Method used to cancel the request currently being executed

Secure HTTP

Protocol to use for this URL#User name to use for authentication"Password to use for authentication

Open a URL

URL is malformed&Protocol not supported for this method Unable to connect to remote host

Unable to complete request4You must execute an operation before retrieving data

Request timed out Not a valid or supported command

Still executing last request,This call is not valid for an FTP connection

Invalid URL

Login failure

Invalid operation

Operation cancelled

Handle exists!Security certificate date invalid#Security certificate number invalid

HTTP to HTTPS on redirect

HTTPS to HTTP on redirect

Post is non-secure'Client authorization certificate needed

FTP - Connection dropped

HTTP - Header not found

HTTP - Downlevel server

HTTP - Invalid Header

HTTP - Invalid query request

HTTP - Header already exists

HTTP - Redirect failed

HTTPS HTTP submit redir

FTP - no passive mode HTTP - cookie needs confirmation

HTTP - cookie declined"HTTP - redirect needs confirmation

Invalid cert

Cert revoked

URL'URL properties for the internet control

ED4B87C4-9F76-11d1-8BF7-0000F8754DA1

57CBF9E0-6AA7-11cf-8ADB-00AA00C00905

DB4C0D00-400B-101B-A3C9-08002B2F49FB

ImageKey

SortKey

Key is not unique in collection

Invalid key;The first column in a ListView control must be left aligned$This item's control has been deleted&Control's collection has been modified

Windows Common Controls ActiveX Control DLL

is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation

MSCOMCTL.OCX

&Key:

Sort&Key:

 Microsoft Windows Common Controls 6.0 (SP6)

Common Controls Property Page<Displays a collection of individually sizable column headers"Event interface for Header ControlMReturns/sets a value that determines whether a user can reorder header items.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.

3DQA collection whose elements represent each contained control in a parent control.-Returns the number of members in a collectionMReturns a specific member of a Collection object either by position or by key`Contains a collection of ListImage objects, each of which can be referred to by its index or key

3Occurs when the contents of a control have changed.MOccurs when the user presses and then releases a mouse button over an object.oOccurs when the user presses and releases a mouse button and then presses and releases it again over an object.FOccurs when the list portion of the Image Combo is about to drop down.AOccurs when the user presses a key while an object has the focus.BOccurs when the user releases a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.

VerticalfReturns/sets a value that determines whether the Progress Bar is displayed vertically or horizontally.yReturns/sets a value that determines whether the control displays progress with a standard segmented bar or a smooth bar.

FReturns/sets the string displayed when a cursor hovers over an object.XConstants for the OLEDragMode property (but not the DragMode or OLEDropMode properties).BOLE drag/drop will be initialized only under programmatic control.jOLE drag/drop will be initialized when the user drags 'out' of the control, or under programmatic control.XConstants for the OLEDropMode property (but not the DragMode or OLEDragMode properties).$Accepts no OLE drag/drop operations.9Accepts an OLE drag/drop under programmatic control only.CState transition constants for the DragOver and OLEDragOver events.#Source control dragged into target.%Source control dragged out of target.>Source control dragged from one position in target to another.

Text (.txt file).

Bitmap (.bmp file).

Metafile (.wmf file).

Enhanced metafile (.emf file).*Filename list (Microsoft Windows Explorer)

Rich Text Format (.rtf file).3Drop effect constants for OLE drag and drop events.<No OLE drag/drop operation has taken place/would take place.@A mask to indicate that a copy has taken place/would take place.@A mask to indicate that a move has taken place/would take place.

Returns/Sets whether this control can act as an OLE drag/drop source, and whether this process is started automatically or under programmatic control.@Returns/Sets whether this control can act as an OLE drop target.3Clears all data and formats in a DataObject object.>Retrieves data of a specified format from a DataObject object.QDetermines if a specified clipboard format is supported by the DataObject object.EAdds a supported format and possibly its data to a DataObject object.7A collection of filenames used by the vbCFFiles format.nReturns a specific filename by index from the Files collection of a DataObject object (vbCFFiles format only).gReturns the number of filenames in the Files collection of a DataObject object (vbCFFiles format only).WAdds a filename to the Files collection of a DataObject object (vbCFFiles format only).cClears all filenames stored in the Files collection of a DataObject object (vbCFFiles format only).\Removes a filename from the Files collection of a DataObject object (vbCFFiles format only).

.Object variable or With block variable not set

.Object doesn't support this property or method

Non-intrinsic OLE drag and drop formats used with SetData require Byte array data. GetData may return more bytes than were given to SetData.NRequested data was not supplied to the DataObject during the OLESetData event.

Focus.Returns/sets the height of a ListImage object.DReturns/sets the width of ListImage objects in an ImageList control.dReturns/sets a value which determines the color to be transparent in ImageList graphical operations.QReturns a reference to a collection of ListImage objects in an ImageList control.)Returns a handle to an ImageList control.QReturns/sets the background color used to display text and graphics in an object.gCreates a composite third image out of two ListImage objects and returns a reference to the new object.@A bitmap or icon of any size that can be used in other controls..Returns the number of objects in a collection.aAdds a ListImage object to a ListImages collection and returns a reference to the created object.$Removes all objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.@A bitmap or icon of any size that can be used in other controls.KReturns/sets the index of an object in a collection. Read-only at run time.

<Returns/sets the unique string of an object in a collection..Stores any extra data needed for your program.

Microsoft ProgressBar Control'Returns/sets a control's maximum value.'Returns/sets a control's minimum value.MReturns/sets the type of mouse pointer displayed when over part of an object.

Sets a custom mouse icon.3Returns or sets a control's current Value property.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.,Returns/sets the border style for an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.&Returns a handle to a form or control.

ButtonsKReturns a reference to a collection of Tab objects in the TabStrip control.dReturns/sets a value that determines whether a form or control can respond to user-generated events.

Below/RightRReturns/sets the string displayed in the ToolTip as the slider's position changes.nReturns/sets a value that determines where the tooltip displaying the Slider's changing position is displayed.

OppositeUReturns/sets a value that determines whether the tab under the cursor is highlighted.kReturns/sets a value that determines whether multiple tabs can be selected while holding down the CTRL key.\Returns/sets a value that indicates on which side of the control the tabs will be displayed.

ZReturns/sets a value indicating whether the control can display more than one row of tabs.HReturns/sets the style appearance (tab or button) of a TabStrip control.dReturns/sets a fixed height of a TabStrip control, but only if the TabWidthStyle is set to tabFixed.KReturns/sets the width and justification of all tabs in a TabStrip control.?Returns the top coordinate of the internal area of the control.@Returns the left coordinate of the internal area of the control.7Returns the height of the internal area of the control.6Returns the width of the internal area of the control.MReturns/sets the type of mouse pointer displayed when over part of an object..Returns/sets the ImageList control to be used.dReturns/sets a fixed height of a TabStrip control, but only if the TabWidthStyle is set to tabFixed.!Enables/disables the Tooltip text

Returns/sets the selected Tab/Forces a complete repaint of a form or control.MOccurs when the user presses and then releases a mouse button over an object.AOccurs when the user presses a key while an object has the focus.

Returns/sets a value that determines whether separators are drawn between buttons on a tabstrip that has the tabButton or tabFlatButton styles.@Returns/sets a value that determines the minimum width of a tab.bReturns/sets a value that determines how remaining tabs are positioned when a new tab is selected.&Deselects all currently selected tabs.DReturns/sets a value that indicates whether the Tab is highlighted..gReturns/sets a value which determines if the control displays a checkbox next to each item in the tree.

Returns/sets a value which determines if the entire row of the selected item is highlighted and clicking anywhere on an item's row causes it to be selected.dReturns/sets a value which determines if items are highlighted as the mousepointer passes over them.yReturns/sets a value which determines if the TreeView displays scrollbars and allows scrolling (vertical and horizontal).

Returns/sets a value which determines if selecting a new item in the tree expands that item and collapses the previously selected item.IReturns/sets the background color used to display text for a Node object.fReturns/sets a value that determines whether the text for a Node object is displayed with a bold font.FReturns/sets a value that determines whether a Node object is checked.IReturns/sets the foreground color used to display text for a Node object.vWhen set to True, the plus sign is displayed for a parent node regardless of whether or not the node has any children.

Toolbar Style constants.6Occurs when the user presses and releases an ANSI key.BOccurs when the user releases a key while an object has the focus.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.

StatusBar Tabs collection.Returns the number of objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.$Removes all objects in a collection.'Adds a Tab object to a Tabs collection.KAn individual object, analogous to a page, contained in a TabStrip control.SReturns/sets the text displayed in an object's title bar or below an object's icon..Stores any extra data needed for your program.KReturns/sets the index of an object in a collection. Read-only at run time.<Returns/sets the unique string of an object in a collection.FReturns/sets the string displayed when a cursor hovers over an object.$Returns/sets the width of an object.%Returns/sets the height of an object.gReturns/sets the distance between the internal top edge of an object and the top edge of its container.iReturns/sets the distance between the internal left edge of an object and the left edge of its container.OReturns/sets a value which determines if a ListItem or Node object is selected.?Returns/sets the index or key of a ListImage object to be used.

Toolbar Value constants.7Returns/sets the text displayed in the ButtonMenu item.AOccurs when the user selects an item from a button dropdown menu.pReturns/sets the ImageList control to be used for storing images displayed when a button is in a disabled state.hReturns/sets the ImageList control to be used for storing images displayed when a button is highlighted.

RightpReturns/sets a value that determines whether button text is displayed below or to the right of the button image.1Returns the number of SubItems in the collection.HAdds a ListSubItem object to a ListSubItems collection only at run time.$Removes all objects in a collection.LReturns a specific item of a Collection object either by position or by key.,Removes a specific member from a collection.#Returns current position of column. Returns/sets the subitem's report view icon

ToolBar Buttons.Returns the number of objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.$Removes all objects in a collection.[Adds a Button object to a Buttons collection and returns a reference to the created object.

ToolBar ButtonSReturns/sets the text displayed in an object's title bar or below an object's icon..Stores any extra data needed for your program.dReturns/sets a value that determines whether a form or control can respond to user-generated events.KReturns/sets the index of an object in a collection. Read-only at run time.<Returns/sets the unique string of an object in a collection.FReturns/sets the string displayed when a cursor hovers over an object.LReturns/sets a value that determines whether an object is visible or hidden.

Transparent>Returns/sets a value that determines how the Toolbar is drawn.JReturns a reference to a Button object's collection of ButtonMenu objects.

ToolBar ButtonMenus.Returns the number of objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.$Removes all objects in a collection.cAdds a ButtonMenu object to a ButtonMenus collection and returns a reference to the created object.

ToolBar ButtonMenudReturns/sets a value that determines whether a form or control can respond to user-generated events.KReturns/sets the index of an object in a collection. Read-only at run time.<Returns/sets the unique string of an object in a collection.EReturns/sets a reference to the parent Button of a ButtonMenu object..Stores any extra data needed for your program.

$Returns/sets the width of an object.%Returns/sets the height of an object.gReturns/sets the distance between the internal top edge of an object and the top edge of its container.iReturns/sets the distance between the internal left edge of an object and the left edge of its container.$Returns/sets the value of an object.

Returns/sets the button stylemReturns/sets the description displayed when the user clicks a Button object during a customization operation.?Returns/sets the index or key of a ListImage object to be used.?Returns/sets the index or key of a ListImage object to be used.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.IReturns/sets a value which determines if users can customize the Toolbar.HReturns a reference to a Toolbar control's collection of Button objects.dReturns/sets a value that determines whether a form or control can respond to user-generated events.&Returns a handle to a form or control.

Sets a custom mouse icon.MReturns/sets the type of mouse pointer displayed when over part of an object.

KReturns/sets the index of an object in a collection. Read-only at run time.<Returns/sets the unique string of an object in a collection..Stores any extra data needed for your program.LReturns/sets a value that determines whether an object is visible or hidden.TOccurs when the user clicks the dropdown arrow on a button with Style = tbrDropdown.DReturns/sets a collection of ListSubItems belonging to the ListItem.4Returns an array of column indexes in display order.EOccurs when Checkboxes = True and a Node object is checked/unchecked.pReturns/sets a value that determines if the text background is transparent or uses the ListView background color

ToolBar Controls Collection/Forces a complete repaint of a form or control.ZInvokes the Customize Toolbar dialog box when the user double-clicks on a Toolbar control.?Saves a Toolbar configuration in an initialization (.ini) file.aRestores a toolbar, created with a Toolbar control, to its original state after being customized.DOccurs when the user clicks on a Button object in a Toolbar control.nGenerated after the end user customizes a Toolbar control's appearance using the Customize Toolbar dialog box.MOccurs when the user presses and then releases a mouse button over an object.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.dOccurs when you press and release a mouse button and then press and release it again over an object.CA calibrated control with a slider for setting or selecting values.

No TicksLReturns/sets the increment value when the PageDown or PageUp key is pressed.MReturns/sets the increment value when the left or right arrow key is pressed.,Returns/sets the maximum value of a control.,Returns/sets the minimum value of a control.IReturns/sets the orientation of a Slider control, horizontal or vertical.

EReturns/sets whether or not a Slider control can have a select range.0Returns/sets the value where a selection starts.'Returns/sets the length of a selection.4Returns/sets where ticks appear on a Slider control.NReturns/sets the ratio of ticks on a Slider control; 1tick every n increments.$Returns/sets the value of an object.

Sets a custom mouse icon.MReturns/sets the type of mouse pointer displayed when over part of an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.&Returns a handle to a form or control.,Returns/sets the border style for an object./Forces a complete repaint of a form or control.

Sets the SelLength to 0.8Hidden method that can be used to invoke the Click event8Returns the number of visible ticks on a Slider control.MOccurs when the user presses and then releases a mouse button over an object.AOccurs when the user presses a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.BOccurs when the user releases a key while an object has the focus.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.

Slider scroll event6Indicates that the contents of a control have changed.gDisplays a hierarchical list of Node objects, each of which consists of a label and an optional bitmap.

.Returns/sets the ImageList control to be used.AReturns/sets the width of the indentation for a TreeView control._Returns/sets a value that determines if a user can edit the label of a ListItem or Node object.?Returns/sets the style of lines displayed between Node objects.MReturns/sets the type of mouse pointer displayed when over part of an object.

Sets a custom mouse icon.4Returns a reference to a collection of Node objects.VReturns/sets the delimiter string used for the path returned by the FullPath property.OReturns/sets a value which determines if a ListItem or Node object is selected.TIndicates whether the elements of a control are automatically sorted alphabetically.gDisplays a hierarchical list of Node objects, each of which consists of a label and an optional bitmap.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.,Returns/sets the border style for an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.

Returns a reference to the ListItem object or Node object located at the coordinates of x and y. Used with drag and drop operations.WReturns the number of Node objects that fit in the internal area of a TreeView control.>Begins a label editing operation on a ListItem or Node object./Forces a complete repaint of a form or control.`Occurs when a user attempts to edit the label of the currently selected ListItem or Node object.VOccurs after a user edits the label of the currently selected Node or ListItem object.BGenerated when any Node object in a TreeView control is collapsed.jOccurs when a Node object in a TreeView control is expanded; that is, when its child nodes become visible.%Occurs when a Node object is clicked.AOccurs when the user presses a key while an object has the focus.BOccurs when the user releases a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.MOccurs when the user presses and then releases a mouse button over an object.

Treeview Nodes collection.Returns the number of objects in a collection.WAdds a Node object to a Nodes collection and returns a reference to the created object.$Removes all objects in a collection.LReturns a specific item of a Collection object either by position or by key.,Removes a specific member from a collection.AAn object in a TreeView control that can contain images and text.8Returns a reference to the first child of a Node object.4Returns the number of child nodes a Node object has.BReturns/sets a value which specifies if a Node object is expanded.aReturns/sets the Index or Key of an image in an ImageList control used when the Node is expanded.BReturns a reference to the first Node object in a hierarchy level.2Returns the fully qualified name of a Node object.?Returns/sets the index or key of a ListImage object to be used.KReturns/sets the index of an object in a collection. Read-only at run time.<Returns/sets the unique string of an object in a collection.AReturns a reference to the last Node object in a hierarchy level.AReturns a reference to the next Node object in a hierarchy level.8Returns/sets a reference to the parent of a Node object.EReturns a reference to the previous Node object in a hierarchy level.BReturns a reference to the root Node object of a TreeView control.OReturns/sets a value which determines if a ListItem or Node object is selected.tReturns/sets the Index or Key of an image in an ImageList control which is displayed when a Node object is selected.TIndicates whether the elements of a control are automatically sorted alphabetically..Stores any extra data needed for your program.3Returns/sets the text to be displayed in a control.LReturns/sets a value that determines whether an object is visible or hidden.YCreates a composite image from an icon and a caption for use in drag and drop operations.^Ensures a ListItem or Node object is visible, scrolling or expanding the control if necessary.<Displays a collection of ListItems such as files or folders.

PartialWReturns/sets how the icons in a ListView control's Icon or SmallIcon view are arranged.<Returns a reference to a collection of ColumnHeader objects.kReturns a reference to a Node or ListItem object and highlights the object with the system highlight color.ZReturns/sets whether or not a ListView control's column headers are hidden in Report view.[Determines whether the selected item will display as selected when the ListView loses focusRReturns/sets the images associated with the Icon properties of a ListView control.NReturns a reference to a collection of ListItem objects in a ListView control._Returns/sets a value that determines if a user can edit the label of a ListItem or Node object.`Returns or sets a value that determines if labels are wrapped when the ListView is in Icon view.

Returns/sets a value indicating whether a user can make multiple selections in the ListView control and how the multiple selections can be made.FReturns a reference to the currently selected ListItem or Node object.VReturns/sets the images associated with the SmallIcons property of a ListView control.TIndicates whether the elements of a control are automatically sorted alphabetically."Returns/sets the current sort key.ZReturns/sets whether or not the ListItems will be sorted in ascending or descending order.6Returns/sets the current view of the ListView control.cReturns/sets whether or not controls, Forms or an MDIForm are painted at run time with 3-D effects.QReturns/sets the background color used to display text and graphics in an object.,Returns/sets the border style for an object.dReturns/sets a value that determines whether a form or control can respond to user-generated events.

QReturns/sets the background color used to display text and graphics in an object.&Returns a handle to a form or control.?Finds an item in the list and returns a reference to that item.CRetrieves a reference of the first item visible in the client area.

Returns a reference to the ListItem object or Node object located at the coordinates of x and y. Used with drag and drop operations.>Begins a label editing operation on a ListItem or Node object./Forces a complete repaint of a form or control.`Occurs when a user attempts to edit the label of the currently selected ListItem or Node object.VOccurs after a user edits the label of the currently selected Node or ListItem object.COccurs when a ColumnHeader object in a ListView control is clicked.4Occurs when a ListItem object is clicked or selectedAOccurs when the user presses a key while an object has the focus.BOccurs when the user releases a key while an object has the focus.6Occurs when the user presses and releases an ANSI key.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.

MOccurs when the user releases the mouse button while an object has the focus.MOccurs when the user presses and then releases a mouse button over an object.dOccurs when you press and release a mouse button and then press and release it again over an object.

ListView Item collection.Returns the number of objects in a collection.BAdds a ListItem object to a ListItems collection only at run time.$Removes all objects in a collection.LReturns a specific item of a Collection object either by position or by key.,Removes a specific member from a collection.

An item in a ListView control that contains the index of icons associated with it, text, and an array of strings representing subitems that are displayed in Report view.9Returns/sets the state of a ListView control Object item.%Returns/sets the height of an object.EReturns/sets the index of an icon in an associated ImageList control.KReturns/sets the index of an object in a collection. Read-only at run time.<Returns/sets the unique string of an object in a collection.iReturns/sets the distance between the internal left edge of an object and the left edge of its container.OReturns/sets a value which determines if a ListItem or Node object is selected.KReturns/sets the index of an small icon in an associated ImageList control..Stores any extra data needed for your program.3Returns/sets the text to be displayed in a control.gReturns/sets the distance between the internal top edge of an object and the top edge of its container.$Returns/sets the width of an object.CReturns/sets an array of strings representing the ListIitem's data.YCreates a composite image from an icon and a caption for use in drag and drop operations.^Ensures a ListItem or Node object is visible, scrolling or expanding the control if necessary.!ListView Column Header collection.Returns the number of objects in a collection.ZAdds a ColumnHeader object to a ColumnHeaders collection at both design time and run time.$Removes all objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.

LReturns/sets a value that determines where an object is displayed on a form.KReturns/sets the index of an object in a collection. Read-only at run time.<Returns/sets the unique string of an object in a collection.iReturns/sets the distance between the internal left edge of an object and the left edge of its container.]Returns the index of the subitem associated with a ColumnHeader object in a ListView control..Stores any extra data needed for your program.3Returns/sets the text to be displayed in a control.$Returns/sets the width of an object.

Single panel simple text[Returns/sets the text displayed when a StatusBar control's Style property is set to Simple.<Returns/sets the the single (simple) or multiple panel style5Returns a reference to a collection of Panel objects.MReturns/sets the type of mouse pointer displayed when over part of an object.

Sets a custom mouse icon.dReturns/sets a value that determines whether a form or control can respond to user-generated events.cReturns/sets a value that determines whether a form or control can respond to user-generated events

Similar to the standard DblClick Event, the PanelDblClick occurs when a user presses and then releases a mouse button twice over a StatusBar control's Panel object.LOccurs when the user presses the mouse button while an object has the focus.%Occurs when the user moves the mouse.MOccurs when the user releases the mouse button while an object has the focus.MOccurs when the user presses and then releases a mouse button over an object.dOccurs when you press and release a mouse button and then press and release it again over an object.

StatusBar Panels collection.Returns the number of objects in a collection.XAdds a Panel object to a Panels collection and returns a reference to the created Panel.

$Removes all objects in a collection.NReturns a specific member of a Collection object either by position or by key.,Removes a specific member from a collection.

2Returns/sets the text to be displayed in a controlKReturns/sets a value that determines whether an object is visible or hidden#Returns/sets the width of an object.Stores any extra data needed for your program.

ImageComboBox Property Page7Constants for the Style property of a ComboBox control.[ComboBox control style that allows typing in a text box or selection from a drop-down list.DOnly allows selection from the drop-down list in a ComboBox control.jComboBox control style that allows typing in a text box or selection from a list, which doesn't drop down.RAn object that represents an entry in the listbox portion of the combobox control.OIndex into ImageList control where the normal image for this item can be found.UNumber of spaces to indent the text for the item. Each indent is equal to 10 pixels.KReturns/sets the index of an object in a collection. Read-only at run time.<Returns/sets the unique string of an object in a collection.

AReturns/sets a value which determines if a ComboItem is selected.QIndex into ImageList control where the selected image for this item can be found.>Returns/sets a specific number for each item in an ImageCombo.

The ComboItems Collection.:Returns the number of members currently in the collection.MAdds an object to a collection and returns a reference to the created object.$Removes all objects in a collection.NReturns a specific member of a Collection object either by position or by key.8Removes the item at the given index from the collection.7Returns/sets the paint style of a control at run time. /Returns/sets the background color of an object.QReturns/sets whether string searches in the combobox list will be case sensitive.\Returns/sets a value that determines whether an object can respond to user-generated events.

Returns a Font object.QReturns/sets the foreground color used to display text and graphics in an object. Returns a handle to the control..Returns/sets the ImageList control to be used.jThe default number of spaces to indent the text for newly added items. Each indent is equal to 10 pixels.]Returns/sets a value indicating whether the contents in an Image Combo control can be edited.

Sets a custom mouse icon.sReturns/sets a value indicating the type of mouse pointer displayed when the mouse is over the control at run time.8Returns a reference to the currently selected ComboItem./Returns/sets the number of characters selected.wReturns/sets the starting point of text selected; indicates the position of the insertion point if no text is selected.

(Windows NT Only) Returns/sets a value that determines whether the edit box uses the slash ('/'), backslash ('\') and period ('.') characters as word delimiters.SRetrieves a reference of the first item visible in the list portion of the control.'Forces a complete repaint of a control.?Sets the first item visible in the list portion of the control.)Event interface for ImageComboBox control

LReturns/sets a value that determines whether a user can resize header items.dReturns/sets a value that determines whether a form or control can respond to user-generated events.

Header Items Collection]Returns/sets a value that determines whether the header item under the cursor is highlighted.&Returns a handle to a form or control..Returns/sets the ImageList control to be used.MReturns/sets the type of mouse pointer displayed when over part of an object.

Sets a custom mouse icon.3Enables/disables the Tooltip text for Header Items.YReturns/sets a value that determines whether Header Items will appear flat or as buttons.8Displays an AboutBox with information about the control.WReturns a reference to the Header Item object located at the specified x,y coordinates./Forces a complete repaint of a form or control.,Occurs when a Header Item object is clicked.3Occurs when a Header Item object is double clicked.EOccurs when the user begins dragging a Header Item to a new location.GOccurs when the user finishes dragging a Header Item to a new location.WOccurs when the user presses the mouse button while the mousepointer is over an object.;Occurs when the user moves the mousepointer over an object.XOccurs when the user releases the mouse button while the mousepointer is over an object.3Occurs when the user begins resizing a Header Item.5Occurs when the user finishes resizing a Header Item.,Occurs after a Header Item has been resized.

Returns/sets a value that determines whether the Header Item is automatically sized based on the amount of free space in the control.?Returns/sets the index or key of a ListImage object to be used.KReturns/sets the index of an object in a collection. Read-only at run time.<Returns/sets the unique string of an object in a collection.dReturns the distance between the internal left edge of an object and the left edge of its container.

;Returns the position of the Header Item within the control..Stores any extra data needed for your program.3Returns/sets the text displayed in the Header Item.FReturns/sets the string displayed when a cursor hovers over an object.$Returns/sets the width of an object.

Header Items Collection.Returns the number of members in a collection.NReturns a specific member of a Collection object either by position or by key.MAdds an object to a collection and returns a reference to the created object.$Removes all objects in a collection.,Removes a specific member from a collection.

ListView SubItem object?Returns/sets the text to display text for a ListSubItem object.PReturns/sets the foreground color used to display text for a ListSubItem object.mReturns/sets a value that determines whether the text for a ListSubItem object is displayed with a bold font.MReturns/sets a value that determines whether a ListSubItem object is checked.EReturns/sets the index of an icon in an associated ImageList control.?Returns/sets whether a user can reorder columns in report view.0Returns/sets whether the scrollbars appear flat.BReturns/sets whether selecting a column highlights the entire row.?Returns/sets whether grid lines appear between rows and columns-Returns/sets whether hot tracking is enabled.0Returns/sets whether hover selection is enabled.EReturns/sets the ImageList control to be used for ColumnHeader icons.@Returns/sets the ImageList control to be used for SubItem icons.

4Returns/sets the background picture for the control.jReturns/sets a value that determines whether the text for a ListItem object is displayed with a bold font.gReturns/sets a value which determines if the control displays a checkbox next to each item in the list. Occurs when a ListSubItem object is checked3Determines the placement of the background picture.,Aligns background picture to the upper left.-Aligns background picture to the upper right.,Aligns background picture to the lower left.-Aligns background picture to the lower right.(Aligns background picture to the center.2Tiles the picture to fill the ListView background.#Returns/sets the picture alignment.MReturns/sets a value that determines whether a ListSubItem object is checked.

Error #%d

Invalid entry for %s

All Picture Files|*.bmp;*.dib;*.ico;*.cur;*.gif;*.jpg|Bitmaps (*.bmp;*.dib)|*.bmp;*.dib|Icons & Cursors (*.ico;*.cur)|*.ico;*.cur|GIF Images (*.gif)|*.gif|JPEG Images (*.jpg)|*.jpg|All Files (*.*)|*.*||

POLE Automation function not found. You may need a newer version of OLEAUT32.DLL

4D553650-6ABE-11cf-8ADB-00AA00C00905

HelpKey

CmDlg

Help&Key:

CMDialog ActiveX Control DLL

CMDIALOG

Printer Dialog Box Constants1Sets or returns state of All Pages option button. Sets or returns state of Collate check box.%Disables the Print to File check box.-The Print to File check box is not displayed.4Sets or returns the state of the Pages option button%Disables the Selection option button.<Prevents a warning message when there is no default printer.5Sets or returns the state of the Pages option button.EDisplays the Print Setup dialog box rather than the Print dialog box.9Sets or returns the state of the Print to File check box.3Returns a device context for the printer selection.

)Couldn't determine procedure address(es).!Failed to show the common dialog.HThe printer device driver failed to initialize a DevMode data structure.

Printer Orientation Constants$Dialog box displays the Help button.!Sets support for multiple copies.

Color Dialog Box Constants,Sets initial color value for the dialog box.KEntire dialog box is displayed, including the Define Custom Colors section.<Disables the Define Custom Colors section of the dialog box."Dialog box displays a Help button.#File Open/Save Dialog Box Constants=Checks Read Only check box for Open and Save As dialog boxes.<Generates a message box if the selected file already exists.

Hides the Read Only check box.JSets the current directory to what it was when the dialog box was invoked.1Causes the dialog box to display the Help button.4Allows invalid characters in the returned file name.:Allows the File Name list box to have multiple selections.LExtension of returned file name is different from the one set by DefaultExt.

%User can enter only valid path names.,User can enter only names of existing files.FAsks if the user wants to create a file that does not currently exist.)Sharing violation errors will be ignored.<The returned file will not have the Read Only attribute set. Windows 95 Open A File dialog box template.

Fonts Dialog Box Constants;Dialog box lists only screen fonts supported by the system.5Dialog box lists only fonts supported by the printer.4Dialog box lists available screen and printer fonts."Dialog box displays a Help button.7Dialog enables strikeout, underline, and color effects.$Dialog box enables the Apply button.@Dialog box allows only fonts that use the Windows character set.QReturns/sets the name (without the path) of the file to open or save at run time.4Displays the CommonDialog control's Open dialog box.7Displays the CommonDialog control's Save As dialog box.5Displays the CommonDialog control's Color dialog box.3Displays the CommonDialog control's Font dialog box7Displays the CommonDialog control's Printer dialog box.8Runs Winhelp.EXE and displays the Help file you specify.

3Dialog box should not allow vector-font selections.LDialog box should not allow graphic device interface (GDI) font simulations.HSelects font sizes within the range specified by Min and Max properties.0Dialog box should select only fixed-pitch fonts.LAllows only the selection of fonts available to both the screen and printer.GDisplays an error if a user selects a font or style that doesn't exist.>Dialog box should allow only the selection of scaleable fonts.>Dialog box should allow only the selection of True Type fonts.

"Portrait printer paper orientation#Landscape printer paper orientation

BThe Common Dialog function failed to parse the strings in WIN.INI.

KThe [devices] section of WIN.INI does not contain an entry for the printer.:The PDReturnDefault flag was set, but a field was nonzero./Application did not provide an instance handle.

Help Constants%Displays Help for a particular topic.ONotifies the Help application that the specified Help file is no longer in use..Displays the index of the specified Help file.5Displays the contents topic in the current Help file.3Display Help for using the Help application itself. Set the current Index for multi-index Help.2Designates a specific topic as the contents topic.0Displays a topic identified by a context number.

8Creates a Help file that displays text in only one font.'Displays Help for a particular keyword.'Displays Help for a particular command.'Call the search engine in Windows Help.6Returns/sets the path and filename of a selected file.=Sets the string displayed in the title bar of the dialog box.QReturns/sets the filters that are displayed in the Type list box of a dialog box.?Returns/sets the default filename extension for the dialog box.(Returns/sets the initial file directory. Returns/sets the selected color."Sets the options for a dialog box.LSpecifies the name of the font that appears in each row for the given level.

Returns/sets bold font styles. Returns/sets italic font styles.'Returns/sets strikethrough font styles.#Returns/sets underline font styles.8Returns/sets the value for the first page to be printed.8Returns/sets the value for the first page to be printed.RSets the smallest allowable font size (Font dialog) or print range (Print dialog).OReturns/sets the maximum font size (Font dialog) or print range (Print dialog).HReturns/sets a value that determines the number of copies to be printed.PIndicates whether an error is generated when the user chooses the Cancel button.CReturns/sets the name of the Help file associated with the project./Returns/sets the type of online Help requested.BReturns/sets the keyword that identifies the requested Help topic.fDetermines if user selections in the Print dialog box are used to change the default printer settings.@Returns/sets a default filter for an Open or Save As dialog box.8Returns/sets the context ID of the requested Help topic.XSpecifies the size (in points) of the font that appears in each row for the given level.4Returns/sets the type of dialog box to be displayed.TReturns/sets the maximum size of the filename opened using the CommonDialog control.IReturns a handle (from Microsoft Windows) to the object's device context.

The ENABLEHOOK flag was set in the Flags member of a common-dialog data structure but the application failed to provide a pointer to a corresponding hook function.RThe common dialog function was unable to lock the memory associated with a handle.VThe common dialog function was unable to allocate memory for internal data structures.?The common dialog function failed to lock a specified resource.?The common dialog function failed to load a specified resource.?The common dialog function failed to find a specified resource.=The common dialog function failed to load a specified string.

The ENABLETEMPLATE flag was set in the Flags member of a common-dialog data structure but the application failed to provide a corresponding template.wThe common dialog function failed during initialization. This error often occurs when insufficient memory is available.TThe lStructSize member of the corresponding common-dialog data structure is invalid.

Call to Windows Help failed.*The function failed during initialization.1The function failed to load a specified resource./The function failed to load a specified string.1The function failed to lock a specified resource.HThe function was unable to allocate memory for internal data structures.DThe function was unable to lock the memory associated with a handle.

BThe PrintDlg function failed when creating an information context.EDevMode and DevNames data structures describe two different printers.HThe printer-device driver failed to initialize a DEVMODE data structure.

]The [devices] section of the file WIN.INI did not contain an entry for the requested printer.PThe PrintDlg function failed when it attempted to create an information context.VThe data in the DEVMODE and DEVNAMES data structures describes two different printers.!A default printer does not exist.%No printer device-drivers were found.3The PrintDlg function failed during initialization.

The printer device-driver failed to initialize a DEVMODE data structure. (This error constant only applies to printer drivers written for Windows 3.0 or later versions.)KThe PrintDlg function failed to load the specified printer's device driver.

The PD_RETURNDEFAULT flag was set in the Flags member of the PRINTDLG data structure but either the hDevMode or hDevNames field were nonzero.dThe common dialog function failed to parse the strings in the [devices] section of the file WIN.INI.

1.0.0.0

pbid_.exe

gp\gl.gp

Pmscoree.dll

- floating point support not loaded

- CRT not initialized

- Attempt to initialize the CRT more than once.

plugins.log

garena.gameplugin.core

garena.game.common

skin.xml

config.xml

gamerprofile_bg.bmp

_light_lite.bmp

_lite.bmp

_light_p.bmp

_light_h.bmp

_light_n.bmp

_p.bmp

_h.bmp

_n.bmp

.data

win.mask.right

win.mask.left

.layout.xml

manifest.xml

config.ini

common_gamepanel.layout.xml

common_gamepanel.xml

create directory(%s) fail!

garena.game.register.xml.tmp

garena.game.register.xml

garena.game.display.xml.tmp

garena.game.display.xml

garena.game.

Open XML File Error:%s

create directory(%s) fail.

version.xml

core.config\garena.game.register.xml

core.config\garena.game.display.xml

key_bind.xml

 \garena.game.plugins\

version\version.xml

.data\

.data.

app.ini

C:\GarenaDownload\Games\

C:\GarenaDownload\

%Program Files%\Bignox\BigNoxVM\

garena.game.plugins\

d.gameconfig.data

%SSNTOKEN%

game_setting.xml

\PluginAdminExec.exe

webservice_rsa_encrypt

common.data\skin\

common.data\view\

common.data\language\

common.data\config\

core.config\config.xml

common.resource\

.resource\

ttest.xml

mGlobal\{a4f06c27-5f59-4db1-9008-3ab3791a7d6e}

Global\{a4f06c27-5f59-4db1-9008-3ab3791a7d6e}_mutex

plugin.common.gamepanel.loading.bg

.gamepanel.loading.bg

plugin.common.clanlist.bg

.clanlist.bg

flash\load.swf

images\flash_install.png

flash\sound.mp3

flash_config.ini

--es authtoken %s --ei expiry %s --es openid %s

"-importDataPath:%s"

"-adInfoPath:%s"

banner.bmp

otpwindow.xml

otpwindow.layout.xml

\gaparam.dll

Content-Type: application/x-www-form-urlencoded

hXXp://VVV.google.com

Kernel32.dll

CyberStation.exe

RClient.exe

NetcafeClient.exe

gbclientapp.exe

Billing.exe

billing.exe

CyberServer.exe

PicaUp.exe

SmartLauncher.exe

Underground.exe

Global\CSM Underground VNGAutoService.exe

%Program Files%\Internet Explorer\iexplore.exe

installpanel.xml

installpanel.layout.xml

controls\clanlist_item.layout.xml

controls\clanlist_item.xml

nclanlist.xml

clanlist.layout.xml

langselect_language.xml

langselect_language.layout.xml

plugin.common.btn.language.square.

langselect_language_option.xml

langselect_language_option.layout.xml

plugin.common.btn.languageoption.square.

plugin.common.btn.language.square.p

images/lang_option_square_bg.png

elangselect_close.xml

langselect_close.layout.xml

overflash_switch.xml

overflash_switch.layout.xml

images/switch_control_bg.png

plugin.common.btn.flash.

plugin.common.btn.news.

plugin.common.btn.countdown

overflash_audio.xml

overflash_audio.layout.xml

plugin.common.btn.voice.mute.

plugin.common.btn.voice.normal.

overflash_language.xml

overflash_language.layout.xml

plugin.common.btn.language.

overflash_language_option.xml

overflash_language_option.layout.xml

plugin.common.btn.languageoption.

plugin.common.btn.language.p

images/lang_option_bg.png

overflash_close.xml

overflash_close.layout.xml

download fail: %s

flash.newconfig

\Nox\Garena_keybind.xml

lang_key.xml

Global\{19DF0911-A985-40bd-BFB7-2186704EF325}

%s_Mem

%s_Mutex

pbth.exe

lolex.exe

!"#$%&'()* ,-./012

DLL support by Alessandro Iacopetti & Gilles Vollant

%original file name%.exe_3684_rwx_010F5000_00001000:

x:\ S

%original file name%.exe_3684_rwx_010F7000_00002000:

Wuser32.dll

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
2. Delete the original Trojan file.
   
3. Delete or disinfect the following files created/modified by the Trojan:
   

   C:\Windows\System32\MSINET.OCX (267 bytes)
   C:\Windows\System32\MSCOMCTL.OCX (50 bytes)
   C:\Windows\System32\COMDLG32.OCX (307 bytes)
   C:\Windows\System32\drivers\etc\hosts (3 bytes)

4. Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
   127.0.0.1 localhost
   
5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   
6. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.