Gen.Variant.FAkeAlert.105_d5aab1db4e – Adaware

HEUR:Trojan.Win32.Generic (Kaspersky), Gen:Variant.FAkeAlert.105 (B) (Emsisoft), Gen:Variant.FAkeAlert.105 (AdAware), SpyTool.Win32.Ardamax.FD, GenericEmailWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, EmailWorm, SpyTool

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: d5aab1db4e83970f2aa31de1f1c53081

SHA1: 9cb43f0be88d7680790170bcbf9b38577e89f4ff

SHA256: 59533391101d14a8dfc365e32d00c41b53f7152eb17c2991048bc2a028e81d07

SSDeep: 98304:s7DSj12r1uLGuL91Bk7zrypklbC5kgwa C5APRejNJ52yZetFCi9HqxbGWWUHVaT:s72jkM5M6pP1vX2PgRqtFNEIWBH4r3

Size: 7764992 bytes

File type: EXE

Platform: WIN32

Entropy: Packed

PEID: UPolyXv05_v6

Company: Macesitaci

Created at: 2016-12-05 15:55:10

Analyzed on: Windows7 SP1 32-bit

Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Dynamic Analysis

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The Trojan creates the following process(es):

%original file name%.exe:2180

The Trojan injects its code into the following process(es):

Lineage II Killer Updater.exe:1804
CJT.exe:1988

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process Lineage II Killer Updater.exe:1804 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74F831100DEB0B8799203064F3E38B68 (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74F831100DEB0B8799203064F3E38B68 (460 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarE24.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AF4EE75E3A4ABA658C0087EB9A0BB5B_BE9CD293623ED931D6FD2B97DE83D990 (692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\VNXENSB1.txt (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AF4EE75E3A4ABA658C0087EB9A0BB5B_BE9CD293623ED931D6FD2B97DE83D990 (280 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F (1512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\files.lst[1].bz2 (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2 (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabE14.tmp (51 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarE24.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabE14.tmp (0 bytes)

The process CJT.exe:1988 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

C:\ProgramData\CJT\CJT.004 (2525 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ÃÂrdamÃÂ°x KÃÂµylogger 4.6.2\ÃÂrdamÃÂ°x KÃÂµylogger 4.6.2.lnk (977 bytes)

The process %original file name%.exe:2180 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

C:\Lineage II Killer Updater.exe (732 bytes)
C:\Windows\System32\ECPIJT\CJT.01 (81 bytes)
C:\Windows\System32\ECPIJT\CJT.00 (0 bytes)
C:\Windows\System32\ECPIJT\CJT.exe (2 bytes)
C:\Windows\System32\ECPIJT\CJT.02 (55 bytes)

Registry activity

The process Lineage II Killer Updater.exe:1804 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\Lineage II Killer Updater_RASMANCS]
"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\Lineage II Killer Updater_RASAPI32]
"MaxFileSize" = "1048576"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad]
"WpadLastNetwork" = "{24C5EDBC-2851-452A-B521-5DA992F6C1B5}"

[HKCU\Software\Classes\Local Settings\MuiCache\2F\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Microsoft\Tracing\Lineage II Killer Updater_RASMANCS]
"EnableConsoleTracing" = "0"
"FileTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{24C5EDBC-2851-452A-B521-5DA992F6C1B5}]
"WpadDecision" = "3"

[HKLM\SOFTWARE\Microsoft\Tracing\Lineage II Killer Updater_RASAPI32]
"EnableConsoleTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{24C5EDBC-2851-452A-B521-5DA992F6C1B5}]
"WpadDecisionTime" = "20 EB 14 87 08 8B D2 01"

[HKLM\SOFTWARE\Microsoft\Tracing\Lineage II Killer Updater_RASMANCS]
"FileDirectory" = "%windir%\tracing"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings" = "46 00 00 00 09 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-e1-da-d8]
"WpadDecision" = "3"
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\Lineage II Killer Updater_RASAPI32]
"EnableFileTracing" = "0"
"ConsoleTracingMask" = "4294901760"
"FileDirectory" = "%windir%\tracing"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 36 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{24C5EDBC-2851-452A-B521-5DA992F6C1B5}]
"WpadNetworkName" = "Network 2"
"WpadDecisionReason" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\Lineage II Killer Updater_RASMANCS]
"MaxFileSize" = "1048576"

"ConsoleTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-e1-da-d8]
"WpadDecisionTime" = "20 EB 14 87 08 8B D2 01"

[HKLM\SOFTWARE\Microsoft\Tracing\Lineage II Killer Updater_RASAPI32]
"FileTracingMask" = "4294901760"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"AutoConfigURL"

The process CJT.exe:1988 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ÃÂrdamÃÂ°x KÃÂµylogger 4.6.2]
"DisplayName" = "ÃÂrdamÃÂ°x KÃÂµylogger 4.6.2"

"UninstallString" = "C:\Windows\system32\ECPIJT\Uninstall.exe"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CJT Start" = "C:\Windows\system32\ECPIJT\CJT.exe"

The process %original file name%.exe:2180 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

Dropped PE files

MD5	File path
6bf4f8066cd379eac1a9adb7ec579a59	c:\Lineage II Killer Updater.exe
c3fd0cd65ed63f682a5bf98aa90e774f	c:\Windows\System32\ECPIJT\CJT.01
252baa375c71366581961e3386d3834b	c:\Windows\System32\ECPIJT\CJT.02
2bafb32eee4371dfea195eac8e1cb926	c:\Windows\System32\ECPIJT\CJT.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):
%original file name%.exe:2180
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\74F831100DEB0B8799203064F3E38B68 (447 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\74F831100DEB0B8799203064F3E38B68 (460 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarE24.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AF4EE75E3A4ABA658C0087EB9A0BB5B_BE9CD293623ED931D6FD2B97DE83D990 (692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Cookies\VNXENSB1.txt (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F (314 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AF4EE75E3A4ABA658C0087EB9A0BB5B_BE9CD293623ED931D6FD2B97DE83D990 (280 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F (1512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GPS1JHSL\files.lst[1].bz2 (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2 (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabE14.tmp (51 bytes)
C:\ProgramData\CJT\CJT.004 (2525 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ÃÂrdamÃÂ°x KÃÂµylogger 4.6.2\ÃÂrdamÃÂ°x KÃÂµylogger 4.6.2.lnk (977 bytes)
C:\Lineage II Killer Updater.exe (732 bytes)
C:\Windows\System32\ECPIJT\CJT.01 (81 bytes)
C:\Windows\System32\ECPIJT\CJT.00 (0 bytes)
C:\Windows\System32\ECPIJT\CJT.exe (2 bytes)
C:\Windows\System32\ECPIJT\CJT.02 (55 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CJT Start" = "C:\Windows\system32\ECPIJT\CJT.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	39780	39936	4.43157	9cbdc1ea0ddee5d01bf6becb1a69be7b
.rdata	45056	9024	9216	3.80362	e90f05f88c415780d3f266cca5fc7161
.data	57344	8032	3584	1.58914	5929457daefb2fbd1c5231b40b14c60e
.rsrc	65536	7705868	7706112	5.35995	2195ee9df390e9e5e6c2146cffa2a560
.reloc	7774208	4734	5120	2.50827	dca88ea632cff5c2f1479b392085cf5e

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
hxxp://l2killer.org/patch/files.lst.bz2
hxxp://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCEENSAj/6qJAfE5/j9OXBRE4=
hxxp://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrJdiQ/icg9B19asFe73bPYs+reAQUdXGnGUgZvJ2d6kFH35TESHeZ03kCEFslzmkHxCZVZtM5DJmpVK0=
hxxp://ocsp.comodoca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTOpjOEf6LG1z52jqAxwDlTxoaOCgQUQAlhZ/C8g3FP3hIILG/U1Ct2PZYCEQCgNvjQOdOioG2qCCeITfrs
hxxp://crl.comodoca4.com/COMODOECCDomainValidationSecureServerCA2.crl	178.255.83.2
hxxp://www.l2killer.org/patch/files.lst.bz2	104.27.169.5
hxxp://ocsp.comodoca4.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrJdiQ/icg9B19asFe73bPYs+reAQUdXGnGUgZvJ2d6kFH35TESHeZ03kCEFslzmkHxCZVZtM5DJmpVK0=	178.255.83.1
hxxp://ocsp.trust-provider.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCEENSAj/6qJAfE5/j9OXBRE4=	178.255.83.1
hxxp://ocsp.comodoca4.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTOpjOEf6LG1z52jqAxwDlTxoaOCgQUQAlhZ/C8g3FP3hIILG/U1Ct2PZYCEQCgNvjQOdOioG2qCCeITfrs	178.255.83.1

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTOpjOEf6LG1z52jqAxwDlTxoaOCgQUQAlhZ/C8g3FP3hIILG/U1Ct2PZYCEQCgNvjQOdOioG2qCCeITfrs HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca4.com

HTTP/1.1 200 OK

Date: Sun, 19 Feb 2017 23:33:26 GMT

Server: Apache

Last-Modified: Sun, 19 Feb 2017 03:06:03 GMT

Expires: Sun, 26 Feb 2017 03:06:03 GMT

ETag: F9239D124A84213659E702A6C8A16E66B5E1B136

Cache-Control: max-age=530556,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: rmdccaocsp14

Content-Length: 280

Connection: close

Content-Type: application/ocsp-response

0..........0..... .....0.....0..0......@.ag...qO...,o.. v=...20170219030603Z0t0r0J0... ..........3.....>v..1.9S......@.ag...qO...,o.. v=.....6..9...m..'.M......20170219030603Z....20170226030603Z0...*.H.=....H.0E.!...m...x._......n.Z=[.....K. .Q... NP....5....h.`v.d...jW.........$..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrJdiQ/icg9B19asFe73bPYs+reAQUdXGnGUgZvJ2d6kFH35TESHeZ03kCEFslzmkHxCZVZtM5DJmpVK0= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca4.com

HTTP/1.1 200 OK

Date: Sun, 19 Feb 2017 23:33:21 GMT

Server: Apache

Last-Modified: Sat, 18 Feb 2017 00:30:43 GMT

Expires: Sat, 25 Feb 2017 00:30:43 GMT

ETag: 3ADC188EE823AEEAE32F4250B1D2F3B1A92A212F

Cache-Control: max-age=434841,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: rmdccaocsp14

Content-Length: 314

Connection: close

Content-Type: application/ocsp-response

0..6....../0.. .. .....0......0...0......uq..H.....AG...Hw..y..20170218003043Z0s0q0I0... .........%...' ..}j.^.v.b..x..uq..H.....AG...Hw..y..[%.i..&Uf.9...T.....20170218003043Z....20170225003043Z0...*.H.=....i.0f.1......(o..................\.v.....=..6#B.~....}...1.....0..Q...=...Hw@.f....5.^.......(...._\.z.^.b...

GET /COMODOECCDomainValidationSecureServerCA2.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.comodoca4.com

HTTP/1.1 200 OK

Server: nginx

Date: Sun, 19 Feb 2017 23:33:28 GMT

Content-Type: application/x-pkcs7-crl

Content-Length: 447

Last-Modified: Sat, 18 Feb 2017 18:21:57 GMT

Connection: close

ETag: "58a890c5-1bf"

X-CCACDN-Mirror-ID: rmdccacrl3

Cache-Control: max-age=3600

Accept-Ranges: bytes

0...0..a...0...*.H.=...0..1.0...U....GB1.0...U....Greater Manchester1.0...U....Salford1.0...U....COMODO CA Limited1806..U.../COMODO ECC Domain Validation Secure Server CA 2..170218182157Z..170222182157Z0k0"....|.........$?Y....161026165848Z0".....h.2...l..wY_2...170113180023Z0!.....[...^...uQ.....170210230316Z.00.0...U.#..0...@.ag...qO...,o.. v=.0...U........0...*.H.=....H.0E.!.......A.. .U....S...f.N..#..K.J.. ...Kc. ..).[\"...}t..d...eV.......

GET /patch/files.lst.bz2 HTTP/1.1

User-Agent: L2ClientUpdater

Host: VVV.l2killer.org

HTTP/1.1 301 Moved Permanently

Date: Sun, 19 Feb 2017 23:33:09 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d85639580ae098e2a08f9a915f85ad5421487547189; expires=Mon, 19-Feb-18 23:33:09 GMT; path=/; domain=.l2killer.org; HttpOnly

Cache-Control: max-age=3600

Expires: Mon, 20 Feb 2017 00:33:09 GMT

Location: hXXps://VVV.l2killer.org/patch/files.lst.bz2

Server: cloudflare-nginx

CF-RAY: 333d85ae114e5960-VIE

0..HTTP/1.1 301 Moved Permanently..Date: Sun, 19 Feb 2017 23:33:09 GMT..Transfer-Encoding: chunked..Connection: keep-alive..Set-Cookie: __cfduid=d85639580ae098e2a08f9a915f85ad5421487547189; expires=Mon, 19-Feb-18 23:33:09 GMT; path=/; domain=.l2killer.org; HttpOnly..Cache-Control: max-age=3600..Expires: Mon, 20 Feb 2017 00:33:09 GMT..Location: https://VVV.l2killer.org/patch/files.lst.bz2..Server: cloudflare-nginx..CF-RAY: 333d85ae114e5960-VIE..0..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCEENSAj/6qJAfE5/j9OXBRE4= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.trust-provider.com

HTTP/1.1 200 OK

Date: Sun, 19 Feb 2017 23:33:15 GMT

Server: Apache

Last-Modified: Sat, 18 Feb 2017 00:30:43 GMT

Expires: Sat, 25 Feb 2017 00:30:43 GMT

ETag: D6D1F8CD87733625ADC22362E8E6F46E8D2D1874

Cache-Control: max-age=434847,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: rmdccaocsp14

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response

0..........0..... .....0......0...0.........z4.&...&T....$.T...20170218003043Z0s0q0I0... ........|.fT...D.b&...e{.z.......z4.&...&T....$.T...CR.?..........DN....20170218003043Z....20170225003043Z0...*.H.............E.6.9.....[...Xi.p~ .b}..ZO...i.).....eF... Rt."c..............T.....P];...Ww.M...}.c.... ...:...t.......[y...g`.@..3*...z.!.*.....8.....F...#..aZ..}[.mh...TB..%s7...../.=.D.......X.L....C..r......t.C..~....wT.=.VXk.O...&W..)..Yd...u.0....&....I/.6g...mF....

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

CJT.exe_1988:

.text

`.rdata

@.data

.rsrc

SSh8BS

udPh

SSh@ S

PSSSSSSh

PSSSSSSh!

vSSSh

FTPjK

FtPj;

C.PjRV

tGHt.Ht&

.EKSWU

FTPG

FTPj

FtPS

=KNILw.tT=RCNEw

_0 _8 _4;_,

SHA1 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

DlSHA512 block transform for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

6-9'6-9'

$6.:$6.:

*?#1*?#1

>8$4,8$4,

AES for x86, CRYPTOGAMS by

Camellia for x86 by

RC4 for x86, CRYPTOGAMS by

FRegDeleteKeyExW

gmail.com

MARGIN-BOTTOM: 11px; BORDER-STYLE: solid; BORDER-COLOR: #DFDFE5; BORDER-WIDTH: 2px; BACKGROUND-COLOR: #DFDFE5; }H2 { COLOR: black; BACKGROUND-COLOR: #FFFFF; FONT-SIZE: 12pt; FONT-WEIGHT: normal; MARGIN-BOTTOM: 0px; MARGIN-TOP: 10px;}

mail@domain.com

Date: %d %s %d %d:%d:%d

EHLO %s

,qop=%s

,response=%s

,digest-uri="%s"

,cnonce="%s"

,nc=%s

,nonce="%s"

,realm="%s"

charset=utf-8,username="%s"

smtp/

AUTH PLAIN %s

^%s^%s

AUTH LOGIN

--%s--

RCPT TO:

MAIL FROM:

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

portuguese-brazilian

ADVAPI32.DLL

kernel32.dll

UxTheme.dll

OLEACC.dll

passed a null parameter

DSO support routines

x509 certificate routines

error:lX:%s:%s:%s

ssl_sess_cert

ssl_cert

evp_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

lhash part of OpenSSL 1.0.0d 8 Feb 2011

Stack part of OpenSSL 1.0.0d 8 Feb 2011

supportedAlgorithms

crossCertificatePair

certificateRevocationList

cACertificate

userCertificate

userPassword

supportedApplicationContext

Microsoft Local Key set

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

certificateIssuer

certicom-arc

Proxy Certificate Information

proxyCertInfo

Microsoft Smartcardlogin

msSmartcardLogin

joint-iso-itu-t

JOINT-ISO-ITU-T

set-rootKeyThumb

setAttr-Cert

setCext-cCertRequired

setCext-certType

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertResData

setct-CertReqTBS

setct-CertReqData

setct-PCertResTBS

setct-PCertReqData

setct-AcqCardCodeMsg

certificate extensions

set-certExt

set-msgExt

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-mod-msg-v3

sdsiCertificate

x509Certificate

localKeyID

certBag

pkcs8ShroudedKeyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

extendedKeyUsage

X509v3 Authority Key Identifier

authorityKeyIdentifier

X509v3 Certificate Policies

certificatePolicies

X509v3 Private Key Usage Period

privateKeyUsagePeriod

X509v3 Key Usage

keyUsage

X509v3 Subject Key Identifier

subjectKeyIdentifier

Netscape Certificate Sequence

nsCertSequence

Netscape CA Policy Url

nsCaPolicyUrl

Netscape Renewal Url

nsRenewalUrl

Netscape CA Revocation Url

nsCaRevocationUrl

Netscape Revocation Url

nsRevocationUrl

Netscape Base Url

nsBaseUrl

Netscape Cert Type

nsCertType

Netscape Certificate Extension

nsCertExt

extendedCertificateAttributes

challengePassword

dhKeyAgreement

Big Number part of OpenSSL 1.0.0d 8 Feb 2011

ASN.1 part of OpenSSL 1.0.0d 8 Feb 2011

keylen

EVP_CIPHER_key_length(cipher)

len>=0 && lenkey)

j key)

keylength

keyfunc

EVP part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\pkcs12\p12_key.c

SHA1 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-256 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-512 part of OpenSSL 1.0.0d 8 Feb 2011

RSA part of OpenSSL 1.0.0d 8 Feb 2011

RAND part of OpenSSL 1.0.0d 8 Feb 2011

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

value.bag

value.safes

value.shkeybag

value.keybag

value.sdsicert

value.x509cert

value.other

cert_info

hexkey

rsa_keygen_pubexp

rsa_keygen_bits

NETAPI32.DLL

KERNEL32.DLL

value.single

value.set

PKCS8_PRIV_KEY_INFO

pkey

pkeyalg

enc_key

key_enc_algor

cert

d.encrypted

d.digest

d.signed_and_enveloped

d.enveloped

d.sign

d.data

d.other

X509_PUBKEY

public_key

.\crypto\asn1\x_pubkey.c

%d.%d.%d.%d/%d.%d.%d.%d

%*s%s:

d.registeredID

d.iPAddress

d.uniformResourceIdentifier

d.ediPartyName

d.directoryName

d.dNSName

d.rfc822Name

d.otherName

name.relativename

name.fullname

certificateHold

Certificate Hold

cessationOfOperation

Cessation Of Operation

keyCompromise

Key Compromise

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

AUTHORITY_KEYID

keyid

X509_CERT_PAIR

X509_CERT_AUX

%d.%d.%d.%d

EC part of OpenSSL 1.0.0d 8 Feb 2011

ECDSA part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\ec\ec_key.c

DSA part of OpenSSL 1.0.0d 8 Feb 2011

Diffie-Hellman part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\dh\dh_key.c

IP Address:%d.%d.%d.%d

URI:%s

DNS:%s

email:%s

EdiPartyName:

X400Name:

othername:

d.usernotice

d.cpsuri

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sNumber%s:

%*sOrganization: %s

%*sCPS: %s

ddddddZ

pubkey

priv_key

pub_key

EC_PRIVATEKEY

publicKey

privateKey

value.implicitlyCA

value.parameters

value.named_curve

p.char_two

p.prime

p.ppBasis

p.tpBasis

p.onBasis

p.other

.\crypto\evp\evp_pkey.c

ECDH part of OpenSSL 1.0.0d 8 Feb 2011

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

%s: (%d bit)

Public-Key

Private-Key

recommended-private-length: %d bits

public-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Private-Key: (%d bit)

X.509 part of OpenSSL 1.0.0d 8 Feb 2011

OPENSSL_ALLOW_PROXY_CERTS

x%s

%s - d:d:d%.*s %d%s

'() ,-./:=?

CONF part of OpenSSL 1.0.0d 8 Feb 2011

%*sPolicy Text: %s

%*scrlUrl:

EXTENDED_KEY_USAGE

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

PKEY_USAGE_PERIOD

keyCertSign

Certificate Sign

keyAgreement

Key Agreement

keyEncipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

MD5 part of OpenSSL 1.0.0d 8 Feb 2011

PROXY_CERT_INFO_EXTENSION

D:/Projects/openssl-10.0d/ssl/certs

D:/Projects/openssl-10.0d/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_FILE

Basis Type: %s

Field Type: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%lu:%s:%s:%d:%s

CONF_def part of OpenSSL 1.0.0d 8 Feb 2011

[[%s]]

[%s] %s=%s

crlUrl

certStatus

certId

OCSP_CERTSTATUS

value.unknown

value.revoked

value.good

value.byKey

value.byName

reqCert

OCSP_CERTID

issuerKeyHash

certs

d.receiptList

d.allOrFirstTier

d.compressedData

d.authenticatedData

d.encryptedData

d.digestedData

d.envelopedData

d.signedData

d.ori

d.pwri

d.kekri

d.kari

d.ktri

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyIdentifier

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

keyAttr

keyAttrId

CMS_KeyTransRecipientInfo

encryptedKey

keyEncryptionAlgorithm

certificates

d.crl

d.subjectKeyIdentifier

d.issuerAndSerialNumber

CMS_CertificateChoices

d.v2AttrCert

d.v1AttrCert

d.extendedCertificate

d.certificate

CMS_OtherCertificateFormat

otherCert

otherCertFormat

%s.dll

PEM part of OpenSSL 1.0.0d 8 Feb 2011

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

TRUSTED CERTIFICATE

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

CERTIFICATE

X509 CERTIFICATE

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

.\crypto\evp\evp_key.c

nkey

?456789:;

!"#$%&'()* ,-./0123

Verifying - %s

OpenSSL 1.0.0d 8 Feb 2011

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT40

EXPORT

.\ssl\ssl_cert.c

SSLv3 part of OpenSSL 1.0.0d 8 Feb 2011

TLSv1 part of OpenSSL 1.0.0d 8 Feb 2011

SSLv2 part of OpenSSL 1.0.0d 8 Feb 2011

s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)

wrong number of key bits

unsupported status type

unsupported ssl version

unsupported protocol

unsupported elliptic curve

unsupported digest type

unsupported compression algorithm

unsupported cipher

unknown pkey type

unknown key exchange type

unknown certificate type

unable to find public key parameters

unable to extract public key

unable to decode ecdh certs

unable to decode dh certs

tried to use unsupported cipher

tls peer did not respond with certificate list

tls client cert req with anon cipher

tlsv1 unsupported extension

tlsv1 certificate unobtainable

tlsv1 bad certificate status response

tlsv1 bad certificate hash value

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert bad certificate

signature for non signing certificate

reuse cert type not zero

reuse cert length not zero

public key not rsa

public key is not rsa

public key encrypt error

peer error unsupported certificate type

peer error no certificate

peer error certificate

peer did not return a certificate

null ssl method passed

no publickey

no private key assigned

no privatekey

Peer haven't sent GOST certificate, required for selected ciphersuite

no client cert received

no client cert method

no ciphers passed

no certificate specified

no certificate set

no certificate returned

no certificate assigned

no certificates returned

missing tmp rsa pkey

missing tmp rsa key

missing tmp ecdh key

missing tmp dh key

missing rsa signing cert

missing rsa encrypting cert

missing rsa certificate

missing export tmp rsa key

missing export tmp dh key

missing dsa signing cert

missing dh rsa cert

missing dh key

missing dh dsa cert

krb5 server rd_req (keytab perms?)

key arg too long

invalid ticket keys length

http request

https proxy request

error generating tmp rsa key

ecc cert should have sha1 signature

ecc cert should have rsa signature

ecc cert not for signing

ecc cert not for key agreement

cert length mismatch

certificate verify failed

bad ecc cert

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

tls1_cert_verify_mac

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_ADD_CERT_TO_BUF

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_ADD_CERT_TO_BUF

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

key expansion

client write key

server write key

c->iv_len session->key_arg)

s->s2->key_material_length s2->key_material

Corrupt JPEG data: found marker 0xx instead of RST%d

Warning: unknown JFIF revision number %d.d

Corrupt JPEG data: %u extraneous bytes before marker 0xx

Inconsistent progression sequence for component %d coefficient %d

Unknown Adobe color transform code %d

Obtained XMS handle %u

Freed XMS handle %u

Unrecognized component IDs %d %d %d, assuming YCbCr

JFIF extension marker: RGB thumbnail image, length %u

JFIF extension marker: palette thumbnail image, length %u

JFIF extension marker: JPEG-compressed thumbnail image, length %u

Opened temporary file %s

Closed temporary file %s

Ss=%d, Se=%d, Ah=%d, Al=%d

Component %d: dc=%d ac=%d

Start Of Scan: %d components

Component %d: %dhx%dv q=%d

Start Of Frame 0xx: width=%u, height=%u, components=%d

Smoothing not supported with nonstandard sampling ratios

RST%d

At marker 0xx, recovery action %d

Selected %d colors for quantization

Quantizing to %d colors

Quantizing to %d = %d*%d*%d colors

%4u %4u %4u %4u %4u %4u %4u %4u

Unexpected marker 0xx

Miscellaneous marker 0xx, length %u

with %d x %d thumbnail image

JFIF extension marker: type 0xx, length %u

Warning: thumbnail image size does not match data length %u

JFIF APP0 marker: version %d.d, density %dx%d %d

= = = = = = = =

Obtained EMS handle %u

Freed EMS handle %u

Define Restart Interval %u

Define Quantization Table %d precision %d

Define Huffman Table 0xx

Define Arithmetic Table 0xx: 0xx

Unknown APP14 marker (not Adobe), length %u

Unknown APP0 marker (not JFIF), length %u

Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d

Unsupported marker type 0xx

Failed to create temporary file %s

Unsupported JPEG process: SOF type 0xx

Cannot quantize to more than %d colors

Cannot quantize to fewer than %d colors

Cannot quantize more than %d color components

Insufficient memory (case %d)

Not a JPEG file: starts with 0xx 0xx

Quantization table 0xx was not defined

Huffman table 0xx was not defined

Backing store not supported

Cannot transcode due to multiple use of quantization table %d

Maximum supported image dimension is %u pixels

Empty JPEG image (DNL not supported)

Bogus DQT index %d

Bogus DHT index %d

Bogus DAC value 0x%x

Bogus DAC index %d

Unsupported color conversion request

Too many color components: %d, max %d

Buffer passed to JPEG library is too small

JPEG parameter struct mismatch: library thinks size is %u, caller expects %u

Improper call to JPEG library in state %d

Invalid scan script at entry %d

Invalid progressive parameters at scan script entry %d

Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d

Unsupported JPEG data precision %d

Invalid memory pool code %d

Wrong JPEG library version: library is %d, caller expects %d

IDCT output block size %d not supported

Invalid component ID %d in SOS

Bogus message code %d

;Warning: highpass filter disabled. highpass frequency too small

hXXp://lame.sf.net

3.99.5

Opera

?INTERNAL ERROR IN VBR NEW CODE, please send bug report

@INTERNAL ERROR IN VBR NEW CODE (986), please send bug report

INTERNAL ERROR IN VBR NEW CODE (1313), please send bug report

maxbits=%d usedbits=%d

hip: invalid layer %d

hip: error audio data exceeds framesize by %d bytes

hip: bitstream problem, resyncing skipping %d bytes...

Sorry, layer %d not supported

hip: Can't rewind stream by %d bits!

hip: Bogus region length (%d)

ADVAPI32.dll

F%D,3

QVisual C CRT: Not enough memory to complete call to strerror.

Broken pipe

Inappropriate I/O control operation

Operation not permitted

%S#[k

?#%X.y

.\crypto\engine\eng_pkey.c

RSA PRIVATE KEY

DSA PRIVATE KEY

EC PRIVATE KEY

Load certs from files in a directory

%s%clx.%s%d

unsupported type

unsupported recpientinfo type

unsupported recipient type

unsupported kek algorithm

unsupported content type

signer certificate not found

private key does not match certificate

no public key

no private key

no msgsigdigest

no key or cert

no key

not supported for this key type

not key transport

msgsigdigest wrong length

msgsigdigest verification failure

msgsigdigest error

invalid key length

invalid encrypted key length

error setting key

error getting public key

certificate verify error

certificate has no keyid

certificate already present

CMS_SIGNERINFO_VERIFY_CERT

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_ktri_cert_cmp

cms_msgSigDigest_add1

CMS_GET0_CERTIFICATE_CHOICES

CMS_EncryptedData_set1_key

CMS_decrypt_set1_pkey

CMS_decrypt_set1_key

CMS_add1_recipient_cert

CMS_add0_recipient_key

CMS_add0_cert

unsupported requestorname type

no certificates in chain

error parsing url

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_cert_id_new

unimplemented public key method

invalid cmd number

invalid cmd name

failed loading public key

failed loading private key

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_get_pkey_meth

ENGINE_get_pkey_asn1_meth

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

unsupported version

unsupported md algorithm

invalid signer certificate purpose

ess signing certificate error

ess add signing cert error

TS_VERIFY_CERT

TS_TST_INFO_set_msg_imprint

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_certs

TS_REQ_set_msg_imprint

TS_MSG_IMPRINT_set_algo

TS_CHECK_SIGNING_CERTS

ESS_SIGNING_CERT_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_ADD_SIGNING_CERT

functionality not supported

WIN32_JOINER

unsupported pkcs12 mode

key gen error

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_add_localkeyid

unsupported option

unable to get issuer keyid

policy syntax not currently supported

operation not defined

no proxy cert policy language defined

no issuer certificate

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

unsupported cipher type

unknown operation

unable to find certificate

signing not supported for this key type

operation not supported on this type

no recipient matches key

no recipient matches certificate

encryption not supported for this key type

decrypted key is wrong length

PKCS7_add_certificate

unsupported method

no port specified

no port defined

no accept port specified

broken pipe

BIO_get_port

ECDH_compute_key

data too large for key size

unsupported field

passed null parameter

not a supported NIST prime

missing private key

keys not set

invalid private key

PKEY_EC_SIGN

PKEY_EC_PARAMGEN

PKEY_EC_KEYGEN

PKEY_EC_DERIVE

PKEY_EC_CTRL_STR

PKEY_EC_CTRL

o2i_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

EC_KEY_print_fp

EC_KEY_print

EC_KEY_new

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_check_key

ECKEY_TYPE2PARAM

ECKEY_PUB_ENCODE

ECKEY_PUB_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM2TYPE

DO_EC_KEY_PRINT

d2i_ECPrivateKey

zlib not supported

wrong public key type

unsupported public key type

unsupported encryption algorithm

unsupported any defined by type

unknown public key type

unable to decode rsa private key

unable to decode rsa key

streaming not supported

private key header missing

digest and key type not supported

bad password read

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PrivateKey

d2i_AutoPrivateKey

unsupported algorithm

unknown key type

unable to get certs public key

public key encode error

public key decode error

no cert set for us to verify

method not supported

loading cert dir

key values mismatch

key type mismatch

cert already in hash table

cant check dh key

X509_verify_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_check_private_key

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

PKEY_DSA_KEYGEN

PKEY_DSA_CTRL

unsupported key components

unsupported encryption

read key

public key no rsa

problems getting password

keyblob too short

keyblob header parse error

expecting public key blob

expecting private key blob

error converting private key

PEM_WRITE_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

unsupported salt type

unsupported private key algorithm

unsupported prf

unsupported key size

unsupported key derivation function

unsupported keylength

unsuported number of rounds

private key encode error

private key decode error

operaton not initialized

operation not supported for this keytype

no operation set

no key set

keygen failure

invalid operation

expecting a ec key

expecting a ecdsa key

expecting a dsa key

expecting a dh key

expecting an rsa key

different key types

ctrl operation not implemented

command not supported

camellia key setup failed

bn pubkey error

bad key length

aes key setup failed

PKEY_SET_TYPE

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_new

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_init

EVP_PKEY_derive

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

invalid public key

PKEY_DH_KEYGEN

PKEY_DH_DERIVE

GENERATE_KEY

COMPUTE_KEY

rsa operations not supported

key size too small

invalid keybits

illegal or unsupported padding mode

digest too big for rsa key

data too small for key size

RSA_generate_key

RSA_check_key

RSA_BUILTIN_KEYGEN

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_SIGN

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL

.pp@0

aEÐ

(#EÚ

ÚE

RC2 part of OpenSSL 1.0.0d 8 Feb 2011

IDEA part of OpenSSL 1.0.0d 8 Feb 2011

libdes part of OpenSSL 1.0.0d 8 Feb 2011

DES part of OpenSSL 1.0.0d 8 Feb 2011

NETSCAPE_CERT_SEQUENCE

.\crypto\asn1\x_pkey.c

RegDeleteKeyW

RegCloseKey

RegCreateKeyExW

RegOpenKeyExW

RegQueryInfoKeyW

RegEnumKeyExW

ReportEventA

UrlIsW

SHLWAPI.dll

PSAPI.DLL

WS2_32.dll

COMCTL32.dll

ShellExecuteW

ShellExecuteExW

SHELL32.dll

FtpPutFileW

FtpCreateDirectoryW

FtpRemoveDirectoryW

FtpDeleteFileW

FtpSetCurrentDirectoryW

WININET.dll

MPR.dll

WINMM.dll

VERSION.dll

GetWindowsDirectoryW

GetCPInfo

GetConsoleOutputCP

GetProcessHeap

KERNEL32.dll

UnregisterHotKey

RegisterHotKey

GetKeyNameTextW

MapVirtualKeyW

EnumWindows

EnumChildWindows

UnhookWindowsHookEx

SetWindowsHookExW

GetKeyState

USER32.dll

GDI32.dll

COMDLG32.dll

ole32.dll

OLEAUT32.dll

.?AVECSmtp@@

zcÁ

Jv.AKv

.CP%6

.NF>~

Z%3uUY

.mD@:lCv

N%U!Y

^=Z%f

.Uq9[

{Dc.yCN

\cmd'

.GL#!

*%S_A

nÂzj

=%DT.\

.DP/;

.Xg4f

.hz;0kwc/]wh6

%Fs:z

ZG.oV

Z3.qU; M

$aDQ.eCk

À{d

-Ev}?

À{{

.CPAs

-Ep}?

K&.RH

-O.yLf

{N.qH

.ILhcviXB{

Z.CHf

.qXnn

.qLnn

.ITd"

kO.yHf})

5cK.YH

wN.qL

.GHN^KB

O.yLhU

.yLfk

N.qLh\v=R=

5*N.qH

.IHnS

w@Sd_.APhj

.ITiqvqZ

.ALnn

*K.YL

5,N.qHf

.qLnc

.YPnP

5(N.qL

kN.qH

wN.wL

%d`mlBf

N.qLh\vvR}#

\StringFileInfo\lx\%s

%Y-%m-%d_%H-%M-%S.mp3

smtps.uol.com.br

*@uol.com.br

smtps.bol.com.br

*@bol.com.br

smtp.live.com

*@hotmail.com

smtp.googlemail.com

*@gmail.com;*@googlemail.com

mail.messagingengine.com

*@fastmail.fm

smtp.hotpop.com

*@hotpop.com

smtp.mail.yahoo.com

*@yahoo.com

smtp.aim.com

*@aim.com

smtp.mail.yahoo.com.br

*@yahoo.com.br

smtp.gmx.com

*@gmx.com;*@gmx.us

smtp.comcast.net

*@comcast.net

smtp.aol.com

*@aol.com

smtp.ig.com.br

*@ig.com.br

smtp.gawab.com

*@gawab.com

Shell32.dll

RICHED20.DLL

WAdvapi32.dll

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

@uxtheme.dll

@(),;:\"[]

ASoftware\Microsoft\Windows\CurrentVersion\Run

Software\Microsoft\Windows\CurrentVersion

test791.txt

TEST671.txt

TEST671.txt/test791.txt

All Files (*.*)

*.exe

Viewer.exe

\TEST685.txt

@USER32.DLL

4.6.2

&regkey=

4.6.2

\Install.exe

(*.exe)

S.ICO

\WinInit.Ini

wininet.dll

netmsg.dll

%Y-%m-%d_%H-%M-%S.jpg

@hXXp://

S%Y-%m-%d_%H-%M-%S

CWebcam_

Keys_

.html

comctl32.dll

DNSAPI.DLL

DWTL_CmdBar_InternalAutoPopupMsg

WTL_CmdBar_InternalGetBarMsg

mscoree.dll

V*(%F@4 F7*

72.JA1'

[,'&"?4-

C:\Windows\system32\ECPIJT\CJT.exe

Lineage II Killer Updater.exe_1804:

.text

`.itext

`.data

.idata

.didata

.edata

@.tls

.rdata

@.reloc

B.rsrc

TArray

System.Types

System.UITypes

TWindowState

poPortrait

biClrImportant

tagMSG

Winapi.Windows

HKEY

TWMKey

MsgFiller

KeyData

KeyDataFiller

!"#$%&'(!)* ,-./0'

System.SysUtils

ENotSupportedException

ENotSupportedException\

ENoMonitorSupportException

TArray

TFormatSettings.TEraInfo

System.SysUtils4

IEnumerable0!@

TArray

TMarshaller.PDisposeRec

TMarshaller.TDisposeProc

TMarshaller.TDisposeRec

TMarshaller.IDisposer

TMarshaller.TDisposer'

TMarshaller.TDisposer| B

/TArray

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

System.SysUtilsL

&TArray

System.Variants

Operator

System.Variants8&@

EVariantBadIndexError

Uh^%C

grfLocksSupported

Winapi.ActiveX

TTimeSpanParser.TParseError

System.TimeSpan

System.SyncObjs

System.SyncObjsT

TFunc

System.SyncObjsp

System.Generics.Defaults

IEqualityComparer

IComparer

TCustomComparer

System.Generics.Collections

doOwnsKeys

System.Rtti

GetIndexedProperties

GetIndexedProperty

GetDeclaredIndexedProperties

TMethodImplementation.TFloatReg

):TMethodImplementation.TInterceptFrame.:1

%TMethodImplementation.TInterceptFrame(

*TMethodImplementation.TFirstStageIntercept

%TMethodImplementation.PInterceptFrame

*TMethodImplementation.PFirstStageIntercept

TMethodImplementation.TParamLoc

!TMethodImplementation.TInvokeInfoK

!TMethodImplementation.TInvokeInfol!D

TRttiIndexedPropertyS

TRttiIndexedProperty

FIndexedProps

TArray

-TFunc>

TArray

!TArray

(TArray

%TArray

TArray

3TArray

8TEnumerator(

8TEnumerator0OD

8TEnumerable-

8TEnumerable

;TList.arrayofT

6IComparer

CTCollectionNotifyEvent

:TArrayManagerg

:TArrayManager

8IEnumerable0!@

=TList.TEmptyFunc

>TList.TEnumerator5

>TList.TEnumerator8WD

2TList&

2TList

"TArray

&TArray

-TPair

AKey

ATArray>

FTEnumerator>(

FTEnumerator>

FTEnumerable>-

FTEnumerable>XiD

9TDictionary.TItem

>TDictionary.TItemArray

!IEqualityComparer

&TCollectionNotifyEvent

/TCollectionNotifyEvent

TArray

TEnumerator(

TEnumerator

TEnumerable-

TEnumerable

BTDictionary.TKeyEnumerator;

BTDictionary.TKeyEnumerator`pD

BTDictionary.TKeyCollection;

BTDictionary.TKeyCollectionPrD

TArray

$TEnumerator(

$TEnumerator

$TEnumerable-

$TEnumerable

DTDictionary.TValueEnumerator;

DTDictionary.TValueEnumeratorDwD

DTDictionary.TValueCollection;

DTDictionary.TValueCollection8yD

CTDictionary.TPairEnumerator;

CTDictionary.TPairEnumeratorT{D

FOnKeyNotify

FKeyCollection

3TDictionary9

ContainsKey

3TDictionaryD}D

Keys\zD

OnKeyNotify

TArray

-TPair

ATArray>

FTEnumerator>(

FTEnumerator>

FTEnumerable>-

FTEnumerable>$

9TDictionary.TItem

>TDictionary.TItemArray

System.Generics.Collectionsd

IEqualityComparer

0TCollectionNotifyEvent

TArray

%TEnumerator(

%TEnumerable-

%TEnumerableh

BTDictionary.TKeyEnumerator;

BTDictionary.TKeyEnumerator

BTDictionary.TKeyCollection;

BTDictionary.TKeyCollection

DTDictionary.TValueEnumerator;

DTDictionary.TValueEnumerator

DTDictionary.TValueCollection;

DTDictionary.TValueCollection

CTDictionary.TPairEnumerator;

CTDictionary.TPairEnumerator

3TDictionary9

3TDictionary

Keys

-TPair

ATArray>

FTEnumerator>(

FTEnumerator>

FTEnumerable>-

FTEnumerable>

9TDictionary.TItem

>TDictionary.TItemArray

System.Generics.CollectionsD

BTDictionary.TKeyEnumerator;

BTDictionary.TKeyEnumerator

BTDictionary.TKeyCollection;

BTDictionary.TKeyCollection

DTDictionary.TValueEnumerator;

DTDictionary.TValueEnumerator

DTDictionary.TValueCollection;

DTDictionary.TValueCollection

CTDictionary.TPairEnumerator;

CTDictionary.TPairEnumerator

3TDictionary9

3TDictionary

#IComparer

%TComparison

#TComparer2

#TComparerL

,TArray>

$TEnumerator(

$TEnumerator,#E

$TEnumerable-

$TEnumerablel$E

'TList.arrayofT

"IComparer

/TCollectionNotifyEvent

&TArrayManagerg

&TArrayManager

$IEnumerable0!@

)TList.TEmptyFunc

*TList.TEnumerator5

*TList.TEnumeratorH*E

TList&

TList

-TArray>

7TArray>

.TArray>

0TArray>

&TEnumerator(

&TEnumerator

&TEnumerable-

&TEnumerable

)TList.arrayofT

$IComparer

1TCollectionNotifyEvent

(TArrayManagerg

(TArrayManager

&IEnumerable0!@

TList.TEmptyFunc

,TList.TEnumerator5

,TList.TEnumerator

TList&

TList

$TEnumerator(

$TEnumeratorp

$TEnumerable-

$TEnumerable

'TList.arrayofT

"IComparer

/TCollectionNotifyEvent

&TArrayManagerg

&TArrayManager|

$IEnumerable0!@

)TList.TEmptyFunc

*TList.TEnumerator5

*TList.TEnumerator

TList&

TList

5TArray>

#TEnumerator(

#TEnumeratorh

#TEnumerable-

#TEnumerable

&TList.arrayofT

System.Generics.CollectionsX

!IComparer

.TCollectionNotifyEvent

%TArrayManagerg

%TArrayManagerp

#IEnumerable0!@

(TList.TEmptyFunc

)TList.TEnumerator5

)TList.TEnumeratorx

TList&

TList(

*TEnumerator(

*TEnumerator

*TEnumerable-

*TEnumerable8

-TList.arrayofT

System.Generics.CollectionsT

(IComparer

5TCollectionNotifyEvent

,TArrayManagerg

,TArrayManager,

*IEnumerable0!@

/TList.TEmptyFunc

0TList.TEnumerator5

0TList.TEnumeratorL

$TList&

$TList

9TObjectDictionaryM

9TObjectDictionary

8TComparison

6TComparer2

6TComparer

>TMoveArrayManagerg

>TMoveArrayManagerdqG

E.TList`1.Pack$697$0$Intf

E@TList`1.Pack$697$ActRec

ITList>.arrayofT

DIComparer>

QTCollectionNotifyEvent>

Item-TPair

HTArrayManager>g

HTArrayManager>

FIEnumerable>0!@

KTList>.TEmptyFunc

LTList>.TEnumerator5

LTList>.TEnumerator

@TList>&

@TList>

TList.arrayofT

IComparer

TArrayManagerg

TArrayManager

IEnumerable0!@

TList.TEmptyFunc

!TList.TEnumerator5

!TList.TEnumerator

TList&

TList(

'TList.arrayofT

System.Generics.Collections@

"IComparer

&TArrayManagerg

&TArrayManager

$IEnumerable0!@

)TList.TEmptyFunc

*TList.TEnumerator5

*TList.TEnumerator

TList&

TListh

ITList>.arrayofT

System.Generics.CollectionsH

DIComparer>

QTCollectionNotifyEvent>

Item-TPair

HTArrayManager>g

HTArrayManager>@

FIEnumerable>0!@

KTList>.TEmptyFunc

LTList>.TEnumerator5

LTList>.TEnumerator

@TList>&

@TList>

(TList.arrayofT

#IComparer

'TArrayManagerg

'TArrayManager

%IEnumerable0!@

*TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumerator

TList&

TList

TList.arrayofT

TArrayManagerg

TArrayManager

TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumeratorh

TList&

TList

ITList>.arrayofT

System.Generics.Collections(

DIComparer>

QTCollectionNotifyEvent>

Item-TPair

HTArrayManager>g

HTArrayManager>

FIEnumerable>0!@

KTList>.TEmptyFunc

LTList>.TEnumerator5

LTList>.TEnumerator

@TList>&

@TList>

$TComparison

"TComparer2

"TComparer

*TMoveArrayManagerg

*TMoveArrayManagerT

1.TList`1.Pack$697$0$Intf

1@TList`1.Pack$697$ActRec

1@TList`1.Pack$697$ActRech

&TComparison

$TComparer2

$TComparerd

,TMoveArrayManagerg

,TMoveArrayManager$

3.TList`1.Pack$697$0$Intf

3@TList`1.Pack$697$ActRec

3@TList`1.Pack$697$ActRec8

$TComparison

"TComparer2

"TComparer8

*TMoveArrayManagerg

*TMoveArrayManager

1.TList`1.Pack$697$0$Intf

1@TList`1.Pack$697$ActRecX

1@TList`1.Pack$697$ActRec

#TComparison

!TComparer2

!TComparer

)TMoveArrayManagerg

)TMoveArrayManager

0.TList`1.Pack$697$0$Intf

0@TList`1.Pack$697$ActRec

System.RttiX

*TComparison

(TComparer2

(TComparer

0TMoveArrayManagerg

0TMoveArrayManager

7.TList`1.Pack$697$0$Intf

7@TList`1.Pack$697$ActRec

System.RttiT

FTComparison>

DTComparer>2

DTComparer>

LTMoveArrayManager>g

LTMoveArrayManager>

S.TList`1.Pack$697$0$Intf>

S@TList`1.Pack$697$ActRec>

S@TList`1.Pack$697$ActRec>H%H

TComparison

TComparer2

TComparer

!TMoveArrayManagerg

!TMoveArrayManager()H

(.TList`1.Pack$697$0$Intf

(@TList`1.Pack$697$ActRec

(@TList`1.Pack$697$ActRec ,H

$TComparison

"TComparer2

"TComparer

*TMoveArrayManagerg

*TMoveArrayManager

1.TList`1.Pack$697$0$Intf

1@TList`1.Pack$697$ActRec(3H

1@TList`1.Pack$697$ActRec

System.Rtti@

FTComparison>

DTComparer>2

DTComparer>

LTMoveArrayManager>g

LTMoveArrayManager>

S.TList`1.Pack$697$0$Intf>

S@TList`1.Pack$697$ActRec>

S@TList`1.Pack$697$ActRec>d:H

System.RttiH

%TComparison

#TComparer2

#TComparer

TMoveArrayManagerg

TMoveArrayManager\>H

2.TList`1.Pack$697$0$Intf

2@TList`1.Pack$697$ActRec

2@TList`1.Pack$697$ActRecpAH

TComparison

TComparer2

TComparerdCH

TMoveArrayManagerg

TMoveArrayManager

'.TList`1.Pack$697$0$Intf

'@TList`1.Pack$697$ActRec

FTComparison>

DTComparer>2

DTComparer>

LTMoveArrayManager>g

LTMoveArrayManager>

S.TList`1.Pack$697$0$Intf>

S@TList`1.Pack$697$ActRec>

S@TList`1.Pack$697$ActRec>xOH

System.Rtti(

,TDelegatedComparer8

,TDelegatedComparer

?TDelegatedComparer8

?TDelegatedComparert[H

TDelegatedComparer8

TDelegatedComparer@]H

-TDelegatedComparer8

-TDelegatedComparer

TDelegatedComparer8

TDelegatedComparer

*TDelegatedComparer8

*TDelegatedComparer4bH

1TDelegatedComparer8

1TDelegatedComparer

MTDelegatedComparer>8

MTDelegatedComparer>

"TDelegatedComparer8

"TDelegatedComparerxgH

TDelegatedComparer8

TDelegatedComparer

MTDelegatedComparer>8

MTDelegatedComparer>

,TDelegatedComparer8

,TDelegatedComparer

!TDelegatedComparer8

!TDelegatedComparerHnH

MTDelegatedComparer>8

MTDelegatedComparer>

System.TypInfo

mkOperatorOverload

PFieldExEntryhxH

TFieldExEntry

PVmtMethodExEntryl{H

TVmtMethodExEntry

TPropSetV

TPropSet

TPropSetV

TPropSet

TPropSetK

TPropSet

TPropSetK

TPropSet

TPropSetK

TPropSet`

TPropSetK

TPropSet

TPropSetK

TPropSet8

TPropSetV

TPropSet

System.Classes

ssShift

ssHorizontal

htKeyword

EInvalidOperation

EInvalidOperationh

AOperator

System.ClassesT

TThread.TSynchronizeRecord

TThread.TSystemTimes

GetCPUUsage

TOperation

TObservers.TCanObserveEvent

TObservers.TObserverAddedEvent

Operation

FOnExecute

OnExecute

TArray

TEnumerator(

TEnumerator|

TEnumerable-

TEnumerable

!TList.arrayofT

IComparer

)TCollectionNotifyEvent

TArrayManagerg

TArrayManager`

IEnumerable0!@

#TList.TEmptyFunc

$TList.TEnumerator5

$TList.TEnumeratorP

TList&

TList

TThreadList&

TThreadList

&TArray

TEnumerator(

TEnumerator8

TEnumerable-

TEnumerable

.TList.arrayofT

)IComparer

6TCollectionNotifyEvent

-TArrayManagerg

-TArrayManager|

IEnumerable0!@

0TList.TEmptyFunc

1TList.TEnumerator5

1TList.TEnumerator

%TList&

%TListd

TArray

TEnumerator(

TEnumerator

TEnumerable-

TEnumerable

TList.arrayofT

IComparer

&TCollectionNotifyEvent

TArrayManagerg

TArrayManagerP

IEnumerable0!@

TList.TEmptyFunc

!TList.TEnumerator5

!TList.TEnumerator8

TList&

TList

!TArray

&TEnumerator(

&TEnumerator

&TEnumerable-

&TEnumerable$

)TList.arrayofT

$IComparer

1TCollectionNotifyEvent

(TArrayManagerg

(TArrayManager

&IEnumerable0!@

TList.TEmptyFunc

,TList.TEnumerator5

,TList.TEnumerator

TList&

TList

3TPair

JTArray>

OTEnumerator>(

OTEnumerator>

OTEnumerable>-

OTEnumerable>D

?TDictionary.TItem

DTDictionary.TItemArray

!IEqualityComparer

&TCollectionNotifyEvent

5TCollectionNotifyEvent

TEnumerator(

TEnumerator

TEnumerable-

TEnumerable

HTDictionary.TKeyEnumerator;

HTDictionary.TKeyEnumerator@

HTDictionary.TKeyCollection;

HTDictionary.TKeyCollection

%TArray

*TEnumerator(

*TEnumerator

*TEnumerable-

*TEnumerable

JTDictionary.TValueEnumerator;

JTDictionary.TValueEnumeratorT

JTDictionary.TValueCollection;

JTDictionary.TValueCollectionT

ITDictionary.TPairEnumerator;

ITDictionary.TPairEnumerator

9TDictionary9

9TDictionary|

'TArray

,TEnumerator(

,TEnumerator

,TEnumerable-

,TEnumerable

/TList.arrayofT

*IComparer

7TCollectionNotifyEvent

.TArrayManagerg

.TArrayManager

,IEnumerable0!@

1TList.TEmptyFunc

2TList.TEnumerator5

2TList.TEnumerator

&TList&

&TList

ELoginCredendialError

"TLoginCredentialService.TLoginFunc

#TLoginCredentialService.TLoginEvent

Password

-TLoginCredentialService.TLoginCredentialEvent

Callback#TLoginCredentialService.TLoginEvent

3TLoginCredentialService.TLoginCredentialEventObject:

3TLoginCredentialService.TLoginCredentialEventObjectT5J

FLoginFunc

'TLoginCredentialService.TLoginFuncProxy:

ALoginFunc

'TLoginCredentialService.TLoginFuncProxy

TLoginCredentialServiceM

RegisterLoginHandler

UnregisterLoginHandler

GetLoginCredentialEvent

GetLoginCredentials

TLoginCredentialService

4TPair

KTArray>

PTEnumerator>(

PTEnumerator>

PTEnumerable>-

PTEnumerable>

@TDictionary.TItem

ETDictionary.TItemArray

7TCollectionNotifyEvent

ITDictionary.TKeyEnumerator;

ITDictionary.TKeyEnumerator

ITDictionary.TKeyCollection;

ITDictionary.TKeyCollection8MJ

'TArray

,TEnumerator(

,TEnumerator

,TEnumerable-

,TEnumerable

KTDictionary.TValueEnumerator;

KTDictionary.TValueEnumerator`RJ

KTDictionary.TValueCollection;

KTDictionary.TValueCollection`TJ

JTDictionary.TPairEnumerator;

JTDictionary.TPairEnumerator

:TDictionary9

:TDictionary

/TList.arrayofT

System.Generics.CollectionsP

*IComparer

.TArrayManagerg

.TArrayManager

,IEnumerable0!@

1TList.TEmptyFunc

2TList.TEnumerator5

2TList.TEnumerator8dJ

&TList&

&TList

TArray

%TEnumerator(

%TEnumerator$sJ

%TEnumerable-

%TEnumerabledtJ

(TList.arrayofT

#IComparer

0TCollectionNotifyEvent

'TArrayManagerg

'TArrayManager8wJ

%IEnumerable0!@

*TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumeratorHzJ

TList&

TList

%TObjectList

TArray

%TEnumerator(

%TEnumeratorp

%TEnumerable-

%TEnumerable

(TList.arrayofT

#IComparer

0TCollectionNotifyEvent

'TArrayManagerg

'TArrayManager

%IEnumerable0!@

*TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumerator

TList&

TListH

%TThreadList&

%TThreadList

TArray

0TEnumerator(

0TEnumerator

0TEnumerable-

0TEnumerablex

3TList.arrayofT

.IComparer

;TCollectionNotifyEvent

2TArrayManagerg

2TArrayManager

0IEnumerable0!@

5TList.TEmptyFunc

6TList.TEnumerator5

6TList.TEnumerator

*TList&

*TList

7TArray>

LTList>.arrayofT

GIComparer>

GTCollectionNotifyEvent>

Item TList

>TArrayManager>g

>TArrayManager>

IIEnumerable>0!@

NTList>.TEmptyFunc

OTList>.TEnumerator5

OTList>.TEnumerator

CTList>&

CTList>|

TList.Sort$1847$0$Intf

TList.Sort$1847$ActRec0

TList.Sort$1847$ActRec

!TArray

&TEnumerator(

&TEnumerator

&TEnumerable-

&TEnumerable

)TList.arrayofT

$IComparer

1TCollectionNotifyEvent

(TArrayManagerg

(TArrayManager

&IEnumerable0!@

TList.TEmptyFunc

,TList.TEnumerator5

,TList.TEnumerator

TList&

TList

&TThreadList&

&TThreadListh

"TArray

'TEnumerator(

'TEnumerator

'TEnumerable-

'TEnumerable

*TList.arrayofT

%IComparer

2TCollectionNotifyEvent

)TArrayManagerg

)TArrayManager

'IEnumerable0!@

,TList.TEmptyFunc

-TList.TEnumerator5

-TList.TEnumerator

!TList&

!TList

TArray

#TEnumerator(

#TEnumeratorD

#TEnumerable-

#TEnumerable

&TList.arrayofT

!IComparer

.TCollectionNotifyEvent

%TArrayManagerg

%TArrayManagerH@L

#IEnumerable0!@

(TList.TEmptyFunc

)TList.TEnumerator5

)TList.TEnumeratorPCL

TList&

TList

#TThreadList&

#TThreadList

TComponent.Create@$2656$0$Intf

&TComparison

$TComparer2

$TComparer

-TDelegatedComparer8

-TDelegatedComparer

TComponent.Create@$2656$ActRec

#TComponent.GetObservers$2669$0$Intf

#TComponent.GetObservers$2669$1$Intf

#TComponent.GetObservers$2669$ActRec

#TComponent.GetObservers$2669$ActRec|{L

7TLoginCredentialService.GetLoginCredentials$2942$0$Intf

LPassword

7TLoginCredentialService.GetLoginCredentials$2942$ActRec

TComparison

TComparer2

TComparer

$TMoveArrayManagerg

$TMoveArrayManagerl

.TList`1.Pack$697$0$Intf

@TList`1.Pack$697$ActRec

@TList`1.Pack$697$ActRech

TComparison

)TComparer2

)TComparerd

1TMoveArrayManagerg

1TMoveArrayManager,

8.TList`1.Pack$697$0$Intf

8@TList`1.Pack$697$ActRec

8@TList`1.Pack$697$ActRecT

TComparison

TComparer2

TComparerX

!TMoveArrayManagerg

!TMoveArrayManager

(.TList`1.Pack$697$0$Intf

(@TList`1.Pack$697$ActRec

,TMoveArrayManagerg

,TMoveArrayManager$%N

3.TList`1.Pack$697$0$Intf

3@TList`1.Pack$697$ActRec

3@TList`1.Pack$697$ActRec8(N

RTList>.arrayofT

MIComparer>

ZTCollectionNotifyEvent>

Item3TPair

QTArrayManager>g

QTArrayManager>

OIEnumerable>0!@

TTList>.TEmptyFunc

UTList>.TEnumerator5

UTList>.TEnumeratorX/N

ITList>&

ITList>`1N

-TList.arrayofT

(IComparer

,TArrayManagerg

,TArrayManager

*IEnumerable0!@

/TList.TEmptyFunc

0TList.TEnumerator5

0TList.TEnumerator

$TList&

$TListlDN

,TComparison

*TComparer2

*TComparerLRN

2TMoveArrayManagerg

2TMoveArrayManager

9.TList`1.Pack$697$0$Intf

9@TList`1.Pack$697$ActRec

9@TList`1.Pack$697$ActRec@WN

STList>.arrayofT

NIComparer>

[TCollectionNotifyEvent>

Item4TPair

RTArrayManager>g

RTArrayManager>

PIEnumerable>0!@

UTList>.TEmptyFunc

VTList>.TEnumerator5

VTList>.TEnumeratorp^N

JTList>&

JTList>|`N

,TComparison

*TComparer2

*TComparer

2TMoveArrayManagerg

2TMoveArrayManagerppN

9.TList`1.Pack$697$0$Intf

9@TList`1.Pack$697$ActRec

System.ClassesP

%TComparison

#TComparer2

#TComparer

TMoveArrayManagerg

TMoveArrayManagerdwN

2.TList`1.Pack$697$0$Intf

2@TList`1.Pack$697$ActRec

2@TList`1.Pack$697$ActRecxzN

%TComparison

#TComparer2

#TComparer||N

TMoveArrayManagerg

TMoveArrayManager4~N

2.TList`1.Pack$697$0$Intf

2@TList`1.Pack$697$ActRec

2@TList`1.Pack$697$ActRecH

0TComparison

.TComparer2

.TComparerX

6TMoveArrayManagerg

6TMoveArrayManager(

=.TList`1.Pack$697$0$Intf

=@TList`1.Pack$697$ActRec

=@TList`1.Pack$697$ActRec`

ITComparison>

GTComparer>2

GTComparer>

OTMoveArrayManager>g

OTMoveArrayManager>

V.TList`1.Pack$697$0$Intf>

V@TList`1.Pack$697$ActRec>

System.Classes@

&TComparison

$TComparer2

$TComparerh

,TMoveArrayManagerg

,TMoveArrayManager(

3.TList`1.Pack$697$0$Intf

3@TList`1.Pack$697$ActRec

'TComparison

%TComparer2

%TComparerD

-TMoveArrayManagerg

-TMoveArrayManager

4.TList`1.Pack$697$0$Intf

4@TList`1.Pack$697$ActRec

#TComparison

!TComparer2

!TComparer$

)TMoveArrayManagerg

)TMoveArrayManager

0.TList`1.Pack$697$0$Intf

0@TList`1.Pack$697$ActRec

%TDelegatedComparer8

%TDelegatedComparer(

2TDelegatedComparer8

2TDelegatedComparer

"TDelegatedComparer8

"TDelegatedComparerx

OTComparison>

MTComparer>2

MTComparer>

UTMoveArrayManager>g

UTMoveArrayManager>

\.TList`1.Pack$697$0$Intf>

\@TList`1.Pack$697$ActRec>

System.ClassesD

TComparison

TComparer2

TComparer

!TMoveArrayManagerg

!TMoveArrayManager

(.TList`1.Pack$697$0$Intf

(@TList`1.Pack$697$ActRec

*TComparison

(TComparer2

(TComparerH

0TMoveArrayManagerg

0TMoveArrayManager

7.TList`1.Pack$697$0$Intf

7@TList`1.Pack$697$ActRec

7@TList`1.Pack$697$ActRec0

3TDelegatedComparer8

3TDelegatedComparer|

PTComparison>

NTComparer>2

NTComparer>

VTMoveArrayManager>g

VTMoveArrayManager>,

].TList`1.Pack$697$0$Intf>

]@TList`1.Pack$697$ActRec>D

]@TList`1.Pack$697$ActRec>

3TDelegatedComparer8

3TDelegatedComparer\

,TDelegatedComparer8

,TDelegatedComparer

,TDelegatedComparer8

,TDelegatedComparer

7TDelegatedComparer8

7TDelegatedComparerh

PTDelegatedComparer>8

PTDelegatedComparer>$

-TDelegatedComparer8

-TDelegatedComparer

.TDelegatedComparer8

.TDelegatedComparer

*TDelegatedComparer8

*TDelegatedComparerp

VTDelegatedComparer>8

VTDelegatedComparer>

"TDelegatedComparer8

"TDelegatedComparer

1TDelegatedComparer8

1TDelegatedComparer

WTDelegatedComparer>8

WTDelegatedComparer>X

System.Actions

FHelpKeyword

HelpKeyword

'TArray

,TEnumerator(

,TEnumerator

,TEnumerable-

,TEnumerableT

/TList.arrayofT

*IComparer

7TCollectionNotifyEvent

.TArrayManagerg

.TArrayManagerL

,IEnumerable0!@

1TList.TEmptyFunc

2TList.TEnumerator5

2TList.TEnumeratorx

&TList&

&TList

/TContainedActionList.EnumByCategory$3260$0$Intf

/TContainedActionList.EnumByCategory$3260$ActRec

,TComparison

*TComparer2

*TComparerp9O

2TMoveArrayManagerg

2TMoveArrayManager8;O

9.TList`1.Pack$697$0$Intf

9@TList`1.Pack$697$ActRec

9@TList`1.Pack$697$ActRecd>O

3TDelegatedComparer8

3TDelegatedComparer

Winapi.Wincodec

System.IniFiles

DeleteKey

System.Win.Registry

TRegKeyInfo

NumSubKeys

MaxSubKeyLen

FCurrentKey

FRootKey

FCloseRootKey

CloseKey

CreateKey

GetKeyInfo

GetKeyNames

HasSubKeys

KeyExists

LoadKey

MoveKey

OpenKey

OpenKeyReadOnly

ReplaceKey

RestoreKey

SaveKey

UnLoadKey

CurrentKey

LastErrorMsg

RootKey

RootKeyName

Vcl.Graphics

EInvalidGraphicOperation

SupportsPartialTransparency

SupportsClipboardFormat

Monochrome

UhTCP

Uh.eP

System.Contnrs

IsShortCut

Vcl.ActnList

1.2.7

Ht.Ht3

System.Win.ComObj

Vcl.Controls

igoParentPassthrough

FAlwaysShowDragImages

AlwaysShowDragImages

toFlickFallbackKeys

Vcl.Controls@

'TCustomGestureEngine.TGestureEngineFlag

(TCustomGestureEngine.TGestureEngineFlags

Supported

TKeyEvent

TKeyPressEvent

FOnKeyDown

FOnKeyPress

FOnKeyUp

IsHintMsg

FNativeWheelSupport

FWheelSupportMessage

Vcl.StdCtrls

Vcl.StdCtrls-

FPasswordChar

Vcl.StdCtrlsC

PasswordChar

OnKeyDown

OnKeyPressH

OnKeyUp$

Vcl.StdCtrlsD

OnKeyUp

TCustomButton.TButtonStyle

Vcl.StdCtrls;

Vcl.StdCtrls2

Vcl.StdCtrls

!TScrollBarStyleHook.TScrollWindow6

!TScrollBarStyleHook.TScrollWindow

%TCustomEdit.ObserverAdded$3338$0$Intf

%TCustomEdit.ObserverAdded$3338$ActRec

)TCustomCheckBox.ObserverAdded$3550$0$Intf

)TCustomCheckBox.ObserverAdded$3550$ActRec

)TCustomCheckBox.ObserverAdded$3550$ActRec4

Winapi.ShlObj

Vcl.Printers

APort

Port

Vcl.StdActns

Vcl.ComCtrls

System.HelpIntfs

UnderstandsKeyword

(TArray

-TEnumerator(

-TEnumerator$(U

-TEnumerable-

-TEnumerablet)U

0TList.arrayofT

IComparer

8TCollectionNotifyEvent

/TArrayManagerg

/TArrayManagert,U

-IEnumerable0!@

2TList.TEmptyFunc

3TList.TEnumerator5

3TList.TEnumerator

'TList&

'TListh1U

-TComparison

TComparer2

TComparer0eU

3TMoveArrayManagerg

3TMoveArrayManager

:.TList`1.Pack$697$0$Intf

:@TList`1.Pack$697$ActRec

:@TList`1.Pack$697$ActRec$jU

4TDelegatedComparer8

4TDelegatedComparerxkU

Vcl.Dialogs

OnExecute,tU

FURL

TDefaultLoginCredentials]

LoginEvent

LoginEventUsrPw

TDefaultLoginCredentials

.TDefaultLoginCredentials.LoginEvent$833$0$Intf

.TDefaultLoginCredentials.LoginEvent$833$ActRec

3TDefaultLoginCredentials.LoginEventUsrPw$835$0$Intf

3TDefaultLoginCredentials.LoginEventUsrPw$835$ActRec

3TDefaultLoginCredentials.LoginEventUsrPw$835$ActRecp

FProportional

Vcl.ExtCtrls$

Proportional

Vcl.ExtCtrls

Vcl.Themes

tcpCategoryPanelGroupDontCare

tcpCategoryPanelGroupRoot

tcpBackground

tcpGradientHeader

tcpThemedHeader

tcpChevronOpenedNormal

tcpChevronOpenedHot

tcpChevronOpenedPressed

tcpChevronClosedNormal

tcpChevronClosedHot

tcpChevronClosedPressed

tcpChevronClosedLeftNormal

tcpChevronClosedLeftHot

tcpChevronClosedLeftPressed

tcpThemedChevronOpenedNormal

tcpThemedChevronOpenedHot

tcpThemedChevronOpenedPressed

tcpThemedChevronClosedNormal

tcpThemedChevronClosedHot

tcpThemedChevronClosedPressed

tcDropDownButtonLeftPressed

tePassword

thHeaderItemLeftPressed

tsArrowBtnLeftPressed

ttbThumbLeftPressed

AuthorURL

TCustomStyleServices.TStyleFlag

TCustomStyleServices.TStyleFlags

TCustomStyleEngine.TStyleEngineNotification

#TStyleManager.TStyleClassDescriptor

"TStyleManager.TStyleServicesHandle

TStyleManager.TSourceInfo

"TArray

'TEnumerator(

'TEnumerator

'TEnumerable-

'TEnumerableX

*TList.arrayofT

%IComparer

2TCollectionNotifyEvent

)TArrayManagerg

)TArrayManager

'IEnumerable0!@

,TList.TEmptyFunc

-TList.TEnumerator5

-TList.TEnumeratorT

!TList&

!TList

RTPair>

eTArray>>

jTEnumerator>>(

jTEnumerable>>-

jTEnumerable>>

^TDictionary>.TItem

cTDictionary>.TItemArray

System.Generics.Collections|

IEqualityComparer

%TCollectionNotifyEvent

UTCollectionNotifyEvent>

Item!TList

TArray

TEnumerator(

TEnumeratorT

TEnumerable-

TEnumerable

gTDictionary>.TKeyEnumerator;

gTDictionary>.TKeyEnumerator

gTDictionary>.TKeyCollection;

gTDictionary>.TKeyCollection

4TArray>

9TEnumerator>(

9TEnumerator>

9TEnumerable>-

9TEnumerable>

iTDictionary>.TValueEnumerator;

iTDictionary>.TValueEnumerator

iTDictionary>.TValueCollection;

iTDictionary>.TValueCollection

hTDictionary>.TPairEnumerator;

hTDictionary>.TPairEnumerator@*W

XTDictionary>9

XTDictionary>|,W

Keys$)W

9TPair

LTArray>

QTEnumerator>(

QTEnumerator>

QTEnumerable>-

QTEnumerable> 7W

ETDictionary.TItem

JTDictionary.TItemArray

System.Generics.Collectionsx8W

%TCollectionNotifyEvent

TEnumerator(

TEnumeratorp;W

TEnumerable-

TEnumerable

NTDictionary.TKeyEnumerator;

NTDictionary.TKeyEnumerator

NTDictionary.TKeyCollection;

NTDictionary.TKeyCollection

,TArray

1TEnumerator(

1TEnumeratorhBW

1TEnumerable-

1TEnumerable

PTDictionary.TValueEnumerator;

PTDictionary.TValueEnumerator0EW

PTDictionary.TValueCollection;

PTDictionary.TValueCollection

OTDictionary.TPairEnumerator;

OTDictionary.TPairEnumeratorpIW

?TDictionary9

?TDictionaryxKW

KeyslHW

OnKeyNotify@:W

6TArray

;TEnumerator(

;TEnumerator

;TEnumerable-

;TEnumerable

>TList.arrayofT

System.Generics.Collections

9IComparer

FTCollectionNotifyEvent

Item#TStyleManager.TStyleClassDescriptor

=TArrayManagerg

=TArrayManagerhXW

;IEnumerable0!@

@TList.TEmptyFunc

ATList.TEnumerator5

ATList.TEnumerator

5TList&

5TList

*TArray

/TEnumerator(

/TEnumerator8kW

/TEnumerable-

/TEnumerable

2TList.arrayofT

-IComparer

:TCollectionNotifyEvent

1TArrayManagerg

1TArrayManager

/IEnumerable0!@

4TList.TEmptyFunc

5TList.TEnumerator5

5TList.TEnumerator

)TList&

)TList

'TArray

,TEnumerator(

,TEnumerator

,TEnumerable-

,TEnumerable(

/TList.arrayofT

*IComparer

7TCollectionNotifyEvent

.TArrayManagerg

.TArrayManager$

,IEnumerable0!@

1TList.TEmptyFunc

2TList.TEnumerator5

2TList.TEnumeratorP

&TList&

&TList

TArray

TEnumerator(

TEnumerator

TEnumerable-

TEnumerable

#TList.arrayofT

IComparer

TCollectionNotifyEvent

"TArrayManagerg

"TArrayManager

IEnumerable0!@

%TList.TEmptyFunc

&TList.TEnumerator5

&TList.TEnumerator

TList&

TList

Uh.gX

'TComparison

%TComparer2

%TComparert

-TMoveArrayManagerg

-TMoveArrayManager4!Y

4.TList`1.Pack$697$0$Intf

4@TList`1.Pack$697$ActRec

4@TList`1.Pack$697$ActRecP$Y

mTList>>.arrayofT

hIComparer>>

uTCollectionNotifyEvent>>

ItemRTPair>

lTArrayManager>>g

lTArrayManager>>$(Y

jIEnumerable>>0!@

oTList>>.TEmptyFunc

pTList>>.TEnumerator5

pTList>>.TEnumeratorD,Y

dTList>>&

dTList>>

TList.arrayofT

IComparer

TArrayManagerg

TArrayManager

IEnumerable0!@

TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumerator

TList&

TListHAY

>.arrayofT

7IComparer>

;TArrayManager>g

;TArrayManager>

9IEnumerable>0!@

>TList>.TEmptyFunc

?TList>.TEnumerator5

?TList>.TEnumeratorPRY

3TList>&

3TList>,TY

TTList>.arrayofT

OIComparer>

\TCollectionNotifyEvent>

Item9TPair

STArrayManager>g

STArrayManager>\cY

QIEnumerable>0!@

VTList>.TEmptyFunc

WTList>.TEnumerator5

WTList>.TEnumerator

KTList>&

KTList>(iY

4TList.arrayofT

/IComparer

3TArrayManagerg

3TArrayManagerhwY

1IEnumerable0!@

6TList.TEmptyFunc

7TList.TEnumerator5

7TList.TEnumerator

TList&

TListt|Y

;TComparison

9TComparer2

9TComparert

ATMoveArrayManagerg

ATMoveArrayManager\

H.TList`1.Pack$697$0$Intf

H@TList`1.Pack$697$ActRec

Vcl.Themes

/TComparison

-TComparer2

-TComparer

5TMoveArrayManagerg

5TMoveArrayManager

<.tlist>

,TComparison

*TComparer2

*TComparer

2TMoveArrayManagerg

2TMoveArrayManager

9.TList`1.Pack$697$0$Intf

9@TList`1.Pack$697$ActRecT

9@TList`1.Pack$697$ActRec

Vcl.Themes|

TComparison

TComparer2

TComparer

&TMoveArrayManagerg

&TMoveArrayManager

-.TList`1.Pack$697$0$Intf

-@TList`1.Pack$697$ActRec

.TDelegatedComparer8

.TDelegatedComparer

jTComparison>>

hTComparer>>2

hTComparer>>

pTMoveArrayManager>>g

pTMoveArrayManager>>

w.TList`1.Pack$697$0$Intf>>

w@TList`1.Pack$697$ActRec>>

TComparison

TComparer2

TComparer@

TMoveArrayManagerg

TMoveArrayManager

'.TList`1.Pack$697$0$Intf

'@TList`1.Pack$697$ActRec

9TComparison>

7TComparer>2

7TComparer>

?TMoveArrayManager>g

?TMoveArrayManager>

F.TList`1.Pack$697$0$Intf>

F@TList`1.Pack$697$ActRec>

QTComparison>

OTComparer>2

OTComparer>X

WTMoveArrayManager>g

WTMoveArrayManager>h

^.TList`1.Pack$697$0$Intf>

^@TList`1.Pack$697$ActRec>

1TComparison

/TComparer2

/TComparerd

7TMoveArrayManagerg

7TMoveArrayManager4

>.TList`1.Pack$697$0$Intf

>@TList`1.Pack$697$ActRec

>@TList`1.Pack$697$ActRecl

BTDelegatedComparer8

BTDelegatedComparer

6TDelegatedComparer8

6TDelegatedComparer

3TDelegatedComparer8

3TDelegatedComparerT

'TDelegatedComparer8

'TDelegatedComparer

qTDelegatedComparer>>8

qTDelegatedComparer>>

!TDelegatedComparer8

!TDelegatedComparer

@TDelegatedComparer>8

@TDelegatedComparer>l

XTDelegatedComparer>8

XTDelegatedComparer>@

8TDelegatedComparer8

8TDelegatedComparerD

Vcl.ImgList

lrMonoChrome

Vcl.Menus

FAutoHotkeys

RethinkHotkeys

AutoHotkeys4

AutoHotkeys

Vcl.Forms

ssHotTrack

Vcl.FormsT

poProportional

fsShowing

FWindowState

FKeyPreview

WantChildKey

KeyPreview

WindowState

Vcl.Formsc

WindowState

Vcl.Forms$

TApplication.TBiDiKeyboard

BiDiKeyboard

NonBiDiKeyboard

BiDiKeyboardHKL

NonBiDiKeyboardHKL

SetBiDiKeyboard

SetNonBiDiKeyboard

GetBidiKeyboard

GetNonBidiKeyboard

ApplyBiDiKeyboardLayout

ApplyNonBiDiKeyboardLayout

Vcl.FormsD!A

FBiDiKeyboard

FEnumAllWindowsOnActivateHint

FOnActionExecute

Keyword

EnumAllWindowsOnActivateHint

OnActionExecute

1TFormStyleHook.TMainMenuBarStyleHook.TMenuBarItem

(:TFormStyleHook.TMainMenuBarStyleHook.:1

FEnterWithKeyboard

$TFormStyleHook.TMainMenuBarStyleHook8

CheckHotKeyItem

$TFormStyleHook.TMainMenuBarStyleHook

EnterWithKeyboard

Vcl.Imaging.pngimage

fKeyword

GetKeyValue

AMsg

CheckIPVersionSupport

VPort

WSGetServByPort

APortNumber

AddServByPortToList

TIdSocketListWindows4

TIdSocketListWindows

IdStackWindows

TIdStackWindowsg

ReceiveMsg

WSTranslateSocketErrorMsg

SupportsIPv6

TIdStackWindows

EIdIPVersionUnsupported

FSourcePort

FDestPort

SourcePort

DestPort

LocalAddressH

TList.arrayofT

IComparer

TArrayManagerg

TArrayManager@

IEnumerable0!@

TList.TEmptyFunc

!TList.TEnumerator5

!TList.TEnumerator(

TList&

TList

Vcl.Buttons

UpdatesUrl

Vcl.Imaging.pnglang

System.ZLib

System.Win.Crtl

System.Character

System.Internal.ExcUtils

System.SysConst

System.RTLConsts

Winapi.PsAPI

Winapi.SHFolder

Winapi.ImageHlp

System.VarUtils

System.Math

System.Diagnostics

Winapi.Messages

System.AnsiStrings

System.StrUtils

Vcl.Consts

System.UIConsts

System.IOUtils

System.DateUtils

System.Masks

Winapi.ShellAPI

Winapi.IpExport

Winapi.Winsock2

Winapi.Qos

Winapi.CommCtrl

Winapi.Dwmapi

Winapi.UxTheme

Winapi.MultiMon

System.Win.ComConst

Winapi.PenInputPanel

Winapi.MsInkAut

Winapi.TpcShrd

Vcl.GraphUtil

Winapi.Imm

Winapi.CommDlg

Winapi.MSXMLIntf

Winapi.StructuredQueryCondition

Winapi.PropSys

Winapi.ObjectArray

Winapi.UrlMon

Winapi.WinInet

Winapi.RegStr

Vcl.ComStrs

Winapi.WinSpool

Vcl.ListActns

Vcl.ToolWin

Winapi.RichEdit

Vcl.Clipbrd

Winapi.FlatSB

Winapi.Dlgs

System.WideStrUtils

Vcl.Samples.Gauges

csshiftjis

windows-936

windows-1250

windows-1251

windows-1252

windows-1253

windows-1254

windows-1255

windows-1256

windows-1257

windows-1258

windows-874

1.0.5, 10-Dec-2007

oleaut32.dll

advapi32.dll

RegOpenKeyExW

RegCloseKey

user32.dll

kernel32.dll

GetConsoleOutputCP

UnhookWindowsHookEx

SetWindowsHookExW

MsgWaitForMultipleObjectsEx

MsgWaitForMultipleObjects

MapVirtualKeyW

LoadKeyboardLayoutW

GetKeyboardState

GetKeyboardLayoutNameW

GetKeyboardLayoutList

GetKeyboardLayout

GetKeyState

GetKeyNameTextW

EnumWindows

EnumThreadWindows

EnumChildWindows

ActivateKeyboardLayout

gdi32.dll

SetViewportOrgEx

version.dll

WinExec

GetCPInfoExW

GetCPInfo

RegUnLoadKeyW

RegSaveKeyW

RegRestoreKeyW

RegReplaceKeyW

RegQueryInfoKeyW

RegLoadKeyW

RegFlushKey

RegEnumKeyExW

RegDeleteKeyW

RegCreateKeyExW

ole32.dll

comctl32.dll

msvcrt.dll

shell32.dll

SHFileOperationW

ShellExecuteW

wininet.dll

InternetOpenUrlW

DeleteUrlCacheEntryW

winspool.drv

wtsapi32.dll

msimg32.dll

RegDeleteKeyExW

windowscodecs.dll

uxtheme.dll

imm32.dll

DWMAPI.DLL

Updater.exe

4G4X4e4y4

6 6$61666[6

2!2-2T2\2d2l2p2t2x2|2

7x7F7T7d7y7

:#:': :/:

5l6

? ?$?(?,?0?4?

=!=$=)=-=

6l6J6q6

> >$>(>0>8>

323D3`3n3{3

4X5F5V5i5z5

-2T2c2

2,2

8 8$8,848

6c6C6R6|6

00F0W0j0{0

5T5D5s5w5

5S5F5U5]5k5{5

> >$>(>,>0>4>8>

: :$:(:,:

5-555C5U5g5o5}5

=_=0>7>

>0_081?1

? ?$?(?,?9?

>&>->7>;>[>_>

1Z1g1v1?3O3L5d5

=">*>0>5>

1 1$1(1,101=1|1

7*717;7\7

6c6D6P6T6X6\6d6l6p6t6x6|6

8…8C8[8c8q8

4 4$4(4,444

7 7$7,747

0#0'0 0/03070>3

7!7|7G7K7o7w7

4O4T4f4x4

6c6C6Z6i6q6

88x8}8

00C0X0f0w0

77L7X7a7j7u7

3)3/34393

333333333333333333

33333833

3333339

3333333333333338

:*"*"$3338

3333333

33333333

33333333333

3333333333338

33338?383

333333333333

:*3:"$3338

333333333333333

iTXtXML:com.adobe.xmp

xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/"

xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/"

xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#"

xmlns:dc="hXXp://purl.org/dc/elements/1.1/"

xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/"

xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/"

xmlns:exif="hXXp://ns.adobe.com/exif/1.0/">

Adobe Photoshop CC 2014 (Windows)

xmp.iid:b3831cbd-bc41-a34e-a7f7-f699aff2b2c7

adobe:docid:photoshop:aa6b9ef4-b64f-11e5-9a7d-89a37870ad70

xmp.did:da8606af-8de8-5d49-9556-822e1d82b7a2

xmp.iid:da8606af-8de8-5d49-9556-822e1d82b7a2

Adobe Photoshop CC 2014 (Windows)

xmp.iid:51e3cb1c-f05f-bb49-b7ba-ea69e0ca9bbe

xmp.iid:b3831cbd-bc41-a34e-a7f7-f699aff2b2c7

adobe:docid:photoshop:2a991e2e-b64f-11e5-9a7d-89a37870ad70

adobe:docid:photoshop:cd7feb75-8acf-11e5-9456-b72e508269ee

adobe:docid:photoshop:f0e8aff1-cbbf-11da-a4aa-940d99f82ae9

xmp.did:32C2ED32BF6BE21189AFA5015AEDAAD4

xmp.did:5FF7A00E298F11E19B448C43133F2984

xmp.did:FAEC986E930411E3972AA936D5639760

&X.Wd;;

.:_.Yr

9C.Wh

k.Bah7

e,d%s

ctcp

-0] \=^@

XD.Dz

a%di^

-odc}

.fJ-9

.IzDD

uC'%c

>IYF.ln

.QV;L

fQcmD

6s".SmW

Lb3%scW

%FLYR

.Iyb@i

N%s4Q#F

.ya#d

J%d&9

uI%sD

Y.wIL

{.Ugzu

y5.NR

%X:PN S

P.QiB9

.xG]/

f.zzn

.gwvy

.Bb,o:

(i%s\

8K$%UY

%uY36

%D-;{

.nUS%

%8XTK

-4.xJg

)mEW.HE

ZW1_z.nu

q&.KlC

`e.fsP

.lH^ye

%UcYb

1g$ö

%x%0m

c|2%Upa}

y%DpQAL

qB*%u]7$

|Z3.jv

%XS!}

D%0u

%S_SY

46.OM

O.rvi

DURlm

%x7

A.af

7*(LI%U

8e.mB

Zr.dh

g%Ui(*K^X*

%UaPV

l.PjCU

BG(%U

.Ck1N

.Pu5n2FW

DQ0#.iD

O'%Fj

15%U)`d

MpH.wW

'`r.JE

Hz.wb>

KeYa C

%d{M9d

.XXx0Y`

_wi7%umpLF^

T HkYY[%C

.NP&N

.hudE

&d9L%X

C31K%F

.aX&Q

%FUc>EY

.Wunw

x.Ls8

,Vcl.Samples.Gauges

yVcl.Consts

(Vcl.Menus

%System.Classes

dSystem.SysConst

,System.Character

ISystem.Internal.ExcUtils

kWinapi.PsAPI

-Winapi.ImageHlp

fSystem.Rtti

YSystem.AnsiStrings

System.StrUtils

RVcl.Dialogs

CVcl.ExtCtrls

eVcl.Forms

DWinapi.MsInkAut

'System.UIConsts

iSystem.IOUtils

&System.DateUtils

|System.Actions

:Winapi.Imm

Vcl.ComCtrls

hWinapi.UrlMon

4Winapi.RegStr

WVcl.ComStrs

bVcl.Printers

8Vcl.ToolWin

jVcl.Clipbrd

NSystem.Contnrs

tVcl.Buttons

Font.Charset

Font.Color

Font.Height

Font.Name

Font.Style

Picture.Data

Font.Quality

qÜ*I5

?IN%C

y[\ .td

.cL\`i

%d{vEm

.XYE^

uOU%u

.vmC)s!m]

lP]Bf%s:

6S*.bg

68RS.pI9

4K#%F

%6X`>

/.hIi#

Cdu.bF

.PnAs\1_}R

frt%u

.pt#V

.WR4J

.,.Wse

QoX%Xw

.aqL9,

X.yi{

!w[b.fi

*.RXG

R.DlO

OverPict.Data

DownPict.Data

UpPict.Data

DisPict.Data

y.peJ

Items.Strings

wI.ox

@.NM5

].Wv$

zkl.OT

,%Dr!!

;s%S#

].wk^

2.NdQ

%S$n{

.rr4.

.lE@c{

1A %2X

K.JTU

,.rP|

o.gy';

-*.Nw

G 8Þ

-Zt}Ow

Jta9%.la

:V.oB}

H%UUb

$-UrU}

yq%Ur

.IybM>

!_.Jo

8g!SQL;

1Xdq .QR

, .ud

/C%U7a

2VSQLOlC5

w#u.yR

V B4".Yo

{k5,q=%c

SSSH/,

~ÿ&

m.evRM

%c,7?`

Paj.EC:

l .pe=U

U%Dk1

.jrx4F

GISqL

z|.bw

!KNi.Rc)

b.am_I

-P.mi

\].ba6e

2.mVq

.Inab

=7.vg

W.aiq

.Qr!F

%%D"t

O.uM5

%SUi(

.WbN

/-.bQ

j?%u2d

XG.vFlT

sW.asck

crtD

Q8.yP

%K%SHs

;jLl40%s

Q-2.KG

LO.ml

%dT:!t

m.Mnk

wz(.uv

0qD%D

.nH.8

4.SS9

cj%%UC

.Svi\s

.cweG

DÚh

7%X.Q>#

>%ugN

sSSH&K

Z.UPi

%3X\]C

.Xb5@

XZ.Uj

>.uja

W6yc.yn|

.Qa;sf

.OR0y

12Y%X

m.tyb

"*y.hW

\.pj{

-O}aPCP

.Rsc8

Z|.uj!|

GS.WM

Y[.wX

0iRý

Y.UxN

2'A %U

%S;v1

.jv-'T`\$Pa

tQl%C

A(%D:5

^B.Iu

YE.JQ;

Margins.Left

Margins.Top

Margins.Right

Margins.Bottom

%C|'5

f.KI$Y

xoao%f)

92S.fB;

BarBitmap.Data

%C?NiNQuWh}

Kos,PX*Na4Vi>_o

f)-x!%x"&l

BackgroundBitmap.Data

%D?NiNQuWh~

6#)/ &/(.AKQcko

!%..-1 %(

%"(.(' !#(

$"'-'( ""(

">!'='-1

#-&.FRYhbf

#)&/1!(*

!(',1)(. $,

%-',2")/

2 !5)#-,**

$,%,1 &-

",$,/!'-

!*$) &.

$*$), %.

2 $;),,#

!5%) %('&

!,*.9 ,;

#4$'*$&)(

6)/0& ''

#- -7!

# &-3!)0

4&(-!#%###

%&19::3/;:8;#

"&'0764, 698=%

&0'5=9=:4@;8

('&0213.,:9;

!"-746--7776

&$%-635, 8879

$''185700@>>?

!#%-436 7245

"%&2675 967:

%%&/134.-

)&'3235.0=79;

%"&/57:44@466

&"$/9;

$%&578:--;466

2**9 -8326--=87;

!,%"-%'1215,,6245

)%&1228,,;67:

-%&568: 9548

.&'587=10=315

/&'1116-.9312

;.1

2&&:77

1#c58'(976:

4!%6,-1#&1/.0

3-.7((4)(

!9 08'&1"&$

2%&/#$-#!!

2&'.!","!#

Peak.Data

.ssW;

b.pXz

.Zgf]

Decoration1.Data

|8U%cV

pOrtT

.xdE|

q(_V.OH

b.fT0jVx

.Ynkw

&.oHB2

.zi(T

Rlt9S`-EX.Jd:Vg2H[2HP

);!:J$8K.LeOl

6J.CR;Ra?]e Q

.Uf$CN">M JZ5T_'F_

`#%X"%V

l%%s##i

c%%u''

`%%u('

e%%u()

Rls8S`-EX.Jd:Vf2H\2HP

);!:J$8K.MgPl

6J.CR;Rc@]g'It

E}/.Uf$BO!=M*HZ4Sa(HZ

4k$C{%D{

&. (2 &*

,(/9'-7 '*

*',4',6&*)

*',3*/6&*)

'%*5-38!&$

.AS4HZ,?Q=Tmo

).815

)'*5-3:(.*

((.8,3: 0.

)'-6.3:*/

*$*404<.11>

-$*3,3;.11

-%,415

&,529@-10

!-&-613;,0/

&,5/6;(-,

"-&,647>.1/

!-&,637=.2/

,&,526?893

,(-5.2>583

,,1924=363

)/724=14/

'%*315>9=7

)&,425@585

''*546?996

),2934=694

'*0837@:=;

(,2804?>>=

(*08/2??@

")*.Fqt

(!$,(->]`|

" !$%#&$"

*$"$%%$ "

""%#!#"'1.Anm

%X#!&"%%%###" ("&0,*"%/PSo

@ '('&!" C3CA7'5Aijc/#

'`%t,*)'%2.0=62#.Emck7'

=52?*)//&3

=30; $.'#1

6,-2%!0-(8

='#>217 (4)$:

7 2%!.*!5

;(&

50&:#$ #

6)#:%*9*!6(

=$!;,%7!

1989, 1999, 2000 Adobe Systems Incorporated. All rights reserved.Trajan ProRegular2.061;ADBE;TrajanPro-Regular;ADOBEVersion 2.061;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168TrajanPro-RegularTrajan is either a registered trademark or a trademark of Adobe Systems Incorporated in the United States and/or other countries.Carol TwomblyhXXp://VVV.adobe.com/typehXXp://VVV.adobe.com/type/legal.html

zero.slashi.dotampersand.scexclam.scexclamdown.scquestion.scquestiondown.sczero.oldstyleone.oldstyletwo.oldstylethree.oldstylefour.oldstylefive.oldstylesix.oldstyleseven.oldstyleeight.oldstylenine.oldstylezero.fittedone.fittedtwo.fittedthree.fittedfour.fittedfive.fittedsix.fittedseven.fittedeight.fittednine.fittedzero.taboldstyleone.taboldstyletwo.taboldstylethree.taboldstylefour.taboldstylefive.taboldstylesix.taboldstyleseven.taboldstyleeight.taboldstylenine.taboldstylea.superioro.superiorone.superiortwo.superiorthree.superiorfour.superiorat.capemdash.capendash.capexclamdown.capguillemotleft.capguillemotright.capguilsinglleft.capguilsinglright.caphyphen.capquestiondown.capbraceleft.capbraceright.capbracketleft.capbracketright.capparenleft.capparenright.capperiodcentered.capspace_uni0326A.scB.scC.scD.scE.scF.scG.scH.scI.scJ.scK.scL.scM.scN.scO.scP.scQ.scAbreveAmacronAogonekCacuteCcaronDcaronDcroatEcaronEdotaccentEmacronEogonekGbreveGcommaaccentImacronIogonekKcommaaccentLacuteLcaronLcommaaccentNacuteNcaronNcommaaccentOhungarumlautOmacronRacuteRcaronRcommaaccentSacuteScedillaScommaaccentTcaronuni021AUhungarumlautUmacronUogonekUringZacuteZdotaccentIdotaccentabreveamacronaogonekcacuteccarondcarondcroatecaronedotaccentemacroneogonekgbrevegcommaaccentimacroniogonekkcommaaccentlacutelcaronlcommaaccentnacutencaronncommaaccentohungarumlautomacronracutercaronrcommaaccentsacutescedillascommaaccenttcaronuni021BuhungarumlautumacronuogonekuringzacutezdotaccentDeltaOmegapiEuroR.scestimatedpartialdiffproductsummationuni2219radicalinfinityintegralapproxequalnotequallessequalgreaterequallozengeuni02C9S.scT.scU.scV.scW.scX.scY.scZ.scDcroat.scOslash.scEth.scThorn.scAE.scOE.scAacute.scAbreve.scAcircumflex.scAdieresis.scAgrave.scAmacron.scAogonek.scAring.scAtilde.scCacute.scCcaron.scCcedilla.scDcaron.scEacute.scEcaron.scEcircumflex.scEdieresis.scEdotaccent.scEgrave.scEmacron.scEogonek.scGbreve.scGcommaaccent.scIacute.scIcircumflex.scIdieresis.scIdotaccent.scIgrave.scImacron.scIogonek.scKcommaaccent.scLacute.scLcaron.scLcommaaccent.scLslash.scNacute.scNcaron.scNcommaaccent.scNtilde.scOacute.scOcircumflex.scOdieresis.scOgrave.scOhungarumlaut.scOmacron.scOtilde.scRacute.scRcaron.scRcommaaccent.scSacute.scScaron.scScedilla.scScommaaccent.scTcaron.scuni021A.scUacute.scUcircumflex.scUdieresis.scUgrave.scUhungarumlaut.scUmacron.scUogonek.scUring.scuni00A0Euro.fitteduni0162uni00ADcent.fitteduni2215yen.fittedflorin.fitteduni0163dollar.fittedsterling.oldstylesterling.fittedYacute.scYdieresis.scZacute.scZcaron.scZdotaccent.scuni0162.scuni2010uni2113A.superiorO.superior2.000Copyright 2000 Adobe Systems Incorporated. All rights reserved. Trajan is either a registered trademark or a trademark of Adobe Systems Incorporated in the United States and/or other countries.Trajan Pro RegularTrajan Pro

%C`-)i

hXXp://ocsp.verisign.com0

"hXXp://crl.verisign.com/tss-ca.crl0

Thawte Certification1

0hXXp://crl.verisign.com/ThawteTimestampingCA.crl0

#hXXp://logo.verisign.com/vslogo.gif0

2Terms of use at hXXps://VVV.verisign.com/rpa (c)101.0,

/hXXp://csc3-2010-crl.verisign.com/CSC3-2010.crl0D

hXXps://VVV.verisign.com/rpa0

hXXp://ocsp.verisign.com0;

/hXXp://csc3-2010-aia.verisign.com/CSC3-2010.cer0

hXXps://VVV.verisign.com/cps0*

#hXXp://logo.verisign.com/vslogo.gif04

#hXXp://crl.verisign.com/pca3-g5.crl04

VVV.adobe.com 0#

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

%s-%s

(%s @ %p)

(class '%s' @ %p)

operator

%s[%d]

%s_%d

.Owner

\\?\UNC\

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

crSQLWait

claBurlywood

%s (*.%s)|*.%1:s

%s (%s)|%1:s|

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

TaskDialogIndirect

%s, ClassID: %s

%s (%s)

{43826D1E-E718-42EE-BC55-A1E261C37BFE}

%s%s%s%s%s%s%s%s%s%s

Windows

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

\Update.bat

ping 127.0.0.1 -n 3 > nul

\files.lst"

.New" "

Compression Error %d

error %d

Invalid stream operation

WS2_32.DLL

getservbyport

WSAAsyncGetServByPort

WSAJoinLeaf

MSWSOCK.DLL

WSARecvMsg

WSASendMsg

Wship6.dll

Fwpuclnt.dll

IdnDL.dll

Normaliz.dll

127.0.0.1

hXXp://l2topzone.com/forum/hosting-designing/new-lineage-2-updater-l2updater-custom-skin/

%u.%.2u GB %s

%u.%.2u MB %s

Update.bat

of %u.%.2u GB

of %u.%.2u MB

files.lst.bz2

files.lst

\system\option.ini

GamePlayViewportX

GamePlayViewportY

_settings.ini

hXXp://VVV.l2killer.org/patch/

system\l2.exe

hXXp://lineage2splendor.com/reduxinstall

Portable Network Graphics

Kernel32.dll

%s is not a valid service.

%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Operation would block.

Operation now in progress.

Operation already in progress.

Socket operation on non-socket.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.oThe "Portable Network Graphics" could not be created because invalid image type parameters have being provided.

Invalid destination array"Character index out of bounds (%d)

Invalid count (%d)

Invalid destination index (%d)

Invalid codepage (%d)-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)

Socket Error # %d

Description: BThe "Portable Network Graphics" image contains an invalid palette.

The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it againnThis "Portable Network Graphics" image is not supported or it might be invalid.

This "Portable Network Graphics" image is not supported because either its width or height exceeds the maximum size of 65535 pixels.

There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.7The png image could not be loaded from the resource ID.oSome operation could not be performed because the system is out of resources. Close some windows and try again.

Invalid style format)Class '%s' is already registered for '%s'%Class '%s' is not registered for '%s'

%s parameter cannot be nil#Feature not supported by this style

Style '%s' is not registered"Cannot unregister the system style

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parametersjThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.

&Password

LoginÊnnot remove shell notification icon"%s requires Windows Vista or later

Button%d

RadioButton%d

Unable to load style '%s'

Unable to load styles: %s

Style '%s' already registered#Style class '%s' already registered

Style '%s' not found

Style class '%s' not found

Value must be between %d and %d

Unable to insert a line Clipboard does not support Icons

Cannot open clipboard: %s Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form

- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.7Length of value array must be >= length of prompt array

%s property out of range

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active0Can only modify an image if it contains a bitmap*A control cannot have itself as its parent

Canvas does not allow drawing#Text format flag '%s' not supported

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'

Observer is not supportedLCannot have multiple single cast observers added to the observers collection4The object does not implement the observer interfaceGNo single cast observer with ID %d was added to the observer collectionFNo multi cast observer with ID %d was added to the observer collection

Scan line index out of range!Cannot change the size of an iconÊnnot change the size of a WIC Image$Unknown picture file extension (.%s)

Unsupported clipboard format

,Specified Login Credential Service not found"%s (Version %d.%d, Build %d, %5:s):%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)

Windows Vista

Windows Server 2008

Windows 7

Windows Server 2008 R2

Windows 2000

Windows XP

Windows Server 2003

Windows Server 2003 R2

Windows Server 2012

Windows 8

No help found for context %d

No help found for %s

Duplicates not allowed5Insufficient RTTI available to support this operation

Parameter count mismatch

Parameter %s cannot be nil'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d

The specified path is too long The specified path was not found The path format is not supported The specified file was not found$No help viewer that supports filters2Length of Strings and Objects arrays must be equal

Invalid Timeout value: %s

Timespan too longbThe duration cannot be returned because the absolute value exceeds the value of TTimeSpan.MaxValue

Failed to create key %s

Failed to get data for '%s'

Failed to set data for '%s'

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

Property %s does not exist

Thread creation error: %s

Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread;Cannot call CheckTerminated on an externally created thread

Cannot open file "%s". %s

Unable to write to %s

Invalid file name - %s

Invalid stream format$''%s'' is not a valid component name

Invalid data type for '%s' List capacity out of bounds (%d)

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class

Error reading %s%s%s: %s

Start index out of bounds (%d)

Ancestor for '%s' not found

Cannot assign a %s to a %s

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

Oct*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Operation not supported

External exception %x

Interface not supported

Object lock not owned(Monitor support function not initialized

(Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time '%d.%d' is not a valid timestamp

'%s' is not a valid GUID value!'%s' is not a valid boolean value

I/O error %d

1989, 1999, 2000 Adobe Systems Incorporated. All rights reserved.Trajan ProRegular2.061;ADBE;TrajanPro-Regular;ADOBETrajanPro-RegularVersion 2.061;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168Trajan is either a registered trademark or a trademark of Adobe Systems Incorporated in the United States and/or other countries.Adobe Systems IncorporatedCarol TwomblyhXXp://VVV.adobe.com/typehXXp://VVV.adobe.com/type/legal.html

///00 11$22)33,44255566877;88>99A::D;;G

VVV.L2Killer.org

2.1.0.3