Susp_Dropper (Kaspersky), Trojan-Downloader.Win32.Karagany.1.FD, Trojan-PSW.Win32.Bzub.2.FD, Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.BHO.FD, Trojan.Win32.FlyStudio.FD, Trojan.Win32.Swrort.3.FD, GenericEmailWorm.YR, GenericInjector.YR, TrojanFlyStudio.YR (Lavasoft MAS)Behaviour: Trojan-Downloader, Trojan-PSW, Trojan, Worm, EmailWorm
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 00486b7b18568416b222bfa7351f330d
SHA1: f64e973049232fce8cb551a700a9842b84268552
SHA256: 0a77973b0cd906524adc862acdff96b04c734236a514b65ff0f464c5ad428f2a
SSDeep: 49152:y4Xg/W4 TKj998no0vxE/xVbHLgkCRWdsDOPDlBr1Vtv eN5fi6ozdIkgWpyJORl:ym3KjL8noLVbnCYdvDH1Lv ebi6ozSMb
Size: 2830416 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6, ACProtect141
Company: no certificate found
Created at: 2015-05-21 03:41:38
Analyzed on: Windows7 SP1 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
EmailWorm | Worm can send e-mails. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):
%original file name%.exe:1588
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process %original file name%.exe:1588 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
C:\UUWiseHelper.dll (291 bytes)
C:\%original file name%.exe (2 bytes)
C:\ZMApi.dll (1 bytes)
C:\dc.dll (122 bytes)
C:\QQ.ini (40 bytes)
The Trojan deletes the following file(s):
C:\ujxtvxurgmulbgymdbup.dfg (0 bytes)
Registry activity
Dropped PE files
MD5 | File path |
---|---|
7164ababffa6eab649d472d2dd008d9e | c:\%original file name%.exe |
dc6b73cbd1f6f5cec640a8c634ae50c8 | c:\UUWiseHelper.dll |
3acaceed9edcf17193c69b5409cec1e0 | c:\ZMApi.dll |
f803ad370a8649a143429f179af5f3ab | c:\dc.dll |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
- Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
C:\UUWiseHelper.dll (291 bytes)
C:\%original file name%.exe (2 bytes)
C:\ZMApi.dll (1 bytes)
C:\dc.dll (122 bytes)
C:\QQ.ini (40 bytes) - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name: ?????
Product Name: QQ????????1.0 Www.52Dfg.Com
Product Version: 1.0.0.0
Legal Copyright: ??????????[www.52dfg.com],??????,?????????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: ????QQ?????,?????
Comments: ???????
Language: English (United States)
Company Name: ?????Product Name: QQ????????1.0 Www.52Dfg.ComProduct Version: 1.0.0.0Legal Copyright: ??????????[www.52dfg.com],??????,?????????Legal Trademarks: Original Filename: Internal Name: File Version: 1.0.0.0File Description: ????QQ?????,?????Comments: ???????Language: English (United States)
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 3780608 | 1499136 | 5.54498 | 6989f382c1cc403f776e60795dd263ba |
UPX | 3784704 | 1212416 | 1212416 | 5.02926 | 94b04f5242e0d3907d1cdc45ecef1168 |
.idata | 4997120 | 4096 | 4096 | 1.10817 | e1185710690673033a1ac10538522288 |
.rsrc | 5001216 | 98304 | 98304 | 2.4747 | dcd0582de8111b299c69b22a291934cb |
UPX | 5099520 | 4096 | 4096 | 5.5335 | 0e216fff17d75239d1924abcf01cfeb2 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://cgi.im.qq.com/cgi-bin/cgi_svrtime | 163.177.92.18 |
hxxp://92wg.sinaapp.com/softtj.php?act=add&softname=QS | 220.181.136.30 |
hxxp://92wg.sinaapp.com/getupdata.php?act=getver&wgname=QS | 220.181.136.30 |
hxxp://92wg.vipsinaapp.com/softtj.php?act=add&softname=QS | 220.181.136.30 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /softtj.php?act=add&softname=QS HTTP/1.1
Connection: Keep-Alive
Content-Type: application/x-www-form-urlencoded
Accept: */*
Accept-Language: zh-CN
Referer: hXXp://92wg.vipsinaapp.com/softtj.php?act=add&softname=QS
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
Host: 92wg.vipsinaapp.com
HTTP/1.1 404 Not Found
Server: sae
Date: Fri, 21 Oct 2016 18:52:34 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 208
Connection: keep-alive
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL /softtj.php was not found on this server.</p>.</body></html>.....
GET /cgi-bin/cgi_svrtime HTTP/1.1
Connection: Keep-Alive
Content-Type: application/x-www-form-urlencoded
Accept: */*
Accept-Language: zh-CN
Referer: hXXp://cgi.im.qq.com/cgi-bin/cgi_svrtime
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
Host: cgi.im.qq.com
HTTP/1.1 200 OK
Date: Fri, 21 Oct 2016 18:52:32 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Server: QZHTTP-2.12
UUID: 0
HTTP/1.1 200 OK..Date: Fri, 21 Oct 2016 18:52:32 GMT..Content-Type: text/html..Content-Length: 0..Connection: keep-alive..Server: QZHTTP-2.12..UUID: 0..
GET /softtj.php?act=add&softname=QS HTTP/1.1
Connection: Keep-Alive
Content-Type: application/x-www-form-urlencoded
Accept: */*
Accept-Language: zh-CN
Referer: hXXp://92wg.sinaapp.com/softtj.php?act=add&softname=QS
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
Host: 92wg.sinaapp.com
HTTP/1.1 404 Not Found
Server: sae
Date: Fri, 21 Oct 2016 18:52:33 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 208
Connection: keep-alive
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL /softtj.php was not found on this server.</p>.</body></html>.....
GET /getupdata.php?act=getver&wgname=QS HTTP/1.1
Connection: Keep-Alive
Content-Type: application/x-www-form-urlencoded
Accept: */*
Accept-Language: zh-CN
Referer: hXXp://92wg.sinaapp.com/getupdata.php?act=getver&wgname=QS
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
Host: 92wg.sinaapp.com
HTTP/1.1 200 OK
Server: sae
Date: Fri, 21 Oct 2016 18:52:33 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Via: 10.67.15.22
HTTP/1.1 200 OK..Server: sae..Date: Fri, 21 Oct 2016 18:52:33 GMT..Content-Type: text/html..Content-Length: 0..Connection: keep-alive..Via: 10.67.15.22..
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_1588:
.text
.text
h.idata
h.idata
H.rsrc
H.rsrc
t%SVh
t%SVh
t$(SSh
t$(SSh
~%UVW
~%UVW
u$SShe
u$SShe
ole32.dll
ole32.dll
kernel32.dll
kernel32.dll
wininet.dll
wininet.dll
oleaut32.dll
oleaut32.dll
Kernel32.dll
Kernel32.dll
user32.dll
user32.dll
ntdll.dll
ntdll.dll
UUWiseHelper.dll
UUWiseHelper.dll
dc.dll
dc.dll
ZMApi.dll
ZMApi.dll
OLEACC.DLL
OLEACC.DLL
uu_reportError
uu_reportError
uu_loginA
uu_loginA
ReportError
ReportError
ZM_ReportErrorA
ZM_ReportErrorA
CreateIoCompletionPort
CreateIoCompletionPort
{18C0788E-59AE-4112-B452-6BF0C1B727FB}
{18C0788E-59AE-4112-B452-6BF0C1B727FB}
{86AB1D8A-7995-4D86-AE5F-18710759228B}
{86AB1D8A-7995-4D86-AE5F-18710759228B}
{A068799B-7551-46b9-8CA8-EEF8357AFEA4}
{A068799B-7551-46b9-8CA8-EEF8357AFEA4}
hXXp://dfgpath.sinaapp.com/dfg/xy.txt
hXXp://dfgpath.sinaapp.com/dfg/xy.txt
hXXp://92dfg.vipsinaapp.com/code.php
hXXp://92dfg.vipsinaapp.com/code.php
WinHttp.WinHttpRequest.5.1
WinHttp.WinHttpRequest.5.1
application/x-www-form-urlencoded
application/x-www-form-urlencoded
hXXps://xui.ptlogin2.qq.com/cgi-bin/xlogin?appid=46000101&style=23&lang=&low_login=1&hide_border=1&hide_title_bar=1&hide_close_icon=1&border_radius=1&self_regurl=http://reg.t.qq.com/index.php&proxy_url=hXXp://t.qq.com/proxy_t.html&s_url=http://t.qq.com&daid=6
hXXps://xui.ptlogin2.qq.com/cgi-bin/xlogin?appid=46000101&style=23&lang=&low_login=1&hide_border=1&hide_title_bar=1&hide_close_icon=1&border_radius=1&self_regurl=http://reg.t.qq.com/index.php&proxy_url=hXXp://t.qq.com/proxy_t.html&s_url=http://t.qq.com&daid=6
login_sig:"
login_sig:"
&u1=http://t.qq.com&r=0.
&u1=http://t.qq.com&r=0.
&appid=46000101&js_ver=10114&js_type=1&login_sig=
&appid=46000101&js_ver=10114&js_type=1&login_sig=
hXXps://ssl.ptlogin2.qq.com/check?regmaster=&pt_tea=1&uin=
hXXps://ssl.ptlogin2.qq.com/check?regmaster=&pt_tea=1&uin=
hXXps://ui.ptlogin2.qq.com/cgi-bin/login?link_target=blank&f_url=loginerroralert&hide_title_bar=1&style=11&daid=196&low_login=0&appid=710032918&s_url=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&target=self?link_target=blank&f_url=loginerroralert&hide_title_bar=1&style=11&daid=196&low_login=0&appid=710032918&s_url=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&target=self
hXXps://ui.ptlogin2.qq.com/cgi-bin/login?link_target=blank&f_url=loginerroralert&hide_title_bar=1&style=11&daid=196&low_login=0&appid=710032918&s_url=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&target=self?link_target=blank&f_url=loginerroralert&hide_title_bar=1&style=11&daid=196&low_login=0&appid=710032918&s_url=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&target=self
&u1=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&r=0.
&u1=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&r=0.
&appid=710032918&js_ver=10114&js_type=1&login_sig=
&appid=710032918&js_ver=10114&js_type=1&login_sig=
hXXps://ssl.captcha.qq.com/getimage?aid=46000101&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?aid=46000101&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?aid=710032918&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?aid=710032918&cap_cd=
&js_ver=10114&js_type=1&login_sig=
&js_ver=10114&js_type=1&login_sig=
&pt_vcode_v1=0&pt_randsalt=0&u1=http://t.qq.com&ptredirect=1&h=1&t=1&g=1&from_ui=1&ptlang=2052&action=
&pt_vcode_v1=0&pt_randsalt=0&u1=http://t.qq.com&ptredirect=1&h=1&t=1&g=1&from_ui=1&ptlang=2052&action=
hXXps://ssl.ptlogin2.qq.com/login?u=
hXXps://ssl.ptlogin2.qq.com/login?u=
&mibao_css=&t=1&g=1&js_ver=10114&js_type=1&login_sig=
&mibao_css=&t=1&g=1&js_ver=10114&js_type=1&login_sig=
&aid=710032918&u1=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&h=1&ptredirect=0&ptlang=2052&daid=196&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
&aid=710032918&u1=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&h=1&ptredirect=0&ptlang=2052&daid=196&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
aq.qq.com
aq.qq.com
t.qq.com
t.qq.com
skey=@
skey=@
hXXp://vipfunc.qq.com/common/user.php?callback=showGrowInfoPanel&data=grow_value&g_tk=
hXXp://vipfunc.qq.com/common/user.php?callback=showGrowInfoPanel&data=grow_value&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=23314&callback=vipSignNew.signCb&cachetime=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=23314&callback=vipSignNew.signCb&cachetime=
hXXp://vipfunc.qq.com/act/client_oz.php?action=client&g_tk=
hXXp://vipfunc.qq.com/act/client_oz.php?action=client&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?actid=20656&sid=&callback=json
hXXp://iyouxi.vip.qq.com/ams.php?actid=20656&sid=&callback=json
hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=7000201&f_url=loginerroralert&s_url=http://baobao.qq.com/&qlogin_param=u1=http%3A//baobao.qq.com/&daid=50&style=11
hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=7000201&f_url=loginerroralert&s_url=http://baobao.qq.com/&qlogin_param=u1=http%3A//baobao.qq.com/&daid=50&style=11
&u1=http://baobao.qq.com/&r=0.
&u1=http://baobao.qq.com/&r=0.
&appid=7000201&js_ver=10114&js_type=1&login_sig=
&appid=7000201&js_ver=10114&js_type=1&login_sig=
hXXps://ssl.captcha.qq.com/getimage?aid=7000201&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?aid=7000201&cap_cd=
&aid=7000201&u1=http://baobao.qq.com/&h=1&ptredirect=1&ptlang=2052&daid=50&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
&aid=7000201&u1=http://baobao.qq.com/&h=1&ptredirect=1&ptlang=2052&daid=50&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
'0','0','
'0','0','
baobao.qq.com
baobao.qq.com
hXXp://cgi.baobao.qq.com/cgi-bin/pets_get_carried
hXXp://cgi.baobao.qq.com/cgi-bin/pets_get_carried
pet.seq
pet.seq
pet.avatarid
pet.avatarid
300007156
300007156
hXXp://cgi.baobao.qq.com/cgi-bin/pets_speedup
hXXp://cgi.baobao.qq.com/cgi-bin/pets_speedup
1000003
1000003
cmd=22&petID=
cmd=22&petID=
hXXp://cgi.bbly.qq.com/cgi-bin/PetHome?
hXXp://cgi.bbly.qq.com/cgi-bin/PetHome?
1001001
1001001
hXXp://minigamecgi.qq.com/cgi-bin/GameVip_SignIn?callback=jsonp
hXXp://minigamecgi.qq.com/cgi-bin/GameVip_SignIn?callback=jsonp
SignDay.day
SignDay.day
hXXp://minigamecgi.qq.com/cgi-bin/GameVip_Lottery?callback=jsonp
hXXp://minigamecgi.qq.com/cgi-bin/GameVip_Lottery?callback=jsonp
hXXp://iyouxi.vip.qq.com/json.php?mod=game&func=award&uin=
hXXp://iyouxi.vip.qq.com/json.php?mod=game&func=award&uin=
hXXp://iyouxi.vip.qq.com/jsonp.php?_c=page&actid=5474&isLoadUserInfo=1&callback=page.signInCb&g_tk=
hXXp://iyouxi.vip.qq.com/jsonp.php?_c=page&actid=5474&isLoadUserInfo=1&callback=page.signInCb&g_tk=
hXXp://iyouxi.vip.qq.com/ams2.02.php?actid=23074&g_tk_type=1&g_tk=
hXXp://iyouxi.vip.qq.com/ams2.02.php?actid=23074&g_tk_type=1&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=22249&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=22249&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=21842&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=21842&g_tk=
data.op.name
data.op.name
hXXp://x.pet.qq.com/vip_platform?cmd=set_sign_info&callback=jQuery
hXXp://x.pet.qq.com/vip_platform?cmd=set_sign_info&callback=jQuery
hXXp://mq.qq.com/index_userSignIn.shtml?r=0.
hXXp://mq.qq.com/index_userSignIn.shtml?r=0.
hXXp://mq.qq.com/activity/badgepk10_qiandao.shtml?r=0.
hXXp://mq.qq.com/activity/badgepk10_qiandao.shtml?r=0.
&apiType=14&apiHost=http://api.t.qq.com&g_tk=
&apiType=14&apiHost=http://api.t.qq.com&g_tk=
hXXp://vip.t.qq.com/ajax/toAcceptMbrTaskPrize
hXXp://vip.t.qq.com/ajax/toAcceptMbrTaskPrize
&apiType=9&apiHost=http://api.t.qq.com&g_tk=
&apiType=9&apiHost=http://api.t.qq.com&g_tk=
hXXp://shop.t.qq.com/asyn/apiSignIn.php
hXXp://shop.t.qq.com/asyn/apiSignIn.php
hXXp://flower.qzone.qq.com/fcg-bin/cgi_plant?g_tk=
hXXp://flower.qzone.qq.com/fcg-bin/cgi_plant?g_tk=
&newflower=1&outCharset=utf-8&g_tk=
&newflower=1&outCharset=utf-8&g_tk=
hXXp://flower.qzone.qq.com/cgi-bin/cgi_pickup_oldfruit?g_tk=
hXXp://flower.qzone.qq.com/cgi-bin/cgi_pickup_oldfruit?g_tk=
&outCharset=utf-8&fupdate=1&format=json
&outCharset=utf-8&fupdate=1&format=json
mode=1&g_tk=
mode=1&g_tk=
data.count
data.count
hXXp://flower.qzone.qq.com/cgi-bin/cgi_show_userprop?p=0.
hXXp://flower.qzone.qq.com/cgi-bin/cgi_show_userprop?p=0.
].name
].name
data.prop[
data.prop[
hXXp://flower.qzone.qq.com/cgi-bin/cgi_exchange_prop?g_tk=
hXXp://flower.qzone.qq.com/cgi-bin/cgi_exchange_prop?g_tk=
&qzreferrer=http://rc.qzone.qq.com/appstore/dailycoupon?from=appstore.myInfoBoxBtn&fupdate=1
&qzreferrer=http://rc.qzone.qq.com/appstore/dailycoupon?from=appstore.myInfoBoxBtn&fupdate=1
qzreferrer=http://ctc.qzs.qq.com/qzone/flower/tool.html#&op_uin=
qzreferrer=http://ctc.qzs.qq.com/qzone/flower/tool.html#&op_uin=
frameElement.callback(
frameElement.callback(
hXXp://flower.qzone.qq.com/cgi-bin/cgi_use_mallprop?g_tk=
hXXp://flower.qzone.qq.com/cgi-bin/cgi_use_mallprop?g_tk=
qzreferrer=http://ctc.qzs.qq.com/qzone/flower/tool.html#&propid=7&op_uin=
qzreferrer=http://ctc.qzs.qq.com/qzone/flower/tool.html#&propid=7&op_uin=
&p=9B9303440358DDF85AB6EBB1DACFAC7B&pt_rsa=0&ptlang=2052&low_login_enable=0&u1=http://connect.qq.com&from_ui=1&fp=loginerroralert&device=2&aid=716027609&pt_3rd_aid=100689805&ptredirect=1&h=1&g=1&pt_uistyle=35&
&p=9B9303440358DDF85AB6EBB1DACFAC7B&pt_rsa=0&ptlang=2052&low_login_enable=0&u1=http://connect.qq.com&from_ui=1&fp=loginerroralert&device=2&aid=716027609&pt_3rd_aid=100689805&ptredirect=1&h=1&g=1&pt_uistyle=35&
hXXps://ssl.ptlogin2.qq.com/pt_open_login?openlogin_data=which=ConfirmPage&refer_cgi=m_authorize&response_type=token&client_id=100689805&state=&display=mobile&openapi=%23&switch=1&src=1&sdkv=1.7&sdkp=a&tid=1403309181&pf=openmobile_android&need_pay=1&browser=0&browser_error=&serial=&token_key=&redirect_uri=auth%3A%2F%2Ftauth.qq.com%2F&sign=&time=7&status_version=10&status_os=2.3.4&status_machine=GT-I9100&page_type=1&has_auth=0&update_auth=0&auth_time=1403309114279&skey_token=
hXXps://ssl.ptlogin2.qq.com/pt_open_login?openlogin_data=which=ConfirmPage&refer_cgi=m_authorize&response_type=token&client_id=100689805&state=&display=mobile&openapi=%23&switch=1&src=1&sdkv=1.7&sdkp=a&tid=1403309181&pf=openmobile_android&need_pay=1&browser=0&browser_error=&serial=&token_key=&redirect_uri=auth%3A%2F%2Ftauth.qq.com%2F&sign=&time=7&status_version=10&status_os=2.3.4&status_machine=GT-I9100&page_type=1&has_auth=0&update_auth=0&auth_time=1403309114279&skey_token=
Referer: hXXp://qzs.qq.com/open/connect/widget/mobile/login/proxy.htm?
Referer: hXXp://qzs.qq.com/open/connect/widget/mobile/login/proxy.htm?
X-Requested-With: com.tencent.peng
X-Requested-With: com.tencent.peng
redirect_uri_key=
redirect_uri_key=
hXXp://cgi.connect.qq.com/report/mstat/report?data=[{"ky":"AH46I8G5IHWE","ui":"{ui}","et":1000,"ts":1427777715,"ei":"LoginPageViews","du":1,"kv":{"Platform":"pc","Appid":"100689805","UIN":0,"Entrance":"PC","Time":4929,"SDK":"pc,2.5","Ext1":"nologin"}}]
hXXp://cgi.connect.qq.com/report/mstat/report?data=[{"ky":"AH46I8G5IHWE","ui":"{ui}","et":1000,"ts":1427777715,"ei":"LoginPageViews","du":1,"kv":{"Platform":"pc","Appid":"100689805","UIN":0,"Entrance":"PC","Time":4929,"SDK":"pc,2.5","Ext1":"nologin"}}]
hXXps://openmobile.qq.com/oauth2.0/m_get_redirect_url?keystr=
hXXps://openmobile.qq.com/oauth2.0/m_get_redirect_url?keystr=
101.226.129.156
101.226.129.156
ÿffffff-ca54-2835-3955-ea3326c7be23
ÿffffff-ca54-2835-3955-ea3326c7be23
1.0.2.0
1.0.2.0
2.3.4
2.3.4
hXXp://fight.pet.qq.com/cgi-bin/petpk?cmd=award&op=1&type=0
hXXp://fight.pet.qq.com/cgi-bin/petpk?cmd=award&op=1&type=0
ContinueLogin
ContinueLogin
hXXp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=&appid=7000201¶m=u1%3Dhttp%253A%2F%2Fmeigui.qq.com%2F&s_url=http%3A%2F%2Fmeigui.qq.com%2F&mibao_css=&low_login=0&daid=49&style=11&authParamUrl=&needVip=1&ptui_version=10114
hXXp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=&appid=7000201¶m=u1%3Dhttp%253A%2F%2Fmeigui.qq.com%2F&s_url=http%3A%2F%2Fmeigui.qq.com%2F&mibao_css=&low_login=0&daid=49&style=11&authParamUrl=&needVip=1&ptui_version=10114
&u1=http://meigui.qq.com/&r=0.
&u1=http://meigui.qq.com/&r=0.
hXXps://ssl.captcha.qq.com/getimage?&aid=7000201&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?&aid=7000201&cap_cd=
&aid=7000201&u1=http://meigui.qq.com/&h=1&ptredirect=1&ptlang=2052&daid=49&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
&aid=7000201&u1=http://meigui.qq.com/&h=1&ptredirect=1&ptlang=2052&daid=49&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
hXXp://cgi.meigui.qq.com/cgi-bin/rosary_activity_oper?gprand=0.
hXXp://cgi.meigui.qq.com/cgi-bin/rosary_activity_oper?gprand=0.
request=2&cmd=15&cgiVersion=36&paytype=1&benew0908=1
request=2&cmd=15&cgiVersion=36&paytype=1&benew0908=1
p_skey
p_skey
hXXp://fcg.3366.com/fcg-bin/growinfo/mgp_growinfo_signin?&_r=
hXXp://fcg.3366.com/fcg-bin/growinfo/mgp_growinfo_signin?&_r=
hXXp://appstore.qzone.qq.com/cgi-bin/comm/appstore_qq_icon?uin=
hXXp://appstore.qzone.qq.com/cgi-bin/comm/appstore_qq_icon?uin=
hXXp://appact.qzone.qq.com/appstore_activity_appinner_fusionapi?uin=
hXXp://appact.qzone.qq.com/appstore_activity_appinner_fusionapi?uin=
hXXp://appact.qzone.qq.com/appstore_activity_dailysign?uin=
hXXp://appact.qzone.qq.com/appstore_activity_dailysign?uin=
data.gold['5'].flag
data.gold['5'].flag
data.gold['5'].reward_name
data.gold['5'].reward_name
hXXps://ssl.captcha.qq.com/getimage?aid=1600000110&r=0.
hXXps://ssl.captcha.qq.com/getimage?aid=1600000110&r=0.
data.gold['5'].act_id
data.gold['5'].act_id
data.gold['5'].gift_id
data.gold['5'].gift_id
data.reward_detail
data.reward_detail
data.gold['10'].flag
data.gold['10'].flag
data.gold['10'].reward_name
data.gold['10'].reward_name
data.gold['10'].act_id
data.gold['10'].act_id
data.gold['10'].gift_id
data.gold['10'].gift_id
data.gold['15'].flag
data.gold['15'].flag
data.gold['15'].reward_name
data.gold['15'].reward_name
data.gold['15'].act_id
data.gold['15'].act_id
data.gold['15'].gift_id
data.gold['15'].gift_id
data.gold['20'].flag
data.gold['20'].flag
data.gold['20'].reward_name
data.gold['20'].reward_name
data.gold['20'].act_id
data.gold['20'].act_id
data.gold['20'].gift_id
data.gold['20'].gift_id
hXXp://appact.qzone.qq.com/appstore_activity_new_userinfo?uin=
hXXp://appact.qzone.qq.com/appstore_activity_new_userinfo?uin=
hXXp://appact.qzone.qq.com/appstore_activity_daily_lottery?uin=
hXXp://appact.qzone.qq.com/appstore_activity_daily_lottery?uin=
&canvastype=&from=appstore.myInfoBoxBtn&uin=
&canvastype=&from=appstore.myInfoBoxBtn&uin=
&pfid=2&qz_ver=8&appcanvas=0&qz_style=31¶ms=dailycoupon&entertime=
&pfid=2&qz_ver=8&appcanvas=0&qz_style=31¶ms=dailycoupon&entertime=
qzreferrer=http://appstore.qzone.qq.com/cgi-bin/qzapps/qz_appstore_home_v4?uin=
qzreferrer=http://appstore.qzone.qq.com/cgi-bin/qzapps/qz_appstore_home_v4?uin=
data.name
data.name
&low_login=1&uin=
&low_login=1&uin=
hXXp://pay.video.qq.com/fcgi-bin/sign?callback=jQuery111006800204519842937_
hXXp://pay.video.qq.com/fcgi-bin/sign?callback=jQuery111006800204519842937_
result.msg
result.msg
hXXp://activity.qzone.qq.com/cgi-bin/v2/fcg_accept_act_prize?g_tk=
hXXp://activity.qzone.qq.com/cgi-bin/v2/fcg_accept_act_prize?g_tk=
%y-%m-%d
%y-%m-%d
&remark=我就是æÂ¥ç¾到的
&remark=我就是æÂ¥ç¾到的
hXXp://c.pc.qq.com/fcgi-bin/signin?callback=jsonp
hXXp://c.pc.qq.com/fcgi-bin/signin?callback=jsonp
&data={"req_header":{"cmd":17004,"appid":30013,"version":2,"major_version":2},"req_body":{"ReqMsg_body":{"weiyun.WeiyunDailySignInMsgReq_body":{}}}}&callback=jsonp2
&data={"req_header":{"cmd":17004,"appid":30013,"version":2,"major_version":2},"req_body":{"ReqMsg_body":{"weiyun.WeiyunDailySignInMsgReq_body":{}}}}&callback=jsonp2
hXXp://web2.cgi.weiyun.com/weiyun_activity.fcg?cmd =17004&g_tk=
hXXp://web2.cgi.weiyun.com/weiyun_activity.fcg?cmd =17004&g_tk=
rsp_header.retcode
rsp_header.retcode
hXXp://account.book.qq.com/usercenter/index.html
hXXp://account.book.qq.com/usercenter/index.html
hXXp://account.book.qq.com
hXXp://account.book.qq.com
X-Requested-With: XMLHttpRequest
X-Requested-With: XMLHttpRequest
Referer: hXXp://account.book.qq.com/usercenter/index.html
Referer: hXXp://account.book.qq.com/usercenter/index.html
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
hXXp://account.book.qq.com/usercenter/signin.html
hXXp://account.book.qq.com/usercenter/signin.html
hXXp://cgi.im.qq.com/cgi-bin/cgi_svrtime
hXXp://cgi.im.qq.com/cgi-bin/cgi_svrtime
hXXp://checkin.qq.com/json.php?mod=home&act=getcalendar&month=
hXXp://checkin.qq.com/json.php?mod=home&act=getcalendar&month=
].create_time
].create_time
hXXp://snsapp.qzone.qq.com/cgi-bin/signin/checkin_cgi_read?version=1&more_info_length=10&is_need_rank=1&plattype=1&r=0.
hXXp://snsapp.qzone.qq.com/cgi-bin/signin/checkin_cgi_read?version=1&more_info_length=10&is_need_rank=1&plattype=1&r=0.
data.seal_info.seal_info['1'][0].post_proxy
data.seal_info.seal_info['1'][0].post_proxy
data.seal_info.seal_info['1'][0].id
data.seal_info.seal_info['1'][0].id
hXXp://login.52dfg.com/xinxi/shuoshuo/getss.php?type=
hXXp://login.52dfg.com/xinxi/shuoshuo/getss.php?type=
hXXp://snsapp.qzone.qq.com/cgi-bin/signin/checkin_cgi_publish?g_tk=
hXXp://snsapp.qzone.qq.com/cgi-bin/signin/checkin_cgi_publish?g_tk=
qzreferrer=http://ctc.qzs.qq.com/qzone/app/checkin_v4/html/checkin.html#id=0&groupId=0&nofeeds=0&ref=checkin_button&to=ICONVIEW&plattype=1&hostuin=
qzreferrer=http://ctc.qzs.qq.com/qzone/app/checkin_v4/html/checkin.html#id=0&groupId=0&nofeeds=0&ref=checkin_button&to=ICONVIEW&plattype=1&hostuin=
Referer: hXXp://ctc.qzs.qq.com/qzone/app/checkin_v4/html/checkin.html
Referer: hXXp://ctc.qzs.qq.com/qzone/app/checkin_v4/html/checkin.html
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
hXXp://social.minigame.qq.com/cgi-bin/social/mission_operate?cmd=3&missionid=3&DomainID=207&g_tk=
hXXp://social.minigame.qq.com/cgi-bin/social/mission_operate?cmd=3&missionid=3&DomainID=207&g_tk=
hXXp://iyouxi.vip.qq.com/ams3.0.php?g_tk=
hXXp://iyouxi.vip.qq.com/ams3.0.php?g_tk=
Referer: hXXp://youxi.vip.qq.com/m/wallet/activeday/index.html?_wv=3&pvsrc=101
Referer: hXXp://youxi.vip.qq.com/m/wallet/activeday/index.html?_wv=3&pvsrc=101
User-Agent: Mozilla/5.0 (Linux; U; Android 2.3.4; zh-cn; Lan998 Build/GRJ22) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1 V1_AND_SQ_5.2.1_183_YYB_D QQ/5.2.1.2305 NetType/WIFI
User-Agent: Mozilla/5.0 (Linux; U; Android 2.3.4; zh-cn; Lan998 Build/GRJ22) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1 V1_AND_SQ_5.2.1_183_YYB_D QQ/5.2.1.2305 NetType/WIFI
hXXp://3gimg.qq.com/mig-web/2014/market/qbtequan/js/app/sidebar.js?20140211
hXXp://3gimg.qq.com/mig-web/2014/market/qbtequan/js/app/sidebar.js?20140211
giftPostData.maid = '
giftPostData.maid = '
User-Agent:Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; QQBrowser/8.0.3345.400)
User-Agent:Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; QQBrowser/8.0.3345.400)
hXXp://tq.qq.com/newapi/signon/signon.s
hXXp://tq.qq.com/newapi/signon/signon.s
'].count
'].count
userSign.monthSigns['
userSign.monthSigns['
hXXp://share.music.qq.com/fcgi-bin/dmrp_activity/fcg_feedback_send_lottery.fcg?activeid=110&rnd=
hXXp://share.music.qq.com/fcgi-bin/dmrp_activity/fcg_feedback_send_lottery.fcg?activeid=110&rnd=
data.alreadysend
data.alreadysend
hXXp://92wg.vipsinaapp.com/getword.php?softname=QS
hXXp://92wg.vipsinaapp.com/getword.php?softname=QS
hXXp://ncgi.video.qq.com/tvideo/fcgi-bin/autolot?otype=json&g_tk=
hXXp://ncgi.video.qq.com/tvideo/fcgi-bin/autolot?otype=json&g_tk=
skey
skey
&skey=
&skey=
.html&gid=1&gv=
.html&gid=1&gv=
&appid=http://film.qq.com/topic/2014/wsdym
&appid=http://film.qq.com/topic/2014/wsdym
.html&t=2&pageid=
.html&t=2&pageid=
qzreferrer=http://film.qq.com/topic/2014/wsdym
qzreferrer=http://film.qq.com/topic/2014/wsdym
.html&uin=
.html&uin=
.html&t=3&pageid=
.html&t=3&pageid=
result.code
result.code
data.level
data.level
data.num
data.num
hXXps://ssl.captcha.qq.com/getimage?aid=3000501&rnd=
hXXps://ssl.captcha.qq.com/getimage?aid=3000501&rnd=
hXXp://qzs.qq.com/qzone/mall/app/vip_reward/index.html
hXXp://qzs.qq.com/qzone/mall/app/vip_reward/index.html
hXXp://activity.qzone.qq.com/fcg-bin/fcg_qzact_count?g_tk=
hXXp://activity.qzone.qq.com/fcg-bin/fcg_qzact_count?g_tk=
hXXp://activity.qzone.qq.com/fcg-bin/fcg_qzact_lottery?g_tk=
hXXp://activity.qzone.qq.com/fcg-bin/fcg_qzact_lottery?g_tk=
&qzreferrer=http://qzs.qq.com/qzone/qzact/act/hkhd/index.html
&qzreferrer=http://qzs.qq.com/qzone/qzact/act/hkhd/index.html
data[0].name
data[0].name
data[0].count
data[0].count
hXXp://iyouxi.vip.qq.com/ams3.0.php?_c=page&actid=
hXXp://iyouxi.vip.qq.com/ams3.0.php?_c=page&actid=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=2000013&g_tk=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=2000013&g_tk=
@TASK.RET
@TASK.RET
TASK.RESULT.level
TASK.RESULT.level
hXXp://king.qq.com/lb.html
hXXp://king.qq.com/lb.html
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=3000013&g_tk=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=3000013&g_tk=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=5000013&g_tk=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=5000013&g_tk=
hXXp://vip.qq.com/clubact/2015/svip8/index.html
hXXp://vip.qq.com/clubact/2015/svip8/index.html
hXXp://92wg.vipsinaapp.com/2.php
hXXp://92wg.vipsinaapp.com/2.php
\QQ.ini
\QQ.ini
@MSScriptControl.ScriptControl
@MSScriptControl.ScriptControl
while (z aD
while (z aD
t = aC.substring(z, z aD) "\n";
t = aC.substring(z, z aD) "\n";
return t aC.substring(z, aC.length)
return t aC.substring(z, aC.length)
return "0" t.toString(16)
return "0" t.toString(16)
return t.toString(16)
return t.toString(16)
if (aG
if (aG
var aC = aD.length - 1;
var aC = aD.length - 1;
var aE = aD.charCodeAt(aC--);
var aE = aD.charCodeAt(aC--);
z.nextBytes(t)
z.nextBytes(t)
this.dmp1 = null;
this.dmp1 = null;
this.dmq1 = null;
this.dmq1 = null;
this.coeff = null
this.coeff = null
if (z != null && t != null && z.length > 0 && t.length > 0) {
if (z != null && t != null && z.length > 0 && t.length > 0) {
uv_alert("Invalid RSA public key")
uv_alert("Invalid RSA public key")
return t.modPowInt(this.e, this.n)
return t.modPowInt(this.e, this.n)
var t = ah(aC, (this.n.bitLength() 7) >> 3);
var t = ah(aC, (this.n.bitLength() 7) >> 3);
var aD = this.doPublic(t);
var aD = this.doPublic(t);
var z = aD.toString(16);
var z = aD.toString(16);
if ((z.length & 1) == 0) {
if ((z.length & 1) == 0) {
N.prototype.doPublic = Y;
N.prototype.doPublic = Y;
N.prototype.setPublic = q;
N.prototype.setPublic = q;
N.prototype.encrypt = r;
N.prototype.encrypt = r;
this.fromNumber(z, t, aC)
this.fromNumber(z, t, aC)
this.fromString(z, 256)
this.fromString(z, 256)
this.fromString(z, t)
this.fromString(z, t)
aG = Math.floor(aC / 67108864);
aG = Math.floor(aC / 67108864);
au.prototype.am = aA;
au.prototype.am = aA;
au.prototype.DB = ay;
au.prototype.DB = ay;
au.prototype.DM = ((1
au.prototype.DM = ((1
au.prototype.DV = (1
au.prototype.DV = (1
au.prototype.FV = Math.pow(2, ac);
au.prototype.FV = Math.pow(2, ac);
au.prototype.F1 = ac - ay;
au.prototype.F1 = ac - ay;
au.prototype.F2 = 2 * ay - ac;
au.prototype.F2 = 2 * ay - ac;
ar = "0".charCodeAt(0);
ar = "0".charCodeAt(0);
ar = "a".charCodeAt(0);
ar = "a".charCodeAt(0);
ar = "A".charCodeAt(0);
ar = "A".charCodeAt(0);
return ag.charAt(t)
return ag.charAt(t)
var aC = ai[z.charCodeAt(t)];
var aC = ai[z.charCodeAt(t)];
z.fromInt(t);
z.fromInt(t);
this.fromRadix(aG, z);
this.fromRadix(aG, z);
var aF = aG.length,
var aF = aG.length,
if (aG.charAt(aF) == "-") {
if (aG.charAt(aF) == "-") {
if (aE aD > this.DB) {
if (aE aD > this.DB) {
this[this.t - 1] |= (t & ((1
this[this.t - 1] |= (t & ((1
this[this.t ] = (t >> (this.DB - aE))
this[this.t ] = (t >> (this.DB - aE))
if (aE >= this.DB) {
if (aE >= this.DB) {
aE -= this.DB
aE -= this.DB
this[this.t - 1] |= ((1
this[this.t - 1] |= ((1
this.clamp();
this.clamp();
au.ZERO.subTo(this, this)
au.ZERO.subTo(this, this)
var t = this.s & this.DM;
var t = this.s & this.DM;
return "-" this.negate().toString(z)
return "-" this.negate().toString(z)
return this.toRadix(z)
return this.toRadix(z)
var aG = this.DB - (aD * this.DB) % aC;
var aG = this.DB - (aD * this.DB) % aC;
if (aG > aG) > 0) {
if (aG > aG) > 0) {
aH |= this[--aD] >> (aG = this.DB - aC)
aH |= this[--aD] >> (aG = this.DB - aC)
aG = this.DB; --aD
aG = this.DB; --aD
au.ZERO.subTo(this, t);
au.ZERO.subTo(this, t);
return (this.s
return (this.s
return this.DB * (this.t - 1) l(this[this.t - 1] ^ (this.s & this.DM))
return this.DB * (this.t - 1) l(this[this.t - 1] ^ (this.s & this.DM))
z.t = Math.max(this.t - aC, 0);
z.t = Math.max(this.t - aC, 0);
var z = aH % this.DB;
var z = aH % this.DB;
var t = this.DB - z;
var t = this.DB - z;
var aE = Math.floor(aH / this.DB),
var aE = Math.floor(aH / this.DB),
aG = (this.s
aG = (this.s
aD.clamp()
aD.clamp()
var aE = Math.floor(aG / this.DB);
var aE = Math.floor(aG / this.DB);
var z = aG % this.DB;
var z = aG % this.DB;
t = Math.min(z.t, this.t);
t = Math.min(z.t, this.t);
aD[aC ] = aE & this.DM;
aD[aC ] = aE & this.DM;
aE >>= this.DB
aE >>= this.DB
aD[aC ] = aE & this.DM;
aD[aC ] = aE & this.DM;
aE >>= this.DB
aE >>= this.DB
aD[aC ] = this.DV aE
aD[aC ] = this.DV aE
var t = this.abs(),
var t = this.abs(),
aE = z.abs();
aE = z.abs();
aD[aC t.t] = t.am(0, aE[aC], aD, aC, 0, t.t)
aD[aC t.t] = t.am(0, aE[aC], aD, aC, 0, t.t)
aD.clamp();
aD.clamp();
au.ZERO.subTo(aD, aD)
au.ZERO.subTo(aD, aD)
var t = this.abs();
var t = this.abs();
var aD = t.am(z, t[z], aC, 2 * z, 0, 1);
var aD = t.am(z, t[z], aC, 2 * z, 0, 1);
if ((aC[z t.t] = t.am(z 1, 2 * t[z], aC, 2 * z 1, aD, t.t - z - 1)) >= t.DV) {
if ((aC[z t.t] = t.am(z 1, 2 * t[z], aC, 2 * z 1, aD, t.t - z - 1)) >= t.DV) {
aC[z t.t] -= t.DV;
aC[z t.t] -= t.DV;
aC[aC.t - 1] = t.am(z, t[z], aC, 2 * z, 0, 1)
aC[aC.t - 1] = t.am(z, t[z], aC, 2 * z, 0, 1)
aC.clamp()
aC.clamp()
var aQ = aK.abs();
var aQ = aK.abs();
var aI = this.abs();
var aI = this.abs();
aH.fromInt(0)
aH.fromInt(0)
this.copyTo(aG)
this.copyTo(aG)
var aP = this.DB - l(aQ[aQ.t - 1]);
var aP = this.DB - l(aQ[aQ.t - 1]);
aQ.lShiftTo(aP, aE);
aQ.lShiftTo(aP, aE);
aI.lShiftTo(aP, aG)
aI.lShiftTo(aP, aG)
aQ.copyTo(aE);
aQ.copyTo(aE);
aI.copyTo(aG)
aI.copyTo(aG)
var aT = this.FV / aL,
var aT = this.FV / aL,
aE.dlShiftTo(aN, aF);
aE.dlShiftTo(aN, aF);
if (aG.compareTo(aF) >= 0) {
if (aG.compareTo(aF) >= 0) {
aG.subTo(aF, aG)
aG.subTo(aF, aG)
au.ONE.dlShiftTo(aM, aF);
au.ONE.dlShiftTo(aM, aF);
aF.subTo(aE, aE);
aF.subTo(aE, aE);
var aD = (aG[--aO] == aC) ? this.DM: Math.floor(aG[aO] * aT (aG[aO - 1] aR) * aS);
var aD = (aG[--aO] == aC) ? this.DM: Math.floor(aG[aO] * aT (aG[aO - 1] aR) * aS);
if ((aG[aO] = aE.am(0, aD, aG, aN, 0, aM))
if ((aG[aO] = aE.am(0, aD, aG, aN, 0, aM))
aE.dlShiftTo(aN, aF);
aE.dlShiftTo(aN, aF);
aG.subTo(aF, aG);
aG.subTo(aF, aG);
aG.subTo(aF, aG)
aG.subTo(aF, aG)
aG.drShiftTo(aM, aH);
aG.drShiftTo(aM, aH);
au.ZERO.subTo(aH, aH)
au.ZERO.subTo(aH, aH)
aG.clamp();
aG.clamp();
aG.rShiftTo(aP, aG)
aG.rShiftTo(aP, aG)
au.ZERO.subTo(aG, aG)
au.ZERO.subTo(aG, aG)
this.abs().divRemTo(t, null, z);
this.abs().divRemTo(t, null, z);
if (this.s 0) {
if (this.s 0) {
t.subTo(z, z)
t.subTo(z, z)
if (t.s = 0) {
if (t.s = 0) {
return t.mod(this.m)
return t.mod(this.m)
t.divRemTo(this.m, null, t)
t.divRemTo(this.m, null, t)
t.multiplyTo(aC, z);
t.multiplyTo(aC, z);
this.reduce(z)
this.reduce(z)
t.squareTo(z);
t.squareTo(z);
M.prototype.convert = X;
M.prototype.convert = X;
M.prototype.revert = am;
M.prototype.revert = am;
M.prototype.reduce = L;
M.prototype.reduce = L;
M.prototype.mulTo = J;
M.prototype.mulTo = J;
M.prototype.sqrTo = aw;
M.prototype.sqrTo = aw;
z = (z * (2 - t * z % this.DV)) % this.DV;
z = (z * (2 - t * z % this.DV)) % this.DV;
return (z > 0) ? this.DV - z: -z
return (z > 0) ? this.DV - z: -z
this.mp = t.invDigit();
this.mp = t.invDigit();
this.mpl = this.mp & 32767;
this.mpl = this.mp & 32767;
this.mph = this.mp >> 15;
this.mph = this.mp >> 15;
this.um = (1
this.um = (1
this.mt2 = 2 * t.t
this.mt2 = 2 * t.t
t.abs().dlShiftTo(this.m.t, z);
t.abs().dlShiftTo(this.m.t, z);
z.divRemTo(this.m, null, z);
z.divRemTo(this.m, null, z);
if (t.s 0) {
if (t.s 0) {
this.m.subTo(z, z)
this.m.subTo(z, z)
t.copyTo(z);
t.copyTo(z);
this.reduce(z);
this.reduce(z);
while (t.t
while (t.t
var aD = (z * this.mpl (((z * this.mph (t[aC] >> 15) * this.mpl) & this.um)
var aD = (z * this.mpl (((z * this.mph (t[aC] >> 15) * this.mpl) & this.um)
t[z] = this.m.am(0, aD, t, aC, 0, this.m.t);
t[z] = this.m.am(0, aD, t, aC, 0, this.m.t);
while (t[z] >= t.DV) {
while (t[z] >= t.DV) {
t[z] -= t.DV;
t[z] -= t.DV;
t.clamp();
t.clamp();
t.drShiftTo(this.m.t, t);
t.drShiftTo(this.m.t, t);
if (t.compareTo(this.m) >= 0) {
if (t.compareTo(this.m) >= 0) {
t.subTo(this.m, t)
t.subTo(this.m, t)
g.prototype.convert = al;
g.prototype.convert = al;
g.prototype.revert = av;
g.prototype.revert = av;
g.prototype.reduce = R;
g.prototype.reduce = R;
g.prototype.mulTo = B;
g.prototype.mulTo = B;
g.prototype.sqrTo = ao;
g.prototype.sqrTo = ao;
return au.ONE
return au.ONE
aF = aI.convert(this),
aF = aI.convert(this),
aF.copyTo(aG);
aF.copyTo(aG);
aI.sqrTo(aG, aC);
aI.sqrTo(aG, aC);
aI.mulTo(aC, aF, aG)
aI.mulTo(aC, aF, aG)
return aI.revert(aG)
return aI.revert(aG)
if (aC
if (aC
return this.exp(aC, aD)
return this.exp(aC, aD)
au.prototype.copyTo = aa;
au.prototype.copyTo = aa;
au.prototype.fromInt = p;
au.prototype.fromInt = p;
au.prototype.fromString = y;
au.prototype.fromString = y;
au.prototype.clamp = Q;
au.prototype.clamp = Q;
au.prototype.dlShiftTo = at;
au.prototype.dlShiftTo = at;
au.prototype.drShiftTo = Z;
au.prototype.drShiftTo = Z;
au.prototype.lShiftTo = v;
au.prototype.lShiftTo = v;
au.prototype.rShiftTo = n;
au.prototype.rShiftTo = n;
au.prototype.subTo = ad;
au.prototype.subTo = ad;
au.prototype.multiplyTo = F;
au.prototype.multiplyTo = F;
au.prototype.squareTo = S;
au.prototype.squareTo = S;
au.prototype.divRemTo = G;
au.prototype.divRemTo = G;
au.prototype.invDigit = D;
au.prototype.invDigit = D;
au.prototype.isEven = k;
au.prototype.isEven = k;
au.prototype.exp = A;
au.prototype.exp = A;
au.prototype.toString = s;
au.prototype.toString = s;
au.prototype.negate = T;
au.prototype.negate = T;
au.prototype.abs = an;
au.prototype.abs = an;
au.prototype.compareTo = I;
au.prototype.compareTo = I;
au.prototype.bitLength = w;
au.prototype.bitLength = w;
au.prototype.mod = P;
au.prototype.mod = P;
au.prototype.modPowInt = ap;
au.prototype.modPowInt = ap;
au.ZERO = c(0);
au.ZERO = c(0);
au.ONE = c(1);
au.ONE = c(1);
d(new Date().getTime())
d(new Date().getTime())
/*if(navigator.appName=="Netscape"&&navigator.appVersion
/*if(navigator.appName=="Netscape"&&navigator.appVersion
K = Math.floor(65536 * Math.random());
K = Math.floor(65536 * Math.random());
o.init(W);
o.init(W);
for (ae = 0; ae
for (ae = 0; ae
return o.next()
return o.next()
for (t = 0; t
for (t = 0; t
af.prototype.nextBytes = ax;
af.prototype.nextBytes = ax;
z = (z this.S[aD] aE[aD % aE.length]) & 255;
z = (z this.S[aD] aE[aD % aE.length]) & 255;
m.prototype.init = f;
m.prototype.init = f;
m.prototype.next = a;
m.prototype.next = a;
t.setPublic(aC, z);
t.setPublic(aC, z);
return t.encrypt(aD)
return t.encrypt(aD)
return Math.round(Math.random() * 4294967295)
return Math.round(Math.random() * 4294967295)
for (var B = 0; B
for (var B = 0; B
var C = Number(D[B]).toString(16);
var C = Number(D[B]).toString(16);
if (C.length == 1) {
if (C.length == 1) {
for (var A = 0; A
for (var A = 0; A
C = String.fromCharCode(parseInt(B.substr(A, 2), 16))
C = String.fromCharCode(parseInt(B.substr(A, 2), 16))
for (var A = 0; A
for (var A = 0; A
B[A] = C.charCodeAt(A)
B[A] = C.charCodeAt(A)
var A = C.length;
var A = C.length;
var A = E.length;
var A = E.length;
for (var C = 0; C
for (var C = 0; C
var A = u.length;
var A = u.length;
for (var B = 0; B
for (var B = 0; B
C[B] = E.charCodeAt(B) & 255
C[B] = E.charCodeAt(B) & 255
for (var B = 0; B
for (var B = 0; B
C[A ] = parseInt(E.substr(B, 2), 16)
C[A ] = parseInt(E.substr(B, 2), 16)
for (var B = 0; B
for (var B = 0; B
A = String.fromCharCode(C[B])
A = String.fromCharCode(C[B])
return d.encode(A)
return d.encode(A)
initkey: function(A, B) {
initkey: function(A, B) {
d.PADCHAR = "=";
d.PADCHAR = "=";
d.ALPHA = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 /";
d.ALPHA = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 /";
d.getbyte = function(C, B) {
d.getbyte = function(C, B) {
var A = C.charCodeAt(B);
var A = C.charCodeAt(B);
d.encode = function(E) {
d.encode = function(E) {
if (arguments.length != 1) {
if (arguments.length != 1) {
var B = d.PADCHAR;
var B = d.PADCHAR;
var G = d.ALPHA;
var G = d.ALPHA;
var F = d.getbyte;
var F = d.getbyte;
var C = E.length - E.length % 3;
var C = E.length - E.length % 3;
if (E.length == 0) {
if (E.length == 0) {
A.push(G.charAt(H >> 18));
A.push(G.charAt(H >> 18));
A.push(G.charAt((H >> 12) & 63));
A.push(G.charAt((H >> 12) & 63));
A.push(G.charAt((H >> 6) & 63));
A.push(G.charAt((H >> 6) & 63));
A.push(G.charAt(H & 63))
A.push(G.charAt(H & 63))
switch (E.length - C) {
switch (E.length - C) {
A.push(G.charAt(H >> 18) G.charAt((H >> 12) & 63) B B);
A.push(G.charAt(H >> 18) G.charAt((H >> 12) & 63) B B);
A.push(G.charAt(H >> 18) G.charAt((H >> 12) & 63) G.charAt((H >> 6) & 63) B);
A.push(G.charAt(H >> 18) G.charAt((H >> 12) & 63) G.charAt((H >> 6) & 63) B);
return A.join("")
return A.join("")
return binl2hex(core_md5(str2binl(s), s.length * chrsz))
return binl2hex(core_md5(str2binl(s), s.length * chrsz))
return binl2str(core_md5(str2binl(s), s.length * chrsz))
return binl2str(core_md5(str2binl(s), s.length * chrsz))
function hex_hmac_md5(key, data) {
function hex_hmac_md5(key, data) {
return binl2hex(core_hmac_md5(key, data))
return binl2hex(core_hmac_md5(key, data))
function b64_hmac_md5(key, data) {
function b64_hmac_md5(key, data) {
return binl2b64(core_hmac_md5(key, data))
return binl2b64(core_hmac_md5(key, data))
function str_hmac_md5(key, data) {
function str_hmac_md5(key, data) {
return binl2str(core_hmac_md5(key, data))
return binl2str(core_hmac_md5(key, data))
for (var i = 0; i
for (var i = 0; i
function core_hmac_md5(key, data) {
function core_hmac_md5(key, data) {
var bkey = str2binl(key);
var bkey = str2binl(key);
if (bkey.length > 16) {
if (bkey.length > 16) {
bkey = core_md5(bkey, key.length * chrsz)
bkey = core_md5(bkey, key.length * chrsz)
ipad[i] = bkey[i] ^ 909522486;
ipad[i] = bkey[i] ^ 909522486;
opad[i] = bkey[i] ^ 1549556828
opad[i] = bkey[i] ^ 1549556828
var hash = core_md5(ipad.concat(str2binl(data)), 512 data.length * chrsz);
var hash = core_md5(ipad.concat(str2binl(data)), 512 data.length * chrsz);
return core_md5(opad.concat(hash), 512 128)
return core_md5(opad.concat(hash), 512 128)
for (var i = 0; i
for (var i = 0; i
bin[i >> 5] |= (str.charCodeAt(i / chrsz) & mask)
bin[i >> 5] |= (str.charCodeAt(i / chrsz) & mask)
for (var i = 0; i
for (var i = 0; i
str = String.fromCharCode((bin[i >> 5] >>> (i % 32)) & mask)
str = String.fromCharCode((bin[i >> 5] >>> (i % 32)) & mask)
for (var i = 0; i
for (var i = 0; i
str = hex_tab.charAt((binarray[i >> 2] >> ((i % 4) * 8 4)) & 15) hex_tab.charAt((binarray[i >> 2] >> ((i % 4) * 8)) & 15)
str = hex_tab.charAt((binarray[i >> 2] >> ((i % 4) * 8 4)) & 15) hex_tab.charAt((binarray[i >> 2] >> ((i % 4) * 8)) & 15)
for (var i = 0; i
for (var i = 0; i
if (i * 8 j * 6 > binarray.length * 32) {
if (i * 8 j * 6 > binarray.length * 32) {
str = tab.charAt((triplet >> 6 * (3 - j)) & 63)
str = tab.charAt((triplet >> 6 * (3 - j)) & 63)
for (var i = 0; i
for (var i = 0; i
arr.push("\\x" str.substr(i, 2))
arr.push("\\x" str.substr(i, 2))
arr = arr.join("");
arr = arr.join("");
if (Math.random() > (probability || 1)) {
if (Math.random() > (probability || 1)) {
var url = location.protocol "//ui.ptlogin2.qq.com/cgi-bin/report?id=" mid;
var url = location.protocol "//ui.ptlogin2.qq.com/cgi-bin/report?id=" mid;
var s = document.createElement("img");
var s = document.createElement("img");
s.src = url;
s.src = url;
function getEncryption(password, salt, vcode) {
function getEncryption(password, salt, vcode) {
var md5Pwd = md5(password),
var md5Pwd = md5(password),
rsaH1 = RSA.rsa_encrypt(h1),
rsaH1 = RSA.rsa_encrypt(h1),
rsaH1Len = (rsaH1.length / 2).toString(16),
rsaH1Len = (rsaH1.length / 2).toString(16),
hexVcode = TEA.strToBytes(vcode.toUpperCase()),
hexVcode = TEA.strToBytes(vcode.toUpperCase()),
vcodeLen = "000" vcode.length.toString(16);
vcodeLen = "000" vcode.length.toString(16);
while (rsaH1Len.length
while (rsaH1Len.length
TEA.initkey(s2);
TEA.initkey(s2);
var saltPwd = TEA.enAsBase64(rsaH1Len rsaH1 TEA.strToBytes(salt) vcodeLen hexVcode);
var saltPwd = TEA.enAsBase64(rsaH1Len rsaH1 TEA.strToBytes(salt) vcodeLen hexVcode);
TEA.initkey("");
TEA.initkey("");
return saltPwd.replace(/[\/\ =]/g,
return saltPwd.replace(/[\/\ =]/g,
"/": "-",
"/": "-",
" ": "*",
" ": "*",
"=": "_"
"=": "_"
{pass}
{pass}
getEncryption("{pass}","{salt}","{code}")
getEncryption("{pass}","{salt}","{code}")
1970-01-01 08:00:00
1970-01-01 08:00:00
a.push(b,c,d,e,f,g);
a.push(b,c,d,e,f,g);
a.push(b,c,d,e,f);
a.push(b,c,d,e,f);
HTTP/1.1
HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; qdesk 2.5.1277.202; Windows NT 6.1; WOW64; Trident/6.0; QQBrowser/7.7.28658.400)
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; qdesk 2.5.1277.202; Windows NT 6.1; WOW64; Trident/6.0; QQBrowser/7.7.28658.400)
hXXps://
hXXps://
hXXp://
hXXp://
https
https
return'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g,function(c){
return'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g,function(c){
var r=Math.random()*16|0,v=c=='x'?r:(r&0x3|0x8);
var r=Math.random()*16|0,v=c=='x'?r:(r&0x3|0x8);
return v.toString(16);
return v.toString(16);
}).toUpperCase();
}).toUpperCase();
FB6BD4FB-5175-477D-A66C-121252F39935
FB6BD4FB-5175-477D-A66C-121252F39935
hXXp://api.ruokuai.com/register.xml
hXXp://api.ruokuai.com/register.xml
hXXp://api.ruokuai.com/info.xml
hXXp://api.ruokuai.com/info.xml
hXXp://api.ruokuai.com/recharge.xml
hXXp://api.ruokuai.com/recharge.xml
hXXp://api.ruokuai.com/create.xml
hXXp://api.ruokuai.com/create.xml
hXXp://api.ruokuai.com/reporterror.xml
hXXp://api.ruokuai.com/reporterror.xml
function get__key(o) {
function get__key(o) {
a.push(i);
a.push(i);
//return JSON.stringify(jsonobj);
//return JSON.stringify(jsonobj);
if (Object.prototype.toString.apply(O) === '[object Array]') {
if (Object.prototype.toString.apply(O) === '[object Array]') {
for (var i = 0; i
for (var i = 0; i
S.push(O2String(O[i]));
S.push(O2String(O[i]));
J = '[' S.join(',') ']';
J = '[' S.join(',') ']';
else if (Object.prototype.toString.apply(O) === '[object String]') {
else if (Object.prototype.toString.apply(O) === '[object String]') {
J = '"' O.replace(/"/g,"\\\"").replace(/\r/g,"\\r").replace(/\n/g,"\\n") '"';
J = '"' O.replace(/"/g,"\\\"").replace(/\r/g,"\\r").replace(/\n/g,"\\n") '"';
else if (Object.prototype.toString.apply(O) === '[object Number]') {
else if (Object.prototype.toString.apply(O) === '[object Number]') {
else if (Object.prototype.toString.apply(O) === '[object Date]') {
else if (Object.prototype.toString.apply(O) === '[object Date]') {
J = "new Date(" O.getTime() ")";
J = "new Date(" O.getTime() ")";
else if (Object.prototype.toString.apply(O) === '[object RegExp]' || Object.prototype.toString.apply(O) === '[object Function]') {
else if (Object.prototype.toString.apply(O) === '[object RegExp]' || Object.prototype.toString.apply(O) === '[object Function]') {
J = O.toString();
J = O.toString();
else if (Object.prototype.toString.apply(O) === '[object Object]') {
else if (Object.prototype.toString.apply(O) === '[object Object]') {
t = typeof (O[i]) == 'string' ? '"' O[i].replace(/"/g,"\\\"").replace(/\r/g,"\\r").replace(/\n/g,"\\n") '"' : (typeof (O[i]) === 'object' ? O2String(O[i]) : O[i]);
t = typeof (O[i]) == 'string' ? '"' O[i].replace(/"/g,"\\\"").replace(/\r/g,"\\r").replace(/\n/g,"\\n") '"' : (typeof (O[i]) === 'object' ? O2String(O[i]) : O[i]);
S.push(i ':' t);
S.push(i ':' t);
J = '{' S.join(',') '}';
J = '{' S.join(',') '}';
T@\*.dfg
T@\*.dfg
cmd /c regsvr32 msscript.ocx jscript.dll vbscript.dll /s
cmd /c regsvr32 msscript.ocx jscript.dll vbscript.dll /s
hXXp://92wg.sinaapp.com/softtj.php?act=add&softname=QS
hXXp://92wg.sinaapp.com/softtj.php?act=add&softname=QS
hXXp://92wg.sinaapp.com/getupdata.php?act=getver&wgname=QS
hXXp://92wg.sinaapp.com/getupdata.php?act=getver&wgname=QS
hXXp://92wg.vipsinaapp.com/softtj.php?act=add&softname=QS
hXXp://92wg.vipsinaapp.com/softtj.php?act=add&softname=QS
hXXp://92wg.vipsinaapp.com/getupdata.php?act=getver&wgname=QS
hXXp://92wg.vipsinaapp.com/getupdata.php?act=getver&wgname=QS
hXXp://VVV.52dfg.com/forum-40-1.html?wb11
hXXp://VVV.52dfg.com/forum-40-1.html?wb11
/QQ.ini
/QQ.ini
hXXp://VVV.52dfg.com
hXXp://VVV.52dfg.com
bashengpass
bashengpass
{0:3,1:1,2:3,3:0,4:2}
{0:3,1:1,2:3,3:0,4:2}
hXXp://w666666.sinaapp.com/dfg/gongao.txt
hXXp://w666666.sinaapp.com/dfg/gongao.txt
g@\Error.log
g@\Error.log
%y-%m-%d
%y-%m-%d
%y/%m/%d
%y/%m/%d
hXXp://imgcache.gtimg.cn/ACT/vip_act/act_data/28302.json.js
hXXp://imgcache.gtimg.cn/ACT/vip_act/act_data/28302.json.js
[[0,1,2,3],[4,5,6,7],[8,9,10,11]]
[[0,1,2,3],[4,5,6,7],[8,9,10,11]]
hXXp://login.52dfg.com/online.php
hXXp://login.52dfg.com/online.php
hXXp://dfgpath.sinaapp.com/dfg/gonggao.txt
hXXp://dfgpath.sinaapp.com/dfg/gonggao.txt
hXXp://dfgpath.vipsinaapp.com/dfg/gonggao.txt
hXXp://dfgpath.vipsinaapp.com/dfg/gonggao.txt
].txt
].txt
].url
].url
hXXp://w666666.sinaapp.com/dfg/y.php
hXXp://w666666.sinaapp.com/dfg/y.php
.exew666666.vipsinaapp.com/dfg/y.php
.exew666666.vipsinaapp.com/dfg/y.php
hXXps://w666666.sinaapp.com/dfg/x.php?m=1
hXXps://w666666.sinaapp.com/dfg/x.php?m=1
httphXXps://w666666.vipsinaapp.com/dfg/x.php?m=1
httphXXps://w666666.vipsinaapp.com/dfg/x.php?m=1
hXXps://w666666.sinaapp.com/dfg/x.php?m=3
hXXps://w666666.sinaapp.com/dfg/x.php?m=3
hXXps://w666666.vipsinaapp.com/dfg/x.php?m=3
hXXps://w666666.vipsinaapp.com/dfg/x.php?m=3
\Application Data\Microsoft\Internet Explorer\Quick Launch\*.lnk
\Application Data\Microsoft\Internet Explorer\Quick Launch\*.lnk
http\shell\open\command\Shell.Application
http\shell\open\command\Shell.Application
QQBrowser.exe
QQBrowser.exe
hXXps://login.52dfg.com/kg/gogo.php
hXXps://login.52dfg.com/kg/gogo.php
-02:00:00
-02:00:00
Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko QQBrowser/8.1.3700.400
Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko QQBrowser/8.1.3700.400
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36 SE 2.X MetaSr 1.0
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36 SE 2.X MetaSr 1.0
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.101 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.101 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
*.txt
*.txt
|*.txt
|*.txt
hXXp://92dfg.vipsinaapp.com/ly.php
hXXp://92dfg.vipsinaapp.com/ly.php
hXXp://w666666.sinaapp.com/dfg/qun.txt
hXXp://w666666.sinaapp.com/dfg/qun.txt
hXXp://VVV.sz789.net/reg.aspx
hXXp://VVV.sz789.net/reg.aspx
hXXp://VVV.uudama.com/userReg.html
hXXp://VVV.uudama.com/userReg.html
hXXp://VVV.ruokuai.com/home/register
hXXp://VVV.ruokuai.com/home/register
hXXp://VVV.zhima365.com/userreg.php
hXXp://VVV.zhima365.com/userreg.php
&url=
&url=
VBScript.RegExp
VBScript.RegExp
hXXp://top.baidu.comw *= *(\S )["']
hXXp://top.baidu.comw *= *(\S )["']
hXXp://VVV.baidu.com/s?word=
hXXp://VVV.baidu.com/s?word=
hXXp://VVV.baidu.com/adrc.php
hXXp://VVV.baidu.com/adrc.php
cache.baiducontent.com
cache.baiducontent.com
about:blankwinmm.dll
about:blankwinmm.dll
\UUWiseHelper.dll
\UUWiseHelper.dll
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
SSSSh
SSSSh
ByScreen.JPG
ByScreen.JPG
operator
operator
GetProcessWindowStation
GetProcessWindowStation
E:\work\UUWiseHelper
E:\work\UUWiseHelper
\UUWiseHelper.pdb
\UUWiseHelper.pdb
KERNEL32.dll
KERNEL32.dll
USER32.dll
USER32.dll
GDI32.dll
GDI32.dll
RegCloseKey
RegCloseKey
RegOpenKeyExW
RegOpenKeyExW
ADVAPI32.dll
ADVAPI32.dll
SHELL32.dll
SHELL32.dll
OLEAUT32.dll
OLEAUT32.dll
SHLWAPI.dll
SHLWAPI.dll
urlmon.dll
urlmon.dll
dbghelp.dll
dbghelp.dll
gdiplus.dll
gdiplus.dll
IPHLPAPI.DLL
IPHLPAPI.DLL
WS2_32.dll
WS2_32.dll
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
UUWiseHelper.DLL
UUWiseHelper.DLL
uu_easyRecognizeUrlA
uu_easyRecognizeUrlA
uu_easyRecognizeUrlW
uu_easyRecognizeUrlW
uu_loginW
uu_loginW
uu_recognizeByCodeTypeAndUrlA
uu_recognizeByCodeTypeAndUrlA
uu_recognizeByCodeTypeAndUrlW
uu_recognizeByCodeTypeAndUrlW
zcÃ
zcÃ
"0,01070
"0,01070
8Â8J8R8x8
8Â8J8R8x8
0#0'0-01070;0
0#0'0-01070;0
=*>0>4>8>
=*>0>4>8>
5%6S6
5%6S6
3$3,383\3|3
3$3,383\3|3
\dc.dll
\dc.dll
deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly
deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly
inflate 1.1.3 Copyright 1995-1998 Mark Adler
inflate 1.1.3 Copyright 1995-1998 Mark Adler
MFC42.DLL
MFC42.DLL
MSVCRT.dll
MSVCRT.dll
GdiplusShutdown
GdiplusShutdown
WSOCK32.dll
WSOCK32.dll
MSVCP60.dll
MSVCP60.dll
ReportError_A
ReportError_A
VBYB_ReportError
VBYB_ReportError
VB_ReportError
VB_ReportError
debug.ini
debug.ini
ReportError:%s
ReportError:%s
Error:%s
Error:%s
%s|!|%s
%s|!|%s
\dms.pdb
\dms.pdb
%u%u,
%u%u,
dclog.txt
dclog.txt
config.ini
config.ini
port
port
settimeout:%d
settimeout:%d
[%d]%s
[%d]%s
reg2:%s
reg2:%s
checkok:%s %s
checkok:%s %s
check fail:%s %s %s
check fail:%s %s %s
check:%s %s
check:%s %s
getcjfail:%s %s
getcjfail:%s %s
getcj:%s %s
getcj:%s %s
%s%uout
%s%uout
%s%uin
%s%uin
put img ok:%s
put img ok:%s
put img fail:%s
put img fail:%s
put img:%s %s %d
put img:%s %s %d
get result ok:%s,%s
get result ok:%s,%s
get result fail:%s
get result fail:%s
get result:%s
get result:%s
notifyfail ok:%s
notifyfail ok:%s
%s\%d-%s.png
%s\%d-%s.png
notifyfail fail:%s,%s
notifyfail fail:%s,%s
notifyfail:%s
notifyfail:%s
getimgok:%s,%s
getimgok:%s,%s
getimg:%s
getimg:%s
getinfo fail:%s
getinfo fail:%s
getinfo:%s,%s
getinfo:%s,%s
setresult:%s,%s
setresult:%s,%s
HTTP/1.1 200 OK
HTTP/1.1 200 OK
recv:%d
recv:%d
send:%d
send:%d
GET /ip.txt HTTP/1.1
GET /ip.txt HTTP/1.1
Host: %s
Host: %s
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:6.0.2) Gecko/20100101 Firefox/6.0.2
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:6.0.2) Gecko/20100101 Firefox/6.0.2
select:%d
select:%d
ioctlsocket:%d
ioctlsocket:%d
socket:%d
socket:%d
api.qqchaoren.net
api.qqchaoren.net
14.17.65.24
14.17.65.24
14.17.65.23
14.17.65.23
dama2.qqchaoren.net
dama2.qqchaoren.net
dama1.qqchaoren.net
dama1.qqchaoren.net
connect total:%s %d
connect total:%s %d
:%s %d
:%s %d
connect discard:%s %d
connect discard:%s %d
[d-d-d d:d:d](u)
[d-d-d d:d:d](u)
recv timeout:
recv timeout:
recvfail:%d
recvfail:%d
server close:%d
server close:%d
recv:%d
recv:%d
send:%d
send:%d
sendfail:%d
sendfail:%d
connect timeout:
connect timeout:
connectok:%s %hu
connectok:%s %hu
127.0.0.1
127.0.0.1
1.1.3
1.1.3
\ZMApi.dll
\ZMApi.dll
9^ u%f
9^ u%f
uù u f9k
uù u f9k
Ht.Ht!
Ht.Ht!
tAHt.Ht
tAHt.Ht
uù~DuH
uù~DuH
It.It
It.It
F t.Oj
F t.Oj
hCRTkQ
hCRTkQ
hCRTrW
hCRTrW
hCRTgW
hCRTgW
hCRTbW
hCRTbW
tù}
tù}
u&SSh
u&SSh
A$v%SU
A$v%SU
D$`CRTr
D$`CRTr
D$lCRTg
D$lCRTg
D$xCRTb
D$xCRTb
?%uMf
?%uMf
\Captcha\Src\Common\MyGlobal.cpp
\Captcha\Src\Common\MyGlobal.cpp
%.2d-%.2d:%.2d:%.2d.%.3d [ %s %d ]
%.2d-%.2d:%.2d:%.2d.%.3d [ %s %d ]
s:%d %s len:%d
s:%d %s len:%d
\Captcha\Src\Common\MyToolsLib.cpp
\Captcha\Src\Common\MyToolsLib.cpp
CNotSupportedException
CNotSupportedException
CHttpConnection
CHttpConnection
CHttpFile
CHttpFile
CCmdTarget
CCmdTarget
COMCTL32.DLL
COMCTL32.DLL
hhctrl.ocx
hhctrl.ocx
mscoree.dll
mscoree.dll
internal state. The program cannot safely continue execution and must
internal state. The program cannot safely continue execution and must
continue execution and must now be terminated.
continue execution and must now be terminated.
- This application cannot run using the active version of the Microsoft .NET Runtime
- This application cannot run using the active version of the Microsoft .NET Runtime
Please contact the application's support team for more information.
Please contact the application's support team for more information.
OLEACC.dll
OLEACC.dll
?#%X.y
?#%X.y
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
1.2.3
1.2.3
inflate 1.2.3 Copyright 1995-2005 Mark Adler
inflate 1.2.3 Copyright 1995-2005 Mark Adler
%u BitsPerSample not allowed for JPEG
%u BitsPerSample not allowed for JPEG
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
z:\Captcha\Temp\Zmapi\Release\Zmapi.pdb
z:\Captcha\Temp\Zmapi\Release\Zmapi.pdb
UnhookWindowsHookEx
UnhookWindowsHookEx
GetKeyState
GetKeyState
SetWindowsHookExW
SetWindowsHookExW
SetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ScaleViewportExtEx
ScaleViewportExtEx
comdlg32.dll
comdlg32.dll
WINSPOOL.DRV
WINSPOOL.DRV
RegOpenKeyW
RegOpenKeyW
RegDeleteKeyW
RegDeleteKeyW
RegEnumKeyW
RegEnumKeyW
RegCreateKeyExW
RegCreateKeyExW
COMCTL32.dll
COMCTL32.dll
UrlUnescapeW
UrlUnescapeW
InternetCrackUrlW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetCanonicalizeUrlW
HttpAddRequestHeadersW
HttpAddRequestHeadersW
HttpQueryInfoW
HttpQueryInfoW
HttpSendRequestW
HttpSendRequestW
HttpOpenRequestW
HttpOpenRequestW
WININET.dll
WININET.dll
Zmapi.dll
Zmapi.dll
ZM_ReportErrorW
ZM_ReportErrorW
.PAVCObject@@
.PAVCObject@@
.PAVCException@@
.PAVCException@@
.PAVCOleException@@
.PAVCOleException@@
.PAVCSimpleException@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.PAVCMemoryException@@
.PAVCNotSupportedException@@
.PAVCNotSupportedException@@
.PAVCInvalidArgException@@
.PAVCInvalidArgException@@
.?AVCNotSupportedException@@
.?AVCNotSupportedException@@
.PAVCInternetException@@
.PAVCInternetException@@
.?AVCHttpConnection@@
.?AVCHttpConnection@@
.?AVCHttpFile@@
.?AVCHttpFile@@
.?AVCCmdTarget@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCCmdUI@@
.PAVCArchiveException@@
.PAVCArchiveException@@
.?AVCTestCmdUI@@
.?AVCTestCmdUI@@
.PAVCUserException@@
.PAVCUserException@@
.PAVCFileException@@
.PAVCFileException@@
Save RAW not supported
Save RAW not supported
Save WMF not supported
Save WMF not supported
Unsupported WBMP type
Unsupported WBMP type
1.2.24
1.2.24
Page %d
Page %d
compression type not supported
compression type not supported
libpng error: %s
libpng error: %s
libpng error: %s, offset=%d
libpng error: %s, offset=%d
libpng error no. %s: %s
libpng error no. %s: %s
libpng warning: %s
libpng warning: %s
libpng warning no. %s: %s
libpng warning no. %s: %s
iTXt chunk not supported.
iTXt chunk not supported.
Unknown zTXt compression type %d
Unknown zTXt compression type %d
Incomplete compressed datastream in %s chunk
Incomplete compressed datastream in %s chunk
Data error in compressed datastream in %s chunk
Data error in compressed datastream in %s chunk
Buffer error in compressed datastream in %s chunk
Buffer error in compressed datastream in %s chunk
gamma = (%d/100000)
gamma = (%d/100000)
gx=%f, gy=%f, bx=%f, by=%f
gx=%f, gy=%f, bx=%f, by=%f
wx=%f, wy=%f, rx=%f, ry=%f
wx=%f, wy=%f, rx=%f, ry=%f
incorrect gamma=(%d/100000)
incorrect gamma=(%d/100000)
NULL row buffer for row %ld, pass %d
NULL row buffer for row %ld, pass %d
Empty keyword in iCCP chunk
Empty keyword in iCCP chunk
Unknown compression type %d
Unknown compression type %d
Empty keyword in sPLT chunk
Empty keyword in sPLT chunk
white_x=%f, white_y=%f
white_x=%f, white_y=%f
zero length keyword
zero length keyword
keyword length must be 1 - 79 characters
keyword length must be 1 - 79 characters
Zero length keyword
Zero length keyword
extra interior spaces removed from keyword
extra interior spaces removed from keyword
leading spaces removed from keyword
leading spaces removed from keyword
trailing spaces removed from keyword
trailing spaces removed from keyword
invalid keyword character 0xX
invalid keyword character 0xX
Out of memory while procesing keyword
Out of memory while procesing keyword
Empty keyword in tEXt chunk
Empty keyword in tEXt chunk
Empty keyword in zTXt chunk
Empty keyword in zTXt chunk
Corrupt JPEG data: found marker 0xx instead of RST%d
Corrupt JPEG data: found marker 0xx instead of RST%d
Warning: unknown JFIF revision number %d.d
Warning: unknown JFIF revision number %d.d
Corrupt JPEG data: %u extraneous bytes before marker 0xx
Corrupt JPEG data: %u extraneous bytes before marker 0xx
Inconsistent progression sequence for component %d coefficient %d
Inconsistent progression sequence for component %d coefficient %d
Unknown Adobe color transform code %d
Unknown Adobe color transform code %d
Obtained XMS handle %u
Obtained XMS handle %u
Freed XMS handle %u
Freed XMS handle %u
Unrecognized component IDs %d %d %d, assuming YCbCr
Unrecognized component IDs %d %d %d, assuming YCbCr
JFIF extension marker: RGB thumbnail image, length %u
JFIF extension marker: RGB thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: JPEG-compressed thumbnail image, length %u
JFIF extension marker: JPEG-compressed thumbnail image, length %u
Opened temporary file %s
Opened temporary file %s
Closed temporary file %s
Closed temporary file %s
Ss=%d, Se=%d, Ah=%d, Al=%d
Ss=%d, Se=%d, Ah=%d, Al=%d
Component %d: dc=%d ac=%d
Component %d: dc=%d ac=%d
Start Of Scan: %d components
Start Of Scan: %d components
Component %d: %dhx%dv q=%d
Component %d: %dhx%dv q=%d
Start Of Frame 0xx: width=%u, height=%u, components=%d
Start Of Frame 0xx: width=%u, height=%u, components=%d
Smoothing not supported with nonstandard sampling ratios
Smoothing not supported with nonstandard sampling ratios
RST%d
RST%d
At marker 0xx, recovery action %d
At marker 0xx, recovery action %d
Selected %d colors for quantization
Selected %d colors for quantization
Quantizing to %d colors
Quantizing to %d colors
Quantizing to %d = %d*%d*%d colors
Quantizing to %d = %d*%d*%d colors
%4u %4u %4u %4u %4u %4u %4u %4u
%4u %4u %4u %4u %4u %4u %4u %4u
Unexpected marker 0xx
Unexpected marker 0xx
Miscellaneous marker 0xx, length %u
Miscellaneous marker 0xx, length %u
with %d x %d thumbnail image
with %d x %d thumbnail image
JFIF extension marker: type 0xx, length %u
JFIF extension marker: type 0xx, length %u
Warning: thumbnail image size does not match data length %u
Warning: thumbnail image size does not match data length %u
JFIF APP0 marker: version %d.d, density %dx%d %d
JFIF APP0 marker: version %d.d, density %dx%d %d
= = = = = = = =
= = = = = = = =
Obtained EMS handle %u
Obtained EMS handle %u
Freed EMS handle %u
Freed EMS handle %u
Define Restart Interval %u
Define Restart Interval %u
Define Quantization Table %d precision %d
Define Quantization Table %d precision %d
Define Huffman Table 0xx
Define Huffman Table 0xx
Define Arithmetic Table 0xx: 0xx
Define Arithmetic Table 0xx: 0xx
Unknown APP14 marker (not Adobe), length %u
Unknown APP14 marker (not Adobe), length %u
Unknown APP0 marker (not JFIF), length %u
Unknown APP0 marker (not JFIF), length %u
Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d
Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d
Unsupported marker type 0xx
Unsupported marker type 0xx
Failed to create temporary file %s
Failed to create temporary file %s
Unsupported JPEG process: SOF type 0xx
Unsupported JPEG process: SOF type 0xx
Cannot quantize to more than %d colors
Cannot quantize to more than %d colors
Cannot quantize to fewer than %d colors
Cannot quantize to fewer than %d colors
Cannot quantize more than %d color components
Cannot quantize more than %d color components
Insufficient memory (case %d)
Insufficient memory (case %d)
Not a JPEG file: starts with 0xx 0xx
Not a JPEG file: starts with 0xx 0xx
Quantization table 0xx was not defined
Quantization table 0xx was not defined
Huffman table 0xx was not defined
Huffman table 0xx was not defined
Backing store not supported
Backing store not supported
Cannot transcode due to multiple use of quantization table %d
Cannot transcode due to multiple use of quantization table %d
Maximum supported image dimension is %u pixels
Maximum supported image dimension is %u pixels
Empty JPEG image (DNL not supported)
Empty JPEG image (DNL not supported)
Bogus DQT index %d
Bogus DQT index %d
Bogus DHT index %d
Bogus DHT index %d
Bogus DAC value 0x%x
Bogus DAC value 0x%x
Bogus DAC index %d
Bogus DAC index %d
Unsupported color conversion request
Unsupported color conversion request
Too many color components: %d, max %d
Too many color components: %d, max %d
Buffer passed to JPEG library is too small
Buffer passed to JPEG library is too small
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
Improper call to JPEG library in state %d
Improper call to JPEG library in state %d
Invalid scan script at entry %d
Invalid scan script at entry %d
Invalid progressive parameters at scan script entry %d
Invalid progressive parameters at scan script entry %d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Unsupported JPEG data precision %d
Unsupported JPEG data precision %d
Invalid memory pool code %d
Invalid memory pool code %d
Wrong JPEG library version: library is %d, caller expects %d
Wrong JPEG library version: library is %d, caller expects %d
IDCT output block size %d not supported
IDCT output block size %d not supported
Invalid component ID %d in SOS
Invalid component ID %d in SOS
Bogus message code %d
Bogus message code %d
%ld%c
%ld%c
%s: Read error at scanline %lu, strip %lu; got %lu bytes, expected %lu
%s: Read error at scanline %lu, strip %lu; got %lu bytes, expected %lu
%s: Read error at scanline %lu; got %lu bytes, expected %lu
%s: Read error at scanline %lu; got %lu bytes, expected %lu
%s: Seek error at scanline %lu, strip %lu
%s: Seek error at scanline %lu, strip %lu
%s: Data buffer too small to hold strip %lu
%s: Data buffer too small to hold strip %lu
%s: Read error on strip %lu; got %lu bytes, expected %lu
%s: Read error on strip %lu; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld, tile %ld; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld, tile %ld; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld; got %lu bytes, expected %lu
%s: Seek error at row %ld, col %ld, tile %ld
%s: Seek error at row %ld, col %ld, tile %ld
%s: Data buffer too small to hold tile %ld
%s: Data buffer too small to hold tile %ld
%s: No space for data buffer at scanline %ld
%s: No space for data buffer at scanline %ld
%u: Sample out of range, max %u
%u: Sample out of range, max %u
Sample %d out of range, max %u
Sample %d out of range, max %u
"%s": Bad mode
"%s": Bad mode
Not a TIFF file, bad version number %d (0x%x)
Not a TIFF file, bad version number %d (0x%x)
Not a TIFF file, bad magic number %d (0x%x)
Not a TIFF file, bad magic number %d (0x%x)
%s: Out of memory (TIFF structure)
%s: Out of memory (TIFF structure)
Sorry, can not handle YCbCr images with %s=%d
Sorry, can not handle YCbCr images with %s=%d
Sorry, LogL data must have %s=%d
Sorry, LogL data must have %s=%d
Sorry, can not handle LogLuv images with %s=%d
Sorry, can not handle LogLuv images with %s=%d
Sorry, LogLuv data must have %s=%d or %d
Sorry, LogLuv data must have %s=%d or %d
Sorry, can not handle image with %s=%d
Sorry, can not handle image with %s=%d
Sorry, can not handle separated image with %s=%d
Sorry, can not handle separated image with %s=%d
Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d
Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d
Sorry, can not handle RGB image with %s=%d
Sorry, can not handle RGB image with %s=%d
Missing needed %s tag
Missing needed %s tag
%s: Cannot modify tag "%s" while writing
%s: Cannot modify tag "%s" while writing
%s: Unknown %stag %u
%s: Unknown %stag %u
%f: Bad value for "%s"
%f: Bad value for "%s"
%s: Invalid %stag "%s" (not supported by codec)
%s: Invalid %stag "%s" (not supported by codec)
%ld: Bad value for "%s"
%ld: Bad value for "%s"
%d: Bad value for "%s"
%d: Bad value for "%s"
Nonstandard tile length %d, convert file
Nonstandard tile length %d, convert file
Nonstandard tile width %d, convert file
Nonstandard tile width %d, convert file
Bad value %ld for "%s" tag ignored
Bad value %ld for "%s" tag ignored
%s: Invalid InkNames value; expecting %d names, found %d
%s: Invalid InkNames value; expecting %d names, found %d
%s: Error fetching directory count
%s: Error fetching directory count
%s: Error fetching directory link
%s: Error fetching directory link
"%s": Information lost writing value (%g) as (unsigned) RATIONAL
"%s": Information lost writing value (%g) as (unsigned) RATIONAL
Error writing data for field "%s"
Error writing data for field "%s"
%s: Error writing SubIFD directory link
%s: Error writing SubIFD directory link
%d: Sample out of range, max %d
%d: Sample out of range, max %d
%s: No space for %s arrays
%s: No space for %s arrays
%s: Must set "PlanarConfiguration" before writing data
%s: Must set "PlanarConfiguration" before writing data
%s: Must set "ImageWidth" before writing data
%s: Must set "ImageWidth" before writing data
%s: File not open for writing
%s: File not open for writing
%s: No space for output buffer
%s: No space for output buffer
%s: No space to expand strip arrays
%s: No space to expand strip arrays
%s: Write error at scanline %lu
%s: Write error at scanline %lu
%s: Seek error at scanline %lu
%s: Seek error at scanline %lu
Bogus "%s" field, ignoring and calculating from imagelength
Bogus "%s" field, ignoring and calculating from imagelength
TIFF directory is missing required "%s" field, calculating from imagelength
TIFF directory is missing required "%s" field, calculating from imagelength
unknown field with tag %d (0x%x) ignored
unknown field with tag %d (0x%x) ignored
wrong data type %d for "%s"; tag ignored
wrong data type %d for "%s"; tag ignored
No space %s
No space %s
TIFF directory is missing required "%s" field
TIFF directory is missing required "%s" field
incorrect count for field "%s" (%lu, expecting %lu); tag ignored
incorrect count for field "%s" (%lu, expecting %lu); tag ignored
Error fetching data for field "%s"
Error fetching data for field "%s"
%s: Rational with zero denominator (num = %lu)
%s: Rational with zero denominator (num = %lu)
Cannot handle different per-sample values for field "%s"
Cannot handle different per-sample values for field "%s"
Cannot read TIFF_ANY type %d for field "%s"
Cannot read TIFF_ANY type %d for field "%s"
Compression scheme %u %s encoding is not implemented
Compression scheme %u %s encoding is not implemented
%s %s encoding is not implemented
%s %s encoding is not implemented
%s %s encoding is no longer implemented due to Unisys patent enforcement
%s %s encoding is no longer implemented due to Unisys patent enforcement
Compression scheme %u %s decoding is not implemented
Compression scheme %u %s decoding is not implemented
%s %s decoding is not implemented
%s %s decoding is not implemented
Compression algorithm does not support random access
Compression algorithm does not support random access
Internal error, unknown tag 0x%x
Internal error, unknown tag 0x%x
%s compression support is not configured
%s compression support is not configured
?%s: No space for LogLuv state block
?%s: No space for LogLuv state block
Inappropriate photometric interpretation %d for SGILog compression; %s
Inappropriate photometric interpretation %d for SGILog compression; %s
LogL16Decode: Not enough data at row %d (short %d pixels)
LogL16Decode: Not enough data at row %d (short %d pixels)
LogLuvDecode24: Not enough data at row %d (short %d pixels)
LogLuvDecode24: Not enough data at row %d (short %d pixels)
LogLuvDecode32: Not enough data at row %d (short %d pixels)
LogLuvDecode32: Not enough data at row %d (short %d pixels)
%s: No space for SGILog translation buffer
%s: No space for SGILog translation buffer
No support for converting user data format to LogL
No support for converting user data format to LogL
No support for converting user data format to LogLuv
No support for converting user data format to LogLuv
SGILog compression supported only for %s, or raw data
SGILog compression supported only for %s, or raw data
Unknown data format %d for LogLuv compression
Unknown data format %d for LogLuv compression
Unknown encoding %d for LogLuv compression
Unknown encoding %d for LogLuv compression
%s: %s
%s: %s
%s: Not enough data at scanline %d (short %d bytes)
%s: Not enough data at scanline %d (short %d bytes)
%s: zlib error: %s
%s: zlib error: %s
%s: Decoding error at scanline %d, %s
%s: Decoding error at scanline %d, %s
%s: Encoder error: %s
%s: Encoder error: %s
%s: No space for state block
%s: No space for state block
%s: Bad code word at scanline %d (x %lu)
%s: Bad code word at scanline %d (x %lu)
%s: %s at scanline %d (got %lu, expected %lu)
%s: %s at scanline %d (got %lu, expected %lu)
%s: Premature EOF at scanline %d (x %lu)
%s: Premature EOF at scanline %d (x %lu)
%s: No space for Group 3/4 reference line
%s: No space for Group 3/4 reference line
%s: No space for Group 3/4 run arrays
%s: No space for Group 3/4 run arrays
%s: Uncompressed data (not supported) at scanline %d (x %lu)
%s: Uncompressed data (not supported) at scanline %d (x %lu)
Fax SubAddress: %s
Fax SubAddress: %s
(%u = 0x%x)
(%u = 0x%x)
%suncompressed data
%suncompressed data
%sEOL padding
%sEOL padding
%s2-d encoding
%s2-d encoding
%s compression is not supported
%s compression is not supported
Tiled Wang image not supported
Tiled Wang image not supported
Does not support lossless Huffman coding
Does not support lossless Huffman coding
RowsPerStrip must be multiple of %d for JPEG
RowsPerStrip must be multiple of %d for JPEG
JPEG tile width must be multiple of %d
JPEG tile width must be multiple of %d
JPEG tile height must be multiple of %d
JPEG tile height must be multiple of %d
BitsPerSample %d not allowed for JPEG
BitsPerSample %d not allowed for JPEG
PhotometricInterpretation %d not allowed for JPEG
PhotometricInterpretation %d not allowed for JPEG
ThunderDecode: %s data at scanline %ld (%lu != %lu)
ThunderDecode: %s data at scanline %ld (%lu != %lu)
PackBitsDecode: discarding %d bytes to avoid buffer overrun
PackBitsDecode: discarding %d bytes to avoid buffer overrun
LZWDecode: Not enough data at scanline %d (short %d bytes)
LZWDecode: Not enough data at scanline %d (short %d bytes)
LZWDecode: Strip %d not terminated with EOI code
LZWDecode: Strip %d not terminated with EOI code
LZWDecode: Bogus encoding, loop in the code table; scanline %d
LZWDecode: Bogus encoding, loop in the code table; scanline %d
LZWDecodeCompat: Not enough data at scanline %d (short %d bytes)
LZWDecodeCompat: Not enough data at scanline %d (short %d bytes)
DumpModeDecode: Not enough data for scanline %d
DumpModeDecode: Not enough data for scanline %d
Horizontal differencing "Predictor" not supported with %d-bit samples
Horizontal differencing "Predictor" not supported with %d-bit samples
"Predictor" value %d not supported
"Predictor" value %d not supported
%u (0x%x)
%u (0x%x)
Portable Graymap/Pixmap (PNM)
Portable Graymap/Pixmap (PNM)
error: BMP format does not support color space
error: BMP format does not support color space
%s %s %d %ld %ld
%s %s %d %ld %ld
hXXp://VVV.ijg.org
hXXp://VVV.ijg.org
The IJG JPEG library is required for JPEG decoding support.
The IJG JPEG library is required for JPEG decoding support.
The IJG JPEG library is required for JPEG encoding support.
The IJG JPEG library is required for JPEG encoding support.
len = %d;
len = %d;
type = 0xx (%s);
type = 0xx (%s);
tileno = %d; len = %d; partno = %d; numparts = %d
tileno = %d; len = %d; partno = %d; numparts = %d
prec[%d] = %d; sgnd[%d] = %d; hsamp[%d] = %d; vsamp[%d] = %d
prec[%d] = %d; sgnd[%d] = %d; hsamp[%d] = %d; vsamp[%d] = %d
tilewidth = %d; tileheight = %d; tilexoff = %d; tileyoff = %d;
tilewidth = %d; tileheight = %d; tilexoff = %d; tileyoff = %d;
width = %d; height = %d; xoff = %d; yoff = %d;
width = %d; height = %d; xoff = %d; yoff = %d;
caps = 0xx;
caps = 0xx;
prcwidth[%d] = %d, prcheight[%d] = %d
prcwidth[%d] = %d, prcheight[%d] = %d
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx;
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx;
prg = %d; numlyrs = %d;
prg = %d; numlyrs = %d;
numdlvls = %d; qmfbid = %d; mctrans = %d
numdlvls = %d; qmfbid = %d; mctrans = %d
csty = 0xx;
csty = 0xx;
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx; qmfbid = %d;
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx; qmfbid = %d;
compno = %d; csty = 0xx; numdlvls = %d;
compno = %d; csty = 0xx; numdlvls = %d;
compno = %d; roisty = %d; roishift = %d
compno = %d; roisty = %d; roishift = %d
expn[%d] = 0xx; mant[%d] = 0xx;
expn[%d] = 0xx; mant[%d] = 0xx;
qntsty = %d; numguard = %d; numstepsizes = %d
qntsty = %d; numguard = %d; numstepsizes = %d
compno = %d; qntsty = %d; numguard = %d; numstepsizes = %d
compno = %d; qntsty = %d; numguard = %d; numstepsizes = %d
seqno = %d;
seqno = %d;
ind=%d; len = %d;
ind=%d; len = %d;
le[%d] = %d
le[%d] = %d
rs[%d] = %d; re[%d] = %d;
rs[%d] = %d; re[%d] = %d;
cs[%d] = %d; ce[%d] = %d;
cs[%d] = %d; ce[%d] = %d;
po[%d] = %d;
po[%d] = %d;
hoff[%d] = %d; voff[%d] = %d
hoff[%d] = %d; voff[%d] = %d
regid = %d;
regid = %d;
invalid code block width %d
invalid code block width %d
invalid code block height %d
invalid code block height %d
warning: ignoring invalid option %s
warning: ignoring invalid option %s
warning: invalid intermediate layer rates specifier ignored (%s)
warning: invalid intermediate layer rates specifier ignored (%s)
ignoring bad rate specifier %s
ignoring bad rate specifier %s
ignoring invalid progression order %s
ignoring invalid progression order %s
ignoring invalid mode %s
ignoring invalid mode %s
unsupported image type
unsupported image type
Creator: JasPer Version %s
Creator: JasPer Version %s
error: too few guard bits (need at least %d)
error: too few guard bits (need at least %d)
lyrno=d cmptno=d rlvlno=d bandno=d prcno=d cblkno=d passno=d
lyrno=d cmptno=d rlvlno=d bandno=d prcno=d cblkno=d passno=d
lyrno = d
lyrno = d
success %d goodthresh %f
success %d goodthresh %f
maxlen=ld actuallen=ld thresh=%f
maxlen=ld actuallen=ld thresh=%f
min rdslope = %f max rdslope = %f
min rdslope = %f max rdslope = %f
cblk ] ] ] ]
cblk ] ] ] ]
prc ] ] ] ] (] ])
prc ] ] ] ] (] ])
band ] ] ] ]
band ] ] ] ]
rlvl ] ] ] ]
rlvl ] ] ] ]
tcmpt ] ] ] ]
tcmpt ] ] ] ]
CODE BLOCK %d
CODE BLOCK %d
CODE BLOCK GROUP %d
CODE BLOCK GROUP %d
BAND %d
BAND %d
xs =%d, ys = %d, xe = %d, ye = %d, w = %d, h = %d
xs =%d, ys = %d, xe = %d, ye = %d, w = %d, h = %d
RESOLUTION LEVEL %d
RESOLUTION LEVEL %d
ICC Profile CS x
ICC Profile CS x
error: unsupported compression type
error: unsupported compression type
box type %s
box type %s
error: encoding method not supported
error: encoding method not supported
error: RLE encoding method not supported
error: RLE encoding method not supported
warning: palettized images not fully supported
warning: palettized images not fully supported
error: unsupported color space
error: unsupported color space
error: unsupported BMP encoding
error: unsupported BMP encoding
THE BMP FORMAT IS NOT FULLY SUPPORTED!
THE BMP FORMAT IS NOT FULLY SUPPORTED!
unsupported BMP encoding
unsupported BMP encoding
no palettized image support for BMP format
no palettized image support for BMP format
warning: support for signed sample data requires use of nonstandard extension to PNM format
warning: support for signed sample data requires use of nonstandard extension to PNM format
%s%ld
%s%ld
error: PNM support required
error: PNM support required
warning: ignoring unsupported options
warning: ignoring unsupported options
data=%s
data=%s
component tlx=%ld tly=%ld sampperx=%ld samppery=%ld width=%ld height=%ld prec=%d sgnd=%d
component tlx=%ld tly=%ld sampperx=%ld samppery=%ld width=%ld height=%ld prec=%d sgnd=%d
(%f, %f, %f)
(%f, %f, %f)
entry[%d] = %f
entry[%d] = %f
gamma = %f
gamma = %f
number of entires = %d
number of entires = %d
maclen = %d
maclen = %d
sccode = %d
sccode = %d
uclangcode = %d; uclen = %d
uclangcode = %d; uclen = %d
ascii = "%s"
ascii = "%s"
string = "%s"
string = "%s"
numintabents=%d, numouttabents=%d
numintabents=%d, numouttabents=%d
e[%d][%d]=%f
e[%d][%d]=%f
numinchans=%d, numoutchans=%d, clutlen=%d
numinchans=%d, numoutchans=%d, clutlen=%d
x:
x:
1.900.1
1.900.1
packet offset=ld prg=%d cmptno=d rlvlno=d prcno=d lyrno=d
packet offset=ld prg=%d cmptno=d rlvlno=d prcno=d lyrno=d
coding pass failed passtype=%d segtype=%d
coding pass failed passtype=%d segtype=%d
type=%c%s%c (0xx); length=%d
type=%c%s%c (0xx); length=%d
csid=%d
csid=%d
method=%d; pri=%d; approx=%d
method=%d; pri=%d; approx=%d
channo=%d; type=%d; assoc=%d
channo=%d; type=%d; assoc=%d
cmptno=%d; map=%d; pcol=%d
cmptno=%d; map=%d; pcol=%d
numchans = %d
numchans = %d
LUT[%d][%d]=%d
LUT[%d][%d]=%d
numents=%d; numchans=%d
numents=%d; numchans=%d
IEC hXXp://VVV.iec.ch
IEC hXXp://VVV.iec.ch
.IEC 61966-2.1 Default RGB colour space - sRGB
.IEC 61966-2.1 Default RGB colour space - sRGB
CRT curv
CRT curv
The delta operation is invalid (mismatched color_types?)
The delta operation is invalid (mismatched color_types?)
Requested nEED resources are not supported
Requested nEED resources are not supported
MHDR simplicity indicates unsupported feature(s)
MHDR simplicity indicates unsupported feature(s)
Keyword cannot be zero-length
Keyword cannot be zero-length
%s: Out of memory in %s
%s: Out of memory in %s
%s: decoder table overflow
%s: decoder table overflow
%d %d
%d %d
%d,%d
%d,%d
%d %d %d
%d %d %d
/.badpixels
/.badpixels
%s is not a valid PGM file!
%s is not a valid PGM file!
%s has the wrong dimensions!
%s has the wrong dimensions!
Scaling with p->black %d, multipliers
Scaling with p->black %d, multipliers
%s: Cannot use camera p->white balance.
%s: Cannot use camera p->white balance.
Median filter pass %d...
Median filter pass %d...
11124811248488
11124811248488
012347800000005896
012347800000005896
%d:%d:%d %d:%d:%d
%d:%d:%d %d:%d:%d
%f %f %f
%f %f %f
Ixpress %d-Mp
Ixpress %d-Mp
50132467
50132467
Failed to read metadata from %s
Failed to read metadata from %s
Reading metadata from %s ...
Reading metadata from %s ...
0134567028
0134567028
023457000000006000
023457000000006000
012346000000000000
012346000000000000
%d:%d:%d
%d:%d:%d
%d.%d.%d
%d.%d.%d
%*s %s %d %d:%d:%d %d
%*s %s %d %d:%d:%d %d
v%d %dx%d
v%d %dx%d
%s %s
%s %s
%s: You must link dcraw with libjpeg!!
%s: You must link dcraw with libjpeg!!
%dx%d
%dx%d
Converting to %s colorspace...
Converting to %s colorspace...
d:d:d d:d:d
d:d:d d:d:d
12435867
12435867
Unknown option "-%c".
Unknown option "-%c".
Non-numeric argument to "-%c"
Non-numeric argument to "-%c"
1141111142
1141111142
Created by MIDL version 6.00.0361 at Wed Nov 05 22:09:21 2014
Created by MIDL version 6.00.0361 at Wed Nov 05 22:09:21 2014
,0004080
,0004080
3!3(31363
3!3(31363
: :$:(:,:0:4:]:,;[;|;
: :$:(:,:0:4:]:,;[;|;
=$=0=7=>=
=$=0=7=>=
;%@>
;%@>
?0?4?8?@?
?0?4?8?@?
748:8?8_8
748:8?8_8
; ;$;(;,;
; ;$;(;,;
TEAKEY
TEAKEY
SESSIONkEY
SESSIONkEY
-12027,TEAKEY
-12027,TEAKEY
&password=
&password=
&softkey=
&softkey=
Content-Disposition: form-data; name="password"
Content-Disposition: form-data; name="password"
Content-Disposition: form-data; name="softkey"
Content-Disposition: form-data; name="softkey"
{softkey}
{softkey}
Content-Disposition: form-data; name="image"; filename="System.Byte[]"
Content-Disposition: form-data; name="image"; filename="System.Byte[]"
.splice(
.splice(
get__key(
get__key(
text|password|file
text|password|file
SetClientCertificate
SetClientCertificate
hXXp://VVV.52dfg.comr
hXXp://VVV.52dfg.comr
hXXp://VVV.52dfg.com/forum-40-1.html?hycz
hXXp://VVV.52dfg.com/forum-40-1.html?hycz
5ugg%u
5ugg%u
hXXp://VVV.52dfg.com/dfg/soft/index.html
hXXp://VVV.52dfg.com/dfg/soft/index.html
09/27/12
09/27/12
admin@52dfg.coml
admin@52dfg.coml
%d&&'
%d&&'
123456789
123456789
00003333
00003333
?456789:;
?456789:;
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
Q%*.*f
Q%*.*f
commctrl_DragListMsg
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
Afx:%x:%x
__MSVCRT_HEAP_SELECT
__MSVCRT_HEAP_SELECT
iphlpapi.dll
iphlpapi.dll
MPR.dll
MPR.dll
VERSION.dll
VERSION.dll
RPCRT4.dll
RPCRT4.dll
(*.prn)|*.prn|
(*.prn)|*.prn|
(*.*)|*.*||
(*.*)|*.*||
Shell32.dll
Shell32.dll
Mpr.dll
Mpr.dll
Advapi32.dll
Advapi32.dll
User32.dll
User32.dll
Gdi32.dll
Gdi32.dll
(&07-034/)7 '
(&07-034/)7 '
?? / %d]
?? / %d]
%d / %d]
%d / %d]
: %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.txt)|*.txt|
(*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|PNG
(*.JPG)|*.JPG|PNG
(*.PNG)|*.PNG|BMP
(*.PNG)|*.PNG|BMP
(*.BMP)|*.BMP|GIF
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
(*.CUR)|*.CUR|
%s:%d
%s:%d
windows
windows
1.6.9
1.6.9
unsupported zlib version
unsupported zlib version
png_read_image: unsupported transformation
png_read_image: unsupported transformation
out.prn
out.prn
%d.%d
%d.%d
%d / %d
%d / %d
%d/%d
%d/%d
bad keyword
bad keyword
libpng does not support gamma background rgb_to_gray
libpng does not support gamma background rgb_to_gray
Palette is NULL in indexed image
Palette is NULL in indexed image
(%d-%d):
(%d-%d):
VVV.dywt.com.cn
VVV.dywt.com.cn
%s,%d
%s,%d
%s.lnk
%s.lnk
;3 #>6.&
;3 #>6.&
'2, / 0&7!4-)1#
'2, / 0&7!4-)1#
(%S)%M%D %y-%m-%d
(%S)%M%D %y-%m-%d
After RemoveDC(), pen counter: %d, bursh counter: %d, font counter: %d
After RemoveDC(), pen counter: %d, bursh counter: %d, font counter: %d
!!! Create pen ERROR! ErrNo.[%d]
!!! Create pen ERROR! ErrNo.[%d]
Create pen No.%d
Create pen No.%d
!!! Create brush ERROR! ErrNo.[%d]
!!! Create brush ERROR! ErrNo.[%d]
Create brush No.%d
Create brush No.%d
!!! Create font ERROR! ErrNo.[%d]
!!! Create font ERROR! ErrNo.[%d]
Create font No.%d
Create font No.%d
- Delete pen No.%d
- Delete pen No.%d
- Delete brush No.%d
- Delete brush No.%d
- Delete font No.%d
- Delete font No.%d
(*.htm;*.html)|*.htm;*.html
(*.htm;*.html)|*.htm;*.html
its:%s::%s
its:%s::%s
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP/1.0
HTTP/1.0
%s
%s
Reply-To: %s
Reply-To: %s
From: %s
From: %s
To: %s
To: %s
Subject: %s
Subject: %s
Date: %s
Date: %s
Cc: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
%a, %d %b %Y %H:%M:%S
SMTP
SMTP
TrayIcon event: %x
TrayIcon event: %x
hXXp://VVV.eyuyan.com
hXXp://VVV.eyuyan.com
service@dywt.com.cn
service@dywt.com.cn
86(0411)39895834
86(0411)39895834
86(0411)39895831
86(0411)39895831
This is a runtime library file for EPL applications. The EPL is a software development environment. For details please visit VVV.dywt.com.cn/info
This is a runtime library file for EPL applications. The EPL is a software development environment. For details please visit VVV.dywt.com.cn/info
DelAllKeyValues
DelAllKeyValues
DelKeyValue
DelKeyValue
GetAllKeys
GetAllKeys
GetKeyValue
GetKeyValue
AddKeyValue
AddKeyValue
DSGetErrMsg
DSGetErrMsg
BiTreeGetCurNodeKey
BiTreeGetCurNodeKey
ListGetCurNodeKey
ListGetCurNodeKey
ListUpdateNodeFromKey
ListUpdateNodeFromKey
ListRemoveNodeFromKey
ListRemoveNodeFromKey
edatastructure_fnMapDelAllKeyValues
edatastructure_fnMapDelAllKeyValues
edatastructure_fnMapDelKeyValue
edatastructure_fnMapDelKeyValue
edatastructure_fnMapGetAllKeys
edatastructure_fnMapGetAllKeys
edatastructure_fnMapGetKeyValue
edatastructure_fnMapGetKeyValue
edatastructure_fnMapAddKeyValue
edatastructure_fnMapAddKeyValue
edatastructure_fnBiTreeGetCurNodeKey
edatastructure_fnBiTreeGetCurNodeKey
edatastructure_fnListGetCurNodeKey
edatastructure_fnListGetCurNodeKey
edatastructure_fnListUpdateNodeFromKey
edatastructure_fnListUpdateNodeFromKey
edatastructure_fnListRemoveNodeFromKey
edatastructure_fnListRemoveNodeFromKey
Bag pipe
Bag pipe
%d%d%d
%d%d%d
rundll32.exe shell32.dll,
rundll32.exe shell32.dll,
.PAVCResourceException@@
.PAVCResourceException@@
.PAVCOleDispatchException@@
.PAVCOleDispatchException@@
c:\%original file name%.exe
c:\%original file name%.exe
#include "l.chs\afxres.rc" // Standard components
#include "l.chs\afxres.rc" // Standard components
o%x&3
o%x&3
advapi32.dll
advapi32.dll
hid.dll
hid.dll
mscorwks.dll
mscorwks.dll
mscorsvr.dll
mscorsvr.dll
KernelBase.dll
KernelBase.dll
mscoreei.dll
mscoreei.dll
clr.dll
clr.dll
diasymreader.dll
diasymreader.dll
SEGetNumExecUsed
SEGetNumExecUsed
SEGetNumExecLeft
SEGetNumExecLeft
SESetNumExecUsed
SESetNumExecUsed
SEGetExecTimeUsed
SEGetExecTimeUsed
SEGetExecTimeLeft
SEGetExecTimeLeft
SESetExecTime
SESetExecTime
SEGetTotalExecTimeUsed
SEGetTotalExecTimeUsed
SEGetTotalExecTimeLeft
SEGetTotalExecTimeLeft
SESetTotalExecTime
SESetTotalExecTime
SECheckExecTime
SECheckExecTime
SECheckTotalExecTime
SECheckTotalExecTime
&&&&6666????
&&&&6666????
""""****
""""****
2222::::
2222::::
$$$$\\\\
$$$$\\\\
00006666
00006666
####====
####====
PSAPI.DLL
PSAPI.DLL
RegOpenKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteKeyA
b|-s}
b|-s}
.XVA'
.XVA'
xU%cu4
xU%cu4
D.ZnV
D.ZnV
.Fpsj
.Fpsj
"F.FI#sj
"F.FI#sj
O.RR"6T
O.RR"6T
.Av!`M3
.Av!`M3
%UcmpI
%UcmpI
"y.DIv\
"y.DIv\
%szo>
%szo>
L.zxL
L.zxL
j.,.OZ#'
j.,.OZ#'
M"%ct:
M"%ct:
;VX.SD
;VX.SD
.EfG:
.EfG:
J/.vS
J/.vS
).CF)E
).CF)E
9.pJtl
9.pJtl
%SXmpSo
%SXmpSo
VX.SO
VX.SO
p0q.jb
p0q.jb
WINMM.dll
WINMM.dll
RASAPI32.dll
RASAPI32.dll
a`fTP
a`fTP
oledlg.dll
oledlg.dll
im:%F
im:%F
i*:%F
i*:%F
ÃŽw9i
ÃŽw9i
iW:%F
iW:%F
i6:%F
i6:%F
i6 ü
i6 ü
iN:%F
iN:%F
iN:ü
iN:ü
iW %F
iW %F
i9 %F
i9 %F
WinExec
WinExec
.GetACP
.GetACP
;WS2_32.dll
;WS2_32.dll
.GetVersion
.GetVersion
%SetLastError
%SetLastError
%SetFilePointer
%SetFilePointer
GetWindowsDirectoryA
GetWindowsDirectoryA
SetWindowsHookExA
SetWindowsHookExA
CreateDialogIndirectParamA
CreateDialogIndirectParamA
EnumChildWindows
EnumChildWindows
RegisterHotKey
RegisterHotKey
5$ScaleViewportExtEx
5$ScaleViewportExtEx
GetViewportOrgEx
GetViewportOrgEx
GetViewportExtEx
GetViewportExtEx
UnregisterHotKey
UnregisterHotKey
"]ADVAPI32.dll
"]ADVAPI32.dll
RegCreateKeyA
RegCreateKeyA
ShellExecuteA
ShellExecuteA
HttpQueryInfoA
HttpQueryInfoA
HttpOpenRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCrackUrlA
HttpSendRequestA
HttpSendRequestA
InternetCanonicalizeUrlA
InternetCanonicalizeUrlA
#comdlg32.dll
#comdlg32.dll
qIPHLPAPI.DLL
qIPHLPAPI.DLL
4MSVCRT.dll
4MSVCRT.dll
Safengine Shielden v2.3.4.0
Safengine Shielden v2.3.4.0
103WINMM.dll
103WINMM.dll
------------d}}}}}}}}}}}}}}}}{9-------------
------------d}}}}}}}}}}}}}}}}{9-------------
,-----------b}}}}}}}}}}}}}}}}}}t-------------
,-----------b}}}}}}}}}}}}}}}}}}t-------------
-----------5}}}}}}}}}}}}}}}}}}}}W-------------
-----------5}}}}}}}}}}}}}}}}}}}}W-------------
=99999996{L39999999999%x}}}}}}}{s}{
=99999996{L39999999999%x}}}}}}}{s}{
:4- ,, ,, ,, ,, ,,,, , ,, ,
:4- ,, ,, ,, ,, ,,,, , ,, ,
CCaptchaRecognizer::recognizeByCodeTypeAndUrl
CCaptchaRecognizer::recognizeByCodeTypeAndUrl
hXXp://s1.uudati.com:
hXXp://s1.uudati.com:
hXXp://s1.taskok.com:
hXXp://s1.taskok.com:
hXXp://s1.uudama.com:
hXXp://s1.uudama.com:
hXXp://s1.uuwise.com:
hXXp://s1.uuwise.com:
/Api/config.aspx
/Api/config.aspx
2.0.0.5
2.0.0.5
WiseClientAPI-2.0.0.5
WiseClientAPI-2.0.0.5
CCaptchaRecognizer::__UpdateTKEY
CCaptchaRecognizer::__UpdateTKEY
CCaptchaRecognizer::_IsNeedLogin
CCaptchaRecognizer::_IsNeedLogin
/Api/DecodeImg.aspx
/Api/DecodeImg.aspx
xxxxxxxxxxx
xxxxxxxxxxx
hXXp://p1.uuwise.net:
hXXp://p1.uuwise.net:
hXXp://p1.uudama.net:
hXXp://p1.uudama.net:
hXXp://p1.taskok.com:
hXXp://p1.taskok.com:
hXXp://p1.uuwise.com:
hXXp://p1.uuwise.com:
hXXp://p1.uudama.com:
hXXp://p1.uudama.com:
CCaptchaRecognizer::easyRecognizeUrl
CCaptchaRecognizer::easyRecognizeUrl
%d%d%d%d%d
%d%d%d%d%d
CCaptchaRecognizer::_CalcRandomPort
CCaptchaRecognizer::_CalcRandomPort
/Api/VerifyAPIFile.aspx
/Api/VerifyAPIFile.aspx
/Api/UserLogin.aspx
/Api/UserLogin.aspx
CCaptchaRecognizer::login
CCaptchaRecognizer::login
/Api/UserReg.aspx
/Api/UserReg.aspx
/Api/PayCard.aspx
/Api/PayCard.aspx
/Api/ReportError.aspx
/Api/ReportError.aspx
CCaptchaRecognizer::reportError
CCaptchaRecognizer::reportError
/Api/UserPoint.aspx
/Api/UserPoint.aspx
|2.0.0.5|
|2.0.0.5|
/Api/DecodeResult.aspx
/Api/DecodeResult.aspx
ID/KEY/
ID/KEY/
ByTypeBytes.JPG
ByTypeBytes.JPG
%d-%d-%d
%d-%d-%d
CHttpRequestHelper::_ReadResponse
CHttpRequestHelper::_ReadResponse
User-Agent:WiseClient-2.0.0.5;
User-Agent:WiseClient-2.0.0.5;
WiseClient-2.0.0.5
WiseClient-2.0.0.5
CHttpRequestHelper::_InternalRequest
CHttpRequestHelper::_InternalRequest
CHttpRequestHelper::RequestGetImage
CHttpRequestHelper::RequestGetImage
CHttpRequestHelper::RequestPost
CHttpRequestHelper::RequestPost
ServerPort
ServerPort
UUExtConfig.ini
UUExtConfig.ini
-:-:-.%d
-:-:-.%d
tCRYPTDLL.DLL
tCRYPTDLL.DLL
3.cn.pool.ntp.org
3.cn.pool.ntp.org
2.cn.pool.ntp.org
2.cn.pool.ntp.org
1.cn.pool.ntp.org
1.cn.pool.ntp.org
0.cn.pool.ntp.org
0.cn.pool.ntp.org
cn.pool.ntp.org
cn.pool.ntp.org
\\.\PHYSICALDRIVE0
\\.\PHYSICALDRIVE0
Microsoft Windows Millennium Edition
Microsoft Windows Millennium Edition
Microsoft Windows 98
Microsoft Windows 98
Microsoft Windows 95
Microsoft Windows 95
%s (Build %d)
%s (Build %d)
Service Pack 6a (Build %d)
Service Pack 6a (Build %d)
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q246009
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q246009
Web Edition
Web Edition
Service Pack %d (Build %d)
Service Pack %d (Build %d)
Microsoft Windows NT
Microsoft Windows NT
Microsoft Windows 2000
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows XP
Microsoft Windows Server 2003,
Microsoft Windows Server 2003,
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Professional x64 Edition
Microsoft Windows Server 2003 "R2"
Microsoft Windows Server 2003 "R2"
Windows Server 2008
Windows Server 2008
Windows Vista
Windows Vista
Windows Server 2008 R2
Windows Server 2008 R2
Windows 7
Windows 7
ox-x-x-x-x-x
ox-x-x-x-x-x
\Tencent\Users\*.*
\Tencent\Users\*.*
nKERNEL32.DLL
nKERNEL32.DLL
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
WUSER32.DLL
WUSER32.DLL
!"#$%&'()* ,-.
!"#$%&'()* ,-.
uuwise.com
uuwise.com
2, 0, 0, 5
2, 0, 0, 5
1.0.0.1
1.0.0.1
!"#$%&'()* ,-
!"#$%&'()* ,-
25, 0, 0, 1
25, 0, 0, 1
Windows
Windows
s:%d MyCloseSocket
s:%d MyCloseSocket
\ZMException.txt
\ZMException.txt
addr.sa_family != AF_INET,
addr.sa_family != AF_INET,
s:%d ConnetToServer
s:%d ConnetToServer
%d.%d.%d.%d
%d.%d.%d.%d
[%d] %s
[%d] %s
\ZMApi.ini
\ZMApi.ini
Mysql
Mysql
ERROR_DATABASE_USERORPASSWORD
ERROR_DATABASE_USERORPASSWORD
ERROR_DATABASE_MYSQL_INIT
ERROR_DATABASE_MYSQL_INIT
ERROR_DATABASE_MYSQL_ERROR
ERROR_DATABASE_MYSQL_ERROR
ERROR_CUSTOMER_REPORT
ERROR_CUSTOMER_REPORT
hXXp://VVV.zhima365.com/jump/api_new_version.php
hXXp://VVV.zhima365.com/jump/api_new_version.php
hXXp://VVV.zm60.com/jump/jump_new_version.php
hXXp://VVV.zm60.com/jump/jump_new_version.php
ERROR_ANOTHER_PLACE_LOGIN
ERROR_ANOTHER_PLACE_LOGIN
ERROR_PASSWORD_EMPTY
ERROR_PASSWORD_EMPTY
ERROR_PASSWORD_ERROR
ERROR_PASSWORD_ERROR
\ZMError.ini
\ZMError.ini
%.2d.txt
%.2d.txt
%s IP %d.%d.%d.%d
%s IP %d.%d.%d.%d
%.3d.zm60.com
%.3d.zm60.com
2147516317
2147516317
\ZMConnect.ini
\ZMConnect.ini
. s:%d nPacketLen:%d
. s:%d nPacketLen:%d
%s\%.4d%.2d%.2d\%.2d\%.2d
%s\%.4d%.2d%.2d\%.2d\%.2d
xxxUpdate.exe
xxxUpdate.exe
\ZMApiUpdate.exe
\ZMApiUpdate.exe
\ZMWorkerUpdate.exe
\ZMWorkerUpdate.exe
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/xaml xml, application/x-ms-xbap, application/x-ms-application, application/vnd.ms-xpsdocument, */*
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/xaml xml, application/x-ms-xbap, application/x-ms-application, application/vnd.ms-xpsdocument, */*
AfxParseURL()
AfxParseURL()
s:%d MySend()
s:%d MySend()
: nResultLen %d
: nResultLen %d
: nPicIDLen %d
: nPicIDLen %d
PicID: %s
PicID: %s
cRecognizeState: %d
cRecognizeState: %d
Report
Report
Customer_Send_Report()
Customer_Send_Report()
: nNoticeLen %d
: nNoticeLen %d
Host: ssl.zhima365.com
Host: ssl.zhima365.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
/user/reg_user_vc .php?loginname=%s&password=%s&repassword=%s&email=%s&qq=%s&phone=%s&name=%s&softwareid=%d HTTP/1.1
/user/reg_user_vc .php?loginname=%s&password=%s&repassword=%s&email=%s&qq=%s&phone=%s&name=%s&softwareid=%d HTTP/1.1
hXXps://ssl.zhima365.com/user/reg_user_vc .php?loginname=%s&password=%s&repassword=%s&email=%s&qq=%s&phone=%s&name=%s&softwareid=%d
hXXps://ssl.zhima365.com/user/reg_user_vc .php?loginname=%s&password=%s&repassword=%s&email=%s&qq=%s&phone=%s&name=%s&softwareid=%d
11111111111
11111111111
Reg@163.com
Reg@163.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
/user/user_card_recharge.php?loginname=%s&password=%s&prepaid_card=%s&softwareid=%d HTTP/1.1
/user/user_card_recharge.php?loginname=%s&password=%s&prepaid_card=%s&softwareid=%d HTTP/1.1
hXXps://ssl.zhima365.com/user/user_card_recharge.php?loginname=%s&password=%s&prepaid_card=%s&softwareid=%d
hXXps://ssl.zhima365.com/user/user_card_recharge.php?loginname=%s&password=%s&prepaid_card=%s&softwareid=%d
/user/user_api_statistic.php?loginname=%s&password=%s HTTP/1.1
/user/user_api_statistic.php?loginname=%s&password=%s HTTP/1.1
hXXps://ssl.zhima365.com/user/user_api_statistic.php?loginname=%s&password=%s
hXXps://ssl.zhima365.com/user/user_api_statistic.php?loginname=%s&password=%s
Customer_Send_Login()
Customer_Send_Login()
nErrorCode:%d
nErrorCode:%d
IP %u
IP %u
s:%d Customer_Recv_Response_QueryBalance()
s:%d Customer_Recv_Response_QueryBalance()
: ZMApiUpdate.exe
: ZMApiUpdate.exe
ZM_QueryBalanceW() NULL == pszPassword
ZM_QueryBalanceW() NULL == pszPassword
Customer_Recv_Response_Login()
Customer_Recv_Response_Login()
s:%d Customer_Recv_Report_OK()
s:%d Customer_Recv_Report_OK()
s:%d Customer_Recv_Result()
s:%d Customer_Recv_Result()
s:%d Customer_Recv_Response_Login()
s:%d Customer_Recv_Response_Login()
s:%d Customer_Recv_Report_OK()
s:%d Customer_Recv_Report_OK()
ZM_ReByBufferW() NULL == pszPassword
ZM_ReByBufferW() NULL == pszPassword
sbtm %d
sbtm %d
nJPGSize:%d
nJPGSize:%d
nPicSize:%d
nPicSize:%d
ZM_ReByBufferW() NULL == pszSoftwareKey
ZM_ReByBufferW() NULL == pszSoftwareKey
ZM_ReByFileW() NULL == pszPassword
ZM_ReByFileW() NULL == pszPassword
ZM_ReByFileW() NULL == pszSoftwareKey
ZM_ReByFileW() NULL == pszSoftwareKey
ZM_ReByScreenW() NULL == pszPassword
ZM_ReByScreenW() NULL == pszPassword
ZM_ReByScreenW() NULL == pszSoftwareKey
ZM_ReByScreenW() NULL == pszSoftwareKey
ZM_ReportErrorW() pszPicID
ZM_ReportErrorW() pszPicID
ZM_ReportErrorW() NULL == pszPicID
ZM_ReportErrorW() NULL == pszPicID
ZM_QueryBalanceA() NULL == pszPassword
ZM_QueryBalanceA() NULL == pszPassword
ZM_ReByBufferA() NULL == pszPassword
ZM_ReByBufferA() NULL == pszPassword
ZM_ReByBufferA() NULL == pszSoftwareKey
ZM_ReByBufferA() NULL == pszSoftwareKey
ZM_ReByFileA() NULL == pszPassword
ZM_ReByFileA() NULL == pszPassword
ZM_ReByFileA() NULL == pszSoftwareKey
ZM_ReByFileA() NULL == pszSoftwareKey
ZM_ReByScreenA() NULL == pszPassword
ZM_ReByScreenA() NULL == pszPassword
ZM_ReByScreenA() NULL == pszSoftwareKey
ZM_ReByScreenA() NULL == pszSoftwareKey
ZM_ReportErrorA() pszPicID
ZM_ReportErrorA() pszPicID
ZM_ReportErrorA() NULL == pszPicID
ZM_ReportErrorA() NULL == pszPicID
\%.4d%.2d%.2d_%.2d%.2d%.2d_%s
\%.4d%.2d%.2d_%.2d%.2d%.2d_%s
WININET.DLL
WININET.DLL
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
%s.dll
%s.dll
TYPELIB\%s
TYPELIB\%s
accKeyboardShortcut
accKeyboardShortcut
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
CxImage 6.0.0
CxImage 6.0.0
!"#$%&'()* ,-./01234567
!"#$%&'()* ,-./01234567
2, 1, 1, 0
2, 1, 1, 0
All Files (*.*)
All Files (*.*)
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Disk full while accessing %1..An attempt was made to access %1 past its end.
Disk full while accessing %1..An attempt was made to access %1 past its end.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
#Unable to load mail system support.
#Unable to load mail system support.
(*.*)
(*.*)
1.0.0.0
1.0.0.0
1.0 Www.52Dfg.Com
1.0 Www.52Dfg.Com
[VVV.52dfg.com]
[VVV.52dfg.com]
%original file name%.exe_1588_rwx_00401000_0039D000:
t%SVh
t%SVh
t$(SSh
t$(SSh
~%UVW
~%UVW
u$SShe
u$SShe
ole32.dll
ole32.dll
kernel32.dll
kernel32.dll
wininet.dll
wininet.dll
oleaut32.dll
oleaut32.dll
Kernel32.dll
Kernel32.dll
user32.dll
user32.dll
ntdll.dll
ntdll.dll
UUWiseHelper.dll
UUWiseHelper.dll
dc.dll
dc.dll
ZMApi.dll
ZMApi.dll
OLEACC.DLL
OLEACC.DLL
uu_reportError
uu_reportError
uu_loginA
uu_loginA
ReportError
ReportError
ZM_ReportErrorA
ZM_ReportErrorA
CreateIoCompletionPort
CreateIoCompletionPort
{18C0788E-59AE-4112-B452-6BF0C1B727FB}
{18C0788E-59AE-4112-B452-6BF0C1B727FB}
{86AB1D8A-7995-4D86-AE5F-18710759228B}
{86AB1D8A-7995-4D86-AE5F-18710759228B}
{A068799B-7551-46b9-8CA8-EEF8357AFEA4}
{A068799B-7551-46b9-8CA8-EEF8357AFEA4}
hXXp://dfgpath.sinaapp.com/dfg/xy.txt
hXXp://dfgpath.sinaapp.com/dfg/xy.txt
hXXp://92dfg.vipsinaapp.com/code.php
hXXp://92dfg.vipsinaapp.com/code.php
WinHttp.WinHttpRequest.5.1
WinHttp.WinHttpRequest.5.1
application/x-www-form-urlencoded
application/x-www-form-urlencoded
hXXps://xui.ptlogin2.qq.com/cgi-bin/xlogin?appid=46000101&style=23&lang=&low_login=1&hide_border=1&hide_title_bar=1&hide_close_icon=1&border_radius=1&self_regurl=http://reg.t.qq.com/index.php&proxy_url=hXXp://t.qq.com/proxy_t.html&s_url=http://t.qq.com&daid=6
hXXps://xui.ptlogin2.qq.com/cgi-bin/xlogin?appid=46000101&style=23&lang=&low_login=1&hide_border=1&hide_title_bar=1&hide_close_icon=1&border_radius=1&self_regurl=http://reg.t.qq.com/index.php&proxy_url=hXXp://t.qq.com/proxy_t.html&s_url=http://t.qq.com&daid=6
login_sig:"
login_sig:"
&u1=http://t.qq.com&r=0.
&u1=http://t.qq.com&r=0.
&appid=46000101&js_ver=10114&js_type=1&login_sig=
&appid=46000101&js_ver=10114&js_type=1&login_sig=
hXXps://ssl.ptlogin2.qq.com/check?regmaster=&pt_tea=1&uin=
hXXps://ssl.ptlogin2.qq.com/check?regmaster=&pt_tea=1&uin=
hXXps://ui.ptlogin2.qq.com/cgi-bin/login?link_target=blank&f_url=loginerroralert&hide_title_bar=1&style=11&daid=196&low_login=0&appid=710032918&s_url=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&target=self?link_target=blank&f_url=loginerroralert&hide_title_bar=1&style=11&daid=196&low_login=0&appid=710032918&s_url=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&target=self
hXXps://ui.ptlogin2.qq.com/cgi-bin/login?link_target=blank&f_url=loginerroralert&hide_title_bar=1&style=11&daid=196&low_login=0&appid=710032918&s_url=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&target=self?link_target=blank&f_url=loginerroralert&hide_title_bar=1&style=11&daid=196&low_login=0&appid=710032918&s_url=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&target=self
&u1=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&r=0.
&u1=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&r=0.
&appid=710032918&js_ver=10114&js_type=1&login_sig=
&appid=710032918&js_ver=10114&js_type=1&login_sig=
hXXps://ssl.captcha.qq.com/getimage?aid=46000101&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?aid=46000101&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?aid=710032918&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?aid=710032918&cap_cd=
&js_ver=10114&js_type=1&login_sig=
&js_ver=10114&js_type=1&login_sig=
&pt_vcode_v1=0&pt_randsalt=0&u1=http://t.qq.com&ptredirect=1&h=1&t=1&g=1&from_ui=1&ptlang=2052&action=
&pt_vcode_v1=0&pt_randsalt=0&u1=http://t.qq.com&ptredirect=1&h=1&t=1&g=1&from_ui=1&ptlang=2052&action=
hXXps://ssl.ptlogin2.qq.com/login?u=
hXXps://ssl.ptlogin2.qq.com/login?u=
&mibao_css=&t=1&g=1&js_ver=10114&js_type=1&login_sig=
&mibao_css=&t=1&g=1&js_ver=10114&js_type=1&login_sig=
&aid=710032918&u1=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&h=1&ptredirect=0&ptlang=2052&daid=196&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
&aid=710032918&u1=http://bbs.lol.qq.com/member.php?mod=logging&action=loginsucc&h=1&ptredirect=0&ptlang=2052&daid=196&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
aq.qq.com
aq.qq.com
t.qq.com
t.qq.com
skey=@
skey=@
hXXp://vipfunc.qq.com/common/user.php?callback=showGrowInfoPanel&data=grow_value&g_tk=
hXXp://vipfunc.qq.com/common/user.php?callback=showGrowInfoPanel&data=grow_value&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=23314&callback=vipSignNew.signCb&cachetime=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=23314&callback=vipSignNew.signCb&cachetime=
hXXp://vipfunc.qq.com/act/client_oz.php?action=client&g_tk=
hXXp://vipfunc.qq.com/act/client_oz.php?action=client&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?actid=20656&sid=&callback=json
hXXp://iyouxi.vip.qq.com/ams.php?actid=20656&sid=&callback=json
hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=7000201&f_url=loginerroralert&s_url=http://baobao.qq.com/&qlogin_param=u1=http%3A//baobao.qq.com/&daid=50&style=11
hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=7000201&f_url=loginerroralert&s_url=http://baobao.qq.com/&qlogin_param=u1=http%3A//baobao.qq.com/&daid=50&style=11
&u1=http://baobao.qq.com/&r=0.
&u1=http://baobao.qq.com/&r=0.
&appid=7000201&js_ver=10114&js_type=1&login_sig=
&appid=7000201&js_ver=10114&js_type=1&login_sig=
hXXps://ssl.captcha.qq.com/getimage?aid=7000201&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?aid=7000201&cap_cd=
&aid=7000201&u1=http://baobao.qq.com/&h=1&ptredirect=1&ptlang=2052&daid=50&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
&aid=7000201&u1=http://baobao.qq.com/&h=1&ptredirect=1&ptlang=2052&daid=50&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
'0','0','
'0','0','
baobao.qq.com
baobao.qq.com
hXXp://cgi.baobao.qq.com/cgi-bin/pets_get_carried
hXXp://cgi.baobao.qq.com/cgi-bin/pets_get_carried
pet.seq
pet.seq
pet.avatarid
pet.avatarid
300007156
300007156
hXXp://cgi.baobao.qq.com/cgi-bin/pets_speedup
hXXp://cgi.baobao.qq.com/cgi-bin/pets_speedup
1000003
1000003
cmd=22&petID=
cmd=22&petID=
hXXp://cgi.bbly.qq.com/cgi-bin/PetHome?
hXXp://cgi.bbly.qq.com/cgi-bin/PetHome?
1001001
1001001
hXXp://minigamecgi.qq.com/cgi-bin/GameVip_SignIn?callback=jsonp
hXXp://minigamecgi.qq.com/cgi-bin/GameVip_SignIn?callback=jsonp
SignDay.day
SignDay.day
hXXp://minigamecgi.qq.com/cgi-bin/GameVip_Lottery?callback=jsonp
hXXp://minigamecgi.qq.com/cgi-bin/GameVip_Lottery?callback=jsonp
hXXp://iyouxi.vip.qq.com/json.php?mod=game&func=award&uin=
hXXp://iyouxi.vip.qq.com/json.php?mod=game&func=award&uin=
hXXp://iyouxi.vip.qq.com/jsonp.php?_c=page&actid=5474&isLoadUserInfo=1&callback=page.signInCb&g_tk=
hXXp://iyouxi.vip.qq.com/jsonp.php?_c=page&actid=5474&isLoadUserInfo=1&callback=page.signInCb&g_tk=
hXXp://iyouxi.vip.qq.com/ams2.02.php?actid=23074&g_tk_type=1&g_tk=
hXXp://iyouxi.vip.qq.com/ams2.02.php?actid=23074&g_tk_type=1&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=22249&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=22249&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=21842&g_tk=
hXXp://iyouxi.vip.qq.com/ams.php?_c=page&actid=21842&g_tk=
data.op.name
data.op.name
hXXp://x.pet.qq.com/vip_platform?cmd=set_sign_info&callback=jQuery
hXXp://x.pet.qq.com/vip_platform?cmd=set_sign_info&callback=jQuery
hXXp://mq.qq.com/index_userSignIn.shtml?r=0.
hXXp://mq.qq.com/index_userSignIn.shtml?r=0.
hXXp://mq.qq.com/activity/badgepk10_qiandao.shtml?r=0.
hXXp://mq.qq.com/activity/badgepk10_qiandao.shtml?r=0.
&apiType=14&apiHost=http://api.t.qq.com&g_tk=
&apiType=14&apiHost=http://api.t.qq.com&g_tk=
hXXp://vip.t.qq.com/ajax/toAcceptMbrTaskPrize
hXXp://vip.t.qq.com/ajax/toAcceptMbrTaskPrize
&apiType=9&apiHost=http://api.t.qq.com&g_tk=
&apiType=9&apiHost=http://api.t.qq.com&g_tk=
hXXp://shop.t.qq.com/asyn/apiSignIn.php
hXXp://shop.t.qq.com/asyn/apiSignIn.php
hXXp://flower.qzone.qq.com/fcg-bin/cgi_plant?g_tk=
hXXp://flower.qzone.qq.com/fcg-bin/cgi_plant?g_tk=
&newflower=1&outCharset=utf-8&g_tk=
&newflower=1&outCharset=utf-8&g_tk=
hXXp://flower.qzone.qq.com/cgi-bin/cgi_pickup_oldfruit?g_tk=
hXXp://flower.qzone.qq.com/cgi-bin/cgi_pickup_oldfruit?g_tk=
&outCharset=utf-8&fupdate=1&format=json
&outCharset=utf-8&fupdate=1&format=json
mode=1&g_tk=
mode=1&g_tk=
data.count
data.count
hXXp://flower.qzone.qq.com/cgi-bin/cgi_show_userprop?p=0.
hXXp://flower.qzone.qq.com/cgi-bin/cgi_show_userprop?p=0.
].name
].name
data.prop[
data.prop[
hXXp://flower.qzone.qq.com/cgi-bin/cgi_exchange_prop?g_tk=
hXXp://flower.qzone.qq.com/cgi-bin/cgi_exchange_prop?g_tk=
&qzreferrer=http://rc.qzone.qq.com/appstore/dailycoupon?from=appstore.myInfoBoxBtn&fupdate=1
&qzreferrer=http://rc.qzone.qq.com/appstore/dailycoupon?from=appstore.myInfoBoxBtn&fupdate=1
qzreferrer=http://ctc.qzs.qq.com/qzone/flower/tool.html#&op_uin=
qzreferrer=http://ctc.qzs.qq.com/qzone/flower/tool.html#&op_uin=
frameElement.callback(
frameElement.callback(
hXXp://flower.qzone.qq.com/cgi-bin/cgi_use_mallprop?g_tk=
hXXp://flower.qzone.qq.com/cgi-bin/cgi_use_mallprop?g_tk=
qzreferrer=http://ctc.qzs.qq.com/qzone/flower/tool.html#&propid=7&op_uin=
qzreferrer=http://ctc.qzs.qq.com/qzone/flower/tool.html#&propid=7&op_uin=
&p=9B9303440358DDF85AB6EBB1DACFAC7B&pt_rsa=0&ptlang=2052&low_login_enable=0&u1=http://connect.qq.com&from_ui=1&fp=loginerroralert&device=2&aid=716027609&pt_3rd_aid=100689805&ptredirect=1&h=1&g=1&pt_uistyle=35&
&p=9B9303440358DDF85AB6EBB1DACFAC7B&pt_rsa=0&ptlang=2052&low_login_enable=0&u1=http://connect.qq.com&from_ui=1&fp=loginerroralert&device=2&aid=716027609&pt_3rd_aid=100689805&ptredirect=1&h=1&g=1&pt_uistyle=35&
hXXps://ssl.ptlogin2.qq.com/pt_open_login?openlogin_data=which=ConfirmPage&refer_cgi=m_authorize&response_type=token&client_id=100689805&state=&display=mobile&openapi=%23&switch=1&src=1&sdkv=1.7&sdkp=a&tid=1403309181&pf=openmobile_android&need_pay=1&browser=0&browser_error=&serial=&token_key=&redirect_uri=auth%3A%2F%2Ftauth.qq.com%2F&sign=&time=7&status_version=10&status_os=2.3.4&status_machine=GT-I9100&page_type=1&has_auth=0&update_auth=0&auth_time=1403309114279&skey_token=
hXXps://ssl.ptlogin2.qq.com/pt_open_login?openlogin_data=which=ConfirmPage&refer_cgi=m_authorize&response_type=token&client_id=100689805&state=&display=mobile&openapi=%23&switch=1&src=1&sdkv=1.7&sdkp=a&tid=1403309181&pf=openmobile_android&need_pay=1&browser=0&browser_error=&serial=&token_key=&redirect_uri=auth%3A%2F%2Ftauth.qq.com%2F&sign=&time=7&status_version=10&status_os=2.3.4&status_machine=GT-I9100&page_type=1&has_auth=0&update_auth=0&auth_time=1403309114279&skey_token=
Referer: hXXp://qzs.qq.com/open/connect/widget/mobile/login/proxy.htm?
Referer: hXXp://qzs.qq.com/open/connect/widget/mobile/login/proxy.htm?
X-Requested-With: com.tencent.peng
X-Requested-With: com.tencent.peng
redirect_uri_key=
redirect_uri_key=
hXXp://cgi.connect.qq.com/report/mstat/report?data=[{"ky":"AH46I8G5IHWE","ui":"{ui}","et":1000,"ts":1427777715,"ei":"LoginPageViews","du":1,"kv":{"Platform":"pc","Appid":"100689805","UIN":0,"Entrance":"PC","Time":4929,"SDK":"pc,2.5","Ext1":"nologin"}}]
hXXp://cgi.connect.qq.com/report/mstat/report?data=[{"ky":"AH46I8G5IHWE","ui":"{ui}","et":1000,"ts":1427777715,"ei":"LoginPageViews","du":1,"kv":{"Platform":"pc","Appid":"100689805","UIN":0,"Entrance":"PC","Time":4929,"SDK":"pc,2.5","Ext1":"nologin"}}]
hXXps://openmobile.qq.com/oauth2.0/m_get_redirect_url?keystr=
hXXps://openmobile.qq.com/oauth2.0/m_get_redirect_url?keystr=
101.226.129.156
101.226.129.156
ÿffffff-ca54-2835-3955-ea3326c7be23
ÿffffff-ca54-2835-3955-ea3326c7be23
1.0.2.0
1.0.2.0
2.3.4
2.3.4
hXXp://fight.pet.qq.com/cgi-bin/petpk?cmd=award&op=1&type=0
hXXp://fight.pet.qq.com/cgi-bin/petpk?cmd=award&op=1&type=0
ContinueLogin
ContinueLogin
hXXp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=&appid=7000201¶m=u1%3Dhttp%253A%2F%2Fmeigui.qq.com%2F&s_url=http%3A%2F%2Fmeigui.qq.com%2F&mibao_css=&low_login=0&daid=49&style=11&authParamUrl=&needVip=1&ptui_version=10114
hXXp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=&appid=7000201¶m=u1%3Dhttp%253A%2F%2Fmeigui.qq.com%2F&s_url=http%3A%2F%2Fmeigui.qq.com%2F&mibao_css=&low_login=0&daid=49&style=11&authParamUrl=&needVip=1&ptui_version=10114
&u1=http://meigui.qq.com/&r=0.
&u1=http://meigui.qq.com/&r=0.
hXXps://ssl.captcha.qq.com/getimage?&aid=7000201&cap_cd=
hXXps://ssl.captcha.qq.com/getimage?&aid=7000201&cap_cd=
&aid=7000201&u1=http://meigui.qq.com/&h=1&ptredirect=1&ptlang=2052&daid=49&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
&aid=7000201&u1=http://meigui.qq.com/&h=1&ptredirect=1&ptlang=2052&daid=49&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=
hXXp://cgi.meigui.qq.com/cgi-bin/rosary_activity_oper?gprand=0.
hXXp://cgi.meigui.qq.com/cgi-bin/rosary_activity_oper?gprand=0.
request=2&cmd=15&cgiVersion=36&paytype=1&benew0908=1
request=2&cmd=15&cgiVersion=36&paytype=1&benew0908=1
p_skey
p_skey
hXXp://fcg.3366.com/fcg-bin/growinfo/mgp_growinfo_signin?&_r=
hXXp://fcg.3366.com/fcg-bin/growinfo/mgp_growinfo_signin?&_r=
hXXp://appstore.qzone.qq.com/cgi-bin/comm/appstore_qq_icon?uin=
hXXp://appstore.qzone.qq.com/cgi-bin/comm/appstore_qq_icon?uin=
hXXp://appact.qzone.qq.com/appstore_activity_appinner_fusionapi?uin=
hXXp://appact.qzone.qq.com/appstore_activity_appinner_fusionapi?uin=
hXXp://appact.qzone.qq.com/appstore_activity_dailysign?uin=
hXXp://appact.qzone.qq.com/appstore_activity_dailysign?uin=
data.gold['5'].flag
data.gold['5'].flag
data.gold['5'].reward_name
data.gold['5'].reward_name
hXXps://ssl.captcha.qq.com/getimage?aid=1600000110&r=0.
hXXps://ssl.captcha.qq.com/getimage?aid=1600000110&r=0.
data.gold['5'].act_id
data.gold['5'].act_id
data.gold['5'].gift_id
data.gold['5'].gift_id
data.reward_detail
data.reward_detail
data.gold['10'].flag
data.gold['10'].flag
data.gold['10'].reward_name
data.gold['10'].reward_name
data.gold['10'].act_id
data.gold['10'].act_id
data.gold['10'].gift_id
data.gold['10'].gift_id
data.gold['15'].flag
data.gold['15'].flag
data.gold['15'].reward_name
data.gold['15'].reward_name
data.gold['15'].act_id
data.gold['15'].act_id
data.gold['15'].gift_id
data.gold['15'].gift_id
data.gold['20'].flag
data.gold['20'].flag
data.gold['20'].reward_name
data.gold['20'].reward_name
data.gold['20'].act_id
data.gold['20'].act_id
data.gold['20'].gift_id
data.gold['20'].gift_id
hXXp://appact.qzone.qq.com/appstore_activity_new_userinfo?uin=
hXXp://appact.qzone.qq.com/appstore_activity_new_userinfo?uin=
hXXp://appact.qzone.qq.com/appstore_activity_daily_lottery?uin=
hXXp://appact.qzone.qq.com/appstore_activity_daily_lottery?uin=
&canvastype=&from=appstore.myInfoBoxBtn&uin=
&canvastype=&from=appstore.myInfoBoxBtn&uin=
&pfid=2&qz_ver=8&appcanvas=0&qz_style=31¶ms=dailycoupon&entertime=
&pfid=2&qz_ver=8&appcanvas=0&qz_style=31¶ms=dailycoupon&entertime=
qzreferrer=http://appstore.qzone.qq.com/cgi-bin/qzapps/qz_appstore_home_v4?uin=
qzreferrer=http://appstore.qzone.qq.com/cgi-bin/qzapps/qz_appstore_home_v4?uin=
data.name
data.name
&low_login=1&uin=
&low_login=1&uin=
hXXp://pay.video.qq.com/fcgi-bin/sign?callback=jQuery111006800204519842937_
hXXp://pay.video.qq.com/fcgi-bin/sign?callback=jQuery111006800204519842937_
result.msg
result.msg
hXXp://activity.qzone.qq.com/cgi-bin/v2/fcg_accept_act_prize?g_tk=
hXXp://activity.qzone.qq.com/cgi-bin/v2/fcg_accept_act_prize?g_tk=
%y-%m-%d
%y-%m-%d
&remark=我就是æÂ¥ç¾到的
&remark=我就是æÂ¥ç¾到的
hXXp://c.pc.qq.com/fcgi-bin/signin?callback=jsonp
hXXp://c.pc.qq.com/fcgi-bin/signin?callback=jsonp
&data={"req_header":{"cmd":17004,"appid":30013,"version":2,"major_version":2},"req_body":{"ReqMsg_body":{"weiyun.WeiyunDailySignInMsgReq_body":{}}}}&callback=jsonp2
&data={"req_header":{"cmd":17004,"appid":30013,"version":2,"major_version":2},"req_body":{"ReqMsg_body":{"weiyun.WeiyunDailySignInMsgReq_body":{}}}}&callback=jsonp2
hXXp://web2.cgi.weiyun.com/weiyun_activity.fcg?cmd =17004&g_tk=
hXXp://web2.cgi.weiyun.com/weiyun_activity.fcg?cmd =17004&g_tk=
rsp_header.retcode
rsp_header.retcode
hXXp://account.book.qq.com/usercenter/index.html
hXXp://account.book.qq.com/usercenter/index.html
hXXp://account.book.qq.com
hXXp://account.book.qq.com
X-Requested-With: XMLHttpRequest
X-Requested-With: XMLHttpRequest
Referer: hXXp://account.book.qq.com/usercenter/index.html
Referer: hXXp://account.book.qq.com/usercenter/index.html
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
hXXp://account.book.qq.com/usercenter/signin.html
hXXp://account.book.qq.com/usercenter/signin.html
hXXp://cgi.im.qq.com/cgi-bin/cgi_svrtime
hXXp://cgi.im.qq.com/cgi-bin/cgi_svrtime
hXXp://checkin.qq.com/json.php?mod=home&act=getcalendar&month=
hXXp://checkin.qq.com/json.php?mod=home&act=getcalendar&month=
].create_time
].create_time
hXXp://snsapp.qzone.qq.com/cgi-bin/signin/checkin_cgi_read?version=1&more_info_length=10&is_need_rank=1&plattype=1&r=0.
hXXp://snsapp.qzone.qq.com/cgi-bin/signin/checkin_cgi_read?version=1&more_info_length=10&is_need_rank=1&plattype=1&r=0.
data.seal_info.seal_info['1'][0].post_proxy
data.seal_info.seal_info['1'][0].post_proxy
data.seal_info.seal_info['1'][0].id
data.seal_info.seal_info['1'][0].id
hXXp://login.52dfg.com/xinxi/shuoshuo/getss.php?type=
hXXp://login.52dfg.com/xinxi/shuoshuo/getss.php?type=
hXXp://snsapp.qzone.qq.com/cgi-bin/signin/checkin_cgi_publish?g_tk=
hXXp://snsapp.qzone.qq.com/cgi-bin/signin/checkin_cgi_publish?g_tk=
qzreferrer=http://ctc.qzs.qq.com/qzone/app/checkin_v4/html/checkin.html#id=0&groupId=0&nofeeds=0&ref=checkin_button&to=ICONVIEW&plattype=1&hostuin=
qzreferrer=http://ctc.qzs.qq.com/qzone/app/checkin_v4/html/checkin.html#id=0&groupId=0&nofeeds=0&ref=checkin_button&to=ICONVIEW&plattype=1&hostuin=
Referer: hXXp://ctc.qzs.qq.com/qzone/app/checkin_v4/html/checkin.html
Referer: hXXp://ctc.qzs.qq.com/qzone/app/checkin_v4/html/checkin.html
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
hXXp://social.minigame.qq.com/cgi-bin/social/mission_operate?cmd=3&missionid=3&DomainID=207&g_tk=
hXXp://social.minigame.qq.com/cgi-bin/social/mission_operate?cmd=3&missionid=3&DomainID=207&g_tk=
hXXp://iyouxi.vip.qq.com/ams3.0.php?g_tk=
hXXp://iyouxi.vip.qq.com/ams3.0.php?g_tk=
Referer: hXXp://youxi.vip.qq.com/m/wallet/activeday/index.html?_wv=3&pvsrc=101
Referer: hXXp://youxi.vip.qq.com/m/wallet/activeday/index.html?_wv=3&pvsrc=101
User-Agent: Mozilla/5.0 (Linux; U; Android 2.3.4; zh-cn; Lan998 Build/GRJ22) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1 V1_AND_SQ_5.2.1_183_YYB_D QQ/5.2.1.2305 NetType/WIFI
User-Agent: Mozilla/5.0 (Linux; U; Android 2.3.4; zh-cn; Lan998 Build/GRJ22) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1 V1_AND_SQ_5.2.1_183_YYB_D QQ/5.2.1.2305 NetType/WIFI
hXXp://3gimg.qq.com/mig-web/2014/market/qbtequan/js/app/sidebar.js?20140211
hXXp://3gimg.qq.com/mig-web/2014/market/qbtequan/js/app/sidebar.js?20140211
giftPostData.maid = '
giftPostData.maid = '
User-Agent:Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; QQBrowser/8.0.3345.400)
User-Agent:Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; QQBrowser/8.0.3345.400)
hXXp://tq.qq.com/newapi/signon/signon.s
hXXp://tq.qq.com/newapi/signon/signon.s
'].count
'].count
userSign.monthSigns['
userSign.monthSigns['
hXXp://share.music.qq.com/fcgi-bin/dmrp_activity/fcg_feedback_send_lottery.fcg?activeid=110&rnd=
hXXp://share.music.qq.com/fcgi-bin/dmrp_activity/fcg_feedback_send_lottery.fcg?activeid=110&rnd=
data.alreadysend
data.alreadysend
hXXp://92wg.vipsinaapp.com/getword.php?softname=QS
hXXp://92wg.vipsinaapp.com/getword.php?softname=QS
hXXp://ncgi.video.qq.com/tvideo/fcgi-bin/autolot?otype=json&g_tk=
hXXp://ncgi.video.qq.com/tvideo/fcgi-bin/autolot?otype=json&g_tk=
skey
skey
&skey=
&skey=
.html&gid=1&gv=
.html&gid=1&gv=
&appid=http://film.qq.com/topic/2014/wsdym
&appid=http://film.qq.com/topic/2014/wsdym
.html&t=2&pageid=
.html&t=2&pageid=
qzreferrer=http://film.qq.com/topic/2014/wsdym
qzreferrer=http://film.qq.com/topic/2014/wsdym
.html&uin=
.html&uin=
.html&t=3&pageid=
.html&t=3&pageid=
result.code
result.code
data.level
data.level
data.num
data.num
hXXps://ssl.captcha.qq.com/getimage?aid=3000501&rnd=
hXXps://ssl.captcha.qq.com/getimage?aid=3000501&rnd=
hXXp://qzs.qq.com/qzone/mall/app/vip_reward/index.html
hXXp://qzs.qq.com/qzone/mall/app/vip_reward/index.html
hXXp://activity.qzone.qq.com/fcg-bin/fcg_qzact_count?g_tk=
hXXp://activity.qzone.qq.com/fcg-bin/fcg_qzact_count?g_tk=
hXXp://activity.qzone.qq.com/fcg-bin/fcg_qzact_lottery?g_tk=
hXXp://activity.qzone.qq.com/fcg-bin/fcg_qzact_lottery?g_tk=
&qzreferrer=http://qzs.qq.com/qzone/qzact/act/hkhd/index.html
&qzreferrer=http://qzs.qq.com/qzone/qzact/act/hkhd/index.html
data[0].name
data[0].name
data[0].count
data[0].count
hXXp://iyouxi.vip.qq.com/ams3.0.php?_c=page&actid=
hXXp://iyouxi.vip.qq.com/ams3.0.php?_c=page&actid=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=2000013&g_tk=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=2000013&g_tk=
@TASK.RET
@TASK.RET
TASK.RESULT.level
TASK.RESULT.level
hXXp://king.qq.com/lb.html
hXXp://king.qq.com/lb.html
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=3000013&g_tk=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=3000013&g_tk=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=5000013&g_tk=
hXXp://pf.vip.qq.com/common/vframe1.1.php?&id=5000013&g_tk=
hXXp://vip.qq.com/clubact/2015/svip8/index.html
hXXp://vip.qq.com/clubact/2015/svip8/index.html
hXXp://92wg.vipsinaapp.com/2.php
hXXp://92wg.vipsinaapp.com/2.php
\QQ.ini
\QQ.ini
@MSScriptControl.ScriptControl
@MSScriptControl.ScriptControl
while (z aD
while (z aD
t = aC.substring(z, z aD) "\n";
t = aC.substring(z, z aD) "\n";
return t aC.substring(z, aC.length)
return t aC.substring(z, aC.length)
return "0" t.toString(16)
return "0" t.toString(16)
return t.toString(16)
return t.toString(16)
if (aG
if (aG
var aC = aD.length - 1;
var aC = aD.length - 1;
var aE = aD.charCodeAt(aC--);
var aE = aD.charCodeAt(aC--);
z.nextBytes(t)
z.nextBytes(t)
this.dmp1 = null;
this.dmp1 = null;
this.dmq1 = null;
this.dmq1 = null;
this.coeff = null
this.coeff = null
if (z != null && t != null && z.length > 0 && t.length > 0) {
if (z != null && t != null && z.length > 0 && t.length > 0) {
uv_alert("Invalid RSA public key")
uv_alert("Invalid RSA public key")
return t.modPowInt(this.e, this.n)
return t.modPowInt(this.e, this.n)
var t = ah(aC, (this.n.bitLength() 7) >> 3);
var t = ah(aC, (this.n.bitLength() 7) >> 3);
var aD = this.doPublic(t);
var aD = this.doPublic(t);
var z = aD.toString(16);
var z = aD.toString(16);
if ((z.length & 1) == 0) {
if ((z.length & 1) == 0) {
N.prototype.doPublic = Y;
N.prototype.doPublic = Y;
N.prototype.setPublic = q;
N.prototype.setPublic = q;
N.prototype.encrypt = r;
N.prototype.encrypt = r;
this.fromNumber(z, t, aC)
this.fromNumber(z, t, aC)
this.fromString(z, 256)
this.fromString(z, 256)
this.fromString(z, t)
this.fromString(z, t)
aG = Math.floor(aC / 67108864);
aG = Math.floor(aC / 67108864);
au.prototype.am = aA;
au.prototype.am = aA;
au.prototype.DB = ay;
au.prototype.DB = ay;
au.prototype.DM = ((1
au.prototype.DM = ((1
au.prototype.DV = (1
au.prototype.DV = (1
au.prototype.FV = Math.pow(2, ac);
au.prototype.FV = Math.pow(2, ac);
au.prototype.F1 = ac - ay;
au.prototype.F1 = ac - ay;
au.prototype.F2 = 2 * ay - ac;
au.prototype.F2 = 2 * ay - ac;
ar = "0".charCodeAt(0);
ar = "0".charCodeAt(0);
ar = "a".charCodeAt(0);
ar = "a".charCodeAt(0);
ar = "A".charCodeAt(0);
ar = "A".charCodeAt(0);
return ag.charAt(t)
return ag.charAt(t)
var aC = ai[z.charCodeAt(t)];
var aC = ai[z.charCodeAt(t)];
z.fromInt(t);
z.fromInt(t);
this.fromRadix(aG, z);
this.fromRadix(aG, z);
var aF = aG.length,
var aF = aG.length,
if (aG.charAt(aF) == "-") {
if (aG.charAt(aF) == "-") {
if (aE aD > this.DB) {
if (aE aD > this.DB) {
this[this.t - 1] |= (t & ((1
this[this.t - 1] |= (t & ((1
this[this.t ] = (t >> (this.DB - aE))
this[this.t ] = (t >> (this.DB - aE))
if (aE >= this.DB) {
if (aE >= this.DB) {
aE -= this.DB
aE -= this.DB
this[this.t - 1] |= ((1
this[this.t - 1] |= ((1
this.clamp();
this.clamp();
au.ZERO.subTo(this, this)
au.ZERO.subTo(this, this)
var t = this.s & this.DM;
var t = this.s & this.DM;
return "-" this.negate().toString(z)
return "-" this.negate().toString(z)
return this.toRadix(z)
return this.toRadix(z)
var aG = this.DB - (aD * this.DB) % aC;
var aG = this.DB - (aD * this.DB) % aC;
if (aG > aG) > 0) {
if (aG > aG) > 0) {
aH |= this[--aD] >> (aG = this.DB - aC)
aH |= this[--aD] >> (aG = this.DB - aC)
aG = this.DB; --aD
aG = this.DB; --aD
au.ZERO.subTo(this, t);
au.ZERO.subTo(this, t);
return (this.s
return (this.s
return this.DB * (this.t - 1) l(this[this.t - 1] ^ (this.s & this.DM))
return this.DB * (this.t - 1) l(this[this.t - 1] ^ (this.s & this.DM))
z.t = Math.max(this.t - aC, 0);
z.t = Math.max(this.t - aC, 0);
var z = aH % this.DB;
var z = aH % this.DB;
var t = this.DB - z;
var t = this.DB - z;
var aE = Math.floor(aH / this.DB),
var aE = Math.floor(aH / this.DB),
aG = (this.s
aG = (this.s
aD.clamp()
aD.clamp()
var aE = Math.floor(aG / this.DB);
var aE = Math.floor(aG / this.DB);
var z = aG % this.DB;
var z = aG % this.DB;
t = Math.min(z.t, this.t);
t = Math.min(z.t, this.t);
aD[aC ] = aE & this.DM;
aD[aC ] = aE & this.DM;
aE >>= this.DB
aE >>= this.DB
aD[aC ] = aE & this.DM;
aD[aC ] = aE & this.DM;
aE >>= this.DB
aE >>= this.DB
aD[aC ] = this.DV aE
aD[aC ] = this.DV aE
var t = this.abs(),
var t = this.abs(),
aE = z.abs();
aE = z.abs();
aD[aC t.t] = t.am(0, aE[aC], aD, aC, 0, t.t)
aD[aC t.t] = t.am(0, aE[aC], aD, aC, 0, t.t)
aD.clamp();
aD.clamp();
au.ZERO.subTo(aD, aD)
au.ZERO.subTo(aD, aD)
var t = this.abs();
var t = this.abs();
var aD = t.am(z, t[z], aC, 2 * z, 0, 1);
var aD = t.am(z, t[z], aC, 2 * z, 0, 1);
if ((aC[z t.t] = t.am(z 1, 2 * t[z], aC, 2 * z 1, aD, t.t - z - 1)) >= t.DV) {
if ((aC[z t.t] = t.am(z 1, 2 * t[z], aC, 2 * z 1, aD, t.t - z - 1)) >= t.DV) {
aC[z t.t] -= t.DV;
aC[z t.t] -= t.DV;
aC[aC.t - 1] = t.am(z, t[z], aC, 2 * z, 0, 1)
aC[aC.t - 1] = t.am(z, t[z], aC, 2 * z, 0, 1)
aC.clamp()
aC.clamp()
var aQ = aK.abs();
var aQ = aK.abs();
var aI = this.abs();
var aI = this.abs();
aH.fromInt(0)
aH.fromInt(0)
this.copyTo(aG)
this.copyTo(aG)
var aP = this.DB - l(aQ[aQ.t - 1]);
var aP = this.DB - l(aQ[aQ.t - 1]);
aQ.lShiftTo(aP, aE);
aQ.lShiftTo(aP, aE);
aI.lShiftTo(aP, aG)
aI.lShiftTo(aP, aG)
aQ.copyTo(aE);
aQ.copyTo(aE);
aI.copyTo(aG)
aI.copyTo(aG)
var aT = this.FV / aL,
var aT = this.FV / aL,
aE.dlShiftTo(aN, aF);
aE.dlShiftTo(aN, aF);
if (aG.compareTo(aF) >= 0) {
if (aG.compareTo(aF) >= 0) {
aG.subTo(aF, aG)
aG.subTo(aF, aG)
au.ONE.dlShiftTo(aM, aF);
au.ONE.dlShiftTo(aM, aF);
aF.subTo(aE, aE);
aF.subTo(aE, aE);
var aD = (aG[--aO] == aC) ? this.DM: Math.floor(aG[aO] * aT (aG[aO - 1] aR) * aS);
var aD = (aG[--aO] == aC) ? this.DM: Math.floor(aG[aO] * aT (aG[aO - 1] aR) * aS);
if ((aG[aO] = aE.am(0, aD, aG, aN, 0, aM))
if ((aG[aO] = aE.am(0, aD, aG, aN, 0, aM))
aE.dlShiftTo(aN, aF);
aE.dlShiftTo(aN, aF);
aG.subTo(aF, aG);
aG.subTo(aF, aG);
aG.subTo(aF, aG)
aG.subTo(aF, aG)
aG.drShiftTo(aM, aH);
aG.drShiftTo(aM, aH);
au.ZERO.subTo(aH, aH)
au.ZERO.subTo(aH, aH)
aG.clamp();
aG.clamp();
aG.rShiftTo(aP, aG)
aG.rShiftTo(aP, aG)
au.ZERO.subTo(aG, aG)
au.ZERO.subTo(aG, aG)
this.abs().divRemTo(t, null, z);
this.abs().divRemTo(t, null, z);
if (this.s 0) {
if (this.s 0) {
t.subTo(z, z)
t.subTo(z, z)
if (t.s = 0) {
if (t.s = 0) {
return t.mod(this.m)
return t.mod(this.m)
t.divRemTo(this.m, null, t)
t.divRemTo(this.m, null, t)
t.multiplyTo(aC, z);
t.multiplyTo(aC, z);
this.reduce(z)
this.reduce(z)
t.squareTo(z);
t.squareTo(z);
M.prototype.convert = X;
M.prototype.convert = X;
M.prototype.revert = am;
M.prototype.revert = am;
M.prototype.reduce = L;
M.prototype.reduce = L;
M.prototype.mulTo = J;
M.prototype.mulTo = J;
M.prototype.sqrTo = aw;
M.prototype.sqrTo = aw;
z = (z * (2 - t * z % this.DV)) % this.DV;
z = (z * (2 - t * z % this.DV)) % this.DV;
return (z > 0) ? this.DV - z: -z
return (z > 0) ? this.DV - z: -z
this.mp = t.invDigit();
this.mp = t.invDigit();
this.mpl = this.mp & 32767;
this.mpl = this.mp & 32767;
this.mph = this.mp >> 15;
this.mph = this.mp >> 15;
this.um = (1
this.um = (1
this.mt2 = 2 * t.t
this.mt2 = 2 * t.t
t.abs().dlShiftTo(this.m.t, z);
t.abs().dlShiftTo(this.m.t, z);
z.divRemTo(this.m, null, z);
z.divRemTo(this.m, null, z);
if (t.s 0) {
if (t.s 0) {
this.m.subTo(z, z)
this.m.subTo(z, z)
t.copyTo(z);
t.copyTo(z);
this.reduce(z);
this.reduce(z);
while (t.t
while (t.t
var aD = (z * this.mpl (((z * this.mph (t[aC] >> 15) * this.mpl) & this.um)
var aD = (z * this.mpl (((z * this.mph (t[aC] >> 15) * this.mpl) & this.um)
t[z] = this.m.am(0, aD, t, aC, 0, this.m.t);
t[z] = this.m.am(0, aD, t, aC, 0, this.m.t);
while (t[z] >= t.DV) {
while (t[z] >= t.DV) {
t[z] -= t.DV;
t[z] -= t.DV;
t.clamp();
t.clamp();
t.drShiftTo(this.m.t, t);
t.drShiftTo(this.m.t, t);
if (t.compareTo(this.m) >= 0) {
if (t.compareTo(this.m) >= 0) {
t.subTo(this.m, t)
t.subTo(this.m, t)
g.prototype.convert = al;
g.prototype.convert = al;
g.prototype.revert = av;
g.prototype.revert = av;
g.prototype.reduce = R;
g.prototype.reduce = R;
g.prototype.mulTo = B;
g.prototype.mulTo = B;
g.prototype.sqrTo = ao;
g.prototype.sqrTo = ao;
return au.ONE
return au.ONE
aF = aI.convert(this),
aF = aI.convert(this),
aF.copyTo(aG);
aF.copyTo(aG);
aI.sqrTo(aG, aC);
aI.sqrTo(aG, aC);
aI.mulTo(aC, aF, aG)
aI.mulTo(aC, aF, aG)
return aI.revert(aG)
return aI.revert(aG)
if (aC
if (aC
return this.exp(aC, aD)
return this.exp(aC, aD)
au.prototype.copyTo = aa;
au.prototype.copyTo = aa;
au.prototype.fromInt = p;
au.prototype.fromInt = p;
au.prototype.fromString = y;
au.prototype.fromString = y;
au.prototype.clamp = Q;
au.prototype.clamp = Q;
au.prototype.dlShiftTo = at;
au.prototype.dlShiftTo = at;
au.prototype.drShiftTo = Z;
au.prototype.drShiftTo = Z;
au.prototype.lShiftTo = v;
au.prototype.lShiftTo = v;
au.prototype.rShiftTo = n;
au.prototype.rShiftTo = n;
au.prototype.subTo = ad;
au.prototype.subTo = ad;
au.prototype.multiplyTo = F;
au.prototype.multiplyTo = F;
au.prototype.squareTo = S;
au.prototype.squareTo = S;
au.prototype.divRemTo = G;
au.prototype.divRemTo = G;
au.prototype.invDigit = D;
au.prototype.invDigit = D;
au.prototype.isEven = k;
au.prototype.isEven = k;
au.prototype.exp = A;
au.prototype.exp = A;
au.prototype.toString = s;
au.prototype.toString = s;
au.prototype.negate = T;
au.prototype.negate = T;
au.prototype.abs = an;
au.prototype.abs = an;
au.prototype.compareTo = I;
au.prototype.compareTo = I;
au.prototype.bitLength = w;
au.prototype.bitLength = w;
au.prototype.mod = P;
au.prototype.mod = P;
au.prototype.modPowInt = ap;
au.prototype.modPowInt = ap;
au.ZERO = c(0);
au.ZERO = c(0);
au.ONE = c(1);
au.ONE = c(1);
d(new Date().getTime())
d(new Date().getTime())
/*if(navigator.appName=="Netscape"&&navigator.appVersion
/*if(navigator.appName=="Netscape"&&navigator.appVersion
K = Math.floor(65536 * Math.random());
K = Math.floor(65536 * Math.random());
o.init(W);
o.init(W);
for (ae = 0; ae
for (ae = 0; ae
return o.next()
return o.next()
for (t = 0; t
for (t = 0; t
af.prototype.nextBytes = ax;
af.prototype.nextBytes = ax;
z = (z this.S[aD] aE[aD % aE.length]) & 255;
z = (z this.S[aD] aE[aD % aE.length]) & 255;
m.prototype.init = f;
m.prototype.init = f;
m.prototype.next = a;
m.prototype.next = a;
t.setPublic(aC, z);
t.setPublic(aC, z);
return t.encrypt(aD)
return t.encrypt(aD)
return Math.round(Math.random() * 4294967295)
return Math.round(Math.random() * 4294967295)
for (var B = 0; B
for (var B = 0; B
var C = Number(D[B]).toString(16);
var C = Number(D[B]).toString(16);
if (C.length == 1) {
if (C.length == 1) {
for (var A = 0; A
for (var A = 0; A
C = String.fromCharCode(parseInt(B.substr(A, 2), 16))
C = String.fromCharCode(parseInt(B.substr(A, 2), 16))
for (var A = 0; A
for (var A = 0; A
B[A] = C.charCodeAt(A)
B[A] = C.charCodeAt(A)
var A = C.length;
var A = C.length;
var A = E.length;
var A = E.length;
for (var C = 0; C
for (var C = 0; C
var A = u.length;
var A = u.length;
for (var B = 0; B
for (var B = 0; B
C[B] = E.charCodeAt(B) & 255
C[B] = E.charCodeAt(B) & 255
for (var B = 0; B
for (var B = 0; B
C[A ] = parseInt(E.substr(B, 2), 16)
C[A ] = parseInt(E.substr(B, 2), 16)
for (var B = 0; B
for (var B = 0; B
A = String.fromCharCode(C[B])
A = String.fromCharCode(C[B])
return d.encode(A)
return d.encode(A)
initkey: function(A, B) {
initkey: function(A, B) {
d.PADCHAR = "=";
d.PADCHAR = "=";
d.ALPHA = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 /";
d.ALPHA = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 /";
d.getbyte = function(C, B) {
d.getbyte = function(C, B) {
var A = C.charCodeAt(B);
var A = C.charCodeAt(B);
d.encode = function(E) {
d.encode = function(E) {
if (arguments.length != 1) {
if (arguments.length != 1) {
var B = d.PADCHAR;
var B = d.PADCHAR;
var G = d.ALPHA;
var G = d.ALPHA;
var F = d.getbyte;
var F = d.getbyte;
var C = E.length - E.length % 3;
var C = E.length - E.length % 3;
if (E.length == 0) {
if (E.length == 0) {
A.push(G.charAt(H >> 18));
A.push(G.charAt(H >> 18));
A.push(G.charAt((H >> 12) & 63));
A.push(G.charAt((H >> 12) & 63));
A.push(G.charAt((H >> 6) & 63));
A.push(G.charAt((H >> 6) & 63));
A.push(G.charAt(H & 63))
A.push(G.charAt(H & 63))
switch (E.length - C) {
switch (E.length - C) {
A.push(G.charAt(H >> 18) G.charAt((H >> 12) & 63) B B);
A.push(G.charAt(H >> 18) G.charAt((H >> 12) & 63) B B);
A.push(G.charAt(H >> 18) G.charAt((H >> 12) & 63) G.charAt((H >> 6) & 63) B);
A.push(G.charAt(H >> 18) G.charAt((H >> 12) & 63) G.charAt((H >> 6) & 63) B);
return A.join("")
return A.join("")
return binl2hex(core_md5(str2binl(s), s.length * chrsz))
return binl2hex(core_md5(str2binl(s), s.length * chrsz))
return binl2str(core_md5(str2binl(s), s.length * chrsz))
return binl2str(core_md5(str2binl(s), s.length * chrsz))
function hex_hmac_md5(key, data) {
function hex_hmac_md5(key, data) {
return binl2hex(core_hmac_md5(key, data))
return binl2hex(core_hmac_md5(key, data))
function b64_hmac_md5(key, data) {
function b64_hmac_md5(key, data) {
return binl2b64(core_hmac_md5(key, data))
return binl2b64(core_hmac_md5(key, data))
function str_hmac_md5(key, data) {
function str_hmac_md5(key, data) {
return binl2str(core_hmac_md5(key, data))
return binl2str(core_hmac_md5(key, data))
for (var i = 0; i
for (var i = 0; i
function core_hmac_md5(key, data) {
function core_hmac_md5(key, data) {
var bkey = str2binl(key);
var bkey = str2binl(key);
if (bkey.length > 16) {
if (bkey.length > 16) {
bkey = core_md5(bkey, key.length * chrsz)
bkey = core_md5(bkey, key.length * chrsz)
ipad[i] = bkey[i] ^ 909522486;
ipad[i] = bkey[i] ^ 909522486;
opad[i] = bkey[i] ^ 1549556828
opad[i] = bkey[i] ^ 1549556828
var hash = core_md5(ipad.concat(str2binl(data)), 512 data.length * chrsz);
var hash = core_md5(ipad.concat(str2binl(data)), 512 data.length * chrsz);
return core_md5(opad.concat(hash), 512 128)
return core_md5(opad.concat(hash), 512 128)
for (var i = 0; i
for (var i = 0; i
bin[i >> 5] |= (str.charCodeAt(i / chrsz) & mask)
bin[i >> 5] |= (str.charCodeAt(i / chrsz) & mask)
for (var i = 0; i
for (var i = 0; i
str = String.fromCharCode((bin[i >> 5] >>> (i % 32)) & mask)
str = String.fromCharCode((bin[i >> 5] >>> (i % 32)) & mask)
for (var i = 0; i
for (var i = 0; i
str = hex_tab.charAt((binarray[i >> 2] >> ((i % 4) * 8 4)) & 15) hex_tab.charAt((binarray[i >> 2] >> ((i % 4) * 8)) & 15)
str = hex_tab.charAt((binarray[i >> 2] >> ((i % 4) * 8 4)) & 15) hex_tab.charAt((binarray[i >> 2] >> ((i % 4) * 8)) & 15)
for (var i = 0; i
for (var i = 0; i
if (i * 8 j * 6 > binarray.length * 32) {
if (i * 8 j * 6 > binarray.length * 32) {
str = tab.charAt((triplet >> 6 * (3 - j)) & 63)
str = tab.charAt((triplet >> 6 * (3 - j)) & 63)
for (var i = 0; i
for (var i = 0; i
arr.push("\\x" str.substr(i, 2))
arr.push("\\x" str.substr(i, 2))
arr = arr.join("");
arr = arr.join("");
if (Math.random() > (probability || 1)) {
if (Math.random() > (probability || 1)) {
var url = location.protocol "//ui.ptlogin2.qq.com/cgi-bin/report?id=" mid;
var url = location.protocol "//ui.ptlogin2.qq.com/cgi-bin/report?id=" mid;
var s = document.createElement("img");
var s = document.createElement("img");
s.src = url;
s.src = url;
function getEncryption(password, salt, vcode) {
function getEncryption(password, salt, vcode) {
var md5Pwd = md5(password),
var md5Pwd = md5(password),
rsaH1 = RSA.rsa_encrypt(h1),
rsaH1 = RSA.rsa_encrypt(h1),
rsaH1Len = (rsaH1.length / 2).toString(16),
rsaH1Len = (rsaH1.length / 2).toString(16),
hexVcode = TEA.strToBytes(vcode.toUpperCase()),
hexVcode = TEA.strToBytes(vcode.toUpperCase()),
vcodeLen = "000" vcode.length.toString(16);
vcodeLen = "000" vcode.length.toString(16);
while (rsaH1Len.length
while (rsaH1Len.length
TEA.initkey(s2);
TEA.initkey(s2);
var saltPwd = TEA.enAsBase64(rsaH1Len rsaH1 TEA.strToBytes(salt) vcodeLen hexVcode);
var saltPwd = TEA.enAsBase64(rsaH1Len rsaH1 TEA.strToBytes(salt) vcodeLen hexVcode);
TEA.initkey("");
TEA.initkey("");
return saltPwd.replace(/[\/\ =]/g,
return saltPwd.replace(/[\/\ =]/g,
"/": "-",
"/": "-",
" ": "*",
" ": "*",
"=": "_"
"=": "_"
{pass}
{pass}
getEncryption("{pass}","{salt}","{code}")
getEncryption("{pass}","{salt}","{code}")
1970-01-01 08:00:00
1970-01-01 08:00:00
a.push(b,c,d,e,f,g);
a.push(b,c,d,e,f,g);
a.push(b,c,d,e,f);
a.push(b,c,d,e,f);
HTTP/1.1
HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; qdesk 2.5.1277.202; Windows NT 6.1; WOW64; Trident/6.0; QQBrowser/7.7.28658.400)
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; qdesk 2.5.1277.202; Windows NT 6.1; WOW64; Trident/6.0; QQBrowser/7.7.28658.400)
hXXps://
hXXps://
hXXp://
hXXp://
https
https
return'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g,function(c){
return'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g,function(c){
var r=Math.random()*16|0,v=c=='x'?r:(r&0x3|0x8);
var r=Math.random()*16|0,v=c=='x'?r:(r&0x3|0x8);
return v.toString(16);
return v.toString(16);
}).toUpperCase();
}).toUpperCase();
FB6BD4FB-5175-477D-A66C-121252F39935
FB6BD4FB-5175-477D-A66C-121252F39935
hXXp://api.ruokuai.com/register.xml
hXXp://api.ruokuai.com/register.xml
hXXp://api.ruokuai.com/info.xml
hXXp://api.ruokuai.com/info.xml
hXXp://api.ruokuai.com/recharge.xml
hXXp://api.ruokuai.com/recharge.xml
hXXp://api.ruokuai.com/create.xml
hXXp://api.ruokuai.com/create.xml
hXXp://api.ruokuai.com/reporterror.xml
hXXp://api.ruokuai.com/reporterror.xml
function get__key(o) {
function get__key(o) {
a.push(i);
a.push(i);
//return JSON.stringify(jsonobj);
//return JSON.stringify(jsonobj);
if (Object.prototype.toString.apply(O) === '[object Array]') {
if (Object.prototype.toString.apply(O) === '[object Array]') {
for (var i = 0; i
for (var i = 0; i
S.push(O2String(O[i]));
S.push(O2String(O[i]));
J = '[' S.join(',') ']';
J = '[' S.join(',') ']';
else if (Object.prototype.toString.apply(O) === '[object String]') {
else if (Object.prototype.toString.apply(O) === '[object String]') {
J = '"' O.replace(/"/g,"\\\"").replace(/\r/g,"\\r").replace(/\n/g,"\\n") '"';
J = '"' O.replace(/"/g,"\\\"").replace(/\r/g,"\\r").replace(/\n/g,"\\n") '"';
else if (Object.prototype.toString.apply(O) === '[object Number]') {
else if (Object.prototype.toString.apply(O) === '[object Number]') {
else if (Object.prototype.toString.apply(O) === '[object Date]') {
else if (Object.prototype.toString.apply(O) === '[object Date]') {
J = "new Date(" O.getTime() ")";
J = "new Date(" O.getTime() ")";
else if (Object.prototype.toString.apply(O) === '[object RegExp]' || Object.prototype.toString.apply(O) === '[object Function]') {
else if (Object.prototype.toString.apply(O) === '[object RegExp]' || Object.prototype.toString.apply(O) === '[object Function]') {
J = O.toString();
J = O.toString();
else if (Object.prototype.toString.apply(O) === '[object Object]') {
else if (Object.prototype.toString.apply(O) === '[object Object]') {
t = typeof (O[i]) == 'string' ? '"' O[i].replace(/"/g,"\\\"").replace(/\r/g,"\\r").replace(/\n/g,"\\n") '"' : (typeof (O[i]) === 'object' ? O2String(O[i]) : O[i]);
t = typeof (O[i]) == 'string' ? '"' O[i].replace(/"/g,"\\\"").replace(/\r/g,"\\r").replace(/\n/g,"\\n") '"' : (typeof (O[i]) === 'object' ? O2String(O[i]) : O[i]);
S.push(i ':' t);
S.push(i ':' t);
J = '{' S.join(',') '}';
J = '{' S.join(',') '}';
T@\*.dfg
T@\*.dfg
cmd /c regsvr32 msscript.ocx jscript.dll vbscript.dll /s
cmd /c regsvr32 msscript.ocx jscript.dll vbscript.dll /s
hXXp://92wg.sinaapp.com/softtj.php?act=add&softname=QS
hXXp://92wg.sinaapp.com/softtj.php?act=add&softname=QS
hXXp://92wg.sinaapp.com/getupdata.php?act=getver&wgname=QS
hXXp://92wg.sinaapp.com/getupdata.php?act=getver&wgname=QS
hXXp://92wg.vipsinaapp.com/softtj.php?act=add&softname=QS
hXXp://92wg.vipsinaapp.com/softtj.php?act=add&softname=QS
hXXp://92wg.vipsinaapp.com/getupdata.php?act=getver&wgname=QS
hXXp://92wg.vipsinaapp.com/getupdata.php?act=getver&wgname=QS
hXXp://VVV.52dfg.com/forum-40-1.html?wb11
hXXp://VVV.52dfg.com/forum-40-1.html?wb11
/QQ.ini
/QQ.ini
hXXp://VVV.52dfg.com
hXXp://VVV.52dfg.com
bashengpass
bashengpass
{0:3,1:1,2:3,3:0,4:2}
{0:3,1:1,2:3,3:0,4:2}
hXXp://w666666.sinaapp.com/dfg/gongao.txt
hXXp://w666666.sinaapp.com/dfg/gongao.txt
g@\Error.log
g@\Error.log
%y-%m-%d
%y-%m-%d
%y/%m/%d
%y/%m/%d
hXXp://imgcache.gtimg.cn/ACT/vip_act/act_data/28302.json.js
hXXp://imgcache.gtimg.cn/ACT/vip_act/act_data/28302.json.js
[[0,1,2,3],[4,5,6,7],[8,9,10,11]]
[[0,1,2,3],[4,5,6,7],[8,9,10,11]]
hXXp://login.52dfg.com/online.php
hXXp://login.52dfg.com/online.php
hXXp://dfgpath.sinaapp.com/dfg/gonggao.txt
hXXp://dfgpath.sinaapp.com/dfg/gonggao.txt
hXXp://dfgpath.vipsinaapp.com/dfg/gonggao.txt
hXXp://dfgpath.vipsinaapp.com/dfg/gonggao.txt
].txt
].txt
].url
].url
hXXp://w666666.sinaapp.com/dfg/y.php
hXXp://w666666.sinaapp.com/dfg/y.php
.exew666666.vipsinaapp.com/dfg/y.php
.exew666666.vipsinaapp.com/dfg/y.php
hXXps://w666666.sinaapp.com/dfg/x.php?m=1
hXXps://w666666.sinaapp.com/dfg/x.php?m=1
httphXXps://w666666.vipsinaapp.com/dfg/x.php?m=1
httphXXps://w666666.vipsinaapp.com/dfg/x.php?m=1
hXXps://w666666.sinaapp.com/dfg/x.php?m=3
hXXps://w666666.sinaapp.com/dfg/x.php?m=3
hXXps://w666666.vipsinaapp.com/dfg/x.php?m=3
hXXps://w666666.vipsinaapp.com/dfg/x.php?m=3
\Application Data\Microsoft\Internet Explorer\Quick Launch\*.lnk
\Application Data\Microsoft\Internet Explorer\Quick Launch\*.lnk
http\shell\open\command\Shell.Application
http\shell\open\command\Shell.Application
QQBrowser.exe
QQBrowser.exe
hXXps://login.52dfg.com/kg/gogo.php
hXXps://login.52dfg.com/kg/gogo.php
-02:00:00
-02:00:00
Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko QQBrowser/8.1.3700.400
Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko QQBrowser/8.1.3700.400
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36 SE 2.X MetaSr 1.0
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36 SE 2.X MetaSr 1.0
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.101 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.101 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
*.txt
*.txt
|*.txt
|*.txt
hXXp://92dfg.vipsinaapp.com/ly.php
hXXp://92dfg.vipsinaapp.com/ly.php
hXXp://w666666.sinaapp.com/dfg/qun.txt
hXXp://w666666.sinaapp.com/dfg/qun.txt
hXXp://VVV.sz789.net/reg.aspx
hXXp://VVV.sz789.net/reg.aspx
hXXp://VVV.uudama.com/userReg.html
hXXp://VVV.uudama.com/userReg.html
hXXp://VVV.ruokuai.com/home/register
hXXp://VVV.ruokuai.com/home/register
hXXp://VVV.zhima365.com/userreg.php
hXXp://VVV.zhima365.com/userreg.php
&url=
&url=
VBScript.RegExp
VBScript.RegExp
hXXp://top.baidu.comw *= *(\S )["']
hXXp://top.baidu.comw *= *(\S )["']
hXXp://VVV.baidu.com/s?word=
hXXp://VVV.baidu.com/s?word=
hXXp://VVV.baidu.com/adrc.php
hXXp://VVV.baidu.com/adrc.php
cache.baiducontent.com
cache.baiducontent.com
about:blankwinmm.dll
about:blankwinmm.dll
\UUWiseHelper.dll
\UUWiseHelper.dll
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
SSSSh
SSSSh
ByScreen.JPG
ByScreen.JPG
operator
operator
GetProcessWindowStation
GetProcessWindowStation
E:\work\UUWiseHelper
E:\work\UUWiseHelper
\UUWiseHelper.pdb
\UUWiseHelper.pdb
KERNEL32.dll
KERNEL32.dll
USER32.dll
USER32.dll
GDI32.dll
GDI32.dll
RegCloseKey
RegCloseKey
RegOpenKeyExW
RegOpenKeyExW
ADVAPI32.dll
ADVAPI32.dll
SHELL32.dll
SHELL32.dll
OLEAUT32.dll
OLEAUT32.dll
SHLWAPI.dll
SHLWAPI.dll
urlmon.dll
urlmon.dll
dbghelp.dll
dbghelp.dll
gdiplus.dll
gdiplus.dll
IPHLPAPI.DLL
IPHLPAPI.DLL
WS2_32.dll
WS2_32.dll
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
UUWiseHelper.DLL
UUWiseHelper.DLL
uu_easyRecognizeUrlA
uu_easyRecognizeUrlA
uu_easyRecognizeUrlW
uu_easyRecognizeUrlW
uu_loginW
uu_loginW
uu_recognizeByCodeTypeAndUrlA
uu_recognizeByCodeTypeAndUrlA
uu_recognizeByCodeTypeAndUrlW
uu_recognizeByCodeTypeAndUrlW
zcÃ
zcÃ
"0,01070
"0,01070
8Â8J8R8x8
8Â8J8R8x8
0#0'0-01070;0
0#0'0-01070;0
=*>0>4>8>
=*>0>4>8>
5%6S6
5%6S6
3$3,383\3|3
3$3,383\3|3
\dc.dll
\dc.dll
deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly
deflate 1.1.3 Copyright 1995-1998 Jean-loup Gailly
inflate 1.1.3 Copyright 1995-1998 Mark Adler
inflate 1.1.3 Copyright 1995-1998 Mark Adler
MFC42.DLL
MFC42.DLL
MSVCRT.dll
MSVCRT.dll
GdiplusShutdown
GdiplusShutdown
WSOCK32.dll
WSOCK32.dll
MSVCP60.dll
MSVCP60.dll
ReportError_A
ReportError_A
VBYB_ReportError
VBYB_ReportError
VB_ReportError
VB_ReportError
debug.ini
debug.ini
ReportError:%s
ReportError:%s
Error:%s
Error:%s
%s|!|%s
%s|!|%s
\dms.pdb
\dms.pdb
%u%u,
%u%u,
dclog.txt
dclog.txt
config.ini
config.ini
port
port
settimeout:%d
settimeout:%d
[%d]%s
[%d]%s
reg2:%s
reg2:%s
checkok:%s %s
checkok:%s %s
check fail:%s %s %s
check fail:%s %s %s
check:%s %s
check:%s %s
getcjfail:%s %s
getcjfail:%s %s
getcj:%s %s
getcj:%s %s
%s%uout
%s%uout
%s%uin
%s%uin
put img ok:%s
put img ok:%s
put img fail:%s
put img fail:%s
put img:%s %s %d
put img:%s %s %d
get result ok:%s,%s
get result ok:%s,%s
get result fail:%s
get result fail:%s
get result:%s
get result:%s
notifyfail ok:%s
notifyfail ok:%s
%s\%d-%s.png
%s\%d-%s.png
notifyfail fail:%s,%s
notifyfail fail:%s,%s
notifyfail:%s
notifyfail:%s
getimgok:%s,%s
getimgok:%s,%s
getimg:%s
getimg:%s
getinfo fail:%s
getinfo fail:%s
getinfo:%s,%s
getinfo:%s,%s
setresult:%s,%s
setresult:%s,%s
HTTP/1.1 200 OK
HTTP/1.1 200 OK
recv:%d
recv:%d
send:%d
send:%d
GET /ip.txt HTTP/1.1
GET /ip.txt HTTP/1.1
Host: %s
Host: %s
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:6.0.2) Gecko/20100101 Firefox/6.0.2
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:6.0.2) Gecko/20100101 Firefox/6.0.2
select:%d
select:%d
ioctlsocket:%d
ioctlsocket:%d
socket:%d
socket:%d
api.qqchaoren.net
api.qqchaoren.net
14.17.65.24
14.17.65.24
14.17.65.23
14.17.65.23
dama2.qqchaoren.net
dama2.qqchaoren.net
dama1.qqchaoren.net
dama1.qqchaoren.net
connect total:%s %d
connect total:%s %d
:%s %d
:%s %d
connect discard:%s %d
connect discard:%s %d
[d-d-d d:d:d](u)
[d-d-d d:d:d](u)
recv timeout:
recv timeout:
recvfail:%d
recvfail:%d
server close:%d
server close:%d
recv:%d
recv:%d
send:%d
send:%d
sendfail:%d
sendfail:%d
connect timeout:
connect timeout:
connectok:%s %hu
connectok:%s %hu
127.0.0.1
127.0.0.1
1.1.3
1.1.3
\ZMApi.dll
\ZMApi.dll
9^ u%f
9^ u%f
uù u f9k
uù u f9k
Ht.Ht!
Ht.Ht!
tAHt.Ht
tAHt.Ht
uù~DuH
uù~DuH
It.It
It.It
F t.Oj
F t.Oj
hCRTkQ
hCRTkQ
hCRTrW
hCRTrW
hCRTgW
hCRTgW
hCRTbW
hCRTbW
tù}
tù}
u&SSh
u&SSh
A$v%SU
A$v%SU
D$`CRTr
D$`CRTr
D$lCRTg
D$lCRTg
D$xCRTb
D$xCRTb
?%uMf
?%uMf
\Captcha\Src\Common\MyGlobal.cpp
\Captcha\Src\Common\MyGlobal.cpp
%.2d-%.2d:%.2d:%.2d.%.3d [ %s %d ]
%.2d-%.2d:%.2d:%.2d.%.3d [ %s %d ]
s:%d %s len:%d
s:%d %s len:%d
\Captcha\Src\Common\MyToolsLib.cpp
\Captcha\Src\Common\MyToolsLib.cpp
CNotSupportedException
CNotSupportedException
CHttpConnection
CHttpConnection
CHttpFile
CHttpFile
CCmdTarget
CCmdTarget
COMCTL32.DLL
COMCTL32.DLL
hhctrl.ocx
hhctrl.ocx
mscoree.dll
mscoree.dll
internal state. The program cannot safely continue execution and must
internal state. The program cannot safely continue execution and must
continue execution and must now be terminated.
continue execution and must now be terminated.
- This application cannot run using the active version of the Microsoft .NET Runtime
- This application cannot run using the active version of the Microsoft .NET Runtime
Please contact the application's support team for more information.
Please contact the application's support team for more information.
OLEACC.dll
OLEACC.dll
?#%X.y
?#%X.y
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
1.2.3
1.2.3
inflate 1.2.3 Copyright 1995-2005 Mark Adler
inflate 1.2.3 Copyright 1995-2005 Mark Adler
%u BitsPerSample not allowed for JPEG
%u BitsPerSample not allowed for JPEG
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
z:\Captcha\Temp\Zmapi\Release\Zmapi.pdb
z:\Captcha\Temp\Zmapi\Release\Zmapi.pdb
UnhookWindowsHookEx
UnhookWindowsHookEx
GetKeyState
GetKeyState
SetWindowsHookExW
SetWindowsHookExW
SetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ScaleViewportExtEx
ScaleViewportExtEx
comdlg32.dll
comdlg32.dll
WINSPOOL.DRV
WINSPOOL.DRV
RegOpenKeyW
RegOpenKeyW
RegDeleteKeyW
RegDeleteKeyW
RegEnumKeyW
RegEnumKeyW
RegCreateKeyExW
RegCreateKeyExW
COMCTL32.dll
COMCTL32.dll
UrlUnescapeW
UrlUnescapeW
InternetCrackUrlW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetCanonicalizeUrlW
HttpAddRequestHeadersW
HttpAddRequestHeadersW
HttpQueryInfoW
HttpQueryInfoW
HttpSendRequestW
HttpSendRequestW
HttpOpenRequestW
HttpOpenRequestW
WININET.dll
WININET.dll
Zmapi.dll
Zmapi.dll
ZM_ReportErrorW
ZM_ReportErrorW
.PAVCObject@@
.PAVCObject@@
.PAVCException@@
.PAVCException@@
.PAVCOleException@@
.PAVCOleException@@
.PAVCSimpleException@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.PAVCMemoryException@@
.PAVCNotSupportedException@@
.PAVCNotSupportedException@@
.PAVCInvalidArgException@@
.PAVCInvalidArgException@@
.?AVCNotSupportedException@@
.?AVCNotSupportedException@@
.PAVCInternetException@@
.PAVCInternetException@@
.?AVCHttpConnection@@
.?AVCHttpConnection@@
.?AVCHttpFile@@
.?AVCHttpFile@@
.?AVCCmdTarget@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCCmdUI@@
.PAVCArchiveException@@
.PAVCArchiveException@@
.?AVCTestCmdUI@@
.?AVCTestCmdUI@@
.PAVCUserException@@
.PAVCUserException@@
.PAVCFileException@@
.PAVCFileException@@
Save RAW not supported
Save RAW not supported
Save WMF not supported
Save WMF not supported
Unsupported WBMP type
Unsupported WBMP type
1.2.24
1.2.24
Page %d
Page %d
compression type not supported
compression type not supported
libpng error: %s
libpng error: %s
libpng error: %s, offset=%d
libpng error: %s, offset=%d
libpng error no. %s: %s
libpng error no. %s: %s
libpng warning: %s
libpng warning: %s
libpng warning no. %s: %s
libpng warning no. %s: %s
iTXt chunk not supported.
iTXt chunk not supported.
Unknown zTXt compression type %d
Unknown zTXt compression type %d
Incomplete compressed datastream in %s chunk
Incomplete compressed datastream in %s chunk
Data error in compressed datastream in %s chunk
Data error in compressed datastream in %s chunk
Buffer error in compressed datastream in %s chunk
Buffer error in compressed datastream in %s chunk
gamma = (%d/100000)
gamma = (%d/100000)
gx=%f, gy=%f, bx=%f, by=%f
gx=%f, gy=%f, bx=%f, by=%f
wx=%f, wy=%f, rx=%f, ry=%f
wx=%f, wy=%f, rx=%f, ry=%f
incorrect gamma=(%d/100000)
incorrect gamma=(%d/100000)
NULL row buffer for row %ld, pass %d
NULL row buffer for row %ld, pass %d
Empty keyword in iCCP chunk
Empty keyword in iCCP chunk
Unknown compression type %d
Unknown compression type %d
Empty keyword in sPLT chunk
Empty keyword in sPLT chunk
white_x=%f, white_y=%f
white_x=%f, white_y=%f
zero length keyword
zero length keyword
keyword length must be 1 - 79 characters
keyword length must be 1 - 79 characters
Zero length keyword
Zero length keyword
extra interior spaces removed from keyword
extra interior spaces removed from keyword
leading spaces removed from keyword
leading spaces removed from keyword
trailing spaces removed from keyword
trailing spaces removed from keyword
invalid keyword character 0xX
invalid keyword character 0xX
Out of memory while procesing keyword
Out of memory while procesing keyword
Empty keyword in tEXt chunk
Empty keyword in tEXt chunk
Empty keyword in zTXt chunk
Empty keyword in zTXt chunk
Corrupt JPEG data: found marker 0xx instead of RST%d
Corrupt JPEG data: found marker 0xx instead of RST%d
Warning: unknown JFIF revision number %d.d
Warning: unknown JFIF revision number %d.d
Corrupt JPEG data: %u extraneous bytes before marker 0xx
Corrupt JPEG data: %u extraneous bytes before marker 0xx
Inconsistent progression sequence for component %d coefficient %d
Inconsistent progression sequence for component %d coefficient %d
Unknown Adobe color transform code %d
Unknown Adobe color transform code %d
Obtained XMS handle %u
Obtained XMS handle %u
Freed XMS handle %u
Freed XMS handle %u
Unrecognized component IDs %d %d %d, assuming YCbCr
Unrecognized component IDs %d %d %d, assuming YCbCr
JFIF extension marker: RGB thumbnail image, length %u
JFIF extension marker: RGB thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: JPEG-compressed thumbnail image, length %u
JFIF extension marker: JPEG-compressed thumbnail image, length %u
Opened temporary file %s
Opened temporary file %s
Closed temporary file %s
Closed temporary file %s
Ss=%d, Se=%d, Ah=%d, Al=%d
Ss=%d, Se=%d, Ah=%d, Al=%d
Component %d: dc=%d ac=%d
Component %d: dc=%d ac=%d
Start Of Scan: %d components
Start Of Scan: %d components
Component %d: %dhx%dv q=%d
Component %d: %dhx%dv q=%d
Start Of Frame 0xx: width=%u, height=%u, components=%d
Start Of Frame 0xx: width=%u, height=%u, components=%d
Smoothing not supported with nonstandard sampling ratios
Smoothing not supported with nonstandard sampling ratios
RST%d
RST%d
At marker 0xx, recovery action %d
At marker 0xx, recovery action %d
Selected %d colors for quantization
Selected %d colors for quantization
Quantizing to %d colors
Quantizing to %d colors
Quantizing to %d = %d*%d*%d colors
Quantizing to %d = %d*%d*%d colors
%4u %4u %4u %4u %4u %4u %4u %4u
%4u %4u %4u %4u %4u %4u %4u %4u
Unexpected marker 0xx
Unexpected marker 0xx
Miscellaneous marker 0xx, length %u
Miscellaneous marker 0xx, length %u
with %d x %d thumbnail image
with %d x %d thumbnail image
JFIF extension marker: type 0xx, length %u
JFIF extension marker: type 0xx, length %u
Warning: thumbnail image size does not match data length %u
Warning: thumbnail image size does not match data length %u
JFIF APP0 marker: version %d.d, density %dx%d %d
JFIF APP0 marker: version %d.d, density %dx%d %d
= = = = = = = =
= = = = = = = =
Obtained EMS handle %u
Obtained EMS handle %u
Freed EMS handle %u
Freed EMS handle %u
Define Restart Interval %u
Define Restart Interval %u
Define Quantization Table %d precision %d
Define Quantization Table %d precision %d
Define Huffman Table 0xx
Define Huffman Table 0xx
Define Arithmetic Table 0xx: 0xx
Define Arithmetic Table 0xx: 0xx
Unknown APP14 marker (not Adobe), length %u
Unknown APP14 marker (not Adobe), length %u
Unknown APP0 marker (not JFIF), length %u
Unknown APP0 marker (not JFIF), length %u
Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d
Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d
Unsupported marker type 0xx
Unsupported marker type 0xx
Failed to create temporary file %s
Failed to create temporary file %s
Unsupported JPEG process: SOF type 0xx
Unsupported JPEG process: SOF type 0xx
Cannot quantize to more than %d colors
Cannot quantize to more than %d colors
Cannot quantize to fewer than %d colors
Cannot quantize to fewer than %d colors
Cannot quantize more than %d color components
Cannot quantize more than %d color components
Insufficient memory (case %d)
Insufficient memory (case %d)
Not a JPEG file: starts with 0xx 0xx
Not a JPEG file: starts with 0xx 0xx
Quantization table 0xx was not defined
Quantization table 0xx was not defined
Huffman table 0xx was not defined
Huffman table 0xx was not defined
Backing store not supported
Backing store not supported
Cannot transcode due to multiple use of quantization table %d
Cannot transcode due to multiple use of quantization table %d
Maximum supported image dimension is %u pixels
Maximum supported image dimension is %u pixels
Empty JPEG image (DNL not supported)
Empty JPEG image (DNL not supported)
Bogus DQT index %d
Bogus DQT index %d
Bogus DHT index %d
Bogus DHT index %d
Bogus DAC value 0x%x
Bogus DAC value 0x%x
Bogus DAC index %d
Bogus DAC index %d
Unsupported color conversion request
Unsupported color conversion request
Too many color components: %d, max %d
Too many color components: %d, max %d
Buffer passed to JPEG library is too small
Buffer passed to JPEG library is too small
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
Improper call to JPEG library in state %d
Improper call to JPEG library in state %d
Invalid scan script at entry %d
Invalid scan script at entry %d
Invalid progressive parameters at scan script entry %d
Invalid progressive parameters at scan script entry %d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Unsupported JPEG data precision %d
Unsupported JPEG data precision %d
Invalid memory pool code %d
Invalid memory pool code %d
Wrong JPEG library version: library is %d, caller expects %d
Wrong JPEG library version: library is %d, caller expects %d
IDCT output block size %d not supported
IDCT output block size %d not supported
Invalid component ID %d in SOS
Invalid component ID %d in SOS
Bogus message code %d
Bogus message code %d
%ld%c
%ld%c
%s: Read error at scanline %lu, strip %lu; got %lu bytes, expected %lu
%s: Read error at scanline %lu, strip %lu; got %lu bytes, expected %lu
%s: Read error at scanline %lu; got %lu bytes, expected %lu
%s: Read error at scanline %lu; got %lu bytes, expected %lu
%s: Seek error at scanline %lu, strip %lu
%s: Seek error at scanline %lu, strip %lu
%s: Data buffer too small to hold strip %lu
%s: Data buffer too small to hold strip %lu
%s: Read error on strip %lu; got %lu bytes, expected %lu
%s: Read error on strip %lu; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld, tile %ld; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld, tile %ld; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld; got %lu bytes, expected %lu
%s: Read error at row %ld, col %ld; got %lu bytes, expected %lu
%s: Seek error at row %ld, col %ld, tile %ld
%s: Seek error at row %ld, col %ld, tile %ld
%s: Data buffer too small to hold tile %ld
%s: Data buffer too small to hold tile %ld
%s: No space for data buffer at scanline %ld
%s: No space for data buffer at scanline %ld
%u: Sample out of range, max %u
%u: Sample out of range, max %u
Sample %d out of range, max %u
Sample %d out of range, max %u
"%s": Bad mode
"%s": Bad mode
Not a TIFF file, bad version number %d (0x%x)
Not a TIFF file, bad version number %d (0x%x)
Not a TIFF file, bad magic number %d (0x%x)
Not a TIFF file, bad magic number %d (0x%x)
%s: Out of memory (TIFF structure)
%s: Out of memory (TIFF structure)
Sorry, can not handle YCbCr images with %s=%d
Sorry, can not handle YCbCr images with %s=%d
Sorry, LogL data must have %s=%d
Sorry, LogL data must have %s=%d
Sorry, can not handle LogLuv images with %s=%d
Sorry, can not handle LogLuv images with %s=%d
Sorry, LogLuv data must have %s=%d or %d
Sorry, LogLuv data must have %s=%d or %d
Sorry, can not handle image with %s=%d
Sorry, can not handle image with %s=%d
Sorry, can not handle separated image with %s=%d
Sorry, can not handle separated image with %s=%d
Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d
Sorry, can not handle contiguous data with %s=%d, and %s=%d and Bits/Sample=%d
Sorry, can not handle RGB image with %s=%d
Sorry, can not handle RGB image with %s=%d
Missing needed %s tag
Missing needed %s tag
%s: Cannot modify tag "%s" while writing
%s: Cannot modify tag "%s" while writing
%s: Unknown %stag %u
%s: Unknown %stag %u
%f: Bad value for "%s"
%f: Bad value for "%s"
%s: Invalid %stag "%s" (not supported by codec)
%s: Invalid %stag "%s" (not supported by codec)
%ld: Bad value for "%s"
%ld: Bad value for "%s"
%d: Bad value for "%s"
%d: Bad value for "%s"
Nonstandard tile length %d, convert file
Nonstandard tile length %d, convert file
Nonstandard tile width %d, convert file
Nonstandard tile width %d, convert file
Bad value %ld for "%s" tag ignored
Bad value %ld for "%s" tag ignored
%s: Invalid InkNames value; expecting %d names, found %d
%s: Invalid InkNames value; expecting %d names, found %d
%s: Error fetching directory count
%s: Error fetching directory count
%s: Error fetching directory link
%s: Error fetching directory link
"%s": Information lost writing value (%g) as (unsigned) RATIONAL
"%s": Information lost writing value (%g) as (unsigned) RATIONAL
Error writing data for field "%s"
Error writing data for field "%s"
%s: Error writing SubIFD directory link
%s: Error writing SubIFD directory link
%d: Sample out of range, max %d
%d: Sample out of range, max %d
%s: No space for %s arrays
%s: No space for %s arrays
%s: Must set "PlanarConfiguration" before writing data
%s: Must set "PlanarConfiguration" before writing data
%s: Must set "ImageWidth" before writing data
%s: Must set "ImageWidth" before writing data
%s: File not open for writing
%s: File not open for writing
%s: No space for output buffer
%s: No space for output buffer
%s: No space to expand strip arrays
%s: No space to expand strip arrays
%s: Write error at scanline %lu
%s: Write error at scanline %lu
%s: Seek error at scanline %lu
%s: Seek error at scanline %lu
Bogus "%s" field, ignoring and calculating from imagelength
Bogus "%s" field, ignoring and calculating from imagelength
TIFF directory is missing required "%s" field, calculating from imagelength
TIFF directory is missing required "%s" field, calculating from imagelength
unknown field with tag %d (0x%x) ignored
unknown field with tag %d (0x%x) ignored
wrong data type %d for "%s"; tag ignored
wrong data type %d for "%s"; tag ignored
No space %s
No space %s
TIFF directory is missing required "%s" field
TIFF directory is missing required "%s" field
incorrect count for field "%s" (%lu, expecting %lu); tag ignored
incorrect count for field "%s" (%lu, expecting %lu); tag ignored
Error fetching data for field "%s"
Error fetching data for field "%s"
%s: Rational with zero denominator (num = %lu)
%s: Rational with zero denominator (num = %lu)
Cannot handle different per-sample values for field "%s"
Cannot handle different per-sample values for field "%s"
Cannot read TIFF_ANY type %d for field "%s"
Cannot read TIFF_ANY type %d for field "%s"
Compression scheme %u %s encoding is not implemented
Compression scheme %u %s encoding is not implemented
%s %s encoding is not implemented
%s %s encoding is not implemented
%s %s encoding is no longer implemented due to Unisys patent enforcement
%s %s encoding is no longer implemented due to Unisys patent enforcement
Compression scheme %u %s decoding is not implemented
Compression scheme %u %s decoding is not implemented
%s %s decoding is not implemented
%s %s decoding is not implemented
Compression algorithm does not support random access
Compression algorithm does not support random access
Internal error, unknown tag 0x%x
Internal error, unknown tag 0x%x
%s compression support is not configured
%s compression support is not configured
?%s: No space for LogLuv state block
?%s: No space for LogLuv state block
Inappropriate photometric interpretation %d for SGILog compression; %s
Inappropriate photometric interpretation %d for SGILog compression; %s
LogL16Decode: Not enough data at row %d (short %d pixels)
LogL16Decode: Not enough data at row %d (short %d pixels)
LogLuvDecode24: Not enough data at row %d (short %d pixels)
LogLuvDecode24: Not enough data at row %d (short %d pixels)
LogLuvDecode32: Not enough data at row %d (short %d pixels)
LogLuvDecode32: Not enough data at row %d (short %d pixels)
%s: No space for SGILog translation buffer
%s: No space for SGILog translation buffer
No support for converting user data format to LogL
No support for converting user data format to LogL
No support for converting user data format to LogLuv
No support for converting user data format to LogLuv
SGILog compression supported only for %s, or raw data
SGILog compression supported only for %s, or raw data
Unknown data format %d for LogLuv compression
Unknown data format %d for LogLuv compression
Unknown encoding %d for LogLuv compression
Unknown encoding %d for LogLuv compression
%s: %s
%s: %s
%s: Not enough data at scanline %d (short %d bytes)
%s: Not enough data at scanline %d (short %d bytes)
%s: zlib error: %s
%s: zlib error: %s
%s: Decoding error at scanline %d, %s
%s: Decoding error at scanline %d, %s
%s: Encoder error: %s
%s: Encoder error: %s
%s: No space for state block
%s: No space for state block
%s: Bad code word at scanline %d (x %lu)
%s: Bad code word at scanline %d (x %lu)
%s: %s at scanline %d (got %lu, expected %lu)
%s: %s at scanline %d (got %lu, expected %lu)
%s: Premature EOF at scanline %d (x %lu)
%s: Premature EOF at scanline %d (x %lu)
%s: No space for Group 3/4 reference line
%s: No space for Group 3/4 reference line
%s: No space for Group 3/4 run arrays
%s: No space for Group 3/4 run arrays
%s: Uncompressed data (not supported) at scanline %d (x %lu)
%s: Uncompressed data (not supported) at scanline %d (x %lu)
Fax SubAddress: %s
Fax SubAddress: %s
(%u = 0x%x)
(%u = 0x%x)
%suncompressed data
%suncompressed data
%sEOL padding
%sEOL padding
%s2-d encoding
%s2-d encoding
%s compression is not supported
%s compression is not supported
Tiled Wang image not supported
Tiled Wang image not supported
Does not support lossless Huffman coding
Does not support lossless Huffman coding
RowsPerStrip must be multiple of %d for JPEG
RowsPerStrip must be multiple of %d for JPEG
JPEG tile width must be multiple of %d
JPEG tile width must be multiple of %d
JPEG tile height must be multiple of %d
JPEG tile height must be multiple of %d
BitsPerSample %d not allowed for JPEG
BitsPerSample %d not allowed for JPEG
PhotometricInterpretation %d not allowed for JPEG
PhotometricInterpretation %d not allowed for JPEG
ThunderDecode: %s data at scanline %ld (%lu != %lu)
ThunderDecode: %s data at scanline %ld (%lu != %lu)
PackBitsDecode: discarding %d bytes to avoid buffer overrun
PackBitsDecode: discarding %d bytes to avoid buffer overrun
LZWDecode: Not enough data at scanline %d (short %d bytes)
LZWDecode: Not enough data at scanline %d (short %d bytes)
LZWDecode: Strip %d not terminated with EOI code
LZWDecode: Strip %d not terminated with EOI code
LZWDecode: Bogus encoding, loop in the code table; scanline %d
LZWDecode: Bogus encoding, loop in the code table; scanline %d
LZWDecodeCompat: Not enough data at scanline %d (short %d bytes)
LZWDecodeCompat: Not enough data at scanline %d (short %d bytes)
DumpModeDecode: Not enough data for scanline %d
DumpModeDecode: Not enough data for scanline %d
Horizontal differencing "Predictor" not supported with %d-bit samples
Horizontal differencing "Predictor" not supported with %d-bit samples
"Predictor" value %d not supported
"Predictor" value %d not supported
%u (0x%x)
%u (0x%x)
Portable Graymap/Pixmap (PNM)
Portable Graymap/Pixmap (PNM)
error: BMP format does not support color space
error: BMP format does not support color space
%s %s %d %ld %ld
%s %s %d %ld %ld
hXXp://VVV.ijg.org
hXXp://VVV.ijg.org
The IJG JPEG library is required for JPEG decoding support.
The IJG JPEG library is required for JPEG decoding support.
The IJG JPEG library is required for JPEG encoding support.
The IJG JPEG library is required for JPEG encoding support.
len = %d;
len = %d;
type = 0xx (%s);
type = 0xx (%s);
tileno = %d; len = %d; partno = %d; numparts = %d
tileno = %d; len = %d; partno = %d; numparts = %d
prec[%d] = %d; sgnd[%d] = %d; hsamp[%d] = %d; vsamp[%d] = %d
prec[%d] = %d; sgnd[%d] = %d; hsamp[%d] = %d; vsamp[%d] = %d
tilewidth = %d; tileheight = %d; tilexoff = %d; tileyoff = %d;
tilewidth = %d; tileheight = %d; tilexoff = %d; tileyoff = %d;
width = %d; height = %d; xoff = %d; yoff = %d;
width = %d; height = %d; xoff = %d; yoff = %d;
caps = 0xx;
caps = 0xx;
prcwidth[%d] = %d, prcheight[%d] = %d
prcwidth[%d] = %d, prcheight[%d] = %d
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx;
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx;
prg = %d; numlyrs = %d;
prg = %d; numlyrs = %d;
numdlvls = %d; qmfbid = %d; mctrans = %d
numdlvls = %d; qmfbid = %d; mctrans = %d
csty = 0xx;
csty = 0xx;
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx; qmfbid = %d;
cblkwidthval = %d; cblkheightval = %d; cblksty = 0xx; qmfbid = %d;
compno = %d; csty = 0xx; numdlvls = %d;
compno = %d; csty = 0xx; numdlvls = %d;
compno = %d; roisty = %d; roishift = %d
compno = %d; roisty = %d; roishift = %d
expn[%d] = 0xx; mant[%d] = 0xx;
expn[%d] = 0xx; mant[%d] = 0xx;
qntsty = %d; numguard = %d; numstepsizes = %d
qntsty = %d; numguard = %d; numstepsizes = %d
compno = %d; qntsty = %d; numguard = %d; numstepsizes = %d
compno = %d; qntsty = %d; numguard = %d; numstepsizes = %d
seqno = %d;
seqno = %d;
ind=%d; len = %d;
ind=%d; len = %d;
le[%d] = %d
le[%d] = %d
rs[%d] = %d; re[%d] = %d;
rs[%d] = %d; re[%d] = %d;
cs[%d] = %d; ce[%d] = %d;
cs[%d] = %d; ce[%d] = %d;
po[%d] = %d;
po[%d] = %d;
hoff[%d] = %d; voff[%d] = %d
hoff[%d] = %d; voff[%d] = %d
regid = %d;
regid = %d;
invalid code block width %d
invalid code block width %d
invalid code block height %d
invalid code block height %d
warning: ignoring invalid option %s
warning: ignoring invalid option %s
warning: invalid intermediate layer rates specifier ignored (%s)
warning: invalid intermediate layer rates specifier ignored (%s)
ignoring bad rate specifier %s
ignoring bad rate specifier %s
ignoring invalid progression order %s
ignoring invalid progression order %s
ignoring invalid mode %s
ignoring invalid mode %s
unsupported image type
unsupported image type
Creator: JasPer Version %s
Creator: JasPer Version %s
error: too few guard bits (need at least %d)
error: too few guard bits (need at least %d)
lyrno=d cmptno=d rlvlno=d bandno=d prcno=d cblkno=d passno=d
lyrno=d cmptno=d rlvlno=d bandno=d prcno=d cblkno=d passno=d
lyrno = d
lyrno = d
success %d goodthresh %f
success %d goodthresh %f
maxlen=ld actuallen=ld thresh=%f
maxlen=ld actuallen=ld thresh=%f
min rdslope = %f max rdslope = %f
min rdslope = %f max rdslope = %f
cblk ] ] ] ]
cblk ] ] ] ]
prc ] ] ] ] (] ])
prc ] ] ] ] (] ])
band ] ] ] ]
band ] ] ] ]
rlvl ] ] ] ]
rlvl ] ] ] ]
tcmpt ] ] ] ]
tcmpt ] ] ] ]
CODE BLOCK %d
CODE BLOCK %d
CODE BLOCK GROUP %d
CODE BLOCK GROUP %d
BAND %d
BAND %d
xs =%d, ys = %d, xe = %d, ye = %d, w = %d, h = %d
xs =%d, ys = %d, xe = %d, ye = %d, w = %d, h = %d
RESOLUTION LEVEL %d
RESOLUTION LEVEL %d
ICC Profile CS x
ICC Profile CS x
error: unsupported compression type
error: unsupported compression type
box type %s
box type %s
error: encoding method not supported
error: encoding method not supported
error: RLE encoding method not supported
error: RLE encoding method not supported
warning: palettized images not fully supported
warning: palettized images not fully supported
error: unsupported color space
error: unsupported color space
error: unsupported BMP encoding
error: unsupported BMP encoding
THE BMP FORMAT IS NOT FULLY SUPPORTED!
THE BMP FORMAT IS NOT FULLY SUPPORTED!
unsupported BMP encoding
unsupported BMP encoding
no palettized image support for BMP format
no palettized image support for BMP format
warning: support for signed sample data requires use of nonstandard extension to PNM format
warning: support for signed sample data requires use of nonstandard extension to PNM format
%s%ld
%s%ld
error: PNM support required
error: PNM support required
warning: ignoring unsupported options
warning: ignoring unsupported options
data=%s
data=%s
component tlx=%ld tly=%ld sampperx=%ld samppery=%ld width=%ld height=%ld prec=%d sgnd=%d
component tlx=%ld tly=%ld sampperx=%ld samppery=%ld width=%ld height=%ld prec=%d sgnd=%d
(%f, %f, %f)
(%f, %f, %f)
entry[%d] = %f
entry[%d] = %f
gamma = %f
gamma = %f
number of entires = %d
number of entires = %d
maclen = %d
maclen = %d
sccode = %d
sccode = %d
uclangcode = %d; uclen = %d
uclangcode = %d; uclen = %d
ascii = "%s"
ascii = "%s"
string = "%s"
string = "%s"
numintabents=%d, numouttabents=%d
numintabents=%d, numouttabents=%d
e[%d][%d]=%f
e[%d][%d]=%f
numinchans=%d, numoutchans=%d, clutlen=%d
numinchans=%d, numoutchans=%d, clutlen=%d
x:
x:
1.900.1
1.900.1
packet offset=ld prg=%d cmptno=d rlvlno=d prcno=d lyrno=d
packet offset=ld prg=%d cmptno=d rlvlno=d prcno=d lyrno=d
coding pass failed passtype=%d segtype=%d
coding pass failed passtype=%d segtype=%d
type=%c%s%c (0xx); length=%d
type=%c%s%c (0xx); length=%d
csid=%d
csid=%d
method=%d; pri=%d; approx=%d
method=%d; pri=%d; approx=%d
channo=%d; type=%d; assoc=%d
channo=%d; type=%d; assoc=%d
cmptno=%d; map=%d; pcol=%d
cmptno=%d; map=%d; pcol=%d
numchans = %d
numchans = %d
LUT[%d][%d]=%d
LUT[%d][%d]=%d
numents=%d; numchans=%d
numents=%d; numchans=%d
IEC hXXp://VVV.iec.ch
IEC hXXp://VVV.iec.ch
.IEC 61966-2.1 Default RGB colour space - sRGB
.IEC 61966-2.1 Default RGB colour space - sRGB
CRT curv
CRT curv
The delta operation is invalid (mismatched color_types?)
The delta operation is invalid (mismatched color_types?)
Requested nEED resources are not supported
Requested nEED resources are not supported
MHDR simplicity indicates unsupported feature(s)
MHDR simplicity indicates unsupported feature(s)
Keyword cannot be zero-length
Keyword cannot be zero-length
%s: Out of memory in %s
%s: Out of memory in %s
%s: decoder table overflow
%s: decoder table overflow
%d %d
%d %d
%d,%d
%d,%d
%d %d %d
%d %d %d
/.badpixels
/.badpixels
%s is not a valid PGM file!
%s is not a valid PGM file!
%s has the wrong dimensions!
%s has the wrong dimensions!
Scaling with p->black %d, multipliers
Scaling with p->black %d, multipliers
%s: Cannot use camera p->white balance.
%s: Cannot use camera p->white balance.
Median filter pass %d...
Median filter pass %d...
11124811248488
11124811248488
012347800000005896
012347800000005896
%d:%d:%d %d:%d:%d
%d:%d:%d %d:%d:%d
%f %f %f
%f %f %f
Ixpress %d-Mp
Ixpress %d-Mp
50132467
50132467
Failed to read metadata from %s
Failed to read metadata from %s
Reading metadata from %s ...
Reading metadata from %s ...
0134567028
0134567028
023457000000006000
023457000000006000
012346000000000000
012346000000000000
%d:%d:%d
%d:%d:%d
%d.%d.%d
%d.%d.%d
%*s %s %d %d:%d:%d %d
%*s %s %d %d:%d:%d %d
v%d %dx%d
v%d %dx%d
%s %s
%s %s
%s: You must link dcraw with libjpeg!!
%s: You must link dcraw with libjpeg!!
%dx%d
%dx%d
Converting to %s colorspace...
Converting to %s colorspace...
d:d:d d:d:d
d:d:d d:d:d
12435867
12435867
Unknown option "-%c".
Unknown option "-%c".
Non-numeric argument to "-%c"
Non-numeric argument to "-%c"
1141111142
1141111142
Created by MIDL version 6.00.0361 at Wed Nov 05 22:09:21 2014
Created by MIDL version 6.00.0361 at Wed Nov 05 22:09:21 2014
,0004080
,0004080
3!3(31363
3!3(31363
: :$:(:,:0:4:]:,;[;|;
: :$:(:,:0:4:]:,;[;|;
=$=0=7=>=
=$=0=7=>=
;%@>
;%@>
?0?4?8?@?
?0?4?8?@?
748:8?8_8
748:8?8_8
; ;$;(;,;
; ;$;(;,;
TEAKEY
TEAKEY
SESSIONkEY
SESSIONkEY
-12027,TEAKEY
-12027,TEAKEY
&password=
&password=
&softkey=
&softkey=
Content-Disposition: form-data; name="password"
Content-Disposition: form-data; name="password"
Content-Disposition: form-data; name="softkey"
Content-Disposition: form-data; name="softkey"
{softkey}
{softkey}
Content-Disposition: form-data; name="image"; filename="System.Byte[]"
Content-Disposition: form-data; name="image"; filename="System.Byte[]"
.splice(
.splice(
get__key(
get__key(
text|password|file
text|password|file
SetClientCertificate
SetClientCertificate
hXXp://VVV.52dfg.comr
hXXp://VVV.52dfg.comr
hXXp://VVV.52dfg.com/forum-40-1.html?hycz
hXXp://VVV.52dfg.com/forum-40-1.html?hycz
5ugg%u
5ugg%u
hXXp://VVV.52dfg.com/dfg/soft/index.html
hXXp://VVV.52dfg.com/dfg/soft/index.html
09/27/12
09/27/12
admin@52dfg.coml
admin@52dfg.coml
%d&&'
%d&&'
123456789
123456789
00003333
00003333
?456789:;
?456789:;
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
Q%*.*f
Q%*.*f
commctrl_DragListMsg
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
Afx:%x:%x
__MSVCRT_HEAP_SELECT
__MSVCRT_HEAP_SELECT
iphlpapi.dll
iphlpapi.dll
MPR.dll
MPR.dll
VERSION.dll
VERSION.dll
RPCRT4.dll
RPCRT4.dll
(*.prn)|*.prn|
(*.prn)|*.prn|
(*.*)|*.*||
(*.*)|*.*||
Shell32.dll
Shell32.dll
Mpr.dll
Mpr.dll
Advapi32.dll
Advapi32.dll
User32.dll
User32.dll
Gdi32.dll
Gdi32.dll
(&07-034/)7 '
(&07-034/)7 '
?? / %d]
?? / %d]
%d / %d]
%d / %d]
: %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.txt)|*.txt|
(*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.PNG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|PNG
(*.JPG)|*.JPG|PNG
(*.PNG)|*.PNG|BMP
(*.PNG)|*.PNG|BMP
(*.BMP)|*.BMP|GIF
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
(*.CUR)|*.CUR|
%s:%d
%s:%d
windows
windows
1.6.9
1.6.9
unsupported zlib version
unsupported zlib version
png_read_image: unsupported transformation
png_read_image: unsupported transformation
out.prn
out.prn
%d.%d
%d.%d
%d / %d
%d / %d
%d/%d
%d/%d
bad keyword
bad keyword
libpng does not support gamma background rgb_to_gray
libpng does not support gamma background rgb_to_gray
Palette is NULL in indexed image
Palette is NULL in indexed image
(%d-%d):
(%d-%d):
VVV.dywt.com.cn
VVV.dywt.com.cn
%s,%d
%s,%d
%s.lnk
%s.lnk
;3 #>6.&
;3 #>6.&
'2, / 0&7!4-)1#
'2, / 0&7!4-)1#
(%S)%M%D %y-%m-%d
(%S)%M%D %y-%m-%d
After RemoveDC(), pen counter: %d, bursh counter: %d, font counter: %d
After RemoveDC(), pen counter: %d, bursh counter: %d, font counter: %d
!!! Create pen ERROR! ErrNo.[%d]
!!! Create pen ERROR! ErrNo.[%d]
Create pen No.%d
Create pen No.%d
!!! Create brush ERROR! ErrNo.[%d]
!!! Create brush ERROR! ErrNo.[%d]
Create brush No.%d
Create brush No.%d
!!! Create font ERROR! ErrNo.[%d]
!!! Create font ERROR! ErrNo.[%d]
Create font No.%d
Create font No.%d
- Delete pen No.%d
- Delete pen No.%d
- Delete brush No.%d
- Delete brush No.%d
- Delete font No.%d
- Delete font No.%d
(*.htm;*.html)|*.htm;*.html
(*.htm;*.html)|*.htm;*.html
its:%s::%s
its:%s::%s
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP/1.0
HTTP/1.0
%s
%s
Reply-To: %s
Reply-To: %s
From: %s
From: %s
To: %s
To: %s
Subject: %s
Subject: %s
Date: %s
Date: %s
Cc: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
%a, %d %b %Y %H:%M:%S
SMTP
SMTP
TrayIcon event: %x
TrayIcon event: %x
hXXp://VVV.eyuyan.com
hXXp://VVV.eyuyan.com
service@dywt.com.cn
service@dywt.com.cn
86(0411)39895834
86(0411)39895834
86(0411)39895831
86(0411)39895831
This is a runtime library file for EPL applications. The EPL is a software development environment. For details please visit VVV.dywt.com.cn/info
This is a runtime library file for EPL applications. The EPL is a software development environment. For details please visit VVV.dywt.com.cn/info
DelAllKeyValues
DelAllKeyValues
DelKeyValue
DelKeyValue
GetAllKeys
GetAllKeys
GetKeyValue
GetKeyValue
AddKeyValue
AddKeyValue
DSGetErrMsg
DSGetErrMsg
BiTreeGetCurNodeKey
BiTreeGetCurNodeKey
ListGetCurNodeKey
ListGetCurNodeKey
ListUpdateNodeFromKey
ListUpdateNodeFromKey
ListRemoveNodeFromKey
ListRemoveNodeFromKey
edatastructure_fnMapDelAllKeyValues
edatastructure_fnMapDelAllKeyValues
edatastructure_fnMapDelKeyValue
edatastructure_fnMapDelKeyValue
edatastructure_fnMapGetAllKeys
edatastructure_fnMapGetAllKeys
edatastructure_fnMapGetKeyValue
edatastructure_fnMapGetKeyValue
edatastructure_fnMapAddKeyValue
edatastructure_fnMapAddKeyValue
edatastructure_fnBiTreeGetCurNodeKey
edatastructure_fnBiTreeGetCurNodeKey
edatastructure_fnListGetCurNodeKey
edatastructure_fnListGetCurNodeKey
edatastructure_fnListUpdateNodeFromKey
edatastructure_fnListUpdateNodeFromKey
edatastructure_fnListRemoveNodeFromKey
edatastructure_fnListRemoveNodeFromKey
Bag pipe
Bag pipe
%d%d%d
%d%d%d
rundll32.exe shell32.dll,
rundll32.exe shell32.dll,
.PAVCResourceException@@
.PAVCResourceException@@
.PAVCOleDispatchException@@
.PAVCOleDispatchException@@
c:\%original file name%.exe
c:\%original file name%.exe
#include "l.chs\afxres.rc" // Standard components
#include "l.chs\afxres.rc" // Standard components
CCaptchaRecognizer::recognizeByCodeTypeAndUrl
CCaptchaRecognizer::recognizeByCodeTypeAndUrl
hXXp://s1.uudati.com:
hXXp://s1.uudati.com:
hXXp://s1.taskok.com:
hXXp://s1.taskok.com:
hXXp://s1.uudama.com:
hXXp://s1.uudama.com:
hXXp://s1.uuwise.com:
hXXp://s1.uuwise.com:
/Api/config.aspx
/Api/config.aspx
2.0.0.5
2.0.0.5
WiseClientAPI-2.0.0.5
WiseClientAPI-2.0.0.5
CCaptchaRecognizer::__UpdateTKEY
CCaptchaRecognizer::__UpdateTKEY
CCaptchaRecognizer::_IsNeedLogin
CCaptchaRecognizer::_IsNeedLogin
/Api/DecodeImg.aspx
/Api/DecodeImg.aspx
xxxxxxxxxxx
xxxxxxxxxxx
hXXp://p1.uuwise.net:
hXXp://p1.uuwise.net:
hXXp://p1.uudama.net:
hXXp://p1.uudama.net:
hXXp://p1.taskok.com:
hXXp://p1.taskok.com:
hXXp://p1.uuwise.com:
hXXp://p1.uuwise.com:
hXXp://p1.uudama.com:
hXXp://p1.uudama.com:
CCaptchaRecognizer::easyRecognizeUrl
CCaptchaRecognizer::easyRecognizeUrl
%d%d%d%d%d
%d%d%d%d%d
CCaptchaRecognizer::_CalcRandomPort
CCaptchaRecognizer::_CalcRandomPort
/Api/VerifyAPIFile.aspx
/Api/VerifyAPIFile.aspx
/Api/UserLogin.aspx
/Api/UserLogin.aspx
CCaptchaRecognizer::login
CCaptchaRecognizer::login
/Api/UserReg.aspx
/Api/UserReg.aspx
/Api/PayCard.aspx
/Api/PayCard.aspx
/Api/ReportError.aspx
/Api/ReportError.aspx
CCaptchaRecognizer::reportError
CCaptchaRecognizer::reportError
/Api/UserPoint.aspx
/Api/UserPoint.aspx
|2.0.0.5|
|2.0.0.5|
/Api/DecodeResult.aspx
/Api/DecodeResult.aspx
ID/KEY/
ID/KEY/
ByTypeBytes.JPG
ByTypeBytes.JPG
%d-%d-%d
%d-%d-%d
CHttpRequestHelper::_ReadResponse
CHttpRequestHelper::_ReadResponse
User-Agent:WiseClient-2.0.0.5;
User-Agent:WiseClient-2.0.0.5;
WiseClient-2.0.0.5
WiseClient-2.0.0.5
CHttpRequestHelper::_InternalRequest
CHttpRequestHelper::_InternalRequest
CHttpRequestHelper::RequestGetImage
CHttpRequestHelper::RequestGetImage
CHttpRequestHelper::RequestPost
CHttpRequestHelper::RequestPost
ServerPort
ServerPort
UUExtConfig.ini
UUExtConfig.ini
-:-:-.%d
-:-:-.%d
tCRYPTDLL.DLL
tCRYPTDLL.DLL
3.cn.pool.ntp.org
3.cn.pool.ntp.org
2.cn.pool.ntp.org
2.cn.pool.ntp.org
1.cn.pool.ntp.org
1.cn.pool.ntp.org
0.cn.pool.ntp.org
0.cn.pool.ntp.org
cn.pool.ntp.org
cn.pool.ntp.org
\\.\PHYSICALDRIVE0
\\.\PHYSICALDRIVE0
Microsoft Windows Millennium Edition
Microsoft Windows Millennium Edition
Microsoft Windows 98
Microsoft Windows 98
Microsoft Windows 95
Microsoft Windows 95
%s (Build %d)
%s (Build %d)
Service Pack 6a (Build %d)
Service Pack 6a (Build %d)
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q246009
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\Q246009
Web Edition
Web Edition
Service Pack %d (Build %d)
Service Pack %d (Build %d)
Microsoft Windows NT
Microsoft Windows NT
Microsoft Windows 2000
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows XP
Microsoft Windows Server 2003,
Microsoft Windows Server 2003,
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Professional x64 Edition
Microsoft Windows Server 2003 "R2"
Microsoft Windows Server 2003 "R2"
Windows Server 2008
Windows Server 2008
Windows Vista
Windows Vista
Windows Server 2008 R2
Windows Server 2008 R2
Windows 7
Windows 7
ox-x-x-x-x-x
ox-x-x-x-x-x
\Tencent\Users\*.*
\Tencent\Users\*.*
nKERNEL32.DLL
nKERNEL32.DLL
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
WUSER32.DLL
WUSER32.DLL
!"#$%&'()* ,-.
!"#$%&'()* ,-.
uuwise.com
uuwise.com
2, 0, 0, 5
2, 0, 0, 5
1.0.0.1
1.0.0.1
!"#$%&'()* ,-
!"#$%&'()* ,-
25, 0, 0, 1
25, 0, 0, 1
Windows
Windows
s:%d MyCloseSocket
s:%d MyCloseSocket
\ZMException.txt
\ZMException.txt
addr.sa_family != AF_INET,
addr.sa_family != AF_INET,
s:%d ConnetToServer
s:%d ConnetToServer
%d.%d.%d.%d
%d.%d.%d.%d
[%d] %s
[%d] %s
\ZMApi.ini
\ZMApi.ini
Mysql
Mysql
ERROR_DATABASE_USERORPASSWORD
ERROR_DATABASE_USERORPASSWORD
ERROR_DATABASE_MYSQL_INIT
ERROR_DATABASE_MYSQL_INIT
ERROR_DATABASE_MYSQL_ERROR
ERROR_DATABASE_MYSQL_ERROR
ERROR_CUSTOMER_REPORT
ERROR_CUSTOMER_REPORT
hXXp://VVV.zhima365.com/jump/api_new_version.php
hXXp://VVV.zhima365.com/jump/api_new_version.php
hXXp://VVV.zm60.com/jump/jump_new_version.php
hXXp://VVV.zm60.com/jump/jump_new_version.php
ERROR_ANOTHER_PLACE_LOGIN
ERROR_ANOTHER_PLACE_LOGIN
ERROR_PASSWORD_EMPTY
ERROR_PASSWORD_EMPTY
ERROR_PASSWORD_ERROR
ERROR_PASSWORD_ERROR
\ZMError.ini
\ZMError.ini
%.2d.txt
%.2d.txt
%s IP %d.%d.%d.%d
%s IP %d.%d.%d.%d
%.3d.zm60.com
%.3d.zm60.com
2147516317
2147516317
\ZMConnect.ini
\ZMConnect.ini
. s:%d nPacketLen:%d
. s:%d nPacketLen:%d
%s\%.4d%.2d%.2d\%.2d\%.2d
%s\%.4d%.2d%.2d\%.2d\%.2d
xxxUpdate.exe
xxxUpdate.exe
\ZMApiUpdate.exe
\ZMApiUpdate.exe
\ZMWorkerUpdate.exe
\ZMWorkerUpdate.exe
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/xaml xml, application/x-ms-xbap, application/x-ms-application, application/vnd.ms-xpsdocument, */*
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/xaml xml, application/x-ms-xbap, application/x-ms-application, application/vnd.ms-xpsdocument, */*
AfxParseURL()
AfxParseURL()
s:%d MySend()
s:%d MySend()
: nResultLen %d
: nResultLen %d
: nPicIDLen %d
: nPicIDLen %d
PicID: %s
PicID: %s
cRecognizeState: %d
cRecognizeState: %d
Report
Report
Customer_Send_Report()
Customer_Send_Report()
: nNoticeLen %d
: nNoticeLen %d
Host: ssl.zhima365.com
Host: ssl.zhima365.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
/user/reg_user_vc .php?loginname=%s&password=%s&repassword=%s&email=%s&qq=%s&phone=%s&name=%s&softwareid=%d HTTP/1.1
/user/reg_user_vc .php?loginname=%s&password=%s&repassword=%s&email=%s&qq=%s&phone=%s&name=%s&softwareid=%d HTTP/1.1
hXXps://ssl.zhima365.com/user/reg_user_vc .php?loginname=%s&password=%s&repassword=%s&email=%s&qq=%s&phone=%s&name=%s&softwareid=%d
hXXps://ssl.zhima365.com/user/reg_user_vc .php?loginname=%s&password=%s&repassword=%s&email=%s&qq=%s&phone=%s&name=%s&softwareid=%d
11111111111
11111111111
Reg@163.com
Reg@163.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
/user/user_card_recharge.php?loginname=%s&password=%s&prepaid_card=%s&softwareid=%d HTTP/1.1
/user/user_card_recharge.php?loginname=%s&password=%s&prepaid_card=%s&softwareid=%d HTTP/1.1
hXXps://ssl.zhima365.com/user/user_card_recharge.php?loginname=%s&password=%s&prepaid_card=%s&softwareid=%d
hXXps://ssl.zhima365.com/user/user_card_recharge.php?loginname=%s&password=%s&prepaid_card=%s&softwareid=%d
/user/user_api_statistic.php?loginname=%s&password=%s HTTP/1.1
/user/user_api_statistic.php?loginname=%s&password=%s HTTP/1.1
hXXps://ssl.zhima365.com/user/user_api_statistic.php?loginname=%s&password=%s
hXXps://ssl.zhima365.com/user/user_api_statistic.php?loginname=%s&password=%s
Customer_Send_Login()
Customer_Send_Login()
nErrorCode:%d
nErrorCode:%d
IP %u
IP %u
s:%d Customer_Recv_Response_QueryBalance()
s:%d Customer_Recv_Response_QueryBalance()
: ZMApiUpdate.exe
: ZMApiUpdate.exe
ZM_QueryBalanceW() NULL == pszPassword
ZM_QueryBalanceW() NULL == pszPassword
Customer_Recv_Response_Login()
Customer_Recv_Response_Login()
s:%d Customer_Recv_Report_OK()
s:%d Customer_Recv_Report_OK()
s:%d Customer_Recv_Result()
s:%d Customer_Recv_Result()
s:%d Customer_Recv_Response_Login()
s:%d Customer_Recv_Response_Login()
s:%d Customer_Recv_Report_OK()
s:%d Customer_Recv_Report_OK()
ZM_ReByBufferW() NULL == pszPassword
ZM_ReByBufferW() NULL == pszPassword
sbtm %d
sbtm %d
nJPGSize:%d
nJPGSize:%d
nPicSize:%d
nPicSize:%d
ZM_ReByBufferW() NULL == pszSoftwareKey
ZM_ReByBufferW() NULL == pszSoftwareKey
ZM_ReByFileW() NULL == pszPassword
ZM_ReByFileW() NULL == pszPassword
ZM_ReByFileW() NULL == pszSoftwareKey
ZM_ReByFileW() NULL == pszSoftwareKey
ZM_ReByScreenW() NULL == pszPassword
ZM_ReByScreenW() NULL == pszPassword
ZM_ReByScreenW() NULL == pszSoftwareKey
ZM_ReByScreenW() NULL == pszSoftwareKey
ZM_ReportErrorW() pszPicID
ZM_ReportErrorW() pszPicID
ZM_ReportErrorW() NULL == pszPicID
ZM_ReportErrorW() NULL == pszPicID
ZM_QueryBalanceA() NULL == pszPassword
ZM_QueryBalanceA() NULL == pszPassword
ZM_ReByBufferA() NULL == pszPassword
ZM_ReByBufferA() NULL == pszPassword
ZM_ReByBufferA() NULL == pszSoftwareKey
ZM_ReByBufferA() NULL == pszSoftwareKey
ZM_ReByFileA() NULL == pszPassword
ZM_ReByFileA() NULL == pszPassword
ZM_ReByFileA() NULL == pszSoftwareKey
ZM_ReByFileA() NULL == pszSoftwareKey
ZM_ReByScreenA() NULL == pszPassword
ZM_ReByScreenA() NULL == pszPassword
ZM_ReByScreenA() NULL == pszSoftwareKey
ZM_ReByScreenA() NULL == pszSoftwareKey
ZM_ReportErrorA() pszPicID
ZM_ReportErrorA() pszPicID
ZM_ReportErrorA() NULL == pszPicID
ZM_ReportErrorA() NULL == pszPicID
\%.4d%.2d%.2d_%.2d%.2d%.2d_%s
\%.4d%.2d%.2d_%.2d%.2d%.2d_%s
WININET.DLL
WININET.DLL
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
%s.dll
%s.dll
TYPELIB\%s
TYPELIB\%s
accKeyboardShortcut
accKeyboardShortcut
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
CxImage 6.0.0
CxImage 6.0.0
!"#$%&'()* ,-./01234567
!"#$%&'()* ,-./01234567
2, 1, 1, 0
2, 1, 1, 0
All Files (*.*)
All Files (*.*)
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Disk full while accessing %1..An attempt was made to access %1 past its end.
Disk full while accessing %1..An attempt was made to access %1 past its end.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
#Unable to load mail system support.
#Unable to load mail system support.
(*.*)
(*.*)
%original file name%.exe_1588_rwx_007B2000_00001000:
MSVCRT.dll
MSVCRT.dll
IPHLPAPI.DLL
IPHLPAPI.DLL
PSAPI.DLL
PSAPI.DLL
KERNEL32.dll
KERNEL32.dll
USER32.dll
USER32.dll
RegOpenKeyExA
RegOpenKeyExA
RegCloseKey
RegCloseKey
RegCreateKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteKeyA
ADVAPI32.dll
ADVAPI32.dll
SHELL32.dll
SHELL32.dll
%original file name%.exe_1588_rwx_007BC000_00005000:
MSVCRT.dll
MSVCRT.dll
IPHLPAPI.DLL
IPHLPAPI.DLL
PSAPI.DLL
PSAPI.DLL
KERNEL32.dll
KERNEL32.dll
USER32.dll
USER32.dll
RegDeleteKeyA
RegDeleteKeyA
ADVAPI32.dll
ADVAPI32.dll
RegCreateKeyExA
RegCreateKeyExA
RegCloseKey
RegCloseKey
RegOpenKeyExA
RegOpenKeyExA
SHELL32.dll
SHELL32.dll
%original file name%.exe_1588_rwx_00853000_0006B000:
KERNEL32.dll
KERNEL32.dll
USER32.dll
USER32.dll
ADVAPI32.dll
ADVAPI32.dll
WS2_32.dll
WS2_32.dll
OLEAUT32.dll
OLEAUT32.dll
ole32.dll
ole32.dll
GDI32.dll
GDI32.dll
SHELL32.dll
SHELL32.dll
WINMM.dll
WINMM.dll
WINSPOOL.DRV
WINSPOOL.DRV
COMCTL32.dll
COMCTL32.dll
RASAPI32.dll
RASAPI32.dll
WININET.dll
WININET.dll
a`fTP
a`fTP
oledlg.dll
oledlg.dll
comdlg32.dll
comdlg32.dll
im:%F
im:%F
i*:%F
i*:%F
ÃŽw9i
ÃŽw9i
iW:%F
iW:%F
i6:%F
i6:%F
i6 ü
i6 ü
iN:%F
iN:%F
iN:ü
iN:ü
iW %F
iW %F
i9 %F
i9 %F
%original file name%.exe_1588_rwx_008BF000_00002000:
GetWindowsDirectoryA
GetWindowsDirectoryA
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
USER32.dll
USER32.dll
%original file name%.exe_1588_rwx_00980000_0004C000:
KERNELBASE.dll
KERNELBASE.dll
BaseGetProcessExePath
BaseGetProcessExePath
BaseReleaseProcessExePath
BaseReleaseProcessExePath
ConnectNamedPipe
ConnectNamedPipe
CreateIoCompletionPort
CreateIoCompletionPort
CreateMutexExA
CreateMutexExA
CreateMutexExW
CreateMutexExW
CreateNamedPipeW
CreateNamedPipeW
CreatePipe
CreatePipe
DisconnectNamedPipe
DisconnectNamedPipe
EnumCalendarInfoExEx
EnumCalendarInfoExEx
EnumDateFormatsExEx
EnumDateFormatsExEx
GetCPFileNameFromRegistry
GetCPFileNameFromRegistry
GetCPHashNode
GetCPHashNode
GetCPInfo
GetCPInfo
GetCPInfoExW
GetCPInfoExW
GetNamedPipeAttribute
GetNamedPipeAttribute
GetNamedPipeClientComputerNameW
GetNamedPipeClientComputerNameW
GetProcessHeap
GetProcessHeap
GetProcessHeaps
GetProcessHeaps
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryW
GetWindowsAccountDomainSid
GetWindowsAccountDomainSid
GetWindowsDirectoryA
GetWindowsDirectoryA
GetWindowsDirectoryW
GetWindowsDirectoryW
ImpersonateNamedPipeClient
ImpersonateNamedPipeClient
NeedCurrentDirectoryForExePathA
NeedCurrentDirectoryForExePathA
NeedCurrentDirectoryForExePathW
NeedCurrentDirectoryForExePathW
OpenRegKey
OpenRegKey
PeekNamedPipe
PeekNamedPipe
SetNamedPipeHandleState
SetNamedPipeHandleState
SetProcessShutdownParameters
SetProcessShutdownParameters
TransactNamedPipe
TransactNamedPipe
WaitNamedPipeW
WaitNamedPipeW
NTDLL.RtlAcquireSRWLockExclusive
NTDLL.RtlAcquireSRWLockExclusive
NTDLL.RtlAcquireSRWLockShared
NTDLL.RtlAcquireSRWLockShared
NTDLL.TpCancelAsyncIoOperation
NTDLL.TpCancelAsyncIoOperation
NTDLL.TpReleasePool
NTDLL.TpReleasePool
NTDLL.TpReleaseCleanupGroup
NTDLL.TpReleaseCleanupGroup
NTDLL.TpReleaseCleanupGroupMembers
NTDLL.TpReleaseCleanupGroupMembers
NTDLL.TpReleaseIoCompletion
NTDLL.TpReleaseIoCompletion
NTDLL.TpReleaseTimer
NTDLL.TpReleaseTimer
NTDLL.TpReleaseWait
NTDLL.TpReleaseWait
NTDLL.TpReleaseWork
NTDLL.TpReleaseWork
NTDLL.RtlDecodePointer
NTDLL.RtlDecodePointer
NTDLL.RtlDecodeSystemPointer
NTDLL.RtlDecodeSystemPointer
NTDLL.RtlDeleteCriticalSection
NTDLL.RtlDeleteCriticalSection
NTDLL.TpDisassociateCallback
NTDLL.TpDisassociateCallback
NTDLL.RtlEncodePointer
NTDLL.RtlEncodePointer
NTDLL.RtlEncodeSystemPointer
NTDLL.RtlEncodeSystemPointer
NTDLL.RtlEnterCriticalSection
NTDLL.RtlEnterCriticalSection
NTDLL.RtlExitUserThread
NTDLL.RtlExitUserThread
NTDLL.NtFlushProcessWriteBuffers
NTDLL.NtFlushProcessWriteBuffers
NTDLL.TpCallbackUnloadDllOnCompletion
NTDLL.TpCallbackUnloadDllOnCompletion
NTDLL.RtlAllocateHeap
NTDLL.RtlAllocateHeap
NTDLL.RtlFreeHeap
NTDLL.RtlFreeHeap
NTDLL.RtlReAllocateHeap
NTDLL.RtlReAllocateHeap
NTDLL.RtlSizeHeap
NTDLL.RtlSizeHeap
NTDLL.RtlInitializeCriticalSection
NTDLL.RtlInitializeCriticalSection
NTDLL.RtlInitializeSListHead
NTDLL.RtlInitializeSListHead
NTDLL.RtlInitializeSRWLock
NTDLL.RtlInitializeSRWLock
NTDLL.RtlInterlockedCompareExchange64
NTDLL.RtlInterlockedCompareExchange64
NTDLL.RtlInterlockedFlushSList
NTDLL.RtlInterlockedFlushSList
NTDLL.RtlInterlockedPopEntrySList
NTDLL.RtlInterlockedPopEntrySList
NTDLL.RtlInterlockedPushEntrySList
NTDLL.RtlInterlockedPushEntrySList
NTDLL.RtlInterlockedPushListSList
NTDLL.RtlInterlockedPushListSList
NTDLL.TpIsTimerSet
NTDLL.TpIsTimerSet
NTDLL.RtlLeaveCriticalSection
NTDLL.RtlLeaveCriticalSection
NTDLL.TpCallbackLeaveCriticalSectionOnCompletion
NTDLL.TpCallbackLeaveCriticalSectionOnCompletion
NTDLL.RtlQueryDepthSList
NTDLL.RtlQueryDepthSList
NTDLL.RtlQueryPerformanceCounter
NTDLL.RtlQueryPerformanceCounter
NTDLL.RtlQueryPerformanceFrequency
NTDLL.RtlQueryPerformanceFrequency
NTDLL.TpCallbackReleaseMutexOnCompletion
NTDLL.TpCallbackReleaseMutexOnCompletion
NTDLL.RtlReleaseSRWLockExclusive
NTDLL.RtlReleaseSRWLockExclusive
NTDLL.RtlReleaseSRWLockShared
NTDLL.RtlReleaseSRWLockShared
NTDLL.TpCallbackReleaseSemaphoreOnCompletion
NTDLL.TpCallbackReleaseSemaphoreOnCompletion
NTDLL.RtlSetCriticalSectionSpinCount
NTDLL.RtlSetCriticalSectionSpinCount
NTDLL.TpCallbackSetEventOnCompletion
NTDLL.TpCallbackSetEventOnCompletion
NTDLL.RtlSetLastWin32Error
NTDLL.RtlSetLastWin32Error
NTDLL.TpSetPoolMaxThreads
NTDLL.TpSetPoolMaxThreads
NTDLL.TpSetTimer
NTDLL.TpSetTimer
NTDLL.TpSetWait
NTDLL.TpSetWait
NTDLL.TpStartAsyncIoOperation
NTDLL.TpStartAsyncIoOperation
NTDLL.TpPostWork
NTDLL.TpPostWork
NTDLL.RtlTryAcquireSRWLockExclusive
NTDLL.RtlTryAcquireSRWLockExclusive
NTDLL.RtlTryAcquireSRWLockShared
NTDLL.RtlTryAcquireSRWLockShared
NTDLL.RtlTryEnterCriticalSection
NTDLL.RtlTryEnterCriticalSection
NTDLL.TpWaitForIoCompletion
NTDLL.TpWaitForIoCompletion
NTDLL.TpWaitForTimer
NTDLL.TpWaitForTimer
NTDLL.TpWaitForWait
NTDLL.TpWaitForWait
NTDLL.TpWaitForWork
NTDLL.TpWaitForWork
%X@7u
%X@7u
j.Xf;
j.Xf;
PSSSSSSh
PSSSSSSh
PSSSSSSSh
PSSSSSSSh
SSSSh
SSSSh
VWSSh
VWSSh
SXS: %s failing because RtlQueryInformationActivationContext() returned status lx
SXS: %s failing because RtlQueryInformationActivationContext() returned status lx
SXS: %s - Failing thread create because RtlActivateActivationContextEx() failed with status lx
SXS: %s - Failing thread create because RtlActivateActivationContextEx() failed with status lx
SXS: %s - Failing thread create because RtlQueryInformationActivationContext() failed with status lx
SXS: %s - Failing thread create because RtlQueryInformationActivationContext() failed with status lx
%s - Failing thread create because RtlAllocateActivationContextStack() failed with status lx
%s - Failing thread create because RtlAllocateActivationContextStack() failed with status lx
PVWSSh
PVWSSh
QSSSSh
QSSSSh
`VSSSSh
`VSSSSh
t9VSSSSh
t9VSSSSh
%6uhP%6uSj3
%6uhP%6uSj3
SXS: %s - Failure getting active activation context; ntstatus lx
SXS: %s - Failure getting active activation context; ntstatus lx
x0-u%f
x0-u%f
j.Yf;
j.Yf;
t.Ht!HHt
t.Ht!HHt
t.HHt#
t.HHt#
?456789:;
?456789:;
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
ntdll.dll
ntdll.dll
NtCreateNamedPipeFile
NtCreateNamedPipeFile
NtDelayExecution
NtDelayExecution
NtQueryValueKey
NtQueryValueKey
NtOpenKey
NtOpenKey
RtlReportSilentProcessExit
RtlReportSilentProcessExit
NtYieldExecution
NtYieldExecution
RtlGetProcessHeaps
RtlGetProcessHeaps
NtSetValueKey
NtSetValueKey
NtEnumerateValueKey
NtEnumerateValueKey
NtCreateKey
NtCreateKey
NtDeleteKey
NtDeleteKey
NtEnumerateKey
NtEnumerateKey
NtNotifyChangeKey
NtNotifyChangeKey
NtDeleteValueKey
NtDeleteValueKey
NtQueryMultipleValueKey
NtQueryMultipleValueKey
kernelbase.pdb
kernelbase.pdb
4"4@4^4|4
4"4@4^4|4
9-9I9e9}9
9-9I9e9}9
Allow flag to be passed with CreateFile call that indicates to perform downgrade if applicable.
Allow flag to be passed with CreateFile call that indicates to perform downgrade if applicable.
kernel32.dll
kernel32.dll
\Windows
\Windows
\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters
\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters
NoDefaultCurrentDirectoryInExePath
NoDefaultCurrentDirectoryInExePath
%s\%x\%s
%s\%x\%s
netmsg.dll
netmsg.dll
sShortTime
sShortTime
sShortDate
sShortDate
\\.\MountPointManager
\\.\MountPointManager
\Device\NamedPipe\
\Device\NamedPipe\
\DosDevices\pipe\
\DosDevices\pipe\
\\.\pipe\
\\.\pipe\
pipe\
pipe\
\\?\UNC
\\?\UNC
WUSER32.DLL
WUSER32.DLL
\\?\UNC\
\\?\UNC\
\\?\GLOBALROOT
\\?\GLOBALROOT
0123456789
0123456789
%s%s%s
%s%s%s
Windows NT BASE API Client DLL
Windows NT BASE API Client DLL
6.1.7601.17651 (win7sp1_gdr.110715-1504)
6.1.7601.17651 (win7sp1_gdr.110715-1504)
Windows
Windows
Operating System
Operating System
6.1.7601.17651
6.1.7601.17651
%original file name%.exe_1588_rwx_017C0000_0013D000:
8SsHd
8SsHd
d:\win7sp1_gdr\minkernel\threadpool\ntdll\cgrp.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\cgrp.c
TppWorkpExecuteCallback
TppWorkpExecuteCallback
TppSimplepExecuteCallback
TppSimplepExecuteCallback
d:\win7sp1_gdr\minkernel\threadpool\ntdll\simple.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\simple.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\io.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\io.c
SsHd;
SsHd;
_CorExeMain
_CorExeMain
tùp
tùp
d:\win7sp1_gdr\minkernel\threadpool\ntdll\waiter.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\waiter.c
TppWaitpExecuteCallback
TppWaitpExecuteCallback
TppTimerpExecuteCallback
TppTimerpExecuteCallback
d:\win7sp1_gdr\minkernel\threadpool\ntdll\cgrpmem.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\cgrpmem.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\lpc.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\lpc.c
TppAlpcpExecuteCallback
TppAlpcpExecuteCallback
d:\win7sp1_gdr\minkernel\threadpool\ntdll\callback.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\callback.c
ntdll.dll
ntdll.dll
EtwpGetCpuSpeed
EtwpGetCpuSpeed
EvtIntReportAuthzEventAndSourceAsync
EvtIntReportAuthzEventAndSourceAsync
EvtIntReportEventAndSourceAsync
EvtIntReportEventAndSourceAsync
LdrOpenImageFileOptionsKey
LdrOpenImageFileOptionsKey
LdrQueryImageFileExecutionOptions
LdrQueryImageFileExecutionOptions
LdrQueryImageFileExecutionOptionsEx
LdrQueryImageFileExecutionOptionsEx
LdrQueryImageFileKeyOption
LdrQueryImageFileKeyOption
NtAcceptConnectPort
NtAcceptConnectPort
NtAlpcAcceptConnectPort
NtAlpcAcceptConnectPort
NtAlpcConnectPort
NtAlpcConnectPort
NtAlpcCreatePort
NtAlpcCreatePort
NtAlpcCreatePortSection
NtAlpcCreatePortSection
NtAlpcDeletePortSection
NtAlpcDeletePortSection
NtAlpcDisconnectPort
NtAlpcDisconnectPort
NtAlpcImpersonateClientOfPort
NtAlpcImpersonateClientOfPort
NtAlpcSendWaitReceivePort
NtAlpcSendWaitReceivePort
NtCompactKeys
NtCompactKeys
NtCompleteConnectPort
NtCompleteConnectPort
NtCompressKey
NtCompressKey
NtConnectPort
NtConnectPort
NtCreateKey
NtCreateKey
NtCreateKeyTransacted
NtCreateKeyTransacted
NtCreateKeyedEvent
NtCreateKeyedEvent
NtCreateNamedPipeFile
NtCreateNamedPipeFile
NtCreatePort
NtCreatePort
NtCreateWaitablePort
NtCreateWaitablePort
NtDelayExecution
NtDelayExecution
NtDeleteKey
NtDeleteKey
NtDeleteValueKey
NtDeleteValueKey
NtEnumerateKey
NtEnumerateKey
NtEnumerateValueKey
NtEnumerateValueKey
NtFlushKey
NtFlushKey
NtImpersonateClientOfPort
NtImpersonateClientOfPort
NtListenPort
NtListenPort
NtLoadKey
NtLoadKey
NtLoadKey2
NtLoadKey2
NtLoadKeyEx
NtLoadKeyEx
NtLockProductActivationKeys
NtLockProductActivationKeys
NtLockRegistryKey
NtLockRegistryKey
NtNotifyChangeKey
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
NtNotifyChangeMultipleKeys
NtOpenKey
NtOpenKey
NtOpenKeyEx
NtOpenKeyEx
NtOpenKeyTransacted
NtOpenKeyTransacted
NtOpenKeyTransactedEx
NtOpenKeyTransactedEx
NtOpenKeyedEvent
NtOpenKeyedEvent
NtQueryInformationPort
NtQueryInformationPort
NtQueryKey
NtQueryKey
NtQueryMultipleValueKey
NtQueryMultipleValueKey
NtQueryOpenSubKeys
NtQueryOpenSubKeys
NtQueryOpenSubKeysEx
NtQueryOpenSubKeysEx
NtQueryPortInformationProcess
NtQueryPortInformationProcess
NtQueryValueKey
NtQueryValueKey
NtRegisterThreadTerminatePort
NtRegisterThreadTerminatePort
NtReleaseKeyedEvent
NtReleaseKeyedEvent
NtRenameKey
NtRenameKey
NtReplaceKey
NtReplaceKey
NtReplyPort
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReceivePort
NtReplyWaitReceivePortEx
NtReplyWaitReceivePortEx
NtReplyWaitReplyPort
NtReplyWaitReplyPort
NtRequestPort
NtRequestPort
NtRequestWaitReplyPort
NtRequestWaitReplyPort
NtRestoreKey
NtRestoreKey
NtSaveKey
NtSaveKey
NtSaveKeyEx
NtSaveKeyEx
NtSaveMergedKeys
NtSaveMergedKeys
NtSecureConnectPort
NtSecureConnectPort
NtSetDefaultHardErrorPort
NtSetDefaultHardErrorPort
NtSetInformationKey
NtSetInformationKey
NtSetThreadExecutionState
NtSetThreadExecutionState
NtSetValueKey
NtSetValueKey
NtUnloadKey
NtUnloadKey
NtUnloadKey2
NtUnloadKey2
NtUnloadKeyEx
NtUnloadKeyEx
NtWaitForKeyedEvent
NtWaitForKeyedEvent
NtYieldExecution
NtYieldExecution
RtlCheckRegistryKey
RtlCheckRegistryKey
RtlCmDecodeMemIoResource
RtlCmDecodeMemIoResource
RtlComputeImportTableHash
RtlComputeImportTableHash
RtlCreateRegistryKey
RtlCreateRegistryKey
RtlEnumProcessHeaps
RtlEnumProcessHeaps
RtlFormatCurrentUserKeyPath
RtlFormatCurrentUserKeyPath
RtlGetProcessHeaps
RtlGetProcessHeaps
RtlIsCurrentThreadAttachExempt
RtlIsCurrentThreadAttachExempt
RtlQueryProcessHeapInformation
RtlQueryProcessHeapInformation
RtlReportException
RtlReportException
RtlReportSilentProcessExit
RtlReportSilentProcessExit
RtlReportSqmEscalation
RtlReportSqmEscalation
RtlRunOnceExecuteOnce
RtlRunOnceExecuteOnce
RtlSendMsgToSm
RtlSendMsgToSm
RtlValidateProcessHeaps
RtlValidateProcessHeaps
RtlWerpReportException
RtlWerpReportException
RtlpCleanupRegistryKeys
RtlpCleanupRegistryKeys
RtlpNtCreateKey
RtlpNtCreateKey
RtlpNtEnumerateSubKey
RtlpNtEnumerateSubKey
RtlpNtMakeTemporaryKey
RtlpNtMakeTemporaryKey
RtlpNtOpenKey
RtlpNtOpenKey
RtlpNtQueryValueKey
RtlpNtQueryValueKey
RtlpNtSetValueKey
RtlpNtSetValueKey
SbExecuteProcedure
SbExecuteProcedure
ShipAssert
ShipAssert
ShipAssertGetBufferInfo
ShipAssertGetBufferInfo
ShipAssertMsgA
ShipAssertMsgA
ShipAssertMsgW
ShipAssertMsgW
TpCancelAsyncIoOperation
TpCancelAsyncIoOperation
TpStartAsyncIoOperation
TpStartAsyncIoOperation
WerReportSQMEvent
WerReportSQMEvent
ZwAcceptConnectPort
ZwAcceptConnectPort
ZwAlpcAcceptConnectPort
ZwAlpcAcceptConnectPort
ZwAlpcConnectPort
ZwAlpcConnectPort
ZwAlpcCreatePort
ZwAlpcCreatePort
ZwAlpcCreatePortSection
ZwAlpcCreatePortSection
ZwAlpcDeletePortSection
ZwAlpcDeletePortSection
ZwAlpcDisconnectPort
ZwAlpcDisconnectPort
ZwAlpcImpersonateClientOfPort
ZwAlpcImpersonateClientOfPort
ZwAlpcSendWaitReceivePort
ZwAlpcSendWaitReceivePort
ZwCompactKeys
ZwCompactKeys
ZwCompleteConnectPort
ZwCompleteConnectPort
ZwCompressKey
ZwCompressKey
ZwConnectPort
ZwConnectPort
ZwCreateKey
ZwCreateKey
ZwCreateKeyTransacted
ZwCreateKeyTransacted
ZwCreateKeyedEvent
ZwCreateKeyedEvent
ZwCreateNamedPipeFile
ZwCreateNamedPipeFile
ZwCreatePort
ZwCreatePort
ZwCreateWaitablePort
ZwCreateWaitablePort
ZwDelayExecution
ZwDelayExecution
ZwDeleteKey
ZwDeleteKey
ZwDeleteValueKey
ZwDeleteValueKey
ZwEnumerateKey
ZwEnumerateKey
ZwEnumerateValueKey
ZwEnumerateValueKey
ZwFlushKey
ZwFlushKey
ZwImpersonateClientOfPort
ZwImpersonateClientOfPort
ZwListenPort
ZwListenPort
ZwLoadKey
ZwLoadKey
ZwLoadKey2
ZwLoadKey2
ZwLoadKeyEx
ZwLoadKeyEx
ZwLockProductActivationKeys
ZwLockProductActivationKeys
ZwLockRegistryKey
ZwLockRegistryKey
ZwNotifyChangeKey
ZwNotifyChangeKey
ZwNotifyChangeMultipleKeys
ZwNotifyChangeMultipleKeys
ZwOpenKey
ZwOpenKey
ZwOpenKeyEx
ZwOpenKeyEx
ZwOpenKeyTransacted
ZwOpenKeyTransacted
ZwOpenKeyTransactedEx
ZwOpenKeyTransactedEx
ZwOpenKeyedEvent
ZwOpenKeyedEvent
ZwQueryInformationPort
ZwQueryInformationPort
ZwQueryKey
ZwQueryKey
ZwQueryMultipleValueKey
ZwQueryMultipleValueKey
ZwQueryOpenSubKeys
ZwQueryOpenSubKeys
ZwQueryOpenSubKeysEx
ZwQueryOpenSubKeysEx
ZwQueryPortInformationProcess
ZwQueryPortInformationProcess
ZwQueryValueKey
ZwQueryValueKey
ZwRegisterThreadTerminatePort
ZwRegisterThreadTerminatePort
ZwReleaseKeyedEvent
ZwReleaseKeyedEvent
ZwRenameKey
ZwRenameKey
ZwReplaceKey
ZwReplaceKey
ZwReplyPort
ZwReplyPort
ZwReplyWaitReceivePort
ZwReplyWaitReceivePort
ZwReplyWaitReceivePortEx
ZwReplyWaitReceivePortEx
ZwReplyWaitReplyPort
ZwReplyWaitReplyPort
ZwRequestPort
ZwRequestPort
ZwRequestWaitReplyPort
ZwRequestWaitReplyPort
ZwRestoreKey
ZwRestoreKey
ZwSaveKey
ZwSaveKey
ZwSaveKeyEx
ZwSaveKeyEx
ZwSaveMergedKeys
ZwSaveMergedKeys
ZwSecureConnectPort
ZwSecureConnectPort
ZwSetDefaultHardErrorPort
ZwSetDefaultHardErrorPort
ZwSetInformationKey
ZwSetInformationKey
ZwSetThreadExecutionState
ZwSetThreadExecutionState
ZwSetValueKey
ZwSetValueKey
ZwUnloadKey
ZwUnloadKey
ZwUnloadKey2
ZwUnloadKey2
ZwUnloadKeyEx
ZwUnloadKeyEx
ZwWaitForKeyedEvent
ZwWaitForKeyedEvent
ZwYieldExecution
ZwYieldExecution
.txt2
.txt2
secserv.dll
secserv.dll
.sforce
.sforce
.pcle
.pcle
.aspack
.aspack
Set 0x%X protection for %p section for %d bytes, old protection 0x%X
Set 0x%X protection for %p section for %d bytes, old protection 0x%X
CLIENT(ntdll): Tyring to fix protection for %ws section in %wZ module to 0x%X
CLIENT(ntdll): Tyring to fix protection for %ws section in %wZ module to 0x%X
CLIENT(ntdll): Found Execute=1, turning off execution protection for the process because of %wZ
CLIENT(ntdll): Found Execute=1, turning off execution protection for the process because of %wZ
CLIENT(ntdll): Found ExecuteOptions = %ws for %wZ in application compatibility database
CLIENT(ntdll): Found ExecuteOptions = %ws for %wZ in application compatibility database
CLIENT(ntdll): Found CheckAppHelp = %d for %wZ in ImageFileExecutionOptions
CLIENT(ntdll): Found CheckAppHelp = %d for %wZ in ImageFileExecutionOptions
x:x @ d - %s - %s:
x:x @ d - %s - %s:
d:\win7sp1_gdr\minkernel\ntdll\ldrapi.c
d:\win7sp1_gdr\minkernel\ntdll\ldrapi.c
d:\win7sp1_gdr\minkernel\ntdll\ldrfind.c
d:\win7sp1_gdr\minkernel\ntdll\ldrfind.c
Changing the protection of the executable at %p failed with status 0xlx
Changing the protection of the executable at %p failed with status 0xlx
d:\win7sp1_gdr\minkernel\ntdll\ldrinit.c
d:\win7sp1_gdr\minkernel\ntdll\ldrinit.c
Exception record: .exr %p
Exception record: .exr %p
Context record: .cxr %p
Context record: .cxr %p
Process 0x%x (%wZ) exiting
Process 0x%x (%wZ) exiting
Could not locate procedure "%s" in the shim engine DLL
Could not locate procedure "%s" in the shim engine DLL
LdrpInitializeExecutionOptions
LdrpInitializeExecutionOptions
Running the init routines of the executable's static imports failed with status 0xlx
Running the init routines of the executable's static imports failed with status 0xlx
Loading Windows subsystem DLL "%wZ" failed with status 0xlx
Loading Windows subsystem DLL "%wZ" failed with status 0xlx
Walking the import tables of the executable and its static imports failed with status 0xlx
Walking the import tables of the executable and its static imports failed with status 0xlx
Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0xlx
Locating procedure "%Z" in Windows subsystem DLL "%wZ" failed with status 0xlx
Beginning execution of %wZ (%wZ)
Beginning execution of %wZ (%wZ)
Allocating a data table entry for the executable failed
Allocating a data table entry for the executable failed
Initializing the execution options for the process %lx failed with status 0xlx
Initializing the execution options for the process %lx failed with status 0xlx
Delaying execution failed with status 0xlx
Delaying execution failed with status 0xlx
d:\win7sp1_gdr\minkernel\ntdll\ldrsnap.c
d:\win7sp1_gdr\minkernel\ntdll\ldrsnap.c
LdrpLoadImportModule
LdrpLoadImportModule
DLL name: %s DLL path: %wZ
DLL name: %s DLL path: %wZ
Calling the Windows subsystem post-import routine %p failed with status 0xlx
Calling the Windows subsystem post-import routine %p failed with status 0xlx
Procedure "%s" could not be located in DLL "%s"
Procedure "%s" could not be located in DLL "%s"
Ordinal 0x%lx could not be located in DLL "%s"
Ordinal 0x%lx could not be located in DLL "%s"
Hint index 0x%lx for procedure "%s" in DLL "%s" is invalid
Hint index 0x%lx for procedure "%s" in DLL "%s" is invalid
%s loaded DLL "%wZ" (new reference count: 0x%lx)
%s loaded DLL "%wZ" (new reference count: 0x%lx)
LdrpFixupIATForRelocatedImport
LdrpFixupIATForRelocatedImport
DLL "%wZ" does not contain an export table
DLL "%wZ" does not contain an export table
DLL "%wZ" is bound via forwarders to "%s"
DLL "%wZ" is bound via forwarders to "%s"
Loading "%ws" from the bound import table of DLL "%wZ" failed with status 0xlx
Loading "%ws" from the bound import table of DLL "%wZ" failed with status 0xlx
DLL "%wZ" is bound to "%s"
DLL "%wZ" is bound to "%s"
LdrpHandleOneNewFormatImportDescriptor
LdrpHandleOneNewFormatImportDescriptor
Snapping the imports from DLL "%wZ" to DLL "%wZ" failed with status 0xlx
Snapping the imports from DLL "%wZ" to DLL "%wZ" failed with status 0xlx
Loading "%ws" from the import table of DLL "%wZ" failed with status 0xlx
Loading "%ws" from the import table of DLL "%wZ" failed with status 0xlx
DLL "%wZ" imports "%s"
DLL "%wZ" imports "%s"
LdrpHandleOneOldFormatImportDescriptor
LdrpHandleOneOldFormatImportDescriptor
LdrpProcessStaticImports
LdrpProcessStaticImports
d:\win7sp1_gdr\minkernel\ntdll\ldrtls.c
d:\win7sp1_gdr\minkernel\ntdll\ldrtls.c
TlsVector %p Index %d : %d bytes copied from %p to %p
TlsVector %p Index %d : %d bytes copied from %p to %p
Execute '.cxr %p' to dump context
Execute '.cxr %p' to dump context
d:\win7sp1_gdr\minkernel\ntdll\ldrutil.c
d:\win7sp1_gdr\minkernel\ntdll\ldrutil.c
Function %s raised exception 0xlx
Function %s raised exception 0xlx
RTL: Acquire Shared Sem Timeout %d(%I64u secs)
RTL: Acquire Shared Sem Timeout %d(%I64u secs)
RTL: Acquire Exclusive Sem Timeout %d (%I64u secs)
RTL: Acquire Exclusive Sem Timeout %d (%I64u secs)
NTDLL: Calling thread (%X) not owner of CritSect: %p Owner ThreadId: %X
NTDLL: Calling thread (%X) not owner of CritSect: %p Owner ThreadId: %X
RTL: Pid.Tid %x.%x, owner tid %x Critical Section %p - ContentionCount == %lu
RTL: Pid.Tid %x.%x, owner tid %x Critical Section %p - ContentionCount == %lu
RTL: Enter Critical Section Timeout (%I64u secs) %d
RTL: Enter Critical Section Timeout (%I64u secs) %d
AVRF: Found duplicate for (%ws: %s) in %ws
AVRF: Found duplicate for (%ws: %s) in %ws
AVRF: chain: thunk: %s == %s ?
AVRF: chain: thunk: %s == %s ?
AVRF: Chaining (%ws: %s) to %ws
AVRF: Chaining (%ws: %s) to %ws
AVRF: Checking %ws for duplicate (%ws: %s)
AVRF: Checking %ws for duplicate (%ws: %s)
AVRF: Snapped (%ws: %s) with (%ws: %p).
AVRF: Snapped (%ws: %s) with (%ws: %p).
AVRF: internal error: New thunk for %s is null.
AVRF: internal error: New thunk for %s is null.
AVRF: Unable to unprotect IAT to modify thunks (status X).
AVRF: Unable to unprotect IAT to modify thunks (status X).
AVRF: (%ws) %s export found.
AVRF: (%ws) %s export found.
AVRF: warning: did not find `%s' export in %ws .
AVRF: warning: did not find `%s' export in %ws .
AVRF: failed to enable handle checking (status %X)
AVRF: failed to enable handle checking (status %X)
AVRF: Failed to find `VerifierStopMessage()' export in verifier.dll!
AVRF: Failed to find `VerifierStopMessage()' export in verifier.dll!
AVRF: Failed to find verifier.dll among loaded providers!
AVRF: Failed to find verifier.dll among loaded providers!
VERIFIER STOP %p: pid 0x%X: %s
VERIFIER STOP %p: pid 0x%X: %s
%p : %s
%p : %s
AVRF: provider %ws passed an invalid descriptor @ %p
AVRF: provider %ws passed an invalid descriptor @ %p
AVRF: %ws: failed to load provider `%ws' (status X) from %ws
AVRF: %ws: failed to load provider `%ws' (status X) from %ws
AVRF: pid 0x%X: found dll descriptor for `%ws' with verified exports
AVRF: pid 0x%X: found dll descriptor for `%ws' with verified exports
AVRF: %ws: pid 0x%X: application verifier will be disabled due to an initialization error.
AVRF: %ws: pid 0x%X: application verifier will be disabled due to an initialization error.
AVRF: %ws: pid 0x%X: flags 0x%X: application verifier enabled
AVRF: %ws: pid 0x%X: flags 0x%X: application verifier enabled
rUS.Length PrivatePreallocatedString->MaximumLength
rUS.Length PrivatePreallocatedString->MaximumLength
d:\win7sp1_gdr\minkernel\ntdll\sxsisol.cpp
d:\win7sp1_gdr\minkernel\ntdll\sxsisol.cpp
!(askd.Flags & ACTIVATION_CONTEXT_SECTION_KEYED_DATA_FLAG_FOUND_IN_SYSTEM_DEFAULT)
!(askd.Flags & ACTIVATION_CONTEXT_SECTION_KEYED_DATA_FLAG_FOUND_IN_SYSTEM_DEFAULT)
[%x.%x] SXS: %s - Relative redirection plus env var expansion.
[%x.%x] SXS: %s - Relative redirection plus env var expansion.
SXS: %s() passed the empty activation context data
SXS: %s() passed the empty activation context data
SXS: %s() called with invalid cookie tid 0xI64x - should be lx
SXS: %s() called with invalid cookie tid 0xI64x - should be lx
SXS: %s() called with invalid cookie type 0xI64x
SXS: %s() called with invalid cookie type 0xI64x
SXS: %s() called with invalid flags 0xlx
SXS: %s() called with invalid flags 0xlx
SXS: %s() Active frame is not the frame being deactivated %p != %p
SXS: %s() Active frame is not the frame being deactivated %p != %p
SXS: %s() flags contains return_assembly_metadata but they don't fit in size, return invalid_parameter 0xlx.
SXS: %s() flags contains return_assembly_metadata but they don't fit in size, return invalid_parameter 0xlx.
SXS: %s() flags contains return_flags but they don't fit in size, return invalid_parameter 0xlx.
SXS: %s() flags contains return_flags but they don't fit in size, return invalid_parameter 0xlx.
SXS: String hash table entry at %p has invalid key offset (= %ld)
SXS: String hash table entry at %p has invalid key offset (= %ld)
RtlpFindUnicodeStringInSection: Unsupported hash algorithm %lu found in string section.
RtlpFindUnicodeStringInSection: Unsupported hash algorithm %lu found in string section.
SXS/RTL: TOC entry array (offset: %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
SXS/RTL: TOC entry array (offset: %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
SXS/RTL: Extended TOC section TOC %d (offset: %ld, size: %u) is outside activation context data bounds (%lu bytes)
SXS/RTL: Extended TOC section TOC %d (offset: %ld, size: %u) is outside activation context data bounds (%lu bytes)
SXS/RTL: Extended TOC entry array (starting at offset %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
SXS/RTL: Extended TOC entry array (starting at offset %ld; count = %lu; entry size = %u) is outside bounds of activation context data (%lu bytes)
SXS: %s() found assembly information section with user data extending beyond section data
SXS: %s() found assembly information section with user data extending beyond section data
SXS: %s() found assembly information section with user data too small
SXS: %s() found assembly information section with user data too small
SXS: %s() found assembly information section with user data overlapping section header
SXS: %s() found assembly information section with user data overlapping section header
SXS: %s() found assembly information section with search structure overlapping section header
SXS: %s() found assembly information section with search structure overlapping section header
SXS: %s() found assembly information section with element list overlapping section header
SXS: %s() found assembly information section with element list overlapping section header
SXS: %s() passed string section at %p with too small of a header
SXS: %s() passed string section at %p with too small of a header
SXS: %s() passed string section at %p claims %lu byte header size; that doesn't even include the HeaderSize member!
SXS: %s() passed string section at %p claims %lu byte header size; that doesn't even include the HeaderSize member!
SXS: %s() found assembly information section with wrong magic value
SXS: %s() found assembly information section with wrong magic value
SXS: %s() passed string section at %p only %lu bytes long; that's not even enough for the 4-byte magic and 4-byte header length!
SXS: %s() passed string section at %p only %lu bytes long; that's not even enough for the 4-byte magic and 4-byte header length!
SXS: %s() received invalid non-zero sub-instance index %lu
SXS: %s() received invalid non-zero sub-instance index %lu
SXS: %s() found activation context data at %p with assembly roster that has no root
SXS: %s() found activation context data at %p with assembly roster that has no root
SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context
SXS: %s() received invalid sub-instance index %lu out of %lu Assemblies in the Acitvation Context
SXS: %s() received invalid file index (%d) in Assembly (%d)
SXS: %s() received invalid file index (%d) in Assembly (%d)
SXS: %s() found activation context data at %p with wrong format
SXS: %s() found activation context data at %p with wrong format
SXS: %s() - internal coding error; missing switch statement branch for InfoClass == %lu
SXS: %s() - internal coding error; missing switch statement branch for InfoClass == %lu
SXS: %s() - caller asked to use active activation context but passed %p
SXS: %s() - caller asked to use active activation context but passed %p
SXS: %s() - Caller passed invalid hmodule (%p)
SXS: %s() - Caller passed invalid hmodule (%p)
SXS: %s() - Caller asked to use activation context from hmodule but passed NULL
SXS: %s() - Caller asked to use activation context from hmodule but passed NULL
SXS: %s() - Caller passed invalid address, not in any .dll (%p)
SXS: %s() - Caller passed invalid address, not in any .dll (%p)
SXS: %s() - Caller asked to use activation context from address in .dll but passed NULL
SXS: %s() - Caller asked to use activation context from address in .dll but passed NULL
SXS: %s() - caller supplied no buffer to populate and no place to return required byte count
SXS: %s() - caller supplied no buffer to populate and no place to return required byte count
SXS: %s() - caller passed nonzero buffer length but NULL buffer pointer
SXS: %s() - caller passed nonzero buffer length but NULL buffer pointer
SXS: %s() - caller asked for unknown information class %lu
SXS: %s() - caller asked for unknown information class %lu
SXS: %s() - Caller passed meaningless flags/class combination (0xlx/0xlx)
SXS: %s() - Caller passed meaningless flags/class combination (0xlx/0xlx)
SXS: %s() - Caller passed invalid flags (0xlx)
SXS: %s() - Caller passed invalid flags (0xlx)
SXS: Unabel to query location from storage root subkey %wZ; Status = 0xlx
SXS: Unabel to query location from storage root subkey %wZ; Status = 0xlx
SXS: Unable to open storage root subkey %wZ; Status = 0xlx
SXS: Unable to open storage root subkey %wZ; Status = 0xlx
SXS: Unable to open registry key %wZ Status = 0xlx
SXS: Unable to open registry key %wZ Status = 0xlx
SXS: Attempt to get storage location from subkey %wZ failed; Status = 0xlx
SXS: Attempt to get storage location from subkey %wZ failed; Status = 0xlx
SXS: Unable to enumerate assembly storage subkey #%lu Status = 0xlx
SXS: Unable to enumerate assembly storage subkey #%lu Status = 0xlx
SXS: %s() bad parameters:
SXS: %s() bad parameters:
SXS: %s() bad parameters
SXS: %s() bad parameters
SXS: StorageLocation->Length: 0x%x
SXS: StorageLocation->Length: 0x%x
SXS: Unable to open assembly directory under storage root "%S"; Status = 0xlx
SXS: Unable to open assembly directory under storage root "%S"; Status = 0xlx
SXS: Attempt to translate DOS path name "%S" to NT format failed
SXS: Attempt to translate DOS path name "%S" to NT format failed
SXS: Assembly storage resolution failing probe because attempt to allocate %u bytes failed.
SXS: Assembly storage resolution failing probe because attempt to allocate %u bytes failed.
SXS: %s() passed the empty activation context
SXS: %s() passed the empty activation context
SXS: %s() bad parameters AssemblyRosterIndex 0x%lx >= AssemblyRosterHeader->EntryCount: 0x%lx
SXS: %s() bad parameters AssemblyRosterIndex 0x%lx >= AssemblyRosterHeader->EntryCount: 0x%lx
'LDR: %s(), invalid image format of MUI file
'LDR: %s(), invalid image format of MUI file
RtlpHeapFreeVirtualMemory failed %lx for heap %p (base %p, size %x)
RtlpHeapFreeVirtualMemory failed %lx for heap %p (base %p, size %x)
*** Assertion failed: %s%s
*** Assertion failed: %s%s
*** Source File: %s, line %ld
*** Source File: %s, line %ld
RtlQueryRegistryValues: Miscomputed buffer size at line %d
RtlQueryRegistryValues: Miscomputed buffer size at line %d
VirtualProtect Failed 0xx %x
VirtualProtect Failed 0xx %x
VirtualQuery Failed 0xx %x
VirtualQuery Failed 0xx %x
, passed to %s
, passed to %s
Invalid heap signature for heap at %x
Invalid heap signature for heap at %x
Unable to release memory at %p for %p bytes - Status == %x
Unable to release memory at %p for %p bytes - Status == %x
Entry User Heap Size Req.Size Flags
Entry User Heap Size Req.Size Flags
:%u.%u.%u.%u
:%u.%u.%u.%u
::ffff:0:%u.%u.%u.%u
::ffff:0:%u.%u.%u.%u
::%hs%u.%u.%u.%u
::%hs%u.%u.%u.%u
%u.%u.%u.%u
%u.%u.%u.%u
X-X-X-X-X-X
X-X-X-X-X-X
Leaked Block 0x%p size 0x%p (stack %p depth %u)
Leaked Block 0x%p size 0x%p (stack %p depth %u)
*** Restarting wait on critsec or resource at %p (in %ws:%s)
*** Restarting wait on critsec or resource at %p (in %ws:%s)
*** enter .cxr %p for the context
*** enter .cxr %p for the context
*** enter .exr %p for the exception record
*** enter .exr %p for the exception record
The instruction at %p tried to %s
The instruction at %p tried to %s
*** An Access Violation occurred in %ws:%s
*** An Access Violation occurred in %ws:%s
This means that the I/O device reported an I/O error. Check your hardware.
This means that the I/O device reported an I/O error. Check your hardware.
This failed because of error %x.
This failed because of error %x.
*** Inpage error in %ws:%s
*** Inpage error in %ws:%s
The critical section is owned by thread %x.
The critical section is owned by thread %x.
*** Critical Section Timeout (%p) in %ws:%s
*** Critical Section Timeout (%p) in %ws:%s
The resource is owned shared by %d threads
The resource is owned shared by %d threads
The resource is owned exclusively by thread %x
The resource is owned exclusively by thread %x
*** Resource timeout (%p) in %ws:%s
*** Resource timeout (%p) in %ws:%s
The stack trace should show the guilty function (the function directly above __report_gsfailure).
The stack trace should show the guilty function (the function directly above __report_gsfailure).
*** A stack buffer overrun occurred in %ws:%s
*** A stack buffer overrun occurred in %ws:%s
*** Unhandled exception 0xlx, hit in %ws:%s
*** Unhandled exception 0xlx, hit in %ws:%s
Trace database: failing attempt to save biiiiig trace (size %u)
Trace database: failing attempt to save biiiiig trace (size %u)
*** RtlpMuiRegLoadLicInformation failed with status %x
*** RtlpMuiRegLoadLicInformation failed with status %x
.hotp1
.hotp1
None%s
None%s
I64X: VA32 X -> X %s
I64X: VA32 X -> X %s
I64X: PC32 X -> X (target %p) %s
I64X: PC32 X -> X (target %p) %s
I64X: VA64 6I64X -> 6I64X %s
I64X: VA64 6I64X -> 6I64X %s
Validation failure. Source = %p, Target = %p, Size = %x
Validation failure. Source = %p, Target = %p, Size = %x
Validation failed for global range %u of %u
Validation failed for global range %u of %u
I64X: jmp X (PC X) {
I64X: jmp X (PC X) {
Unsupported template type
Unsupported template type
Inserting %u hooks into target image
Inserting %u hooks into target image
Header too large (%u>%u) for copy/normalize/validate
Header too large (%u>%u) for copy/normalize/validate
Error code: %d - %s
Error code: %d - %s
heap_failure_cross_heap_operation
heap_failure_cross_heap_operation
This is located in the %s field of the heap header.
This is located in the %s field of the heap header.
Heap Segment at %p contains invalid NumberOfUnCommittedRanges (%x != %x)
Heap Segment at %p contains invalid NumberOfUnCommittedRanges (%x != %x)
Heap Segment at %p contains invalid NumberOfUnCommittedPages (%x != %x)
Heap Segment at %p contains invalid NumberOfUnCommittedPages (%x != %x)
Heap block at %p has incorrect segment offset (%x)
Heap block at %p has incorrect segment offset (%x)
Heap entry %p has incorrect PreviousSize field (x instead of x)
Heap entry %p has incorrect PreviousSize field (x instead of x)
Invalid CommitSize parameter - %x
Invalid CommitSize parameter - %x
Invalid ReserveSize parameter - %x
Invalid ReserveSize parameter - %x
Invalid address specified to %s( %p, %p )
Invalid address specified to %s( %p, %p )
Tag x (%ws) size incorrect (%x != %x) %p
Tag x (%ws) size incorrect (%x != %x) %p
Pseudo Tag x size incorrect (%x != %x) %p
Pseudo Tag x size incorrect (%x != %x) %p
dedicated (x) free list element %p is marked busy
dedicated (x) free list element %p is marked busy
Invalid allocation size - %x (exceeded %x)
Invalid allocation size - %x (exceeded %x)
Just allocated block at %p for 0x%x bytes with tag %ws
Just allocated block at %p for 0x%x bytes with tag %ws
Just allocated block at %p for %x bytes
Just allocated block at %p for %x bytes
Just reallocated block at %p to 0x%x bytes with tag %ws
Just reallocated block at %p to 0x%x bytes with tag %ws
Just reallocated block at %p to %x bytes
Just reallocated block at %p to %x bytes
About to rellocate block at %p to 0x%x bytes with tag %ws
About to rellocate block at %p to 0x%x bytes with tag %ws
About to reallocate block at %p to %x bytes
About to reallocate block at %p to %x bytes
/$&@7$&@9$&@:$&@
/$&@7$&@9$&@:$&@
?SsHd
?SsHd
>SsHd
>SsHd
d:\win7sp1_gdr\minkernel\threadpool\ntdll\timer.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\timer.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\pool.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\pool.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\work.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\work.c
SSSSh(
SSSSh(
t%f;U
t%f;U
AlpcReturn = %p, AlpcPort = %p, Callback = %p, Context = %p, CallbackEnviron = %p
AlpcReturn = %p, AlpcPort = %p, Callback = %p, Context = %p, CallbackEnviron = %p
TppIopExecuteCallback
TppIopExecuteCallback
Pool = %p, MinThreads = %d
Pool = %p, MinThreads = %d
Pool = %p, MaxThreads = %d
Pool = %p, MaxThreads = %d
File = %x, Direct = %p, Pool = %p
File = %x, Direct = %p, Pool = %p
AlpcPort = %x, Direct = %p, Pool = %p
AlpcPort = %x, Direct = %p, Pool = %p
TimerQueueQueue = %p, Timer = %p, DueTime = 0x%I64x, Window = %d
TimerQueueQueue = %p, Timer = %p, DueTime = 0x%I64x, Window = %d
Setting KTimer to 0x6I64x (%s)
Setting KTimer to 0x6I64x (%s)
KTimer already set for due time = 0x6x
KTimer already set for due time = 0x6x
TimerQueue = %p, DoAbsoluteQueue = %s
TimerQueue = %p, DoAbsoluteQueue = %s
CapturedPeriod = %d
CapturedPeriod = %d
CapturedWindow = %d
CapturedWindow = %d
Callback = %p, Context = %p, CallbackEnviron = %p, Flags = 0xx
Callback = %p, Context = %p, CallbackEnviron = %p, Flags = 0xx
Wait = %p, WaitStatus = 0xx
Wait = %p, WaitStatus = 0xx
Executing Wait callback %p(%p, %p, %p, 0xx)
Executing Wait callback %p(%p, %p, %p, 0xx)
Count = %d
Count = %d
Work = %p, Context = %p, CallbackEnviron = %p, Flags = 0xx, CleanupGroupVFuncs = %p, TaskVFuncs = %p
Work = %p, Context = %p, CallbackEnviron = %p, Flags = 0xx, CleanupGroupVFuncs = %p, TaskVFuncs = %p
CleanupGroupMember = %p, CancelledCallbackCount = %d
CleanupGroupMember = %p, CancelledCallbackCount = %d
CleanupGroupMember = %p, CallbackCount = %d
CleanupGroupMember = %p, CallbackCount = %d
CleanupGroupMember = %p, Context = %p, CallbackEnviron = %p, Flags = 0xx, VFuncs = %p
CleanupGroupMember = %p, Context = %p, CallbackEnviron = %p, Flags = 0xx, VFuncs = %p
d:\win7sp1_gdr\minkernel\threadpool\ntdll\worker.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\worker.c
Tcb = %p, Wait = %p, CapturedHandle = %x
Tcb = %p, Wait = %p, CapturedHandle = %x
Tcb = %p, Index = %d, Wait = %p, Status = x
Tcb = %p, Index = %d, Wait = %p, Status = x
CapturedHasDueTime = %s
CapturedHasDueTime = %s
CapturedHasDueType = %s
CapturedHasDueType = %s
CapturedHandle = 0x%x
CapturedHandle = 0x%x
Waiter wait completed with status x
Waiter wait completed with status x
Waiter is waiting: Tcb->ActiveWaits = %d, TimeoutPtr = %p, Timeout = 6I64x
Waiter is waiting: Tcb->ActiveWaits = %d, TimeoutPtr = %p, Timeout = 6I64x
*** RESCACHE: Segment %u is no longer valid. It may have been unmapped already!!! ***
*** RESCACHE: Segment %u is no longer valid. It may have been unmapped already!!! ***
*** RESCACHE: Segment %u magic field is corrupt!!! ***
*** RESCACHE: Segment %u magic field is corrupt!!! ***
ProcessHeapsListIndex
ProcessHeapsListIndex
Status: x
Status: x
Timer = %p, DueTime = 0x6I64x, Period = %d, WindowLength = %d
Timer = %p, DueTime = 0x6I64x, Period = %d, WindowLength = %d
Invalid parameter passed to C runtime function.
Invalid parameter passed to C runtime function.
0j.Xj0f
0j.Xj0f
sBj.Xf
sBj.Xf
s%j.Zf
s%j.Zf
j%Xf;
j%Xf;
Unhandled Exception: .exr %p - .cxr %p - Status 0xx - dt nt!_TP_CALLBACK_INSTANCE %p
Unhandled Exception: .exr %p - .cxr %p - Status 0xx - dt nt!_TP_CALLBACK_INSTANCE %p
Exception: .exr %p - .cxr %p - Status 0xx - dt nt!_TP_CALLBACK_INSTANCE %p
Exception: .exr %p - .cxr %p - Status 0xx - dt nt!_TP_CALLBACK_INSTANCE %p
d:\win7sp1_gdr\minkernel\threadpool\ntdll\tp.c
d:\win7sp1_gdr\minkernel\threadpool\ntdll\tp.c
x @ u: %s: %s:
x @ u: %s: %s:
.sb_data
.sb_data
ntdll.pdb
ntdll.pdb
2$2(2,20242^2
2$2(2,20242^2
2-3
2-3
>(>0>4>@>`>|>
>(>0>4>@>`>|>
1 1@1`1|1
1 1@1`1|1
2 2
2 2
5 5$5@5`5
5 5$5@5`5
7 7
7 7
8 8
8 8
; ;$;(;,;8;
; ;$;(;,;8;
283:4(6`6
283:4(6`6
8'9.989=9
8'9.989=9
=3=8=?={=
=3=8=?={=
0 1 171
0 1 171
55i5s5|5
55i5s5|5
6&7-7B7}7
6&7-7B7}7
%s\%sd
%s\%sd
\\?\UNC
\\?\UNC
\\?\UNC\
\\?\UNC\
csrsrv.dll
csrsrv.dll
\Registry\Machine\Software\Microsoft\Windows nt\currentversion\appcompatflags\AIT
\Registry\Machine\Software\Microsoft\Windows nt\currentversion\appcompatflags\AIT
\Registry\Machine\Software\Policies\Microsoft\Windows\Appcompat\
\Registry\Machine\Software\Policies\Microsoft\Windows\Appcompat\
\Registry\User\.Default
\Registry\User\.Default
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion
%ws\%u
%ws\%u
MSCOREE.DLL
MSCOREE.DLL
ApiPort
ApiPort
CSRPORT!
CSRPORT!
\Sessions\%ld\Windows\SharedSection
\Sessions\%ld\Windows\SharedSection
PCATESTDEPRECATION.DLL
PCATESTDEPRECATION.DLL
MSVBVM50.DLL
MSVBVM50.DLL
MSVCP50.DLL
MSVCP50.DLL
D3DRM.DLL
D3DRM.DLL
kernelbase.dll
kernelbase.dll
kernel32.dll
kernel32.dll
SPPsvc.exe
SPPsvc.exe
DebugProcessHeapOnly
DebugProcessHeapOnly
ADVAPI32.DLL
ADVAPI32.DLL
\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
.Local
.Local
"/\[]:| =;,?*
"/\[]:| =;,?*
Objects=%4u
Objects=%4u
Objects>%4u
Objects>%4u
\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\
\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\
verifier.dll
verifier.dll
\KernelObjects\SystemErrorPortReady
\KernelObjects\SystemErrorPortReady
\WindowsErrorReportingServicePort
\WindowsErrorReportingServicePort
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\
\Registry\Machine\Software\Microsoft\SQMClient\Windows\WMR
\Registry\Machine\Software\Microsoft\SQMClient\Windows\WMR
\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\Escalation
\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\Escalation
%d.%d.%d.%d
%d.%d.%d.%d
WindowsMessageReportingB1
WindowsMessageReportingB1
WinShipAssert
WinShipAssert
\Software\Microsoft\Windows
\Software\Microsoft\Windows
svchost.exe
svchost.exe
\Registry\Machine\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
\Registry\Machine\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
\Registry\Machine\Software\Microsoft\SQMClient\Windows\CommonDatapoints\
\Registry\Machine\Software\Microsoft\SQMClient\Windows\CommonDatapoints\
\Registry\Machine\Software\Microsoft\SQMClient\Windows\DisabledSessions\
\Registry\Machine\Software\Microsoft\SQMClient\Windows\DisabledSessions\
\Registry\Machine\Software\Microsoft\SQMClient\Windows
\Registry\Machine\Software\Microsoft\SQMClient\Windows
\Registry\Machine\Software\Policies\Microsoft\SQMClient\Windows
\Registry\Machine\Software\Policies\Microsoft\SQMClient\Windows
ASqmManifest_%x
ASqmManifest_%x
\Registry\Machine\Software\Microsoft\SQMClient\Windows\AdaptiveSqm\Throttling
\Registry\Machine\Software\Microsoft\SQMClient\Windows\AdaptiveSqm\Throttling
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
\SmApiPort
\SmApiPort
\SystemRoot\bootstat.dat
\SystemRoot\bootstat.dat
X:%u.%u.%u.%u
X:%u.%u.%u.%u
%%%u!%s!
%%%u!%s!
WindowsExcludedProcs
WindowsExcludedProcs
KERNEL32.DLL
KERNEL32.DLL
%SystemRoot%
%SystemRoot%
windows seven
windows seven
windows vista
windows vista
\\.\CON
\\.\CON
{lx-x-x-xx-xxxxxx}
{lx-x-x-xx-xxxxxx}
.Local\
.Local\
\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
%s\%s%d%s
%s\%s%d%s
%s%s%d
%s%s%d
%s%s%d%s
%s%s%d%s
%s\%sd\%s*%s
%s\%sd\%s*%s
Global\%s/%sd%s
Global\%s/%sd%s
%sd-%s%s
%sd-%s%s
%s\%sd%s
%s\%sd%s
%s\%sd\%s
%s\%sd\%s
%sd-%s
%sd-%s
TimeZoneKeyName
TimeZoneKeyName
.owner
.owner
.init
.init
ResCache.hit
ResCache.hit
ResCache.dir
ResCache.dir
%s\%s
%s\%s
%s_%d
%s_%d
ResCache.usg
ResCache.usg
ResCache.mni
ResCache.mni
ResCache.ccm
ResCache.ccm
%s\%s\%s
%s\%s\%s
Global\%s%s%s
Global\%s%s%s
%s\%s*%s
%s\%s*%s
%s\*\%s
%s\*\%s
%s\%s*
%s\%s*
Global\%s/base%s
Global\%s/base%s
%sd-%s%d
%sd-%s%d
%sd-%s%d%s
%sd-%s%d%s
%s\%sd\%s%d%s
%s\%sd\%s%d%s
6.1.7601.17725 (win7sp1_gdr.111116-1503)
6.1.7601.17725 (win7sp1_gdr.111116-1503)
Windows
Windows
Operating System
Operating System
6.1.7601.17725
6.1.7601.17725
The operation that was requested is pending completion.
The operation that was requested is pending completion.
An open/create operation completed while an oplock break is underway.
An open/create operation completed while an oplock break is underway.
{Connect Failure on Primary Transport}
{Connect Failure on Primary Transport}
An attempt was made to connect to the remote server %hs on the primary transport, but the connection failed.
An attempt was made to connect to the remote server %hs on the primary transport, but the connection failed.
The computer WAS able to connect on a secondary transport.
The computer WAS able to connect on a secondary transport.
Cached page was locked during operation.
Cached page was locked during operation.
A file system or file system filter driver has successfully completed an FsFilter operation.
A file system or file system filter driver has successfully completed an FsFilter operation.
An operation is blocked waiting for an oplock.
An operation is blocked waiting for an oplock.
{Local Session Key}
{Local Session Key}
A user session key was requested for a local RPC connection. The session key returned is a constant value and not unique to this connection.
A user session key was requested for a local RPC connection. The session key returned is a constant value and not unique to this connection.
A serial I/O operation was completed by another write to a serial port.
A serial I/O operation was completed by another write to a serial port.
A serial I/O operation completed because the time-out period expired. (The IOCTL_SERIAL_XOFF_COUNTER had not reached zero.)
A serial I/O operation completed because the time-out period expired. (The IOCTL_SERIAL_XOFF_COUNTER had not reached zero.)
{Password Too Complex}
{Password Too Complex}
The Windows password is too complex to be converted to a LAN Manager password. The LAN Manager password returned is a NULL string.
The Windows password is too complex to be converted to a LAN Manager password. The LAN Manager password returned is a NULL string.
The network transport returned partial data to its client. The remaining data will be sent later.
The network transport returned partial data to its client. The remaining data will be sent later.
The network transport returned data to its client that was marked as expedited by the remote system.
The network transport returned data to its client that was marked as expedited by the remote system.
The network transport returned partial data to its client and this data was marked as expedited by the remote system. The remaining data will be sent later.
The network transport returned partial data to its client and this data was marked as expedited by the remote system. The remaining data will be sent later.
The specified registry key is referenced by a predefined handle.
The specified registry key is referenced by a predefined handle.
A yield execution was performed and no thread was available to run.
A yield execution was performed and no thread was available to run.
The operating system will currently accept only 16-bit (R2) pc-cards on this controller.
The operating system will currently accept only 16-bit (R2) pc-cards on this controller.
The CPUs in this multiprocessor system are not all the same revision level. To use all processors the operating system restricts itself to the features of the least capable processor in the system. Should problems occur with this system, contact the CPU manufacturer to see if this mix of processors is supported.
The CPUs in this multiprocessor system are not all the same revision level. To use all processors the operating system restricts itself to the features of the least capable processor in the system. Should problems occur with this system, contact the CPU manufacturer to see if this mix of processors is supported.
Windows has detected that the system firmware (BIOS) was updated [previous firmware date = %2, current firmware date %3].
Windows has detected that the system firmware (BIOS) was updated [previous firmware date = %2, current firmware date %3].
The receive operation was successful. Check the ALPC completion list for the received message.
The receive operation was successful. Check the ALPC completion list for the received message.
The attempt to commit the Transaction completed, but it is possible that some portion of the transaction tree did not commit successfully due to heuristics. Therefore it is possible that some data modified in the transaction may not have committed, resulting in transactional inconsistency. If possible, check the consistency of the associated data.
The attempt to commit the Transaction completed, but it is possible that some portion of the transaction tree did not commit successfully due to heuristics. Therefore it is possible that some data modified in the transaction may not have committed, resulting in transactional inconsistency. If possible, check the consistency of the associated data.
The %hs display driver has detected and recovered from a failure. Some graphical operations may have failed. The next time you reboot the machine a dialog will be displayed giving you a chance to upload data about this failure to Microsoft.
The %hs display driver has detected and recovered from a failure. Some graphical operations may have failed. The next time you reboot the machine a dialog will be displayed giving you a chance to upload data about this failure to Microsoft.
A single step or trace operation has just been completed.
A single step or trace operation has just been completed.
Handles to objects have been automatically closed as a result of the requested operation.
Handles to objects have been automatically closed as a result of the requested operation.
During the translation of a global identifier (GUID) to a Windows security ID (SID), no administratively-defined GUID prefix was found. A substitute prefix was used, which will not compromise system security. However, this may provide a more restrictive access than intended.
During the translation of a global identifier (GUID) to a Windows security ID (SID), no administratively-defined GUID prefix was found. A substitute prefix was used, which will not compromise system security. However, this may provide a more restrictive access than intended.
The media has changed and a verify operation is in progress so no reads or writes may be performed to the device, except those used in the verify operation.
The media has changed and a verify operation is in progress so no reads or writes may be performed to the device, except those used in the verify operation.
No more entries are available from an enumeration operation.
No more entries are available from an enumeration operation.
A long jump has been executed.
A long jump has been executed.
The Plug and Play query operation was not successful.
The Plug and Play query operation was not successful.
A frame consolidation has been executed.
A frame consolidation has been executed.
The application is attempting to run executable code from the module %hs. This may be insecure. An alternative, %hs, is available. Should the application use the secure module %hs?
The application is attempting to run executable code from the module %hs. This may be insecure. An alternative, %hs, is available. Should the application use the secure module %hs?
The application is loading executable code from the module %hs. This is secure, but may be incompatible with previous releases of the operating system. An alternative, %hs, is available. Should the application use the secure module %hs?
The application is loading executable code from the module %hs. This is secure, but may be incompatible with previous releases of the operating system. An alternative, %hs, is available. Should the application use the secure module %hs?
The create operation stopped after reaching a symbolic link.
The create operation stopped after reaching a symbolic link.
The device has indicated that it's door is open. Further operations require it closed and secured.
The device has indicated that it's door is open. Further operations require it closed and secured.
Windows discovered a corruption in the file "%hs".
Windows discovered a corruption in the file "%hs".
BitLocker encryption keys were ignored because the volume was in a transient state.
BitLocker encryption keys were ignored because the volume was in a transient state.
A virtual machine is running with its memory allocated across multiple NUMA nodes. This does not indicate a problem unless the performance of your virtual machine is unusually slow. If you are experiencing performance problems, you may need to modify the NUMA configuration. For detailed information, see hXXp://go.microsoft.com/fwlink/?LinkId=92362.
A virtual machine is running with its memory allocated across multiple NUMA nodes. This does not indicate a problem unless the performance of your virtual machine is unusually slow. If you are experiencing performance problems, you may need to modify the NUMA configuration. For detailed information, see hXXp://go.microsoft.com/fwlink/?LinkId=92362.
The regeneration operation was not able to copy all data from the active plexes due to bad sectors.
The regeneration operation was not able to copy all data from the active plexes due to bad sectors.
One or more disks were not fully migrated to the target pack. They may or may not require reimport after fixing the hardware problems.
One or more disks were not fully migrated to the target pack. They may or may not require reimport after fixing the hardware problems.
Some BCD entries were not imported correctly from the BCD store.
Some BCD entries were not imported correctly from the BCD store.
{Operation Failed}
{Operation Failed}
The requested operation was unsuccessful.
The requested operation was unsuccessful.
The requested operation is not implemented.
The requested operation is not implemented.
The instruction at 0xlx referenced memory at 0xlx. The memory could not be %s.
The instruction at 0xlx referenced memory at 0xlx. The memory could not be %s.
The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.
The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.
An invalid parameter was passed to a service or function.
An invalid parameter was passed to a service or function.
The specified request is not a valid operation for the target device.
The specified request is not a valid operation for the target device.
The specified I/O request packet (IRP) cannot be disposed of because the I/O operation is not complete.
The specified I/O request packet (IRP) cannot be disposed of because the I/O operation is not complete.
Not enough virtual memory or paging file quota is available to complete the specified operation.
Not enough virtual memory or paging file quota is available to complete the specified operation.
An attempt was made to execute an illegal instruction.
An attempt was made to execute an illegal instruction.
An attempt was made to execute an invalid lock sequence.
An attempt was made to execute an invalid lock sequence.
There is a mismatch between the type of object required by the requested operation and the type of object that is specified in the request.
There is a mismatch between the type of object required by the requested operation and the type of object that is specified in the request.
Windows cannot continue from this exception.
Windows cannot continue from this exception.
An invalid or unaligned stack was encountered during an unwind operation.
An invalid or unaligned stack was encountered during an unwind operation.
An invalid unwind target was encountered during an unwind operation.
An invalid unwind target was encountered during an unwind operation.
Device parity error on I/O operation.
Device parity error on I/O operation.
Invalid Object Attributes specified to NtCreatePort or invalid Port Attributes specified to NtConnectPort
Invalid Object Attributes specified to NtCreatePort or invalid Port Attributes specified to NtConnectPort
Length of message passed to NtRequestPort or NtRequestWaitReplyPort was longer than the maximum message allowed by the port.
Length of message passed to NtRequestPort or NtRequestWaitReplyPort was longer than the maximum message allowed by the port.
Attempt to send a message to a disconnected communication port.
Attempt to send a message to a disconnected communication port.
The NtConnectPort request is refused.
The NtConnectPort request is refused.
The type of port handle is invalid for the operation requested.
The type of port handle is invalid for the operation requested.
Insufficient quota exists to complete the operation
Insufficient quota exists to complete the operation
An attempt to set a process's DebugPort or ExceptionPort was made, but a port already exists in the process or an attempt to set a file's CompletionPort made, but a port was already set in the file or an attempt to set an ALPC port's associated completion port was made, but it is already set.
An attempt to set a process's DebugPort or ExceptionPort was made, but a port already exists in the process or an attempt to set a file's CompletionPort made, but a port was already set in the file or an attempt to set an ALPC port's associated completion port was made, but it is already set.
An operation involving EAs failed because the file system does not support EAs.
An operation involving EAs failed because the file system does not support EAs.
An EA operation failed because EA set is too large.
An EA operation failed because EA set is too large.
An EA operation failed because the name or EA index is invalid.
An EA operation failed because the name or EA index is invalid.
A non close operation has been requested of a file object with a delete pending.
A non close operation has been requested of a file object with a delete pending.
An attempt was made to set the control attribute on a file. This attribute is not supported in the target file system.
An attempt was made to set the control attribute on a file. This attribute is not supported in the target file system.
An attempt has been made to operate on an impersonation token by a thread that is not currently impersonating a client.
An attempt has been made to operate on an impersonation token by a thread that is not currently impersonating a client.
Indicates the requested operation would disable or delete the last remaining administration account.
Indicates the requested operation would disable or delete the last remaining administration account.
When trying to update a password, this return status indicates that the value provided as the current password is not correct.
When trying to update a password, this return status indicates that the value provided as the current password is not correct.
When trying to update a password, this return status indicates that the value provided for the new password contains values that are not allowed in passwords.
When trying to update a password, this return status indicates that the value provided for the new password contains values that are not allowed in passwords.
When trying to update a password, this status indicates that some password update rule has been violated. For example, the password may not meet length criteria.
When trying to update a password, this status indicates that some password update rule has been violated. For example, the password may not meet length criteria.
The user account's password has expired.
The user account's password has expired.
%hs is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.
%hs is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.
An operation failed because the disk was full.
An operation failed because the disk was full.
Floating-point denormal operand.
Floating-point denormal operand.
Floating-point invalid operation.
Floating-point invalid operation.
An attempt was made to install more paging files than the system supports.
An attempt was made to install more paging files than the system supports.
An attempt was made to execute an instruction at an unaligned address and the host system does not support unaligned instruction references.
An attempt was made to execute an instruction at an unaligned address and the host system does not support unaligned instruction references.
The maximum named pipe instance count has been reached.
The maximum named pipe instance count has been reached.
An instance of a named pipe cannot be found in the listening state.
An instance of a named pipe cannot be found in the listening state.
The named pipe is not in the connected or closing state.
The named pipe is not in the connected or closing state.
The specified pipe is set to complete operations and there are current I/O operations queued so it cannot be changed to queue operations.
The specified pipe is set to complete operations and there are current I/O operations queued so it cannot be changed to queue operations.
The specified handle is not open to the server end of the named pipe.
The specified handle is not open to the server end of the named pipe.
The specified named pipe is in the disconnected state.
The specified named pipe is in the disconnected state.
The specified named pipe is in the closing state.
The specified named pipe is in the closing state.
The specified named pipe is in the connected state.
The specified named pipe is in the connected state.
The specified named pipe is in the listening state.
The specified named pipe is in the listening state.
The specified named pipe is not in message mode.
The specified named pipe is not in message mode.
The specified I/O operation on %hs was not completed before the time-out period expired.
The specified I/O operation on %hs was not completed before the time-out period expired.
The passed ACL did not contain the minimum required information.
The passed ACL did not contain the minimum required information.
The request is not supported.
The request is not supported.
Indicates an attempt was made to operate on the security of an object that does not have security associated with it.
Indicates an attempt was made to operate on the security of an object that does not have security associated with it.
Used to indicate that an operation cannot continue without blocking for I/O.
Used to indicate that an operation cannot continue without blocking for I/O.
Used to indicate that a read operation was done on an empty pipe.
Used to indicate that a read operation was done on an empty pipe.
Indicates the Sam Server was in the wrong state to perform the desired operation.
Indicates the Sam Server was in the wrong state to perform the desired operation.
Indicates the Domain was in the wrong state to perform the desired operation.
Indicates the Domain was in the wrong state to perform the desired operation.
This operation is only allowed for the Primary Domain Controller of the domain.
This operation is only allowed for the Primary Domain Controller of the domain.
This error indicates that the requested operation cannot be completed due to a catastrophic media failure or on-disk data structure corruption.
This error indicates that the requested operation cannot be completed due to a catastrophic media failure or on-disk data structure corruption.
An invalid parameter was passed to a service or function as the first argument.
An invalid parameter was passed to a service or function as the first argument.
An invalid parameter was passed to a service or function as the second argument.
An invalid parameter was passed to a service or function as the second argument.
An invalid parameter was passed to a service or function as the third argument.
An invalid parameter was passed to a service or function as the third argument.
An invalid parameter was passed to a service or function as the fourth argument.
An invalid parameter was passed to a service or function as the fourth argument.
An invalid parameter was passed to a service or function as the fifth argument.
An invalid parameter was passed to a service or function as the fifth argument.
An invalid parameter was passed to a service or function as the sixth argument.
An invalid parameter was passed to a service or function as the sixth argument.
An invalid parameter was passed to a service or function as the seventh argument.
An invalid parameter was passed to a service or function as the seventh argument.
An invalid parameter was passed to a service or function as the eighth argument.
An invalid parameter was passed to a service or function as the eighth argument.
An invalid parameter was passed to a service or function as the ninth argument.
An invalid parameter was passed to a service or function as the ninth argument.
An invalid parameter was passed to a service or function as the tenth argument.
An invalid parameter was passed to a service or function as the tenth argument.
An invalid parameter was passed to a service or function as the eleventh argument.
An invalid parameter was passed to a service or function as the eleventh argument.
An invalid parameter was passed to a service or function as the twelfth argument.
An invalid parameter was passed to a service or function as the twelfth argument.
A malformed function table was encountered during an unwind operation.
A malformed function table was encountered during an unwind operation.
The logon session is not in a state that is consistent with the requested operation.
The logon session is not in a state that is consistent with the requested operation.
Indicates that an attempt has been made to impersonate via a named pipe that has not yet been read from.
Indicates that an attempt has been made to impersonate via a named pipe that has not yet been read from.
Indicates that the transaction state of a registry sub-tree is incompatible with the requested operation. For example, a request has been made to start a new transaction with one already in progress, or a request has been made to apply a transaction when one is not currently in progress.
Indicates that the transaction state of a registry sub-tree is incompatible with the requested operation. For example, a request has been made to start a new transaction with one already in progress, or a request has been made to apply a transaction when one is not currently in progress.
This error should only be returned by the Windows redirector on a remote drive.
This error should only be returned by the Windows redirector on a remote drive.
Indicates an operation has been attempted on a built-in (special) SAM account which is incompatible with built-in accounts. For example, built-in accounts cannot be deleted.
Indicates an operation has been attempted on a built-in (special) SAM account which is incompatible with built-in accounts. For example, built-in accounts cannot be deleted.
The operation requested may not be performed on the specified group because it is a built-in special group.
The operation requested may not be performed on the specified group because it is a built-in special group.
The operation requested may not be performed on the specified user because it is a built-in special user.
The operation requested may not be performed on the specified user because it is a built-in special user.
An I/O request other than close and several other special case operations was attempted using a file object that had already been closed.
An I/O request other than close and several other special case operations was attempted using a file object that had already been closed.
An attempt was made to operate on a thread within a specific process, but the thread specified is not in the process specified.
An attempt was made to operate on a thread within a specific process, but the thread specified is not in the process specified.
Your system is low on virtual memory. To ensure that Windows runs properly, increase the size of your virtual memory paging file. For more information, see Help.
Your system is low on virtual memory. To ensure that Windows runs properly, increase the size of your virtual memory paging file. For more information, see Help.
The specified image file did not have the correct format, it appears to be a 16-bit Windows image.
The specified image file did not have the correct format, it appears to be a 16-bit Windows image.
The SAM database on a Windows Server is significantly out of synchronization with the copy on the Domain Controller. A complete synchronization is required.
The SAM database on a Windows Server is significantly out of synchronization with the copy on the Domain Controller. A complete synchronization is required.
The NtCreateFile API failed. This error should never be returned to an application, it is a place holder for the Windows Lan Manager Redirector to use in its internal error mapping routines.
The NtCreateFile API failed. This error should never be returned to an application, it is a place holder for the Windows Lan Manager Redirector to use in its internal error mapping routines.
The network transport on your computer has closed a network connection. There may or may not be I/O requests outstanding.
The network transport on your computer has closed a network connection. There may or may not be I/O requests outstanding.
The network transport on a remote computer has closed a network connection. There may or may not be I/O requests outstanding.
The network transport on a remote computer has closed a network connection. There may or may not be I/O requests outstanding.
The network transport on your computer has closed a network connection because it had to wait too long for a response from the remote computer.
The network transport on your computer has closed a network connection because it had to wait too long for a response from the remote computer.
The connection handle given to the transport was invalid.
The connection handle given to the transport was invalid.
The address handle given to the transport was invalid.
The address handle given to the transport was invalid.
The exception %s (0xlx) occurred in the application at location 0xlx.
The exception %s (0xlx) occurred in the application at location 0xlx.
An invalid level was passed into the specified system call.
An invalid level was passed into the specified system call.
{Incorrect Password to LAN Manager Server}
{Incorrect Password to LAN Manager Server}
You specified an incorrect password to a LAN Manager 2.x or MS-NET server.
You specified an incorrect password to a LAN Manager 2.x or MS-NET server.
The pipe operation has failed because the other end of the pipe has been closed.
The pipe operation has failed because the other end of the pipe has been closed.
An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry.
An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry.
An event pair synchronization operation was performed using the thread specific client/server event pair object, but no event pair object was associated with the thread.
An event pair synchronization operation was performed using the thread specific client/server event pair object, but no event pair object was associated with the thread.
The maximum number of secrets that may be stored in a single system has been exceeded. The length and number of secrets is limited to satisfy United States State Department export restrictions.
The maximum number of secrets that may be stored in a single system has been exceeded. The length and number of secrets is limited to satisfy United States State Department export restrictions.
The length of a secret exceeds the maximum length allowed. The length and number of secrets is limited to satisfy United States State Department export restrictions.
The length of a secret exceeds the maximum length allowed. The length and number of secrets is limited to satisfy United States State Department export restrictions.
The requested operation cannot be performed in fullscreen mode.
The requested operation cannot be performed in fullscreen mode.
An attempt was made to change a user password in the security account manager without providing the necessary Windows cross-encrypted password.
An attempt was made to change a user password in the security account manager without providing the necessary Windows cross-encrypted password.
A Windows Server has an incorrect configuration.
A Windows Server has an incorrect configuration.
The floppy disk controller reported an error that is not recognized by the floppy disk driver.
The floppy disk controller reported an error that is not recognized by the floppy disk driver.
While accessing the hard disk, a recalibrate operation failed, even after retries.
While accessing the hard disk, a recalibrate operation failed, even after retries.
While accessing the hard disk, a disk operation failed even after retries.
While accessing the hard disk, a disk operation failed even after retries.
Two concurrent opens of devices that share an IRQ and only work via interrupts is not supported for the particular bus type that the devices use.
Two concurrent opens of devices that share an IRQ and only work via interrupts is not supported for the particular bus type that the devices use.
Illegal operation attempted on a registry key which has been marked for deletion.
Illegal operation attempted on a registry key which has been marked for deletion.
An attempt was made to change a user password in the security account manager without providing the necessary LM cross-encrypted password.
An attempt was made to change a user password in the security account manager without providing the necessary LM cross-encrypted password.
An attempt was made to create a symbolic link in a registry key that already has subkeys or values.
An attempt was made to create a symbolic link in a registry key that already has subkeys or values.
An attempt was made to create a Stable subkey under a Volatile parent key.
An attempt was made to create a Stable subkey under a Volatile parent key.
The I/O device reported an I/O error.
The I/O device reported an I/O error.
Log file space is insufficient to support this operation.
Log file space is insufficient to support this operation.
A write operation was attempted to a volume after it was dismounted.
A write operation was attempted to a volume after it was dismounted.
The SAM database on the Windows Server does not have a computer account for this workstation trust relationship.
The SAM database on the Windows Server does not have a computer account for this workstation trust relationship.
A requested file lock operation cannot be processed due to an invalid byte range.
A requested file lock operation cannot be processed due to an invalid byte range.
The subsystem needed to support the image type is not present.
The subsystem needed to support the image type is not present.
There is no user session key for the specified logon session.
There is no user session key for the specified logon session.
The size of the buffer is invalid for the specified operation.
The size of the buffer is invalid for the specified operation.
The transport rejected the network address specified as invalid.
The transport rejected the network address specified as invalid.
The transport rejected the network address specified due to an invalid use of a wildcard.
The transport rejected the network address specified due to an invalid use of a wildcard.
The transport address could not be opened because all the available addresses are in use.
The transport address could not be opened because all the available addresses are in use.
The transport address could not be opened because it already exists.
The transport address could not be opened because it already exists.
The transport address is now closed.
The transport address is now closed.
The transport connection is now disconnected.
The transport connection is now disconnected.
The transport connection has been reset.
The transport connection has been reset.
The transport cannot dynamically acquire any more nodes.
The transport cannot dynamically acquire any more nodes.
The transport aborted a pending transaction.
The transport aborted a pending transaction.
The transport timed out a request waiting for a response.
The transport timed out a request waiting for a response.
The transport did not receive a release for a pending response.
The transport did not receive a release for a pending response.
The transport did not find a transaction matching the specific token.
The transport did not find a transaction matching the specific token.
The transport had previously responded to a transaction request.
The transport had previously responded to a transaction request.
The transport does not recognized the transaction request identifier specified.
The transport does not recognized the transaction request identifier specified.
The transport does not recognize the transaction request type specified.
The transport does not recognize the transaction request type specified.
The transport can only process the specified request on the server side of a session.
The transport can only process the specified request on the server side of a session.
The transport can only process the specified request on the client side of a session.
The transport can only process the specified request on the client side of a session.
The %hs system process terminated unexpectedly with a status of 0xx (0xx 0xx).
The %hs system process terminated unexpectedly with a status of 0xx (0xx 0xx).
Windows was unable to save all the data for the file %hs. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.
Windows was unable to save all the data for the file %hs. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.
The parameter(s) passed to the server in the client/server shared memory window were invalid. Too much data may have been put in the shared memory window.
The parameter(s) passed to the server in the client/server shared memory window were invalid. Too much data may have been put in the shared memory window.
The user's password must be changed before logging on the first time.
The user's password must be changed before logging on the first time.
Internal OFS status codes indicating how an allocation operation is handled. Either it is retried after the containing onode is moved or the extent stream is converted to a large stream.
Internal OFS status codes indicating how an allocation operation is handled. Either it is retried after the containing onode is moved or the extent stream is converted to a large stream.
The attempt to find the object found an object matching by ID on the volume but it is out of the scope of the handle used for the operation.
The attempt to find the object found an object matching by ID on the volume but it is out of the scope of the handle used for the operation.
The user account has been automatically locked because too many invalid logon attempts or password change attempts have been requested.
The user account has been automatically locked because too many invalid logon attempts or password change attempts have been requested.
The transport connection attempt was refused by the remote system.
The transport connection attempt was refused by the remote system.
The transport connection was gracefully closed.
The transport connection was gracefully closed.
The transport endpoint already has an address associated with it.
The transport endpoint already has an address associated with it.
An address has not yet been associated with the transport endpoint.
An address has not yet been associated with the transport endpoint.
An operation was attempted on a nonexistent transport connection.
An operation was attempted on a nonexistent transport connection.
An invalid operation was attempted on an active transport connection.
An invalid operation was attempted on an active transport connection.
The remote network is not reachable by the transport.
The remote network is not reachable by the transport.
The remote system is not reachable by the transport.
The remote system is not reachable by the transport.
The remote system does not support the transport protocol.
The remote system does not support the transport protocol.
No service is operating at the destination port of the transport on the remote system.
No service is operating at the destination port of the transport on the remote system.
The transport connection was aborted by the local system.
The transport connection was aborted by the local system.
The requested operation cannot be performed on a file with a user mapped section open.
The requested operation cannot be performed on a file with a user mapped section open.
Attempting to login during an unauthorized time of day for this account.
Attempting to login during an unauthorized time of day for this account.
The account is not authorized to login from this station.
The account is not authorized to login from this station.
The dynamic link library %hs is not written correctly. The stack pointer has been left in an inconsistent state. The entrypoint should be declared as WINAPI or STDCALL. Select YES to fail the DLL load. Select NO to continue execution. Selecting NO may cause the application to operate incorrectly.
The dynamic link library %hs is not written correctly. The stack pointer has been left in an inconsistent state. The entrypoint should be declared as WINAPI or STDCALL. Select YES to fail the DLL load. Select NO to continue execution. Selecting NO may cause the application to operate incorrectly.
The %hs service is not written correctly. The stack pointer has been left in an inconsistent state. The callback entrypoint should be declared as WINAPI or STDCALL. Selecting OK will cause the service to continue operation. However, the service process may operate incorrectly.
The %hs service is not written correctly. The stack pointer has been left in an inconsistent state. The callback entrypoint should be declared as WINAPI or STDCALL. Selecting OK will cause the service to continue operation. However, the service process may operate incorrectly.
The contacted server does not support the indicated part of the DFS namespace.
The contacted server does not support the indicated part of the DFS namespace.
A callback return system service cannot be executed when no callback is active.
A callback return system service cannot be executed when no callback is active.
The password provided is too short to meet the policy of your user account. Please choose a longer password.
The password provided is too short to meet the policy of your user account. Please choose a longer password.
The policy of your user account does not allow you to change passwords too frequently. This is done to prevent users from changing back to a familiar, but potentially discovered, password. If you feel your password has been compromised then please contact your administrator immediately to have a new one assigned.
The policy of your user account does not allow you to change passwords too frequently. This is done to prevent users from changing back to a familiar, but potentially discovered, password. If you feel your password has been compromised then please contact your administrator immediately to have a new one assigned.
You have attempted to change your password to one that you have used in the past. The policy of your user account does not allow this. Please select a password that you have not previously used.
You have attempted to change your password to one that you have used in the past. The policy of your user account does not allow this. Please select a password that you have not previously used.
The specified compression format is unsupported.
The specified compression format is unsupported.
An attempt was made to create more links on a file than the file system supports.
An attempt was made to create more links on a file than the file system supports.
{Windows Evaluation Notification}
{Windows Evaluation Notification}
The evaluation period for this installation of Windows has expired. This system will shutdown in 1 hour. To restore access to this installation of Windows, please upgrade this installation using a licensed distribution of this product.
The evaluation period for this installation of Windows has expired. This system will shutdown in 1 hour. To restore access to this installation of Windows, please upgrade this installation using a licensed distribution of this product.
The system DLL %hs was relocated in memory. The application will not run properly. The relocation occurred because the DLL %hs occupied an address range reserved for Windows system DLLs. The vendor supplying the DLL should be contacted for a new DLL.
The system DLL %hs was relocated in memory. The application will not run properly. The relocation occurred because the DLL %hs occupied an address range reserved for Windows system DLLs. The vendor supplying the DLL should be contacted for a new DLL.
Error Status was 0x%x
Error Status was 0x%x
An operation was attempted to a volume after it was dismounted.
An operation was attempted to a volume after it was dismounted.
There was no match for the specified key in the index.
There was no match for the specified key in the index.
The Windows I/O reparse tag passed for the NTFS reparse point is invalid.
The Windows I/O reparse tag passed for the NTFS reparse point is invalid.
The Windows I/O reparse tag does not match the one present in the NTFS reparse point.
The Windows I/O reparse tag does not match the one present in the NTFS reparse point.
The user data passed for the NTFS reparse point is invalid.
The user data passed for the NTFS reparse point is invalid.
There are no EFS keys defined for the user.
There are no EFS keys defined for the user.
The specified file is not in the defined EFS export format.
The specified file is not in the defined EFS export format.
The guid passed was not recognized as valid by a WMI data provider.
The guid passed was not recognized as valid by a WMI data provider.
The instance name passed was not recognized as valid by a WMI data provider.
The instance name passed was not recognized as valid by a WMI data provider.
The data item id passed was not recognized as valid by a WMI data provider.
The data item id passed was not recognized as valid by a WMI data provider.
The remote storage service is not operational at this time.
The remote storage service is not operational at this time.
The requested operation could not be performed because the directory service is not the master for that type of operation.
The requested operation could not be performed because the directory service is not the master for that type of operation.
The requested operation did not satisfy one or more constraints associated with the class of the object.
The requested operation did not satisfy one or more constraints associated with the class of the object.
The directory service can perform the requested operation only on a leaf object.
The directory service can perform the requested operation only on a leaf object.
The directory service cannot perform the requested operation on the Relatively Defined Name (RDN) attribute of an object.
The directory service cannot perform the requested operation on the Relatively Defined Name (RDN) attribute of an object.
An error occurred while performing a cross domain move operation.
An error occurred while performing a cross domain move operation.
The requested operation requires a directory service, and none was available.
The requested operation requires a directory service, and none was available.
The requested interface is not supported.
The requested interface is not supported.
The driver %hs does not support standby mode. Updating this driver may allow the system to go to standby mode.
The driver %hs does not support standby mode. Updating this driver may allow the system to go to standby mode.
Mutual Authentication failed. The server's password is out of date at the domain controller.
Mutual Authentication failed. The server's password is out of date at the domain controller.
Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications may be denied. For more information, see Help.
Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications may be denied. For more information, see Help.
The medium changer's transport element contains media, which is causing the operation to fail.
The medium changer's transport element contains media, which is causing the operation to fail.
Error Status: 0x%x.
Error Status: 0x%x.
This operation is supported only when you are connected to the server.
This operation is supported only when you are connected to the server.
The system image %s is not properly signed. The file has been replaced with the signed file. The system has been shut down.
The system image %s is not properly signed. The file has been replaced with the signed file. The system has been shut down.
Current device power state cannot support this request.
Current device power state cannot support this request.
The WMI operation is not supported by the data block or method.
The WMI operation is not supported by the data block or method.
There is not enough power to complete the requested operation.
There is not enough power to complete the requested operation.
Security Account Manager needs to get the boot password.
Security Account Manager needs to get the boot password.
Security Account Manager needs to get the boot key from floppy disk.
Security Account Manager needs to get the boot key from floppy disk.
The requested operation can be performed only on a global catalog server.
The requested operation can be performed only on a global catalog server.
Your computer could not be joined to the domain. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. Contact your system administrator to have this limit reset or increased.
Your computer could not be joined to the domain. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. Contact your system administrator to have this limit reset or increased.
This operation cannot be performed on the current domain.
This operation cannot be performed on the current domain.
The other end of the security negotiation is requires strong crypto but it is not supported on the local machine.
The other end of the security negotiation is requires strong crypto but it is not supported on the local machine.
The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Please contact your administrator.
The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Please contact your administrator.
The encryption type requested is not supported by the KDC.
The encryption type requested is not supported by the KDC.
This operation is not supported on a computer running Windows Server 2003 for Small Business Server
This operation is not supported on a computer running Windows Server 2003 for Small Business Server
The Master File Table on the volume is too fragmented to complete this operation.
The Master File Table on the volume is too fragmented to complete this operation.
Copy protection error - The given sector does not contain a valid key.
Copy protection error - The given sector does not contain a valid key.
Copy protection error - DVD session key not established.
Copy protection error - DVD session key not established.
The Kerberos protocol encountered an error while validating the KDC certificate during smartcard Logon. There is more information in the system event log.
The Kerberos protocol encountered an error while validating the KDC certificate during smartcard Logon. There is more information in the system event log.
The transport determined that the remote system is down.
The transport determined that the remote system is down.
An unsupported preauthentication mechanism was presented to the Kerberos package.
An unsupported preauthentication mechanism was presented to the Kerberos package.
The encryption algorithm used on the source file needs a bigger key buffer than the one used on the destination file.
The encryption algorithm used on the source file needs a bigger key buffer than the one used on the destination file.
An attempt to remove a process's DebugPort was made, but a port was not already associated with the process.
An attempt to remove a process's DebugPort was made, but a port was not already associated with the process.
Debugger Inactive: Windows may have been started without kernel debugging enabled.
Debugger Inactive: Windows may have been started without kernel debugging enabled.
This version of Windows is not compatible with the behavior version of directory forest, domain or domain controller.
This version of Windows is not compatible with the behavior version of directory forest, domain or domain controller.
The specified image file did not have the correct format, it appears to be a 32-bit Windows image.
The specified image file did not have the correct format, it appears to be a 32-bit Windows image.
The specified image file did not have the correct format, it appears to be a 64-bit Windows image.
The specified image file did not have the correct format, it appears to be a 64-bit Windows image.
The SID filtering operation removed all SIDs.
The SID filtering operation removed all SIDs.
The create operation failed because the name contained at least one mount point which resolves to a volume to which the specified device object is not attached.
The create operation failed because the name contained at least one mount point which resolves to a volume to which the specified device object is not attached.
A dynamic link library (DLL) referenced a module that was neither a DLL nor the process's executable image.
A dynamic link library (DLL) referenced a module that was neither a DLL nor the process's executable image.
The requested key container does not exist on the smart card
The requested key container does not exist on the smart card
The requested certificate does not exist on the smart card
The requested certificate does not exist on the smart card
The requested keyset does not exist
The requested keyset does not exist
The smartcard certificate used for authentication has been revoked. Please contact your system administrator. There may be additional information in the event log.
The smartcard certificate used for authentication has been revoked. Please contact your system administrator. There may be additional information in the event log.
An untrusted certificate authority was detected While processing the smartcard certificate used for authentication. Please contact your system administrator.
An untrusted certificate authority was detected While processing the smartcard certificate used for authentication. Please contact your system administrator.
The revocation status of the smartcard certificate used for authentication could not be determined. Please contact your system administrator.
The revocation status of the smartcard certificate used for authentication could not be determined. Please contact your system administrator.
The smartcard certificate used for authentication was not trusted. Please contact your system administrator.
The smartcard certificate used for authentication was not trusted. Please contact your system administrator.
The smartcard certificate used for authentication has expired. Please
The smartcard certificate used for authentication has expired. Please
The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.
The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.
An attempt was made by this server to make a Kerberos constrained delegation request for a target outside of the server's realm. This is not supported, and indicates a misconfiguration on this server's allowed to delegate to list. Please contact your administrator.
An attempt was made by this server to make a Kerberos constrained delegation request for a target outside of the server's realm. This is not supported, and indicates a misconfiguration on this server's allowed to delegate to list. Please contact your administrator.
The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.
The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.
An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Please contact your system administrator.
An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Please contact your system administrator.
The domain controller certificate used for smartcard logon has expired. Please contact your system administrator with the contents of your system event log.
The domain controller certificate used for smartcard logon has expired. Please contact your system administrator with the contents of your system event log.
The domain controller certificate used for smartcard logon has been revoked. Please contact your system administrator with the contents of your system event log.
The domain controller certificate used for smartcard logon has been revoked. Please contact your system administrator with the contents of your system event log.
Data present in one of the parameters is more than the function can operate on.
Data present in one of the parameters is more than the function can operate on.
An attempt to delay-load a .dll or get a function address in a delay-loaded .dll failed.
An attempt to delay-load a .dll or get a function address in a delay-loaded .dll failed.
%hs is a 16-bit application. You do not have permissions to execute 16-bit applications. Check your permissions with your system administrator.
%hs is a 16-bit application. You do not have permissions to execute 16-bit applications. Check your permissions with your system administrator.
The %hs display driver has stopped working normally. Save your work and reboot the system to restore full display functionality. The next time you reboot the machine a dialog will be displayed giving you a chance to report this failure to Microsoft.
The %hs display driver has stopped working normally. Save your work and reboot the system to restore full display functionality. The next time you reboot the machine a dialog will be displayed giving you a chance to report this failure to Microsoft.
An invalid parameter was passed to a C runtime function.
An invalid parameter was passed to a C runtime function.
Illegal operation attempted on a registry key which has already been unloaded.
Illegal operation attempted on a registry key which has already been unloaded.
The requested operation could not be completed due to a file system limitation
The requested operation could not be completed due to a file system limitation
Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
The requested operation is out of order with respect to other operations.
The requested operation is out of order with respect to other operations.
An operation attempted to exceed an implementation-defined limit.
An operation attempted to exceed an implementation-defined limit.
The requested operation requires elevation.
The requested operation requires elevation.
The PKU2U protocol encountered an error while attempting to utilize the associated certificates.
The PKU2U protocol encountered an error while attempting to utilize the associated certificates.
The operation was attempted beyond the valid data length of the file.
The operation was attempted beyond the valid data length of the file.
The attempted write operation encountered a write already in progress for some portion of the range.
The attempted write operation encountered a write already in progress for some portion of the range.
The page fault mappings changed in the middle of processing a fault so the operation must be retried.
The page fault mappings changed in the middle of processing a fault so the operation must be retried.
Client Side Encryption is not supported by the remote server even though it claims to support it.
Client Side Encryption is not supported by the remote server even though it claims to support it.
The specified thread is already joining a task.
The specified thread is already joining a task.
A callback has requested to bypass native code.
A callback has requested to bypass native code.
Windows cannot verify the digital signature for this file. The signing certificate for this file has been revoked.
Windows cannot verify the digital signature for this file. The signing certificate for this file has been revoked.
The ALPC port is closed.
The ALPC port is closed.
The connection port is used in an invalid context.
The connection port is used in an invalid context.
The ALPC port does not accept new request messages.
The ALPC port does not accept new request messages.
The hardware has reported an uncorrectable memory error.
The hardware has reported an uncorrectable memory error.
Status 0xx was returned, waiting on handle 0x%x for wait 0x%p, in waiter 0x%p.
Status 0xx was returned, waiting on handle 0x%x for wait 0x%p, in waiter 0x%p.
After a callback to 0x%p(0x%p), a completion call to SetEvent(0x%p) failed with status 0xx.
After a callback to 0x%p(0x%p), a completion call to SetEvent(0x%p) failed with status 0xx.
After a callback to 0x%p(0x%p), a completion call to ReleaseSemaphore(0x%p, %d) failed with status 0xx.
After a callback to 0x%p(0x%p), a completion call to ReleaseSemaphore(0x%p, %d) failed with status 0xx.
After a callback to 0x%p(0x%p), a completion call to ReleaseMutex(%p) failed with status 0xx.
After a callback to 0x%p(0x%p), a completion call to ReleaseMutex(%p) failed with status 0xx.
After a callback to 0x%p(0x%p), an completion call to FreeLibrary(%p) failed with status 0xx.
After a callback to 0x%p(0x%p), an completion call to FreeLibrary(%p) failed with status 0xx.
A threadpool worker thread is impersonating a client, after executing an APC.
A threadpool worker thread is impersonating a client, after executing an APC.
The client certificate account mapping is not unique.
The client certificate account mapping is not unique.
The specified port already has a completion list.
The specified port already has a completion list.
A threadpool worker thread enter a callback at thread base priority 0x%x and exited at priority 0x%x.
A threadpool worker thread enter a callback at thread base priority 0x%x and exited at priority 0x%x.
An invalid thread, handle %p, is specified for this operation. Possibly, a threadpool worker thread was specified.
An invalid thread, handle %p, is specified for this operation. Possibly, a threadpool worker thread was specified.
The attempted operation required self healing to be enabled.
The attempted operation required self healing to be enabled.
The Directory Service cannot perform the requested operation because a domain rename operation is in progress.
The Directory Service cannot perform the requested operation because a domain rename operation is in progress.
The requested file operation failed because the storage quota was exceeded.
The requested file operation failed because the storage quota was exceeded.
The requested file operation failed because the storage policy blocks that type of file. For more information, contact your system administrator.
The requested file operation failed because the storage policy blocks that type of file. For more information, contact your system administrator.
The operation could not be completed due to bad clusters on disk.
The operation could not be completed due to bad clusters on disk.
The operation could not be completed because the volume is dirty. Please run chkdsk and try again.
The operation could not be completed because the volume is dirty. Please run chkdsk and try again.
Access Denied. Before opening files in this location, you must first browse to the web site and select the option to login automatically.
Access Denied. Before opening files in this location, you must first browse to the web site and select the option to login automatically.
Operation did not complete successfully because the file contains a virus.
Operation did not complete successfully because the file contains a virus.
The operation did not complete successfully because it would cause an oplock to be broken. The caller has requested that existing oplocks not be broken.
The operation did not complete successfully because it would cause an oplock to be broken. The caller has requested that existing oplocks not be broken.
The cryptographic provider does not support HMAC.
The cryptographic provider does not support HMAC.
An operation or data has been rejected while on the network fast path.
An operation or data has been rejected while on the network fast path.
Windows was unable to save all the data for the file %hs; the data has been lost.
Windows was unable to save all the data for the file %hs; the data has been lost.
Windows was unable to parse the requested XML data.
Windows was unable to parse the requested XML data.
The RPC protocol sequence is not supported.
The RPC protocol sequence is not supported.
Not enough resources are available to complete this operation.
Not enough resources are available to complete this operation.
The RPC server is too busy to complete this operation.
The RPC server is too busy to complete this operation.
The remote procedure call failed and did not execute.
The remote procedure call failed and did not execute.
The transfer syntax is not supported by the RPC server.
The transfer syntax is not supported by the RPC server.
The type UUID is not supported.
The type UUID is not supported.
The name syntax is not supported.
The name syntax is not supported.
The operation cannot be performed.
The operation cannot be performed.
No interfaces have been exported.
No interfaces have been exported.
There is nothing to unexport.
There is nothing to unexport.
The requested operation is not supported.
The requested operation is not supported.
A floating point operation at the RPC server caused a divide by zero.
A floating point operation at the RPC server caused a divide by zero.
The requested authentication level is not supported.
The requested authentication level is not supported.
The error specified is not a valid Windows RPC error code.
The error specified is not a valid Windows RPC error code.
Invalid asynchronous RPC call handle for this operation.
Invalid asynchronous RPC call handle for this operation.
Access to the HTTP proxy is denied.
Access to the HTTP proxy is denied.
HTTP proxy server rejected the connection because the cookie authentication failed.
HTTP proxy server rejected the connection because the cookie authentication failed.
A null context handle is passed as an [in] parameter.
A null context handle is passed as an [in] parameter.
The binding handles passed to a remote procedure call do not match.
The binding handles passed to a remote procedure call do not match.
A null reference pointer was passed to the stub.
A null reference pointer was passed to the stub.
Invalid operation on the encoding/decoding handle.
Invalid operation on the encoding/decoding handle.
The RPC pipe object is invalid or corrupted.
The RPC pipe object is invalid or corrupted.
An invalid operation was attempted on an RPC pipe object.
An invalid operation was attempted on an RPC pipe object.
Unsupported RPC pipe version.
Unsupported RPC pipe version.
The RPC pipe object has already been closed.
The RPC pipe object has already been closed.
The RPC call completed before all pipes were processed.
The RPC call completed before all pipes were processed.
No more data is available from the RPC pipe.
No more data is available from the RPC pipe.
Reissue the given operation as a cached IO operation
Reissue the given operation as a cached IO operation
A close operation is pending on the Terminal Connection.
A close operation is pending on the Terminal Connection.
The MODEM.INF file was not found.
The MODEM.INF file was not found.
The modem (%1) was not found in MODEM.INF.
The modem (%1) was not found in MODEM.INF.
Transport driver error
Transport driver error
An attempt has been made to connect to a session whose video mode is not supported by the current client.
An attempt has been made to connect to a session whose video mode is not supported by the current client.
DOS graphics mode is not supported.
DOS graphics mode is not supported.
The requested operation can be performed only on the system console.
The requested operation can be performed only on the system console.
Disconnecting the console session is not supported.
Disconnecting the console session is not supported.
Reconnecting a disconnected session to the console is not supported.
Reconnecting a disconnected session to the console is not supported.
The remote control of the console was terminated because the display mode was changed. Changing the display mode in a remote control session is not supported.
The remote control of the console was terminated because the display mode was changed. Changing the display mode in a remote control session is not supported.
Windows can't connect to your session because a problem occurred in the Windows video subsystem. Try connecting again later, or contact the server administrator for assistance.
Windows can't connect to your session because a problem occurred in the Windows video subsystem. Try connecting again later, or contact the server administrator for assistance.
The resource loader failed to load MUI file because the file fail to pass validation.
The resource loader failed to load MUI file because the file fail to pass validation.
The RC Manifest is corrupted with garbage data or unsupported version or missing required item.
The RC Manifest is corrupted with garbage data or unsupported version or missing required item.
A node is in the process of joining the cluster.
A node is in the process of joining the cluster.
A cluster join operation is not in progress.
A cluster join operation is not in progress.
Windows was not able to process the application binding information.
Windows was not able to process the application binding information.
The requested lookup key was not found in any active activation context.
The requested lookup key was not found in any active activation context.
Lack of system resources has required isolated activation to be disabled for the current thread of execution.
Lack of system resources has required isolated activation to be disabled for the current thread of execution.
The activation context being deactivated is not active for the current thread of execution.
The activation context being deactivated is not active for the current thread of execution.
The activation context activation stack for the running thread of execution is corrupt.
The activation context activation stack for the running thread of execution is corrupt.
A generic command executable returned a result that indicates failure.
A generic command executable returned a result that indicates failure.
The transaction handle associated with this operation is not valid.
The transaction handle associated with this operation is not valid.
The requested operation was made in the context of a transaction that is no longer active.
The requested operation was made in the context of a transaction that is no longer active.
The Transaction Manager was unable to be successfully initialized. Transacted operations are not supported.
The Transaction Manager was unable to be successfully initialized. Transacted operations are not supported.
Transaction support within the specified resource manager is not started or was shut down due to an error.
Transaction support within the specified resource manager is not started or was shut down due to an error.
The resource manager has attempted to prepare a transaction that it has not successfully joined.
The resource manager has attempted to prepare a transaction that it has not successfully joined.
The remote server or share does not support transacted file operations.
The remote server or share does not support transacted file operations.
The Transaction object already has a superior enlistment, and the caller attempted an operation that would have created a new superior. Only a single superior enlistment is allowed.
The Transaction object already has a superior enlistment, and the caller attempted an operation that would have created a new superior. Only a single superior enlistment is allowed.
The requested operation is not valid on the Transaction object in its current state.
The requested operation is not valid on the Transaction object in its current state.
It is too late to perform the requested operation, since the Transaction has already been aborted.
It is too late to perform the requested operation, since the Transaction has already been aborted.
It is too late to perform the requested operation, since the Transaction has already been committed.
It is too late to perform the requested operation, since the Transaction has already been committed.
The buffer passed in to NtPushTransaction or NtPullTransaction is not in a valid format.
The buffer passed in to NtPushTransaction or NtPullTransaction is not in a valid format.
The operation cannot be performed because another transaction is depending on the fact that this property will not change.
The operation cannot be performed because another transaction is depending on the fact that this property will not change.
The operation would involve a single file with two transactional resource managers and is therefore not allowed.
The operation would involve a single file with two transactional resource managers and is therefore not allowed.
The $Txf directory must be empty for this operation to succeed.
The $Txf directory must be empty for this operation to succeed.
The operation would leave a transactional resource manager in an inconsistent state and is therefore not allowed.
The operation would leave a transactional resource manager in an inconsistent state and is therefore not allowed.
The operation could not be completed because the transaction manager does not have a log.
The operation could not be completed because the transaction manager does not have a log.
A rollback could not be scheduled because a previously scheduled rollback has already executed or been queued for execution.
A rollback could not be scheduled because a previously scheduled rollback has already executed or been queued for execution.
The encryption operation could not be completed because a transaction is active.
The encryption operation could not be completed because a transaction is active.
Memory mapping (creating a mapped section) a remote file under a transaction is not supported.
Memory mapping (creating a mapped section) a remote file under a transaction is not supported.
This file is open for modification in an unresolved transaction and may be opened for execute only by a transacted reader.
This file is open for modification in an unresolved transaction and may be opened for execute only by a transacted reader.
The target volume is not a snapshot volume. This operation is only valid on a volume mounted as a snapshot.
The target volume is not a snapshot volume. This operation is only valid on a volume mounted as a snapshot.
The savepoint operation failed because files are open on the transaction. This is not permitted.
The savepoint operation failed because files are open on the transaction. This is not permitted.
The sparse operation could not be completed because a transaction is active on the file.
The sparse operation could not be completed because a transaction is active on the file.
The call to create a TransactionManager object failed because the Tm Identity stored in the logfile does not match the Tm Identity that was passed in as an argument.
The call to create a TransactionManager object failed because the Tm Identity stored in the logfile does not match the Tm Identity that was passed in as an argument.
The compression operation could not be completed because a transaction is active on the file.
The compression operation could not be completed because a transaction is active on the file.
The specified operation could not be performed on this Superior enlistment, because the enlistment was not created with the corresponding completion response in the NotificationMask.
The specified operation could not be performed on this Superior enlistment, because the enlistment was not created with the corresponding completion response in the NotificationMask.
The specified operation could not be performed, because the record that would be logged was too long. This can occur because of two conditions: either there are too many Enlistments on this Transaction, or the combined RecoveryInformation being logged on behalf of those Enlistments is too long.
The specified operation could not be performed, because the record that would be logged was too long. This can occur because of two conditions: either there are too many Enlistments on this Transaction, or the combined RecoveryInformation being logged on behalf of those Enlistments is too long.
The link tracking operation could not be completed because a transaction is active.
The link tracking operation could not be completed because a transaction is active.
This operation cannot be performed in a transaction.
This operation cannot be performed in a transaction.
This snapshot operation cannot continue because a transactional resource manager cannot be frozen in its current state. Please try again.
This snapshot operation cannot continue because a transactional resource manager cannot be frozen in its current state. Please try again.
The specified operation could not be performed because the resource manager is not enlisted in the transaction.
The specified operation could not be performed because the resource manager is not enlisted in the transaction.
A policy on the log in question prevented the operation from completing.
A policy on the log in question prevented the operation from completing.
Log is multiplexed, no direct writes to the physical log is allowed.
Log is multiplexed, no direct writes to the physical log is allowed.
The operation failed because the log is a dedicated log.
The operation failed because the log is a dedicated log.
The operation requires an archive context.
The operation requires an archive context.
The operation requires a non-ephemeral log, but the log is ephemeral.
The operation requires a non-ephemeral log, but the log is ephemeral.
A handler was not defined by the filter for this operation.
A handler was not defined by the filter for this operation.
Asynchronous requests are not valid for this operation.
Asynchronous requests are not valid for this operation.
Internal error code used by the filter manager to determine if a fastio operation should be forced down the IRP path. Mini-filters should never return this value.
Internal error code used by the filter manager to determine if a fastio operation should be forced down the IRP path. Mini-filters should never return this value.
Posting this operation to a worker thread for further processing is not safe at this time because it could lead to a system deadlock.
Posting this operation to a worker thread for further processing is not safe at this time because it could lead to a system deadlock.
The filter must cleanup any operation specific context at this time because it is being removed from the system before the operation is completed by the lower drivers.
The filter must cleanup any operation specific context at this time because it is being removed from the system before the operation is completed by the lower drivers.
The Filter Manager had an internal error from which it cannot recover, therefore the operation has been failed. This is usually the result of a filter returning an invalid value from a pre-operation callback.
The Filter Manager had an internal error from which it cannot recover, therefore the operation has been failed. This is usually the result of a filter returning an invalid value from a pre-operation callback.
A duplicate handler definition has been provided for an operation.
A duplicate handler definition has been provided for an operation.
Format of the obtained monitor descriptor is not supported by this release.
Format of the obtained monitor descriptor is not supported by this release.
The driver needs more DMA buffer space in order to complete the requested operation.
The driver needs more DMA buffer space in order to complete the requested operation.
Not enough video memory available to complete the operation.
Not enough video memory available to complete the operation.
The allocation can't be used from it's current segment location for the specified operation.
The allocation can't be used from it's current segment location for the specified operation.
Specified VidPN topology is valid but is not supported by this model of the display adapter.
Specified VidPN topology is valid but is not supported by this model of the display adapter.
Specified VidPN topology is valid but is not supported by the display adapter at this time, due to current allocation of its resources.
Specified VidPN topology is valid but is not supported by the display adapter at this time, due to current allocation of its resources.
Specified VidPN modality is not supported (e.g. at least two of the pinned modes are not cofunctional).
Specified VidPN modality is not supported (e.g. at least two of the pinned modes are not cofunctional).
Miniport has no recommendation for augmentation of the specified VidPN's topology.
Miniport has no recommendation for augmentation of the specified VidPN's topology.
Miniport does not have any recommendation regarding the request to provide a functional VidPN given the current display adapter configuration.
Miniport does not have any recommendation regarding the request to provide a functional VidPN given the current display adapter configuration.
System failed to determine a mode that is supported by both the display adapter and the monitor connected to it.
System failed to determine a mode that is supported by both the display adapter and the monitor connected to it.
Specified VidPN present path importance ordinal is invalid.
Specified VidPN present path importance ordinal is invalid.
Specified content geometry transformation is not supported on the respective VidPN present path.
Specified content geometry transformation is not supported on the respective VidPN present path.
Specified gamma ramp is not supported on the respective VidPN present path.
Specified gamma ramp is not supported on the respective VidPN present path.
Multi-sampling is not supported on the respective VidPN present path.
Multi-sampling is not supported on the respective VidPN present path.
All available importance ordinals are already used in specified topology.
All available importance ordinals are already used in specified topology.
Maximum supported number of present paths has been reached.
Maximum supported number of present paths has been reached.
Miniport requested that augmentation be cancelled for the specified source of the specified VidPN's topology.
Miniport requested that augmentation be cancelled for the specified source of the specified VidPN's topology.
Specified display adapter child device does not support descriptor exposure.
Specified display adapter child device does not support descriptor exposure.
An operation is being attempted that requires the display adapter to be in a quiescent state.
An operation is being attempted that requires the display adapter to be in a quiescent state.
The driver does not support OPM.
The driver does not support OPM.
The driver does not support COPP.
The driver does not support COPP.
The driver does not support UAB.
The driver does not support UAB.
The GDI display device passed to this function does not have any active protected outputs.
The GDI display device passed to this function does not have any active protected outputs.
An internal error caused an operation to fail.
An internal error caused an operation to fail.
The function failed because the caller passed in an invalid OPM user mode handle.
The function failed because the caller passed in an invalid OPM user mode handle.
A certificate could not be returned because the certificate buffer passed to the function was too small.
A certificate could not be returned because the certificate buffer passed to the function was too small.
The HDCP System Renewability Message passed to this function did not comply with section 5 of the HDCP 1.1 specification.
The HDCP System Renewability Message passed to this function did not comply with section 5 of the HDCP 1.1 specification.
The protected output cannot enable the High-bandwidth Digital Content Protection (HDCP) System because it does not support HDCP.
The protected output cannot enable the High-bandwidth Digital Content Protection (HDCP) System because it does not support HDCP.
The protected output cannot enable Analogue Copy Protection (ACP) because it does not support ACP.
The protected output cannot enable Analogue Copy Protection (ACP) because it does not support ACP.
The protected output cannot enable the Content Generation Management System Analogue (CGMS-A) protection technology because it does not support CGMS-A.
The protected output cannot enable the Content Generation Management System Analogue (CGMS-A) protection technology because it does not support CGMS-A.
The DxgkDdiOPMGetInformation function cannot return the version of the SRM being used because the application never successfully passed an SRM to the protected output.
The DxgkDdiOPMGetInformation function cannot return the version of the SRM being used because the application never successfully passed an SRM to the protected output.
The operating system asynchronously destroyed this OPM protected output because the operating system's state changed. This error typically occurs because the monitor PDO associated with this protected output was removed, the monitor PDO associated with this protected output was stopped, or the protected output's session became a non-console session.
The operating system asynchronously destroyed this OPM protected output because the operating system's state changed. This error typically occurs because the monitor PDO associated with this protected output was removed, the monitor PDO associated with this protected output was stopped, or the protected output's session became a non-console session.
The DxgkDdiOPMGetInformation and DxgkDdiOPMGetCOPPCompatibleInformation functions return this error code if the passed in sequence number is not the expected sequence number or the passed in OMAC value is invalid.
The DxgkDdiOPMGetInformation and DxgkDdiOPMGetCOPPCompatibleInformation functions return this error code if the passed in sequence number is not the expected sequence number or the passed in OMAC value is invalid.
The DxgkDdiOPMGetCOPPCompatibleInformation and DxgkDdiOPMConfigureProtectedOutput functions return this error if the display driver does not support the DXGKMDT_OPM_GET_ACP_AND_CGMSA_SIGNALING and DXGKMDT_OPM_SET_ACP_AND_CGMSA_SIGNALING GUIDs.
The DxgkDdiOPMGetCOPPCompatibleInformation and DxgkDdiOPMConfigureProtectedOutput functions return this error if the display driver does not support the DXGKMDT_OPM_GET_ACP_AND_CGMSA_SIGNALING and DXGKMDT_OPM_SET_ACP_AND_CGMSA_SIGNALING GUIDs.
The DxgkDdiOPMConfigureProtectedOutput function returns this error code if the passed in sequence number is not the expected sequence number or the passed in OMAC value is invalid.
The DxgkDdiOPMConfigureProtectedOutput function returns this error code if the passed in sequence number is not the expected sequence number or the passed in OMAC value is invalid.
The monitor does not support the specified VCP code.
The monitor does not support the specified VCP code.
The function failed because a monitor returned an invalid Timing Status byte when the operating system used the DDC/CI Get Timing Report & Timing Message command to get a timing report from a monitor.
The function failed because a monitor returned an invalid Timing Status byte when the operating system used the DDC/CI Get Timing Report & Timing Message command to get a timing report from a monitor.
A monitor returned a DDC/CI capabilities string which did not comply with the ACCESS.bus 3.0, DDC/CI 1.1, or MCCS 2 Revision 1 specification.
A monitor returned a DDC/CI capabilities string which did not comply with the ACCESS.bus 3.0, DDC/CI 1.1, or MCCS 2 Revision 1 specification.
An operation failed because a DDC/CI message had an invalid value in its command field.
An operation failed because a DDC/CI message had an invalid value in its command field.
This function failed because an invalid monitor handle was passed to it.
This function failed because an invalid monitor handle was passed to it.
The operating system asynchronously destroyed the monitor which corresponds to this handle because the operating system's state changed. This error typically occurs because the monitor PDO associated with this handle was removed, the monitor PDO associated with this handle was stopped, or a display mode change occurred. A display mode change occurs when windows sends a WM_DISPLAYCHANGE windows message to applications.
The operating system asynchronously destroyed the monitor which corresponds to this handle because the operating system's state changed. This error typically occurs because the monitor PDO associated with this handle was removed, the monitor PDO associated with this handle was stopped, or a display mode change occurred. A display mode change occurs when windows sends a WM_DISPLAYCHANGE windows message to applications.
The function failed because the specified GDI display device was not attached to the Windows desktop.
The function failed because the specified GDI display device was not attached to the Windows desktop.
This function does not support GDI mirroring display devices because GDI mirroring display devices do not have any physical monitors associated with them.
This function does not support GDI mirroring display devices because GDI mirroring display devices do not have any physical monitors associated with them.
The function failed because an invalid pointer parameter was passed to it. A pointer parameter is invalid if it is NULL, it points to an invalid address, it points to a kernel mode address or it is not correctly aligned.
The function failed because an invalid pointer parameter was passed to it. A pointer parameter is invalid if it is NULL, it points to an invalid address, it points to a kernel mode address or it is not correctly aligned.
This function failed because the GDI device passed to it did not have any monitors associated with it.
This function failed because the GDI device passed to it did not have any monitors associated with it.
An array passed to the function cannot hold all of the data that the function must copy into the array.
An array passed to the function cannot hold all of the data that the function must copy into the array.
The volume is not encrypted, no key is available.
The volume is not encrypted, no key is available.
The volume cannot be encrypted because the file system is not supported.
The volume cannot be encrypted because the file system is not supported.
This operation cannot be performed while a file system is mounted on the volume.
This operation cannot be performed while a file system is mounted on the volume.
BitLocker Drive Encryption is not included with this version of Windows.
BitLocker Drive Encryption is not included with this version of Windows.
A read operation failed while converting the volume.
A read operation failed while converting the volume.
A write operation failed while converting the volume.
A write operation failed while converting the volume.
The encryption algorithm does not support the sector size of that volume.
The encryption algorithm does not support the sector size of that volume.
The BitLocker startup key or recovery password could not be read from external media.
The BitLocker startup key or recovery password could not be read from external media.
The BitLocker startup key or recovery password file is corrupt or invalid.
The BitLocker startup key or recovery password file is corrupt or invalid.
The BitLocker encryption key could not be obtained from the startup key or recovery password.
The BitLocker encryption key could not be obtained from the startup key or recovery password.
The authorization data for the Storage Root Key (SRK) of the Trusted Platform Module (TPM) is not zero.
The authorization data for the Storage Root Key (SRK) of the Trusted Platform Module (TPM) is not zero.
The system boot information changed or the Trusted Platform Module (TPM) locked out access to BitLocker encryption keys until the computer is restarted.
The system boot information changed or the Trusted Platform Module (TPM) locked out access to BitLocker encryption keys until the computer is restarted.
The BitLocker encryption key could not be obtained from the Trusted Platform Module (TPM).
The BitLocker encryption key could not be obtained from the Trusted Platform Module (TPM).
The BitLocker encryption key could not be obtained from the Trusted Platform Module (TPM) and PIN.
The BitLocker encryption key could not be obtained from the Trusted Platform Module (TPM) and PIN.
The Boot Configuration Data (BCD) settings are not supported or have changed since BitLocker was enabled.
The Boot Configuration Data (BCD) settings are not supported or have changed since BitLocker was enabled.
The BitLocker encryption key could not be obtained.
The BitLocker encryption key could not be obtained.
The auto-unlock master key was not available from the operating system volume. Retry the operation using the BitLocker WMI interface.
The auto-unlock master key was not available from the operating system volume. Retry the operation using the BitLocker WMI interface.
This feature of BitLocker Drive Encryption is not included with this version of Windows.
This feature of BitLocker Drive Encryption is not included with this version of Windows.
The management information stored on the drive contained an unknown type. If you are using an old version of Windows, try accessing the drive from the latest version.
The management information stored on the drive contained an unknown type. If you are using an old version of Windows, try accessing the drive from the latest version.
The BitLocker encryption key could not be obtained from the Trusted Platform Module (TPM) and enhanced PIN. Try using a PIN containing only numerals.
The BitLocker encryption key could not be obtained from the Trusted Platform Module (TPM) and enhanced PIN. Try using a PIN containing only numerals.
The operation is not supported by the specified layer.
The operation is not supported by the specified layer.
The displayData.name field cannot be null.
The displayData.name field cannot be null.
A filter condition contains a match type that is not compatible with the operands.
A filter condition contains a match type that is not compatible with the operands.
A filter cannot contain multiple conditions operating on a single field.
A filter cannot contain multiple conditions operating on a single field.
A policy cannot contain the same keying module more than once.
A policy cannot contain the same keying module more than once.
The TCP/IP stack is not ready.
The TCP/IP stack is not ready.
Network interface is not ready to complete this operation.
Network interface is not ready to complete this operation.
The length of the buffer submitted for this operation is not valid.
The length of the buffer submitted for this operation is not valid.
The data used for this operation is not valid.
The data used for this operation is not valid.
The length of buffer submitted for this operation is too small.
The length of buffer submitted for this operation is too small.
Network interface does not support this OID (Object Identifier)
Network interface does not support this OID (Object Identifier)
Network interface does not support this media type.
Network interface does not support this media type.
The I/O operation failed because network media is disconnected or wireless access point is out of range.
The I/O operation failed because network media is disconnected or wireless access point is out of range.
The offload operation on the network interface has been paused.
The offload operation on the network interface has been paused.
The revision number specified in the structure is not supported.
The revision number specified in the structure is not supported.
The specified port does not exist on this network interface.
The specified port does not exist on this network interface.
The current state of the specified port on this network interface does not support the requested operation.
The current state of the specified port on this network interface does not support the requested operation.
The miniport adapter is in lower power state.
The miniport adapter is in lower power state.
Netword interface does not support this request.
Netword interface does not support this request.
The TCP connection is not offloadable because of a local policy setting.
The TCP connection is not offloadable because of a local policy setting.
The TCP connection is not offloadable by the Chimney offload target.
The TCP connection is not offloadable by the Chimney offload target.
The wireless local area network interface is in auto configuration mode and doesn't support the requested parameter change operation.
The wireless local area network interface is in auto configuration mode and doesn't support the requested parameter change operation.
The wireless local area network interface is busy and can not perform the requested operation.
The wireless local area network interface is busy and can not perform the requested operation.
The wireless local area network interface is power down and doesn't support the requested operation.
The wireless local area network interface is power down and doesn't support the requested operation.
The hypervisor does not support the operation because the specified hypercall code is not supported.
The hypervisor does not support the operation because the specified hypercall code is not supported.
The hypervisor does not support the operation because the encoding for the hypercall input register is not supported.
The hypervisor does not support the operation because the encoding for the hypercall input register is not supported.
The hypervisor could not perform the operation beacuse a parameter has an invalid alignment.
The hypervisor could not perform the operation beacuse a parameter has an invalid alignment.
The hypervisor could not perform the operation beacuse an invalid parameter was specified.
The hypervisor could not perform the operation beacuse an invalid parameter was specified.
The hypervisor could not perform the operation because the partition is entering or in an invalid state.
The hypervisor could not perform the operation because the partition is entering or in an invalid state.
The operation is not allowed in the current state.
The operation is not allowed in the current state.
There is not enough memory in the hypervisor pool to complete the operation.
There is not enough memory in the hypervisor pool to complete the operation.
The hypervisor could not perform the operation because the specified VP index is invalid.
The hypervisor could not perform the operation because the specified VP index is invalid.
The hypervisor could not perform the operation because the specified port identifier is invalid.
The hypervisor could not perform the operation because the specified port identifier is invalid.
The hypervisor could not perform the operation because the specified connection identifier is invalid.
The hypervisor could not perform the operation because the specified connection identifier is invalid.
The hypervisor could not complete the operation because a required feature of the synthetic interrupt controller (SynIC) was disabled.
The hypervisor could not complete the operation because a required feature of the synthetic interrupt controller (SynIC) was disabled.
The hypervisor could not perform the operation because the object or value was either already in use or being used for a purpose that would not permit completing the operation.
The hypervisor could not perform the operation because the object or value was either already in use or being used for a purpose that would not permit completing the operation.
The physical connection being used for debuggging has not recorded any receive activity since the last operation.
The physical connection being used for debuggging has not recorded any receive activity since the last operation.
There are not enough resources to complete the operation.
There are not enough resources to complete the operation.
IPsec DoS Protection received an IPsec negotiation packet for a keying module which is not allowed by policy.
IPsec DoS Protection received an IPsec negotiation packet for a keying module which is not allowed by policy.
Cannot unlock the page array for the guest operating system memory address because it does not match a previous lock request. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer.
Cannot unlock the page array for the guest operating system memory address because it does not match a previous lock request. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer.
The non-uniform memory access (NUMA) node settings do not match the system NUMA topology. In order to start the virtual machine, you will need to modify the NUMA configuration. For detailed information, see hXXp://go.microsoft.com/fwlink/?LinkId=92362.
The non-uniform memory access (NUMA) node settings do not match the system NUMA topology. In order to start the virtual machine, you will need to modify the NUMA configuration. For detailed information, see hXXp://go.microsoft.com/fwlink/?LinkId=92362.
The lock or unlock request uses an invalid guest operating system memory address. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer.
The lock or unlock request uses an invalid guest operating system memory address. Restarting the virtual machine may fix the problem. If the problem persists, try restarting the physical computer.
The specified disk is an invalid disk. Operation cannot complete on an invalid disk.
The specified disk is an invalid disk. Operation cannot complete on an invalid disk.
The disk layout contains more than the maximum number of supported partitions.
The disk layout contains more than the maximum number of supported partitions.
The specified disk is missing. The operation cannot complete on a missing disk.
The specified disk is missing. The operation cannot complete on a missing disk.
There is not enough usable space for this operation.
There is not enough usable space for this operation.
Dynamic disks are not supported on this system.
Dynamic disks are not supported on this system.
The system does not support fault tolerant volumes.
The system does not support fault tolerant volumes.
The specified number of plexes is invalid.
The specified number of plexes is invalid.
The specified pack is the invalid pack. The operation cannot complete with the invalid pack.
The specified pack is the invalid pack. The operation cannot complete with the invalid pack.
The specified disk has an unsupported partition style. Only MBR and GPT partition styles are supported.
The specified disk has an unsupported partition style. Only MBR and GPT partition styles are supported.
The specified plex is already in-sync with the other active plexes. It does not need to be regenerated.
The specified plex is already in-sync with the other active plexes. It does not need to be regenerated.
The specified plex index is greater or equal than the number of plexes in the volume.
The specified plex index is greater or equal than the number of plexes in the volume.
The operation is only supported on RAID-5 plexes.
The operation is only supported on RAID-5 plexes.
The operation is only supported on simple plexes.
The operation is only supported on simple plexes.
The operation is only supported on mirrored volumes.
The operation is only supported on mirrored volumes.
The operation is not supported on mirrored volumes.
The operation is not supported on mirrored volumes.
The operation is only supported on simple and spanned plexes.
The operation is only supported on simple and spanned plexes.
The system does not support mirrored volumes.
The system does not support mirrored volumes.
The system does not support RAID-5 volumes.
The system does not support RAID-5 volumes.
The version does not support this version of the file format.
The version does not support this version of the file format.
The system does not support this version of the virtual hard disk.This version of the sparse header is not supported.
The system does not support this version of the virtual hard disk.This version of the sparse header is not supported.
The system does not support this version of the virtual hard disk. The block size is invalid.
The system does not support this version of the virtual hard disk. The block size is invalid.
A virtual disk support provider for the specified file was not found.
A virtual disk support provider for the specified file was not found.
The requested operation could not be completed due to a virtual disk system limitation. Virtual disks are only supported on NTFS volumes and must be both uncompressed and unencrypted.
The requested operation could not be completed due to a virtual disk system limitation. Virtual disks are only supported on NTFS volumes and must be both uncompressed and unencrypted.
The requested operation cannot be performed on a virtual disk of this type.
The requested operation cannot be performed on a virtual disk of this type.
The requested operation cannot be performed on the virtual disk in its current state.
The requested operation cannot be performed on the virtual disk in its current state.
The sector size of the physical disk on which the virtual disk resides is not supported.
The sector size of the physical disk on which the virtual disk resides is not supported.
The Derived Indexed Store is not present (or currently loaded) on this system.
The Derived Indexed Store is not present (or currently loaded) on this system.
%original file name%.exe_1588_rwx_01920000_0001E000:
IPHLPAPI.DLL
IPHLPAPI.DLL
CreatePersistentTcpPortReservation
CreatePersistentTcpPortReservation
CreatePersistentUdpPortReservation
CreatePersistentUdpPortReservation
DeletePersistentTcpPortReservation
DeletePersistentTcpPortReservation
DeletePersistentUdpPortReservation
DeletePersistentUdpPortReservation
GetExtendedTcpTable
GetExtendedTcpTable
GetExtendedUdpTable
GetExtendedUdpTable
GetOwnerModuleFromTcp6Entry
GetOwnerModuleFromTcp6Entry
GetOwnerModuleFromTcpEntry
GetOwnerModuleFromTcpEntry
GetOwnerModuleFromUdp6Entry
GetOwnerModuleFromUdp6Entry
GetOwnerModuleFromUdpEntry
GetOwnerModuleFromUdpEntry
GetPerTcp6ConnectionEStats
GetPerTcp6ConnectionEStats
GetPerTcp6ConnectionStats
GetPerTcp6ConnectionStats
GetPerTcpConnectionEStats
GetPerTcpConnectionEStats
GetPerTcpConnectionStats
GetPerTcpConnectionStats
GetTcp6Table
GetTcp6Table
GetTcp6Table2
GetTcp6Table2
GetTcpStatistics
GetTcpStatistics
GetTcpStatisticsEx
GetTcpStatisticsEx
GetTcpTable
GetTcpTable
GetTcpTable2
GetTcpTable2
GetTeredoPort
GetTeredoPort
GetUdp6Table
GetUdp6Table
GetUdpStatistics
GetUdpStatistics
GetUdpStatisticsEx
GetUdpStatisticsEx
GetUdpTable
GetUdpTable
InternalGetTcp6Table2
InternalGetTcp6Table2
InternalGetTcp6TableWithOwnerModule
InternalGetTcp6TableWithOwnerModule
InternalGetTcp6TableWithOwnerPid
InternalGetTcp6TableWithOwnerPid
InternalGetTcpTable
InternalGetTcpTable
InternalGetTcpTable2
InternalGetTcpTable2
InternalGetTcpTableEx
InternalGetTcpTableEx
InternalGetTcpTableWithOwnerModule
InternalGetTcpTableWithOwnerModule
InternalGetTcpTableWithOwnerPid
InternalGetTcpTableWithOwnerPid
InternalGetUdp6TableWithOwnerModule
InternalGetUdp6TableWithOwnerModule
InternalGetUdp6TableWithOwnerPid
InternalGetUdp6TableWithOwnerPid
InternalGetUdpTable
InternalGetUdpTable
InternalGetUdpTableEx
InternalGetUdpTableEx
InternalGetUdpTableWithOwnerModule
InternalGetUdpTableWithOwnerModule
InternalGetUdpTableWithOwnerPid
InternalGetUdpTableWithOwnerPid
InternalSetTcpEntry
InternalSetTcpEntry
InternalSetTeredoPort
InternalSetTeredoPort
LookupPersistentTcpPortReservation
LookupPersistentTcpPortReservation
LookupPersistentUdpPortReservation
LookupPersistentUdpPortReservation
NotifyTeredoPortChange
NotifyTeredoPortChange
SetPerTcp6ConnectionEStats
SetPerTcp6ConnectionEStats
SetPerTcp6ConnectionStats
SetPerTcp6ConnectionStats
SetPerTcpConnectionEStats
SetPerTcpConnectionEStats
SetPerTcpConnectionStats
SetPerTcpConnectionStats
SetTcpEntry
SetTcpEntry
{lX-X-X-XX-XXXXXX}
{lX-X-X-XX-XXXXXX}
SYSTEM\CurrentControlSet\Services\Tcpip\Linkage
SYSTEM\CurrentControlSet\Services\Tcpip\Linkage
SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\
SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\
SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\
Ht.HHt
Ht.HHt
%SSSSj
%SSSSj
dhcpcsvc.DLL
dhcpcsvc.DLL
dhcpcsvc6.DLL
dhcpcsvc6.DLL
DNSAPI.dll
DNSAPI.dll
WS2_32.dll
WS2_32.dll
API-MS-Win-Core-DelayLoad-L1-1-0.dll
API-MS-Win-Core-DelayLoad-L1-1-0.dll
API-MS-Win-Security-Base-L1-1-0.dll
API-MS-Win-Security-Base-L1-1-0.dll
API-MS-Win-Core-SysInfo-L1-1-0.dll
API-MS-Win-Core-SysInfo-L1-1-0.dll
API-MS-Win-Core-Synch-L1-1-0.dll
API-MS-Win-Core-Synch-L1-1-0.dll
API-MS-Win-Core-String-L1-1-0.dll
API-MS-Win-Core-String-L1-1-0.dll
API-MS-Win-Core-Profile-L1-1-0.dll
API-MS-Win-Core-Profile-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
API-MS-Win-Core-Misc-L1-1-0.dll
API-MS-Win-Core-Misc-L1-1-0.dll
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
API-MS-Win-Core-LibraryLoader-L1-1-0.dll
API-MS-Win-Core-LibraryLoader-L1-1-0.dll
API-MS-Win-Core-Interlocked-L1-1-0.dll
API-MS-Win-Core-Interlocked-L1-1-0.dll
API-MS-Win-Core-Heap-L1-1-0.dll
API-MS-Win-Core-Heap-L1-1-0.dll
API-MS-Win-Core-Handle-L1-1-0.dll
API-MS-Win-Core-Handle-L1-1-0.dll
API-MS-Win-Core-ErrorHandling-L1-1-0.dll
API-MS-Win-Core-ErrorHandling-L1-1-0.dll
RPCRT4.dll
RPCRT4.dll
WINNSI.DLL
WINNSI.DLL
NSI.dll
NSI.dll
ntdll.dll
ntdll.dll
msvcrt.dll
msvcrt.dll
_amsg_exit
_amsg_exit
GetProcessHeap
GetProcessHeap
RegOpenKeyExA
RegOpenKeyExA
RegCloseKey
RegCloseKey
iphlpapi.pdb
iphlpapi.pdb
2#3)3/343
2#3)3/343
7 7$7(7,707
7 7$7(7,707
:&;5;&
:&;5;&
4&4-44484C4N4S4c4h4x4}4
4&4-44484C4N4S4c4h4x4}4
0 0(0,00080
0 0(0,00080
\DEVICE\TCPIP_
\DEVICE\TCPIP_
%s_%u
%s_%u
\DEVICE\NETBT_TCPIP_
\DEVICE\NETBT_TCPIP_
iftype%u
iftype%u
\advapi32.dll
\advapi32.dll
6.1.7601.17514 (win7sp1_rtm.101119-1850)
6.1.7601.17514 (win7sp1_rtm.101119-1850)
iphlpapi.dll
iphlpapi.dll
Windows
Windows
Operating System
Operating System
6.1.7601.17514
6.1.7601.17514
%original file name%.exe_1588_rwx_01AA0000_000D5000:
CM_Open_DevNode_Key
CM_Open_DevNode_Key
CryptCATCatalogInfoFromContext
CryptCATCatalogInfoFromContext
WSDCreateUdpTransport
WSDCreateUdpTransport
WSDCreateUdpMessageParameters
WSDCreateUdpMessageParameters
WSDCreateUdpAddress
WSDCreateUdpAddress
WSDCreateHttpTransport
WSDCreateHttpTransport
WSDCreateHttpMessageParameters
WSDCreateHttpMessageParameters
WSDCreateHttpAddress
WSDCreateHttpAddress
WSASendMsg
WSASendMsg
WlanGetProfileKeyInfo
WlanGetProfileKeyInfo
WlanHostedNetworkSetSecondaryKey
WlanHostedNetworkSetSecondaryKey
WlanHostedNetworkQuerySecondaryKey
WlanHostedNetworkQuerySecondaryKey
_WinStationNotifyDisconnectPipe
_WinStationNotifyDisconnectPipe
WinStationUserLoginAccessCheck
WinStationUserLoginAccessCheck
WinStationSetAutologonPassword
WinStationSetAutologonPassword
WinStationReportUIResult
WinStationReportUIResult
WinStationIsHelpAssistantSession
WinStationIsHelpAssistantSession
WinStationGetUserCertificates
WinStationGetUserCertificates
WinStationFreeUserCertificates
WinStationFreeUserCertificates
WinStationEnumerate_IndexedW
WinStationEnumerate_IndexedW
WinStationEnumerate_IndexedA
WinStationEnumerate_IndexedA
midiOutShortMsg
midiOutShortMsg
v_GetFileExtensionFromUrl
v_GetFileExtensionFromUrl
UrlZonesDetach
UrlZonesDetach
UpdateUrlCacheContentPath
UpdateUrlCacheContentPath
UnlockUrlCacheEntryStream
UnlockUrlCacheEntryStream
UnlockUrlCacheEntryFileW
UnlockUrlCacheEntryFileW
UnlockUrlCacheEntryFileA
UnlockUrlCacheEntryFileA
ShowX509EncodedCertificate
ShowX509EncodedCertificate
ShowClientAuthCerts
ShowClientAuthCerts
ShowCertificate
ShowCertificate
SetUrlCacheHeaderData
SetUrlCacheHeaderData
SetUrlCacheGroupAttributeW
SetUrlCacheGroupAttributeW
SetUrlCacheGroupAttributeA
SetUrlCacheGroupAttributeA
SetUrlCacheEntryInfoW
SetUrlCacheEntryInfoW
SetUrlCacheEntryInfoA
SetUrlCacheEntryInfoA
SetUrlCacheEntryGroupW
SetUrlCacheEntryGroupW
SetUrlCacheEntryGroupA
SetUrlCacheEntryGroupA
SetUrlCacheConfigInfoW
SetUrlCacheConfigInfoW
SetUrlCacheConfigInfoA
SetUrlCacheConfigInfoA
RunOnceUrlCache
RunOnceUrlCache
RetrieveUrlCacheEntryStreamW
RetrieveUrlCacheEntryStreamW
RetrieveUrlCacheEntryStreamA
RetrieveUrlCacheEntryStreamA
RetrieveUrlCacheEntryFileW
RetrieveUrlCacheEntryFileW
RetrieveUrlCacheEntryFileA
RetrieveUrlCacheEntryFileA
RegisterUrlCacheNotification
RegisterUrlCacheNotification
ReadUrlCacheEntryStream
ReadUrlCacheEntryStream
ParseX509EncodedCertificateForListBoxEntry
ParseX509EncodedCertificateForListBoxEntry
LoadUrlCacheContent
LoadUrlCacheContent
IsUrlCacheEntryExpiredW
IsUrlCacheEntryExpiredW
IsUrlCacheEntryExpiredA
IsUrlCacheEntryExpiredA
IsHostInProxyBypassList
IsHostInProxyBypassList
InternetShowSecurityInfoByURLW
InternetShowSecurityInfoByURLW
InternetShowSecurityInfoByURLA
InternetShowSecurityInfoByURLA
InternetOpenUrlW
InternetOpenUrlW
InternetOpenUrlA
InternetOpenUrlA
InternetGetSecurityInfoByURLW
InternetGetSecurityInfoByURLW
InternetGetSecurityInfoByURLA
InternetGetSecurityInfoByURLA
InternetGetCertByURLA
InternetGetCertByURLA
InternetGetCertByURL
InternetGetCertByURL
InternetCreateUrlW
InternetCreateUrlW
InternetCreateUrlA
InternetCreateUrlA
InternetCrackUrlW
InternetCrackUrlW
InternetCrackUrlA
InternetCrackUrlA
InternetCombineUrlW
InternetCombineUrlW
InternetCombineUrlA
InternetCombineUrlA
InternetCanonicalizeUrlW
InternetCanonicalizeUrlW
InternetCanonicalizeUrlA
InternetCanonicalizeUrlA
IncrementUrlCacheHeaderData
IncrementUrlCacheHeaderData
HttpSendRequestW
HttpSendRequestW
HttpSendRequestExW
HttpSendRequestExW
HttpSendRequestExA
HttpSendRequestExA
HttpSendRequestA
HttpSendRequestA
HttpQueryInfoW
HttpQueryInfoW
HttpQueryInfoA
HttpQueryInfoA
HttpOpenRequestW
HttpOpenRequestW
HttpOpenRequestA
HttpOpenRequestA
HttpEndRequestW
HttpEndRequestW
HttpEndRequestA
HttpEndRequestA
HttpAddRequestHeadersW
HttpAddRequestHeadersW
HttpAddRequestHeadersA
HttpAddRequestHeadersA
GetUrlCacheHeaderData
GetUrlCacheHeaderData
GetUrlCacheGroupAttributeW
GetUrlCacheGroupAttributeW
GetUrlCacheGroupAttributeA
GetUrlCacheGroupAttributeA
GetUrlCacheEntryInfoW
GetUrlCacheEntryInfoW
GetUrlCacheEntryInfoExW
GetUrlCacheEntryInfoExW
GetUrlCacheEntryInfoExA
GetUrlCacheEntryInfoExA
GetUrlCacheEntryInfoA
GetUrlCacheEntryInfoA
GetUrlCacheConfigInfoW
GetUrlCacheConfigInfoW
GetUrlCacheConfigInfoA
GetUrlCacheConfigInfoA
FtpSetCurrentDirectoryW
FtpSetCurrentDirectoryW
FtpSetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRenameFileW
FtpRenameFileW
FtpRenameFileA
FtpRenameFileA
FtpRemoveDirectoryW
FtpRemoveDirectoryW
FtpRemoveDirectoryA
FtpRemoveDirectoryA
FtpPutFileW
FtpPutFileW
FtpPutFileEx
FtpPutFileEx
FtpPutFileA
FtpPutFileA
FtpOpenFileW
FtpOpenFileW
FtpOpenFileA
FtpOpenFileA
FtpGetFileW
FtpGetFileW
FtpGetFileSize
FtpGetFileSize
FtpGetFileEx
FtpGetFileEx
FtpGetFileA
FtpGetFileA
FtpGetCurrentDirectoryW
FtpGetCurrentDirectoryW
FtpGetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpFindFirstFileW
FtpFindFirstFileW
FtpFindFirstFileA
FtpFindFirstFileA
FtpDeleteFileW
FtpDeleteFileW
FtpDeleteFileA
FtpDeleteFileA
FtpCreateDirectoryW
FtpCreateDirectoryW
FtpCreateDirectoryA
FtpCreateDirectoryA
FtpCommandW
FtpCommandW
FtpCommandA
FtpCommandA
FreeUrlCacheSpaceW
FreeUrlCacheSpaceW
FreeUrlCacheSpaceA
FreeUrlCacheSpaceA
FindNextUrlCacheGroup
FindNextUrlCacheGroup
FindNextUrlCacheEntryW
FindNextUrlCacheEntryW
FindNextUrlCacheEntryExW
FindNextUrlCacheEntryExW
FindNextUrlCacheEntryExA
FindNextUrlCacheEntryExA
FindNextUrlCacheEntryA
FindNextUrlCacheEntryA
FindNextUrlCacheContainerW
FindNextUrlCacheContainerW
FindNextUrlCacheContainerA
FindNextUrlCacheContainerA
FindFirstUrlCacheGroup
FindFirstUrlCacheGroup
FindFirstUrlCacheEntryW
FindFirstUrlCacheEntryW
FindFirstUrlCacheEntryExW
FindFirstUrlCacheEntryExW
FindFirstUrlCacheEntryExA
FindFirstUrlCacheEntryExA
FindFirstUrlCacheEntryA
FindFirstUrlCacheEntryA
FindFirstUrlCacheContainerW
FindFirstUrlCacheContainerW
FindFirstUrlCacheContainerA
FindFirstUrlCacheContainerA
FindCloseUrlCache
FindCloseUrlCache
DetectAutoProxyUrl
DetectAutoProxyUrl
DeleteUrlCacheGroup
DeleteUrlCacheGroup
DeleteUrlCacheEntryW
DeleteUrlCacheEntryW
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
DeleteUrlCacheContainerW
DeleteUrlCacheContainerW
DeleteUrlCacheContainerA
DeleteUrlCacheContainerA
CreateUrlCacheGroup
CreateUrlCacheGroup
CreateUrlCacheEntryW
CreateUrlCacheEntryW
CreateUrlCacheEntryA
CreateUrlCacheEntryA
CreateUrlCacheContainerW
CreateUrlCacheContainerW
CreateUrlCacheContainerA
CreateUrlCacheContainerA
CommitUrlCacheEntryW
CommitUrlCacheEntryW
CommitUrlCacheEntryA
CommitUrlCacheEntryA
vWinHttpWriteData
vWinHttpWriteData
WinHttpTimeToSystemTime
WinHttpTimeToSystemTime
WinHttpTimeFromSystemTime
WinHttpTimeFromSystemTime
WinHttpSetTimeouts
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpSetStatusCallback
WinHttpSetOption
WinHttpSetOption
WinHttpSetCredentials
WinHttpSetCredentials
WinHttpSendRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpReceiveResponse
WinHttpReadData
WinHttpReadData
WinHttpQueryOption
WinHttpQueryOption
WinHttpQueryHeaders
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpQueryDataAvailable
WinHttpQueryAuthSchemes
WinHttpQueryAuthSchemes
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpen
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetDefaultProxyConfiguration
WinHttpGetDefaultProxyConfiguration
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCrackUrl
WinHttpCrackUrl
WinHttpConnect
WinHttpConnect
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpAddRequestHeaders
WinHttpAddRequestHeaders
vWerpSubmitReportFromStore
vWerpSubmitReportFromStore
WerpSetReportFlags
WerpSetReportFlags
WerpSetIntegratorReportId
WerpSetIntegratorReportId
WerpGetReportFlags
WerpGetReportFlags
WerpGetIntegratorReportId
WerpGetIntegratorReportId
WerpCreateIntegratorReportId
WerpCreateIntegratorReportId
WerpAddRegisteredDataToReport
WerpAddRegisteredDataToReport
WerReportSubmit
WerReportSubmit
WerReportSetUIOption
WerReportSetUIOption
WerReportSetParameter
WerReportSetParameter
WerReportCreate
WerReportCreate
WerReportCloseHandle
WerReportCloseHandle
WerReportAddFile
WerReportAddFile
WerReportAddDump
WerReportAddDump
WsShutdownSessionChannel
WsShutdownSessionChannel
WsRegisterOperationForCancel
WsRegisterOperationForCancel
WsGetOperationContextProperty
WsGetOperationContextProperty
WsEncodeUrl
WsEncodeUrl
WsDecodeUrl
WsDecodeUrl
WsCombineUrl
WsCombineUrl
WsAsyncExecute
WsAsyncExecute
ToplScheduleImport
ToplScheduleImport
ToplScheduleExportReadonly
ToplScheduleExportReadonly
LogonUserExExW
LogonUserExExW
ChangeAccountPasswordW
ChangeAccountPasswordW
ChangeAccountPasswordA
ChangeAccountPasswordA
NetServerTransportEnum
NetServerTransportEnum
NetServerTransportDel
NetServerTransportDel
NetServerTransportAddEx
NetServerTransportAddEx
SqmIsWindowsOptedIn
SqmIsWindowsOptedIn
SLSetCurrentProductKey
SLSetCurrentProductKey
SLGetPKeyInformation
SLGetPKeyInformation
SLGetPKeyId
SLGetPKeyId
SLGetInstalledProductKeyIds
SLGetInstalledProductKeyIds
SpInfGetLineTextWithKey
SpInfGetLineTextWithKey
SLGetPackageProductKey
SLGetPackageProductKey
vGetScheduledDiagnosticsExecutionLevel
vGetScheduledDiagnosticsExecutionLevel
SceSetupUpdateSecurityKey
SceSetupUpdateSecurityKey
vSamiSyncDSRMPasswordFromAccount
vSamiSyncDSRMPasswordFromAccount
SamiOemChangePasswordUser2WithTransport
SamiOemChangePasswordUser2WithTransport
SamiChangePasswordUser3
SamiChangePasswordUser3
SamiChangePasswordUser
SamiChangePasswordUser
SamiChangeKeys
SamiChangeKeys
SamValidatePassword
SamValidatePassword
SamChangePasswordUser2
SamChangePasswordUser2
SamChangePasswordUser
SamChangePasswordUser
vNetValidatePasswordPolicyFree
vNetValidatePasswordPolicyFree
NetValidatePasswordPolicy
NetValidatePasswordPolicy
NetUserChangePassword
NetUserChangePassword
RmJoinSession
RmJoinSession
vWinHttpCallbackAvrf
vWinHttpCallbackAvrf
I_RpcBindingInqTransportType
I_RpcBindingInqTransportType
PowerOpenUserPowerKey
PowerOpenUserPowerKey
PowerOpenSystemPowerKey
PowerOpenSystemPowerKey
PowerInternalImportPowerScheme
PowerInternalImportPowerScheme
vCertAutoRemove
vCertAutoRemove
CertAutoEnrollment
CertAutoEnrollment
PeerGraphImportDatabase
PeerGraphImportDatabase
PeerGraphExportDatabase
PeerGraphExportDatabase
vOneXUpdatePortProfile
vOneXUpdatePortProfile
OneXDestroySupplicantPort
OneXDestroySupplicantPort
OneXCreateSupplicantPort
OneXCreateSupplicantPort
KccExecuteTask
KccExecuteTask
vUpdateBackupExclusionKey
vUpdateBackupExclusionKey
NetpIsShareNameValid
NetpIsShareNameValid
NetRemoteComputerSupports
NetRemoteComputerSupports
NetpGetJoinInformation
NetpGetJoinInformation
NetpDomainJoinLicensingCheck
NetpDomainJoinLicensingCheck
NetpDoDomainJoin
NetpDoDomainJoin
NetpCompleteOfflineDomainJoin
NetpCompleteOfflineDomainJoin
NetRequestOfflineDomainJoin
NetRequestOfflineDomainJoin
NdfExecuteDiagnosis
NdfExecuteDiagnosis
NdfCreateWebIncidentEx
NdfCreateWebIncidentEx
NdfCreateWebIncident
NdfCreateWebIncident
BCryptImportKeyPair
BCryptImportKeyPair
BCryptImportKey
BCryptImportKey
BCryptGenerateSymmetricKey
BCryptGenerateSymmetricKey
BCryptGenerateKeyPair
BCryptGenerateKeyPair
BCryptFinalizeKeyPair
BCryptFinalizeKeyPair
BCryptExportKey
BCryptExportKey
BCryptDuplicateKey
BCryptDuplicateKey
BCryptDestroyKey
BCryptDestroyKey
BCryptDeriveKeyPBKDF2
BCryptDeriveKeyPBKDF2
BCryptDeriveKeyCapi
BCryptDeriveKeyCapi
BCryptDeriveKey
BCryptDeriveKey
vWasDTCInstalledBySQL
vWasDTCInstalledBySQL
vSpcGetCertFromKey
vSpcGetCertFromKey
GetCryptProvFromCertEx
GetCryptProvFromCertEx
GetCryptProvFromCert
GetCryptProvFromCert
FreeCryptProvFromCertEx
FreeCryptProvFromCertEx
FreeCryptProvFromCert
FreeCryptProvFromCert
vShowModelessHTMLDialog
vShowModelessHTMLDialog
MprConfigTransportSetInfo
MprConfigTransportSetInfo
MprConfigTransportGetInfo
MprConfigTransportGetInfo
MprConfigTransportGetHandle
MprConfigTransportGetHandle
MprConfigTransportDelete
MprConfigTransportDelete
MprConfigTransportCreate
MprConfigTransportCreate
MprConfigInterfaceTransportRemove
MprConfigInterfaceTransportRemove
MprConfigInterfaceTransportGetInfo
MprConfigInterfaceTransportGetInfo
MprConfigInterfaceTransportGetHandle
MprConfigInterfaceTransportGetHandle
MprConfigInterfaceTransportEnum
MprConfigInterfaceTransportEnum
MprConfigInterfaceTransportAdd
MprConfigInterfaceTransportAdd
MprAdminTransportSetInfo
MprAdminTransportSetInfo
MprAdminTransportGetInfo
MprAdminTransportGetInfo
MprAdminTransportCreate
MprAdminTransportCreate
MprAdminPortGetInfo
MprAdminPortGetInfo
MprAdminPortEnum
MprAdminPortEnum
MprAdminInterfaceTransportRemove
MprAdminInterfaceTransportRemove
MprAdminInterfaceTransportAdd
MprAdminInterfaceTransportAdd
WNetPasswordChangeNotify
WNetPasswordChangeNotify
vMFCreateSourceReaderFromURL
vMFCreateSourceReaderFromURL
MFCreateSinkWriterFromURL
MFCreateSinkWriterFromURL
MFGetSupportedSchemes
MFGetSupportedSchemes
MFGetSupportedMimeTypes
MFGetSupportedMimeTypes
MFCreateASFMultiplexer
MFCreateASFMultiplexer
MFCreateASFIndexerByteStream
MFCreateASFIndexerByteStream
MFCreateASFIndexer
MFCreateASFIndexer
LsaINotifyPasswordChanged
LsaINotifyPasswordChanged
LsaICallPackagePassthrough
LsaICallPackagePassthrough
PRShowSaveFromMsginaW
PRShowSaveFromMsginaW
PRShowRestoreFromMsginaW
PRShowRestoreFromMsginaW
KRShowKeyMgr
KRShowKeyMgr
MimeOleParseMhtmlUrl
MimeOleParseMhtmlUrl
ImmGetVirtualKey
ImmGetVirtualKey
ImageRemoveCertificate
ImageRemoveCertificate
ImageGetCertificateHeader
ImageGetCertificateHeader
ImageGetCertificateData
ImageGetCertificateData
ImageEnumerateCertificates
ImageEnumerateCertificates
ImageAddCertificate
ImageAddCertificate
FindExecutableImage
FindExecutableImage
AddUrlToFavorites
AddUrlToFavorites
vTestURL
vTestURL
ShowInetcpl
ShowInetcpl
NewUrl
NewUrl
ImportZones
ImportZones
ImportSearchProviders
ImportSearchProviders
ImportRatings
ImportRatings
ImportRSSFeeds
ImportRSSFeeds
ImportQuickLinks
ImportQuickLinks
ImportPrograms
ImportPrograms
ImportHomePage
ImportHomePage
ImportFavoritesCmd
ImportFavoritesCmd
ImportFavorites
ImportFavorites
ImportConnectSet
ImportConnectSet
ImportADMFile
ImportADMFile
GetURLLinkType
GetURLLinkType
GetFavoriteUrl
GetFavoriteUrl
ExportRSSFeeds
ExportRSSFeeds
ExportQuickLinks
ExportQuickLinks
ExportFavorites
ExportFavorites
CheckForDupKeys
CheckForDupKeys
vIcfGetOperationalMode
vIcfGetOperationalMode
GdiplusShutdown
GdiplusShutdown
GdipSetImageAttributesColorKeys
GdipSetImageAttributesColorKeys
SetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
FaxSetPortW
FaxSetPortW
FaxSetPortExW
FaxSetPortExW
FaxSetPortExA
FaxSetPortExA
FaxSetPortA
FaxSetPortA
FaxOpenPort
FaxOpenPort
FaxGetReportedServerAPIVersion
FaxGetReportedServerAPIVersion
FaxGetPortW
FaxGetPortW
FaxGetPortExW
FaxGetPortExW
FaxGetPortExA
FaxGetPortExA
FaxGetPortA
FaxGetPortA
FaxEnumPortsW
FaxEnumPortsW
FaxEnumPortsExW
FaxEnumPortsExW
FaxEnumPortsExA
FaxEnumPortsExA
FaxEnumPortsA
FaxEnumPortsA
FwpmFilterGetByKey0
FwpmFilterGetByKey0
FwpmFilterDeleteByKey0
FwpmFilterDeleteByKey0
FmsGetGdiLogicalFont
FmsGetGdiLogicalFont
FmsGetGDILogFont
FmsGetGDILogFont
FmsGetFontProperty
FmsGetFontProperty
FmsGetFontAutoActivationMode
FmsGetFontAutoActivationMode
FmsGetFilteredPropertyList
FmsGetFilteredPropertyList
FmsGetFilteredFontList
FmsGetFilteredFontList
FmsGetDirectWriteLogFont
FmsGetDirectWriteLogFont
FmsGetCurrentFilter
FmsGetCurrentFilter
FmsGetBestMatchInFamily
FmsGetBestMatchInFamily
FWResetIndicatedPortInUse
FWResetIndicatedPortInUse
FWIndicatePortInUse
FWIndicatePortInUse
JetMakeKey
JetMakeKey
DwmGetTransportAttributes
DwmGetTransportAttributes
vpServerImportDriverPackage
vpServerImportDriverPackage
DriverStoreImportW
DriverStoreImportW
vDrtDeleteIpv6UdpTransport
vDrtDeleteIpv6UdpTransport
DrtCreateIpv6UdpTransport
DrtCreateIpv6UdpTransport
DrtDeleteDerivedKeySecurityProvider
DrtDeleteDerivedKeySecurityProvider
DrtCreateDerivedKeySecurityProvider
DrtCreateDerivedKeySecurityProvider
DrtCreateDerivedKey
DrtCreateDerivedKey
vDrtUpdateKey
vDrtUpdateKey
DrtUnregisterKey
DrtUnregisterKey
DrtRegisterKey
DrtRegisterKey
NetDfsGetSupportedNamespaceVersion
NetDfsGetSupportedNamespaceVersion
DevObjOpenDeviceInterfaceRegKey
DevObjOpenDeviceInterfaceRegKey
DevObjOpenDevRegKey
DevObjOpenDevRegKey
DevObjOpenClassRegKey
DevObjOpenClassRegKey
DevObjGetDevicePropertyKeys
DevObjGetDevicePropertyKeys
DevObjGetDeviceInterfacePropertyKeys
DevObjGetDeviceInterfacePropertyKeys
DevObjGetClassPropertyKeys
DevObjGetClassPropertyKeys
DevObjDeleteDeviceInterfaceRegKey
DevObjDeleteDeviceInterfaceRegKey
DevObjDeleteDevRegKey
DevObjDeleteDevRegKey
DevObjCreateDeviceInterfaceRegKey
DevObjCreateDeviceInterfaceRegKey
DevObjCreateDevRegKey
DevObjCreateDevRegKey
vDavGetUNCFromHTTPPath
vDavGetUNCFromHTTPPath
DavGetHTTPFromUNCPath
DavGetHTTPFromUNCPath
DavCheckAndConvertHttpUrlToUncName
DavCheckAndConvertHttpUrlToUncName
CryptXmlImportPublicKey
CryptXmlImportPublicKey
CryptUIWizCertRequest
CryptUIWizCertRequest
CryptUIDlgViewCertificateW
CryptUIDlgViewCertificateW
CryptUIDlgSelectCertificateW
CryptUIDlgSelectCertificateW
CryptUIDlgSelectCertificateFromStore
CryptUIDlgSelectCertificateFromStore
CryptUIDlgCertMgr
CryptUIDlgCertMgr
CertSelectionGetSerializedBlob
CertSelectionGetSerializedBlob
CryptSetKeyParam
CryptSetKeyParam
CryptImportKey
CryptImportKey
CryptGetUserKey
CryptGetUserKey
CryptGetKeyParam
CryptGetKeyParam
CryptGenKey
CryptGenKey
CryptExportKey
CryptExportKey
CryptDestroyKey
CryptDestroyKey
CryptDeriveKey
CryptDeriveKey
vCryptRetrieveObjectByUrlW
vCryptRetrieveObjectByUrlW
CryptRetrieveObjectByUrlA
CryptRetrieveObjectByUrlA
vGetFriendlyNameOfCertW
vGetFriendlyNameOfCertW
GetFriendlyNameOfCertA
GetFriendlyNameOfCertA
CertViewPropertiesW
CertViewPropertiesW
CertViewPropertiesA
CertViewPropertiesA
CertSelectCertificateW
CertSelectCertificateW
CertSelectCertificateA
CertSelectCertificateA
CredUIPromptForWindowsCredentialsWorker
CredUIPromptForWindowsCredentialsWorker
CredUIPromptForWindowsCredentialsW
CredUIPromptForWindowsCredentialsW
CredUICmdLinePromptForCredentialsW
CredUICmdLinePromptForCredentialsW
vTaskDialogIndirect
vTaskDialogIndirect
PstMapCertificate
PstMapCertificate
PstGetUserNameForCertificate
PstGetUserNameForCertificate
PstGetCertificates
PstGetCertificates
PstAcquirePrivateKey
PstAcquirePrivateKey
vCAGetCertTypePropertyEx
vCAGetCertTypePropertyEx
CAGetCertTypeProperty
CAGetCertTypeProperty
CAGetCertTypeKeySpec
CAGetCertTypeKeySpec
CAGetCertTypeFlagsEx
CAGetCertTypeFlagsEx
CAGetCertTypeFlags
CAGetCertTypeFlags
CAGetCertTypeExtensionsEx
CAGetCertTypeExtensionsEx
CAGetCertTypeExtensions
CAGetCertTypeExtensions
CAGetCertTypeExpiration
CAGetCertTypeExpiration
CAGetCACertificate
CAGetCACertificate
CAFreeCertTypeProperty
CAFreeCertTypeProperty
CAFreeCertTypeExtensions
CAFreeCertTypeExtensions
CAFindCertTypeByName
CAFindCertTypeByName
CAEnumNextCertType
CAEnumNextCertType
CAEnumCertTypesForCAEx
CAEnumCertTypesForCAEx
CAEnumCertTypesForCA
CAEnumCertTypesForCA
CAEnumCertTypes
CAEnumCertTypes
CACountCertTypes
CACountCertTypes
CACloseCertType
CACloseCertType
CACertTypeAccessCheckEx
CACertTypeAccessCheckEx
CACertTypeAccessCheck
CACertTypeAccessCheck
GetAppImport
GetAppImport
PeerIdentityImport
PeerIdentityImport
PeerIdentityGetCryptKey
PeerIdentityGetCryptKey
PeerIdentityExport
PeerIdentityExport
PeerGroupResumePasswordAuthentication
PeerGroupResumePasswordAuthentication
PeerGroupPasswordJoin
PeerGroupPasswordJoin
PeerGroupJoin
PeerGroupJoin
PeerGroupImportDatabase
PeerGroupImportDatabase
PeerGroupImportConfig
PeerGroupImportConfig
PeerGroupExportDatabase
PeerGroupExportDatabase
PeerGroupExportConfig
PeerGroupExportConfig
PeerGroupCreatePasswordInvitation
PeerGroupCreatePasswordInvitation
PeerCollabExportContact
PeerCollabExportContact
GetUdpStatisticsEx
GetUdpStatisticsEx
GetUdpStatistics
GetUdpStatistics
GetTcpStatisticsEx
GetTcpStatisticsEx
GetTcpStatistics
GetTcpStatistics
DsaopExecuteScript
DsaopExecuteScript
DsMakePasswordCredentialsW
DsMakePasswordCredentialsW
DsMakePasswordCredentialsA
DsMakePasswordCredentialsA
DsFreePasswordCredentials
DsFreePasswordCredentials
EfsUtilGetCurrentKey
EfsUtilGetCurrentKey
PSStringFromPropertyKey
PSStringFromPropertyKey
PSPropertyKeyFromString
PSPropertyKeyFromString
PSPropertyBag_WritePropertyKey
PSPropertyBag_WritePropertyKey
PSPropertyBag_ReadPropertyKey
PSPropertyBag_ReadPropertyKey
PSGetPropertyKeyFromName
PSGetPropertyKeyFromName
PSGetNameFromPropertyKey
PSGetNameFromPropertyKey
__AddMachineCertToLicenseStore
__AddMachineCertToLicenseStore
RasIsSharedConnection
RasIsSharedConnection
MprmsgGetErrorString
MprmsgGetErrorString
SslOpenPrivateKey
SslOpenPrivateKey
SslImportMasterKey
SslImportMasterKey
SslImportKey
SslImportKey
SslGetKeyProperty
SslGetKeyProperty
SslGenerateSessionKeys
SslGenerateSessionKeys
SslGenerateMasterKey
SslGenerateMasterKey
SslExportKey
SslExportKey
SslCreateEphemeralKey
SslCreateEphemeralKey
SslComputeEapKeyBlock
SslComputeEapKeyBlock
NCryptOpenKey
NCryptOpenKey
NCryptNotifyChangeKey
NCryptNotifyChangeKey
NCryptIsKeyHandle
NCryptIsKeyHandle
NCryptIsAlgSupported
NCryptIsAlgSupported
NCryptImportKey
NCryptImportKey
NCryptFinalizeKey
NCryptFinalizeKey
NCryptExportKey
NCryptExportKey
NCryptEnumKeys
NCryptEnumKeys
NCryptDeriveKey
NCryptDeriveKey
NCryptDeleteKey
NCryptDeleteKey
NCryptCreatePersistedKey
NCryptCreatePersistedKey
vHttpWaitForDisconnectEx
vHttpWaitForDisconnectEx
HttpWaitForDisconnect
HttpWaitForDisconnect
HttpWaitForDemandStart
HttpWaitForDemandStart
HttpTerminate
HttpTerminate
HttpShutdownRequestQueue
HttpShutdownRequestQueue
HttpSetUrlGroupProperty
HttpSetUrlGroupProperty
HttpSetServiceConfiguration
HttpSetServiceConfiguration
HttpSetServerSessionProperty
HttpSetServerSessionProperty
HttpSetRequestQueueProperty
HttpSetRequestQueueProperty
HttpSendResponseEntityBody
HttpSendResponseEntityBody
HttpSendHttpResponse
HttpSendHttpResponse
HttpRemoveUrlFromUrlGroup
HttpRemoveUrlFromUrlGroup
HttpRemoveUrl
HttpRemoveUrl
HttpReceiveRequestEntityBody
HttpReceiveRequestEntityBody
HttpReceiveHttpRequest
HttpReceiveHttpRequest
HttpReceiveClientCertificate
HttpReceiveClientCertificate
HttpReadFragmentFromCache
HttpReadFragmentFromCache
HttpQueryUrlGroupProperty
HttpQueryUrlGroupProperty
HttpQueryServiceConfiguration
HttpQueryServiceConfiguration
HttpQueryServerSessionProperty
HttpQueryServerSessionProperty
HttpQueryRequestQueueProperty
HttpQueryRequestQueueProperty
HttpInitialize
HttpInitialize
HttpGetCounters
HttpGetCounters
HttpFlushResponseCache
HttpFlushResponseCache
HttpDeleteServiceConfiguration
HttpDeleteServiceConfiguration
HttpCreateUrlGroup
HttpCreateUrlGroup
HttpCreateServerSession
HttpCreateServerSession
HttpCreateRequestQueue
HttpCreateRequestQueue
HttpCreateHttpHandle
HttpCreateHttpHandle
HttpCloseUrlGroup
HttpCloseUrlGroup
HttpCloseServerSession
HttpCloseServerSession
HttpCloseRequestQueue
HttpCloseRequestQueue
HttpCancelHttpRequest
HttpCancelHttpRequest
HttpAddUrlToUrlGroup
HttpAddUrlToUrlGroup
HttpAddUrl
HttpAddUrl
HttpAddFragmentToCache
HttpAddFragmentToCache
vUrlMkSetSessionOption
vUrlMkSetSessionOption
UrlMkGetSessionOption
UrlMkGetSessionOption
URLOpenBlockingStreamW
URLOpenBlockingStreamW
URLOpenBlockingStreamA
URLOpenBlockingStreamA
URLDownloadToFileW
URLDownloadToFileW
URLDownloadToFileA
URLDownloadToFileA
URLDownloadToCacheFileW
URLDownloadToCacheFileW
URLDownloadToCacheFileA
URLDownloadToCacheFileA
ResetUrlmonLanguageData
ResetUrlmonLanguageData
IsValidURL
IsValidURL
GetUrlmonThreadNotificationHwnd
GetUrlmonThreadNotificationHwnd
GetPortFromUrlScheme
GetPortFromUrlScheme
GetMarkOfTheWeb
GetMarkOfTheWeb
GetAddSitesFileUrl
GetAddSitesFileUrl
CreateURLMonikerEx2
CreateURLMonikerEx2
CreateURLMonikerEx
CreateURLMonikerEx
CreateURLMoniker
CreateURLMoniker
CoInternetParseUrl
CoInternetParseUrl
CoInternetIsFeatureEnabledForUrl
CoInternetIsFeatureEnabledForUrl
CoInternetGetSecurityUrlEx
CoInternetGetSecurityUrlEx
CoInternetGetSecurityUrl
CoInternetGetSecurityUrl
CoInternetCompareUrl
CoInternetCompareUrl
CoInternetCombineUrlEx
CoInternetCombineUrlEx
CoInternetCombineUrl
CoInternetCombineUrl
CoGetClassObjectFromURL
CoGetClassObjectFromURL
acmDriverRemove
acmDriverRemove
acmDriverOpen
acmDriverOpen
acmDriverClose
acmDriverClose
acmDriverAddW
acmDriverAddW
vxpsrasterservice.dll
vxpsrasterservice.dll
xolehlp.dll
xolehlp.dll
xmllite.dll
xmllite.dll
wtsapi32.dll
wtsapi32.dll
wsdapi.dll
wsdapi.dll
ws2_32.dll
ws2_32.dll
wmvcore.dll
wmvcore.dll
wmpmde.dll
wmpmde.dll
wmi.dll
wmi.dll
wmdrmsdk.dll
wmdrmsdk.dll
wldap32.dll
wldap32.dll
wlanutil.dll
wlanutil.dll
wlanhlp.dll
wlanhlp.dll
wlanapi.dll
wlanapi.dll
wkscli.dll
wkscli.dll
wintrust.dll
wintrust.dll
winsta.dll
winsta.dll
winspool.drv
winspool.drv
winscard.dll
winscard.dll
winnsi.dll
winnsi.dll
winmm.dll
winmm.dll
wininet.dll
wininet.dll
winhttp.dll
winhttp.dll
windowscodecs.dll
windowscodecs.dll
winbrand.dll
winbrand.dll
werui.dll
werui.dll
wer.dll
wer.dll
webservices.dll
webservices.dll
webio.dll
webio.dll
wdi.dll
wdi.dll
w32topl.dll
w32topl.dll
vssapi.dll
vssapi.dll
vpnikeapi.dll
vpnikeapi.dll
virtdisk.dll
virtdisk.dll
version.dll
version.dll
vaultcli.dll
vaultcli.dll
uxtheme.dll
uxtheme.dll
uxinit.dll
uxinit.dll
utildll.dll
utildll.dll
usp10.dll
usp10.dll
userenv.dll
userenv.dll
user32.dll
user32.dll
urlmon.dll
urlmon.dll
uiautomationcore.dll
uiautomationcore.dll
ubpm.dll
ubpm.dll
tdh.dll
tdh.dll
tapi32.dll
tapi32.dll
syssetup.dll
syssetup.dll
synceng.dll
synceng.dll
sti.dll
sti.dll
sspicli.dll
sspicli.dll
srvcli.dll
srvcli.dll
srclient.dll
srclient.dll
sqmapi.dll
sqmapi.dll
sppc.dll
sppc.dll
spinf.dll
spinf.dll
spfileq.dll
spfileq.dll
sndvolsso.dll
sndvolsso.dll
slcext.dll
slcext.dll
slc.dll
slc.dll
shlwapi.dll
shlwapi.dll
shfolder.dll
shfolder.dll
shell32.dll
shell32.dll
shdocvw.dll
shdocvw.dll
sfmapi.dll
sfmapi.dll
sfc.dll
sfc.dll
setupapi.dll
setupapi.dll
sensapi.dll
sensapi.dll
secur32.dll
secur32.dll
sdiagschd.dll
sdiagschd.dll
scecli.dll
scecli.dll
scarddlg.dll
scarddlg.dll
samsrv.dll
samsrv.dll
samlib.dll
samlib.dll
samcli.dll
samcli.dll
rtutils.dll
rtutils.dll
rstrtmgr.dll
rstrtmgr.dll
rpcshim.dll
rpcshim.dll
rpcrt4.dll
rpcrt4.dll
rpchttp.dll
rpchttp.dll
regapi.dll
regapi.dll
rasman.dll
rasman.dll
rasdlg.dll
rasdlg.dll
rasapi32.dll
rasapi32.dll
qwave.dll
qwave.dll
query.dll
query.dll
pstorec.dll
pstorec.dll
psapi.dll
psapi.dll
propsys.dll
propsys.dll
profapi.dll
profapi.dll
printui.dll
printui.dll
powrprof.dll
powrprof.dll
pidgenx.dll
pidgenx.dll
pidgen.dll
pidgen.dll
pcwum.dll
pcwum.dll
pautoenr.dll
pautoenr.dll
p2pgraph.dll
p2pgraph.dll
p2p.dll
p2p.dll
opengl32.dll
opengl32.dll
onexui.dll
onexui.dll
onex.dll
onex.dll
oledlg.dll
oledlg.dll
oleaut32.dll
oleaut32.dll
oleacc.dll
oleacc.dll
ole32.dll
ole32.dll
odbc32.dll
odbc32.dll
occache.dll
occache.dll
ntshrui.dll
ntshrui.dll
ntmarta.dll
ntmarta.dll
ntlanman.dll
ntlanman.dll
ntdskcc.dll
ntdskcc.dll
ntdsetup.dll
ntdsetup.dll
ntdsbsrv.dll
ntdsbsrv.dll
ntdsapi.dll
ntdsapi.dll
ntdsa.dll
ntdsa.dll
nsi.dll
nsi.dll
normaliz.dll
normaliz.dll
netutils.dll
netutils.dll
netshell.dll
netshell.dll
netplwiz.dll
netplwiz.dll
netman.dll
netman.dll
netlogon.dll
netlogon.dll
netjoin.dll
netjoin.dll
netcfgx.dll
netcfgx.dll
netbios.dll
netbios.dll
netapi32.dll
netapi32.dll
ndfapi.dll
ndfapi.dll
ncrypt.dll
ncrypt.dll
nci.dll
nci.dll
mtxclu.dll
mtxclu.dll
mswsock.dll
mswsock.dll
mssign32.dll
mssign32.dll
msrating.dll
msrating.dll
msoobeui.dll
msoobeui.dll
msjava.dll
msjava.dll
msimg32.dll
msimg32.dll
msiltcfg.dll
msiltcfg.dll
msi.dll
msi.dll
mshtml.dll
mshtml.dll
msgina.dll
msgina.dll
msfeeds.dll
msfeeds.dll
msdrm.dll
msdrm.dll
msctf.dll
msctf.dll
mscat32.dll
mscat32.dll
msacm32.dll
msacm32.dll
mqrt.dll
mqrt.dll
mprmsg.dll
mprmsg.dll
mprapi.dll
mprapi.dll
mpr.dll
mpr.dll
mmdevapi.dll
mmdevapi.dll
mlang.dll
mlang.dll
mfreadwrite.dll
mfreadwrite.dll
mfplat.dll
mfplat.dll
mf.dll
mf.dll
mdedrmstublib.dll
mdedrmstublib.dll
lsasrv.dll
lsasrv.dll
logoncli.dll
logoncli.dll
loadperf.dll
loadperf.dll
linkinfo.dll
linkinfo.dll
ktmw32.dll
ktmw32.dll
keymgr.dll
keymgr.dll
kdcsvc.dll
kdcsvc.dll
iphlpapi.dll
iphlpapi.dll
inseng.dll
inseng.dll
inetcomm.dll
inetcomm.dll
imm32.dll
imm32.dll
imgutil.dll
imgutil.dll
imagehlp.dll
imagehlp.dll
ieui.dll
ieui.dll
ieshims.dll
ieshims.dll
ieframe.dll
ieframe.dll
ieakeng.dll
ieakeng.dll
iashlpr.dll
iashlpr.dll
httpapi.dll
httpapi.dll
hnetcfg.dll
hnetcfg.dll
hlink.dll
hlink.dll
hid.dll
hid.dll
gpsvc.dll
gpsvc.dll
gpapi.dll
gpapi.dll
gdiplus.dll
gdiplus.dll
gdi32.dll
gdi32.dll
fxsapi.dll
fxsapi.dll
fwpuclnt.dll
fwpuclnt.dll
fveapi.dll
fveapi.dll
fms.dll
fms.dll
firewallapi.dll
firewallapi.dll
explorerframe.dll
explorerframe.dll
evr.dll
evr.dll
esent.dll
esent.dll
elscore.dll
elscore.dll
ehtrace.dll
ehtrace.dll
efsutil.dll
efsutil.dll
efsadu.dll
efsadu.dll
eappcfg.dll
eappcfg.dll
dxgi.dll
dxgi.dll
dwmapi.dll
dwmapi.dll
duser.dll
duser.dll
dui70.dll
dui70.dll
dsrole.dll
dsrole.dll
dsound.dll
dsound.dll
drvstore.dll
drvstore.dll
drttransport.dll
drttransport.dll
drtprov.dll
drtprov.dll
drt.dll
drt.dll
dnsapi.dll
dnsapi.dll
dhcpcsvc6.dll
dhcpcsvc6.dll
dhcpcsvc.dll
dhcpcsvc.dll
dfscli.dll
dfscli.dll
devrtl.dll
devrtl.dll
devobj.dll
devobj.dll
devmgr.dll
devmgr.dll
ddraw.dll
ddraw.dll
dbghelp.dll
dbghelp.dll
dbgeng.dll
dbgeng.dll
davhlpr.dll
davhlpr.dll
d3d9.dll
d3d9.dll
d3d8.dll
d3d8.dll
d2d1.dll
d2d1.dll
cscdll.dll
cscdll.dll
cscapi.dll
cscapi.dll
cryptxml.dll
cryptxml.dll
cryptui.dll
cryptui.dll
cryptsp.dll
cryptsp.dll
cryptnet.dll
cryptnet.dll
cryptdll.dll
cryptdll.dll
cryptdlg.dll
cryptdlg.dll
cryptbase.dll
cryptbase.dll
crypt32.dll
crypt32.dll
credui.dll
credui.dll
comsvcs.dll
comsvcs.dll
comdlg32.dll
comdlg32.dll
comctl32.dll
comctl32.dll
colbact.dll
colbact.dll
clusapi.dll
clusapi.dll
clbcatq.dll
clbcatq.dll
cfgmgr32.dll
cfgmgr32.dll
certpoleng.dll
certpoleng.dll
certenroll.dll
certenroll.dll
certcli.dll
certcli.dll
catsrvut.dll
catsrvut.dll
catsrv.dll
catsrv.dll
cabinet.dll
cabinet.dll
browcli.dll
browcli.dll
bcrypt.dll
bcrypt.dll
avrt.dll
avrt.dll
authz.dll
authz.dll
appmgmts.dll
appmgmts.dll
apphelp.dll
apphelp.dll
api-ms-win-service-winsvc-l1-1-0.dll
api-ms-win-service-winsvc-l1-1-0.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-service-management-l2-1-0.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-management-l1-1-0.dll
api-ms-win-service-core-l1-1-0.dll
api-ms-win-service-core-l1-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-security-sddl-l1-1-0.dll
api-ms-win-security-lsalookup-l1-1-0.dll
api-ms-win-security-lsalookup-l1-1-0.dll
advpack.dll
advpack.dll
advapi32.dll
advapi32.dll
activeds.dll
activeds.dll
actionqueue.dll
actionqueue.dll
aclui.dll
aclui.dll
SetProcessWindowStation
SetProcessWindowStation
OpenWindowStationW
OpenWindowStationW
OpenWindowStationA
OpenWindowStationA
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
GetProcessWindowStation
GetProcessWindowStation
GetKeyState
GetKeyState
EnumDesktopWindows
EnumDesktopWindows
CloseWindowStation
CloseWindowStation
CM_Open_Class_Key_ExW
CM_Open_Class_Key_ExW
CM_MapCrToWin32Err
CM_MapCrToWin32Err
CM_MapCrToSpErr
CM_MapCrToSpErr
vPFXImportCertStore
vPFXImportCertStore
PFXExportCertStoreEx
PFXExportCertStoreEx
PFXExportCertStore
PFXExportCertStore
CryptVerifyCertificateSignatureEx
CryptVerifyCertificateSignatureEx
CryptVerifyCertificateSignature
CryptVerifyCertificateSignature
CryptSignCertificate
CryptSignCertificate
CryptSignAndEncodeCertificate
CryptSignAndEncodeCertificate
CryptMsgUpdate
CryptMsgUpdate
CryptMsgOpenToEncode
CryptMsgOpenToEncode
CryptMsgOpenToDecode
CryptMsgOpenToDecode
CryptMsgGetParam
CryptMsgGetParam
CryptMsgGetAndVerifySigner
CryptMsgGetAndVerifySigner
CryptMsgControl
CryptMsgControl
CryptMsgClose
CryptMsgClose
CryptMsgCalculateEncodedLength
CryptMsgCalculateEncodedLength
CryptImportPublicKeyInfoEx2
CryptImportPublicKeyInfoEx2
CryptImportPublicKeyInfoEx
CryptImportPublicKeyInfoEx
CryptImportPublicKeyInfo
CryptImportPublicKeyInfo
CryptHashPublicKeyInfo
CryptHashPublicKeyInfo
CryptHashCertificate
CryptHashCertificate
CryptGetMessageCertificates
CryptGetMessageCertificates
CryptExportPublicKeyInfo
CryptExportPublicKeyInfo
CryptAcquireCertificatePrivateKey
CryptAcquireCertificatePrivateKey
CertVerifyValidityNesting
CertVerifyValidityNesting
CertVerifyTimeValidity
CertVerifyTimeValidity
CertVerifySubjectCertificateContext
CertVerifySubjectCertificateContext
CertStrToNameW
CertStrToNameW
CertStrToNameA
CertStrToNameA
CertSetEnhancedKeyUsage
CertSetEnhancedKeyUsage
CertSetCertificateContextProperty
CertSetCertificateContextProperty
CertSerializeCertificateStoreElement
CertSerializeCertificateStoreElement
CertSelectCertificateChains
CertSelectCertificateChains
CertSaveStore
CertSaveStore
CertRemoveEnhancedKeyUsageIdentifier
CertRemoveEnhancedKeyUsageIdentifier
CertRegisterPhysicalStore
CertRegisterPhysicalStore
CertRDNValueToStrW
CertRDNValueToStrW
CertRDNValueToStrA
CertRDNValueToStrA
CertOpenSystemStoreW
CertOpenSystemStoreW
CertOpenSystemStoreA
CertOpenSystemStoreA
CertOpenStore
CertOpenStore
CertOIDToAlgId
CertOIDToAlgId
CertNameToStrW
CertNameToStrW
CertNameToStrA
CertNameToStrA
CertIsRDNAttrsInCertificateName
CertIsRDNAttrsInCertificateName
CertGetSubjectCertificateFromStore
CertGetSubjectCertificateFromStore
CertGetPublicKeyLength
CertGetPublicKeyLength
CertGetNameStringW
CertGetNameStringW
CertGetIssuerCertificateFromStore
CertGetIssuerCertificateFromStore
CertGetIntendedKeyUsage
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertGetEnhancedKeyUsage
CertGetCertificateContextProperty
CertGetCertificateContextProperty
CertGetCertificateChain
CertGetCertificateChain
CertGetCTLContextProperty
CertGetCTLContextProperty
CertFreeCertificateContext
CertFreeCertificateContext
CertFreeCertificateChainList
CertFreeCertificateChainList
CertFreeCertificateChainEngine
CertFreeCertificateChainEngine
CertFreeCertificateChain
CertFreeCertificateChain
CertFreeCTLContext
CertFreeCTLContext
CertFreeCRLContext
CertFreeCRLContext
CertFindSubjectInCTL
CertFindSubjectInCTL
CertFindRDNAttr
CertFindRDNAttr
CertFindExtension
CertFindExtension
CertFindChainInStore
CertFindChainInStore
CertFindCertificateInStore
CertFindCertificateInStore
CertFindCTLInStore
CertFindCTLInStore
CertEnumCertificatesInStore
CertEnumCertificatesInStore
CertEnumCertificateContextProperties
CertEnumCertificateContextProperties
CertEnumCRLsInStore
CertEnumCRLsInStore
CertDuplicateStore
CertDuplicateStore
CertDuplicateCertificateContext
CertDuplicateCertificateContext
CertDuplicateCertificateChain
CertDuplicateCertificateChain
CertDuplicateCTLContext
CertDuplicateCTLContext
CertDeleteCertificateFromStore
CertDeleteCertificateFromStore
CertCreateSelfSignCertificate
CertCreateSelfSignCertificate
CertCreateContext
CertCreateContext
CertCreateCertificateContext
CertCreateCertificateContext
CertCreateCTLContext
CertCreateCTLContext
CertCreateCRLContext
CertCreateCRLContext
CertControlStore
CertControlStore
CertComparePublicKeyInfo
CertComparePublicKeyInfo
CertCompareIntegerBlob
CertCompareIntegerBlob
CertCompareCertificateName
CertCompareCertificateName
CertCompareCertificate
CertCompareCertificate
CertCloseStore
CertCloseStore
CertAddStoreToCollection
CertAddStoreToCollection
CertAddSerializedElementToStore
CertAddSerializedElementToStore
CertAddEnhancedKeyUsageIdentifier
CertAddEnhancedKeyUsageIdentifier
CertAddEncodedCertificateToStore
CertAddEncodedCertificateToStore
CertAddEncodedCRLToStore
CertAddEncodedCRLToStore
CertAddCertificateContextToStore
CertAddCertificateContextToStore
CertAddCRLContextToStore
CertAddCRLContextToStore
CertVerifyCertificateChainPolicy
CertVerifyCertificateChainPolicy
CryptHashSessionKey
CryptHashSessionKey
CryptDuplicateKey
CryptDuplicateKey
TF_RunInputCPL
TF_RunInputCPL
TF_PostAllThreadMsg
TF_PostAllThreadMsg
SetupDiReportDeviceInstallError
SetupDiReportDeviceInstallError
SetupDiOpenDeviceInterfaceRegKey
SetupDiOpenDeviceInterfaceRegKey
SetupDiOpenDevRegKey
SetupDiOpenDevRegKey
SetupDiOpenClassRegKeyExW
SetupDiOpenClassRegKeyExW
SetupDiOpenClassRegKeyExA
SetupDiOpenClassRegKeyExA
SetupDiOpenClassRegKey
SetupDiOpenClassRegKey
SetupDiGetDevicePropertyKeys
SetupDiGetDevicePropertyKeys
SetupDiGetDeviceInterfacePropertyKeys
SetupDiGetDeviceInterfacePropertyKeys
SetupDiGetClassPropertyKeysExW
SetupDiGetClassPropertyKeysExW
SetupDiGetClassPropertyKeys
SetupDiGetClassPropertyKeys
SetupDiCreateDeviceInterfaceRegKeyW
SetupDiCreateDeviceInterfaceRegKeyW
SetupDiCreateDevRegKeyW
SetupDiCreateDevRegKeyW
ShellExecuteW
ShellExecuteW
ShellExecuteExW
ShellExecuteExW
ShellExecuteExA
ShellExecuteExA
ShellExecuteA
ShellExecuteA
SHFileOperationW
SHFileOperationW
SHFileOperationA
SHFileOperationA
FindExecutableW
FindExecutableW
FindExecutableA
FindExecutableA
AssocGetDetailsOfPropKey
AssocGetDetailsOfPropKey
vSLUnregisterWindowsEvent
vSLUnregisterWindowsEvent
SLRegisterWindowsEvent
SLRegisterWindowsEvent
SLReArmWindows
SLReArmWindows
SLIsWindowsGenuineLocal
SLIsWindowsGenuineLocal
SLGetWindowsInformationDWORD
SLGetWindowsInformationDWORD
SLGetWindowsInformation
SLGetWindowsInformation
SLConsumeWindowsRight
SLConsumeWindowsRight
SetPortW
SetPortW
EnumPrinterKeyW
EnumPrinterKeyW
EnumPortsW
EnumPortsW
DeletePrinterKeyW
DeletePrinterKeyW
DeletePortW
DeletePortW
ConfigurePortW
ConfigurePortW
AddPortW
AddPortW
WTHelperGetProvCertFromChain
WTHelperGetProvCertFromChain
TrustIsCertificateSelfSigned
TrustIsCertificateSelfSigned
NetUnjoinDomain
NetUnjoinDomain
NetJoinDomain
NetJoinDomain
NetGetJoinInformation
NetGetJoinInformation
LOAD: GETMODULEFILENAME failed PID=%ld | stringID=%ld | str=%S | flags=%d | hr = %X
LOAD: GETMODULEFILENAME failed PID=%ld | stringID=%ld | str=%S | flags=%d | hr = %X
j%Xjp3
j%Xjp3
SXS: %s() BasepSxsCreateStreams() failed
SXS: %s() BasepSxsCreateStreams() failed
t.HH;
t.HH;
j.Yf;
j.Yf;
PSSSSSSh
PSSSSSSh
Invalid args passed
Invalid args passed
LOAD: INIT failed PID=%ld | stringID=%ld | str=%S | flags=%d | hr = %X
LOAD: INIT failed PID=%ld | stringID=%ld | str=%S | flags=%d | hr = %X
WTSShutdownSystem
WTSShutdownSystem
twain_32.dll
twain_32.dll
SdbReleaseMatchingExe
SdbReleaseMatchingExe
SdbGetMatchingExe
SdbGetMatchingExe
SdbFindFirstGUIDIndexedTag
SdbFindFirstGUIDIndexedTag
ApphelpCheckExe
ApphelpCheckExe
j.Xf;
j.Xf;
.data
.data
UrlUnescapeW
UrlUnescapeW
UrlUnescapeA
UrlUnescapeA
UrlGetPartW
UrlGetPartW
UrlEscapeW
UrlEscapeW
UrlEscapeA
UrlEscapeA
UrlCombineW
UrlCombineW
UrlCombineA
UrlCombineA
UrlCanonicalizeW
UrlCanonicalizeW
UrlCanonicalizeA
UrlCanonicalizeA
UrlApplySchemeW
UrlApplySchemeW
UrlApplySchemeA
UrlApplySchemeA
SHEnumKeyExW
SHEnumKeyExW
SHDeleteKeyW
SHDeleteKeyW
SHDeleteKeyA
SHDeleteKeyA
PathIsURLW
PathIsURLW
PathCreateFromUrlW
PathCreateFromUrlW
vWS_HTTP2_INITIAL_CONNECTION__new
vWS_HTTP2_INITIAL_CONNECTION__new
WS_HTTP2_CONNECTION__Initialize
WS_HTTP2_CONNECTION__Initialize
I_RpcTransGetHttpCredentials
I_RpcTransGetHttpCredentials
I_RpcTransFreeHttpCredentials
I_RpcTransFreeHttpCredentials
HttpSendIdentifyResponse
HttpSendIdentifyResponse
HTTP_TurnOnOffKeepAlives
HTTP_TurnOnOffKeepAlives
HTTP_SyncSend
HTTP_SyncSend
HTTP_SyncRecv
HTTP_SyncRecv
HTTP_SetLastBufferToFree
HTTP_SetLastBufferToFree
HTTP_ServerListen
HTTP_ServerListen
HTTP_Send
HTTP_Send
HTTP_Recv
HTTP_Recv
HTTP_QueryLocalAddress
HTTP_QueryLocalAddress
HTTP_QueryClientIpAddress
HTTP_QueryClientIpAddress
HTTP_QueryClientId
HTTP_QueryClientId
HTTP_QueryClientAddress
HTTP_QueryClientAddress
HTTP_Open
HTTP_Open
HTTP_Initialize
HTTP_Initialize
HTTP_FreeResolverHint
HTTP_FreeResolverHint
HTTP_CopyResolverHint
HTTP_CopyResolverHint
HTTP_Close
HTTP_Close
HTTP_Abort
HTTP_Abort
HTTP2WinHttpDirectSend
HTTP2WinHttpDirectSend
HTTP2WinHttpDirectReceive
HTTP2WinHttpDirectReceive
HTTP2WinHttpDelayedReceive
HTTP2WinHttpDelayedReceive
HTTP2TimerReschedule
HTTP2TimerReschedule
HTTP2TestHook
HTTP2TestHook
HTTP2SocketTransportChannel__SendComplete
HTTP2SocketTransportChannel__SendComplete
HTTP2SocketTransportChannel__ReceiveComplete
HTTP2SocketTransportChannel__ReceiveComplete
HTTP2RecycleChannel
HTTP2RecycleChannel
HTTP2ProcessRuntimePostedEvent
HTTP2ProcessRuntimePostedEvent
HTTP2ProcessComplexTSend
HTTP2ProcessComplexTSend
HTTP2ProcessComplexTReceive
HTTP2ProcessComplexTReceive
HTTP2PlugChannelDirectSend
HTTP2PlugChannelDirectSend
HTTP2IISSenderDirectSend
HTTP2IISSenderDirectSend
HTTP2IISDirectReceive
HTTP2IISDirectReceive
HTTP2GetRpcConnectionTransport
HTTP2GetRpcConnectionTransport
HTTP2FlowControlChannelDirectSend
HTTP2FlowControlChannelDirectSend
HTTP2EpRecvFailed
HTTP2EpRecvFailed
HTTP2DirectReceive
HTTP2DirectReceive
HTTP2ContinueDrainChannel
HTTP2ContinueDrainChannel
HTTP2ChannelDataOriginatorDirectSend
HTTP2ChannelDataOriginatorDirectSend
HTTP2AbortConnection
HTTP2AbortConnection
FreeHttpTransportCredentials
FreeHttpTransportCredentials
DuplicateHttpTransportCredentials
DuplicateHttpTransportCredentials
ConvertToUnicodeHttpTransportCredentials
ConvertToUnicodeHttpTransportCredentials
CompareHttpTransportCredentials
CompareHttpTransportCredentials
TransportAddrFromMtxAddr
TransportAddrFromMtxAddr
MtxAddrFromTransportAddr
MtxAddrFromTransportAddr
DsaExeStartRoutine
DsaExeStartRoutine
DirOperationControl
DirOperationControl
DSStrToHashKeyExternal
DSStrToHashKeyExternal
DSNAMEToHashKeyExternal
DSNAMEToHashKeyExternal
AttrTypeToKey
AttrTypeToKey
SaferiIsExecutableFileType
SaferiIsExecutableFileType
ReportEventW
ReportEventW
ReportEventA
ReportEventA
RegUnLoadKeyW
RegUnLoadKeyW
RegSetKeyValueW
RegSetKeyValueW
RegSetKeySecurity
RegSetKeySecurity
RegSaveKeyW
RegSaveKeyW
RegSaveKeyExW
RegSaveKeyExW
RegSaveKeyA
RegSaveKeyA
RegRestoreKeyW
RegRestoreKeyW
RegReplaceKeyW
RegReplaceKeyW
RegRenameKey
RegRenameKey
RegQueryReflectionKey
RegQueryReflectionKey
RegQueryInfoKeyW
RegQueryInfoKeyW
RegQueryInfoKeyA
RegQueryInfoKeyA
RegOpenKeyW
RegOpenKeyW
RegOpenKeyTransactedW
RegOpenKeyTransactedW
RegOpenKeyExW
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyExA
RegOpenKeyA
RegOpenKeyA
RegNotifyChangeKeyValue
RegNotifyChangeKeyValue
RegLoadKeyW
RegLoadKeyW
RegGetKeySecurity
RegGetKeySecurity
RegFlushKey
RegFlushKey
RegEnumKeyW
RegEnumKeyW
RegEnumKeyExW
RegEnumKeyExW
RegEnumKeyA
RegEnumKeyA
RegEnableReflectionKey
RegEnableReflectionKey
RegDisableReflectionKey
RegDisableReflectionKey
RegDeleteKeyW
RegDeleteKeyW
RegDeleteKeyValueW
RegDeleteKeyValueW
RegDeleteKeyTransactedW
RegDeleteKeyTransactedW
RegDeleteKeyExW
RegDeleteKeyExW
RegDeleteKeyExA
RegDeleteKeyExA
RegDeleteKeyA
RegDeleteKeyA
RegCreateKeyW
RegCreateKeyW
RegCreateKeyTransactedW
RegCreateKeyTransactedW
RegCreateKeyExW
RegCreateKeyExW
RegCreateKeyA
RegCreateKeyA
RegCloseKey
RegCloseKey
GetServiceKeyNameW
GetServiceKeyNameW
GetEventLogInformation
GetEventLogInformation
FreeEncryptionCertificateHashList
FreeEncryptionCertificateHashList
FreeEncryptedFileKeyInfo
FreeEncryptedFileKeyInfo
EncryptedFileKeyInfo
EncryptedFileKeyInfo
ElfReportEventW
ElfReportEventW
Gentee.Installer
Gentee.Installer
RR.Raphael.Install.Builder
RR.Raphael.Install.Builder
ThraexSoftware.AstrumInstallWizard
ThraexSoftware.AstrumInstallWizard
Roshal.WinRAR.WinRAR
Roshal.WinRAR.WinRAR
Illustrate.Spoon.Installer
Illustrate.Spoon.Installer
InstallShield.Setup
InstallShield.Setup
Nullsoft.NSIS
Nullsoft.NSIS
JR.Inno.Setup
JR.Inno.Setup
uOSSh
uOSSh
\twain_32.dll
\twain_32.dll
TermsrvSetKeySecurity
TermsrvSetKeySecurity
TermsrvRestoreKey
TermsrvRestoreKey
TermsrvDeleteKey
TermsrvDeleteKey
TermsrvSetValueKey
TermsrvSetValueKey
tsappcmp.dll
tsappcmp.dll
SXS: %s() empty lpSource %ls
SXS: %s() empty lpSource %ls
SXS: %s() Calling csrss server failed. Status = 0x%x
SXS: %s() Calling csrss server failed. Status = 0x%x
SXS: %s() NtCreateSection() failed. Status = 0x%x.
SXS: %s() NtCreateSection() failed. Status = 0x%x.
SXS: %s() NtMapViewOfSection failed
SXS: %s() NtMapViewOfSection failed
SXS: %s() NtOpenFile(%wZ) failed
SXS: %s() NtOpenFile(%wZ) failed
SXS: %s() AssemblyDirectory is not null terminated
SXS: %s() AssemblyDirectory is not null terminated
SXS: %s() BaseDllMapResourceIdW failed
SXS: %s() BaseDllMapResourceIdW failed
SXS: %s() ACTCTX_FLAG_RESOURCE_NAME_VALID set but lpResourceName == 0
SXS: %s() ACTCTX_FLAG_RESOURCE_NAME_VALID set but lpResourceName == 0
SXS: %s() Bad lpAssemblyDirectory %ls
SXS: %s() Bad lpAssemblyDirectory %ls
SXS: %s() Bad lpApplication name '%ls'
SXS: %s() Bad lpApplication name '%ls'
SXS: %s() Bad lpSource PathType %ls, 0x%lx
SXS: %s() Bad lpSource PathType %ls, 0x%lx
SXS: %s() bad wProcessorArchitecture 0x%x
SXS: %s() bad wProcessorArchitecture 0x%x
SXS: %s() BaseDllMapResourceIdA failed
SXS: %s() BaseDllMapResourceIdA failed
SXS: Invalid parameter(s) passed to FindActCtxSection*()
SXS: Invalid parameter(s) passed to FindActCtxSection*()
->cbSize = %u
->cbSize = %u
SXS: %s() CsrCaptureMessageMultiUnicodeStringsInPlace failed
SXS: %s() CsrCaptureMessageMultiUnicodeStringsInPlace failed
Kernel32: No mapping for ImageInformation.Machine == x
Kernel32: No mapping for ImageInformation.Machine == x
ConnectConsoleInternal failed with Status 0x%x
ConnectConsoleInternal failed with Status 0x%x
NtConnectPort %ws failed with Status 0x%x
NtConnectPort %ws failed with Status 0x%x
SXS: %s() NtQueryInformationFile failed. Status = 0x%x
SXS: %s() NtQueryInformationFile failed. Status = 0x%x
WaitForMultipleObjects returned with %d
WaitForMultipleObjects returned with %d
RtlWerpReportException failed with status code :%d. Will try to launch the process directly
RtlWerpReportException failed with status code :%d. Will try to launch the process directly
WerpReportFault Invalid params passed
WerpReportFault Invalid params passed
WerpHeapFree failed with 0x%x
WerpHeapFree failed with 0x%x
Too long restart command line passed
Too long restart command line passed
t5SSh
t5SSh
StringCchCopy failed with 0x%x
StringCchCopy failed with 0x%x
Invalid arg in %s
Invalid arg in %s
Invalid block passed
Invalid block passed
INIT: PID %ld is %S
INIT: PID %ld is %S
LOAD: INS failed PID=%ld | stringID=%ld | str=%S | flags=%d | hr = %X
LOAD: INS failed PID=%ld | stringID=%ld | str=%S | flags=%d | hr = %X
TermsrvLogInstallIniFile
TermsrvLogInstallIniFile
TermsrvGetWindowsDirectoryW
TermsrvGetWindowsDirectoryW
TermsrvGetWindowsDirectoryA
TermsrvGetWindowsDirectoryA
SXS: %s() NtCreateSection() failed. Status = 0x%x
SXS: %s() NtCreateSection() failed. Status = 0x%x
SXS: %s() Null %p or size 0x%lx too small
SXS: %s() Null %p or size 0x%lx too small
SXS: %s() Bad flags/size 0x%lx/0x%lx
SXS: %s() Bad flags/size 0x%lx/0x%lx
.debug
.debug
.reloc
.reloc
.rsrc1
.rsrc1
.rsrc
.rsrc
SXS: %s() NtOpenFile(%wZ) failed. Status = 0x%x
SXS: %s() NtOpenFile(%wZ) failed. Status = 0x%x
Invalid args in %s
Invalid args in %s
WerpGetRecoveryInfoForSelf failed with 0x%x
WerpGetRecoveryInfoForSelf failed with 0x%x
SSSSh
SSSSh
WPSSh
WPSSh
mem16.dll
mem16.dll
ImpersonateNamedPipeClient
ImpersonateNamedPipeClient
PSSh?
PSSh?
PWVSSh
PWVSSh
{u.j-Yf9H&uùH0u
{u.j-Yf9H&uùH0u
u%SPd
u%SPd
t SSh
t SSh
PSSh
PSSh
SXS: %s - Failure getting active activation context; ntstatus lx
SXS: %s - Failure getting active activation context; ntstatus lx
PVWSSh
PVWSSh
VSSHP
VSSHP
GetSystemWindowsDirectory failed or the size was not adequate
GetSystemWindowsDirectory failed or the size was not adequate
StringCchPrintf failed with 0x%x
StringCchPrintf failed with 0x%x
NtQueryInformationProcess failed with 0x%x
NtQueryInformationProcess failed with 0x%x
Failed to create the process %S
Failed to create the process %S
Failed to get the paths for the crash vertical. Error was 0x%x
Failed to get the paths for the crash vertical. Error was 0x%x
NtQueryInformationProcess failed with status: 0x%x
NtQueryInformationProcess failed with status: 0x%x
vRtlInitUnicodeStringEx returned 0x%x
vRtlInitUnicodeStringEx returned 0x%x
NtQueryInformationProcess failed 0x%x
NtQueryInformationProcess failed 0x%x
vStringcchcopy failed while copying the debugger path 0x%x
vStringcchcopy failed while copying the debugger path 0x%x
StringCchPrintf failed while printng the debugger commandline with 0x%x
StringCchPrintf failed while printng the debugger commandline with 0x%x
StringCchPrintf failed while printing the debugger path with 0x%x
StringCchPrintf failed while printing the debugger path with 0x%x
NtWow64QueryInformationProcess64 failed with 0x%x
NtWow64QueryInformationProcess64 failed with 0x%x
NtWow64ReadVirtualMemory64 failed with 0x%x
NtWow64ReadVirtualMemory64 failed with 0x%x
NtQueryInformationProcess failed with status 0x%x
NtQueryInformationProcess failed with status 0x%x
WerpNtWow64QueryInformationProcess64 failed with status 0x%x
WerpNtWow64QueryInformationProcess64 failed with status 0x%x
Invalid handle passed
Invalid handle passed
USE: GETMODSTAMP failed PID=%ld | MODNAME=%S | STRID=%ld | hr = %X
USE: GETMODSTAMP failed PID=%ld | MODNAME=%S | STRID=%ld | hr = %X
USE: GETMODULEVERSION failed PID=%ld | MODNAME=%S | STRID=%ld | hr = %X
USE: GETMODULEVERSION failed PID=%ld | MODNAME=%S | STRID=%ld | hr = %X
USE: Lookup failed PID=%ld | STR=%S | HashModBuckets=%ld
USE: Lookup failed PID=%ld | STR=%S | HashModBuckets=%ld
CACHE: Purging node from the cache MOD=%s | STRID=%ld | Flags=%X | HashModBuckets=%ld
CACHE: Purging node from the cache MOD=%s | STRID=%ld | Flags=%X | HashModBuckets=%ld
KERNEL32.dll
KERNEL32.dll
BaseCleanupAppcompatCacheSupport
BaseCleanupAppcompatCacheSupport
BaseInitAppcompatCacheSupport
BaseInitAppcompatCacheSupport
CallNamedPipeA
CallNamedPipeA
CallNamedPipeW
CallNamedPipeW
CmdBatNotification
CmdBatNotification
ConnectNamedPipe
ConnectNamedPipe
CreateIoCompletionPort
CreateIoCompletionPort
CreateMutexExA
CreateMutexExA
CreateMutexExW
CreateMutexExW
CreateNamedPipeA
CreateNamedPipeA
CreateNamedPipeW
CreateNamedPipeW
CreatePipe
CreatePipe
DisconnectNamedPipe
DisconnectNamedPipe
EnumCalendarInfoExEx
EnumCalendarInfoExEx
EnumDateFormatsExEx
EnumDateFormatsExEx
GetCPInfo
GetCPInfo
GetCPInfoExA
GetCPInfoExA
GetCPInfoExW
GetCPInfoExW
GetCalendarSupportedDateRange
GetCalendarSupportedDateRange
GetConsoleAliasExesA
GetConsoleAliasExesA
GetConsoleAliasExesLengthA
GetConsoleAliasExesLengthA
GetConsoleAliasExesLengthW
GetConsoleAliasExesLengthW
GetConsoleAliasExesW
GetConsoleAliasExesW
GetConsoleInputExeNameA
GetConsoleInputExeNameA
GetConsoleInputExeNameW
GetConsoleInputExeNameW
GetConsoleKeyboardLayoutNameA
GetConsoleKeyboardLayoutNameA
GetConsoleKeyboardLayoutNameW
GetConsoleKeyboardLayoutNameW
GetConsoleOutputCP
GetConsoleOutputCP
GetLargestConsoleWindowSize
GetLargestConsoleWindowSize
GetNamedPipeAttribute
GetNamedPipeAttribute
GetNamedPipeClientComputerNameA
GetNamedPipeClientComputerNameA
GetNamedPipeClientComputerNameW
GetNamedPipeClientComputerNameW
GetNamedPipeClientProcessId
GetNamedPipeClientProcessId
GetNamedPipeClientSessionId
GetNamedPipeClientSessionId
GetNamedPipeHandleStateA
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNamedPipeHandleStateW
GetNamedPipeInfo
GetNamedPipeInfo
GetNamedPipeServerProcessId
GetNamedPipeServerProcessId
GetNamedPipeServerSessionId
GetNamedPipeServerSessionId
GetProcessHandleCount
GetProcessHandleCount
GetProcessHeap
GetProcessHeap
GetProcessHeaps
GetProcessHeaps
GetProcessShutdownParameters
GetProcessShutdownParameters
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryA
GetWindowsDirectoryW
GetWindowsDirectoryW
InitOnceExecuteOnce
InitOnceExecuteOnce
NeedCurrentDirectoryForExePathA
NeedCurrentDirectoryForExePathA
NeedCurrentDirectoryForExePathW
NeedCurrentDirectoryForExePathW
PeekNamedPipe
PeekNamedPipe
RegCreateKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyExA
RegLoadKeyA
RegLoadKeyA
RegRestoreKeyA
RegRestoreKeyA
RegSaveKeyExA
RegSaveKeyExA
RegUnLoadKeyA
RegUnLoadKeyA
RegisterWowExec
RegisterWowExec
SetConsoleInputExeNameA
SetConsoleInputExeNameA
SetConsoleInputExeNameW
SetConsoleInputExeNameW
SetConsoleKeyShortcuts
SetConsoleKeyShortcuts
SetConsoleMaximumWindowSize
SetConsoleMaximumWindowSize
SetConsoleOutputCP
SetConsoleOutputCP
SetNamedPipeAttribute
SetNamedPipeAttribute
SetNamedPipeHandleState
SetNamedPipeHandleState
SetProcessShutdownParameters
SetProcessShutdownParameters
SetThreadExecutionState
SetThreadExecutionState
TransactNamedPipe
TransactNamedPipe
VDMConsoleOperation
VDMConsoleOperation
VDMOperationStarted
VDMOperationStarted
WaitNamedPipeA
WaitNamedPipeA
WaitNamedPipeW
WaitNamedPipeW
WinExec
WinExec
NTDLL.RtlAcquireSRWLockExclusive
NTDLL.RtlAcquireSRWLockExclusive
NTDLL.RtlAcquireSRWLockShared
NTDLL.RtlAcquireSRWLockShared
api-ms-win-core-libraryloader-l1-1-0.AddDllDirectory
api-ms-win-core-libraryloader-l1-1-0.AddDllDirectory
NTDLL.RtlAddVectoredContinueHandler
NTDLL.RtlAddVectoredContinueHandler
NTDLL.RtlAddVectoredExceptionHandler
NTDLL.RtlAddVectoredExceptionHandler
NTDLL.TpCancelAsyncIoOperation
NTDLL.TpCancelAsyncIoOperation
NTDLL.TpReleasePool
NTDLL.TpReleasePool
NTDLL.TpReleaseCleanupGroup
NTDLL.TpReleaseCleanupGroup
NTDLL.TpReleaseCleanupGroupMembers
NTDLL.TpReleaseCleanupGroupMembers
NTDLL.TpReleaseIoCompletion
NTDLL.TpReleaseIoCompletion
NTDLL.TpReleaseTimer
NTDLL.TpReleaseTimer
NTDLL.TpReleaseWait
NTDLL.TpReleaseWait
NTDLL.TpReleaseWork
NTDLL.TpReleaseWork
api-ms-win-core-processthreads-l1-1-0.CreateRemoteThreadEx
api-ms-win-core-processthreads-l1-1-0.CreateRemoteThreadEx
NTDLL.RtlDecodePointer
NTDLL.RtlDecodePointer
NTDLL.RtlDecodeSystemPointer
NTDLL.RtlDecodeSystemPointer
NTDLL.RtlDeleteBoundaryDescriptor
NTDLL.RtlDeleteBoundaryDescriptor
NTDLL.RtlDeleteCriticalSection
NTDLL.RtlDeleteCriticalSection
api-ms-win-core-processthreads-l1-1-0.DeleteProcThreadAttributeList
api-ms-win-core-processthreads-l1-1-0.DeleteProcThreadAttributeList
NTDLL.TpDisassociateCallback
NTDLL.TpDisassociateCallback
NTDLL.RtlEncodePointer
NTDLL.RtlEncodePointer
NTDLL.RtlEncodeSystemPointer
NTDLL.RtlEncodeSystemPointer
NTDLL.RtlEnterCriticalSection
NTDLL.RtlEnterCriticalSection
NTDLL.RtlExitUserThread
NTDLL.RtlExitUserThread
NTDLL.NtFlushProcessWriteBuffers
NTDLL.NtFlushProcessWriteBuffers
NTDLL.TpCallbackUnloadDllOnCompletion
NTDLL.TpCallbackUnloadDllOnCompletion
NTDLL.RtlGetCurrentProcessorNumber
NTDLL.RtlGetCurrentProcessorNumber
NTDLL.RtlGetCurrentProcessorNumberEx
NTDLL.RtlGetCurrentProcessorNumberEx
api-ms-win-core-sysinfo-l1-1-0.GetLogicalProcessorInformationEx
api-ms-win-core-sysinfo-l1-1-0.GetLogicalProcessorInformationEx
NTDLL.RtlAllocateHeap
NTDLL.RtlAllocateHeap
NTDLL.RtlReAllocateHeap
NTDLL.RtlReAllocateHeap
NTDLL.RtlSizeHeap
NTDLL.RtlSizeHeap
NTDLL.RtlRunOnceInitialize
NTDLL.RtlRunOnceInitialize
NTDLL.RtlInitializeConditionVariable
NTDLL.RtlInitializeConditionVariable
NTDLL.RtlInitializeCriticalSection
NTDLL.RtlInitializeCriticalSection
api-ms-win-core-processthreads-l1-1-0.InitializeProcThreadAttributeList
api-ms-win-core-processthreads-l1-1-0.InitializeProcThreadAttributeList
NTDLL.RtlInitializeSListHead
NTDLL.RtlInitializeSListHead
NTDLL.RtlInitializeSRWLock
NTDLL.RtlInitializeSRWLock
NTDLL.RtlInterlockedCompareExchange64
NTDLL.RtlInterlockedCompareExchange64
NTDLL.RtlInterlockedFlushSList
NTDLL.RtlInterlockedFlushSList
NTDLL.RtlInterlockedPopEntrySList
NTDLL.RtlInterlockedPopEntrySList
NTDLL.RtlInterlockedPushEntrySList
NTDLL.RtlInterlockedPushEntrySList
NTDLL.RtlInterlockedPushListSList
NTDLL.RtlInterlockedPushListSList
NTDLL.TpIsTimerSet
NTDLL.TpIsTimerSet
NTDLL.RtlLeaveCriticalSection
NTDLL.RtlLeaveCriticalSection
NTDLL.TpCallbackLeaveCriticalSectionOnCompletion
NTDLL.TpCallbackLeaveCriticalSectionOnCompletion
api-ms-win-core-processthreads-l1-1-0.OpenProcessToken
api-ms-win-core-processthreads-l1-1-0.OpenProcessToken
api-ms-win-core-processthreads-l1-1-0.OpenThreadToken
api-ms-win-core-processthreads-l1-1-0.OpenThreadToken
NTDLL.RtlQueryDepthSList
NTDLL.RtlQueryDepthSList
NTDLL.TpCallbackReleaseMutexOnCompletion
NTDLL.TpCallbackReleaseMutexOnCompletion
NTDLL.RtlReleaseSRWLockExclusive
NTDLL.RtlReleaseSRWLockExclusive
NTDLL.RtlReleaseSRWLockShared
NTDLL.RtlReleaseSRWLockShared
NTDLL.TpCallbackReleaseSemaphoreOnCompletion
NTDLL.TpCallbackReleaseSemaphoreOnCompletion
api-ms-win-core-libraryloader-l1-1-0.RemoveDllDirectory
api-ms-win-core-libraryloader-l1-1-0.RemoveDllDirectory
NTDLL.RtlRemoveVectoredContinueHandler
NTDLL.RtlRemoveVectoredContinueHandler
NTDLL.RtlRemoveVectoredExceptionHandler
NTDLL.RtlRemoveVectoredExceptionHandler
NTDLL.RtlRestoreLastWin32Error
NTDLL.RtlRestoreLastWin32Error
NTDLL.RtlMoveMemory
NTDLL.RtlMoveMemory
NTDLL.RtlZeroMemory
NTDLL.RtlZeroMemory
NTDLL.RtlSetCriticalSectionSpinCount
NTDLL.RtlSetCriticalSectionSpinCount
api-ms-win-core-libraryloader-l1-1-0.SetDefaultDllDirectories
api-ms-win-core-libraryloader-l1-1-0.SetDefaultDllDirectories
NTDLL.TpCallbackSetEventOnCompletion
NTDLL.TpCallbackSetEventOnCompletion
api-ms-win-core-processthreads-l1-1-0.SetThreadToken
api-ms-win-core-processthreads-l1-1-0.SetThreadToken
NTDLL.TpSetPoolMaxThreads
NTDLL.TpSetPoolMaxThreads
NTDLL.TpSetTimer
NTDLL.TpSetTimer
NTDLL.TpSetWait
NTDLL.TpSetWait
api-ms-win-core-threadpool-l1-1-0.SetWaitableTimerEx
api-ms-win-core-threadpool-l1-1-0.SetWaitableTimerEx
NTDLL.TpStartAsyncIoOperation
NTDLL.TpStartAsyncIoOperation
NTDLL.TpPostWork
NTDLL.TpPostWork
NTDLL.RtlTryAcquireSRWLockExclusive
NTDLL.RtlTryAcquireSRWLockExclusive
NTDLL.RtlTryAcquireSRWLockShared
NTDLL.RtlTryAcquireSRWLockShared
NTDLL.RtlTryEnterCriticalSection
NTDLL.RtlTryEnterCriticalSection
api-ms-win-core-processthreads-l1-1-0.UpdateProcThreadAttribute
api-ms-win-core-processthreads-l1-1-0.UpdateProcThreadAttribute
NTDLL.VerSetConditionMask
NTDLL.VerSetConditionMask
NTDLL.TpWaitForIoCompletion
NTDLL.TpWaitForIoCompletion
NTDLL.TpWaitForTimer
NTDLL.TpWaitForTimer
NTDLL.TpWaitForWait
NTDLL.TpWaitForWait
NTDLL.TpWaitForWork
NTDLL.TpWaitForWork
NTDLL.RtlWakeAllConditionVariable
NTDLL.RtlWakeAllConditionVariable
NTDLL.RtlWakeConditionVariable
NTDLL.RtlWakeConditionVariable
API-MS-Win-Security-Base-L1-1-0.dll
API-MS-Win-Security-Base-L1-1-0.dll
API-MS-Win-Core-Profile-L1-1-0.dll
API-MS-Win-Core-Profile-L1-1-0.dll
API-MS-Win-Core-Util-L1-1-0.dll
API-MS-Win-Core-Util-L1-1-0.dll
API-MS-Win-Core-Fibers-L1-1-0.dll
API-MS-Win-Core-Fibers-L1-1-0.dll
API-MS-Win-Core-ErrorHandling-L1-1-0.dll
API-MS-Win-Core-ErrorHandling-L1-1-0.dll
API-MS-Win-Core-Debug-L1-1-0.dll
API-MS-Win-Core-Debug-L1-1-0.dll
API-MS-Win-Core-String-L1-1-0.dll
API-MS-Win-Core-String-L1-1-0.dll
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll
API-MS-Win-Core-Localization-L1-1-0.dll
API-MS-Win-Core-Localization-L1-1-0.dll
API-MS-Win-Core-SysInfo-L1-1-0.dll
API-MS-Win-Core-SysInfo-L1-1-0.dll
API-MS-Win-Core-Misc-L1-1-0.dll
API-MS-Win-Core-Misc-L1-1-0.dll
API-MS-Win-Core-NamedPipe-L1-1-0.dll
API-MS-Win-Core-NamedPipe-L1-1-0.dll
API-MS-Win-Core-LibraryLoader-L1-1-0.dll
API-MS-Win-Core-LibraryLoader-L1-1-0.dll
API-MS-Win-Core-ThreadPool-L1-1-0.dll
API-MS-Win-Core-ThreadPool-L1-1-0.dll
API-MS-Win-Core-IO-L1-1-0.dll
API-MS-Win-Core-IO-L1-1-0.dll
API-MS-Win-Core-File-L1-1-0.dll
API-MS-Win-Core-File-L1-1-0.dll
API-MS-Win-Core-Synch-L1-1-0.dll
API-MS-Win-Core-Synch-L1-1-0.dll
API-MS-Win-Core-Handle-L1-1-0.dll
API-MS-Win-Core-Handle-L1-1-0.dll
API-MS-Win-Core-Memory-L1-1-0.dll
API-MS-Win-Core-Memory-L1-1-0.dll
API-MS-Win-Core-Heap-L1-1-0.dll
API-MS-Win-Core-Heap-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
KERNELBASE.dll
KERNELBASE.dll
ntdll.dll
ntdll.dll
API-MS-Win-Core-RtlSupport-L1-1-0.dll
API-MS-Win-Core-RtlSupport-L1-1-0.dll
NtNotifyChangeKey
NtNotifyChangeKey
RtlComputeImportTableHash
RtlComputeImportTableHash
RtlRunOnceExecuteOnce
RtlRunOnceExecuteOnce
NtSetThreadExecutionState
NtSetThreadExecutionState
LdrQueryImageFileExecutionOptions
LdrQueryImageFileExecutionOptions
NtCreateKeyTransacted
NtCreateKeyTransacted
NtDeleteValueKey
NtDeleteValueKey
NtEnumerateKey
NtEnumerateKey
RtlFormatCurrentUserKeyPath
RtlFormatCurrentUserKeyPath
NtEnumerateValueKey
NtEnumerateValueKey
NtCreateKey
NtCreateKey
NtSetValueKey
NtSetValueKey
NtFlushKey
NtFlushKey
NtOpenKey
NtOpenKey
NtQueryValueKey
NtQueryValueKey
LdrQueryImageFileKeyOption
LdrQueryImageFileKeyOption
NtYieldExecution
NtYieldExecution
NtRequestWaitReplyPort
NtRequestWaitReplyPort
NtConnectPort
NtConnectPort
NtOpenKeyTransacted
NtOpenKeyTransacted
NtQueryKey
NtQueryKey
NtOpenKeyEx
NtOpenKeyEx
NtOpenKeyTransactedEx
NtOpenKeyTransactedEx
NtDeleteKey
NtDeleteKey
NtLoadKey
NtLoadKey
NtUnloadKey
NtUnloadKey
NtNotifyChangeMultipleKeys
NtNotifyChangeMultipleKeys
NtRestoreKey
NtRestoreKey
NtSaveKeyEx
NtSaveKeyEx
RtlWerpReportException
RtlWerpReportException
WerReportSQMEvent
WerReportSQMEvent
BaseGetProcessExePath
BaseGetProcessExePath
OpenRegKey
OpenRegKey
GetCPHashNode
GetCPHashNode
BaseReleaseProcessExePath
BaseReleaseProcessExePath
kernel32.pdb
kernel32.pdb
; ;$;(;,;0;4;
; ;$;(;,;0;4;
> >$>(>,>
> >$>(>,>
4 4$4(4,4044484
4 4$4(4,4044484
6 6$6(6,60646
6 6$6(6,60646
0 0$0(0,00040
0 0$0(0,00040
8 8$8(8,8
8 8$8(8,8
? ?$?(?,?0?4?8?
? ?$?(?,?0?4?8?
094989
094989
; ;$;(;,;0;4;8;
; ;$;(;,;0;4;8;
7 7$7(7,70747
7 7$7(7,70747
=,>0>|>
=,>0>|>
0>8>
0>8>
121c1/2`2
121c1/2`2
:":\:&;>;};
:":\:&;>;};
6 7$7(7,7074787
6 7$7(7,7074787
01
01
2$2*2/2?2
2$2*2/2?2
cmd /c
cmd /c
\Registry\Machine\Software\Policies\Microsoft\Windows\System
\Registry\Machine\Software\Policies\Microsoft\Windows\System
win.ini
win.ini
.Manifest
.Manifest
.Config
.Config
\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\WMR
\Registry\Machine\Software\Microsoft\Windows\Windows Error Reporting\WMR
\Windows
\Windows
hotkey.
hotkey.
Software\Microsoft\Windows NT\CurrentVersion\Windows
Software\Microsoft\Windows NT\CurrentVersion\Windows
sortdefault.nls
sortdefault.nls
\Registry\MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
\Registry\MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
windows seven
windows seven
windows vista
windows vista
\Software\Microsoft\Windows NT\CurrentVersion
\Software\Microsoft\Windows NT\CurrentVersion
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager\AppCertDlls
\Registry\MACHINE\System\CurrentControlSet\Control\Session Manager\AppCertDlls
\Registry\MACHINE\Software\Policies\Microsoft\Windows\AppCompat
\Registry\MACHINE\Software\Policies\Microsoft\Windows\AppCompat
\system32\apphelp.dll
\system32\apphelp.dll
InstallShield Self-extracting EXE
InstallShield Self-extracting EXE
Autoextractor EXE de InstallShield
Autoextractor EXE de InstallShield
hrbares Programm EXE
hrbares Programm EXE
PackageForTheWeb
PackageForTheWeb
PackageForTheWeb Fehler
PackageForTheWeb Fehler
PackageForTheWeb Error
PackageForTheWeb Error
Setup cannot start the program _Setup.exe
Setup cannot start the program _Setup.exe
Setup couldn't decompress the file '%s'.
Setup couldn't decompress the file '%s'.
\\.\MountPointManager
\\.\MountPointManager
\\?\UNC\
\\?\UNC\
ADVAPI32.DLL
ADVAPI32.DLL
\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
pNullsoft.NSIS
pNullsoft.NSIS
.Local
.Local
~RF%4x.TMP
~RF%4x.TMP
hotkey.%u %s
hotkey.%u %s
wowexec.pif
wowexec.pif
EmbdTrst.DLL
EmbdTrst.DLL
\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
csrstub.exe %d -P %ws
csrstub.exe %d -P %ws
WINDOWS
WINDOWS
hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings
hXXp://schemas.microsoft.com/SMI/2005/WindowsSettings
Application.Manifest
Application.Manifest
\\?\GLOBALROOT
\\?\GLOBALROOT
\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
\wmrtrace.dmp
\wmrtrace.dmp
DNSAPI.DLL
DNSAPI.DLL
"/\[]:| =;,?
"/\[]:| =;,?
\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters
\Registry\Machine\System\CurrentControlSet\Services\Tcpip\Parameters
\REGISTRY\USER\.DEFAULT
\REGISTRY\USER\.DEFAULT
AppCertDlls
AppCertDlls
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebugProtected\AutoExclusionList
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebugProtected\AutoExclusionList
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\AutoExclusionList
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\AutoExclusionList
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebugProtected
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebugProtected
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebug
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\AeDebug
pwinmail.exe
pwinmail.exe
wmplayer.exe
wmplayer.exe
outlook.exe
outlook.exe
explorer.exe
explorer.exe
iexplore.exe
iexplore.exe
ntsd.exe
ntsd.exe
cdb.exe
cdb.exe
windbg.exe
windbg.exe
PendingFileRenameOperations%d
PendingFileRenameOperations%d
PendingFileRenameOperations
PendingFileRenameOperations
%ws%u\DosDevices\%ws
%ws%u\DosDevices\%ws
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Compatibility\Applications\
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Compatibility\Applications\
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server
serialui.dll
serialui.dll
"%s\ntvdm.exe" %s%c
"%s\ntvdm.exe" %s%c
"%s\ntvdm.exe" -i%lx %s%c
"%s\ntvdm.exe" -i%lx %s%c
\KernelObjects\SystemErrorPortReady
\KernelObjects\SystemErrorPortReady
%systemroot%\system32\ntdll.dll
%systemroot%\system32\ntdll.dll
\\.\PhysicalDrive%lu
\\.\PhysicalDrive%lu
%s -u -p %d -s %I64d
%s -u -p %d -s %I64d
%s\%s
%s\%s
WerFault.exe
WerFault.exe
WerFaultSecure.exe
WerFaultSecure.exe
%s\system32\%s
%s\system32\%s
sntdll.dll
sntdll.dll
\Software\Microsoft\Windows\Windows Error Reporting\WMR
\Software\Microsoft\Windows\Windows Error Reporting\WMR
!"#$%&'()* ,
!"#$%&'()* ,
Windows NT BASE API Client DLL
Windows NT BASE API Client DLL
6.1.7601.17651 (win7sp1_gdr.110715-1504)
6.1.7601.17651 (win7sp1_gdr.110715-1504)
Windows
Windows
Operating System
Operating System
6.1.7601.17651
6.1.7601.17651
%original file name%.exe_1588_rwx_01B80000_000CA000:
tSSSh
tSSSh
=.cmd
=.cmd
=.pif
=.pif
=.lnk
=.lnk
=.com
=.com
=.bat
=.bat
6SSSSh
6SSSSh
USER32.dll
USER32.dll
ActivateKeyboardLayout
ActivateKeyboardLayout
ArrangeIconicWindows
ArrangeIconicWindows
CallMsgFilter
CallMsgFilter
CallMsgFilterA
CallMsgFilterA
CallMsgFilterW
CallMsgFilterW
CascadeChildWindows
CascadeChildWindows
CascadeWindows
CascadeWindows
CliImmSetHotKey
CliImmSetHotKey
CloseWindowStation
CloseWindowStation
CreateDialogIndirectParamA
CreateDialogIndirectParamA
CreateDialogIndirectParamAorW
CreateDialogIndirectParamAorW
CreateDialogIndirectParamW
CreateDialogIndirectParamW
CreateWindowStationA
CreateWindowStationA
CreateWindowStationW
CreateWindowStationW
DisableProcessWindowsGhosting
DisableProcessWindowsGhosting
DisplayExitWindowsWarnings
DisplayExitWindowsWarnings
EnumChildWindows
EnumChildWindows
EnumDesktopWindows
EnumDesktopWindows
EnumThreadWindows
EnumThreadWindows
EnumWindowStationsA
EnumWindowStationsA
EnumWindowStationsW
EnumWindowStationsW
EnumWindows
EnumWindows
ExitWindowsEx
ExitWindowsEx
GetAsyncKeyState
GetAsyncKeyState
GetKeyNameTextA
GetKeyNameTextA
GetKeyNameTextW
GetKeyNameTextW
GetKeyState
GetKeyState
GetKeyboardLayout
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyboardLayoutNameA
GetKeyboardLayoutNameW
GetKeyboardLayoutNameW
GetKeyboardState
GetKeyboardState
GetKeyboardType
GetKeyboardType
GetProcessWindowStation
GetProcessWindowStation
LoadKeyboardLayoutA
LoadKeyboardLayoutA
LoadKeyboardLayoutEx
LoadKeyboardLayoutEx
LoadKeyboardLayoutW
LoadKeyboardLayoutW
LockWindowStation
LockWindowStation
MapVirtualKeyA
MapVirtualKeyA
MapVirtualKeyExA
MapVirtualKeyExA
MapVirtualKeyExW
MapVirtualKeyExW
MapVirtualKeyW
MapVirtualKeyW
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjectsEx
OemKeyScan
OemKeyScan
OpenWindowStationA
OpenWindowStationA
OpenWindowStationW
OpenWindowStationW
RegisterErrorReportingDialog
RegisterErrorReportingDialog
RegisterHotKey
RegisterHotKey
RegisterSessionPort
RegisterSessionPort
SetKeyboardState
SetKeyboardState
SetProcessWindowStation
SetProcessWindowStation
SetWindowStationUser
SetWindowStationUser
SetWindowsHookA
SetWindowsHookA
SetWindowsHookExA
SetWindowsHookExA
SetWindowsHookExW
SetWindowsHookExW
SetWindowsHookW
SetWindowsHookW
SfmDxReportPendingBindingsToDwm
SfmDxReportPendingBindingsToDwm
TileChildWindows
TileChildWindows
TileWindows
TileWindows
UnhookWindowsHook
UnhookWindowsHook
UnhookWindowsHookEx
UnhookWindowsHookEx
UnloadKeyboardLayout
UnloadKeyboardLayout
UnlockWindowStation
UnlockWindowStation
UnregisterHotKey
UnregisterHotKey
UnregisterSessionPort
UnregisterSessionPort
VkKeyScanA
VkKeyScanA
VkKeyScanExA
VkKeyScanExA
VkKeyScanExW
VkKeyScanExW
VkKeyScanW
VkKeyScanW
WINNLSGetIMEHotkey
WINNLSGetIMEHotkey
keybd_event
keybd_event
CtfImmGetCompatibleKeyboardLayout
CtfImmGetCompatibleKeyboardLayout
CtfImmSetDefaultRemoteKeyboardLayout
CtfImmSetDefaultRemoteKeyboardLayout
ImmProcessKey
ImmProcessKey
vSSSSh
vSSSSh
tcPPWS
tcPPWS
PSShTK
PSShTK
PSSh0K
PSSh0K
F\ FTP
F\ FTP
~,SSSh
~,SSSh
*9]0t#SShH\
*9]0t#SShH\
t(SShW
t(SShW
PSShH
PSShH
ADVAPI32.dll
ADVAPI32.dll
CFGMGR32.dll
CFGMGR32.dll
MSIMG32.dll
MSIMG32.dll
POWRPROF.dll
POWRPROF.dll
WINSTA.dll
WINSTA.dll
ReportEventW
ReportEventW
CM_MapCrToWin32Err
CM_MapCrToWin32Err
KERNEL32.dll
KERNEL32.dll
GDI32.dll
GDI32.dll
ntdll.dll
ntdll.dll
RtlCheckRegistryKey
RtlCheckRegistryKey
NtYieldExecution
NtYieldExecution
NtCreateKey
NtCreateKey
NtSetValueKey
NtSetValueKey
NtDeleteValueKey
NtDeleteValueKey
NtEnumerateKey
NtEnumerateKey
NtOpenKey
NtOpenKey
NtQueryValueKey
NtQueryValueKey
GetViewportOrgEx
GetViewportOrgEx
SetViewportOrgEx
SetViewportOrgEx
GetViewportExtEx
GetViewportExtEx
GetCPInfo
GetCPInfo
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryW
RegOpenKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryInfoKeyW
RegCloseKey
RegCloseKey
RegCreateKeyExW
RegCreateKeyExW
RegDeleteKeyExW
RegDeleteKeyExW
user32.pdb
user32.pdb
windows.hlp
windows.hlp
n..GGHHH
n..GGHHH
n...GGHHH
n...GGHHH
n ....HGHHHH
n ....HGHHHH
n ....G.HHH
n ....G.HHH
~~~~{~{{{{
~~~~{~{{{{
n!! ....HGHHHH
n!! ....HGHHHH
n!! .....HHHHHH
n!! .....HHHHHH
!!! ....GGHHH
!!! ....GGHHH
!!"".....HHHHnv
!!"".....HHHHnv
"""...-.nv
"""...-.nv
%DvttxxxxxxxxxxkL
%DvttxxxxxxxxxxkL
&)-.CFDA86ANXYYUUUNna
&)-.CFDA86ANXYYUUUNna
$ .CC|
$ .CC|
**$**$*$)0
**$**$*$)0
' "$ $ *$'
' "$ $ *$'
8==???//3
8==???//3
9@==??
9@==??
,446666,,$
,446666,,$
"", ,',"!
"", ,',"!
jjk%xxy
jjk%xxy
jjk`jjk%xxy
jjk`jjk%xxy
>7;?__?;7>
>7;?__?;7>
%D=9;
%D=9;
.AG ,,H,a
.AG ,,H,a
$ $ $$ $*$'%
$ $ $$ $*$'%
.)***'***
.)***'***
FK;% %Sbd#
FK;% %Sbd#
\;0-0----1--1-//1?7|
\;0-0----1--1-//1?7|
=:640)0#
=:640)0#
=7:4##)4#
=7:4##)4#
=:440)0)##
=:440)0)##
7440)))4#"
7440)))4#"
?<:4404>
?<:4404>
7:4)44)))#""!!
7:4)44)))#""!!
=<:744744>
=<:744744>
=
=
=
=
=
=
")355886''
")355886''
.ziw ~y
.ziw ~y
@@@{9998
@@@{9998
wtUUeUQ3"%U
wtUUeUQ3"%U
wwtUUUe@B%UU
wwtUUUe@B%UU
4W5X5
4W5X5
6B8N8T8‘9S9b9h9
6B8N8T8‘9S9b9h9
8Â8W8^8q8
8Â8W8^8q8
0 5&53595e6
0 5&53595e6
3,343^3~3
3,343^3~3
csrsrv.dll
csrsrv.dll
\Registry\Machine\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3
\Registry\Machine\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3
\Registry\Machine\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3
\Registry\Machine\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3
kbdus.dll
kbdus.dll
Keyboard Layout\Preload
Keyboard Layout\Preload
\Registry\Machine\System\CurrentControlSet\Control\Keyboard Layouts\
\Registry\Machine\System\CurrentControlSet\Control\Keyboard Layouts\
Control Panel\Input Method\Hot Keys
Control Panel\Input Method\Hot Keys
Virtual Key
Virtual Key
Key Modifiers
Key Modifiers
keyboardlayout.ini
keyboardlayout.ini
imm32.dll
imm32.dll
Software\Policies\Microsoft\Windows NT\Reliability
Software\Policies\Microsoft\Windows NT\Reliability
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Windows
\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Media Center\
\Registry\Machine\Software\Microsoft\Windows\CurrentVersion\Media Center\
\Registry\Machine\Software\Microsoft\Windows\Tablet PC\
\Registry\Machine\Software\Microsoft\Windows\Tablet PC\
POWRPROF.DLL
POWRPROF.DLL
\Windows\WindowStations
\Windows\WindowStations
\Windows
\Windows
IMM32.DLL
IMM32.DLL
&%d %ws
&%d %ws
\Registry\Machine\System\CurrentControlSet\Control\Keyboard Layout\
\Registry\Machine\System\CurrentControlSet\Control\Keyboard Layout\
IgnoreRemoteKeyboardLayout
IgnoreRemoteKeyboardLayout
Keyboard Layout
Keyboard Layout
kbdkor.dll
kbdkor.dll
kbdjpn.dll
kbdjpn.dll
\Registry\Machine\System\CurrentControlSet\Control\Keyboard Layout
\Registry\Machine\System\CurrentControlSet\Control\Keyboard Layout
\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3
\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates\2BD63D28D7BCD0E251195AEB519243C13142EBC3
Hot Keys
Hot Keys
00000409
00000409
\winhlp32.exe
\winhlp32.exe
x:\...\
x:\...\
OLE32.DLL
OLE32.DLL
%SystemRoot%\System32\user32.dll
%SystemRoot%\System32\user32.dll
%s\%d
%s\%d
Software\Microsoft\Windows\CurrentVersion\Reliability
Software\Microsoft\Windows\CurrentVersion\Reliability
hh.exe
hh.exe
indicdll.dll
indicdll.dll
Multi-User Windows USER API Client DLL
Multi-User Windows USER API Client DLL
6.1.7601.17514 (win7sp1_rtm.101119-1850)
6.1.7601.17514 (win7sp1_rtm.101119-1850)
Windows
Windows
Operating System
Operating System
6.1.7601.17514
6.1.7601.17514
%original file name%.exe_1588_rwx_01C50000_000A1000:
mpr.dll
mpr.dll
ldap_msgfree
ldap_msgfree
1.2.840.113556.1.4.529
1.2.840.113556.1.4.529
wldap32.dll
wldap32.dll
PSSShd%KvS
PSSShd%KvS
%X0Qv
%X0Qv
ÃQv
ÃQv
h0.Kv
h0.Kv
ADVAPI32.dll
ADVAPI32.dll
CryptDeriveKey
CryptDeriveKey
CryptDestroyKey
CryptDestroyKey
CryptDuplicateKey
CryptDuplicateKey
CryptExportKey
CryptExportKey
CryptGenKey
CryptGenKey
CryptGetKeyParam
CryptGetKeyParam
CryptGetUserKey
CryptGetUserKey
CryptHashSessionKey
CryptHashSessionKey
CryptImportKey
CryptImportKey
CryptSetKeyParam
CryptSetKeyParam
ElfReportEventA
ElfReportEventA
ElfReportEventAndSourceW
ElfReportEventAndSourceW
ElfReportEventW
ElfReportEventW
EncryptedFileKeyInfo
EncryptedFileKeyInfo
FreeEncryptedFileKeyInfo
FreeEncryptedFileKeyInfo
FreeEncryptionCertificateHashList
FreeEncryptionCertificateHashList
GetEventLogInformation
GetEventLogInformation
GetMultipleTrusteeOperationA
GetMultipleTrusteeOperationA
GetMultipleTrusteeOperationW
GetMultipleTrusteeOperationW
GetServiceKeyNameA
GetServiceKeyNameA
GetServiceKeyNameW
GetServiceKeyNameW
GetWindowsAccountDomainSid
GetWindowsAccountDomainSid
ImpersonateNamedPipeClient
ImpersonateNamedPipeClient
LogonUserExExW
LogonUserExExW
MSChapSrvChangePassword
MSChapSrvChangePassword
MSChapSrvChangePassword2
MSChapSrvChangePassword2
RegCloseKey
RegCloseKey
RegCreateKeyA
RegCreateKeyA
RegCreateKeyExA
RegCreateKeyExA
RegCreateKeyExW
RegCreateKeyExW
RegCreateKeyTransactedA
RegCreateKeyTransactedA
RegCreateKeyTransactedW
RegCreateKeyTransactedW
RegCreateKeyW
RegCreateKeyW
RegDeleteKeyA
RegDeleteKeyA
RegDeleteKeyExA
RegDeleteKeyExA
RegDeleteKeyExW
RegDeleteKeyExW
RegDeleteKeyTransactedA
RegDeleteKeyTransactedA
RegDeleteKeyTransactedW
RegDeleteKeyTransactedW
RegDeleteKeyValueA
RegDeleteKeyValueA
RegDeleteKeyValueW
RegDeleteKeyValueW
RegDeleteKeyW
RegDeleteKeyW
RegDisableReflectionKey
RegDisableReflectionKey
RegEnableReflectionKey
RegEnableReflectionKey
RegEnumKeyA
RegEnumKeyA
RegEnumKeyExA
RegEnumKeyExA
RegEnumKeyExW
RegEnumKeyExW
RegEnumKeyW
RegEnumKeyW
RegFlushKey
RegFlushKey
RegGetKeySecurity
RegGetKeySecurity
RegLoadAppKeyA
RegLoadAppKeyA
RegLoadAppKeyW
RegLoadAppKeyW
RegLoadKeyA
RegLoadKeyA
RegLoadKeyW
RegLoadKeyW
RegNotifyChangeKeyValue
RegNotifyChangeKeyValue
RegOpenKeyA
RegOpenKeyA
RegOpenKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyExW
RegOpenKeyTransactedA
RegOpenKeyTransactedA
RegOpenKeyTransactedW
RegOpenKeyTransactedW
RegOpenKeyW
RegOpenKeyW
RegOverridePredefKey
RegOverridePredefKey
RegQueryInfoKeyA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegQueryInfoKeyW
RegQueryReflectionKey
RegQueryReflectionKey
RegRenameKey
RegRenameKey
RegReplaceKeyA
RegReplaceKeyA
RegReplaceKeyW
RegReplaceKeyW
RegRestoreKeyA
RegRestoreKeyA
RegRestoreKeyW
RegRestoreKeyW
RegSaveKeyA
RegSaveKeyA
RegSaveKeyExA
RegSaveKeyExA
RegSaveKeyExW
RegSaveKeyExW
RegSaveKeyW
RegSaveKeyW
RegSetKeySecurity
RegSetKeySecurity
RegSetKeyValueA
RegSetKeyValueA
RegSetKeyValueW
RegSetKeyValueW
RegUnLoadKeyA
RegUnLoadKeyA
RegUnLoadKeyW
RegUnLoadKeyW
ReportEventA
ReportEventA
ReportEventW
ReportEventW
SaferiIsExecutableFileType
SaferiIsExecutableFileType
SetUserFileEncryptionKey
SetUserFileEncryptionKey
SetUserFileEncryptionKeyEx
SetUserFileEncryptionKeyEx
WmiExecuteMethodA
WmiExecuteMethodA
WmiExecuteMethodW
WmiExecuteMethodW
KERNELBASE.AddMandatoryAce
KERNELBASE.AddMandatoryAce
ntdll.EtwCreateTraceInstanceId
ntdll.EtwCreateTraceInstanceId
ntdll.EtwEventActivityIdControl
ntdll.EtwEventActivityIdControl
ntdll.EtwEventEnabled
ntdll.EtwEventEnabled
ntdll.EtwEventProviderEnabled
ntdll.EtwEventProviderEnabled
ntdll.EtwEventRegister
ntdll.EtwEventRegister
ntdll.EtwEventUnregister
ntdll.EtwEventUnregister
ntdll.EtwEventWrite
ntdll.EtwEventWrite
ntdll.EtwEventWriteEndScenario
ntdll.EtwEventWriteEndScenario
ntdll.EtwEventWriteStartScenario
ntdll.EtwEventWriteStartScenario
ntdll.EtwEventWriteString
ntdll.EtwEventWriteString
ntdll.EtwEventWriteTransfer
ntdll.EtwEventWriteTransfer
ntdll.EtwGetTraceEnableFlags
ntdll.EtwGetTraceEnableFlags
ntdll.EtwGetTraceEnableLevel
ntdll.EtwGetTraceEnableLevel
ntdll.EtwGetTraceLoggerHandle
ntdll.EtwGetTraceLoggerHandle
KERNELBASE.IsValidRelativeSecurityDescriptor
KERNELBASE.IsValidRelativeSecurityDescriptor
NTDLL.MD4Final
NTDLL.MD4Final
NTDLL.MD4Init
NTDLL.MD4Init
NTDLL.MD4Update
NTDLL.MD4Update
NTDLL.MD5Final
NTDLL.MD5Final
NTDLL.MD5Init
NTDLL.MD5Init
NTDLL.MD5Update
NTDLL.MD5Update
pcwum.PerfCreateInstance
pcwum.PerfCreateInstance
pcwum.PerfDecrementULongCounterValue
pcwum.PerfDecrementULongCounterValue
pcwum.PerfDecrementULongLongCounterValue
pcwum.PerfDecrementULongLongCounterValue
pcwum.PerfDeleteInstance
pcwum.PerfDeleteInstance
pcwum.PerfIncrementULongCounterValue
pcwum.PerfIncrementULongCounterValue
pcwum.PerfIncrementULongLongCounterValue
pcwum.PerfIncrementULongLongCounterValue
pcwum.PerfQueryInstance
pcwum.PerfQueryInstance
pcwum.PerfSetCounterRefValue
pcwum.PerfSetCounterRefValue
pcwum.PerfSetCounterSetInfo
pcwum.PerfSetCounterSetInfo
pcwum.PerfSetULongCounterValue
pcwum.PerfSetULongCounterValue
pcwum.PerfSetULongLongCounterValue
pcwum.PerfSetULongLongCounterValue
pcwum.PerfStartProvider
pcwum.PerfStartProvider
pcwum.PerfStartProviderEx
pcwum.PerfStartProviderEx
pcwum.PerfStopProvider
pcwum.PerfStopProvider
ntdll.EtwRegisterTraceGuidsA
ntdll.EtwRegisterTraceGuidsA
ntdll.EtwRegisterTraceGuidsW
ntdll.EtwRegisterTraceGuidsW
CRYPTSP.CheckSignatureInFile
CRYPTSP.CheckSignatureInFile
ntdll.EtwLogTraceEvent
ntdll.EtwLogTraceEvent
ntdll.EtwTraceEventInstance
ntdll.EtwTraceEventInstance
ntdll.EtwTraceMessage
ntdll.EtwTraceMessage
ntdll.EtwTraceMessageVa
ntdll.EtwTraceMessageVa
ntdll.EtwUnregisterTraceGuids
ntdll.EtwUnregisterTraceGuids
\[%D@
\[%D@
6666666
6666666
U.Mvf.Mv
U.Mvf.Mv
PSSSSSSh
PSSSSSSh
PSSSSSSh#
PSSSSSSh#
PSSSSSSh
PSSSSSSh
PSSSSSSh
PSSSSSSh
(PSSSSSSh
(PSSSSSSh
0PSSSSSSh
0PSSSSSSh
8PSSSSSSh
8PSSSSSSh
v(SSSSSSh
v(SSSSSSh
PSSSSSSh!
PSSSSSSh!
ÙQv
ÙQv
d:\w7rtm\minkernel\screg\winreg\perflib\manifest.c
d:\w7rtm\minkernel\screg\winreg\perflib\manifest.c
ÃQv
ÃQv
CloseWindowStation
CloseWindowStation
GetProcessWindowStation
GetProcessWindowStation
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
d:\w7rtm\minkernel\screg\winreg\perflib\extinit.c
d:\w7rtm\minkernel\screg\winreg\perflib\extinit.c
d:\w7rtm\minkernel\screg\winreg\perflib\utils.c
d:\w7rtm\minkernel\screg\winreg\perflib\utils.c
d:\w7rtm\minkernel\screg\winreg\perflib\perflib.c
d:\w7rtm\minkernel\screg\winreg\perflib\perflib.c
d:\w7rtm\minkernel\screg\winreg\perflib\extquery.c
d:\w7rtm\minkernel\screg\winreg\perflib\extquery.c
d:\w7rtm\minkernel\screg\winreg\perflib\perfname.c
d:\w7rtm\minkernel\screg\winreg\perflib\perfname.c
d:\w7rtm\minkernel\screg\winreg\perflib\migrate.c
d:\w7rtm\minkernel\screg\winreg\perflib\migrate.c
TermsrvSetKeySecurity
TermsrvSetKeySecurity
TermsrvRestoreKey
TermsrvRestoreKey
TermsrvDeleteKey
TermsrvDeleteKey
TermsrvSetValueKey
TermsrvSetValueKey
tsappcmp.dll
tsappcmp.dll
%xWQv
%xWQv
d:\w7rtm\minkernel\screg\winreg\regbase\perflibc.c
d:\w7rtm\minkernel\screg\winreg\regbase\perflibc.c
d:\w7rtm\minkernel\screg\winreg\perflib\perflibc.c
d:\w7rtm\minkernel\screg\winreg\perflib\perflibc.c
d:\w7rtm\minkernel\screg\winreg\perflib\pcwconsumer.c
d:\w7rtm\minkernel\screg\winreg\perflib\pcwconsumer.c
Unable to locate init routine, error = %d
Unable to locate init routine, error = %d
Unable to load client dll, error = %d
Unable to load client dll, error = %d
SamiChangePasswordUser2
SamiChangePasswordUser2
SamiChangePasswordUser
SamiChangePasswordUser
%x0Qv
%x0Qv
ShellExecuteExW
ShellExecuteExW
PSSShd%Kvh
PSSShd%Kvh
9.OvG.Ov
9.OvG.Ov
AccProvGetOperationResults
AccProvGetOperationResults
AccProvCancelOperation
AccProvCancelOperation
SetupDiOpenDevRegKey
SetupDiOpenDevRegKey
WSShP
WSShP
u%9x$u/9p
u%9x$u/9p
CRYPTSP.dll
CRYPTSP.dll
WINTRUST.dll
WINTRUST.dll
SspiCli.dll
SspiCli.dll
USER32.dll
USER32.dll
bcrypt.dll
bcrypt.dll
API-MS-Win-Security-LSALookup-L1-1-0.dll
API-MS-Win-Security-LSALookup-L1-1-0.dll
pcwum.dll
pcwum.dll
SetProcessWindowStation
SetProcessWindowStation
RPCRT4.dll
RPCRT4.dll
KERNEL32.dll
KERNEL32.dll
API-MS-Win-Security-Base-L1-1-0.dll
API-MS-Win-Security-Base-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
API-MS-Win-Core-NamedPipe-L1-1-0.dll
API-MS-Win-Core-NamedPipe-L1-1-0.dll
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
API-MS-WIN-Service-Management-L2-1-0.dll
API-MS-WIN-Service-Management-L2-1-0.dll
API-MS-WIN-Service-Management-L1-1-0.dll
API-MS-WIN-Service-Management-L1-1-0.dll
API-MS-WIN-Service-winsvc-L1-1-0.dll
API-MS-WIN-Service-winsvc-L1-1-0.dll
API-MS-WIN-Service-Core-L1-1-0.dll
API-MS-WIN-Service-Core-L1-1-0.dll
KERNELBASE.dll
KERNELBASE.dll
ntdll.dll
ntdll.dll
msvcrt.dll
msvcrt.dll
RtlRunOnceExecuteOnce
RtlRunOnceExecuteOnce
NtOpenKey
NtOpenKey
NtQueryValueKey
NtQueryValueKey
NtQueryKey
NtQueryKey
NtCreateKey
NtCreateKey
NtSetValueKey
NtSetValueKey
NtDeleteKey
NtDeleteKey
NtEnumerateKey
NtEnumerateKey
RtlFormatCurrentUserKeyPath
RtlFormatCurrentUserKeyPath
NtDelayExecution
NtDelayExecution
EtwpGetCpuSpeed
EtwpGetCpuSpeed
NtRenameKey
NtRenameKey
NtLoadKeyEx
NtLoadKeyEx
NtCreateKeyTransacted
NtCreateKeyTransacted
NtOpenKeyTransacted
NtOpenKeyTransacted
NtQueryMultipleValueKey
NtQueryMultipleValueKey
NtOpenKeyEx
NtOpenKeyEx
NtOpenKeyTransactedEx
NtOpenKeyTransactedEx
NtReplaceKey
NtReplaceKey
NtSaveKey
NtSaveKey
NtSaveMergedKeys
NtSaveMergedKeys
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryW
GetProcessHeap
GetProcessHeap
advapi32.pdb
advapi32.pdb
yJv.VNv'
yJv.VNv'
KEYWt
KEYWt
KEYWX
KEYWX
KEYW
KEYW
KEYWp
KEYWp
KEYWD
KEYWD
KEYWL
KEYWL
KEYW,
KEYW,
2$3(30343
2$3(30343
2 2&212>2
2 2&212>2
8Â8C8P8X8
8Â8C8P8X8
7$7,727=7
7$7,727=7
3&4/454:4
3&4/454:4
4(6,60646
4(6,60646
>$?(?4?\?
>$?(?4?\?
5%6U6n7
5%6U6n7
4 42474^4
4 42474^4
=_>
=_>
1$2(20242
1$2(20242
; ;$;,;0;
; ;$;,;0;
20252[2`2
20252[2`2
7Ÿ9
7Ÿ9
1 2$2(2,2
1 2$2(2,2
%s\u
%s\u
x-x-x-xx-xxxxxx
x-x-x-xx-xxxxxx
\PIPE\
\PIPE\
cryptbase.dll
cryptbase.dll
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
Windows NT Network Provider
Windows NT Network Provider
\\.\WMIDataDevice
\\.\WMIDataDevice
lX-X-X-XX-XXXXXX
lX-X-X-XX-XXXXXX
Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
\Registry\Machine\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
%HKEY_LOCAL_MACHINE
%HKEY_LOCAL_MACHINE
%HKEY_CURRENT_USER
%HKEY_CURRENT_USER
\Registry\Machine\Software\Policies\Microsoft\Windows\Safer
\Registry\Machine\Software\Policies\Microsoft\Windows\Safer
\Software\Policies\Microsoft\Windows\Safer
\Software\Policies\Microsoft\Windows\Safer
\UrlZones
\UrlZones
\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
ncacn_ip_tcp
ncacn_ip_tcp
nrpcrt4.dll
nrpcrt4.dll
%SystemRoot%\
%SystemRoot%\
%SystemRoot%\System32\Drivers\
%SystemRoot%\System32\Drivers\
user32.dll
user32.dll
msiltcfg.dll
msiltcfg.dll
Software\Microsoft\Windows\CurrentVersion\Group Policy\Appmgmt
Software\Microsoft\Windows\CurrentVersion\Group Policy\Appmgmt
Export
Export
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
\SystemRoot\system32\perf0000.dat
\SystemRoot\system32\perf0000.dat
%SystemRoot%\Debug\UserMode\appmgmt.bak
%SystemRoot%\Debug\UserMode\appmgmt.bak
APPMGMT (%x.%x) d:d:d:d
APPMGMT (%x.%x) d:d:d:d
%s%s%d%s%s%s%s%s%s%s{lx-x-x-xx-xxxxxx}
%s%s%d%s%s%s%s%s%s%s{lx-x-x-xx-xxxxxx}
certificate
certificate
PerfDbg.Etl
PerfDbg.Etl
C:\perfdbg.etl
C:\perfdbg.etl
$winnt$.inf
$winnt$.inf
\SystemRoot\system32\prf00000.dat
\SystemRoot\system32\prf00000.dat
127.0.0.1
127.0.0.1
{lx-x-x-xx-xxxxxx}
{lx-x-x-xx-xxxxxx}
UrlZones
UrlZones
DisallowExecution
DisallowExecution
setupapi.dll
setupapi.dll
advapi32.dll
advapi32.dll
iphlpapi.dll
iphlpapi.dll
\PIPE\winreg
\PIPE\winreg
perfh016.dat
perfh016.dat
perfc016.dat
perfc016.dat
perfh004.dat
perfh004.dat
perfc004.dat
perfc004.dat
feclient.dll
feclient.dll
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Compatibility\Applications\
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Compatibility\Applications\
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server
\Registry\Machine\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server
samlib.dll
samlib.dll
LsarpcClientAllowRemotedSecretOperations
LsarpcClientAllowRemotedSecretOperations
SupportUrl
SupportUrl
Wshell32.dll
Wshell32.dll
CEvents::Report called with more params then expected!
CEvents::Report called with more params then expected!
8c7daf44-b6dc-11d1-9a4c-0020af6e7c57
8c7daf44-b6dc-11d1-9a4c-0020af6e7c57
%SystemRoot%\Debug\UserMode\appmgmt.log
%SystemRoot%\Debug\UserMode\appmgmt.log
{x-x-x-xx-xxxxxx}
{x-x-x-xx-xxxxxx}
\Device\Video%d
\Device\Video%d
WHardwareInformation.BiosString
WHardwareInformation.BiosString
HardwareInformation.AdapterString
HardwareInformation.AdapterString
HardwareInformation.DacType
HardwareInformation.DacType
HardwareInformation.ChipType
HardwareInformation.ChipType
HardwareInformation.MemorySize
HardwareInformation.MemorySize
\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
\Device\Harddisk%u\Partition0
\Device\Harddisk%u\Partition0
\\.\%s
\\.\%s
Target%d
Target%d
WindowsShutdown
WindowsShutdown
765294BA-60BC-48B8-92E9-89FD77769D91
765294BA-60BC-48B8-92E9-89FD77769D91
ws2_32.dll
ws2_32.dll
NOT_TCPIP
NOT_TCPIP
%ws\%ws.tmp
%ws\%ws.tmp
ncacn_nb_tcp
ncacn_nb_tcp
\PIPE\InitShutdown
\PIPE\InitShutdown
Advanced Windows 32 Base API
Advanced Windows 32 Base API
6.1.7601.17514 (win7sp1_rtm.101119-1850)
6.1.7601.17514 (win7sp1_rtm.101119-1850)
Windows
Windows
Operating System
Operating System
6.1.7601.17514
6.1.7601.17514
Microsoft-Windows-Kernel-WDI/Analytic
Microsoft-Windows-Kernel-WDI/Analytic
Microsoft-Windows-Kernel-WDI/Debug
Microsoft-Windows-Kernel-WDI/Debug
Microsoft-Windows-Kernel-WDI/Operational
Microsoft-Windows-Kernel-WDI/Operational
Keyword
Keyword
KERNEL_GENERAL_KEYWORD_TIME
KERNEL_GENERAL_KEYWORD_TIME
Microsoft-Windows-Kernel-Process/Analytic
Microsoft-Windows-Kernel-Process/Analytic
ReadOperationCount
ReadOperationCount
WriteOperationCount
WriteOperationCount
WINEVENT_KEYWORD_PROCESS
WINEVENT_KEYWORD_PROCESS
WINEVENT_KEYWORD_THREAD
WINEVENT_KEYWORD_THREAD
WINEVENT_KEYWORD_IMAGE
WINEVENT_KEYWORD_IMAGE
WINEVENT_KEYWORD_CPU_PRIORITY
WINEVENT_KEYWORD_CPU_PRIORITY
WINEVENT_KEYWORD_OTHER_PRIORITY
WINEVENT_KEYWORD_OTHER_PRIORITY
Microsoft-Windows-Kernel-Registry/Analytic
Microsoft-Windows-Kernel-Registry/Analytic
KeyObject
KeyObject
KeyName
KeyName
CreateKey
CreateKey
OpenKey
OpenKey
DeleteKey
DeleteKey
QueryKey
QueryKey
SetValueKey
SetValueKey
DeleteValueKey
DeleteValueKey
QueryValueKey
QueryValueKey
EnumerateKey
EnumerateKey
EnumerateValueKey
EnumerateValueKey
QueryMultipleValueKey
QueryMultipleValueKey
SetInformationKey
SetInformationKey
FlushKey
FlushKey
CloseKey
CloseKey
QuerySecurityKey
QuerySecurityKey
SetSecurityKey
SetSecurityKey
Microsoft-Windows-Kernel-PnP/Diagnostic
Microsoft-Windows-Kernel-PnP/Diagnostic
Pnp:DpReplace.ExtendedStatusMap
Pnp:DpReplace.ExtendedStatusMap
SqmWindowsSessionId
SqmWindowsSessionId
Microsoft-Windows-Kernel-Acpi/Diagnostic
Microsoft-Windows-Kernel-Acpi/Diagnostic
Microsoft-Windows-International/Operational
Microsoft-Windows-International/Operational
RegistryKey
RegistryKey
Operation
Operation
Microsoft-Windows-User-Loader/Analytic
Microsoft-Windows-User-Loader/Analytic
USER_LOADER_KEYWORD_DEPRECATED_DLL
USER_LOADER_KEYWORD_DEPRECATED_DLL
Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic
Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic
Microsoft-Windows-Kernel-Prefetch/Diagnostic
Microsoft-Windows-Kernel-Prefetch/Diagnostic
Microsoft-Windows-UAC/Operational
Microsoft-Windows-UAC/Operational
Microsoft-Windows-COM/Analytic
Microsoft-Windows-COM/Analytic
/hXXp://schemas.microsoft.com/win/2004/08/events
/hXXp://schemas.microsoft.com/win/2004/08/events
DhXXp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0
DhXXp://schemas.microsoft.com/schemas/event/Microsoft.Windows/1.0.0.0
Microsoft-Windows-MUI/Operational
Microsoft-Windows-MUI/Operational
Microsoft-Windows-MUI/Admin
Microsoft-Windows-MUI/Admin
Microsoft-Windows-MUI/Analytic
Microsoft-Windows-MUI/Analytic
Microsoft-Windows-MUI/Debug
Microsoft-Windows-MUI/Debug
Microsoft-Windows-Kernel-Network/Analytic
Microsoft-Windows-Kernel-Network/Analytic
dport
dport
sport
sport
KERNEL_NETWORK_OPCODE_TCPCOPY
KERNEL_NETWORK_OPCODE_TCPCOPY
KERNEL_NETWORK_OPCODE_SENDUDP
KERNEL_NETWORK_OPCODE_SENDUDP
KERNEL_NETWORK_OPCODE_RECVUDP
KERNEL_NETWORK_OPCODE_RECVUDP
KERNEL_NETWORK_OPCODE_FAILUDP
KERNEL_NETWORK_OPCODE_FAILUDP
KERNEL_NETWORK_TASK_TCPIP
KERNEL_NETWORK_TASK_TCPIP
KERNEL_NETWORK_TASK_UDPIP
KERNEL_NETWORK_TASK_UDPIP
KERNEL_NETWORK_KEYWORD_IPV4
KERNEL_NETWORK_KEYWORD_IPV4
KERNEL_NETWORK_KEYWORD_IPV6
KERNEL_NETWORK_KEYWORD_IPV6
Microsoft-Windows-Kernel-Disk/Analytic
Microsoft-Windows-Kernel-Disk/Analytic
Microsoft-Windows-Kernel-EventTracing/Admin
Microsoft-Windows-Kernel-EventTracing/Admin
Microsoft-Windows-Kernel-EventTracing/Analytic
Microsoft-Windows-Kernel-EventTracing/Analytic
ETW_KEYWORD_SESSION
ETW_KEYWORD_SESSION
ETW_KEYWORD_PROVIDER
ETW_KEYWORD_PROVIDER
Microsoft-Windows-Kernel-Boot/Analytic
Microsoft-Windows-Kernel-Boot/Analytic
Microsoft-Windows-Kernel-File/Analytic
Microsoft-Windows-Kernel-File/Analytic
FileKey
FileKey
OperationEnd
OperationEnd
KERNEL_FILE_KEYWORD_FILENAME
KERNEL_FILE_KEYWORD_FILENAME
KERNEL_FILE_KEYWORD_FILEIO
KERNEL_FILE_KEYWORD_FILEIO
KERNEL_FILE_KEYWORD_OP_END
KERNEL_FILE_KEYWORD_OP_END
KERNEL_FILE_KEYWORD_CREATE
KERNEL_FILE_KEYWORD_CREATE
KERNEL_FILE_KEYWORD_READ
KERNEL_FILE_KEYWORD_READ
KERNEL_FILE_KEYWORD_WRITE
KERNEL_FILE_KEYWORD_WRITE
KERNEL_FILE_KEYWORD_DELETE_PATH
KERNEL_FILE_KEYWORD_DELETE_PATH
KERNEL_FILE_KEYWORD_RENAME_SETLINK_PATH
KERNEL_FILE_KEYWORD_RENAME_SETLINK_PATH
KERNEL_FILE_KEYWORD_CREATE_NEW_FILE
KERNEL_FILE_KEYWORD_CREATE_NEW_FILE
Microsoft-Windows-PCI/Diagnostic
Microsoft-Windows-PCI/Diagnostic
Microsoft-Windows-Kernel-StoreMgr/Analytic
Microsoft-Windows-Kernel-StoreMgr/Analytic
Microsoft-Windows-Kernel-StoreMgr/Operational
Microsoft-Windows-Kernel-StoreMgr/Operational
CacheTerminationMsgMap
CacheTerminationMsgMap
StoreMgrCorruptPageMsgMap
StoreMgrCorruptPageMsgMap
DataKey
DataKey
StoreKey
StoreKey
StoreFileKey
StoreFileKey
Microsoft-Windows-Kernel-Memory/Analytic
Microsoft-Windows-Kernel-Memory/Analytic
KERNEL_MEM_KEYWORD_MEMINFO
KERNEL_MEM_KEYWORD_MEMINFO