Packer.Enigma.1 (B) (Emsisoft), Packer.Enigma.1 (AdAware), Trojan.Win32.Delphi.FD, Trojan.Win32.Sasfis.FD, VirTool.Win32.DelfInject.FD, GenericPhysicalDrive0.YR (Lavasoft MAS)Behaviour: Trojan, VirTool
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: a02f6ad12aa8b5fffb0341a870b62827
SHA1: a4002cec6d03df248685811b84096696d153d98f
SHA256: 2f991b82cd172a13141627967aa999504411aeee7cc6bdc5a7c0a17b621b15d4
SSDeep: 24576:zXpH4qdVFIhwPuGSJHoqtk FonXyerLxI/RjX03LjgTk/HAoNv:FpdVIsykDXJrLGBRyHA
Size: 1218560 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6, BorlandDelphi30, ACProtect141
Company: no certificate found
Created at: 2016-06-17 14:34:13
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Packer creates the following process(es):No processes have been created.The Packer injects its code into the following process(es):
%original file name%.exe:840
Mutexes
The following mutexes were created/opened:
ShimCacheMutex
File activity
The process %original file name%.exe:840 makes changes in the file system.
The Packer creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\evb2.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\evb1.tmp (1 bytes)
Registry activity
The process %original file name%.exe:840 makes changes in the system registry.
The Packer creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "35 FF 43 92 7A DD 38 C6 E2 93 F0 A2 F6 FE B2 B9"
Dropped PE files
MD5 | File path |
---|---|
4da38dcda60385e10c9c2d12df67c278 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\evb1.tmp |
4da38dcda60385e10c9c2d12df67c278 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\evb2.tmp |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
- Delete the original Packer file.
- Delete or disinfect the following files created/modified by the Packer:
%Documents and Settings%\%current user%\Local Settings\Temp\evb2.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\evb1.tmp (1 bytes) - Reboot the computer.
Static Analysis
VersionInfo
Company Name:
Product Name: LuMianDan
Product Version: 1.0.0.0
Legal Copyright: Copyright (c) 2015
Legal Trademarks:
Original Filename: RT???? v2.4.7.exe
Internal Name: RT???? v2.4.7.exe
File Version: 1.0.0.0
File Description: LuMianDan
Comments:
Language: English (United States)
Company Name: Product Name: LuMianDanProduct Version: 1.0.0.0Legal Copyright: Copyright (c) 2015Legal Trademarks: Original Filename: RT???? v2.4.7.exeInternal Name: RT???? v2.4.7.exeFile Version: 1.0.0.0File Description: LuMianDanComments: Language: English (United States)
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
8192 | 360448 | 113664 | 5.54372 | 11292716f48e56c44d7716cf6288d208 | |
368640 | 16384 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e | |
385024 | 8192 | 512 | 0.211627 | 469c9d2da49f4547d4a0c8049051f0a2 | |
.rsrc | 393216 | 16384 | 11264 | 4.40057 | a7650dba0c73d08876737b296a123b3e |
409600 | 2613248 | 210944 | 5.54345 | a7262ea941e444eb95c16f967f6f9439 | |
.data | 3022848 | 884736 | 881152 | 5.53588 | c983283446fa68802c825e03a85cc8e7 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Packer connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_840_rwx_00402000_00057000:
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
fSystem.Drawing.Icon, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aBj
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Icon
System.Drawing.Icon
System.Drawing.Size
System.Drawing.Size
v4.0.30319
v4.0.30319
v2.4.7.exe
v2.4.7.exe
LuMianDan.Util
LuMianDan.Util
LuMianDan.Properties
LuMianDan.Properties
LoginParam
LoginParam
HttpWebResponseUtility
HttpWebResponseUtility
TKeyCountries
TKeyCountries
TKeyInformation
TKeyInformation
HttpUtil
HttpUtil
System.Windows.Forms
System.Windows.Forms
System.Configuration
System.Configuration
.ctor
.ctor
mykey
mykey
get_Key
get_Key
set_Key
set_Key
password
password
get_Password
get_Password
set_Password
set_Password
checkCodeUrl
checkCodeUrl
get_CheckCodeUrl
get_CheckCodeUrl
set_CheckCodeUrl
set_CheckCodeUrl
appkey
appkey
get_Appkey
get_Appkey
set_Appkey
set_Appkey
ifLoginSuccess
ifLoginSuccess
get_IfLoginSuccess
get_IfLoginSuccess
set_IfLoginSuccess
set_IfLoginSuccess
smsPostUrl
smsPostUrl
get_SmsPostUrl
get_SmsPostUrl
set_SmsPostUrl
set_SmsPostUrl
_w_tb_nick
_w_tb_nick
get_W_tb_nick
get_W_tb_nick
set_W_tb_nick
set_W_tb_nick
loginTime
loginTime
get_LoginTime
get_LoginTime
set_LoginTime
set_LoginTime
needLogin
needLogin
get_NeedLogin
get_NeedLogin
set_NeedLogin
set_NeedLogin
appsecertForGw
appsecertForGw
get_AppsecertForGw
get_AppsecertForGw
set_AppsecertForGw
set_AppsecertForGw
Password
Password
CheckCodeUrl
CheckCodeUrl
Appkey
Appkey
IfLoginSuccess
IfLoginSuccess
SmsPostUrl
SmsPostUrl
W_tb_nick
W_tb_nick
LoginTime
LoginTime
NeedLogin
NeedLogin
AppsecertForGw
AppsecertForGw
System.Collections.Generic
System.Collections.Generic
System.Data
System.Data
ifApassUser
ifApassUser
buildOrderUrl
buildOrderUrl
result_next_url
result_next_url
HttpHelper
HttpHelper
CsharpHttpHelper
CsharpHttpHelper
HttpItem
HttpItem
http2
http2
HttpResult
HttpResult
ifH5Login
ifH5Login
ifApiLogin
ifApiLogin
ifLogin
ifLogin
wkUrl
wkUrl
ifCreateWkUrl
ifCreateWkUrl
wkAlipayUrl
wkAlipayUrl
zcBuildHttp
zcBuildHttp
zcCreateHttp
zcCreateHttp
loginKey
loginKey
UrlEncode
UrlEncode
login_H5
login_H5
toCacheLogin
toCacheLogin
appLogin
appLogin
GetOnlineLogin
GetOnlineLogin
System.Drawing
System.Drawing
getWebCookie
getWebCookie
getSkuIDByUrl
getSkuIDByUrl
alipay_http
alipay_http
isApassUser
isApassUser
KeyEventArgs
KeyEventArgs
textBox4_KeyDown
textBox4_KeyDown
createBuildOrderUrl
createBuildOrderUrl
Newtonsoft.Json
Newtonsoft.Json
Newtonsoft.Json.Linq
Newtonsoft.Json.Linq
GetWebClientByTj
GetWebClientByTj
GetWebClientByTj_2
GetWebClientByTj_2
GetWebClientByGet
GetWebClientByGet
GetWebClientByPost
GetWebClientByPost
GetWebClient
GetWebClient
login_api
login_api
autoLogin
autoLogin
createBuildOrderUrl_v3
createBuildOrderUrl_v3
System.Net.NetworkInformation
System.Net.NetworkInformation
juJoinGroupH5
juJoinGroupH5
tbzcHttpHelperInit
tbzcHttpHelperInit
getAlipayHttpPost
getAlipayHttpPost
getAlipayUrl
getAlipayUrl
System.ComponentModel
System.ComponentModel
cAppLogin
cAppLogin
buyerNick
buyerNick
get_BuyerNick
get_BuyerNick
set_BuyerNick
set_BuyerNick
BuyerNick
BuyerNick
PICTURE_URL
PICTURE_URL
get_Url
get_Url
set_Url
set_Url
System.Text
System.Text
System.IO
System.IO
login_getToken_url_re
login_getToken_url_re
login_getToken_url
login_getToken_url
login_getToken_url_2
login_getToken_url_2
product_detail_url
product_detail_url
ping_url
ping_url
getSignByECODE_apa_pass
getSignByECODE_apa_pass
getHttpPost
getHttpPost
getHttpPost_tmall
getHttpPost_tmall
getLoginInfo
getLoginInfo
getLoginInfo_tmall
getLoginInfo_tmall
getPassword
getPassword
getStockUrl
getStockUrl
getSignByOldKey
getSignByOldKey
APPKEY
APPKEY
PASSWORD
PASSWORD
CHECKCODEURL
CHECKCODEURL
getAppkey
getAppkey
getLoginApi
getLoginApi
getStockParamUrl
getStockParamUrl
getSecKillInfoUrl
getSecKillInfoUrl
System.Net
System.Net
HttpWebRequest
HttpWebRequest
HttpWebResponse
HttpWebResponse
CreateGetHttpResponse
CreateGetHttpResponse
CreatePostHttpResponse
CreatePostHttpResponse
System.Security.Cryptography.X509Certificates
System.Security.Cryptography.X509Certificates
X509Certificate
X509Certificate
System.Net.Security
System.Net.Security
KEY_STATUS_DOESNOTEXIST
KEY_STATUS_DOESNOTEXIST
KEY_STATUS_VALID
KEY_STATUS_VALID
KEY_STATUS_INVALID
KEY_STATUS_INVALID
KEY_STATUS_STOLEN
KEY_STATUS_STOLEN
KEY_STATUS_DATEEXPIRED
KEY_STATUS_DATEEXPIRED
KEY_STATUS_WITHOUTHARDWARELOCK
KEY_STATUS_WITHOUTHARDWARELOCK
KEY_STATUS_WITHOUTEXPIRATIONDATE
KEY_STATUS_WITHOUTEXPIRATIONDATE
KEY_STATUS_WITHOUTREGISTERAFTERDATE
KEY_STATUS_WITHOUTREGISTERAFTERDATE
KEY_STATUS_WITHOUTREGISTERBEFOREDATE
KEY_STATUS_WITHOUTREGISTERBEFOREDATE
KEY_STATUS_WITHOUTEXECUTIONSLIMIT
KEY_STATUS_WITHOUTEXECUTIONSLIMIT
KEY_STATUS_WITHOUTDAYSLIMIT
KEY_STATUS_WITHOUTDAYSLIMIT
KEY_STATUS_WITHOUTRUNTIMELIMIT
KEY_STATUS_WITHOUTRUNTIMELIMIT
KEY_STATUS_WITHOUTGLOBALTIMELIMIT
KEY_STATUS_WITHOUTGLOBALTIMELIMIT
KEY_STATUS_WITHOUTCOUNTRYLOCK
KEY_STATUS_WITHOUTCOUNTRYLOCK
KEY_STATUS_COUNTRYINVALID
KEY_STATUS_COUNTRYINVALID
KEY_STATUS_REGISTERAFTERFAILED
KEY_STATUS_REGISTERAFTERFAILED
KEY_STATUS_REGISTERBEFOREFAILED
KEY_STATUS_REGISTERBEFOREFAILED
KEY_STATUS_EXECUTIONSEXPIRED
KEY_STATUS_EXECUTIONSEXPIRED
KEY_STATUS_DAYSEXPIRED
KEY_STATUS_DAYSEXPIRED
KEY_STATUS_RUNTIMEEXPIRED
KEY_STATUS_RUNTIMEEXPIRED
KEY_STATUS_GLOBALTIMEEXPIRED
KEY_STATUS_GLOBALTIMEEXPIRED
KEY_STATUS_HARDWARECHANGESEXCEEDED_VOLUMESERIAL
KEY_STATUS_HARDWARECHANGESEXCEEDED_VOLUMESERIAL
KEY_STATUS_HARDWARECHANGESEXCEEDED_VOLUMENAME
KEY_STATUS_HARDWARECHANGESEXCEEDED_VOLUMENAME
KEY_STATUS_HARDWARECHANGESEXCEEDED_COMPUTERNAME
KEY_STATUS_HARDWARECHANGESEXCEEDED_COMPUTERNAME
KEY_STATUS_HARDWARECHANGESEXCEEDED_CPU
KEY_STATUS_HARDWARECHANGESEXCEEDED_CPU
KEY_STATUS_HARDWARECHANGESEXCEEDED_MOTHERBOARD
KEY_STATUS_HARDWARECHANGESEXCEEDED_MOTHERBOARD
KEY_STATUS_HARDWARECHANGESEXCEEDED_WINDOWSKEY
KEY_STATUS_HARDWARECHANGESEXCEEDED_WINDOWSKEY
KEY_STATUS_HARDWARECHANGESEXCEEDED_HDDSERIAL
KEY_STATUS_HARDWARECHANGESEXCEEDED_HDDSERIAL
KEY_STATUS_HARDWARECHANGESEXCEEDED_USERNAME
KEY_STATUS_HARDWARECHANGESEXCEEDED_USERNAME
CN_PORTUGAL
CN_PORTUGAL
CN_TURKEY
CN_TURKEY
KEY_COUNTRIES
KEY_COUNTRIES
EP_RegSaveKey
EP_RegSaveKey
EP_RegSaveKeyA
EP_RegSaveKeyA
EP_RegSaveKeyW
EP_RegSaveKeyW
EP_RegLoadKey
EP_RegLoadKey
EP_RegLoadKeyA
EP_RegLoadKeyA
EP_RegLoadKeyW
EP_RegLoadKeyW
EP_RegCheckKey
EP_RegCheckKey
EP_RegCheckKeyA
EP_RegCheckKeyA
EP_RegCheckKeyW
EP_RegCheckKeyW
EP_RegDeleteKey
EP_RegDeleteKey
EP_RegLoadAndCheckKey
EP_RegLoadAndCheckKey
EP_RegCheckAndSaveKey
EP_RegCheckAndSaveKey
EP_RegCheckAndSaveKeyA
EP_RegCheckAndSaveKeyA
EP_RegCheckAndSaveKeyW
EP_RegCheckAndSaveKeyW
EP_RegKeyCreationDate
EP_RegKeyCreationDate
EP_RegKeyCreationDateEx
EP_RegKeyCreationDateEx
EP_RegKeyExpirationDate
EP_RegKeyExpirationDate
EP_RegKeyExpirationDateEx
EP_RegKeyExpirationDateEx
EP_RegKeyExecutions
EP_RegKeyExecutions
EP_RegKeyExecutionsTotal
EP_RegKeyExecutionsTotal
EP_RegKeyExecutionsLeft
EP_RegKeyExecutionsLeft
EP_RegKeyDays
EP_RegKeyDays
EP_RegKeyDaysTotal
EP_RegKeyDaysTotal
EP_RegKeyDaysLeft
EP_RegKeyDaysLeft
EP_RegKeyRuntime
EP_RegKeyRuntime
EP_RegKeyRuntimeTotal
EP_RegKeyRuntimeTotal
EP_RegKeyRuntimeLeft
EP_RegKeyRuntimeLeft
EP_RegKeyGlobalTime
EP_RegKeyGlobalTime
EP_RegKeyGlobalTimeTotal
EP_RegKeyGlobalTimeTotal
EP_RegKeyGlobalTimeLeft
EP_RegKeyGlobalTimeLeft
EP_RegKeyRegisterAfterDate
EP_RegKeyRegisterAfterDate
EP_RegKeyRegisterAfterDateEx
EP_RegKeyRegisterAfterDateEx
EP_RegKeyRegisterBeforeDate
EP_RegKeyRegisterBeforeDate
EP_RegKeyRegisterBeforeDateEx
EP_RegKeyRegisterBeforeDateEx
EP_RegKeyInformation
EP_RegKeyInformation
EP_RegKeyInformationA
EP_RegKeyInformationA
EP_RegKeyInformationW
EP_RegKeyInformationW
EP_RegKeyStatus
EP_RegKeyStatus
EP_TrialExecutions
EP_TrialExecutions
EP_TrialExecutionsTotal
EP_TrialExecutionsTotal
EP_TrialExecutionsLeft
EP_TrialExecutionsLeft
EP_TrialExecutionTime
EP_TrialExecutionTime
EP_TrialExecutionTimeTotal
EP_TrialExecutionTimeTotal
EP_TrialExecutionTimeLeft
EP_TrialExecutionTimeLeft
EP_ProtectedStringByKey
EP_ProtectedStringByKey
UseKeyExpiration
UseKeyExpiration
UseExecutionsLimit
UseExecutionsLimit
System.Resources
System.Resources
System.Globalization
System.Globalization
getHtmlByGetByUrl
getHtmlByGetByUrl
getResultByGetByUrl
getResultByGetByUrl
getHtmlByGetByUrlNoKeepLive
getHtmlByGetByUrlNoKeepLive
HttpPost
HttpPost
HttpGet
HttpGet
tracknick
tracknick
get_Tracknick
get_Tracknick
set_Tracknick
set_Tracknick
Tracknick
Tracknick
System.Numerics
System.Numerics
SetRSAPublicKey
SetRSAPublicKey
openKey
openKey
postUrl
postUrl
certificate
certificate
AKey
AKey
AKeyInfo
AKeyInfo
KeySize
KeySize
System.Runtime.Versioning
System.Runtime.Versioning
System.Reflection
System.Reflection
System.Runtime.InteropServices
System.Runtime.InteropServices
log4net.Config
log4net.Config
System.Diagnostics
System.Diagnostics
System.Runtime.CompilerServices
System.Runtime.CompilerServices
v2.4.7
v2.4.7
System.Security.Cryptography
System.Security.Cryptography
System.IO.Compression
System.IO.Compression
System.Text.RegularExpressions
System.Text.RegularExpressions
set_URL
set_URL
WebHeaderCollection
WebHeaderCollection
System.Collections.Specialized
System.Collections.Specialized
WebBrowser
WebBrowser
System.Web
System.Web
HttpUtility
HttpUtility
CsharpHttpHelper.Enum
CsharpHttpHelper.Enum
get_RedirectUrl
get_RedirectUrl
ContainsKey
ContainsKey
WebRequest
WebRequest
WebResponse
WebResponse
System.Threading
System.Threading
System.Collections
System.Collections
System.Web.Extensions
System.Web.Extensions
System.Web.Script.Serialization
System.Web.Script.Serialization
WebException
WebException
Keys
Keys
get_KeyCode
get_KeyCode
WebClient
WebClient
URLEncode
URLEncode
HttpRequestHeader
HttpRequestHeader
KeyedHashAlgorithm
KeyedHashAlgorithm
set_PasswordChar
set_PasswordChar
UrlDecode
UrlDecode
ISupportInitialize
ISupportInitialize
KeyEventHandler
KeyEventHandler
add_KeyDown
add_KeyDown
.cctor
.cctor
DllImportAttribute
DllImportAttribute
Kernel32.dll
Kernel32.dll
get_KeySize
get_KeySize
System.CodeDom.Compiler
System.CodeDom.Compiler
System.Net.Sockets
System.Net.Sockets
RemoteCertificateValidationCallback
RemoteCertificateValidationCallback
set_ServerCertificateValidationCallback
set_ServerCertificateValidationCallback
HttpVersion
HttpVersion
KeyValuePair`2
KeyValuePair`2
get_Keys
get_Keys
System.Net.Mail
System.Net.Mail
System.Collections.ObjectModel
System.Collections.ObjectModel
SmtpClient
SmtpClient
SmtpException
SmtpException
enigma_ide.dll
enigma_ide.dll
System.Runtime.Serialization
System.Runtime.Serialization
System.Runtime.Serialization.Json
System.Runtime.Serialization.Json
LuMianDan.Form1.resources
LuMianDan.Form1.resources
LuMianDan.Properties.Resources.resources
LuMianDan.Properties.Resources.resources
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
10.0.0.0
10.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
4.0.0.0
.NETFramework,Version=v4.0
.NETFramework,Version=v4.0
.NET Framework 4
.NET Framework 4
$c698086b-b37b-4acc-a189-628168f8d216
$c698086b-b37b-4acc-a189-628168f8d216
1.0.0.0
1.0.0.0
F:\goodleDownload\328_0827\322_0006\LuMianDan v2.4.7\LuMianDan\obj\x86\Debug\RT
F:\goodleDownload\328_0827\322_0006\LuMianDan v2.4.7\LuMianDan\obj\x86\Debug\RT
v2.4.7.pdb
v2.4.7.pdb
_CorExeMain
_CorExeMain
mscoree.dll
mscoree.dll
$this.Icon
$this.Icon
hXXps://assets.alicdn.com/mw/app/mytaobao/h5/js/RSA.js?v=0
hXXps://assets.alicdn.com/mw/app/mytaobao/h5/js/RSA.js?v=0
application/x-www-form-urlencoded
application/x-www-form-urlencoded
BigTools && BigTools.setMaxDigits(130);
BigTools && BigTools.setMaxDigits(130);
var c = new RSAKeyPair(exponent, "", module), a = RSAKeyPair.encryptedString(c, pwd);
var c = new RSAKeyPair(exponent, "", module), a = RSAKeyPair.encryptedString(c, pwd);
document.write(taobaoRSA("
document.write(taobaoRSA("
{"platform":"h5","acookie":"","isPosition":false,"userId":null,"nick":null}
{"platform":"h5","acookie":"","isPosition":false,"userId":null,"nick":null}
rest/h5ApiUpdate.do?callback=mtopjsonp1&type=jsonp&api=mtop.taobao.wireless.homepage.ac.loadPageContent&data={"platform":"h5","acookie":"","isPosition":false,"userId":null,"nick":null}&v=2.0&appKey=12574478&t=
rest/h5ApiUpdate.do?callback=mtopjsonp1&type=jsonp&api=mtop.taobao.wireless.homepage.ac.loadPageContent&data={"platform":"h5","acookie":"","isPosition":false,"userId":null,"nick":null}&v=2.0&appKey=12574478&t=
application/x-www-form-urlencoded; Charset=UTF-8
application/x-www-form-urlencoded; Charset=UTF-8
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)
/h5/mtop.taobao.detail.getdetail/6.0/?appKey=12574478&t=
/h5/mtop.taobao.detail.getdetail/6.0/?appKey=12574478&t=
&api=mtop.taobao.detail.getdetail&v=6.0&ttid=2013@taobao_h5_1.0.0&type=jsonp&dataType=jsonp&callback=mtopjsonp1&data=
&api=mtop.taobao.detail.getdetail&v=6.0&ttid=2013@taobao_h5_1.0.0&type=jsonp&dataType=jsonp&callback=mtopjsonp1&data=
Mozilla/5.0 (iPhone; CPU iPhone OS 8_0 like Mac OS X) AppleWebKit/600.1.3 (KHTML, like Gecko) Version/8.0 Mobile/12A4345d Safari/600.1.4
Mozilla/5.0 (iPhone; CPU iPhone OS 8_0 like Mac OS X) AppleWebKit/600.1.3 (KHTML, like Gecko) Version/8.0 Mobile/12A4345d Safari/600.1.4
hXXps://h5.m.taobao.com/awp/core/detail.htm?id=
hXXps://h5.m.taobao.com/awp/core/detail.htm?id=
hXXps://login.m.taobao.com/login.htm?spm=0.0.0.0&tpl_redirect_url=http://h5.m.taobao.com/awp/mtb/mtb.htm?#!/awp/mtb/mtb.htm
hXXps://login.m.taobao.com/login.htm?spm=0.0.0.0&tpl_redirect_url=http://h5.m.taobao.com/awp/mtb/mtb.htm?#!/awp/mtb/mtb.htm
event_submit_do_login" value="
event_submit_do_login" value="
TPL_redirect_url" value="
TPL_redirect_url" value="
pin.aliyun.com
pin.aliyun.com
hXXps://pin
hXXps://pin
&TPL_password=
&TPL_password=
&event_submit_do_login=
&event_submit_do_login=
&TPL_redirect_url=
&TPL_redirect_url=
hXXps://login.m.taobao.com/login.htm?_input_charset=utf-8&sid=
hXXps://login.m.taobao.com/login.htm?_input_charset=utf-8&sid=
login.m.etao.com
login.m.etao.com
rest/h5ApiUpdate.do?callback=jsonp1&type=jsonp&api=com.taobao.client.getTms&data=&v=*&appKey=12574478&t=
rest/h5ApiUpdate.do?callback=jsonp1&type=jsonp&api=com.taobao.client.getTms&data=&v=*&appKey=12574478&t=
_w_tb_nick=
_w_tb_nick=
hXXp://i.taobao.com/my_taobao_api/alipay_blance.json?_ksTS=
hXXp://i.taobao.com/my_taobao_api/alipay_blance.json?_ksTS=
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
sorry.not.data
sorry.not.data
operationType=ali.user.gw.unifyLogin&id=0&requestData=
operationType=ali.user.gw.unifyLogin&id=0&requestData=
hXXp://agw.t.taobao.com/mgw.htm
hXXp://agw.t.taobao.com/mgw.htm
application/x-www-form-urlencoded; charset=UTF-8
application/x-www-form-urlencoded; charset=UTF-8
agw.t.taobao.com
agw.t.taobao.com
h5Url
h5Url
h5Url":"
h5Url":"
12679450
12679450
data={"openKey":"
data={"openKey":"
hXXp://api.qianglouyouli.com/lg.aspx?currentTime=
hXXp://api.qianglouyouli.com/lg.aspx?currentTime=
\MTUserInit.txt
\MTUserInit.txt
hXXps://login.taobao.com/jump?target=https://buy.tmall.com/auction/buy.htm?from=itemDetail
hXXps://login.taobao.com/jump?target=https://buy.tmall.com/auction/buy.htm?from=itemDetail
Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0
Mozilla/5.0 (Windows NT 5.1; rv:12.0) Gecko/20100101 Firefox/12.0
ti=207200@tmall_android_4.2.2;_w_al_f=1;_w_tb_nick=
ti=207200@tmall_android_4.2.2;_w_al_f=1;_w_tb_nick=
21533232
21533232
hXXp://api.qianglouyouli.com/version_mobile_md.aspx?currentTime=
hXXp://api.qianglouyouli.com/version_mobile_md.aspx?currentTime=
\MTParamInit.txt
\MTParamInit.txt
password=
password=
\MTErr.txt
\MTErr.txt
com.taobao.mtop.deliver.getdivisionchild
com.taobao.mtop.deliver.getdivisionchild
270200@taobao_android_5.4.7
270200@taobao_android_5.4.7
rest/api3.do?sign=
rest/api3.do?sign=
&appKey=
&appKey=
MTOPSDK/1.4.0 (Android;2.3.4;samsung;GT-I9100)
MTOPSDK/1.4.0 (Android;2.3.4;samsung;GT-I9100)
http:
http:
s.click.taobao.com
s.click.taobao.com
hXXps://api.m.taobao.com/rest/api3.do?
hXXps://api.m.taobao.com/rest/api3.do?
hXXps://api.m.taobao.com/
hXXps://api.m.taobao.com/
api=mtop.common.getTimestamp
api=mtop.common.getTimestamp
hXXps://pin.aliyun.com/get_img?sessionid={0}&identity=sirius_checkcode&type=150_40&t={1}
hXXps://pin.aliyun.com/get_img?sessionid={0}&identity=sirius_checkcode&type=150_40&t={1}
600438@juhuasuan_android_2.9.1
600438@juhuasuan_android_2.9.1
mtop.trade.buildOrder
mtop.trade.buildOrder
","supportAsync":"false","buyNow":"true"
","supportAsync":"false","buyNow":"true"
","supportAsync":"false"}
","supportAsync":"false"}
mtop.trade.createOrder
mtop.trade.createOrder
nextUrl":"
nextUrl":"
class="am-msg-box">
class="am-msg-box">
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36
maliprod.alipay.com
maliprod.alipay.com
mclient.alipay.com
mclient.alipay.com
HH:mm:ss.fff
HH:mm:ss.fff
am-msg-box">
am-msg-box">
hXXps://izhongchou.taobao.com/order/confirm_order.htm?itemId=
hXXps://izhongchou.taobao.com/order/confirm_order.htm?itemId=
text/html,application/xhtml xml,application/xml;q=0.9,image/webp,*/*;q=0.8
text/html,application/xhtml xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
_fm.co._0.i" id="itemId" value="
_fm.co._0.i" id="itemId" value="
_fm.co._0.a" id="J_form_addressId" value="
_fm.co._0.a" id="J_form_addressId" value="
_fm.co._0.o" value="
_fm.co._0.o" value="
&_fm.co._0.i=
&_fm.co._0.i=
&_fm.co._0.a=
&_fm.co._0.a=
&_fm.co._0.o=
&_fm.co._0.o=
&_fm.co._0.ar=
&_fm.co._0.ar=
&_fm.co._0.c=
&_fm.co._0.c=
&_fm.co._0.pr=
&_fm.co._0.pr=
&_fm.co._0.pos=
&_fm.co._0.pos=
&_fm.co._0.d=
&_fm.co._0.d=
&_fm.co._0.de=
&_fm.co._0.de=
&_fm.co._0.del=
&_fm.co._0.del=
&_fm.co._0.deli=
&_fm.co._0.deli=
&_fm.co._0.di=
&_fm.co._0.di=
&_fm.co._0.p=
&_fm.co._0.p=
&_fm.co._0.s=
&_fm.co._0.s=
&_fm.co._0.isAnonymous=
&_fm.co._0.isAnonymous=
&_fm.co._0.postFee=
&_fm.co._0.postFee=
&_fm.co._0.b=
&_fm.co._0.b=
&_fm.co._0.it=
&_fm.co._0.it=
&_fm.co._0.bu=
&_fm.co._0.bu=
&_fm.co._0.sh=
&_fm.co._0.sh=
hXXps://izhongchou.taobao.com/order/confirm_order.htm
hXXps://izhongchou.taobao.com/order/confirm_order.htm
207200@tmall_android_5.14.0
207200@tmall_android_5.14.0
com.taobao.wireless.user.isApassUser
com.taobao.wireless.user.isApassUser
hXXp://mclient.alipay.com/w/trade_pay.do?alipay_trade_no=
hXXp://mclient.alipay.com/w/trade_pay.do?alipay_trade_no=
transportType_
transportType_
"transportType_
"transportType_
hXXp://buy.m.tmall.com/auction/confirm_order.htm?
hXXp://buy.m.tmall.com/auction/confirm_order.htm?
Mozilla/5.0 (Linux; U; Android 2.3.6; en-us; Nexus S Build/GRK39F) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
Mozilla/5.0 (Linux; U; Android 2.3.6; en-us; Nexus S Build/GRK39F) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
alipayURL=
alipayURL=
0123456789
0123456789
mtop.order.querybidlist
mtop.order.querybidlist
&ttid=700171@taobao_android_4.2.2&v=1.0&t=
&ttid=700171@taobao_android_4.2.2&v=1.0&t=
&api=mtop.order.querybidlist&appKey=12278902&imsi=
&api=mtop.order.querybidlist&appKey=12278902&imsi=
hXXp://hws.m.taobao.com/cache/wdetail/5.0/?id=
hXXp://hws.m.taobao.com/cache/wdetail/5.0/?id=
|*.CSV
|*.CSV
hXXp://mclient.alipay.com/w/trade_pay.do?alipay_trade_no=&pay_order_id=&s_id=
hXXp://mclient.alipay.com/w/trade_pay.do?alipay_trade_no=&pay_order_id=&s_id=
hXXps://mclient.alipay.com/h5/cashierPay.htm?awid=
hXXps://mclient.alipay.com/h5/cashierPay.htm?awid=
com.taobao.client.sys.getAppToken
com.taobao.client.sys.getAppToken
com.taobao.client.sys.login
com.taobao.client.sys.login
hXXp://api.qianglouyouli.com/calc2.aspx?currentTime=
hXXp://api.qianglouyouli.com/calc2.aspx?currentTime=
{"key":"
{"key":"
api=com.taobao.client.sys.getAppToken&v=*&data=
api=com.taobao.client.sys.getAppToken&v=*&data=
rest/api3.do
rest/api3.do
api.m.taobao.com
api.m.taobao.com
pubKey
pubKey
","password":"
","password":"
","appKey":"
","appKey":"
api=com.taobao.client.sys.login&v=v2&data=
api=com.taobao.client.sys.login&v=v2&data=
com.taobao.client.sys.autologin
com.taobao.client.sys.autologin
rest/api3.do?
rest/api3.do?
hXXp://api.qianglouyouli.com/login_tj.aspx?currentTime=
hXXp://api.qianglouyouli.com/login_tj.aspx?currentTime=
&password=
&password=
hXXp://api.qianglouyouli.com/updPsw_tj.aspx?currentTime=
hXXp://api.qianglouyouli.com/updPsw_tj.aspx?currentTime=
&oldpassword=
&oldpassword=
&newpassword=
&newpassword=
hXXp://api.qianglouyouli.com/register_tj.aspx?currentTime=
hXXp://api.qianglouyouli.com/register_tj.aspx?currentTime=
hXXp://api.qianglouyouli.com/recharge_tj_2.aspx?currentTime=
hXXp://api.qianglouyouli.com/recharge_tj_2.aspx?currentTime=
api.qianglouyouli.com
api.qianglouyouli.com
api.agdwt.com
api.agdwt.com
hXXp://
hXXp://
/expire_tj_2.aspx?currentTime=
/expire_tj_2.aspx?currentTime=
mtop.htao.buildOrder
mtop.htao.buildOrder
","supportAsync":false,"buyNow":true}
","supportAsync":false,"buyNow":true}
gw/mtop.htao.buildOrder/2.0?rnd=
gw/mtop.htao.buildOrder/2.0?rnd=
&supportAsync=true&data=
&supportAsync=true&data=
m-appkey
m-appkey
207200@tmall_android_5.14.0
207200@tmall_android_5.14.0
","supportAsync":false}
","supportAsync":false}
mtop.htao.createOrder
mtop.htao.createOrder
gw/mtop.htao.createOrder/2.0?rnd=
gw/mtop.htao.createOrder/2.0?rnd=
(*.txt)|*.txt|(*.*)|*.*
(*.txt)|*.txt|(*.*)|*.*
212200@taobao_android_3.9.5
212200@taobao_android_3.9.5
mtop.order.doPay
mtop.order.doPay
appKey=
appKey=
alipayUrl
alipayUrl
hXXps://buy.
hXXps://buy.
.com/auction/buy_now.jhtml?&item_id=
.com/auction/buy_now.jhtml?&item_id=
F_nick" value="
F_nick" value="
&F_nick=
&F_nick=
.com/auction/confirm_order.htm
.com/auction/confirm_order.htm
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.111 Safari/537.36
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.111 Safari/537.36
CHECK_CODE_VALID_NOT_PASS
CHECK_CODE_VALID_NOT_PASS
redirectUrl=
redirectUrl=
.com/order/confirm_order.htm?quantity={0}&buy_param={1}&buy_params={2}&item_id={3}&from=item_detail&item_id_num={4}
.com/order/confirm_order.htm?quantity={0}&buy_param={1}&buy_params={2}&item_id={3}&from=item_detail&item_id_num={4}
joinId":"
joinId":"
hXXp://mdskip.m.tmall.com/mobile/joinTg.do?itemId=
hXXp://mdskip.m.tmall.com/mobile/joinTg.do?itemId=
hXXp://detail.m.tmall.com/item.htm?id=
hXXp://detail.m.tmall.com/item.htm?id=
errorMsg":"
errorMsg":"
item.taobao.com
item.taobao.com
detail.tmall.com
detail.tmall.com
hXXp://api.m.taobao.com/h5/mtop.ju.group.join/3.0/?v=3.0&api=mtop.ju.group.join&appKey=12574478&t=
hXXp://api.m.taobao.com/h5/mtop.ju.group.join/3.0/?v=3.0&api=mtop.ju.group.join&appKey=12574478&t=
juJoinGroupH5 >>
juJoinGroupH5 >>
{"itemId":"520648018518","item_num_id":"520648018518","_input_charset":"utf-8","buyNow":"true","v":"0","skuId":"","channelKey":"qianggou","exParams":"{\"id\":\"520648018518\",\"spm\":\"\",\"umpChannel\":\"qianggou\",\"u_channel\":\"qianggou\"}"}
{"itemId":"520648018518","item_num_id":"520648018518","_input_charset":"utf-8","buyNow":"true","v":"0","skuId":"","channelKey":"qianggou","exParams":"{\"id\":\"520648018518\",\"spm\":\"\",\"umpChannel\":\"qianggou\",\"u_channel\":\"qianggou\"}"}
1448019226560
1448019226560
hXXps://api.m.taobao.com/h5/com.taobao.client.getTms/*/?appKey=12574478&t=
hXXps://api.m.taobao.com/h5/com.taobao.client.getTms/*/?appKey=12574478&t=
&api=com.taobao.client.getTms&v=*&type=originaljson&timeout=8000&isSec=1&dataType=json&ecode=1&ttid=#t#ip##_h5_2014&data=
&api=com.taobao.client.getTms&v=*&type=originaljson&timeout=8000&isSec=1&dataType=json&ecode=1&ttid=#t#ip##_h5_2014&data=
\",\"spm\":\"0.0.0.0\",\"tg_key\":\"jhs\",\"v\":\"0\"}","ttid":"#t#ip##_h5_2014"}
\",\"spm\":\"0.0.0.0\",\"tg_key\":\"jhs\",\"v\":\"0\"}","ttid":"#t#ip##_h5_2014"}
","channelKey":"qianggou","exParams":"{\"id\":\"
","channelKey":"qianggou","exParams":"{\"id\":\"
appKey=12574478&t=
appKey=12574478&t=
&api=mtop.trade.buildOrder.h5&v=3.0&type=originaljson&timeout=8000&isSec=1&dataType=json&ecode=1&ttid=
&api=mtop.trade.buildOrder.h5&v=3.0&type=originaljson&timeout=8000&isSec=1&dataType=json&ecode=1&ttid=
&AntiFlood=true&LoginRequest=true&H5Request=true&x-itemid=
&AntiFlood=true&LoginRequest=true&H5Request=true&x-itemid=
hXXps://api.m.
hXXps://api.m.
.com/h5/mtop.trade.buildOrder.h5/3.0/?
.com/h5/mtop.trade.buildOrder.h5/3.0/?
Mozilla/5.0 (Windows; U; Android 4.1) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
Mozilla/5.0 (Windows; U; Android 4.1) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
hXXp://h5.m.taobao.com
hXXp://h5.m.taobao.com
hXXps://buy.m.
hXXps://buy.m.
&ttid=#t#ip##_h5_2014&dataType=json&ecode=1&api=mtop.trade.buildOrder.h5&v=3.0&appKey=12574478&t=
&ttid=#t#ip##_h5_2014&dataType=json&ecode=1&api=mtop.trade.buildOrder.h5&v=3.0&appKey=12574478&t=
rest/h5ApiUpdate.do?mtop.trade.buildOrder.h5/30/?type=originaljson
rest/h5ApiUpdate.do?mtop.trade.buildOrder.h5/30/?type=originaljson
mtop.trade.buildOrder.h5
mtop.trade.buildOrder.h5
","supportAsync":true}
","supportAsync":true}
&ttid=207200@tmall_android_5.14.0&v=
&ttid=207200@tmall_android_5.14.0&v=
&api=mtop.trade.buildOrder.h5&appKey=
&api=mtop.trade.buildOrder.h5&appKey=
&channelKey=qianggou&data=
&channelKey=qianggou&data=
&api=mtop.trade.createOrder.h5&v=3.0&type=originaljson&timeout=4000&isSec=1&dataType=json&ecode=1&ttid=
&api=mtop.trade.createOrder.h5&v=3.0&type=originaljson&timeout=4000&isSec=1&dataType=json&ecode=1&ttid=
.com/h5/mtop.trade.createOrder.h5/3.0/?
.com/h5/mtop.trade.createOrder.h5/3.0/?
rest/h5ApiUpdate.do?mtop.trade.createOrder.h5/3.0/?type=originaljson&ttid=#t#ad##_h5_2014&type=post&dataType=json&ecode=1&api=mtop.trade.createOrder.h5&v=3.0&appKey=12574478&t=
rest/h5ApiUpdate.do?mtop.trade.createOrder.h5/3.0/?type=originaljson&ttid=#t#ad##_h5_2014&type=post&dataType=json&ecode=1&api=mtop.trade.createOrder.h5&v=3.0&appKey=12574478&t=
mtop.trade.createOrder.h5
mtop.trade.createOrder.h5
&ttid=207200@tmall_android_5.14.0&v=
&ttid=207200@tmall_android_5.14.0&v=
hXXp://trade.ju.taobao.com/trade/json/buy_item_action.htm?_input_charset=utf-8&callback=myjsonp
hXXp://trade.ju.taobao.com/trade/json/buy_item_action.htm?_input_charset=utf-8&callback=myjsonp
hXXp://detail.ju.taobao.com/home.htm?item_id=
hXXp://detail.ju.taobao.com/home.htm?item_id=
hXXp://rt.agdwt.com/qq.aspx?i=
hXXp://rt.agdwt.com/qq.aspx?i=
eurl":"
eurl":"
rest/h5ApiUpdate.do?callback=jsonp1&type=jsonp&api=mtop.order.queryOrderList&data=
rest/h5ApiUpdate.do?callback=jsonp1&type=jsonp&api=mtop.order.queryOrderList&data=
&v=1.0&appKey=12574478&t=
&v=1.0&appKey=12574478&t=
hXXps://wap.alipay.com/home/taobaoTrustLogin.htm?type=applyPeerPay&alipay_trade_no=
hXXps://wap.alipay.com/home/taobaoTrustLogin.htm?type=applyPeerPay&alipay_trade_no=
&callbackURI=/personal/applyPeerPay.htm
&callbackURI=/personal/applyPeerPay.htm
207200@tmall_android_4.2.2
207200@tmall_android_4.2.2
mtop.order.queryOrderDetail
mtop.order.queryOrderDetail
255200@taobao_android_5.6.0
255200@taobao_android_5.6.0
mtop.order.queryDetail
mtop.order.queryDetail
h5/mtop.order.queryDetail/3.0/?sign=
h5/mtop.order.queryDetail/3.0/?sign=
&appKey=12574478&t=
&appKey=12574478&t=
&AntiFlood=true&AntiCreep=true&LoginRequest=true&type=jsonp&dataType=jsnop&callback=mtopjsonp1
&AntiFlood=true&AntiCreep=true&LoginRequest=true&type=jsonp&dataType=jsnop&callback=mtopjsonp1
com.taobao.mtop.deliver.getAddressList
com.taobao.mtop.deliver.getAddressList
com.taobao.mtop.deliver.editAddressStatus
com.taobao.mtop.deliver.editAddressStatus
com.taobao.mtop.deliver.createAddress
com.taobao.mtop.deliver.createAddress
hXXps://42.156.146.77/rest/api3.do?
hXXps://42.156.146.77/rest/api3.do?
hXXps://42.156.146.77/
hXXps://42.156.146.77/
mtop.pyramid.wirelessmtoprefundservice.refundrouter
mtop.pyramid.wirelessmtoprefundservice.refundrouter
hXXp://api.m.tmall.com/rest/h5ApiUpdate.do?sign=
hXXp://api.m.tmall.com/rest/h5ApiUpdate.do?sign=
mtop.pyramid.wirelessmtoprefundservice.queryalertrefundpage
mtop.pyramid.wirelessmtoprefundservice.queryalertrefundpage
mtop.trade.addBag
mtop.trade.addBag
mtop.trade.queryBagList
mtop.trade.queryBagList
","cat":"all","supportAsync":true,"pageNo":1,"cartType":"","next":true,"startTimestamp":0,"n":50,"mixed":false,"forceUpdate":false,"endTimestamp":0}
","cat":"all","supportAsync":true,"pageNo":1,"cartType":"","next":true,"startTimestamp":0,"n":50,"mixed":false,"forceUpdate":false,"endTimestamp":0}
,smsniff,wireshark,fiddler,peid,httpwatch,analyzer,sniffer,pproxy,scoop,tcpdump.wsockexpert,reflector,reflexil,scanid.de4dot,pecompact,r4ndom,
,smsniff,wireshark,fiddler,peid,httpwatch,analyzer,sniffer,pproxy,scoop,tcpdump.wsockexpert,reflector,reflexil,scanid.de4dot,pecompact,r4ndom,
2.4.7
2.4.7
v2.4.7
v2.4.7
12278902
12278902
ttid=207200@tmall_android_4.2.2
ttid=207200@tmall_android_4.2.2
","needSSOToken":"true","appKey":"
","needSSOToken":"true","appKey":"
tracknick=
tracknick=
hXXp://ax.m.taobao.com/qst.htm?
hXXp://ax.m.taobao.com/qst.htm?
12574478
12574478
hXXps://hws.m.taobao.com/cache/wdetail/5.0/?id=
hXXps://hws.m.taobao.com/cache/wdetail/5.0/?id=
m.ajax.taobao.com
m.ajax.taobao.com
hXXp://ax.m.taobao.com/stock2.htm?
hXXp://ax.m.taobao.com/stock2.htm?
hws.m.taobao.com/cache/wdetail/5.0/
hws.m.taobao.com/cache/wdetail/5.0/
appKey
appKey
https
https
&{0}={1}
&{0}={1}
zbbdsg@126.com
zbbdsg@126.com
smtp.126.com
smtp.126.com
C:\Windows\temp
C:\Windows\temp
C:\Windows\temp\
C:\Windows\temp\
.jpeg
.jpeg
Portugal
Portugal
Turkey
Turkey
LuMianDan.Properties.Resources
LuMianDan.Properties.Resources
%original file name%.exe_840_rwx_00464000_00352000:
kernel32.dll
kernel32.dll
Windows
Windows
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
MSH_SCROLL_LINES_MSG
comctl32.dll
comctl32.dll
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
oleaut32.dll
oleaut32.dll
EVariantBadIndexError
EVariantBadIndexError
ole32.dll
ole32.dll
!"#$%&*;@[]^_`{|}
!"#$%&*;@[]^_`{|}
ssShift
ssShift
htKeyword
htKeyword
EInvalidOperation
EInvalidOperation
u%CNu
u%CNu
%s[%d]
%s[%d]
%s_%d
%s_%d
.Owner
.Owner
TNT Internal Error: TWideComponentHelper.Create should never be encountered.
TNT Internal Error: TWideComponentHelper.Create should never be encountered.
w:\3rdparty\TntUnicode\Source\TntClasses.pas
w:\3rdparty\TntUnicode\Source\TntClasses.pas
Internal Error: Unexpected format type (%s)
Internal Error: Unexpected format type (%s)
W:\3rdparty\ScreamSec\SecUtils.pas
W:\3rdparty\ScreamSec\SecUtils.pas
TCipher.CreateIntf: Algorithm mismatch
TCipher.CreateIntf: Algorithm mismatch
TBlockCipher.CreateIntf: Wrong VectorSize
TBlockCipher.CreateIntf: Wrong VectorSize
Cipher mode not supported
Cipher mode not supported
The vector for %s is %d blocks. Cannot initialize with a %d block vector.
The vector for %s is %d blocks. Cannot initialize with a %d block vector.
The block size for %s is %d bytes and the key is %d bytes. Cannot initialize with a %d block vector.
The block size for %s is %d bytes and the key is %d bytes. Cannot initialize with a %d block vector.
The minimum key and IV size for %s is %d bytes.
The minimum key and IV size for %s is %d bytes.
Not supported
Not supported
TRijndael_PipedPCFB
TRijndael_PipedPCFB
Rijndael: Invalid key size - %d
Rijndael: Invalid key size - %d
2.16.840.1.101.3.4.1.1
2.16.840.1.101.3.4.1.1
2.16.840.1.101.3.4.1.21
2.16.840.1.101.3.4.1.21
2.16.840.1.101.3.4.1.41
2.16.840.1.101.3.4.1.41
1.3.6.1.4.1.13085.1.22
1.3.6.1.4.1.13085.1.22
1.3.6.1.4.1.13085.1.23
1.3.6.1.4.1.13085.1.23
1.3.6.1.4.1.13085.1.24
1.3.6.1.4.1.13085.1.24
2.16.840.1.101.3.4.1.4
2.16.840.1.101.3.4.1.4
2.16.840.1.101.3.4.1.24
2.16.840.1.101.3.4.1.24
2.16.840.1.101.3.4.1.44
2.16.840.1.101.3.4.1.44
1.3.6.1.4.1.13085.1.7
1.3.6.1.4.1.13085.1.7
1.3.6.1.4.1.13085.1.8
1.3.6.1.4.1.13085.1.8
1.3.6.1.4.1.13085.1.9
1.3.6.1.4.1.13085.1.9
1.3.6.1.4.1.13085.1.4
1.3.6.1.4.1.13085.1.4
1.3.6.1.4.1.13085.1.5
1.3.6.1.4.1.13085.1.5
1.3.6.1.4.1.13085.1.6
1.3.6.1.4.1.13085.1.6
1.3.6.1.4.1.13085.1.10
1.3.6.1.4.1.13085.1.10
1.3.6.1.4.1.13085.1.11
1.3.6.1.4.1.13085.1.11
1.3.6.1.4.1.13085.1.12
1.3.6.1.4.1.13085.1.12
1.3.6.1.4.1.13085.1.1
1.3.6.1.4.1.13085.1.1
1.3.6.1.4.1.13085.1.2
1.3.6.1.4.1.13085.1.2
1.3.6.1.4.1.13085.1.3
1.3.6.1.4.1.13085.1.3
1.3.6.1.4.1.13085.1.16
1.3.6.1.4.1.13085.1.16
1.3.6.1.4.1.13085.1.17
1.3.6.1.4.1.13085.1.17
1.3.6.1.4.1.13085.1.18
1.3.6.1.4.1.13085.1.18
2.16.840.1.101.3.4.1.2
2.16.840.1.101.3.4.1.2
2.16.840.1.101.3.4.1.22
2.16.840.1.101.3.4.1.22
2.16.840.1.101.3.4.1.42
2.16.840.1.101.3.4.1.42
1.3.6.1.4.1.13085.1.19
1.3.6.1.4.1.13085.1.19
1.3.6.1.4.1.13085.1.20
1.3.6.1.4.1.13085.1.20
1.3.6.1.4.1.13085.1.21
1.3.6.1.4.1.13085.1.21
2.16.840.1.101.3.4.1.3
2.16.840.1.101.3.4.1.3
2.16.840.1.101.3.4.1.23
2.16.840.1.101.3.4.1.23
2.16.840.1.101.3.4.1.43
2.16.840.1.101.3.4.1.43
2.16.840.1.101.3.4.1.5
2.16.840.1.101.3.4.1.5
2.16.840.1.101.3.4.1.25
2.16.840.1.101.3.4.1.25
2.16.840.1.101.3.4.1.45
2.16.840.1.101.3.4.1.45
/* Dr Brian Gladman (gladman@seven77.demon.co.uk) 14th January 1999 */
/* Dr Brian Gladman (gladman@seven77.demon.co.uk) 14th January 1999 */
TGenerator.Create: Cipher mode must be cmCTR.
TGenerator.Create: Cipher mode must be cmCTR.
TMPPool.CheckThreadID: Called from the wrong thread.
TMPPool.CheckThreadID: Called from the wrong thread.
TMPPool.Cache: Invalid pointer
TMPPool.Cache: Invalid pointer
TMPPool.Obtain: Out of memory
TMPPool.Obtain: Out of memory
TMPPool.InternalCheck: Invalid pointer
TMPPool.InternalCheck: Invalid pointer
Portugal
Portugal
Turkey
Turkey
TKeyVerifyParams
TKeyVerifyParams
12345678-
12345678-
EP_RegCheckKey
EP_RegCheckKey
EP_RegCheckKeyA
EP_RegCheckKeyA
EP_RegCheckKeyW
EP_RegCheckKeyW
EP_RegSaveKey
EP_RegSaveKey
EP_RegSaveKeyA
EP_RegSaveKeyA
EP_RegSaveKeyW
EP_RegSaveKeyW
EP_RegLoadKey
EP_RegLoadKey
EP_RegLoadKeyA
EP_RegLoadKeyA
EP_RegLoadKeyW
EP_RegLoadKeyW
EP_RegLoadAndCheckKey
EP_RegLoadAndCheckKey
EP_RegCheckAndSaveKey
EP_RegCheckAndSaveKey
EP_RegCheckAndSaveKeyA
EP_RegCheckAndSaveKeyA
EP_RegCheckAndSaveKeyW
EP_RegCheckAndSaveKeyW
EP_RegDeleteKey
EP_RegDeleteKey
EP_RegKeyExpirationDate
EP_RegKeyExpirationDate
EP_RegKeyExpirationDateEx
EP_RegKeyExpirationDateEx
EP_RegKeyCreationDate
EP_RegKeyCreationDate
EP_RegKeyCreationDateEx
EP_RegKeyCreationDateEx
EP_RegKeyExecutions
EP_RegKeyExecutions
EP_RegKeyExecutionsTotal
EP_RegKeyExecutionsTotal
EP_RegKeyExecutionsLeft
EP_RegKeyExecutionsLeft
EP_RegKeyDays
EP_RegKeyDays
EP_RegKeyDaysTotal
EP_RegKeyDaysTotal
EP_RegKeyDaysLeft
EP_RegKeyDaysLeft
EP_RegKeyRuntime
EP_RegKeyRuntime
EP_RegKeyRuntimeTotal
EP_RegKeyRuntimeTotal
EP_RegKeyRuntimeLeft
EP_RegKeyRuntimeLeft
EP_RegKeyGlobalTime
EP_RegKeyGlobalTime
EP_RegKeyGlobalTimeTotal
EP_RegKeyGlobalTimeTotal
EP_RegKeyGlobalTimeLeft
EP_RegKeyGlobalTimeLeft
EP_RegKeyRegisterAfterDate
EP_RegKeyRegisterAfterDate
EP_RegKeyRegisterAfterDateEx
EP_RegKeyRegisterAfterDateEx
EP_RegKeyRegisterBeforeDate
EP_RegKeyRegisterBeforeDate
EP_RegKeyRegisterBeforeDateEx
EP_RegKeyRegisterBeforeDateEx
EP_TrialExecutions
EP_TrialExecutions
EP_TrialExecutionsTotal
EP_TrialExecutionsTotal
EP_TrialExecutionsLeft
EP_TrialExecutionsLeft
EP_TrialExecutionTime
EP_TrialExecutionTime
EP_TrialExecutionTimeTotal
EP_TrialExecutionTimeTotal
EP_TrialExecutionTimeLeft
EP_TrialExecutionTimeLeft
EP_RegCheckKeyEx
EP_RegCheckKeyEx
EP_RegSaveKeyEx
EP_RegSaveKeyEx
EP_RegLoadKeyEx
EP_RegLoadKeyEx
EP_CheckUpStartupPasswordHashString
EP_CheckUpStartupPasswordHashString
EP_ProtectedStringByKey
EP_ProtectedStringByKey
EP_RegKeyInformation
EP_RegKeyInformation
EP_RegKeyInformationA
EP_RegKeyInformationA
EP_RegKeyInformationW
EP_RegKeyInformationW
EP_RegKeyStatus
EP_RegKeyStatus
Windows 95
Windows 95
WIN_VER_WINDOWS95
WIN_VER_WINDOWS95
Windows 95 OSR2
Windows 95 OSR2
WIN_VER_WINDOWS95OSR2
WIN_VER_WINDOWS95OSR2
Windows 98
Windows 98
WIN_VER_WINDOWS98
WIN_VER_WINDOWS98
Windows 98 SE
Windows 98 SE
WIN_VER_WINDOWS98SE
WIN_VER_WINDOWS98SE
Windows ME
Windows ME
WIN_VER_WINDOWSME
WIN_VER_WINDOWSME
Windows 2000
Windows 2000
WIN_VER_WINDOWS2000
WIN_VER_WINDOWS2000
Windows 2000 Professional
Windows 2000 Professional
WIN_VER_WINDOWS2000PROF
WIN_VER_WINDOWS2000PROF
Windows 2000 Data Server
Windows 2000 Data Server
WIN_VER_WINDOWS2000DATASERVER
WIN_VER_WINDOWS2000DATASERVER
Windows 2000 Advanced Server
Windows 2000 Advanced Server
WIN_VER_WINDOWS2000ADVSERVER
WIN_VER_WINDOWS2000ADVSERVER
Windows 2000 Server
Windows 2000 Server
WIN_VER_WINDOWS2000SERVER
WIN_VER_WINDOWS2000SERVER
Windows XP
Windows XP
WIN_VER_WINDOWSXP
WIN_VER_WINDOWSXP
Windows XP Home
Windows XP Home
WIN_VER_WINDOWSXPHOME
WIN_VER_WINDOWSXPHOME
Windows XP Professional
Windows XP Professional
WIN_VER_WINDOWSXPPROF
WIN_VER_WINDOWSXPPROF
Windows XP Professional x64
Windows XP Professional x64
WIN_VER_WINDOWSXPPROFx64
WIN_VER_WINDOWSXPPROFx64
Windows XP Professional Datacenter x64
Windows XP Professional Datacenter x64
WIN_VER_WINDOWSXPPROFDATACENTERx64
WIN_VER_WINDOWSXPPROFDATACENTERx64
Windows XP Professional Enterprise x64
Windows XP Professional Enterprise x64
WIN_VER_WINDOWSXPPROFENERPRICEx64
WIN_VER_WINDOWSXPPROFENERPRICEx64
Windows XP Professional Standart x64
Windows XP Professional Standart x64
WIN_VER_WINDOWSXPPROFSTANDARTx64
WIN_VER_WINDOWSXPPROFSTANDARTx64
Windows 2003
Windows 2003
Windows 2003 Server
Windows 2003 Server
WIN_VER_WINDOWS2003SERVER
WIN_VER_WINDOWS2003SERVER
Windows 2003 Server R2
Windows 2003 Server R2
WIN_VER_WINDOWS2003SERVERR2
WIN_VER_WINDOWS2003SERVERR2
Windows 2003 Storage Server
Windows 2003 Storage Server
WIN_VER_WINDOWS2003STORAGESERVER
WIN_VER_WINDOWS2003STORAGESERVER
Windows 2003 Datacenter Itanium
Windows 2003 Datacenter Itanium
WIN_VER_WINDOWS2003DATACENTERITANIUM
WIN_VER_WINDOWS2003DATACENTERITANIUM
Windows 2003 Enterprise Itanium
Windows 2003 Enterprise Itanium
WIN_VER_WINDOWS2003ENTERPRICEITANIUM
WIN_VER_WINDOWS2003ENTERPRICEITANIUM
Windows 2003 Datacenter x64
Windows 2003 Datacenter x64
WIN_VER_WINDOWS2003DATACENTERx64
WIN_VER_WINDOWS2003DATACENTERx64
Windows 2003 Enterprise x64
Windows 2003 Enterprise x64
WIN_VER_WINDOWS2003ENERPRICEx64
WIN_VER_WINDOWS2003ENERPRICEx64
Windows 2003 Standart x64
Windows 2003 Standart x64
WIN_VER_WINDOWS2003STANDARTx64
WIN_VER_WINDOWS2003STANDARTx64
Windows 2003 Compute
Windows 2003 Compute
WIN_VER_WINDOWS2003COMPUTE
WIN_VER_WINDOWS2003COMPUTE
Windows 2003 Datacenter
Windows 2003 Datacenter
WIN_VER_WINDOWS2003DATACENTER
WIN_VER_WINDOWS2003DATACENTER
Windows 2003 Enterprise
Windows 2003 Enterprise
WIN_VER_WINDOWS2003ENTERPRICE
WIN_VER_WINDOWS2003ENTERPRICE
Windows 2003 Web
Windows 2003 Web
WIN_VER_WINDOWS2003WEB
WIN_VER_WINDOWS2003WEB
Windows 2003 Standart
Windows 2003 Standart
WIN_VER_WINDOWS2003STANDART
WIN_VER_WINDOWS2003STANDART
Windows Vista
Windows Vista
WIN_VER_WINDOWSVISTA
WIN_VER_WINDOWSVISTA
Windows Vista Business
Windows Vista Business
WIN_VER_WINDOWSVISTA_BUSINESS
WIN_VER_WINDOWSVISTA_BUSINESS
Windows Vista Cluster Server
Windows Vista Cluster Server
WIN_VER_WINDOWSVISTA_CLUSTER_SERVER
WIN_VER_WINDOWSVISTA_CLUSTER_SERVER
Windows Vista Datacenter Server
Windows Vista Datacenter Server
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER
Windows Vista Datacenter Server Core
Windows Vista Datacenter Server Core
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_CORE
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_CORE
Windows Vista Datacenter Server Core V
Windows Vista Datacenter Server Core V
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_CORE_V
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_CORE_V
Windows Vista Datacenter Server V
Windows Vista Datacenter Server V
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_V
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_V
Windows Vista Enterprise
Windows Vista Enterprise
WIN_VER_WINDOWSVISTA_ENTERPRICE
WIN_VER_WINDOWSVISTA_ENTERPRICE
Windows Vista Enterprise Server
Windows Vista Enterprise Server
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER
Windows Vista Enterprise Server Core
Windows Vista Enterprise Server Core
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_CORE
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_CORE
Windows Vista Enterprise Server V
Windows Vista Enterprise Server V
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_V
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_V
Windows Vista Enterprise Server Core V
Windows Vista Enterprise Server Core V
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_CORE_V
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_CORE_V
Windows Vista Enterprise Server IA64
Windows Vista Enterprise Server IA64
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_IA64
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_IA64
Windows Vista Home Basic
Windows Vista Home Basic
WIN_VER_WINDOWSVISTA_HOME_BASIC
WIN_VER_WINDOWSVISTA_HOME_BASIC
Windows Vista Home Premium
Windows Vista Home Premium
WIN_VER_WINDOWSVISTA_HOME_PREMIUM
WIN_VER_WINDOWSVISTA_HOME_PREMIUM
Windows Vista Home Server
Windows Vista Home Server
WIN_VER_WINDOWSVISTA_HOME_SERVER
WIN_VER_WINDOWSVISTA_HOME_SERVER
Windows Vista Server For Small Business
Windows Vista Server For Small Business
WIN_VER_WINDOWSVISTA_SERVER_FOR_SMALLBUSINESS
WIN_VER_WINDOWSVISTA_SERVER_FOR_SMALLBUSINESS
Windows Vista Small Business Server
Windows Vista Small Business Server
WIN_VER_WINDOWSVISTA_SMALLBUSINESS_SERVER
WIN_VER_WINDOWSVISTA_SMALLBUSINESS_SERVER
Windows Vista Small Business Server Premium
Windows Vista Small Business Server Premium
WIN_VER_WINDOWSVISTA_SMALLBUSINESS_SERVER_PREMIUM
WIN_VER_WINDOWSVISTA_SMALLBUSINESS_SERVER_PREMIUM
Windows Vista Medium Business Server Management
Windows Vista Medium Business Server Management
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_MANAGEMENT
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_MANAGEMENT
Windows Vista Medium Business Server Messaging
Windows Vista Medium Business Server Messaging
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_MESSAGING
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_MESSAGING
Windows Vista Medium Business Server Security
Windows Vista Medium Business Server Security
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_SECURITY
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_SECURITY
Windows Vista Standard Server
Windows Vista Standard Server
WIN_VER_WINDOWSVISTA_STANDARD_SERVER
WIN_VER_WINDOWSVISTA_STANDARD_SERVER
Windows Vista Standard Server V
Windows Vista Standard Server V
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_V
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_V
Windows Vista Standard Server Core
Windows Vista Standard Server Core
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_CORE
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_CORE
Windows Vista Standard Server Core V
Windows Vista Standard Server Core V
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_CORE_V
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_CORE_V
Windows Vista Starter
Windows Vista Starter
WIN_VER_WINDOWSVISTA_STARTER
WIN_VER_WINDOWSVISTA_STARTER
Windows Vista Storage Enterprise Server
Windows Vista Storage Enterprise Server
WIN_VER_WINDOWSVISTA_STORAGE_ENTERPRISE_SERVER
WIN_VER_WINDOWSVISTA_STORAGE_ENTERPRISE_SERVER
Windows Vista Storage Express Server
Windows Vista Storage Express Server
WIN_VER_WINDOWSVISTA_STORAGE_EXPRESS_SERVER
WIN_VER_WINDOWSVISTA_STORAGE_EXPRESS_SERVER
Windows Vista Storage Standard Server
Windows Vista Storage Standard Server
WIN_VER_WINDOWSVISTA_STORAGE_STANDARD_SERVER
WIN_VER_WINDOWSVISTA_STORAGE_STANDARD_SERVER
Windows Vista Storage Workgroup Server
Windows Vista Storage Workgroup Server
WIN_VER_WINDOWSVISTA_STORAGE_WORKGROUP_SERVER
WIN_VER_WINDOWSVISTA_STORAGE_WORKGROUP_SERVER
Windows Vista Undefined
Windows Vista Undefined
WIN_VER_WINDOWSVISTA_UNDEFINED
WIN_VER_WINDOWSVISTA_UNDEFINED
Windows Vista Ultimate
Windows Vista Ultimate
WIN_VER_WINDOWSVISTA_ULTIMATE
WIN_VER_WINDOWSVISTA_ULTIMATE
Windows Vista Web Server
Windows Vista Web Server
WIN_VER_WINDOWSVISTA_WEB_SERVER
WIN_VER_WINDOWSVISTA_WEB_SERVER
Windows Vista Web Server Core
Windows Vista Web Server Core
WIN_VER_WINDOWSVISTA_WEB_SERVER_CORE
WIN_VER_WINDOWSVISTA_WEB_SERVER_CORE
Windows Vista Unlicensed
Windows Vista Unlicensed
WIN_VER_WINDOWSVISTA_UNLICENSED
WIN_VER_WINDOWSVISTA_UNLICENSED
Windows 2008
Windows 2008
WIN_VER_WINDOWS2008
WIN_VER_WINDOWS2008
Windows 2008 Business
Windows 2008 Business
WIN_VER_WINDOWS2008_BUSINESS
WIN_VER_WINDOWS2008_BUSINESS
Windows 2008 Cluster Server
Windows 2008 Cluster Server
WIN_VER_WINDOWS2008_CLUSTER_SERVER
WIN_VER_WINDOWS2008_CLUSTER_SERVER
Windows 2008 Datacenter Server
Windows 2008 Datacenter Server
WIN_VER_WINDOWS2008_DATACENTER_SERVER
WIN_VER_WINDOWS2008_DATACENTER_SERVER
Windows 2008 Datacenter Server Core
Windows 2008 Datacenter Server Core
WIN_VER_WINDOWS2008_DATACENTER_SERVER_CORE
WIN_VER_WINDOWS2008_DATACENTER_SERVER_CORE
Windows 2008 Datacenter Server Core V
Windows 2008 Datacenter Server Core V
WIN_VER_WINDOWS2008_DATACENTER_SERVER_CORE_V
WIN_VER_WINDOWS2008_DATACENTER_SERVER_CORE_V
Windows 2008 Datacenter Server V
Windows 2008 Datacenter Server V
WIN_VER_WINDOWS2008_DATACENTER_SERVER_V
WIN_VER_WINDOWS2008_DATACENTER_SERVER_V
Windows 2008 Enterprise
Windows 2008 Enterprise
WIN_VER_WINDOWS2008_ENTERPRICE
WIN_VER_WINDOWS2008_ENTERPRICE
Windows 2008 Enterprise Server
Windows 2008 Enterprise Server
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER
Windows 2008 Enterprise Server Core
Windows 2008 Enterprise Server Core
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_CORE
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_CORE
Windows 2008 Enterprise Server V
Windows 2008 Enterprise Server V
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_V
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_V
Windows 2008 Enterprise Server Core V
Windows 2008 Enterprise Server Core V
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_CORE_V
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_CORE_V
Windows 2008 Enterprise Server IA64
Windows 2008 Enterprise Server IA64
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_IA64
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_IA64
Windows 2008 Home Basic
Windows 2008 Home Basic
WIN_VER_WINDOWS2008_HOME_BASIC
WIN_VER_WINDOWS2008_HOME_BASIC
Windows 2008 Home Premium
Windows 2008 Home Premium
WIN_VER_WINDOWS2008_HOME_PREMIUM
WIN_VER_WINDOWS2008_HOME_PREMIUM
Windows 2008 Home Server
Windows 2008 Home Server
WIN_VER_WINDOWS2008_HOME_SERVER
WIN_VER_WINDOWS2008_HOME_SERVER
Windows 2008 Server For Small Business
Windows 2008 Server For Small Business
WIN_VER_WINDOWS2008_SERVER_FOR_SMALLBUSINESS
WIN_VER_WINDOWS2008_SERVER_FOR_SMALLBUSINESS
Windows 2008 Small Business Server
Windows 2008 Small Business Server
WIN_VER_WINDOWS2008_SMALLBUSINESS_SERVER
WIN_VER_WINDOWS2008_SMALLBUSINESS_SERVER
Windows 2008 Small Business Server Premium
Windows 2008 Small Business Server Premium
WIN_VER_WINDOWS2008_SMALLBUSINESS_SERVER_PREMIUM
WIN_VER_WINDOWS2008_SMALLBUSINESS_SERVER_PREMIUM
Windows 2008 Medium Business Server Management
Windows 2008 Medium Business Server Management
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_MANAGEMENT
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_MANAGEMENT
Windows 2008 Medium Business Server Messaging
Windows 2008 Medium Business Server Messaging
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_MESSAGING
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_MESSAGING
Windows 2008 Medium Business Server Security
Windows 2008 Medium Business Server Security
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_SECURITY
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_SECURITY
Windows 2008 Standard Server
Windows 2008 Standard Server
WIN_VER_WINDOWS2008_STANDARD_SERVER
WIN_VER_WINDOWS2008_STANDARD_SERVER
Windows 2008 Standard Server V
Windows 2008 Standard Server V
WIN_VER_WINDOWS2008_STANDARD_SERVER_V
WIN_VER_WINDOWS2008_STANDARD_SERVER_V
Windows 2008 Standard Server Core
Windows 2008 Standard Server Core
WIN_VER_WINDOWS2008_STANDARD_SERVER_CORE
WIN_VER_WINDOWS2008_STANDARD_SERVER_CORE
Windows 2008 Standard Server Core V
Windows 2008 Standard Server Core V
WIN_VER_WINDOWS2008_STANDARD_SERVER_CORE_V
WIN_VER_WINDOWS2008_STANDARD_SERVER_CORE_V
Windows 2008 Starter
Windows 2008 Starter
WIN_VER_WINDOWS2008_STARTER
WIN_VER_WINDOWS2008_STARTER
Windows 2008 Storage Enterprise Server
Windows 2008 Storage Enterprise Server
WIN_VER_WINDOWS2008_STORAGE_ENTERPRISE_SERVER
WIN_VER_WINDOWS2008_STORAGE_ENTERPRISE_SERVER
Windows 2008 Storage Express Server
Windows 2008 Storage Express Server
WIN_VER_WINDOWS2008_STORAGE_EXPRESS_SERVER
WIN_VER_WINDOWS2008_STORAGE_EXPRESS_SERVER
Windows 2008 Storage Standard Server
Windows 2008 Storage Standard Server
WIN_VER_WINDOWS2008_STORAGE_STANDARD_SERVER
WIN_VER_WINDOWS2008_STORAGE_STANDARD_SERVER
Windows 2008 Storage Workgroup Server
Windows 2008 Storage Workgroup Server
WIN_VER_WINDOWS2008_STORAGE_WORKGROUP_SERVER
WIN_VER_WINDOWS2008_STORAGE_WORKGROUP_SERVER
Windows 2008 Undefined
Windows 2008 Undefined
WIN_VER_WINDOWS2008_UNDEFINED
WIN_VER_WINDOWS2008_UNDEFINED
Windows 2008 Ultimate
Windows 2008 Ultimate
WIN_VER_WINDOWS2008_ULTIMATE
WIN_VER_WINDOWS2008_ULTIMATE
Windows 2008 Web Server
Windows 2008 Web Server
WIN_VER_WINDOWS2008_WEB_SERVER
WIN_VER_WINDOWS2008_WEB_SERVER
Windows 2008 Web Server Core
Windows 2008 Web Server Core
WIN_VER_WINDOWS2008_WEB_SERVER_CORE
WIN_VER_WINDOWS2008_WEB_SERVER_CORE
Windows 2008 Unlicensed
Windows 2008 Unlicensed
WIN_VER_WINDOWS2008_UNLICENSED
WIN_VER_WINDOWS2008_UNLICENSED
Windows 2008 R2
Windows 2008 R2
WIN_VER_WINDOWS2008R2
WIN_VER_WINDOWS2008R2
Windows 2008 R2 Business
Windows 2008 R2 Business
WIN_VER_WINDOWS2008R2_BUSINESS
WIN_VER_WINDOWS2008R2_BUSINESS
Windows 2008 R2 Cluster Server
Windows 2008 R2 Cluster Server
WIN_VER_WINDOWS2008R2_CLUSTER_SERVER
WIN_VER_WINDOWS2008R2_CLUSTER_SERVER
Windows 2008 R2 Datacenter Server
Windows 2008 R2 Datacenter Server
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER
Windows 2008 R2 Datacenter Server Core
Windows 2008 R2 Datacenter Server Core
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_CORE
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_CORE
Windows 2008 R2 Datacenter Server Core V
Windows 2008 R2 Datacenter Server Core V
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_CORE_V
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_CORE_V
Windows 2008 R2 Datacenter Server V
Windows 2008 R2 Datacenter Server V
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_V
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_V
Windows 2008 R2 Enterprise
Windows 2008 R2 Enterprise
WIN_VER_WINDOWS2008R2_ENTERPRICE
WIN_VER_WINDOWS2008R2_ENTERPRICE
Windows 2008 R2 Enterprise Server
Windows 2008 R2 Enterprise Server
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER
Windows 2008 R2 Enterprise Server Core
Windows 2008 R2 Enterprise Server Core
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_CORE
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_CORE
Windows 2008 R2 Enterprise Server V
Windows 2008 R2 Enterprise Server V
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_V
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_V
Windows 2008 R2 Enterprise Server Core V
Windows 2008 R2 Enterprise Server Core V
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_CORE_V
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_CORE_V
Windows 2008 R2 Enterprise Server IA64
Windows 2008 R2 Enterprise Server IA64
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_IA64
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_IA64
Windows 2008 R2 Home Basic
Windows 2008 R2 Home Basic
WIN_VER_WINDOWS2008R2_HOME_BASIC
WIN_VER_WINDOWS2008R2_HOME_BASIC
Windows 2008 R2 Home Premium
Windows 2008 R2 Home Premium
WIN_VER_WINDOWS2008R2_HOME_PREMIUM
WIN_VER_WINDOWS2008R2_HOME_PREMIUM
Windows 2008 R2 Home Server
Windows 2008 R2 Home Server
WIN_VER_WINDOWS2008R2_HOME_SERVER
WIN_VER_WINDOWS2008R2_HOME_SERVER
Windows 2008 R2 Server For Small Business
Windows 2008 R2 Server For Small Business
WIN_VER_WINDOWS2008R2_SERVER_FOR_SMALLBUSINESS
WIN_VER_WINDOWS2008R2_SERVER_FOR_SMALLBUSINESS
Windows 2008 R2 Small Business Server
Windows 2008 R2 Small Business Server
WIN_VER_WINDOWS2008R2_SMALLBUSINESS_SERVER
WIN_VER_WINDOWS2008R2_SMALLBUSINESS_SERVER
Windows 2008 R2 Small Business Server Premium
Windows 2008 R2 Small Business Server Premium
WIN_VER_WINDOWS2008R2_SMALLBUSINESS_SERVER_PREMIUM
WIN_VER_WINDOWS2008R2_SMALLBUSINESS_SERVER_PREMIUM
Windows 2008 R2 Medium Business Server Management
Windows 2008 R2 Medium Business Server Management
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_MANAGEMENT
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_MANAGEMENT
Windows 2008 R2 Medium Business Server Messaging
Windows 2008 R2 Medium Business Server Messaging
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_MESSAGING
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_MESSAGING
Windows 2008 R2 Medium Business Server Security
Windows 2008 R2 Medium Business Server Security
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_SECURITY
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_SECURITY
Windows 2008 R2 Standard Server
Windows 2008 R2 Standard Server
WIN_VER_WINDOWS2008R2_STANDARD_SERVER
WIN_VER_WINDOWS2008R2_STANDARD_SERVER
Windows 2008 R2 Standard Server V
Windows 2008 R2 Standard Server V
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_V
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_V
Windows 2008 R2 Standard Server Core
Windows 2008 R2 Standard Server Core
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_CORE
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_CORE
Windows 2008 R2 Standard Server Core V
Windows 2008 R2 Standard Server Core V
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_CORE_V
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_CORE_V
Windows 2008 R2 Starter
Windows 2008 R2 Starter
WIN_VER_WINDOWS2008R2_STARTER
WIN_VER_WINDOWS2008R2_STARTER
Windows 2008 R2 Storage Enterprise Server
Windows 2008 R2 Storage Enterprise Server
WIN_VER_WINDOWS2008R2_STORAGE_ENTERPRISE_SERVER
WIN_VER_WINDOWS2008R2_STORAGE_ENTERPRISE_SERVER
Windows 2008 R2 Storage Express Server
Windows 2008 R2 Storage Express Server
WIN_VER_WINDOWS2008R2_STORAGE_EXPRESS_SERVER
WIN_VER_WINDOWS2008R2_STORAGE_EXPRESS_SERVER
Windows 2008 R2 Storage Standard Server
Windows 2008 R2 Storage Standard Server
WIN_VER_WINDOWS2008R2_STORAGE_STANDARD_SERVER
WIN_VER_WINDOWS2008R2_STORAGE_STANDARD_SERVER
Windows 2008 R2 Storage Workgroup Server
Windows 2008 R2 Storage Workgroup Server
WIN_VER_WINDOWS2008R2_STORAGE_WORKGROUP_SERVER
WIN_VER_WINDOWS2008R2_STORAGE_WORKGROUP_SERVER
Windows 2008 R2 Undefined
Windows 2008 R2 Undefined
WIN_VER_WINDOWS2008R2_UNDEFINED
WIN_VER_WINDOWS2008R2_UNDEFINED
Windows 2008 R2 Ultimate
Windows 2008 R2 Ultimate
WIN_VER_WINDOWS2008R2_ULTIMATE
WIN_VER_WINDOWS2008R2_ULTIMATE
Windows 2008 R2 Web Server
Windows 2008 R2 Web Server
WIN_VER_WINDOWS2008R2_WEB_SERVER
WIN_VER_WINDOWS2008R2_WEB_SERVER
Windows 2008 R2 Web Server Core
Windows 2008 R2 Web Server Core
WIN_VER_WINDOWS2008R2_WEB_SERVER_CORE
WIN_VER_WINDOWS2008R2_WEB_SERVER_CORE
Windows 2008 R2 Unlicensed
Windows 2008 R2 Unlicensed
WIN_VER_WINDOWS2008R2_UNLICENSED
WIN_VER_WINDOWS2008R2_UNLICENSED
Windows 7
Windows 7
WIN_VER_WINDOWSSEVEN
WIN_VER_WINDOWSSEVEN
Windows 7 Business
Windows 7 Business
WIN_VER_WINDOWSSEVEN_BUSINESS
WIN_VER_WINDOWSSEVEN_BUSINESS
Windows 7 Cluster Server
Windows 7 Cluster Server
WIN_VER_WINDOWSSEVEN_CLUSTER_SERVER
WIN_VER_WINDOWSSEVEN_CLUSTER_SERVER
Windows 7 Datacenter Server
Windows 7 Datacenter Server
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER
Windows 7 Datacenter Server Core
Windows 7 Datacenter Server Core
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_CORE
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_CORE
Windows 7 Datacenter Server Core V
Windows 7 Datacenter Server Core V
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_CORE_V
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_CORE_V
Windows 7 Datacenter Server V
Windows 7 Datacenter Server V
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_V
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_V
Windows 7 Enterprise
Windows 7 Enterprise
WIN_VER_WINDOWSSEVEN_ENTERPRICE
WIN_VER_WINDOWSSEVEN_ENTERPRICE
Windows 7 Enterprise Server
Windows 7 Enterprise Server
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER
Windows 7 Enterprise Server Core
Windows 7 Enterprise Server Core
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_CORE
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_CORE
Windows 7 Enterprise Server V
Windows 7 Enterprise Server V
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_V
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_V
Windows 7 Enterprise Server Core V
Windows 7 Enterprise Server Core V
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_CORE_V
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_CORE_V
Windows 7 Enterprise Server IA64
Windows 7 Enterprise Server IA64
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_IA64
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_IA64
Windows 7 Home Basic
Windows 7 Home Basic
WIN_VER_WINDOWSSEVEN_HOME_BASIC
WIN_VER_WINDOWSSEVEN_HOME_BASIC
Windows 7 Home Premium
Windows 7 Home Premium
WIN_VER_WINDOWSSEVEN_HOME_PREMIUM
WIN_VER_WINDOWSSEVEN_HOME_PREMIUM
Windows 7 Home Server
Windows 7 Home Server
WIN_VER_WINDOWSSEVEN_HOME_SERVER
WIN_VER_WINDOWSSEVEN_HOME_SERVER
Windows 7 Server For Small Business
Windows 7 Server For Small Business
WIN_VER_WINDOWSSEVEN_SERVER_FOR_SMALLBUSINESS
WIN_VER_WINDOWSSEVEN_SERVER_FOR_SMALLBUSINESS
Windows 7 Small Business Server
Windows 7 Small Business Server
WIN_VER_WINDOWSSEVEN_SMALLBUSINESS_SERVER
WIN_VER_WINDOWSSEVEN_SMALLBUSINESS_SERVER
Windows 7 Small Business Server Premium
Windows 7 Small Business Server Premium
WIN_VER_WINDOWSSEVEN_SMALLBUSINESS_SERVER_PREMIUM
WIN_VER_WINDOWSSEVEN_SMALLBUSINESS_SERVER_PREMIUM
Windows 7 Medium Business Server Management
Windows 7 Medium Business Server Management
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_MANAGEMENT
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_MANAGEMENT
Windows 7 Medium Business Server Messaging
Windows 7 Medium Business Server Messaging
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_MESSAGING
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_MESSAGING
Windows 7 Medium Business Server Security
Windows 7 Medium Business Server Security
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_SECURITY
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_SECURITY
Windows 7 Standard Server
Windows 7 Standard Server
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER
Windows 7 Standard Server V
Windows 7 Standard Server V
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_V
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_V
Windows 7 Standard Server Core
Windows 7 Standard Server Core
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_CORE
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_CORE
Windows 7 Standard Server Core V
Windows 7 Standard Server Core V
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_CORE_V
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_CORE_V
Windows 7 Starter
Windows 7 Starter
WIN_VER_WINDOWSSEVEN_STARTER
WIN_VER_WINDOWSSEVEN_STARTER
Windows 7 Storage Enterprise Server
Windows 7 Storage Enterprise Server
WIN_VER_WINDOWSSEVEN_STORAGE_ENTERPRISE_SERVER
WIN_VER_WINDOWSSEVEN_STORAGE_ENTERPRISE_SERVER
Windows 7 Storage Express Server
Windows 7 Storage Express Server
WIN_VER_WINDOWSSEVEN_STORAGE_EXPRESS_SERVER
WIN_VER_WINDOWSSEVEN_STORAGE_EXPRESS_SERVER
Windows 7 Storage Standard Server
Windows 7 Storage Standard Server
WIN_VER_WINDOWSSEVEN_STORAGE_STANDARD_SERVER
WIN_VER_WINDOWSSEVEN_STORAGE_STANDARD_SERVER
Windows 7 Storage Workgroup Server
Windows 7 Storage Workgroup Server
WIN_VER_WINDOWSSEVEN_STORAGE_WORKGROUP_SERVER
WIN_VER_WINDOWSSEVEN_STORAGE_WORKGROUP_SERVER
Windows 7 Undefined
Windows 7 Undefined
WIN_VER_WINDOWSSEVEN_UNDEFINED
WIN_VER_WINDOWSSEVEN_UNDEFINED
Windows 7 Ultimate
Windows 7 Ultimate
WIN_VER_WINDOWSSEVEN_ULTIMATE
WIN_VER_WINDOWSSEVEN_ULTIMATE
Windows 7 Web Server
Windows 7 Web Server
WIN_VER_WINDOWSSEVEN_WEB_SERVER
WIN_VER_WINDOWSSEVEN_WEB_SERVER
Windows 7 Web Server Core
Windows 7 Web Server Core
WIN_VER_WINDOWSSEVEN_WEB_SERVER_CORE
WIN_VER_WINDOWSSEVEN_WEB_SERVER_CORE
Windows 7 Unlicensed
Windows 7 Unlicensed
WIN_VER_WINDOWSSEVEN_UNLICENSED
WIN_VER_WINDOWSSEVEN_UNLICENSED
Portuguese (Brazil)
Portuguese (Brazil)
Portuguese (Portugal)
Portuguese (Portugal)
Enigma_Plugin_OnSaveKey
Enigma_Plugin_OnSaveKey
Enigma_Plugin_OnLoadKey
Enigma_Plugin_OnLoadKey
ntdll.dll
ntdll.dll
LS_Enigma_Plugin_OnDeleteKey
LS_Enigma_Plugin_OnDeleteKey
TExecutedProcess
TExecutedProcess
CCommonOperationSystem
CCommonOperationSystem
ZwOpenKey
ZwOpenKey
ZwEnumerateValueKey
ZwEnumerateValueKey
ZwQueryKey
ZwQueryKey
ZwQueryValueKey
ZwQueryValueKey
ZwCreateKey
ZwCreateKey
ZwEnumerateKey
ZwEnumerateKey
ZwSetValueKey
ZwSetValueKey
ZwDeleteKey
ZwDeleteKey
ZwDeleteValueKey
ZwDeleteValueKey
ZwFlushKey
ZwFlushKey
ZwLoadKey
ZwLoadKey
ZwLoadKey2
ZwLoadKey2
ZwNotifyChangeKey
ZwNotifyChangeKey
ZwQueryMultipleValueKey
ZwQueryMultipleValueKey
ZwReplaceKey
ZwReplaceKey
ZwRestoreKey
ZwRestoreKey
ZwSaveKey
ZwSaveKey
ZwSetInformationKey
ZwSetInformationKey
ZwUnloadKey
ZwUnloadKey
ZwOpenKeyEx
ZwOpenKeyEx
TExported`
TExported`
.Uym1
.Uym1
USER32.DLL
USER32.DLL
EInvalidGraphicOperation
EInvalidGraphicOperation
uxtheme.dll
uxtheme.dll
Proportional
Proportional
MAPI32.DLL
MAPI32.DLL
TComboBoxExEnumerator
TComboBoxExEnumerator
ssHorizontal
ssHorizontal
OnKeyDown
OnKeyDown
OnKeyPress
OnKeyPress
OnKeyUp
OnKeyUp
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
JumpID("","%s")
JumpID("","%s")
HelpKeyword
HelpKeyword
OnExecute
OnExecute
ssHotTrack
ssHotTrack
TWindowState
TWindowState
poProportional
poProportional
TWMKey
TWMKey
ClientHeightTPF
ClientHeightTPF
KeyPreview
KeyPreview
WindowState,
WindowState,
Uh.FN
Uh.FN
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
vcltest3.dll
vcltest3.dll
User32.dll
User32.dll
AutoHotkeys
AutoHotkeys
AutoHotkeysH
AutoHotkeysH
TKeyEvent
TKeyEvent
TKeyPressEvent
TKeyPressEvent
crSQLWait
crSQLWait
%s (%s)
%s (%s)
hfTP
hfTP
imm32.dll
imm32.dll
w:\3rdparty\TntUnicode\Source\TntActnList.pas
w:\3rdparty\TntUnicode\Source\TntActnList.pas
PasswordChar
PasswordChar
w:\3rdparty\TntUnicode\Source\TntStdCtrls.pas
w:\3rdparty\TntUnicode\Source\TntStdCtrls.pas
w:\3rdparty\TntUnicode\Source\TntForms.pas
w:\3rdparty\TntUnicode\Source\TntForms.pas
w:\3rdparty\TntUnicode\Source\TntMenus.pas
w:\3rdparty\TntUnicode\Source\TntMenus.pas
Internal Error: SyncHotKeyPosition Failed ("%s" "%s").
Internal Error: SyncHotKeyPosition Failed ("%s" "%s").
w:\3rdparty\TntUnicode\Source\TntControls.pas
w:\3rdparty\TntUnicode\Source\TntControls.pas
Internal Error: SubClassUnicodeControl.Control is not Unicode.
Internal Error: SubClassUnicodeControl.Control is not Unicode.
.UnicodeClass
.UnicodeClass
TntUnicodeVcl.DestroyWindow
TntUnicodeVcl.DestroyWindow
Internal Error: Control does not support ITntGlyphButton.
Internal Error: Control does not support ITntGlyphButton.
dtPostMsg
dtPostMsg
Software\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion
ProductKey
ProductKey
Software\Microsoft\Windows NT\CurrentVersion
Software\Microsoft\Windows NT\CurrentVersion
\\.\PhysicalDrive0
\\.\PhysicalDrive0
\\.\%s
\\.\%s
\\.\Scsi0:
\\.\Scsi0:
\\.\SMARTVSD
\\.\SMARTVSD
w:\3rdparty\TntUnicode\Source\TntRegistry.pas
w:\3rdparty\TntUnicode\Source\TntRegistry.pas
#$%&'()* ,-./01234
#$%&'()* ,-./01234
PSAPI.dll
PSAPI.dll
s%F%,h
s%F%,h
VBoxService.exe
VBoxService.exe
ÞFAULT FOLDER%
ÞFAULT FOLDER%
%SYSTEM FOLDER%
%SYSTEM FOLDER%
%WINDOWS FOLDER%
%WINDOWS FOLDER%
Mutex object: Unique: %d-%d. Number: %d
Mutex object: Unique: %d-%d. Number: %d
DLL_Loader_Import_Unit
DLL_Loader_Import_Unit
TInitImport
TInitImport
Could not load library: %s
Could not load library: %s
k_ntdll.dll
k_ntdll.dll
File not found: %s
File not found: %s
Can't find DLL entry point %s in %s
Can't find DLL entry point %s in %s
"%s" %s
"%s" %s
%s %s
%s %s
mscorwks.dll
mscorwks.dll
mscoreei.dll
mscoreei.dll
clr.dll
clr.dll
.llfw
.llfw
%s\%.8x%.8x-%.8x%.8x
%s\%.8x%.8x-%.8x%.8x
X.xP`*U
X.xP`*U
)-%X`
)-%X`
coRegistratioKey
coRegistratioKey
ZwQuerySection, Unsupported class %d
ZwQuerySection, Unsupported class %d
KeySetValue unsupported value type
KeySetValue unsupported value type
ZwQueryValueKey, unsupported class %d
ZwQueryValueKey, unsupported class %d
ZwQueryKey, unsupported class %d
ZwQueryKey, unsupported class %d
ZwQueryObject with unsupported class
ZwQueryObject with unsupported class
ZwReadFileInformation with unsupported class
ZwReadFileInformation with unsupported class
ZwSetInformationFile with unsupported class
ZwSetInformationFile with unsupported class
sxs.dll
sxs.dll
THookWindowsAPI
THookWindowsAPI
nUc.HL@Y
nUc.HL@Y
\\.\NTICE
\\.\NTICE
\\.\SICE
\\.\SICE
\\.\SIWDEBUG
\\.\SIWDEBUG
I80|k.ZzD'
I80|k.ZzD'
)TEnigmaProtectorLoaderFormStartuppassword
)TEnigmaProtectorLoaderFormStartuppassword
DLL_Loader_RunPassword_Unit
DLL_Loader_RunPassword_Unit
.brOmxw
.brOmxw
1.2.3
1.2.3
Portable Network Graphics
Portable Network Graphics
decrypt_on_execute_begin
decrypt_on_execute_begin
ECRONEXECB
ECRONEXECB
decrypt_on_execute_end
decrypt_on_execute_end
ECRONEXECE
ECRONEXECE
.section
.section
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
inflate 1.2.3 Copyright 1995-2005 Mark Adler
inflate 1.2.3 Copyright 1995-2005 Mark Adler
;&;.;6;>;
;&;.;6;>;
?#?)?.?9?
?#?)?.?9?
1!1%1)1-11151~1
1!1%1)1-11151~1
3 3$3(3,30383`3
3 3$3(3,30383`3
;";&;*;.;2;
;";&;*;.;2;
;$
;$
7&7.787=7
7&7.787=7
[0/1;102
[0/1;102
0"0&0*000
0"0&0*000
5%5[5`5|5
5%5[5`5|5
3%4U4`4m4
3%4U4`4m4
1-171W1}1
1-171W1}1
0#0'0 0/0
0#0'0 0/0
1 1$1(1,1014181
1 1$1(1,1014181
8$8 82878
8$8 82878
; ;(;0;8;@;
; ;(;0;8;@;
@``@``@``@``@``@``@``@
@``@``@``@``@``@``@``@
@``@``@``@``@``
@``@``@``@``@``
333333333333333333
333333333333333333
33333833
33333833
3333339
3333339
3333333333333338
3333333333333338
:*"*"$3338
:*"*"$3338
3333333
3333333
33333333
33333333
33333333333
33333333333
3333333333338
3333333333338
33338?383
33338?383
333333333333
333333333333
:*3:"$3338
:*3:"$3338
333333333333333
333333333333333
TntWindows
TntWindows
KWindows
KWindows
UrlMon
UrlMon
_enigma_keygen_routines
_enigma_keygen_routines
virtualboximportunit
virtualboximportunit
KeyRoutines
KeyRoutines
nJwaWindows
nJwaWindows
DLL_Loader_Import_Unit
DLL_Loader_Import_Unit
user32.dll
user32.dll
SQLh
SQLh
QwV%Sh
QwV%Sh
k.ffv>OhE
k.ffv>OhE
W?.VI
W?.VI
D6.Be
D6.Be
advapi32.dll
advapi32.dll
version.dll
version.dll
gdi32.dll
gdi32.dll
shell32.dll
shell32.dll
SHFolder.dll
SHFolder.dll
shlwapi.dll
shlwapi.dll
GetWindowsDirectoryW
GetWindowsDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryA
GetCPInfo
GetCPInfo
GetKeyboardType
GetKeyboardType
VkKeyScanW
VkKeyScanW
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowsHookExW
SetWindowsHookExA
SetWindowsHookExA
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
MapVirtualKeyW
MapVirtualKeyW
MapVirtualKeyA
MapVirtualKeyA
LoadKeyboardLayoutA
LoadKeyboardLayoutA
GetKeyboardState
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyboardLayout
GetKeyState
GetKeyState
GetKeyNameTextW
GetKeyNameTextW
GetKeyNameTextA
GetKeyNameTextA
EnumWindows
EnumWindows
EnumThreadWindows
EnumThreadWindows
ActivateKeyboardLayout
ActivateKeyboardLayout
RegOpenKeyExA
RegOpenKeyExA
RegCloseKey
RegCloseKey
RegOpenKeyA
RegOpenKeyA
RegFlushKey
RegFlushKey
RegCreateKeyExA
RegCreateKeyExA
SetViewportOrgEx
SetViewportOrgEx
ShellExecuteW
ShellExecuteW
ShellExecuteA
ShellExecuteA
RtlFormatCurrentUserKeyPath
RtlFormatCurrentUserKeyPath
mscoree.dll
mscoree.dll
_CorExeMain
_CorExeMain
%SEoD
%SEoD
"%D>Q
"%D>Q
t.MN6
t.MN6
:z.dk>d
:z.dk>d
.AQIu
.AQIu
W'QJ%u
W'QJ%u
456789 /
456789 /
Keyw
Keyw
%s[3d]H
%s[3d]H
/Ehú
/Ehú
YL%COH@
YL%COH@
C".UHY
C".UHY
4%9s_
4%9s_
7.eEK
7.eEK
*%uf]
*%uf]
-Vu%d
-Vu%d
|.VMe
|.VMe
01234567
01234567
Z".HxdP5
Z".HxdP5
`Prkey
`Prkey
F%un]
F%un]
g4e.jX_$
g4e.jX_$
E.HTD
E.HTD
-vW}9
-vW}9
6
6
%UlJ0
%UlJ0
rviyc%s
rviyc%s
.LR$/
.LR$/
7%)ntl%uG:
7%)ntl%uG:
"%sc,4)
"%sc,4)
%SWv9Ia%
%SWv9Ia%
%cR1%
%cR1%
i|$_%DY
i|$_%DY
keyPs&
keyPs&
23456789
23456789
BkEY
BkEY
?,?3:4;8'9
?,?3:4;8'9
%s2 (
%s2 (
.HYFKJ
.HYFKJ
%SD3
%SD3
,u%X'
,u%X'
hA.Dh
hA.Dh
f;2%u[
f;2%u[
Q.KPe
Q.KPe
-y.lO
-y.lO
C Ö)
C Ö)
>X.PC$N(
>X.PC$N(
.UP?1
.UP?1
("9%s
("9%s
X%c&u
X%c&u
%s e(
%s e(
n@ %s
n@ %s
'()* ,-.
'()* ,-.
R%R.HE
R%R.HE
..tG9
..tG9
X.xP`
X.xP`
F
F
.VKg
.VKg
t..AA
t..AA
MSgfH
MSgfH
%sPtoTB
%sPtoTB
p,.TMnP
p,.TMnP
"&.IlF
"&.IlF
?%@Â
?%@Â
%D)Z`
%D)Z`
!%D&('
!%D&('
%uwpFyd
%uwpFyd
.pJr3
.pJr3
8$4,6-;9'
8$4,6-;9'
e D$mHg
e D$mHg
y_k%X
y_k%X
NLV%f
NLV%f
;.GnN
;.GnN
.GAeN
.GAeN
&'%XROA
&'%XROA
.PjtoN
.PjtoN
)KhC%D
)KhC%D
>,&%d
>,&%d
=1>>%C
=1>>%C
;!
;!
vr.rj
vr.rj
.wFKIzd
.wFKIzd
.iBer
.iBer
1234567
1234567
2W%uO
2W%uO
CV%DhY
CV%DhY
lq0Cwr.hV
lq0Cwr.hV
QwV%ShV
QwV%ShV
* !l
* !l
"%D*/
"%D*/
".Up}
".Up}
?f.nf
?f.nf
: ;2
: ;2
z8H;Z%U
z8H;Z%U
.PXtoN
.PXtoN
XNÊ
XNÊ
a%4U{
a%4U{
~;N%f
~;N%f
:R?X%x
:R?X%x
Site : hXXp://VVV.enigmaprotector.com/
Site : hXXp://VVV.enigmaprotector.com/
E-mail : support@enigmaprotector.com
E-mail : support@enigmaprotector.com
Unspecified error (%d) from %s.
Unspecified error (%d) from %s.
%Cookies FOLDER%
%Cookies FOLDER%
enigma_ide.dll
enigma_ide.dll
%s - Entry Point Not Found
%s - Entry Point Not Found
The procedure entry point %s could not be located in the dynamic link library %s.
The procedure entry point %s could not be located in the dynamic link library %s.
ÚysToKeyExp%
ÚysToKeyExp%
%RegKey%
%RegKey%
%KeyExpYear%
%KeyExpYear%
%KeyExpMonth%
%KeyExpMonth%
%KeyExpDay%
%KeyExpDay%
%CU_EXTFILES%
%CU_EXTFILES%
%CU_EXECPR%
%CU_EXECPR%
%CU_INSTSERV%
%CU_INSTSERV%
%CU_WINVER%
%CU_WINVER%
%CU_VIRTTOOLS%
%CU_VIRTTOOLS%
%TrialExecsTotal%
%TrialExecsTotal%
%TrialExecsLeft%
%TrialExecsLeft%
%TrialExecMinsTotal%
%TrialExecMinsTotal%
%TrialExecMinsLeft%
%TrialExecMinsLeft%
hh.exe
hh.exe
write.exe
write.exe
attrib.exe
attrib.exe
chkdsk.exe
chkdsk.exe
compact.exe
compact.exe
find.exe
find.exe
help.exe
help.exe
winver.exe
winver.exe
regsvr32.exe
regsvr32.exe
replace.exe
replace.exe
dllhost.exe
dllhost.exe
ntvdm.exe
ntvdm.exe
tcpsvcs.exe
tcpsvcs.exe
Was not able to create virtual value at ImportCall_ZwSetValueKey
Was not able to create virtual value at ImportCall_ZwSetValueKey
Was not able to create virtual key at ImportCall_ZwSetValueKey
Was not able to create virtual key at ImportCall_ZwSetValueKey
ImportCall_ZwLoadKey
ImportCall_ZwLoadKey
ImportCall_ZwLoadKey2
ImportCall_ZwLoadKey2
ImportCall_ZwNotifyChangeKey
ImportCall_ZwNotifyChangeKey
ImportCall_ZwQueryMultipleValueKey
ImportCall_ZwQueryMultipleValueKey
ImportCall_ZwReplaceKey
ImportCall_ZwReplaceKey
ImportCall_ZwRestoreKey
ImportCall_ZwRestoreKey
ImportCall_ZwSaveKey
ImportCall_ZwSaveKey
ImportCall_ZwSetInformationKey
ImportCall_ZwSetInformationKey
ImportCall_ZwUnloadKey
ImportCall_ZwUnloadKey
evb*.tmp
evb*.tmp
.manifest
.manifest
Unsupported call of ZwSetVolumeInformationFile
Unsupported call of ZwSetVolumeInformationFile
@:"/\|?*
@:"/\|?*
Application requires password to start
Application requires password to start
Enter password
Enter password
Change password
Change password
New password:
New password:
Confirm new password:
Confirm new password:
The file being readed is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corruped, try obtaining it again.nThis "Portable Network Graphics" image is not supported or it might be invalid.
The file being readed is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corruped, try obtaining it again.nThis "Portable Network Graphics" image is not supported or it might be invalid.
This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.
This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.
There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.oSome operation could not be performed because the system is out of resources. Close some windows and try again.OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.
There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.oSome operation could not be performed because the system is out of resources. Close some windows and try again.OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.
RichEdit line insertion error=This control requires version 4.70 or greater of COMCTL32.DLL
RichEdit line insertion error=This control requires version 4.70 or greater of COMCTL32.DLL
No help keyword specified.&Cannot change the size of a JPEG image
No help keyword specified.&Cannot change the size of a JPEG image
JPEG error #%d
JPEG error #%d
JPEG Image FilejThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.
JPEG Image FilejThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.
Description: BThe "Portable Network Graphics" image contains an invalid palette.
Description: BThe "Portable Network Graphics" image contains an invalid palette.
No help found for %s#No context-sensitive help installed$No topic-based help system installed
No help found for %s#No context-sensitive help installed$No topic-based help system installed
Alt Clipboard does not support Icons
Alt Clipboard does not support Icons
Text exceeds memo capacity/Menu '%s' is already being used by another form
Text exceeds memo capacity/Menu '%s' is already being used by another form
Unsupported clipboard format
Unsupported clipboard format
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
Failed to set data for '%s'
Failed to set data for '%s'
Resource %s not found
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Property %s does not exist
Thread creation error: %s
Thread creation error: %s
Thread Error: %s (%d)
Thread Error: %s (%d)
Invalid Format Specifier: %s7CreateClone not implemented for class %s with source %s
Invalid Format Specifier: %s7CreateClone not implemented for class %s with source %s
Cannot open file "%s". %s
Cannot open file "%s". %s
'%s' is an invalid mask at (%d)$''%s'' is not a valid component name
'%s' is an invalid mask at (%d)$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
Invalid data type for '%s' List capacity out of bounds (%d)
List count out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream
List index out of bounds (%d) Out of memory while expanding memory stream
Error reading %s%s%s: %s
Error reading %s%s%s: %s
Failed to get data for '%s'
Failed to get data for '%s'
.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
Ancestor for '%s' not found
Ancestor for '%s' not found
Cannot assign a %s to a %s
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot create file "%s". %s
Interface not supported
Interface not supported
%s (%s, line %d)
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
System Error. Code: %d.
Invalid variant operation
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
Operation not supported
External exception %x
External exception %x
Invalid pointer operation
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Invalid class typecast0Access violation at address %p. %s of address %p
Privileged instruction(Exception %s in module %s at %p.
Privileged instruction(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
No argument for format '%s'"Variant method calls not supported
!'%s' is not a valid integer value
!'%s' is not a valid integer value
I/O error %d
I/O error %d
Integer overflow Invalid floating point operation
Integer overflow Invalid floating point operation
%original file name%.exe_840_rwx_00CE0000_00004000:
Invalid NULL variant operation
Invalid NULL variant operation
Invalid variant operation
Invalid variant operation
Variant method calls not supported
Variant method calls not supported
Access violation at address %p. %s of address %p
Access violation at address %p. %s of address %p
Invalid pointer operation
Invalid pointer operation
Invalid floating point operation
Invalid floating point operation
I/O error %d
I/O error %d
'%s' is not a valid integer value
'%s' is not a valid integer value
DW20.EXE_1672:
.text
.text
`.data
`.data
.cdata
.cdata
.rsrc
.rsrc
watson.microsoft.com
watson.microsoft.com
.mdmp
.mdmp
%s?szAppName=%S&szAppVer=%S&szAppStamp=%S&szModName=%S&szModVer=%S&szModStamp=%S&fDebug=%S&offset=%S
%s?szAppName=%S&szAppVer=%S&szAppStamp=%S&szModName=%S&szModVer=%S&szModStamp=%S&fDebug=%S&offset=%S
/dw/stagetwo.asp
/dw/stagetwo.asp
%s/%S/%S/%S/%S/%S/%S/%S/%S.htm
%s/%S/%S/%S/%S/%S/%S/%S/%S.htm
Failed to fill report params from generic params
Failed to fill report params from generic params
Not offering reporting
Not offering reporting
%s Mode
%s Mode
Failed to get a reporting destination
Failed to get a reporting destination
Nothing to report from queue
Nothing to report from queue
No reports left to send. Removing queue triggers and bailing.
No reports left to send. Removing queue triggers and bailing.
Failed to plug UI; LCID=%u
Failed to plug UI; LCID=%u
Ignoring %S due to unknown queue version
Ignoring %S due to unknown queue version
Reporting is disabled
Reporting is disabled
SignOff queue reporting is disabled
SignOff queue reporting is disabled
Queued Reporting Mode called but still want to report to the queue
Queued Reporting Mode called but still want to report to the queue
Bad queue type to report from
Bad queue type to report from
No reports for given queue mask - %u
No reports for given queue mask - %u
Invalid queue mask - %u
Invalid queue mask - %u
Suspending: Force cancel to queued reporting
Suspending: Force cancel to queued reporting
Suspending: Force cancel to network reporting
Suspending: Force cancel to network reporting
CreateWindowExA failed with %d.
CreateWindowExA failed with %d.
Application Error Reporting %d
Application Error Reporting %d
WatsonQueuedReportingInstanceVerification
WatsonQueuedReportingInstanceVerification
riched20.dll
riched20.dll
qMicrosoft\PCHealth\ErrorReporting\DW
qMicrosoft\PCHealth\ErrorReporting\DW
msaccess.exe
msaccess.exe
hXXp://watson.microsoft.com/dw/dcp.asp
hXXp://watson.microsoft.com/dw/dcp.asp
hXXp://watson.microsoft.com/dw/watsoninfo.asp
hXXp://watson.microsoft.com/dw/watsoninfo.asp
dwintl20.dll
dwintl20.dll
Launching lightweight browser with URL
Launching lightweight browser with URL
mshtml.dll
mshtml.dll
Not reporting
Not reporting
Reporting
Reporting
DWBypassQueue
DWBypassQueue
DWExplainerURL
DWExplainerURL
DWNoSignOffQueueReporting
DWNoSignOffQueueReporting
DWAlwaysReport
DWAlwaysReport
DWReporteeName
DWReporteeName
DWURLLaunch
DWURLLaunch
DWNoExternalURL
DWNoExternalURL
DWStressReport
DWStressReport
ole32.dll
ole32.dll
imm32.dll
imm32.dll
BTLog.dll
BTLog.dll
Microsoft\PCHealth\ErrorReporting\DW
Microsoft\PCHealth\ErrorReporting\DW
HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\Debugger
HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug\Debugger
hXXp://
hXXp://
hXXps://
hXXps://
Software\Microsoft\PCHealth\ErrorReporting\DW\Debug
Software\Microsoft\PCHealth\ErrorReporting\DW\Debug
%s\%s
%s\%s
https
https
DwBTLog.log
DwBTLog.log
Failed to get minidump for %S!
Failed to get minidump for %S!
szAppName=%s
szAppName=%s
szAppVer=%d.%d.%d.%d
szAppVer=%d.%d.%d.%d
szAppStamp=x
szAppStamp=x
szModName=%s
szModName=%s
szModVer=%d.%d.%d.%d
szModVer=%d.%d.%d.%d
szModStamp=x
szModStamp=x
fDebug=%s
fDebug=%s
offset=x
offset=x
microsoft.com
microsoft.com
.msn.com
.msn.com
.microsoft.com
.microsoft.com
d:d:d d-d-d
d:d:d d-d-d
/dw/generictwo.asp
/dw/generictwo.asp
kernel32.dll
kernel32.dll
psapi.dll
psapi.dll
mso.dll
mso.dll
MsoDWRecover%x
MsoDWRecover%x
MsoDWHang%x
MsoDWHang%x
Launching browser with URL
Launching browser with URL
shell32.dll
shell32.dll
%d.%d.%d.%d
%d.%d.%d.%d
%d.%d.%d.%d.x.%d.%d
%d.%d.%d.%d.x.%d.%d
shfolder.dll
shfolder.dll
unknown.sig
unknown.sig
%s dw20.exe %d.%d.%d.%d
%s dw20.exe %d.%d.%d.%d
RegKey=
RegKey=
ResponseURL=
ResponseURL=
URLLaunch=
URLLaunch=
NoExternalURL=
NoExternalURL=
%s:(%s) XX
%s:(%s) XX
%s:(%s) X
%s:(%s) X
%s:(%s)
%s:(%s)
%s:(%s) %s
%s:(%s) %s
registry.txt
registry.txt
wql.txt
wql.txt
Windows NT Version %d.%d Build: %d
Windows NT Version %d.%d Build: %d
Stage 1 server response: %s
Stage 1 server response: %s
Stage 2 server response: %s
Stage 2 server response: %s
Stage 4 server response: %s
Stage 4 server response: %s
StatusCode: %d
StatusCode: %d
Opening server: %s
Opening server: %s
HttpOpen failed.
HttpOpen failed.
Opening %s Request:
Opening %s Request:
HTTPS
HTTPS
HttpSend Failed.
HttpSend Failed.
HttpWrite Failed, GLE=%d.
HttpWrite Failed, GLE=%d.
HttpEndReq failed.
HttpEndReq failed.
Count filename length greater than MAX_PATH, can't report.
Count filename length greater than MAX_PATH, can't report.
Filesystem reporting: count file updated
Filesystem reporting: count file updated
FReportToQueue: GetLastError=%u
FReportToQueue: GetLastError=%u
FReportToQueue: File Tree Root does not exist: %S
FReportToQueue: File Tree Root does not exist: %S
Failed to add heap file to cab: %S
Failed to add heap file to cab: %S
memory.dmp
memory.dmp
mdmpmem.hdmp
mdmpmem.hdmp
version.txt
version.txt
Network reporting complete.
Network reporting complete.
Network reporting failed.
Network reporting failed.
Application Error Reporting Transfer %d
Application Error Reporting Transfer %d
Filesystem reporting complete
Filesystem reporting complete
Filesystem reporting: cab successfully written
Filesystem reporting: cab successfully written
Filesystem reporting: could not find/create directory for cab/count
Filesystem reporting: could not find/create directory for cab/count
Filesystem reporting: redirection failure, too many redirects
Filesystem reporting: redirection failure, too many redirects
Filesystem reporting: redirection failure, no previous roots
Filesystem reporting: redirection failure, no previous roots
Filesystem reporting: improper file tree root
Filesystem reporting: improper file tree root
Filesystem reporting cancelled
Filesystem reporting cancelled
Filesystem reporting: file tree root is too long
Filesystem reporting: file tree root is too long
Record: 0xxx
Record: 0xxx
Address: 0xxx
Address: 0xxx
Code: 0xx
Code: 0xx
Flags: 0xx
Flags: 0xx
x:x
x:x
(%d.%d:%d.%d)
(%d.%d:%d.%d)
Checksum: 0xx
Checksum: 0xx
Time Stamp: 0xx
Time Stamp: 0xx
Image Base: 0xx
Image Base: 0xx
Image Size: 0xx
Image Size: 0xx
Module %d
Module %d
Windows NT %d.%d Build: %d
Windows NT %d.%d Build: %d
CPU AMD Feature Code: X
CPU AMD Feature Code: X
CPU Version: X CPU Feature Code: X
CPU Version: X CPU Feature Code: X
CPU Vendor Code: X - X - X
CPU Vendor Code: X - X - X
0xx:
0xx:
0xx: x x x x
0xx: x x x x
EFlags: 0xx ESP: 0xx SegSs: 0xx
EFlags: 0xx ESP: 0xx SegSs: 0xx
EIP: 0xx EBP: 0xx SegCs: 0xx
EIP: 0xx EBP: 0xx SegCs: 0xx
EBX: 0xx ECX: 0xx EDX: 0xx
EBX: 0xx ECX: 0xx EDX: 0xx
EDI: 0xx ESI: 0xx EAX: 0xx
EDI: 0xx ESI: 0xx EAX: 0xx
Thread ID: 0xx
Thread ID: 0xx
Thread %d
Thread %d
Memory Range %d
Memory Range %d
Software\Microsoft\PCHealth\ErrorReporting\DW
Software\Microsoft\PCHealth\ErrorReporting\DW
OkToReportFromTheseQueues
OkToReportFromTheseQueues
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Failed to obtain queue mutex. GetLastError=%u
Failed to obtain queue mutex. GetLastError=%u
FGetQueueMutex: WaitForSingleObject returned %u
FGetQueueMutex: WaitForSingleObject returned %u
Failed to open or create queue mutex. GetLastError=%u
Failed to open or create queue mutex. GetLastError=%u
Failed queued reporting pester check
Failed queued reporting pester check
Failed to create run reg key
Failed to create run reg key
Persistent run key is set.
Persistent run key is set.
CoInitializeEx() returned 0x%x.
CoInitializeEx() returned 0x%x.
Reporting to Admin Queue
Reporting to Admin Queue
Reporting to Regular Queue
Reporting to Regular Queue
Reporting to SignOff Queue
Reporting to SignOff Queue
Reporting to Headless Queue
Reporting to Headless Queue
Reporting from Regular Queue
Reporting from Regular Queue
Reporting from SignOff Queue
Reporting from SignOff Queue
Reporting from Headless Queue
Reporting from Headless Queue
OOM Failed to alloc QueuedReportData
OOM Failed to alloc QueuedReportData
FAllocSD: GetLastError=%u
FAllocSD: GetLastError=%u
%s%s%s
%s%s%s
FEnsureQueueDirW: GetLastError=%u
FEnsureQueueDirW: GetLastError=%u
Failed to write snt. GLE: %u
Failed to write snt. GLE: %u
Failed to create snt. GLE: %u
Failed to create snt. GLE: %u
Failed to set info; bad queue type: %u
Failed to set info; bad queue type: %u
Failed to open reg key for queue
Failed to open reg key for queue
Failed to get windows folder path for queue: %u
Failed to get windows folder path for queue: %u
Failed to move instr file from queue A to queue B - %u
Failed to move instr file from queue A to queue B - %u
Failed to move cab file from queue A to queue B - %u
Failed to move cab file from queue A to queue B - %u
Did not move any reports from admin q to user q
Did not move any reports from admin q to user q
Did not move any reports from user q to headless q
Did not move any reports from user q to headless q
Queue types that have reports: %u
Queue types that have reports: %u
Setting triggerAtConnectionMade to: %u
Setting triggerAtConnectionMade to: %u
Setting triggerAtLogon to: %u
Setting triggerAtLogon to: %u
Setting the queue trigger based upon: %u
Setting the queue trigger based upon: %u
SUCCESS adding report to queue
SUCCESS adding report to queue
Launched (%S)
Launched (%S)
Failed to store the SensSubscription. hr: %d
Failed to store the SensSubscription. hr: %d
failed to allocate PROGID string: %S
failed to allocate PROGID string: %S
Failed putting SubscriberInterface. hr: %d
Failed putting SubscriberInterface. hr: %d
Failed putting PerUser. hr: %d
Failed putting PerUser. hr: %d
Failed putting Enabled. hr: %d
Failed putting Enabled. hr: %d
Failed putting MachineName. hr: %d
Failed putting MachineName. hr: %d
Failed putting OwnerSID. hr: %d
Failed putting OwnerSID. hr: %d
Failed putting Description. hr: %d
Failed putting Description. hr: %d
Failed putting InterfaceID. hr: %d
Failed putting InterfaceID. hr: %d
Failed putting EventClassID. hr: %d
Failed putting EventClassID. hr: %d
Failed putting MethodName. hr: %d
Failed putting MethodName. hr: %d
Failed putting SubscriptionName. hr: %d
Failed putting SubscriptionName. hr: %d
Failed putting PublisherID. hr: %d
Failed putting PublisherID. hr: %d
Failed putting SubscriberCLSID. hr: %d
Failed putting SubscriberCLSID. hr: %d
Failed putting SubscriptionID. hr: %d
Failed putting SubscriptionID. hr: %d
Failed CoCreateInstance on EventSubscription. hr: %d
Failed CoCreateInstance on EventSubscription. hr: %d
Failed to remove the SensSubscription. hr: %d
Failed to remove the SensSubscription. hr: %d
failed to allocate query string: %S
failed to allocate query string: %S
Failed CoCreateInstance on EventSystem. hr: %d
Failed CoCreateInstance on EventSystem. hr: %d
SENS: StringFromIID() returned
SENS: StringFromIID() returned
DWSHARED: SysAllocString(%s) failed!
DWSHARED: SysAllocString(%s) failed!
Failed to subscribe subscription %u. hr: %d
Failed to subscribe subscription %u. hr: %d
Failed to get data for subscription %u. hr: %d
Failed to get data for subscription %u. hr: %d
Failed to query install reg key
Failed to query install reg key
Failed to open install reg key
Failed to open install reg key
Software\Microsoft\PCHealth\ErrorReporting\DW\Installed
Software\Microsoft\PCHealth\ErrorReporting\DW\Installed
HKEY_USERS\
HKEY_USERS\
HKEY_CURRENT_CONFIG\
HKEY_CURRENT_CONFIG\
HKEY_CLASSES_ROOT\
HKEY_CLASSES_ROOT\
HKEY_LOCAL_MACHINE\
HKEY_LOCAL_MACHINE\
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\
initing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
initing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
freeing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
freeing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
0addref CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
0addref CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
QIing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
QIing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
releasing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
releasing CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
deleting CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
deleting CDwAccessible: hwnd %x, idc %d, m_pDefAcc %x, cRef %d
creating CDwAccessible: hwnd %x, idc %d
creating CDwAccessible: hwnd %x, idc %d
WriteAtOffset.Write(0x%x) failed, 0xx
WriteAtOffset.Write(0x%x) failed, 0xx
WriteAtOffset.Seek(0x%x) failed, 0xx
WriteAtOffset.Seek(0x%x) failed, 0xx
WriteMemoryFromProcess.Read(0x%I64x, 0x%x) failed, 0xx
WriteMemoryFromProcess.Read(0x%I64x, 0x%x) failed, 0xx
WriteStringToPool.Write(0x%x) failed, 0xx
WriteStringToPool.Write(0x%x) failed, 0xx
WriteFunctionTable.RawEntries.Write(0x%x) failed, 0xx
WriteFunctionTable.RawEntries.Write(0x%x) failed, 0xx
WriteFunctionTable.RawTable.Write(0x%x) failed, 0xx
WriteFunctionTable.RawTable.Write(0x%x) failed, 0xx
WriteFunctionTableList.DumpTable.Write(0x%x) failed, 0xx
WriteFunctionTableList.DumpTable.Write(0x%x) failed, 0xx
WriteFunctionTableList.Seek(0x%x) failed, 0xx
WriteFunctionTableList.Seek(0x%x) failed, 0xx
WriteDirectoryEntry.Write(0x%x) failed, 0xx
WriteDirectoryEntry.Write(0x%x) failed, 0xx
Thread(0x%x) callback returned FALSE
Thread(0x%x) callback returned FALSE
WriteSystemInfo.GetOsCsdString failed, 0xx
WriteSystemInfo.GetOsCsdString failed, 0xx
WriteSystemInfo.GetCpuInfo failed, 0xx
WriteSystemInfo.GetCpuInfo failed, 0xx
CalculateSizeForSystemInfo.GetOsCsdString failed, 0xx
CalculateSizeForSystemInfo.GetOsCsdString failed, 0xx
WriteHeader.GetCurrentTimeDate failed, 0xx
WriteHeader.GetCurrentTimeDate failed, 0xx
WriteDirectoryTable.Seek(0x%x) failed, 0xx
WriteDirectoryTable.Seek(0x%x) failed, 0xx
WriteMemoryInfo.Write(0x%x) failed, 0xx
WriteMemoryInfo.Write(0x%x) failed, 0xx
WriteMemoryInfo.QueryVirtual(0x%I64x) failed, 0xx
WriteMemoryInfo.QueryVirtual(0x%I64x) failed, 0xx
WriteFullMemory virtual memory layout changed, retries %d, 0x%I64x (0x%I64x:0x%I64x) vs. 0x%I64x (0x%I64x:0x%I64x)
WriteFullMemory virtual memory layout changed, retries %d, 0x%I64x (0x%I64x:0x%I64x) vs. 0x%I64x (0x%I64x:0x%I64x)
WriteFullMemory.Memory.Write(0x%x) failed, 0xx
WriteFullMemory.Memory.Write(0x%x) failed, 0xx
WriteFullMemory.Memory.Read(0x%I64x, 0x%x) failed, retries %d, 0xx
WriteFullMemory.Memory.Read(0x%I64x, 0x%x) failed, retries %d, 0xx
WriteFullMemory.QueryVirtual(0x%I64x) for data failed, 0xx
WriteFullMemory.QueryVirtual(0x%I64x) for data failed, 0xx
WriteFullMemory.Desc.Write(0x%x) failed, 0xx
WriteFullMemory.Desc.Write(0x%x) failed, 0xx
WriteFullMemory.QueryVirtual(0x%I64x) for info failed, 0xx
WriteFullMemory.QueryVirtual(0x%I64x) for info failed, 0xx
Kernel minidump write failed, 0xx
Kernel minidump write failed, 0xx
MarshalExceptionPointers.CxRecord.Read(0x%I64x, 0x%x) failed, 0xx
MarshalExceptionPointers.CxRecord.Read(0x%I64x, 0x%x) failed, 0xx
MarshalExceptionPointers.ExRecord.Read(0x%I64x, 0x%x) failed, 0xx
MarshalExceptionPointers.ExRecord.Read(0x%I64x, 0x%x) failed, 0xx
Invalid exception record parameter count (0x%x)
Invalid exception record parameter count (0x%x)
Invalid exception record size (0x%x)
Invalid exception record size (0x%x)
Invalid CPU type (0x%x)
Invalid CPU type (0x%x)
Invalid function table size (0x%x)
Invalid function table size (0x%x)
GetSystemType.GetOsInfo failed, 0xx
GetSystemType.GetOsInfo failed, 0xx
GetSystemType.GetCpuType failed, 0xx
GetSystemType.GetCpuType failed, 0xx
Write.Start failed, 0xx
Write.Start failed, 0xx
Dump type requires streaming but output provider does not support streaming
Dump type requires streaming but output provider does not support streaming
Invalid dump type 0x%x
Invalid dump type 0x%x
dbghelp.dll
dbghelp.dll
Alloc(0x%x) failed
Alloc(0x%x) failed
Thread(0x%x) will not be included
Thread(0x%x) will not be included
GenGetImageSections.Section.Read(0x%I64x, 0x%x) failed, 0xx
GenGetImageSections.Section.Read(0x%I64x, 0x%x) failed, 0xx
GenGetImageSections.GenImageNtHeader(0x%I64x) failed
GenGetImageSections.GenImageNtHeader(0x%I64x) failed
GenGetImageSections.Read(0x%I64x, 0x%x) failed, 0xx
GenGetImageSections.Read(0x%I64x, 0x%x) failed, 0xx
0GenAllocateThreadObject.GetTebInfo(0x%x) failed, 0xx
0GenAllocateThreadObject.GetTebInfo(0x%x) failed, 0xx
GenAllocateThreadObject.GetContext(0x%x) failed, 0xx
GenAllocateThreadObject.GetContext(0x%x) failed, 0xx
GenAllocateThreadObject.Open(0x%x) failed, 0xx
GenAllocateThreadObject.Open(0x%x) failed, 0xx
GenReadTlsDirectory.Index(0x%I64x, %ws) failed, 0xx
GenReadTlsDirectory.Index(0x%I64x, %ws) failed, 0xx
GenReadTlsDirectory(0x%I64x, %ws) unknown machine 0x%x
GenReadTlsDirectory(0x%I64x, %ws) unknown machine 0x%x
GenReadTlsDirectory.Read(0x%I64x, %ws) failed, 0xx
GenReadTlsDirectory.Read(0x%I64x, %ws) failed, 0xx
GenAllocateModuleObject.GenDebugRecord(0x%I64x, %ws) failed, 0xx
GenAllocateModuleObject.GenDebugRecord(0x%I64x, %ws) failed, 0xx
GenAllocateModuleObject.GenImageNtHeader(0x%I64x, %ws) failed, 0xx
GenAllocateModuleObject.GenImageNtHeader(0x%I64x, %ws) failed, 0xx
GenAllocateModuleObject.GetImageHeaderInfo(0x%I64x, %ws) failed, 0xx
GenAllocateModuleObject.GetImageHeaderInfo(0x%I64x, %ws) failed, 0xx
GenAllocateModuleObject.GetVersion(0x%I64x, %ws) failed, 0xx
GenAllocateModuleObject.GetVersion(0x%I64x, %ws) failed, 0xx
GenAllocateProcessObject.GetPeb(0x%x) failed, 0xx
GenAllocateProcessObject.GetPeb(0x%x) failed, 0xx
GenIncludeUnwindInfoMemory.Enum(0x%I64x, 0x%x) failed, 0xx
GenIncludeUnwindInfoMemory.Enum(0x%I64x, 0x%x) failed, 0xx
GenGenTebMemory.TLS(0x%I64x) failed, 0xx
GenGenTebMemory.TLS(0x%I64x) failed, 0xx
GenScanAddressSpace.QueryVirtual(0x%I64x) failed, 0xx
GenScanAddressSpace.QueryVirtual(0x%I64x) failed, 0xx
0GenGetAuxMemory(%ws) failed, 0xx
0GenGetAuxMemory(%ws) failed, 0xx
GenGetProcessInfo.EnumUnloadedModules(0x%x) failed, 0xx
GenGetProcessInfo.EnumUnloadedModules(0x%x) failed, 0xx
GenGetProcessInfo.EnumUnloadedModules(0x%x) looped
GenGetProcessInfo.EnumUnloadedModules(0x%x) looped
GenGetProcessInfo.EnumFunctionTableEntries(0x%I64x, 0x%x) failed, 0xx
GenGetProcessInfo.EnumFunctionTableEntries(0x%I64x, 0x%x) failed, 0xx
GenGetProcessInfo.EnumFunctionTables(0x%x) failed, 0xx
GenGetProcessInfo.EnumFunctionTables(0x%x) failed, 0xx
GenGetProcessInfo.EnumFunctionTables(0x%x) looped
GenGetProcessInfo.EnumFunctionTables(0x%x) looped
GenGetProcessInfo.EnumModules(0x%x) failed, 0xx
GenGetProcessInfo.EnumModules(0x%x) failed, 0xx
GenGetProcessInfo.EnumModules(0x%x) looped
GenGetProcessInfo.EnumModules(0x%x) looped
GenGetProcessInfo.EnumThreads(0x%x) failed, 0xx
GenGetProcessInfo.EnumThreads(0x%x) failed, 0xx
GenGetProcessInfo.EnumThreads(0x%x) looped
GenGetProcessInfo.EnumThreads(0x%x) looped
GenGetProcessInfo.Start(0x%x) failed, 0xx
GenGetProcessInfo.Start(0x%x) failed, 0xx
GenWriteHandleData.Desc.Write(0x%x) failed, 0xx
GenWriteHandleData.Desc.Write(0x%x) failed, 0xx
GenWriteHandleData.Header.Write(0x%x) failed, 0xx
GenWriteHandleData.Header.Write(0x%x) failed, 0xx
GenWriteHandleData.ObjectName.Write(0x%x) failed, 0xx
GenWriteHandleData.ObjectName.Write(0x%x) failed, 0xx
GenWriteHandleData.ObjectNameLen.Write(0x%x) failed, 0xx
GenWriteHandleData.ObjectNameLen.Write(0x%x) failed, 0xx
GenWriteHandleData.TypeName.Write(0x%x) failed, 0xx
GenWriteHandleData.TypeName.Write(0x%x) failed, 0xx
GenWriteHandleData.TypeNameLen.Write(0x%x) failed, 0xx
GenWriteHandleData.TypeNameLen.Write(0x%x) failed, 0xx
GenWriteHandleData.Start(0x%x) failed, 0xx
GenWriteHandleData.Start(0x%x) failed, 0xx
GenWriteHandleData.Seek(0x%x) failed, 0xx
GenWriteHandleData.Seek(0x%x) failed, 0xx
Software\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls
Software\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls
Software\Microsoft\Windows NT\CurrentVersion\KnownManagedDebuggingDlls
Software\Microsoft\Windows NT\CurrentVersion\KnownManagedDebuggingDlls
version.dll
version.dll
ntdll.dll
ntdll.dll
%$%,%4%
%$%,%4%
S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%
S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%
b%c%d%e%f%g%h%i%j%k%l%
b%c%d%e%f%g%h%i%j%k%l%
!"#$%&'()* ,-./0123456789:;
!"#$%&'()* ,-./0123456789:;
!!!!2222
!!!!2222
%%%f||||
%%%f||||
!!!!2222||||
!!!!2222||||
!"#$%&'(
!"#$%&'(
'()* ,-./0
'()* ,-./0
&'()* ,-./
&'()* ,-./
&'()* ,-./012345
&'()* ,-./012345
3456789
3456789
.ASex
.ASex
!"#$%&'()* ,-./012
!"#$%&'()* ,-./012
!"#$%&'()
!"#$%&'()
?msodatad.dat
?msodatad.dat
msodatalast.dat
msodatalast.dat
Unicows.dll
Unicows.dll
Kernel32.dll
Kernel32.dll
SHLWAPI.DLL
SHLWAPI.DLL
GDI32.DLL
GDI32.DLL
wintrust.dll
wintrust.dll
1108160
1108160
0u.hN
0u.hN
0SSh
0SSh
t.WWWj
t.WWWj
PSSh07
PSSh07
t5SSh(
t5SSh(
PSSSSSSh
PSSSSSSh
0SSSSh
0SSSSh
ADVAPI32.dll
ADVAPI32.dll
COMCTL32.dll
COMCTL32.dll
GDI32.dll
GDI32.dll
KERNEL32.dll
KERNEL32.dll
OLEACC.dll
OLEACC.dll
OLEAUT32.dll
OLEAUT32.dll
MSVCRT.dll
MSVCRT.dll
RPCRT4.dll
RPCRT4.dll
SHELL32.dll
SHELL32.dll
SHLWAPI.dll
SHLWAPI.dll
urlmon.dll
urlmon.dll
USER32.dll
USER32.dll
VERSION.dll
VERSION.dll
WININET.dll
WININET.dll
RegCloseKey
RegCloseKey
RegOpenKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyExA
ReportEventA
ReportEventA
ReportEventW
ReportEventW
RegEnumKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegQueryInfoKeyW
GetProcessHeap
GetProcessHeap
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryW
_amsg_exit
_amsg_exit
_acmdln
_acmdln
ShellExecuteExA
ShellExecuteExA
UrlGetPartA
UrlGetPartA
CreateURLMoniker
CreateURLMoniker
CreateDialogIndirectParamA
CreateDialogIndirectParamA
EnumWindows
EnumWindows
HttpQueryInfoA
HttpQueryInfoA
HttpSendRequestExA
HttpSendRequestExA
HttpOpenRequestA
HttpOpenRequestA
InternetCanonicalizeUrlA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetCrackUrlA
HttpEndRequestA
HttpEndRequestA
dw20.pdb
dw20.pdb
\devsplab1\otools\BBT_TEMP\DW20O.pdb
\devsplab1\otools\BBT_TEMP\DW20O.pdb
winword.exe
winword.exe
wwordlt.exe
wwordlt.exe
excel.exe
excel.exe
excellt.exe
excellt.exe
mspub.exe
mspub.exe
frontpg.exe
frontpg.exe
outlook.exe
outlook.exe
powerpnt.exe
powerpnt.exe
powpntlt.exe
powpntlt.exe
onenote.exe
onenote.exe
infopath.exe
infopath.exe
winproj.exe
winproj.exe
ois.exe
ois.exe
visio.exe
visio.exe
`!`'`)` `
`!`'`)` `
e%f-f|3 f'f/f
e%f-f|3 f'f/f
]!^"^#^ ^$^
]!^"^#^ ^$^
t.uGuHu
t.uGuHu
x4x7x%x-x x
x4x7x%x-x x
h&h(h.hMh:h%h h,k/k-k1k4kmk
h&h(h.hMh:h%h h,k/k-k1k4kmk
k%lzmcmdmvm
k%lzmcmdmvm
^Q]Q~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP
^Q]Q~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP
]8^6^3^7^
]8^6^3^7^
ichczc]eVeQeYeWe_UOeXeUeTe
ichczc]eVeQeYeWe_UOeXeUeTe
{1{ {-{/{2{8{
{1{ {-{/{2{8{
r6s%s4s)s:t*t3t"t%t5t6t4t/t
r6s%s4s)s:t*t3t"t%t5t6t4t/t
t&t(t%u&ukuju
t&t(t%u&ukuju
WHX%X
WHX%X
`IaJa aEa6a2a.aFa/aOa)a@a bh
`IaJa aEa6a2a.aFa/aOa)a@a bh
d@d%d'd
d@d%d'd
duewexei
duewexei
kCpDpJpHpIpEpFp
kCpDpJpHpIpEpFp
S$S%S&S'S(S)S S,S.S2S3S5S6S8S:S;SBSFSKSNSOSPSUSVSXSYS[S]S_SbSdSeSgShSiSjSkSmStSvSzS}S~S
S$S%S&S'S(S)S S,S.S2S3S5S6S8S:S;SBSFSKSNSOSPSUSVSXSYS[S]S_SbSdSeSgShSiSjSkSmStSvSzS}S~S
U U!U"U#U$U%U(U)U U:U=U?UBUGUIULUSUTUXUYUZU[U]U`UgUhUiUkUlUmUnUoUpUqUrUsUtUxUyUzU
U U!U"U#U$U%U(U)U U:U=U?UBUGUIULUSUTUXUYUZU[U]U`UgUhUiUkUlUmUnUoUpUqUrUsUtUxUyUzU
c c!c"c#c$c%c&c'c.c0c1c5c7c?cRcSc[c\c]c^c_c`cacbcccdcfcjclcsctcyc~c
c c!c"c#c$c%c&c'c.c0c1c5c7c?cRcSc[c\c]c^c_c`cacbcccdcfcjclcsctcyc~c
m!m#m$m&mCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWm[m\m]mkmqmrmsm
m!m#m$m&mCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWm[m\m]mkmqmrmsm
nRsSsh
nRsSsh
evg%f
evg%f
m.tRa
m.tRa
gtr%x
gtr%x
Q%SKg
Q%SKg
f.ebp>QI
f.ebp>QI
y.yxT
y.yxT
fn:q%uN
fn:q%uN
aw.Toiz
aw.Toiz
RMeXe
RMeXe
S#S$S%S;ScSdSrSsStSuS
S#S$S%S;ScSdSrSsStSuS
`!`"`&`'`)`*` `,`-`.`/`0`2`3`4`5`6`:`=`>`?`
`!`"`&`'`)`*` `,`-`.`/`0`2`3`4`5`6`:`=`>`?`
^ ^!^"^#^$^%^&^'^.^}^
^ ^!^"^#^$^%^&^'^.^}^
c c!c"c#c$c%c&c'c*c7c:c;cSc[c1e?e@eAeBeCeDeEe
c c!c"c#c$c%c&c'c*c7c:c;cSc[c1e?e@eAeBeCeDeEe
f f!f"f#f$f%f&f'f(f)f*f f,f-f
f f!f"f#f$f%f&f'f(f)f*f f,f-f
m m!m"m#m$m%m&m'm(m)m*m m,m-m.m1m2m3m4m5m6m7m8m9m:m;mm?m@mBmCmDmGmHmImJmKmLmMmNmOmPmQmRmSmTmUm
m m!m"m#m$m%m&m'm(m)m*m m,m-m.m1m2m3m4m5m6m7m8m9m:m;mm?m@mBmCmDmGmHmImJmKmLmMmNmOmPmQmRmSmTmUm
u u-u.uFuGuHuIuJuKuLuMuNuOuPuQuRuSu
u u-u.uFuGuHuIuJuKuLuMuNuOuPuQuRuSu
U U!U"U#U$U%U&U'U(U4UJU
U U!U"U#U$U%U&U'U(U4UJU
](^)^*^ ^,^-^/^0^1^
](^)^*^ ^,^-^/^0^1^
m/mAmFmVmWmXmYmZm[m\m]m^m_m`mambmcmdmemfmgmhmimjmkmlmmmnmompmqmrmsmtmumvmwmxmymzm{m|m}m~m
m/mAmFmVmWmXmYmZm[m\m]m^m_m`mambmcmdmemfmgmhmimjmkmlmmmnmompmqmrmsmtmumvmwmxmymzm{m|m}m~m
x x!x"x#x$x%x'x(x)x*x x,x.x/x0x1x2x3x4x5x6x7x8x9x:x;xx?x@xAxXy_yaycydyeygyiyjykylynyoy
x x!x"x#x$x%x'x(x)x*x x,x.x/x0x1x2x3x4x5x6x7x8x9x:x;xx?x@xAxXy_yaycydyeygyiyjykylynyoy
} }!}"}#}$}%}&}'}
} }!}"}#}$}%}&}'}
] ]!]"]#]$]%]&]'](])]*] ],]-].]/]0]
] ]!]"]#]$]%]&]'](])]*] ],]-].]/]0]
]2^3^4^5^6^7^8^9^:^;^^
]2^3^4^5^6^7^8^9^:^;^^
cMeNeOePeQeReSeTeUeWeXeYeZe[e]ebe
cMeNeOePeQeReSeTeUeWeXeYeZe[e]ebe
X X!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X3X4X6X7X8X9X:X;XX?X@XAXBXCXDXEXFXGXHXJXTX_X`XfXmX
X X!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X3X4X6X7X8X9X:X;XX?X@XAXBXCXDXEXFXGXHXJXTX_X`XfXmX
d%d-d0d=dRdad2e\e^e_e`eaecedeeefegeheiejele
d%d-d0d=dRdad2e\e^e_e`eaecedeeefegeheiejele
s"s#s$s%s&s(s)s,s-s/s0s1s2s3s4s5s6s8s9s>s@sGs
s"s#s$s%s&s(s)s,s-s/s0s1s2s3s4s5s6s8s9s>s@sGs
u$u%u&u/ujukulumunuouqurusutu
u$u%u&u/ujukulumunuouqurusutu
duewexeyeze{e
duewexeyeze{e
~ ~!~"~#~$~%~&~'~(~*~ ~-~8~:~0
~ ~!~"~#~$~%~&~'~(~*~ ~-~8~:~0
| |!|"|#|$|%|&|(|)|*|-|.|/|0|1|2|6|
| |!|"|#|$|%|&|(|)|*|-|.|/|0|1|2|6|
{3~3}3|3
{3~3}3|3
eZl%u
eZl%u
Q.YeY
Q.YeY
R:\Sg|p5rL
R:\Sg|p5rL
e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexei
e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexei
s4s/s)s%s>sNsOs
s4s/s)s%s>sNsOs
s&t*t)t.tbt
s&t*t)t.tbt
2%2.bx
2%2.bx
{ | }9},
{ | }9},
d6exe9j
d6exe9j
]%sOu4](n
]%sOu4](n
m.t.zB}
m.t.zB}
w%xIyWy
w%xIyWy
^vcÓv
^vcÓv
%f?iCt
%f?iCt
U>_.lE
U>_.lE
f.ebp
f.ebp
.nrR=
.nrR=
{fn:q%uN
{fn:q%uN
%original file name%.exe
%original file name%.exe
name="Microsoft.Windows.ErrorReporter"
name="Microsoft.Windows.ErrorReporter"
version="5.1.0.0"
version="5.1.0.0"
publicKeyToken="6595b64144ccf1df" />
publicKeyToken="6595b64144ccf1df" />
Windows Error Reporting
Windows Error Reporting
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
1%s\%s\%s\%s\%s\%s\%s\%s
1%s\%s\%s\%s\%s\%s\%s\%s
AppName: %s AppVer: %s AppStamp:%s
AppName: %s AppVer: %s AppStamp:%s
ModName: %s ModVer: %s ModStamp:%s
ModName: %s ModVer: %s ModStamp:%s
fDebug: %s Offset: %s
fDebug: %s Offset: %s
Main_AlwaysReportBtn=
Main_AlwaysReportBtn=
Main_NoReportBtn=
Main_NoReportBtn=
Main_ReportBtn=
Main_ReportBtn=
General_Reportee=
General_Reportee=
CheckBoxRegKey=
CheckBoxRegKey=
ReportingFlags=
ReportingFlags=
Stage1URL=
Stage1URL=
Stage2URL=
Stage2URL=
%General_Reportee%
%General_Reportee%
%u %s
%u %s
%u.%u %s
%u.%u %s
%s %s %s %s in %s %s %s fDebug %s at offset %s
%s %s %s %s in %s %s %s fDebug %s at offset %s
Bucket: d
Bucket: d
BucketTable %d
BucketTable %d
%s, %s, %s, %s, %s, %s, %s, %s, %s, %s %s
%s, %s, %s, %s, %s, %s, %s, %s, %s, %s %s
\dw.log
\dw.log
policy.txt
policy.txt
crash.log
crash.log
status.txt
status.txt
hits.log
hits.log
count.txt
count.txt
%s\%s\%s
%s\%s\%s
%s\%s\%s\%s
%s\%s\%s\%s
eDWQueuedReporting
eDWQueuedReporting
DWPersistentQueuedReporting
DWPersistentQueuedReporting
"%s\%s" -%c
"%s\%s" -%c
dwtrig20.exe
dwtrig20.exe
ReportSize=
ReportSize=
\*.cab
\*.cab
dwq.snt
dwq.snt
"%s" -%c %u
"%s" -%c %u
SEventSystem.EventSubscription
SEventSystem.EventSubscription
SubscriptionID=%s
SubscriptionID=%s
#$%&%&'(
#$%&%&'(
Comctl32.dll
Comctl32.dll
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\25B62C.dmp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\25B62C.dmp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp
.NET Runtime 4.0 Error Reporting
.NET Runtime 4.0 Error Reporting
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\dw.log
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\dw.log
Microsoft Application Error Reporting
Microsoft Application Error Reporting
11.0.8160
11.0.8160
Windows
Windows
DW20.Exe
DW20.Exe
%original file name%.exe_840_rwx_00E70000_00034000:
Interface not supported
Interface not supported
External exception %x
External exception %x
Variant method calls not supported
Variant method calls not supported
Invalid variant operation
Invalid variant operation
Invalid floating point operation
Invalid floating point operation
Invalid pointer operation
Invalid pointer operation
/* Dr Brian Gladman (gladman@seven77.demon.co.uk) 14th January 1999 */
/* Dr Brian Gladman (gladman@seven77.demon.co.uk) 14th January 1999 */
Portable Network Graphics
Portable Network Graphics
2.4.7
2.4.7
%C$C1
%C$C1
c:\%original file name%.exe
c:\%original file name%.exe
.UetR
.UetR
\license.dat
\license.dat
application.exe
application.exe
%original file name%.exe_840_rwx_00EB0000_00004000:
%System%\advapi32.dll0
%System%\advapi32.dll0
C:\WINDO
C:\WINDO
|ntdll.dll
|ntdll.dll
a8b5fffb0341a870b62827.exe
a8b5fffb0341a870b62827.exe
|kernel32.dll
|kernel32.dll
5fffb0341a870b62827.exe
5fffb0341a870b62827.exe
A~user32.dll
A~user32.dll
wgdi32.dll
wgdi32.dll
wadvapi32.dll
wadvapi32.dll
wrpcrt4.dll
wrpcrt4.dll
wsecur32.dll
wsecur32.dll
woleaut32.dll
woleaut32.dll
wmsvcrt.dll
wmsvcrt.dll
Nwole32.dll
Nwole32.dll
|shell32.dll
|shell32.dll
wshlwapi.dll
wshlwapi.dll
wversion.dll
wversion.dll
ymscoree.dll
ymscoree.dll
9vimm32.dll
9vimm32.dll
blpk.dll
blpk.dll
tusp10.dll
tusp10.dll
=wcomctl32.dll
=wcomctl32.dll
]comctl32.dll
]comctl32.dll
xvshfolder.dll
xvshfolder.dll
ÞFAULT FOLDER%
ÞFAULT FOLDER%
HttpHelper.dll
HttpHelper.dll
%original file name%.exe_840_rwx_00EC0000_00004000:
%WinDir%\Microsoft.NET\Framework\v4.0.30319\clrjit.dllH
%WinDir%\Microsoft.NET\Framework\v4.0.30319\clrjit.dllH
dw20.exe.con
dw20.exe.con
%original file name%.exe_840_rwx_00ECC000_00014000:
%original file name%.exe.con8
%original file name%.exe.con8
2.4.7
2.4.7
%C$C1
%C$C1
.text
.text
`.rsrc
`.rsrc
@.reloc
@.reloc
get_AllKeys
get_AllKeys
get_ClientCertificates
get_ClientCertificates
X509CertificateEnumerator
X509CertificateEnumerator
HttpRequestHeader
HttpRequestHeader
IWebProxy
IWebProxy
b__0
b__0
System.Core
System.Core
System.Linq
System.Linq
.NETFramework,Version=v4.0
.NETFramework,Version=v4.0
.NET Framework 4
.NET Framework 4
HttpHelper
HttpHelper
hXXp://VVV.httphelper.com/
hXXp://VVV.httphelper.com/
$b3dfad27-f808-43d6-b66d-f7dc59221472
$b3dfad27-f808-43d6-b66d-f7dc59221472
1.8.0.0
1.8.0.0
E:\googleDownLoad\328_0827\LuMianDan v2.2.1_04291602\CsharpHttpHelper\obj\Debug\HttpHelper.pdb
E:\googleDownLoad\328_0827\LuMianDan v2.2.1_04291602\CsharpHttpHelper\obj\Debug\HttpHelper.pdb
mscoree.dll
mscoree.dll
\license.dat
\license.dat
{0}={1};
{0}={1};
{0}{1}{2}
{0}{1}{2}
CN=58.221.61.185, O=Default Company Ltd
CN=58.221.61.185, O=Default Company Ltd
hXXp://
hXXp://
hXXps://
hXXps://
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
HttpHelper.dll
HttpHelper.dll
%original file name%.exe_840_rwx_00EEC000_00004000:
System.Text.RegularExpressions
System.Text.RegularExpressions
System.IO
System.IO
.cctor
.cctor
System.Web
System.Web
System.Web.Configuration
System.Web.Configuration
FormsAuthPasswordFormat
FormsAuthPasswordFormat
System.Web.Security
System.Web.Security
HashPasswordForStoringInConfigFile
HashPasswordForStoringInConfigFile
System.Web.Extensions
System.Web.Extensions
System.Web.Script.Serialization
System.Web.Script.Serialization
HttpUtility
HttpUtility
UrlDecode
UrlDecode
UrlEncode
UrlEncode
HttpContext
HttpContext
HttpRequest
HttpRequest
get_Url
get_Url
get_RawUrl
get_RawUrl
WebRequest
WebRequest
WebResponse
WebResponse
WebException
WebException
System.IO.Compression
System.IO.Compression
RemoteCertificateValidationCallback
RemoteCertificateValidationCallback
set_ServerCertificateValidationCallback
set_ServerCertificateValidationCallback
get_AllKeys
get_AllKeys
get_ClientCertificates
get_ClientCertificates
X509CertificateEnumerator
X509CertificateEnumerator
HttpRequestHeader
HttpRequestHeader
IWebProxy
IWebProxy
b__0
b__0
System.Core
System.Core
System.Linq
System.Linq
.NETFramework,Version=v4.0
.NETFramework,Version=v4.0
.NET Framework 4
.NET Framework 4
HttpHelper
HttpHelper
hXXp://VVV.httphelper.com/
hXXp://VVV.httphelper.com/
$b3dfad27-f808-43d6-b66d-f7dc59221472
$b3dfad27-f808-43d6-b66d-f7dc59221472
1.8.0.0
1.8.0.0
E:\googleDownLoad\328_0827\LuMianDan v2.2.1_04291602\CsharpHttpHelper\obj\Debug\HttpHelper.pdb
E:\googleDownLoad\328_0827\LuMianDan v2.2.1_04291602\CsharpHttpHelper\obj\Debug\HttpHelper.pdb
mscoree.dll
mscoree.dll
{0}={1};
{0}={1};
{0}{1}{2}
{0}{1}{2}
CN=58.221.61.185, O=Default Company Ltd
CN=58.221.61.185, O=Default Company Ltd
hXXp://
hXXp://
hXXps://
hXXps://
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
HttpHelper.dll
HttpHelper.dll
%original file name%.exe_840_rwx_00EFC000_00004000:
ntdll.dll
ntdll.dll
.manifest
.manifest