Worm.Win32.Rebhip_a31e71b0d3 – Adaware

Dynamic Analysis

Payload

Behaviour	Description
WormAutorun	A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Worm's file once a user opens a drive's folder in Windows Explorer.

Process activity

The Worm creates the following process(es):

FAPCFPRO.exe:352
%original file name%.exe:928

The Worm injects its code into the following process(es):

global loader ultra v4.2.exe:1340
svchost.exe:2000
Explorer.EXE:1140

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process global loader ultra v4.2.exe:1340 makes changes in the file system.

The Worm creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Cookies\index.dat (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@rlhackers.com[2].txt (225 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@rlhackers.com[1].txt (225 bytes)

The Worm deletes the following file(s):

%Documents and Settings%\%current user%\Cookies\Current_User@rlhackers.com[1].txt (0 bytes)

The process %original file name%.exe:928 makes changes in the file system.

The Worm creates and/or writes to the following file(s):

%System%\install\FAPCFPRO.exe (9605 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\XX--XX--XX.txt (7972 bytes)

Registry activity

The process global loader ultra v4.2.exe:1340 makes changes in the system registry.

The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "15 B2 D7 FC 5C B9 69 FE 9C 7F 0E 93 73 CE 27 16"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Worm modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Worm modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Worm modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Worm deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process FAPCFPRO.exe:352 makes changes in the system registry.

The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7D 11 0E B0 91 E8 5F 16 D6 82 82 DC 27 B5 6B 2E"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

The process %original file name%.exe:928 makes changes in the system registry.

The Worm creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "EA 6C A9 D4 42 D8 01 AE E9 D5 C3 5E 2F 57 BA 3A"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Policies" = "%System%\install\FAPCFPRO.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run]
"Policies" = "%System%\install\FAPCFPRO.exe"

[HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{305TU3L7-8RB7-5EOC-HB87-QQ62DA7A00PU}]
"StubPath" = "%System%\install\FAPCFPRO.exe Restart"

Dropped PE files

MD5	File path
fb159f053dfc7853401905a846076bf7	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\global loader ultra v4.2.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Worm's file once a user opens a drive's folder in Windows Explorer.

Removals

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):
FAPCFPRO.exe:352
%original file name%.exe:928
Delete the original Worm file.
Delete or disinfect the following files created/modified by the Worm:
%Documents and Settings%\%current user%\Cookies\index.dat (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@rlhackers.com[2].txt (225 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@rlhackers.com[1].txt (225 bytes)
%System%\install\FAPCFPRO.exe (9605 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\XX--XX--XX.txt (7972 bytes)
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
CODE	4096	45512	45568	4.44597	4a2150bf37c4ff6bbd8f4f2c3a09b096
DATA	53248	544	1024	1.91604	dd653175899ceecf929eb6d19ce189b4
BSS	57344	4593	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	65536	3044	3072	3.30697	4f982c9b59dc3fc83ad5a7c9912faa66
.tls	69632	8	0	0	d41d8cd98f00b204e9800998ecf8427e
.rdata	73728	24	512	0.142404	a270a5e1f4f71f9ddb31027f913842a2
.reloc	77824	2656	3072	4.32933	ba51f7deda6128aa3417cb4fe1f7eb61
.rsrc	81920	1494364	1494528	5.49945	cd18816543135c11b31fbc01044a6523

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
hxxp://rlhackers.com.br/red.html?nocache	104.28.23.42
hxxp://rlhackers.com.br/red2.html?nocache	104.28.23.42
hxxp://videospornoadultos.net/loader/info/go.txt?nocache	192.95.16.5
hxxp://videospornoadultos.net/loader/info/fapcf.txt?nocache	192.95.16.5
rafaelsilva121.no-ip.org

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /loader/info/fapcf.txt?nocache HTTP/1.1

Host: videospornoadultos.net

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 404 Not Found

Content-Type: text/html; charset=iso-8859-1

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 19 Sep 2015 10:38:47 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/fapcf.txt?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS

00152..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL /loader/info/fapcf.txt was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>...HTTP/1.1 404 Not Found..Content-Type: text/html; charset=iso-8859-1..Server: X2 Network HT wS..Transfer-Encoding: chunked..Date: Sat, 19 Sep 2015 10:38:47 GMT..Connection: keep-alive..X-Full-URL: videospornoadultos.net/loader/info/fapcf.txt?nocache..X-Served-By: VVV.x2n.com.br..X-Optimization: High Traffic (HT)..X-Cache: MISS..00152..<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL /loader/info/fapcf.txt was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>...0..0..

<<< skipped >>>

GET /red.html?nocache HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: rlhackers.com.br

Connection: Keep-Alive

HTTP/1.1 503 Service Temporarily Unavailable

Date: Sat, 19 Sep 2015 10:38:46 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Set-Cookie: __cfduid=d097d3c9aef3b93f9f695a7eec6d358bb1442659126; expires=Sun, 18-Sep-16 10:38:46 GMT; path=/; domain=.rlhackers.com.br; HttpOnly

X-Frame-Options: SAMEORIGIN

Refresh: 8;URL=/cdn-cgi/l/chk_jschl?pass=1442659130.535-YGXXzdsspJ

Cache-Control: no-cache

Server: cloudflare-nginx

CF-RAY: 2284a9b4d6a32732-FRA

1204..<!DOCTYPE HTML>.<html lang="en-US">.<head>. <meta charset="UTF-8" />. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />. <meta name="robots" content="noindex, nofollow" />. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />. <title>Just a moment...</title>. <style type="text/css">. html, body {width: 100%; height: 100%; margin: 0; padding: 0;}. body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}. h1 {font-size: 1.5em; color: #404040; text-align: center;}. p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}. #spinner {margin: 0 auto 30px auto; display: block;}. .attribution {margin-top: 20px;}. @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ea

<<< skipped >>>

GET /red2.html?nocache HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: rlhackers.com.br

Connection: Keep-Alive

HTTP/1.1 503 Service Temporarily Unavailable

Date: Sat, 19 Sep 2015 10:38:46 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: close

Set-Cookie: __cfduid=dfd736f0d5ed4481a9d1d7b5ee9ad33491442659126; expires=Sun, 18-Sep-16 10:38:46 GMT; path=/; domain=.rlhackers.com.br; HttpOnly

X-Frame-Options: SAMEORIGIN

Refresh: 8;URL=/cdn-cgi/l/chk_jschl?pass=1442659130.542-I19H61t8Un

Cache-Control: no-cache

Server: cloudflare-nginx

CF-RAY: 2284a9b4d0cc231e-FRA

1230..<!DOCTYPE HTML>.<html lang="en-US">.<head>. <meta charset="UTF-8" />. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />. <meta name="robots" content="noindex, nofollow" />. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />. <title>Just a moment...</title>. <style type="text/css">. html, body {width: 100%; height: 100%; margin: 0; padding: 0;}. body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}. h1 {font-size: 1.5em; color: #404040; text-align: center;}. p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}. #spinner {margin: 0 auto 30px auto; display: block;}. .attribution {margin-top: 20px;}. @-webkit-keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. @keyframes bubbles { 33%: { -webkit-transform: translateY(10px); transform: translateY(10px); } 66% { -webkit-transform: translateY(-10px); transform: translateY(-10px); } 100% { -webkit-transform: translateY(0); transform: translateY(0); } }. .bubbles { background-color: #404040; width:15px; height: 15px; margin:2px; border-radius:100%; -webkit-animation:bubbles 0.6s 0.07s infinite ea

<<< skipped >>>

GET /loader/info/go.txt?nocache HTTP/1.1

Host: videospornoadultos.net

Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Last-Modified: Sat, 12 Sep 2015 15:15:02 GMT

Accept-Ranges: bytes

Cache-Control: max-age=1

Content-Type: text/plain

Server: X2 Network HT wS

Transfer-Encoding: chunked

Date: Sat, 19 Sep 2015 10:38:46 GMT

Connection: keep-alive

X-Full-URL: videospornoadultos.net/loader/info/go.txt?nocache

X-Served-By: VVV.x2n.com.br

X-Optimization: High Traffic (HT)

X-Cache: MISS

001ba..//Jogos.CrossFire.Point Blank.Combat Arms.WarFace.AikaBR.Elsword.Sudden Attack. .//Cheats CF.RL Hackers [v. Wallyson]......RL Hackers Semi-VIP.RL Hackers 1.2.. . .//Cheats PB.RL Hackers PointBlank.RL Hackers AutoUP.RL Hackers KingHax.. .//Cheats GC.Trainer AikaBR.. . .//Cheats WF.RL Hackers 2.0.RL Warface VIP.RL WarFace ULTRA VIP. . .//Cheats ELS.MasterSword v4.0. . . .//Cheats BS.Team Switcher ESP [F9 ATIVA]....LOGIN: usuario3 SENHA: 123..HTTP/1.1 200 OK..Last-Modified: Sat, 12 Sep 2015 15:15:02 GMT..Accept-Ranges: bytes..Cache-Control: max-age=1..Content-Type: text/plain..Server: X2 Network HT wS..Transfer-Encoding: chunked..Date: Sat, 19 Sep 2015 10:38:46 GMT..Connection: keep-alive..X-Full-URL: videospornoadultos.net/loader/info/go.txt?nocache..X-Served-By: VVV.x2n.com.br..X-Optimization: High Traffic (HT)..X-Cache: MISS..001ba..//Jogos.CrossFire.Point Blank.Combat Arms.WarFace.AikaBR.Elsword.Sudden Attack. .//Cheats CF.RL Hackers [v. Wallyson]......RL Hackers Semi-VIP.RL Hackers 1.2.. . .//Cheats PB.RL Hackers PointBlank.RL Hackers AutoUP.RL Hackers KingHax.. .//Cheats GC.Trainer AikaBR.. . .//Cheats WF.RL Hackers 2.0.RL Warface VIP.RL WarFace ULTRA VIP. . .//Cheats ELS.MasterSword v4.0. . . .//Cheats BS.Team Switcher ESP [F9 ATIVA]....LOGIN: usuario3 SENHA: 123..0..0..

<<< skipped >>>

Map

The Worm connects to the servers at the folowing location(s):

Strings from Dumps

svchost.exe_2000:

.text

`.data

.rsrc

ADVAPI32.dll

KERNEL32.dll

NTDLL.DLL

RPCRT4.dll

NETAPI32.dll

ole32.dll

ntdll.dll

RegCloseKey

RegOpenKeyExW

GetProcessHeap

NtOpenKey

svchost.pdb

\PIPE\

Software\Microsoft\Windows NT\CurrentVersion\Svchost

\Registry\Machine\System\CurrentControlSet\Control\SecurePipeServers\

5.1.2600.5512 (xpsp.080413-2111)

svchost.exe

Windows

Operating System

5.1.2600.5512

svchost.exe_2000_rwx_00090000_00001000:

KERNEL32.DLL

svchost.exe_2000_rwx_001D0000_00001000:

KERNEL32.DLL

svchost.exe_2000_rwx_00210000_00001000:

KERNEL32.DLL

svchost.exe_2000_rwx_00250000_00001000:

KERNEL32.DLL

svchost.exe_2000_rwx_00290000_00001000:

KERNEL32.DLL

svchost.exe_2000_rwx_002D0000_00001000:

KERNEL32.DLL

svchost.exe_2000_rwx_00AA0000_00001000:

advapi32.dll

svchost.exe_2000_rwx_00AD0000_00001000:

RegOpenKeyA

svchost.exe_2000_rwx_00AE0000_00001000:

advapi32.dll

svchost.exe_2000_rwx_00B10000_00001000:

AVICAP32.DLL

svchost.exe_2000_rwx_00D60000_00001000:

AVICAP32.DLL

svchost.exe_2000_rwx_00D90000_00001000:

gdi32.dll

svchost.exe_2000_rwx_00ED0000_00001000:

gdi32.dll

svchost.exe_2000_rwx_00F00000_00001000:

gdiplus.dll

svchost.exe_2000_rwx_00F40000_00001000:

gdiplus.dll

svchost.exe_2000_rwx_00F80000_00001000:

mpr.dll

svchost.exe_2000_rwx_00FC0000_00001000:

mpr.dll

svchost.exe_2000_rwx_00FF0000_00001000:

msacm32.dll

svchost.exe_2000_rwx_01340000_00001000:

msacm32.dll

svchost.exe_2000_rwx_01370000_00001000:

ntdll.dll

svchost.exe_2000_rwx_014B0000_00001000:

ntdll.dll

svchost.exe_2000_rwx_014E0000_00001000:

ole32.dll

svchost.exe_2000_rwx_01620000_00001000:

ole32.dll

svchost.exe_2000_rwx_01650000_00001000:

oleaut32.dll

svchost.exe_2000_rwx_01790000_00001000:

oleaut32.dll

svchost.exe_2000_rwx_017C0000_00001000:

powrprof.dll

svchost.exe_2000_rwx_01900000_00001000:

powrprof.dll

svchost.exe_2000_rwx_01930000_00001000:

shell32.dll

svchost.exe_2000_rwx_01A70000_00001000:

shell32.dll

svchost.exe_2000_rwx_01AA0000_00001000:

user32.dll

svchost.exe_2000_rwx_01BE0000_00001000:

user32.dll

svchost.exe_2000_rwx_01C10000_00001000:

wininet.dll

svchost.exe_2000_rwx_01D40000_00001000:

FtpOpenFileA

svchost.exe_2000_rwx_01D50000_00001000:

wininet.dll

svchost.exe_2000_rwx_01D80000_00001000:

winmm.dll

svchost.exe_2000_rwx_01EC0000_00001000:

winmm.dll

svchost.exe_2000_rwx_01EF0000_00001000:

wsock32.dll

svchost.exe_2000_rwx_02040000_00001000:

wsock32.dll

svchost.exe_2000_rwx_24080000_00062000:

`.rsrc

/w)f%u/

kernel32.dll

SHFileOperationA

shell32.dll

URLDownloadToFileA

urlmon.dll

ShellExecuteA

SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

GetWindowsDirectoryA

SOFTWARE\Microsoft\Windows\CurrentVersion

http\shell\open\command

\Internet Explorer\iexplore.exe

####@####

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

Portugal

Turkey

Windows 3.1

Windows 95 (Release 2)

Windows 95

Windows 98 SE

Windows 98

Windows ME

Windows 7

Windows Vista

%s %s

Windows XP Professional x64

Windows XP Home

Windows XP Professional

Windows 2000 Professional

Windows NT %d.%d

Windows 2008

%s %s Server

Windows 2003 Server Datacenter

Windows 2003 Server Enterprise

Windows 2003 Server Web Edition

Windows 2003 Server

Windows Home Server

Windows 2003 Server (Release 2)

Windows 2000 Server Datacenter

Windows 2000 Server Enterprise

Windows 2000 Server Web Edition

Windows 2000 Server

Windows NT 4.0 Server Datacenter

Windows NT 4.0 Server Enterprise

Windows NT 4.0 Server Web Edition

Windows NT 4.0 Server

Unknown Platform ID (%d)

%d.%d

%s (Build: %d

- Service Pack: %s

KERNEL32.DLL

teste.vbs

teste.txt

Set objSecurityCenter = GetObject("winmgmts:\\.\root\SecurityCenter")

Set colFirewall = objSecurityCenter.ExecQuery("Select * From FirewallProduct",,48)

Set colAntiVirus = objSecurityCenter.ExecQuery("Select * From AntiVirusProduct",,48)

Set objFileSystem = CreateObject("Scripting.fileSystemObject")

Set objFile = objFileSystem.CreateTextFile("

Info = Info & "F" & CountFw & ") " & objFirewall.displayName & " v" & objFirewall.versionNumber & Enter

Info = Info & "A" & CountAV & ") " & objAntiVirus.displayName & " v" & objAntiVirus.versionNumber & Enter

objFile.WriteLine(Info)

objFile.Close

cscript.exe

AVICAP32.dll

tFtpAccess

BuildImportTable: can't load library:

BuildImportTable: ReallocMemory failed

BuildImportTable: GetProcAddress failed

BTMemoryLoadLibary: BuildImportTable failed

BTMemoryGetProcAddress: no export table found

BTMemoryGetProcAddress: DLL doesn't export anything

BTMemoryGetProcAddress: exported symbol not found

SetupApi.dll

SetupDiOpenClassRegKey

SetupDiOpenClassRegKeyExA

SetupDiOpenClassRegKeyExW

SetupDiCreateDeviceInterfaceRegKeyA

SetupDiCreateDeviceInterfaceRegKeyW

SetupDiOpenDeviceInterfaceRegKey

SetupDiDeleteDeviceInterfaceRegKey

SetupDiCreateDevRegKeyA

SetupDiCreateDevRegKeyW

SetupDiOpenDevRegKey

SetupDiDeleteDevRegKey

CM_DEVCAP_LOCKSUPPORTED

CM_DEVCAP_EJECTSUPPORTED

PDCAP_D0_SUPPORTED

PDCAP_D1_SUPPORTED

PDCAP_D2_SUPPORTED

PDCAP_D3_SUPPORTED

PDCAP_WAKE_FROM_D0_SUPPORTED

PDCAP_WAKE_FROM_D1_SUPPORTED

PDCAP_WAKE_FROM_D2_SUPPORTED

PDCAP_WAKE_FROM_D3_SUPPORTED

PDCAP_WARM_EJECT_SUPPORTED

HKEY_CLASSES_ROOT

HKEY_CURRENT_CONFIG

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

127.0.0.1

iphlpapi.dll

AllocateAndGetTcpExTableFromStack

AllocateAndGetUdpExTableFromStack

SetTcpEntry

GetExtendedTcpTable

GetExtendedUdpTable

Mozilla3_5Password

GetChromePass

StartHttpProxy

1.2.3

XxX.xXx

UuU.uUu

keyboardkey

webcaminactive

webcamgetbuffer

webcam

enviarexecnormal

enviarexechidden

openweb

downexec

sendftp

keylogger

keyloggergetlog

keyloggereraselog

keyloggerativar

keyloggerdesativar

renamekey

windowsfechar

windowsmax

windowsmin

windowsmostrar

windowsocultar

windowsmintodas

windowscaption

listarportas

listarportasdns

finalizarprocessoportas

webcamsettings

chatmsg

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

PSAPI.dll

\config\SteamAppData.vdf

AutoLoginUser

/ClientRegistry.Blob

\ClientRegistry.blob

\steam.dll

%SYS%

ÃžSKTOP%

FirstExecution

chatmsg|

Software\Microsoft\Windows\CurrentVersion\Run

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

listarjanelas|windowsfechar|

listarjanelas|windowsmax|

listarjanelas|windowsmin|

listarjanelas|windowsmostrar|

listarjanelas|windowsocultar|

listarjanelas|windowsmintodas|

listarjanelas|windowscaption|

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

listarportas|listadeportaspronta|

listarportas|finalizarconexao|

listarportas|finalizarprocessoportas|Y|

listarportas|finalizarprocessoportas|N|

registro|renamekey|

keylogger|keylogger|keyloggerativar|

keylogger|keylogger|keyloggerdesativar|

keylogger|keyloggergetlog|

keylogger|keylogger|keyloggervazio|

keyloggersearch

keyloggersearchok|

webcam|webcaminactive|

webcam|webcamactive|

getpassword

_x_X_PASSWORDLIST_X_x_

NOIP.abc

MSN.abc

FIREFOX.abc

IELOGIN.abc

IEPASS.abc

IEAUTO.abc

IEWEB.abc

SOFTWARE\Mozilla\Mozilla Firefox

getfirefox

getielogin

getiepass

getieweb

getchrome

getpassword|getpasswordlist|

getpassword|getpassworderror|

updateservidorweb

##@@## ##@@## ##@@##

Windows\CurrentVersion\Uninstall\eDonkey2000

UNWISE.EXE

ntdll.dll

icon=shell32.dll,4

shellexecute=

autorun.inf

XX--XX--XX.txt

logs.dat

SQLite3.dll

$1.2.3

KWindows

UnitExecutarComandos

uftp

UrlMon

.UnitBytesSize

UnitListarPortasAtivas

UnitWebcam

UnitKeylogger

WinExec

SetNamedPipeHandleState

GetProcessHeap

CreatePipe

RegOpenKeyExA

RegOpenKeyA

RegEnumKeyExA

RegDeleteKeyA

RegCreateKeyA

RegCloseKey

GdiplusShutdown

keybd_event

MapVirtualKeyA

GetKeyboardState

GetKeyboardLayoutNameA

GetKeyState

GetAsyncKeyState

ExitWindowsEx

EnumWindows

FtpGetFileSize

FtpSetCurrentDirectoryA

FtpOpenFileA

%( % & % % % ]

.idata

.reloc

P.rsrc

advapi32.dll

AVICAP32.DLL

gdi32.dll

gdiplus.dll

mpr.dll

msacm32.dll

ole32.dll

oleaut32.dll

powrprof.dll

user32.dll

wininet.dll

winmm.dll

wsock32.dll

global loader ultra v4.2.exe_1340:

`.rsrc

{m{Ca.in

%UTF8

TArray

System.Types

TMultiWaitEvent.TWaiterFlag

TMultiWaitEvent.TWaiterFlags

:TMultiWaitEvent.TMultiWaiter.:1

TMultiWaitEvent.TMultiWaiter&

TMultiWaitEvent.TMultiWaiterT

TMultiWaitEvent.TWaitInfo

System.UITypes

TWindowState

ssHorizontal

biClrImportant

tagMSG

Winapi.Windows

HKEY

TWMKey

MsgFiller

KeyData

KeyDataFiller

!"#$%&'(!)* ,-./0'

System.SysUtils

ENoMonitorSupportException

TFormatSettings.TEraInfo

TArray

IEnumerable

TMarshaller.PDisposeRec

TMarshaller.TDisposeProc

TMarshaller.TDisposeRec

TMarshaller.IDisposer

TMarshaller.TDisposer'

TMarshaller.TDisposer$

/TArray

System.SysUtilsL

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

&TArray

System.Variants

Operator

EVariantBadIndexErrorH

EVariantBadIndexError

System.Variantsp

Winapi.ActiveX

grfLocksSupported

System.Generics.Defaults

IEqualityComparer

IComparer

TCustomComparer

System.Generics.Collections

TListHelper.TInternalNotifyEvent

!TListHelper.TInternalCompareEvent

doOwnsKeys

System.Generics.Collections4

System.Rtti

GetIndexedProperties

GetIndexedProperty

GetDeclaredIndexedProperties

TMethodImplementation.TFloatReg

):TMethodImplementation.TInterceptFrame.:1

%TMethodImplementation.TInterceptFrame(

*TMethodImplementation.TFirstStageIntercept

%TMethodImplementation.PInterceptFramep

*TMethodImplementation.PFirstStageIntercept

TMethodImplementation.TParamLoc

!TMethodImplementation.TInvokeInfoK

!TMethodImplementation.TInvokeInfo

TRttiIndexedPropertyS

TRttiIndexedProperty

FIndexedProps

TArray

-TFunc>

TArray

!TArray

(TArray

%TArray

3TArray

8TEnumerator(

8TEnumerator

8TEnumerable'

8TEnumerableP

;TList.arrayofT

6IComparer

CTCollectionNotifyEvent

8IEnumerable

=TList.TEmptyFunc

>TList.TEnumerator5

>TList.TEnumerator

2TList&

2TList|

"TArray

&TArray

-TPair

AKey

ATArray>

FTEnumerator>(

FTEnumerable>'

FTEnumerable>

9TDictionary.TItem

>TDictionary.TItemArray

!IEqualityComparer

&TCollectionNotifyEvent

/TCollectionNotifyEvent

TArray

TEnumerator(

TEnumeratort

TEnumerable'

TEnumerable

BTDictionary.TKeyEnumerator;

BTDictionary.TKeyEnumerator

BTDictionary.TKeyCollection;

BTDictionary.TKeyCollection

TArray

$TEnumerator(

$TEnumeratorh

$TEnumerable'

$TEnumerable

DTDictionary.TValueEnumerator;

DTDictionary.TValueEnumerator,

DTDictionary.TValueCollection;

DTDictionary.TValueCollection

CTDictionary.TPairEnumerator;

CTDictionary.TPairEnumeratorH

FOnKeyNotify

FKeyCollection

3TDictionary9

ContainsKey

3TDictionary8

KeysP

OnKeyNotify$

TArray

-TPair

ATArray>

FTEnumerator>(

FTEnumerator>dUD

FTEnumerable>'

FTEnumerable>

9TDictionary.TItem

>TDictionary.TItemArray

System.Generics.CollectionsXXD

IEqualityComparer

0TCollectionNotifyEvent

TArray

%TEnumerator(

%TEnumerator

%TEnumerable'

%TEnumerable\\D

BTDictionary.TKeyEnumerator;

BTDictionary.TKeyEnumerator

BTDictionary.TKeyCollection;

BTDictionary.TKeyCollection

DTDictionary.TValueEnumerator;

DTDictionary.TValueEnumerator

DTDictionary.TValueCollection;

DTDictionary.TValueCollection

CTDictionary.TPairEnumerator;

CTDictionary.TPairEnumerator

3TDictionary9

3TDictionary

Keys

OnKeyNotify

-TPair

ATArray>

FTEnumerator>(

FTEnumerator>

FTEnumerable>'

FTEnumerable>

9TDictionary.TItem

>TDictionary.TItemArray

BTDictionary.TKeyEnumerator;

BTDictionary.TKeyEnumerator

BTDictionary.TKeyCollection;

BTDictionary.TKeyCollection

DTDictionary.TValueEnumerator;

DTDictionary.TValueEnumerator

DTDictionary.TValueCollection;

DTDictionary.TValueCollection

CTDictionary.TPairEnumerator;

CTDictionary.TPairEnumerator8}D

3TDictionary9

3TDictionary(

Keys@|D

#IComparer

%TComparison

#TComparer2

#TComparer

$TEnumerator(

$TEnumerator

$TEnumerable'

$TEnumerableH

'TList.arrayofT

System.Generics.CollectionsL @

"IComparer

/TCollectionNotifyEvent

$IEnumerable

)TList.TEmptyFunc

*TList.TEnumerator5

*TList.TEnumerator

TList&

TList

-TArray>

7TArray>

.TArray>

0TArray>

&TEnumerator(

&TEnumerator

&TEnumerable'

&TEnumerable

)TList.arrayofT

$IComparer

1TCollectionNotifyEvent

&IEnumerable

TList.TEmptyFunc

,TList.TEnumerator5

,TList.TEnumerator

TList&

TListT

$TEnumerator(

$TEnumerator

$TEnumerable'

$TEnumerableX

'TList.arrayofT

System.Generics.Collectionsd

"IComparer

/TCollectionNotifyEvent

$IEnumerable

)TList.TEmptyFunc

*TList.TEnumerator5

*TList.TEnumerator

TList&

TList

#TEnumerator(

#TEnumerator|

#TEnumerable'

#TEnumerable

&TList.arrayofT

!IComparer

.TCollectionNotifyEvent

#IEnumerable

(TList.TEmptyFunc

)TList.TEnumerator5

)TList.TEnumeratord

TList&

TList

*TEnumerator(

*TEnumerator

*TEnumerable'

*TEnumerable

-TList.arrayofT

(IComparer

5TCollectionNotifyEvent

*IEnumerable

/TList.TEmptyFunc

0TList.TEnumerator5

0TList.TEnumerator

$TList&

$TList|SE

9TObjectDictionaryM

9TObjectDictionary

8TComparison

6TComparer2

6TComparer0

ITList>.arrayofT

DIComparer>

QTCollectionNotifyEvent>

Item-TPair

FIEnumerable>

KTList>.TEmptyFunc

LTList>.TEnumerator5

LTList>.TEnumerator

@TList>&

@TList>

TList.arrayofT

IComparer

IEnumerable

TList.TEmptyFunc

!TList.TEnumerator5

!TList.TEnumerator

TList&

TList(

'TList.arrayofT

"IComparer

$IEnumerable

)TList.TEmptyFunc

*TList.TEnumerator5

*TList.TEnumeratorH"F

TList&

TList

ITList>.arrayofT

DIComparer>

QTCollectionNotifyEvent>

Item-TPair

FIEnumerable>

KTList>.TEmptyFunc

LTList>.TEnumerator5

LTList>.TEnumerator

@TList>&

@TList>

(TList.arrayofT

#IComparer

%IEnumerable

*TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumeratordDF

TList&

TList

TList.arrayofT

TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumerator

TList&

TList0UF

ITList>.arrayofT

System.Generics.Collections`oD

DIComparer>

QTCollectionNotifyEvent>

Item-TPair

FIEnumerable>

KTList>.TEmptyFunc

LTList>.TEnumerator5

LTList>.TEnumerator

@TList>&

@TList>

,TDelegatedComparer8

,TDelegatedComparerDtF

$TComparison

"TComparer2

"TComparer

&TComparison

$TComparer2

$TComparer yF

$TComparison

"TComparer2

"TComparer

#TComparison

!TComparer2

!TComparer

*TComparison

(TComparer2

(TComparer|

FTComparison>

DTComparer>2

DTComparer>

TComparison

TComparer2

TComparer

$TComparison

"TComparer2

"TComparer,

FTComparison>

DTComparer>2

DTComparer>

%TComparison

#TComparer2

#TComparert

TComparison

TComparer2

TComparer

FTComparison>

DTComparer>2

DTComparer>X

System.TypInfo

mkOperatorOverload

PFieldExEntry

TFieldExEntry

PVmtMethodExEntry

TVmtMethodExEntry

$TArray

&TArray

TPropSetV

TPropSetP

TPropSetV

TPropSet

TPropSetK

TPropSetH

TPropSetK

TPropSet

TPropSetK

TPropSet

TPropSetK

TPropSet

TPropSetK

TPropSet

TPropSetV

TPropSet

System.Classes

ssShift

htKeyword

EInvalidOperationh

EInvalidOperationD

AOperator

TThread.TSynchronizeRecord

TThread.TSystemTimes

GetCPUUsage

TOperation

TObservers.TCanObserveEvent

TObservers.TObserverAddedEvent

Operation

FOnExecute

OnExecute

TArray

TEnumerator(

TEnumerator

TEnumerable'

TEnumerable

!TList.arrayofT

IComparer

)TCollectionNotifyEvent

IEnumerable

#TList.TEmptyFunc

$TList.TEnumerator5

$TList.TEnumerator

TList&

TListl

TThreadList&

TThreadListX

&TArray

TEnumerator(

TEnumerator

TEnumerable'

TEnumerable

.TList.arrayofT

)IComparer

6TCollectionNotifyEvent

IEnumerable

0TList.TEmptyFunc

1TList.TEnumerator5

1TList.TEnumerator

%TList&

%TList

TArray

TEnumerator(

TEnumerator

TEnumerable'

TEnumerable

TList.arrayofT

IComparer

&TCollectionNotifyEvent

IEnumerable

TList.TEmptyFunc

!TList.TEnumerator5

!TList.TEnumerator4

TList&

TList

!TArray

&TEnumerator(

&TEnumerator

&TEnumerable'

&TEnumerable

)TList.arrayofT

System.Generics.CollectionsL

$IComparer

1TCollectionNotifyEvent

&IEnumerable

TList.TEmptyFunc

,TList.TEnumerator5

,TList.TEnumerator

TList&

TList

3TPair

JTArray>

OTEnumerator>(

OTEnumerator>\)H

OTEnumerable>'

OTEnumerable>

?TDictionary.TItem

DTDictionary.TItemArray

System.Generics.Collectionsp,H

!IEqualityComparer

&TCollectionNotifyEvent

5TCollectionNotifyEvent

TEnumerator(

TEnumerator

TEnumerable'

TEnumerable

HTDictionary.TKeyEnumerator;

HTDictionary.TKeyEnumeratorD2H

HTDictionary.TKeyCollection;

HTDictionary.TKeyCollection@4H

%TArray

*TEnumerator(

*TEnumerator

*TEnumerable'

*TEnumerable

JTDictionary.TValueEnumerator;

JTDictionary.TValueEnumerator

JTDictionary.TValueCollection;

JTDictionary.TValueCollection

ITDictionary.TPairEnumerator;

ITDictionary.TPairEnumerator

9TDictionary9

9TDictionary

'TArray

,TEnumerator(

,TEnumerator

,TEnumerable'

,TEnumerable IH

/TList.arrayofT

*IComparer

7TCollectionNotifyEvent

,IEnumerable

1TList.TEmptyFunc

2TList.TEnumerator5

2TList.TEnumerator

&TList&

&TList

"TLoginCredentialService.TLoginFunc

#TLoginCredentialService.TLoginEvent

Password

-TLoginCredentialService.TLoginCredentialEvent

Callback#TLoginCredentialService.TLoginEvent

3TLoginCredentialService.TLoginCredentialEventObject:

3TLoginCredentialService.TLoginCredentialEventObject

TLoginCredentialServiceM

RegisterLoginHandler

UnregisterLoginHandler

GetLoginCredentialEvent

GetLoginCredentials

TLoginCredentialService

4TPair

KTArray>

PTEnumerator>(

PTEnumerator>

PTEnumerable>'

PTEnumerable>

@TDictionary.TItem

ETDictionary.TItemArray

System.Generics.Collections,qH

7TCollectionNotifyEvent

ITDictionary.TKeyEnumerator;

ITDictionary.TKeyEnumerator`sH

ITDictionary.TKeyCollection;

ITDictionary.TKeyCollection\uH

'TArray

,TEnumerator(

,TEnumerator

,TEnumerable'

,TEnumerable(yH

KTDictionary.TValueEnumerator;

KTDictionary.TValueEnumerator

KTDictionary.TValueCollection;

KTDictionary.TValueCollection

JTDictionary.TPairEnumerator;

JTDictionary.TPairEnumerator

:TDictionary9

:TDictionary

OnKeyNotify@rH

/TList.arrayofT

System.Generics.Collections,

*IComparer

,IEnumerable

1TList.TEmptyFunc

2TList.TEnumerator5

2TList.TEnumerator8

&TList&

&TList

TArray

%TEnumerator(

%TEnumerator

%TEnumerable'

%TEnumerableP

(TList.arrayofT

System.Generics.CollectionsxgH

#IComparer

0TCollectionNotifyEvent

%IEnumerable

*TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumerator

TList&

TList

%TObjectList

TArray

%TEnumerator(

%TEnumerator

%TEnumerable'

%TEnumerable`

(TList.arrayofT

System.Generics.CollectionsT

#IComparer

0TCollectionNotifyEvent

%IEnumerable

*TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumerator

TList&

TList

%TThreadList&

%TThreadList

TArray

0TEnumerator(

0TEnumerator

0TEnumerable'

0TEnumerableX

3TList.arrayofT

.IComparer

;TCollectionNotifyEvent

0IEnumerable

5TList.TEmptyFunc

6TList.TEnumerator5

6TList.TEnumeratord

*TList&

*TList0

7TArray>

>(

>

>'

>L

LTList>.arrayofT

GIComparer>

GTCollectionNotifyEvent>

Item TList

IIEnumerable>

NTList>.TEmptyFunc

OTList>.TEnumerator5

OTList>.TEnumerator

CTList>&

CTList>

TList.Sort$122$0$Intf

TList.Sort$122$ActRec

!TArray

&TEnumerator(

&TEnumerator

&TEnumerable'

&TEnumerable

)TList.arrayofT

$IComparer

1TCollectionNotifyEvent

&IEnumerable

TList.TEmptyFunc

,TList.TEnumerator5

,TList.TEnumerator

TList&

TListdjI

&TThreadList&

&TThreadList(wI

System.ClassesL

"TArray

'TEnumerator(

'TEnumerator$

'TEnumerable'

'TEnumerableh

*TList.arrayofT

%IComparer

2TCollectionNotifyEvent

'IEnumerable

,TList.TEmptyFunc

-TList.TEnumerator5

-TList.TEnumerator0

!TList&

!TList

TArray

#TEnumerator(

#TEnumerator

#TEnumerable'

#TEnumerable

&TList.arrayofT

!IComparer

.TCollectionNotifyEvent

#IEnumerable

(TList.TEmptyFunc

)TList.TEnumerator5

)TList.TEnumerator

TList&

TList

#TThreadList&

#TThreadList

TComponent.Create@$940$0$Intf

&TComparison

$TComparer2

$TComparer

-TDelegatedComparer8

-TDelegatedComparer

TComponent.Create@$940$ActRec

"TComponent.GetObservers$953$0$Intf

"TComponent.GetObservers$953$1$Intf

"TComponent.GetObservers$953$ActRec

.TArray

TComparison

TComparer2

TComparer

TComparison

)TComparer2

)TComparer

TComparison

TComparer2

TComparer$

RTList>.arrayofT

MIComparer>

ZTCollectionNotifyEvent>

Item3TPair

OIEnumerable>

TTList>.TEmptyFunc

UTList>.TEnumerator5

UTList>.TEnumerator

ITList>&

ITList>

-TList.arrayofT

(IComparer

*IEnumerable

/TList.TEmptyFunc

0TList.TEnumerator5

0TList.TEnumerator

$TList&

$TList

,TComparison

*TComparer2

*TComparer`

STList>.arrayofT

NIComparer>

[TCollectionNotifyEvent>

Item4TPair

PIEnumerable>

UTList>.TEmptyFunc

VTList>.TEnumerator5

VTList>.TEnumeratorP

JTList>&

JTList>\

,TComparison

*TComparer2

*TComparert

9.TList`1.Pack$221$0$Intf

9@TList`1.Pack$221$ActRecd

9@TList`1.Pack$221$ActRec

%TComparison

#TComparer2

#TComparer

%TComparison

#TComparer2

#TComparerX!K

0TComparison

.TComparer2

.TComparer

ITComparison>

GTComparer>2

GTComparer>

&TComparison

$TComparer2

$TComparer8)K

'TComparison

%TComparer2

%TComparer

#TComparison

!TComparer2

!TComparer,.K

OTComparison>

MTComparer>2

MTComparer>

TComparison

TComparer2

TComparer

*TComparison

(TComparer2

(TComparer

PTComparison>

NTComparer>2

NTComparer>

System.Actions

FHelpKeyword

HelpKeyword`

'TArray

,TEnumerator(

,TEnumerator

,TEnumerable'

,TEnumerable

/TList.arrayofT

*IComparer

7TCollectionNotifyEvent

,IEnumerable

1TList.TEmptyFunc

2TList.TEnumerator5

2TList.TEnumerator

&TList&

&TList

,TComparison

*TComparer2

*TComparerX|K

Winapi.Wincodec

System.Win.Registry

TRegKeyInfo

NumSubKeys

MaxSubKeyLen

FCurrentKey

FRootKey

FCloseRootKey

CloseKey

CreateKey

DeleteKey

GetKeyInfo

GetKeyNames

HasSubKeys

KeyExists

LoadKey

MoveKey

OpenKey

OpenKeyReadOnly

ReplaceKey

RestoreKey

SaveKey

UnLoadKey

CurrentKey

LastErrorMsg

RootKey

RootKeyName

Vcl.Graphics

EInvalidGraphicOperation

EInvalidGraphicOperation$

SupportsPartialTransparency

SupportsClipboardFormat

Monochrome

System.Contnrs

System.ImageList

#TArray

(TEnumerator(

(TEnumeratorh

(TEnumerable'

(TEnumerable

TList.arrayofT

&IComparer

3TCollectionNotifyEvent

(IEnumerable

-TList.TEmptyFunc

.TList.TEnumerator5

.TList.TEnumerator|

"TList&

"TList8

(TComparison

&TComparer2

&TComparer

System.SyncObjs

TFunc

IsShortCut

Vcl.ActnList

1.2.8

System.ZLib

Ht.Ht3

System.Win.ComObj

Vcl.Controls

igoParentPassthrough

FAlwaysShowDragImages

AlwaysShowDragImages

toFlickFallbackKeys

Vcl.Controls,5N

'TCustomGestureEngine.TGestureEngineFlag

(TCustomGestureEngine.TGestureEngineFlags

Supported

TKeyEvent

TKeyPressEvent

HelpKeyword@

FOnKeyDown

FOnKeyPress

FOnKeyUp

IsHintMsg

FNativeWheelSupport

FWheelSupportMessage

Vcl.StdCtrls

Vcl.StdCtrls5

Vcl.StdCtrls-

FPasswordChar

Vcl.StdCtrlsC

PasswordChar

OnKeyDown0JN

OnKeyPress

OnKeyUp

Vcl.StdCtrlsA

Vcl.StdCtrlsD

TCustomButton.TButtonStyle

Vcl.StdCtrls;

Vcl.StdCtrls

!TScrollBarStyleHook.TScrollWindow6

!TScrollBarStyleHook.TScrollWindow

#TCustomEdit.ObserverAdded$78$0$Intf

#TCustomEdit.ObserverAdded$78$ActRec

Winapi.ShlObj

Winapi.ShlObjT

Vcl.StdActns

Vcl.ComCtrls

Vcl.ComCtrls1

Vcl.ComCtrls/

System.HelpIntfs

HelpKeyword

UnderstandsKeyword

(TArray

-TEnumerator(

-TEnumerator

-TEnumerable'

-TEnumerable

0TList.arrayofT

IComparer

8TCollectionNotifyEvent

-IEnumerable

2TList.TEmptyFunc

3TList.TEnumerator5

3TList.TEnumerator

'TList&

'TList

-TComparison

TComparer2

TComparer@

Vcl.Dialogs

Vcl.Dialogs@

FURL

TDefaultLoginCredentials]

LoginEvent

LoginEventUsrPw

TDefaultLoginCredentials

.TDefaultLoginCredentials.LoginEvent$290$0$Intf

.TDefaultLoginCredentials.LoginEvent$290$ActRec

3TDefaultLoginCredentials.LoginEventUsrPw$292$0$Intf

3TDefaultLoginCredentials.LoginEventUsrPw$292$ActRec

FProportional

Vcl.ExtCtrls$

Proportional

Vcl.ExtCtrls

Vcl.Themes

tcpCategoryPanelGroupDontCare

tcpCategoryPanelGroupRoot

tcpBackground

tcpGradientHeader

tcpThemedHeader

tcpChevronOpenedNormal

tcpChevronOpenedHot

tcpChevronOpenedPressed

tcpChevronClosedNormal

tcpChevronClosedHot

tcpChevronClosedPressed

tcpChevronClosedLeftNormal

tcpChevronClosedLeftHot

tcpChevronClosedLeftPressed

tcpThemedChevronOpenedNormal

tcpThemedChevronOpenedHot

tcpThemedChevronOpenedPressed

tcpThemedChevronClosedNormal

tcpThemedChevronClosedHot

tcpThemedChevronClosedPressed

tcDropDownButtonLeftPressed

tePassword

thHeaderItemLeftPressed

tsArrowBtnLeftPressed

ttbThumbLeftPressed

AuthorURL

TCustomStyleServices.TStyleFlag

TCustomStyleServices.TStyleFlags

TCustomStyleEngine.TStyleEngineNotification

#TStyleManager.TStyleClassDescriptor

"TStyleManager.TStyleServicesHandle

TStyleManager.TSourceInfo

"TArray

'TEnumerator(

'TEnumerator

'TEnumerable'

'TEnumerable

*TList.arrayofT

%IComparer

2TCollectionNotifyEvent

'IEnumerable

,TList.TEmptyFunc

-TList.TEnumerator5

-TList.TEnumerator

!TList&

!TListp

RTPair>

eTArray>>

jTEnumerator>>(

jTEnumerator>>x

jTEnumerable>>'

jTEnumerable>>D

^TDictionary>.TItem

cTDictionary>.TItemArray

IEqualityComparer

%TCollectionNotifyEvent

UTCollectionNotifyEvent>

Item!TList

TArray

TEnumerator(

TEnumerator

TEnumerable'

TEnumerable

gTDictionary>.TKeyEnumerator;

gTDictionary>.TKeyEnumeratorp

gTDictionary>.TKeyCollection;

gTDictionary>.TKeyCollection

4TArray>

9TEnumerator>(

9TEnumerator>p

9TEnumerable>'

9TEnumerable>

iTDictionary>.TValueEnumerator;

iTDictionary>.TValueEnumerator

iTDictionary>.TValueCollection;

iTDictionary>.TValueCollection

hTDictionary>.TPairEnumerator;

hTDictionary>.TPairEnumerator4

XTDictionary>9

XTDictionary>p

OnKeyNotifyL

2TPair

ETArray>

JTEnumerator>(

JTEnumerator>l

JTEnumerable>'

JTEnumerable>

>TDictionary.TItem

CTDictionary.TItemArray

System.Generics.Collectionsp

%TCollectionNotifyEvent

5TCollectionNotifyEvent

TEnumerator(

TEnumeratorL

TEnumerable'

TEnumerablex

GTDictionary.TKeyEnumerator;

GTDictionary.TKeyEnumerator

GTDictionary.TKeyCollection;

GTDictionary.TKeyCollection

%TArray

*TEnumerator(

*TEnumeratorX

*TEnumerable'

*TEnumerable

ITDictionary.TValueEnumerator;

ITDictionary.TValueEnumerator4

ITDictionary.TValueCollection;

ITDictionary.TValueCollection0

HTDictionary.TPairEnumerator;

HTDictionary.TPairEnumerator`

8TDictionary9

8TDictionary\

Keysd

OnKeyNotify,

>TObjectDictionaryM

>TObjectDictionary

3TPair

FTArray>

KTEnumerator>(

KTEnumerator>l

KTEnumerable>'

KTEnumerable>

?TDictionary.TItem

DTDictionary.TItemArray

&IEqualityComparer

TCollectionNotifyEvent

0TCollectionNotifyEvent

TArray

TEnumerator(

TEnumerator

TEnumerable'

TEnumerable

HTDictionary.TKeyEnumerator;

HTDictionary.TKeyEnumerator

HTDictionary.TKeyCollection;

HTDictionary.TKeyCollection

TArray

%TEnumerator(

%TEnumerator

%TEnumerable'

%TEnumerableD)T

JTDictionary.TValueEnumerator;

JTDictionary.TValueEnumerator

JTDictionary.TValueCollection;

JTDictionary.TValueCollection

ITDictionary.TPairEnumerator;

ITDictionary.TPairEnumerator

9TDictionary9

9TDictionary

?TObjectDictionaryM

?TObjectDictionary

7TPair

JTArray>

OTEnumerator>(

OTEnumerator>

OTEnumerable>'

OTEnumerable>

CTDictionary.TItem

HTDictionary.TItemArray

System.Generics.Collections(?T

4TCollectionNotifyEvent

LTDictionary.TKeyEnumerator;

LTDictionary.TKeyEnumeratorXAT

LTDictionary.TKeyCollection;

LTDictionary.TKeyCollection\CT

$TArray

)TEnumerator(

)TEnumerator

)TEnumerable'

)TEnumerable$GT

NTDictionary.TValueEnumerator;

NTDictionary.TValueEnumerator

NTDictionary.TValueCollection;

NTDictionary.TValueCollection

MTDictionary.TPairEnumerator;

MTDictionary.TPairEnumerator

=TDictionary9

=TDictionary

OnKeyNotify8@T

CTObjectDictionaryM

CTObjectDictionary

9TPair

LTArray>

QTEnumerator>(

QTEnumerator>8ZT

QTEnumerable>'

QTEnumerable>

ETDictionary.TItem

JTDictionary.TItemArray

System.Generics.CollectionsX]T

NTDictionary.TKeyEnumerator;

NTDictionary.TKeyEnumerator

NTDictionary.TKeyCollection;

NTDictionary.TKeyCollection

,TArray

1TEnumerator(

1TEnumerator8dT

1TEnumerable'

1TEnumerable

PTDictionary.TValueEnumerator;

PTDictionary.TValueEnumerator0gT

PTDictionary.TValueCollection;

PTDictionary.TValueCollection

OTDictionary.TPairEnumerator;

OTDictionary.TPairEnumerator|kT

?TDictionary9

?TDictionary

KeysxjT

OnKeyNotifyt^T

6TArray

;TEnumerator(

;TEnumerator

;TEnumerable'

;TEnumerable

>TList.arrayofT

9IComparer

FTCollectionNotifyEvent

Item#TStyleManager.TStyleClassDescriptor

;IEnumerable

@TList.TEmptyFunc

ATList.TEnumerator5

ATList.TEnumerator

5TList&

5TListd}T

*TArray

/TEnumerator(

/TEnumerator

/TEnumerable'

/TEnumerable,

2TList.arrayofT

-IComparer

:TCollectionNotifyEvent

/IEnumerable

4TList.TEmptyFunc

5TList.TEnumerator5

5TList.TEnumerator8

)TList&

)TList

'TArray

,TEnumerator(

,TEnumerator$

,TEnumerable'

,TEnumerablet

/TList.arrayofT

*IComparer

7TCollectionNotifyEvent

,IEnumerable

1TList.TEmptyFunc

2TList.TEnumerator5

2TList.TEnumeratord

&TList&

&TList(

TArray

TEnumerator(

TEnumerator

TEnumerable'

TEnumerable$

#TList.arrayofT

IComparer

TCollectionNotifyEvent

IEnumerable

%TList.TEmptyFunc

&TList.TEnumerator5

&TList.TEnumerator

TList&

TList`

'TComparison

%TComparer2

%TComparer

mTList>>.arrayofT

hIComparer>>

uTCollectionNotifyEvent>>

ItemRTPair>

jIEnumerable>>

oTList>>.TEmptyFunc

pTList>>.TEnumerator5

pTList>>.TEnumerator

dTList>>&

dTList>>

TList.arrayofT

IComparer

IEnumerable

TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumerator

TList&

TList4

>.arrayofT

7IComparer>

9IEnumerable>

>TList>.TEmptyFunc

?TList>.TEnumerator5

?TList>.TEnumerator

3TList>&

3TList>

MTList>.arrayofT

HIComparer>

UTCollectionNotifyEvent>

Item2TPair

JIEnumerable>

OTList>.TEmptyFunc

PTList>.TEnumerator5

PTList>.TEnumerator

DTList>&

DTList>

-TList.arrayofT

System.Generics.Collectionsl

(IComparer

*IEnumerable

/TList.TEmptyFunc

0TList.TEnumerator5

0TList.TEnumeratorT%V

$TList&

$TList

NTList>.arrayofT

IIComparer>

VTCollectionNotifyEvent>

Item3TPair

KIEnumerable>

PTList>.TEmptyFunc

QTList>.TEnumerator5

QTList>.TEnumerator

ETList>&

ETList>

#TList.arrayofT

IComparer

IEnumerable

%TList.TEmptyFunc

&TList.TEnumerator5

&TList.TEnumerator

TList&

TListLIV

(TList.arrayofT

System.Generics.Collections

#IComparer

%IEnumerable

*TList.TEmptyFunc

TList.TEnumerator5

TList.TEnumerator|WV

TList&

TList0YV

RTList>.arrayofT

MIComparer>

ZTCollectionNotifyEvent>

Item7TPair

OIEnumerable>

TTList>.TEmptyFunc

UTList>.TEnumerator5

UTList>.TEnumerator(iV

ITList>&

ITList>0kV

,TList.arrayofT

'IComparer

)IEnumerable

.TList.TEmptyFunc

/TList.TEnumerator5

/TList.TEnumerator

#TList&

#TList

TTList>.arrayofT

OIComparer>

\TCollectionNotifyEvent>

Item9TPair

QIEnumerable>

VTList>.TEmptyFunc

WTList>.TEnumerator5

WTList>.TEnumerator

KTList>&

KTList>

4TList.arrayofT

/IComparer

1IEnumerable

6TList.TEmptyFunc

7TList.TEnumerator5

7TList.TEnumerator

TList&

TList

;TComparison

9TComparer2

9TComparer

/TComparison

-TComparer2

-TComparerp

,TComparison

*TComparer2

*TComparer

TComparison

TComparer2

TComparer|

jTComparison>>

hTComparer>>2

hTComparer>>(

TComparison

TComparer2

TComparer

9TComparison>

7TComparer>2

7TComparer>

JTComparison>

HTComparer>2

HTComparer>L

*TComparison

(TComparer2

(TComparer

KTComparison>

ITComparer>2

ITComparer>

TComparison

TComparer2

TComparert

%TComparison

#TComparer2

#TComparer

OTComparison>

MTComparer>2

MTComparer>x

)TComparison

'TComparer2

'TComparerD

QTComparison>

OTComparer>2

OTComparer>

1TComparison

/TComparer2

/TComparer

Vcl.ImgList

lrMonoChrome

Vcl.Menus

FAutoHotkeys

RethinkHotkeys

AutoHotkeysH

AutoHotkeys

System.Win.TaskbarCore

Vcl.Forms

ssHotTrack

poProportional

fsShowing

FWindowState

FKeyPreview

WantChildKey

KeyPreview

WindowState

Vcl.Formsc

TApplication.TBiDiKeyboard

BiDiKeyboard

NonBiDiKeyboard

BiDiKeyboardHKL

NonBiDiKeyboardHKL

SetBiDiKeyboard

SetNonBiDiKeyboard

GetBidiKeyboard

GetNonBidiKeyboard

ApplyBiDiKeyboardLayout

ApplyNonBiDiKeyboardLayout

FBiDiKeyboard

FEnumAllWindowsOnActivateHint

FOnActionExecute

Keyword

EnumAllWindowsOnActivateHint

OnActionExecute

!TScrollingStyleHook.TScrollWindow6

!TScrollingStyleHook.TScrollWindow

1TFormStyleHook.TMainMenuBarStyleHook.TMenuBarItem

(:TFormStyleHook.TMainMenuBarStyleHook.:1

Vcl.Forms8%X

FEnterWithKeyboard

$TFormStyleHook.TMainMenuBarStyleHook8

CheckHotKeyItem

$TFormStyleHook.TMainMenuBarStyleHookt&X

EnterWithKeyboard

Vcl.Imaging.jpeg

AMsg

EIdCanNotBindPortInRange

EIdCanNotBindPortInRangeh

EIdInvalidPortRange

EIdInvalidPortRange(

EIdInvalidIPv6Addressh

CheckIPVersionSupport

VPort

APort

WSGetServByPort

APortNumber

AddServByPortToList

TIdSocketListWindows4

TIdSocketListWindows

IdStackWindows

TIdStackWindowsg

ReceiveMsg

WSTranslateSocketErrorMsg

SupportsIPv6

TIdStackWindows

EIdIPVersionUnsupported

EIdIPVersionUnsupported0l\

FSourcePort

FDestPort

SourcePort

DestPort

TIdStackLocalAddressHu\

ftpTransfer

ftpReady

ftpAborted

EIdPortRequired

EIdTCPConnectionError`

EIdTCPConnectionError4

EIdObjectTypeNotSupported$

EIdObjectTypeNotSupported

FPort

VMsgEnd

Port

FClientPortMin

FClientPortMax

FPeerPort

ClientPortMin

ClientPortMax

PeerPort

"EIdTransparentProxyUDPNotSupported

FPassword

OpenUDP

CloseUDP

RecvFromUDP

VPeerPort

SendToUDP

IPAsStringSV

FBoundPort

FBoundPortMax

FBoundPortMin

TIdTCPClientCustom'

TIdTCPClientCustom\`]

IdTCPClient

BoundPort

BoundPortMax

BoundPortMin

TIdTCPClient

%EIdSocksUDPNotSupportedBySOCKSVersion@{]

%EIdSocksUDPNotSupportedBySOCKSVersion

saUsernamePassword

FUDPSocksAssociation

FDefaultPort

DefaultPort

FLastCmdResult

TIdTCPConnectionB

RaiseExceptionForLastCmdResult

SendCmd

TIdTCPConnection

IdTCPConnection

LastCmdResult

QuoteHTTP

Uh%d^

IdHTTPHeaderInfo

ProxyPassword

ProxyPort

TIdMetaHTTPEquivE

ProcessMetaHTTPEquiv

TIdMetaHTTPEquiv|

fPassThrough

PassThrough

MakeFTPSvrPort

MakeFTPSvrPasv

URLX

CompressFTPDeflate

CompressFTPToIO

DecompressFTPFromIO

DecompressFTPDeflate

CompressHTTPDeflate

DecompressHTTPDeflate

URLDecode

URLEncode

FHttpOnly

HttpOnly

AURL

EIdUnsupportedOperation

EIdUnsupportedOperationXn`

EIdUnsupportedTransfer

EIdUnsupportedTransfer o`

EIdUnsupportedEncoding

rsa_keygen

dsa_keygen

pub_key

priv_key

PEVP_PKEY

EVP_PKEY_union

EVP_PKEY

pkey

pkey_type

required_pkey_type

key_len

key_length

AUTHORITY_KEYID

keyid

PAUTHORITY_KEYID

X509_PUBKEY

public_key

PX509_PUBKEY

X509_CERT_AUX

PX509_CERT_AUXH

cert_info

ex_nscert

get_cert_methods

cert_crl

lookup_certs

ppem_password_cb

algorithm_mkey

key_arg_length

key_arg

master_key_length

master_key

sess_cert

login

Ptlsext_ticket_key_cb

cert_store

default_passwd_callback

default_passwd_callback_userdata

client_cert_cb

extra_certs

max_cert_list

cert

msg_callback

msg_callback_arg

client_cert_engine

tlsext_tick_key_name

tlsext_tick_hmac_key

tlsext_tick_aes_key

tlsext_ticket_key_cb

init_msg

read_key

write_key

key_material_length

key_material

tmp_cert_type

tmp_cert_length

tmp_cert_verify_md

tmp_cert_req

tmp_key_block_length

tmp_key_block

new_mac_pkey_type

tmp_cert_request

msg_len

w_msg_hdr

r_msg_hdr

sslvrfFailIfNoPeerCert

TCallbackExEvent

TPasswordEvent

TPasswordEventEx

VPassword

Certificate

fsRootCertFile

fsCertFile

fsKeyFile

RootCertFile

CertFile

KeyFile

LoadRootCert

LoadCert

fPeerCert

PeerCert

fOnGetPassword

fOnGetPasswordEx

OnGetPassword

OnGetPasswordEx,

EIdOSSLLoadingRootCertError

EIdOSSLLoadingCertError

EIdOSSLLoadingKeyError

EIdOSSLLoadingKeyErrorh

SEC_GET_KEY_FNfVb

KeyVer

pGetKeyFn

pvGetKeyArgument

CHANGE_PASSWORD_FN_W

pszOldPassword

pszNewPassword

EXPORT_SECURITY_CONTEXT_FNjab

IMPORT_SECURITY_CONTEXT_FN_W

ExportSecurityContext

ImportSecurityContextW

ChangeAccountPasswordW

aPassword

TIdHTTPWhatsNext

wnGoToURL

IdHTTP

TIdHTTPConnectionType

TIdHTTPOption

hoNoParseMetaHTTPEquiv

TIdHTTPOptions

TIdHTTPProtocolVersion

TIdHTTPOnRedirectEvent

TIdHTTPOnHeadersAvailable

FHTTP

FMetaHTTPEquiv

TIdHTTPResponse5

AHTTP

TIdHTTPResponse

MetaHTTPEquiv

TIdHTTPRequest5

TIdHTTPRequest

TIdHTTPProtocol;

TIdHTTPProtocol

FHTTPProto

TIdCustomHTTP'

TIdCustomHTTP

HTTPOptions`

TIdHTTP

TIdHTTP,

EIdHTTPProtocolExceptionn

EIdHTTPProtocolExceptionD

Vcl.XPMan

Vcl.Imaging.pngimage

fKeyword

Vcl.AxCtrls

Vcl.OleCtrls

LicenseKey

UhU%d

UhD%d

Vcl.OleServer

$TServerEventDispatch.Invoke$7$0$Intf

$TServerEventDispatch.Invoke$7$ActRec

$TServerEventDispatch.Invoke$7$ActRect.d

IWebBrowserD#@

IWebBrowserAppP2d

IWebBrowser2

TWebBrowserStatusTextChange

TWebBrowserProgressChange

TWebBrowserCommandStateChange

TWebBrowserTitleChange

TWebBrowserPropertyChange

TWebBrowserBeforeNavigate2

TWebBrowserNewWindow2

TWebBrowserNavigateComplete2

TWebBrowserDocumentComplete

TWebBrowserOnVisible

TWebBrowserOnToolBar

TWebBrowserOnMenuBar

TWebBrowserOnStatusBar

TWebBrowserOnFullScreen

TWebBrowserOnTheaterMode

TWebBrowserWindowSetResizable

TWebBrowserWindowSetLeft

TWebBrowserWindowSetTop

TWebBrowserWindowSetWidth

TWebBrowserWindowSetHeight

TWebBrowserWindowClosing

TWebBrowserClientToHostWindow

TWebBrowserSetSecureLockIcon

TWebBrowserFileDownload

TWebBrowserNavigateError

%TWebBrowserPrintTemplateInstantiation

TWebBrowserPrintTemplateTeardown

TWebBrowserUpdatePageStatus

%TWebBrowserPrivacyImpactedStateChange

TWebBrowserNewWindow3

bstrUrlContext

bstrUrl

"TWebBrowserSetPhishingFilterStatus

TWebBrowserWindowStateChanged

dwWindowStateFlags

TWebBrowserNewProcess

TWebBrowserThirdPartyUrlBlocked

!TWebBrowserRedirectXDomainBlocked

StartURL

RedirectURL

TWebBrowserBeforeScriptExecute

TWebBrowserWebWorkerStarted

TWebBrowserWebWorkerFinsihed

FLastUrl

FOnWindowSetResizable

FOnWindowSetLeft

FOnWindowSetTop

FOnWindowSetWidth

FOnWindowSetHeight

FOnWindowStateChanged

FOnThirdPartyUrlBlocked

FOnBeforeScriptExecute

FOnWebWorkerStarted

FOnWebWorkerFinsihed

TWebBrowser&

cmdID

cmdexecopt

TWebBrowser

OnWindowSetResizable(

OnWindowSetLeft

OnWindowSetTop

OnWindowSetWidth|=d

OnWindowSetHeight

OnWindowStateChanged(Fd

OnThirdPartyUrlBlocked

OnBeforeScriptExecute4Id

OnWebWorkerStarted

OnWebWorkerFinsihedU

LocationURLX

Vcl.AppEvnts

Vcl.Buttons

Vcl.Buttons4

TList.arrayofT

IComparer

IEnumerable

TList.TEmptyFunc

!TList.TEnumerator5

!TList.TEnumeratorl

TList&

TList

WebBrowser1

WebBrowser2

WebBrowser3

WebBrowser4

WebBrowser1NewWindow2

WebBrowser2NewWindow2

WebBrowser3NewWindow2

WebBrowser4NewWindow2

IdHTTP1

WebBrowser1@

WebBrowser2H

WebBrowser3l

IdHTTP2

WebBrowser5

WebBrowser6

WebBrowser7

WebBrowser2NavigateComplete2

WebBrowser2DocumentComplete

WebBrowser2NavigateComplete2

TSysPopupStyleHook.TSysPopupItemV

TSysPopupStyleHook.TSysPopupItem

Vcl.SysStyles

FKeyIndex

Vcl.Styles

6TPair

ITArray>

NTEnumerator>(

NTEnumerator>

NTEnumerable>'

NTEnumerable>P-f

BTDictionary.TItem

GTDictionary.TItemArray

,IEqualityComparer

-TCollectionNotifyEvent

KTDictionary.TKeyEnumerator;

KTDictionary.TKeyEnumeratorX1f

KTDictionary.TKeyCollection;

KTDictionary.TKeyCollectionX3f

TArray

"TEnumerator(

"TEnumerator

"TEnumerable'

"TEnumerable

MTDictionary.TValueEnumerator;

MTDictionary.TValueEnumerator

MTDictionary.TValueCollection;

MTDictionary.TValueCollection

LTDictionary.TPairEnumerator;

LTDictionary.TPairEnumerator

9

OnKeyNotifyH0f

ktcPanel

ktcPanelDisabled

ssHot

FAuthorURL

TSeWindowSubclass

ktmiWindowStandard

QTList>.arrayofT

System.Generics.Collections\*f

LIComparer>

YTCollectionNotifyEvent>

Item6TPair

NIEnumerable>

STList>.TEmptyFunc

TTList>.TEnumerator5

TTList>.TEnumerator

HTList>&

HTList>

%TList.arrayofT

IComparer

"IEnumerable

'TList.TEmptyFunc

(TList.TEnumerator5

(TList.TEnumeratorP

TList&

TList

NTComparison>

LTComparer>2

LTComparer>

"TComparison

TComparer2

TComparerh

System.SysConst

System.RTLConsts

System.Hash

System.Internal.ExcUtils

System.Character

Winapi.PsAPI

Winapi.SHFolder

Winapi.ImageHlp

System.VarUtils

System.Math

System.AnsiStrings

System.StrUtils

Winapi.Messages

Winapi.UxTheme

System.Diagnostics

System.TimeSpan

Winapi.CommCtrl

Winapi.MultiMon

Winapi.Dlgs

Vcl.Consts

Winapi.Dwmapi

Winapi.ShellAPI

Winapi.IpExport

Winapi.Winsock2

Winapi.Qos

Winapi.MSXMLIntf

Winapi.StructuredQueryCondition

Winapi.PropSys

Winapi.ObjectArray

Winapi.UrlMon

Winapi.WinInet

Winapi.RegStr

System.Win.ComConst

Winapi.PenInputPanel

Winapi.MsInkAut

Winapi.TpcShrd

Vcl.GraphUtil

System.Win.Crtl

System.UIConsts

System.IniFiles

System.IOUtils

System.DateUtils

System.Masks

Winapi.Imm

Winapi.CommDlg

Vcl.ComStrs

Vcl.Printers

Winapi.WinSpool

Vcl.ListActns

Vcl.ToolWin

Winapi.RichEdit

Vcl.Clipbrd

Winapi.FlatSB

System.Win.Taskbar

System.WideStrUtils

Vcl.ButtonGroup

Vcl.CategoryButtons

Vcl.Grids

Vcl.Mask

System.MaskUtils

Winapi.TlHelp32

System.Win.StdVCL

Vcl.OleConst

Vcl.Imaging.pnglang

Winapi.WinSock

Winapi.IpHlpApi

Winapi.IpRtrMib

Winapi.IpTypes

IdTCPServer

IdCustomTCPServer

Vcl.Imaging.JConsts

#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%

P%S%V%Y%\%

?456789:;

!"#$%&'()* ,-./0123

kernel32.dll

user32.dll

wtsapi32.dll

msimg32.dll

windowscodecs.dll

uxtheme.dll

imm32.dll

DWMAPI.DLL

shell32.dll

Project1.exe

Embarcadero Delphi for Win32 compiler version 29.0 (22.0.19027.8951)

$=.bJJJ

fT.wNvJ|\

m''%u

.XSAl

-3.%F

~%X<.>

d.aF:

RS[.Hj

n%cTc

Gi.HU

\}uTcp

UMsg4

eQ.Ft

iL%f*9

333333333333333333

33333833

3333339

3333333333333338

:*"*"$3338

3333333

33333333

33333333333

3333333333338

33338?383

333333333333

:*3:"$3338

333333333333333

System.StrUtils

,System.Character

ISystem.Internal.ExcUtils

dSystem.SysConst

kWinapi.PsAPI

-Winapi.ImageHlp

&System.DateUtils

fSystem.Rtti

dSystem.Hash

YSystem.AnsiStrings

%System.Classes

"Winapi.WinSock

wWinapi.IpTypes

iSystem.IOUtils

IdTCPServer

0IdHTTPHeaderInfo

OVcl.XPMan

(Vcl.Menus

RVcl.Dialogs

yVcl.Consts

CVcl.ExtCtrls

eVcl.Forms

hWinapi.UrlMon

4Winapi.RegStr

DWinapi.MsInkAut

'System.UIConsts

|System.Actions

:Winapi.Imm

Vcl.ComCtrls

WVcl.ComStrs

bVcl.Printers

8Vcl.ToolWin

jVcl.Clipbrd

NSystem.Win.TaskbarCore

hSystem.Win.Taskbar

NSystem.Contnrs

BVcl.OleServer

sVcl.AxCtrls

UVcl.Mask

wVcl.ButtonGroup

Vcl.CategoryButtons

tVcl.Buttons

'Vcl.AppEvnts

gVcl.Styles

Font.Charset

Font.Color

Font.Height

Font.Name

Font.Style

Picture.Data

;qiTXtXML:com.adobe.xmp

xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/"

xmlns:dc="hXXp://purl.org/dc/elements/1.1/"

xmlns:photoshop="hXXp://ns.adobe.com/photoshop/1.0/"

xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/"

xmlns:stEvt="hXXp://ns.adobe.com/xap/1.0/sType/ResourceEvent#"

xmlns:tiff="hXXp://ns.adobe.com/tiff/1.0/"

xmlns:exif="hXXp://ns.adobe.com/exif/1.0/">

Adobe Photoshop CC (Windows)

xmp.did:d9bf0e15-ad5e-d747-977b-665777d1a6d6

xmp.iid:5838e5fb-bbf1-534b-bf24-e8d87acdfca1

xmp.did:58bef41e-7c89-bf41-8791-59a2f5bad0f7

xmp.iid:58bef41e-7c89-bf41-8791-59a2f5bad0f7

Adobe Photoshop CC (Windows)

xmp.iid:5838e5fb-bbf1-534b-bf24-e8d87acdfca1

>L_.XH#

%2SEl

2w.Tp

iTXtXML:com.adobe.xmp

xmp.iid:ec2611d1-e370-2246-b029-d0f910e6ccc3

xmp.did:53f2b40f-a01a-024a-83c8-e2eb1c14eae1

xmp.iid:53f2b40f-a01a-024a-83c8-e2eb1c14eae1

xmp.iid:a4f5f588-13c9-ed4b-accb-8419866291ab

xmp.iid:ec2611d1-e370-2246-b029-d0f910e6ccc3

Suporte SOMENTE NO F

RIOS para uso no leia-me.txt.

(rlh.contato@gmail.com)

Lines.Strings

Glyph.Data

ProxyParams.BasicAuthentication

ProxyParams.ProxyPort

Request.ContentLength

Request.ContentRangeEnd

Request.ContentRangeStart

"Request.ContentRangeInstanceLength

Request.Accept

Request.BasicAuthentication

Request.UserAgent

&Mozilla/3.0 (compatible; Indy Library)

Request.Ranges.Units

Request.Ranges

HTTPOptions

=_iTXtXML:com.adobe.xmp

xmp.iid:1976b9f7-95f5-ba48-af19-bb73956253d2

xmp.did:e98b6521-cf88-3542-beaf-7f8672c5a360

xmp.iid:e98b6521-cf88-3542-beaf-7f8672c5a360

xmp.iid:1976b9f7-95f5-ba48-af19-bb73956253d2

Bitmap.Data

VVV.rlhackers.com.br

GetWindowsDirectoryW

GetCPInfoExW

GetCPInfo

RegOpenKeyExW

RegCloseKey

RegQueryInfoKeyW

RegFlushKey

RegEnumKeyExW

RegCreateKeyExW

SetViewportOrgEx

GetViewportOrgEx

ShellExecuteW

URLDownloadToFileW

keybd_event

UnhookWindowsHookEx

SetWindowsHookExW

MsgWaitForMultipleObjectsEx

MsgWaitForMultipleObjects

MapVirtualKeyW

LoadKeyboardLayoutW

GetKeyboardState

GetKeyboardLayoutNameW

GetKeyboardLayoutList

GetKeyboardLayout

GetKeyState

GetKeyNameTextW

EnumWindows

EnumThreadWindows

EnumChildWindows

ActivateKeyboardLayout

.text

`.itext

`.data

.idata

.didata

.edata

@.tls

.rdata

@.reloc

B.rsrc

Key"g

keybd_e

ffsUMsg

10%--'9))

7!>>#!11%..

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

KERNEL32.DLL

advapi32.dll

comctl32.dll

gdi32.dll

msvcrt.dll

ole32.dll

oleaut32.dll

URLMON.DLL

version.dll

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

PSAPI.dll

NTDLL.DLL

operator

%s[%d]

%s_%d

.Owner

\\?\UNC\

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

crSQLWait

%s%0.8x

claBurlywood

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

TaskDialogIndirect

Invalid ZStream operation!

%s, ClassID: %s

%s (%s)

%d_AsyncMessage

{43826D1E-E718-42EE-BC55-A1E261C37BFE}

%s%s%s%s%s%s%s%s%s%s

Windows

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

%s, %.2d %s %.4d %s %s

%s, %.2d%s%s%s%.4d %s %s

10.6.2.5263

WS2_32.DLL

getservbyport

WSAAsyncGetServByPort

WSAJoinLeaf

MSWSOCK.DLL

WSARecvMsg

WSASendMsg

Wship6.dll

Fwpuclnt.dll

IdnDL.dll

Normaliz.dll

iphlpapi.dll

0.0.0.0

127.0.0.1

0.0.0.1

ISO_646.irv:1991

ISO_646.basic:1983

ISO_646.irv:1983

csISO16Portuguese

csISO84Portuguese2

windows-936

csShiftJIS

windows-874

ISO-8859-1-Windows-3.0-Latin-1

csWindows30Latin1

ISO-8859-1-Windows-3.1-Latin-1

csWindows31Latin1

ISO-8859-2-Windows-Latin-2

csWindows31Latin2

ISO-8859-9-Windows-Latin-5

csWindows31Latin5

csMicrosoftPublishing

Windows-31J

csWindows31J

PTCP154

csPTCP154

windows-1250

windows-1251

windows-1252

windows-1253

windows-1254

windows-1255

windows-1256

windows-1257

windows-1258

0123456789

!"#$%&'()* ,-./;?@[\]^_`{|}~

.nml=animation/narrative

.aac=audio/mp4

.aif=audio/x-aiff

.aifc=audio/x-aiff

.aiff=audio/x-aiff

.au=audio/basic

.gsm=audio/x-gsm

.kar=audio/midi

.m3u=audio/mpegurl

.mid=audio/midi

.midi=audio/midi

.mpega=audio/x-mpg

.mp2=audio/x-mpg

.mp3=audio/x-mpg

.mpga=audio/x-mpg

.m3u=audio/x-mpegurl

.pls=audio/x-scpls

.qcp=audio/vnd.qcelp

.ra=audio/x-realaudio

.ram=audio/x-pn-realaudio

.rm=audio/x-pn-realaudio

.sd2=audio/x-sd2

.sid=audio/prs.sid

.snd=audio/basic

.wav=audio/x-wav

.wax=audio/x-ms-wax

.wma=audio/x-ms-wma

.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile

.art=image/x-jg

.bmp=image/bmp

.cdr=image/x-coreldraw

.cdt=image/x-coreldrawtemplate

.cpt=image/x-corelphotopaint

.djv=image/vnd.djvu

.djvu=image/vnd.djvu

.gif=image/gif

.ief=image/ief

.ico=image/x-icon

.jng=image/x-jng

.jpg=image/jpeg

.jpeg=image/jpeg

.jpe=image/jpeg

.pat=image/x-coreldrawpattern

.pcx=image/pcx

.pbm=image/x-portable-bitmap

.pgm=image/x-portable-graymap

.pict=image/x-pict

.png=image/x-png

.pnm=image/x-portable-anymap

.pntg=image/x-macpaint

.ppm=image/x-portable-pixmap

.psd=image/x-psd

.qtif=image/x-quicktime

.ras=image/x-cmu-raster

.rf=image/vnd.rn-realflash

.rgb=image/x-rgb

.rp=image/vnd.rn-realpix

.sgi=image/x-sgi

.svg=image/svg xml

.svgz=image/svg xml

.targa=image/x-targa

.tif=image/x-tiff

.wbmp=image/vnd.wap.wbmp

.webp=image/webp

.xbm=image/xbm

.xbm=image/x-xbitmap

.xpm=image/x-xpixmap

.xwd=image/x-xwindowdump

.xml=text/xml

.uls=text/iuls

.txt=text/plain

.rtx=text/richtext

.wsc=text/scriptlet

.rt=text/vnd.rn-realtext

.htt=text/webviewhtml

.htc=text/x-component

.vcf=text/x-vcard

.asf=video/x-ms-asf

.asx=video/x-ms-asf

.avi=video/x-msvideo

.dl=video/dl

.dv=video/dv

.flc=video/flc

.fli=video/fli

.gl=video/gl

.lsf=video/x-la-asf

.lsx=video/x-la-asf

.mng=video/x-mng

.mp2=video/mpeg

.mp3=video/mpeg

.mp4=video/mpeg

.mpeg=video/x-mpeg2a

.mpa=video/mpeg

.mpe=video/mpeg

.mpg=video/mpeg

.ogv=video/ogg

.moov=video/quicktime

.mov=video/quicktime

.mxu=video/vnd.mpegurl

.qt=video/quicktime

.qtc=video/x-qtc

.rv=video/vnd.rn-realvideo

.ivf=video/x-ivf

.webm=video/webm

.wm=video/x-ms-wm

.wmp=video/x-ms-wmp

.wmv=video/x-ms-wmv

.wmx=video/x-ms-wmx

.wvx=video/x-ms-wvx

.rms=video/vnd.rn-realvideo-secure

.asx=video/x-ms-asf-plugin

.movie=video/x-sgi-movie

.aab=application/x-authorware-bin

.aam=application/x-authorware-map

.aas=application/x-authorware-seg

.abw=application/x-abiword

.ace=application/x-ace-compressed

.ai=application/postscript

.alz=application/x-alz-compressed

.ani=application/x-navi-animation

.arj=application/x-arj

.asf=application/vnd.ms-asf

.bat=application/x-msdos-program

.bcpio=application/x-bcpio

.boz=application/x-bzip2

.bz=application/x-bzip

.bz2=application/x-bzip2

.cab=application/vnd.ms-cab-compressed

.cat=application/vnd.ms-pki.seccat

.ccn=application/x-cnc

.cco=application/x-cocoa

.cdf=application/x-cdf

.cer=application/x-x509-ca-cert

.chm=application/vnd.ms-htmlhelp

.chrt=application/vnd.kde.kchart

.cil=application/vnd.ms-artgalry

.class=application/java-vm

.com=application/x-msdos-program

.clp=application/x-msclip

.cpio=application/x-cpio

.cpt=application/mac-compactpro

.cqk=application/x-calquick

.crd=application/x-mscardfile

.crl=application/pkix-crl

.csh=application/x-csh

.dar=application/x-dar

.dbf=application/x-dbase

.dcr=application/x-director

.deb=application/x-debian-package

.dir=application/x-director

.dist=vnd.apple.installer xml

.distz=vnd.apple.installer xml

.dll=application/x-msdos-program

.dmg=application/x-apple-diskimage

.doc=application/msword

.dot=application/msword

.dvi=application/x-dvi

.dxr=application/x-director

.ebk=application/x-expandedbook

.eps=application/postscript

.evy=application/envoy

.exe=application/x-msdos-program

.fdf=application/vnd.fdf

.fif=application/fractals

.flm=application/vnd.kde.kivio

.fml=application/x-file-mirror-list

.gzip=application/x-gzip

.gnumeric=application/x-gnumeric

.gtar=application/x-gtar

.gz=application/x-gzip

.hdf=application/x-hdf

.hlp=application/winhlp

.hpf=application/x-icq-hpf

.hqx=application/mac-binhex40

.hta=application/hta

.ims=application/vnd.ms-ims

.ins=application/x-internet-signup

.iii=application/x-iphone

.iso=application/x-iso9660-image

.jar=application/java-archive

.karbon=application/vnd.kde.karbon

.kfo=application/vnd.kde.kformula

.kon=application/vnd.kde.kontour

.kpr=application/vnd.kde.kpresenter

.kpt=application/vnd.kde.kpresenter

.kwd=application/vnd.kde.kword

.kwt=application/vnd.kde.kword

.latex=application/x-latex

.lha=application/x-lzh

.lcc=application/fastman

.lrm=application/vnd.ms-lrm

.lz=application/x-lzip

.lzh=application/x-lzh

.lzma=application/x-lzma

.lzo=application/x-lzop

.lzx=application/x-lzx

.mpp=application/vnd.ms-project

.mvb=application/x-msmediaview

.man=application/x-troff-man

.mdb=application/x-msaccess

.me=application/x-troff-me

.ms=application/x-troff-ms

.msi=application/x-msi

.mpkg=vnd.apple.installer xml

.mny=application/x-msmoney

.nix=application/x-mix-transfer

.oda=application/oda

.odb=application/vnd.oasis.opendocument.database

.odc=application/vnd.oasis.opendocument.chart

.odf=application/vnd.oasis.opendocument.formula

.odg=application/vnd.oasis.opendocument.graphics

.odi=application/vnd.oasis.opendocument.image

.odm=application/vnd.oasis.opendocument.text-master

.odp=application/vnd.oasis.opendocument.presentation

.ods=application/vnd.oasis.opendocument.spreadsheet

.ogg=application/ogg

.odt=application/vnd.oasis.opendocument.text

.otg=application/vnd.oasis.opendocument.graphics-template

.oth=application/vnd.oasis.opendocument.text-web

.otp=application/vnd.oasis.opendocument.presentation-template

.ots=application/vnd.oasis.opendocument.spreadsheet-template

.ott=application/vnd.oasis.opendocument.text-template

.p7b=application/x-pkcs7-certificates

.p7r=application/x-pkcs7-certreqresp

.package=application/vnd.autopackage

.pfr=application/font-tdpfr

.pkg=vnd.apple.installer xml

.pdf=application/pdf

.pko=application/vnd.ms-pki.pko

.pl=application/x-perl

.pnq=application/x-icq-pnq

.pot=application/mspowerpoint

.pps=application/mspowerpoint

.ppt=application/mspowerpoint

.ppz=application/mspowerpoint

.ps=application/postscript

.pub=application/x-mspublisher

.qpw=application/x-quattropro

.qtl=application/x-quicktimeplayer

.rar=application/rar

.rdf=application/rdf xml

.rjs=application/vnd.rn-realsystem-rjs

.rm=application/vnd.rn-realmedia

.rmf=application/vnd.rmf

.rmp=application/vnd.rn-rn_music_package

.rmx=application/vnd.rn-realsystem-rmx

.rnx=application/vnd.rn-realplayer

.rpm=application/x-redhat-package-manager

.rsml=application/vnd.rn-rsml

.rtsp=application/x-rtsp

.rss=application/rss xml

.scm=application/x-icq-scm

.ser=application/java-serialized-object

.scd=application/x-msschedule

.sda=application/vnd.stardivision.draw

.sdc=application/vnd.stardivision.calc

.sdd=application/vnd.stardivision.impress

.sdp=application/x-sdp

.setpay=application/set-payment-initiation

.setreg=application/set-registration-initiation

.sh=application/x-sh

.shar=application/x-shar

.shw=application/presentations

.sit=application/x-stuffit

.sitx=application/x-stuffitx

.skd=application/x-koan

.skm=application/x-koan

.skp=application/x-koan

.skt=application/x-koan

.smf=application/vnd.stardivision.math

.smi=application/smil

.smil=application/smil

.spl=application/futuresplash

.ssm=application/streamingmedia

.sst=application/vnd.ms-pki.certstore

.stc=application/vnd.sun.xml.calc.template

.std=application/vnd.sun.xml.draw.template

.sti=application/vnd.sun.xml.impress.template

.stl=application/vnd.ms-pki.stl

.stw=application/vnd.sun.xml.writer.template

.svi=application/softvision

.sv4cpio=application/x-sv4cpio

.sv4crc=application/x-sv4crc

.swf=application/x-shockwave-flash

.swf1=application/x-shockwave-flash

.sxc=application/vnd.sun.xml.calc

.sxi=application/vnd.sun.xml.impress

.sxm=application/vnd.sun.xml.math

.sxw=application/vnd.sun.xml.writer

.sxg=application/vnd.sun.xml.writer.global

.tar=application/x-tar

.tcl=application/x-tcl

.tex=application/x-tex

.texi=application/x-texinfo

.texinfo=application/x-texinfo

.tbz=application/x-bzip-compressed-tar

.tbz2=application/x-bzip-compressed-tar

.tgz=application/x-compressed-tar

.tlz=application/x-lzma-compressed-tar

.tr=application/x-troff

.trm=application/x-msterminal

.troff=application/x-troff

.tsp=application/dsptype

.torrent=application/x-bittorrent

.ttz=application/t-time

.txz=application/x-xz-compressed-tar

.udeb=application/x-debian-package

.uin=application/x-icq

.urls=application/x-url-list

.ustar=application/x-ustar

.vcd=application/x-cdlink

.vor=application/vnd.stardivision.writer

.vsl=application/x-cnet-vsl

.wcm=application/vnd.ms-works

.wb1=application/x-quattropro

.wb2=application/x-quattropro

.wb3=application/x-quattropro

.wdb=application/vnd.ms-works

.wks=application/vnd.ms-works

.wmd=application/x-ms-wmd

.wms=application/x-ms-wms

.wmz=application/x-ms-wmz

.wp5=application/wordperfect5.1

.wpd=application/wordperfect

.wpl=application/vnd.ms-wpl

.wps=application/vnd.ms-works

.wri=application/x-mswrite

.xfdf=application/vnd.adobe.xfdf

.xls=application/x-msexcel

.xlb=application/x-msexcel

.xpi=application/x-xpinstall

.xps=application/vnd.ms-xpsdocument

.xsd=application/vnd.sun.xml.draw

.xul=application/vnd.mozilla.xul xml

.zoo=application/x-zoo

.zip=application/x-zip-compressed

.wml=text/vnd.wap.wml

.wmlc=application/vnd.wap.wmlc

.wmls=text/vnd.wap.wmlscript

.wmlsc=application/vnd.wap.wmlscriptc

.asm=text/x-asm

.pas=text/x-pascal

.cs=text/x-csharp

.cpp=text/x-c src

.cxx=text/x-c src

.cc=text/x-c src

.hpp=text/x-c hdr

.hxx=text/x-c hdr

.hh=text/x-c hdr

.java=text/x-java

.css=text/css

.js=text/javascript

.htm=text/html

.html=text/html

.xhtml=application/xhtml xml

.xht=application/xhtml xml

.ls=text/javascript

.mocha=text/javascript

.shtml=server-parsed-html

.sgm=text/sgml

.sgml=text/sgml

.mht=message/rfc822

HTTP-EQUIV

()@,;:\"./

()@,;:\"/[]?=

()@,;:\"/[]?={}

Mozilla/3.0 (compatible; Indy Library)

X-HTTP-Method-Override

%d-%d

HTTPS

https

HTTPONLY=

HTTPONLY

WINDOWS

Content-Disposition: form-data; name="%s"

; filename="%s"

Content-Type: %s

; charset="%s"

Content-Transfer-Encoding: %s

libeay32.dll

ssleay32.dll

libssl32.dll

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_get_peer_certificate

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_check_private_key

X509_STORE_add_cert

X509_STORE_CTX_get_current_cert

i2d_DSAPrivateKey

d2i_DSAPrivateKey

d2i_PrivateKey

d2i_PrivateKey_bio

DES_set_key

_ossl_old_des_set_key

RSA_generate_key_ex

RSA_generate_key

RSA_check_key

i2d_PrivateKey_bio

i2d_RSAPrivateKey

d2i_RSAPrivateKey

i2d_RSAPublicKey

d2i_RSAPublicKey

i2d_PrivateKey

i2d_NETSCAPE_CERT_SEQUENCE

X509_get_default_cert_file

X509_get_default_cert_file_env

X509_set_pubkey

X509_REQ_set_pubkey

X509_PUBKEY_get

PEM_read_bio_RSAPrivateKey

PEM_read_bio_RSAPublicKey

PEM_read_bio_DSAPrivateKey

PEM_read_bio_PrivateKey

PEM_read_bio_NETSCAPE_CERT_SEQUENCE

PEM_write_bio_RSAPrivateKey

PEM_write_bio_RSAPublicKey

PEM_write_bio_DSAPrivateKey

PEM_write_bio_PrivateKey

PEM_write_bio_NETSCAPE_CERT_SEQUENCE

PEM_write_bio_PKCS8PrivateKey

EVP_CIPHER_CTX_set_key_length

EVP_CIPHER_CTX_rand_key

EVP_PKEY_type

EVP_PKEY_new

EVP_PKEY_free

EVP_PKEY_assign

EVP_CIPHER_key_length

EVP_CIPHER_CTX_key_length

EVP_PKEY_decrypt_old

EVP_PKEY_encrypt_old

EVP_PKEY_id

EVP_PKEY_base_id

EVP_PKEY_bits

EVP_PKEY_size

EVP_PKEY_set_type

EVP_PKEY_set_type_str

EVP_PKEY_get0

EVP_PKEY_set1_RSA

EVP_PKEY_get1_RSA

EVP_PKEY_set1_DSA

EVP_PKEY_get1_DSA

EVP_PKEY_set1_DH

EVP_PKEY_get1_DH

EVP_PKEY_set1_EC_KEY

EVP_PKEY_get1_EC_KEY

d2i_PublicKey

i2d_PublicKey

d2i_AutoPrivateKey

EVP_PKEY_copy_parameters

EVP_PKEY_missing_parameters

EVP_PKEY_save_parameters

EVP_PKEY_cmp_parameters

EVP_PKEY_cmp

EVP_PKEY_print_public

EVP_PKEY_print_private

EVP_PKEY_print_params

EVP_PKEY_get_default_digest_nid

PKCS5_PBE_keyivgen

PKCS5_v2_PBE_keyivgen

EVP_PKEY_asn1_get_count

EVP_PKEY_asn1_get0

EVP_PKEY_asn1_find

EVP_PKEY_asn1_find_str

EVP_PKEY_asn1_add0

EVP_PKEY_asn1_add_alias

EVP_PKEY_asn1_get0_info

EVP_PKEY_get0_asn1

EVP_PKEY_asn1_new

EVP_PKEY_asn1_copy

EVP_PKEY_asn1_free

EVP_PKEY_asn1_set_public

EVP_PKEY_asn1_set_private

EVP_PKEY_asn1_set_param

EVP_PKEY_asn1_set_free

EVP_PKEY_asn1_set_ctrl

EVP_PKEY_meth_find

EVP_PKEY_meth_new

EVP_PKEY_meth_get0_info

EVP_PKEY_meth_copy

EVP_PKEY_meth_free

EVP_PKEY_meth_add0

EVP_PKEY_CTX_new

EVP_PKEY_CTX_new_id

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_free

EVP_PKEY_CTX_ctrl

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_get_operation

EVP_PKEY_CTX_set0_keygen_info

EVP_PKEY_new_mac_key

EVP_PKEY_CTX_set_data

EVP_PKEY_CTX_get_data

EVP_PKEY_CTX_get0_pkey

EVP_PKEY_CTX_get0_peerkey

EVP_PKEY_CTX_set_app_data

EVP_PKEY_CTX_get_app_data

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_derive_init

EVP_PKEY_derive_set_peer

EVP_PKEY_derive

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_CTX_set_cb

EVP_PKEY_CTX_get_cb

EVP_PKEY_CTX_get_keygen_info

EVP_PKEY_meth_set_init

EVP_PKEY_meth_set_copy

EVP_PKEY_meth_set_cleanup

EVP_PKEY_meth_set_paramgen

EVP_PKEY_meth_set_keygen

EVP_PKEY_meth_set_sign

EVP_PKEY_meth_set_verify

EVP_PKEY_meth_set_verify_recover

EVP_PKEY_meth_set_signctx

EVP_PKEY_meth_set_verifyctx

EVP_PKEY_meth_set_encrypt

EVP_PKEY_meth_set_decrypt

EVP_PKEY_meth_set_derive

EVP_PKEY_meth_set_ctrl

secur32.dll

security.dll

HTTP/1.0 200 OK

HTTP/

olepro32.dll

hXXp://rlhackers.com.br/red3.html?nocache

hXXp://rlhackers.com.br/red4.html?nocache

hXXp://rlhackers.com.br/red.html?nocache

hXXp://rlhackers.com.br/red2.html?nocache

hXXps://admdownload.adobe.com/bin/live/flashplayer18ax_ha_install.exe

hXXp://rlhackers.com.br/index2.html?nocache

hXXp://rlhackers.com.br/index3.html?nocache

hXXp://rlhackers.com.br/red5.html?nocache

hXXp://rlhackers.com.br/red6.html?nocache

hXXp://videospornoadultos.net/loader/info/go.txt?nocache

crossfire.exe

Engine.exe

PointBlank.exe

Game.exe

x2.exe

suddenattack.exe

rpcrt4.dll

ie.exe

d3dx9_1.dll

sa.exe

libmysql.dll

\11.0.exe

Erro codigo: 11, reporte no nosso f

hXXp://videospornoadultos.net/loader/cheats/cf1.exe?nocache

hXXp://videospornoadultos.net/loader/cheats/cf2.exe?nocache

hXXp://videospornoadultos.net/loader/cheats/cf3.exe?nocache

hXXp://videospornoadultos.net/loader/cheats/cf4.exe?nocache

hXXp://videospornoadultos.net/loader/cheats/cf5.exe?nocache

Loader FREE.exe

hXXp://videospornoadultos.net/loader/teste/sa.exe?nocache

hXXp://videospornoadultos.net/loader/teste/libmysql.dll?nocache

MasterSword.exe

SwordMaster.dll

MasterSword\MasterSword.exe

hXXp://videospornoadultos.net/loader/teste/mastersword.exe?nocache

MasterSword\SwordMaster.dll

hXXp://videospornoadultos.net/loader/teste/swordmaster.dll?nocache

hXXp://videospornoadultos.net/loader/teste/aikabr.exe?nocache

PlayCheat\PlayCheat.exe

PlayCheat\PlayCheat.dll

hXXp://videospornoadultos.net/loader/teste/playcheat.exe?nocache

hXXp://videospornoadultos.net/loader/teste/playcheat.dll?nocache

hXXp://videospornoadultos.net/loader/cheats/ca1.dll?nocache

hXXp://videospornoadultos.net/loader/cheats/ca2.dll?nocache

hXXp://videospornoadultos.net/loader/cheats/ca3.dll?nocache

hXXp://videospornoadultos.net/loader/cheats/wf1.dll?nocache

hXXp://videospornoadultos.net/loader/cheats/wf2.dll?nocache

hXXp://videospornoadultos.net/loader/cheats/wf3.dll?nocache

hXXp://videospornoadultos.net/loader/cheats/pb1.dll?nocache

hXXp://videospornoadultos.net/loader/cheats/pb2.dll?nocache

hXXp://videospornoadultos.net/loader/cheats/pb3.dll?nocache

MasterGC\D3DX9_43.dll

MasterGC\msvcr100.dll

MasterGC\MasterPB.exe

MasterGC\PBMaster.dll

MasterSword\D3DX9_43.dll

MasterSword\msvcr100.dll

MasterSword\MasterPB.exe

MasterSword\PBMaster.dll

hXXp://videospornoadultos.net/loader/teste/masterpb.exe?nocache

hXXp://videospornoadultos.net/loader/teste/pbmaster.dll?nocache

hXXp://videospornoadultos.net/loader/teste/D3DX9_43.dll?nocache

hXXp://videospornoadultos.net/loader/teste/msvcr100.dll?nocache

hXXp://videospornoadultos.net/loader/info/fapcf.txt?nocache

hXXp://videospornoadultos.net/loader/info/name.txt?nocache

hXXp://videospornoadultos.net/loader/info/title.txt?nocache

C:\Windows\MasterSword\

C:\Windows\239U2DJK293JD293J\

293U4SDMISMJXIM.EXE.EXE

MasterPB.exe

C:\Windows\MasterGC\

MasterGC.exe

C:\Windows\PlayCheat\

PlayCheat.exe

\H_LOADER.EXE

hXXp://rlhackers.com.br/forum/

hXXp://videospornoadultos.net/loader/versaoloader.txt?nocache

hXXp://videospornoadultos.net/loader/info/status.txt?nocache

patcher_cf.exe

LOADER FREE.exe

hXXp://videospornoadultos.net/loader/info/on.php?nocache

hXXp://videospornoadultos.net/loader/info/script2.php?nocache

hXXp://VVV.rlhackers.com.br/forum/index.php?showtopic=4012

hXXp://VVV.rlhackers.com.br/forum

hXXp://VVV.rlhackers.com.br/blog/index.php/peca-seu-jogo-aqui-global-loader-ultra/

hXXp://VVV.rlhackers.com.br/blog

hXXp://videospornoadultos.net/loader/update/novoloader.exe?nocache

hXXps://VVV.youtube.com/watch?v=Dc8FfYlhxFk&feature=youtu.be

hXXp://VVV.rlhackers.com.br/blog/index.php/tag/global-loader-online/

hXXp://gameorb2.com/index

hXXp://engenharianm.com?nocache

hXXp://marketingdequalidade.com?nocache

Kernel32.dll

Open SSL Support DLL Delphi and C Builder interface

hXXp://VVV.indyproject.org/

1993 - 2014

Portable Network Graphics

Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.

OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s

UThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.

Description: BThe "Portable Network Graphics" image contains an invalid palette.

The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it againnThis "Portable Network Graphics" image is not supported or it might be invalid.

This "Portable Network Graphics" image is not supported because either its width or height exceeds the maximum size of 65535 pixels.

There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.pThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.oSome operation could not be performed because the system is out of resources. Close some windows and try again.bClient policy does not allow credential delegation to target server with NLTM only authentication.1The recipient rejected the renegotiation request.-The required security context does not exist.`The PKU2U protocol encountered an error while attempting to utilize the associated certificates.:The identity of the server computer could not be verified.

Unknown error#SSPI %s returns error #%d(0x%x): %s0SSPI interface has failed to initialise properly

Unknown credentials use!Do AcquireCredentialsHandle first"CompleteAuthToken is not supportedjThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted5The certificate is not valid for the requested usage.

The smartcard certificate used for authentication has been revoked. Please contact your system administrator. There may be additional information in the event log.

An untrusted certificate authority was detected While processing the smartcard certificate used for authentication. Please contact your system administrator.

The revocation status of the smartcard certificate used for authentication could not be determined. Please contact your system administrator.lThe smartcard certificate used for authentication was not trusted. Please contact your system administrator.hThe smartcard certificate used for authentication has expired. Please contact your system administrator.

The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.

An attempt was made by this server to make a Kerberos constrained delegation request for a target outside of the server's realm. This is not supported, and indicates a misconfiguration on this server's allowed to delegate to list. Please contact your administrator.

The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.

An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Please contact your system administrator.

The domain controller certificate used for smartcard logon has expired. Please contact your system administrator with the contents of your system event log.

The domain controller certificate used for smartcard logon has been revoked. Please contact your system administrator with the contents of your system event log.IA signature operation must be performed before the user can authenticate.AOne or more of the parameters passed to the function was invalid.DClient policy does not allow credential delegation to target server.9The number of maximum ticket referrals has been exceeded.KThe local machine must be a Kerberos KDC (domain controller) and it is not.qThe other end of the security negotiation is requires strong crypto but it is not supported on the local machine.5The KDC reply contained more than one principal name.OExpected to find PA data for a hint of what etype to use, but it was not found.

The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Please contact your administrator.-Smartcard logon is required and was not used.!A system shutdown is in progress.'An invalid request was sent to the KDC.DThe KDC was unable to generate a referral for the service requested.:The encryption type requested is not supported by the KDC.QAn unsupported preauthentication mechanism was presented to the Kerberos package.

The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation.7Client's supplied SSPI channel bindings were incorrect.9The received certificate was mapped to multiple accounts.

SEC_E_NO_KERB_KEY'The target principal name is incorrect.:There is no LSA mode context associated with this context.8The clocks on the client and server machines are skewed.;The certificate chain was issued by an untrusted authority.7The message received was unexpected or badly formatted.;An unknown error occurred while processing the certificate.%The received certificate has expired.*The specified data could not be encrypted.*The specified data could not be decrypted.YThe client and server cannot communicate, because they do not possess a common algorithm.

The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).dA security context was deleted before the context was completed. This is considered a logon failure.mThe client is trying to negotiate a context and the server requires user-to-user but didn't send a TGT reply.aUnable to accomplish the requested task because the local machine does not have any IP addresses.bThe supplied credential handle does not match the credential associated with the security context.]The crypto system or checksum function is invalid because a required function is unavailable.

;The credentials supplied to the package were not recognized4No credentials are available in the security packageCThe message or signature supplied for verification has been altered8The message supplied for verification is out of sequence3No authority could be contacted for authentication.UThe function completed successfully, but must be called again to complete the contextEThe function completed successfully, but CompleteToken must be calledtThe function completed successfully, but both CompleteToken and this function must be called to complete the contextsThe logon was completed, but no network authority was available. The logon was made using locally known information-The requested security package does not exist2The context has expired and can no longer be used.DThe supplied message is incomplete. The signature was not verified.lThe credentials supplied were not complete, and could not be verified. The context could not be initialized.1The buffers supplied to a function was too small.

The handle specified is invalid'The function requested is not supported.The specified target is unknown or unreachable0The Local Security Authority cannot be contacted-The requested security package does not exist6The caller is not the owner of the desired credentialsBThe security package failed to initialize, and cannot be installed-The token supplied to the function is invalid^The security package is not able to marshall the logon buffer, so the logon attempt has failedNThe per-message Quality of Protection is not supported by the security package?The security context does not allow impersonation of the client

/Could not encode header data using charset "%s"

Failed to load %s.

SSL status: "%s"

%s Alert

%s Read Alert

%s Write Alert

Error creating SSL context. Could not load root certificate.

Could not load certificate.#Could not load key, check password.

Error getting SSL method.%Error setting File Descriptor for SSL!Error binding data to SSL socket. EOF was observed that violates the protocolpUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.

Unsupported transfer type. You can assign only an empty string or one of the following values: 7bit, 8bit, binary, quoted-printable, base64.OUnsupported encoding. You can assign only one of the following values: Q, B, 8.

Unsupported operation.!Buffer start position is invalid.

Reply Code is not valid: %s

Reply Code already exists: %s

IOHandler value is not valid'Algorithm %s not permitted in FIPS mode

Unknown Protocol(Request method requires HTTP version 1.1KUnsupported hash algorithm. This implementation supports only MD5 encoding.$Error accepting connection with SSL.

Object type not supported.

Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.

Command not supported.

Address type not supported."%s: Circular links are not allowed"Not enough data in buffer. (%d/%d)

File "%s" not found

&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.

Invalid Port Range (%d - %d)

%s is not a valid service.

%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.

End of stream: Class %s at %d)UDP is not support in this SOCKS version.

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

Connecting to %s.

Socket Error # %d

Operation would block.

Operation now in progress.

Operation already in progress.

Socket operation on non-socket./Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

JPEG error #%d

Invalid destination array"Character index out of bounds (%d)

Invalid count (%d)

Invalid destination index (%d)

Invalid codepage (%d)4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)

Resolving hostname %s."%s requires Windows Vista or later

Button%d

RadioButton%d

Style '%s' already registered#Style class '%s' already registered

Style class '%s' not found

VCL Style File)Class '%s' is already registered for '%s'%Class '%s' is not registered for '%s'

%s parameter cannot be nil0A StyleHook class has not been registered for %s#Feature not supported by this styleDCannot call BeginInvoke on a control with no parent or window handle

OLE error %.8x.Method '%s' not supported by automation object

Clipboard does not support Icons

Cannot open clipboard: %s

Text exceeds memo capacity/Menu '%s' is already being used by another form

- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.7Length of value array must be >= length of prompt array

&Password

LoginÃŠnnot remove shell notification icon

Value must be between %d and %d

%s property out of range

Unsupported clipboard format

Canvas does not allow drawing#Text format flag '%s' not supported

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'

FNo multi cast observer with ID %d was added to the observer collection

Invalid date string: %s

Invalid time string: %s

Invalid time Offset string: %s

Scan line index out of range!Cannot change the size of an iconÃŠnnot change the size of a WIC Image Invalid operation on TOleGraphic

Windows Vista

Windows Server 2008

Windows 7

Windows Server 2008 R2

Windows 2000

Windows XP

Windows Server 2003

Windows Server 2003 R2

Windows Server 2012

Windows Server 2012 R2

Windows 8

Windows 8.1

Observer is not supportedLCannot have multiple single cast observers added to the observers collection4The object does not implement the observer interfaceGNo single cast observer with ID %d was added to the observer collection

No help found for %s

Duplicates not allowed5Insufficient RTTI available to support this operation

Parameter count mismatch

Parameter %s cannot be nil'Parameter %s cannot be a negative value

The drive cannot be found The specified file was not found$No help viewer that supports filters/Index out of range (%d). Must be >= 0 and = %d and = 0 and

No help found for context %d

Failed to get data for '%s'

Failed to set data for '%s'

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list

%s expected$%s not in a class registration group

Property %s does not exist

Thread creation error: %s

Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread

$''%s'' is not a valid component name

Invalid data type for '%s'

Line too long List capacity out of bounds (%d)

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class

%s on line %d

Error reading %s%s%s: %s

Cannot assign a %s to a %s

''%s'' expectedECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

Cannot open file "%s". %s

Invalid file name - %s

Start index out of bounds (%d)

Ancestor for '%s' not found

Operation not supported

External exception %x

Interface not supported

Object lock not owned(Monitor support function not initialized

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

"Variant method calls not supported

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Invalid floating point operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted(Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'!'%s' is not a valid integer value('%s' is not a valid floating point value '%d.%d' is not a valid timestamp

'%s' is not a valid GUID value

I/O error %d

1.0.0.0

global loader ultra v4.2.exe_1340_rwx_00401000_003A5000: