Skip to main content

Backdoor.Win32.Xtreme_bd3fb39882


Trojan-Dropper.Win32.Agent.kiam (Kaspersky), Trojan.Win32.Generic!SB.0 (VIPRE), Artemis!BD3FB3988281 (McAfee), WS.Reputation.1 (Symantec), Backdoor.Win32.Xtreme.FD, Trojan-PSW.Win32.MSNPassword.FD, Trojan.MSIL.Bladabindi.2.FD, Trojan.Win32.Ransom.FD, BackdoorXtreme.YR, GenericInjector.YR, BackdoorCaphaw_QKKBAL.YR (Lavasoft MAS)Behaviour: Trojan-Dropper, Trojan-PSW, Ransom, Trojan, Backdoor

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: bd3fb39882817e7f8c738d7a405ee970

SHA1: 0b825aa3ab6d2843881431dd111ba39b19f07ade

SHA256: 232d8951079fabdf7c78b8d13138d4afff8810396164629429aa27827003f235

SSDeep: 49152:wLQzAZuXFePwhZcjC2L6xYE3jINgBwji5IwyGwFRv6usU9Tsn:wLbZ FfZc7OxL32i5ISwFlUiG

Size: 2240717 bytes

File type: EXE

Platform: WIN32

Entropy: Packed

PEID: PackerUPXCompresorGratuitowwwupxsourceforgenet, UPolyXv05_v6

Company: AirInstaller Inc.

Created at: 2007-08-19 11:31:03

Analyzed on: WindowsXP SP3 32-bit

Summary: Backdoor. Malware that enables a remote control of victim's machine.

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Backdoor creates the following process(es):

WScript.exe:640
win7.exe:316

The Backdoor injects its code into the following process(es):

%original file name%.exe:636

File activity

The process %original file name%.exe:636 makes changes in the file system.


The Backdoor creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\re.txt (735 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\win7.exe (5105568 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\FP83.tmp (229 bytes)

The process win7.exe:316 makes changes in the file system.


The Backdoor creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\foxyinstalled.dll (52736 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\LinkMaker.dll (112640 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\Conf\Addresses.cfg (2296 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\win7.exe (5234688 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\win7.vbs (574 bytes)

The Backdoor deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\__tmp_rar_sfx_access_check_2324593 (0 bytes)

Registry activity

The process WScript.exe:640 makes changes in the system registry.


The Backdoor creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "8D 68 24 02 F7 84 15 CE 92 C5 49 BB 5E FF B1 C1"

To automatically run itself each time Windows is booted, the Backdoor adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"office" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\RarSFX0\office.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"office" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\RarSFX0\office.exe"

The process %original file name%.exe:636 makes changes in the system registry.


The Backdoor creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "33 90 D8 BA 66 92 01 8B 5B 25 74 19 1C 5C E8 C1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Документы"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Рабочий стол"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{91167d45-103d-11db-8c91-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d8c0d8da-77bd-11e0-bb02-000c293bc0fd}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp]
"Win7.exe" = "win7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{91167d42-103d-11db-8c91-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Рабочий стол"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\Мои документы"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ebcf8d94-66db-11de-b228-806d6172696f}]
"BaseClass" = "Drive"

The Backdoor modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Backdoor modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The Backdoor modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process win7.exe:316 makes changes in the system registry.


The Backdoor creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "CD B2 59 7E DF 9E D0 88 14 2C 4B 5C 08 18 09 66"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Документы"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Рабочий стол"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{91167d45-103d-11db-8c91-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d8c0d8da-77bd-11e0-bb02-000c293bc0fd}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{91167d42-103d-11db-8c91-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Рабочий стол"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%System%]
"wscript.exe" = "Microsoft (R) Windows Based Script Host"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\Мои документы"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ebcf8d94-66db-11de-b228-806d6172696f}]
"BaseClass" = "Drive"

The Backdoor modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Backdoor modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The Backdoor modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Dropped PE files

MD5 File path
f99284cb305f0066af93751196430251c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\RarSFX0\LinkMaker.dll
56729a2ca39504b7a169f536038a227ec:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\RarSFX0\foxyinstalled.dll
946dd12bc59f2c0f4431d5baf58d7d13c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\RarSFX0\win7.exe
31c84c51286421b92f60227f090e9afec:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\win7.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.

Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    WScript.exe:640
    win7.exe:316

  2. Delete the original Backdoor file.
  3. Delete or disinfect the following files created/modified by the Backdoor:

    %Documents and Settings%\%current user%\Local Settings\Temp\re.txt (735 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\win7.exe (5105568 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\FP83.tmp (229 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\foxyinstalled.dll (52736 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\LinkMaker.dll (112640 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\Conf\Addresses.cfg (2296 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\win7.exe (5234688 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\RarSFX0\win7.vbs (574 bytes)

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):

    [HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "office" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\RarSFX0\office.exe"

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "office" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\RarSFX0\office.exe"

  5. Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

No information is available.

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
UPX040969420800d41d8cd98f00b204e9800998ecf8427e
UPX19830445056419845.46551979b28bf1021dd5e1dee769a42a539f9
.rsrc143360409640963.12755f1191a30b1e60b1bb9284f96162937cc

Dropped from:

c168db521c2bd276ca8ea3dabd31e355

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:


Total found: 3
4284fb73d8c89d60b08f4472e5df8efc
e52e0b2d2d341fe6681f1b395a2ff140
882feefa2d6bce352779ca857033919e

Network Activity

URLs

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Map

Strings from Dumps

%original file name%.exe_636:

`.rsrc

`.rsrc

ERROR #0027 Wrong password

ERROR #0027 Wrong password

The password that you typed is not correct.

The password that you typed is not correct.

Password:

Password:

This executable is password protected. Please enter the password in the box below.

This executable is password protected. Please enter the password in the box below.

SOFTWARE\Microsoft\Windows\CurrentVersion

SOFTWARE\Microsoft\Windows\CurrentVersion

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Please select or create the folder where you would like to extract the files packed in this executable.

Please select or create the folder where you would like to extract the files packed in this executable.

CmdLine

CmdLine

Password needed.

Password needed.

Password

Password

invalid executable code

invalid executable code

unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll

unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll

1.2.2

1.2.2

inflate 1.2.2 Copyright 1995-2004 Mark Adler

inflate 1.2.2 Copyright 1995-2004 Mark Adler

c:\%original file name%.exe

c:\%original file name%.exe

:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\win7.exe

:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\win7.exe

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\

win7.exe

win7.exe

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\win7.exe

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\win7.exe

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\FP83.tmp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\FP83.tmp

GetWindowsDirectoryA

GetWindowsDirectoryA

RegOpenKeyExA

RegOpenKeyExA

RegCloseKey

RegCloseKey

ShellExecuteExA

ShellExecuteExA

SHFileOperationA

SHFileOperationA

CreateDialogIndirectParamA

CreateDialogIndirectParamA

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

KeydA

KeydA

name="JvwComputing.|.FilePacker v1.1 for Windows 9x/2000/XP"

name="JvwComputing.|.FilePacker v1.1 for Windows 9x/2000/XP"

version="1.1.0.0"

version="1.1.0.0"

<description>FilePacker v1.1 for Windows.</description>

<description>FilePacker v1.1 for Windows.</description>

name="Microsoft.Windows.Common-Controls"

name="Microsoft.Windows.Common-Controls"

version="6.0.0.0"

version="6.0.0.0"

publicKeyToken="6595b64144ccf1df"

publicKeyToken="6595b64144ccf1df"

KERNEL32.DLL

KERNEL32.DLL

ADVAPI32.dll

ADVAPI32.dll

COMCTL32.dll

COMCTL32.dll

GDI32.dll

GDI32.dll

ole32.dll

ole32.dll

SHELL32.dll

SHELL32.dll

USER32.dll

USER32.dll

%original file name%.exe_636_rwx_00401000_00021000:

ERROR #0027 Wrong password

ERROR #0027 Wrong password

The password that you typed is not correct.

The password that you typed is not correct.

Password:

Password:

This executable is password protected. Please enter the password in the box below.

This executable is password protected. Please enter the password in the box below.

SOFTWARE\Microsoft\Windows\CurrentVersion

SOFTWARE\Microsoft\Windows\CurrentVersion

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Please select or create the folder where you would like to extract the files packed in this executable.

Please select or create the folder where you would like to extract the files packed in this executable.

CmdLine

CmdLine

Password needed.

Password needed.

Password

Password

invalid executable code

invalid executable code

unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll

unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll

1.2.2

1.2.2

inflate 1.2.2 Copyright 1995-2004 Mark Adler

inflate 1.2.2 Copyright 1995-2004 Mark Adler

c:\%original file name%.exe

c:\%original file name%.exe

:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\win7.exe

:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\win7.exe

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\

win7.exe

win7.exe

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\win7.exe

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\win7.exe

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\FP83.tmp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\FP83.tmp

GetWindowsDirectoryA

GetWindowsDirectoryA

RegOpenKeyExA

RegOpenKeyExA

RegCloseKey

RegCloseKey

ShellExecuteExA

ShellExecuteExA

SHFileOperationA

SHFileOperationA

CreateDialogIndirectParamA

CreateDialogIndirectParamA

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

KeydA

KeydA

uedit32.exe_1948:

.text

.text

`.rdata

`.rdata

@.data

@.data

.SHARED

.SHARED

.rsrc

.rsrc

SSSSSh

SSSSSh

t>SSh

t>SSh

tlSSh

tlSSh

9~l~%S

9~l~%S

FtPhz

FtPhz

u.SVj

u.SVj

<ftp><pre>zv^<_tZ><pre>tYSSh</pre><pre>t.WWQP</pre><pre>PPSSSh<</pre><pre>|6SSh</pre><pre>&t.HHt*j</pre><pre>|0SSh</pre><pre>tZSSh</pre><pre>.SVSSSVVSSS</pre><pre>FtPh</pre><pre>~%UUh</pre><pre>P\SSh</pre><pre>%SSSQSSSQSSS</pre><pre>.tTPV</pre><pre>FTPjK</pre><pre>FtPj;</pre><pre>F.PjRWj</pre><pre>?%u#f</pre><pre>u.hxYY</pre><pre>u.WWj</pre><pre>u.VVj</pre><pre>u$SShe</pre><pre>@u.Wj</pre><pre>SSSSh</pre><pre>Bar#%d</pre><pre>MRUDockLeftPos</pre><pre>%s-Summary</pre><pre>%s-Bar%d</pre><pre>hhctrl.ocx</pre><pre>CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32</pre><pre>%*.*f</pre><pre>{X-X-X-XX-XXXXXX}</pre><pre>commctrl_DragListMsg</pre><pre>Afx:%x:%x:%x:%x:%x</pre><pre>Afx:%x:%x</pre><pre>COMCTL32.DLL</pre><pre>CCmdTarget</pre><pre>GDI32.DLL</pre><pre>CMDIChildWnd</pre><pre>CMDIFrameWnd</pre><pre>windows</pre><pre>CNotSupportedException</pre><pre>RICHED32.DLL</pre><pre>CTL3D32.DLL</pre><pre>MAPI32.DLL</pre><pre>KERNEL32.DLL</pre><pre>ddeexec</pre><pre>%s\ShellNew</pre><pre>%s\DefaultIcon</pre><pre>%s\shell\printto\%s</pre><pre>%s\shell\print\%s</pre><pre>%s\shell\open\%s</pre><pre>ole32.dll</pre><pre>__MSVCRT_HEAP_SELECT</pre><pre>portuguese-brazilian</pre><pre>IMM32.dll</pre><pre>WS2_32.dll</pre><pre>MPR.dll</pre><pre>TIDYLIB.dll</pre><pre>Sftp_Abort</pre><pre>Sftp_SetAuthentication</pre><pre>Sftp_SetBlocking</pre><pre>Sftp_Create</pre><pre>Sftp_Destroy</pre><pre>Sftp_Disconnect</pre><pre>Sftp_GetState</pre><pre>Sftp_Connect</pre><pre>Sftp_LoadPrivateKey</pre><pre>Sftp_SetPort</pre><pre>Sftp_SetPassword</pre><pre>Sftp_SetLogin</pre><pre>Sftp_SetHostname</pre><pre>Sftp_SetCompression</pre><pre>Sftp_PutFile</pre><pre>Sftp_SetTransferMode</pre><pre>Sftp_GetListItem</pre><pre>Sftp_ListDir</pre><pre>Sftp_GetFile</pre><pre>Sftp_RealPath</pre><pre>Sftp_GetRemotePath</pre><pre>Sftp_SetRemotePath</pre><pre>Sftp_SetAttributes</pre><pre>Sftp_MakeDir</pre><pre>Sftp_Rename</pre><pre>Sftp_DeleteFile</pre><pre>Sftp_RemoveDir</pre><pre>Sftp_GetServerErrorText</pre><pre>Sftp_GetServerErrorCode</pre><pre>Sftp_GetErrorText</pre><pre>SftpDLL.dll</pre><pre>GetWindowsDirectoryA</pre><pre>WinExec</pre><pre>GetCPInfo</pre><pre>CreatePipe</pre><pre>KERNEL32.dll</pre><pre>GetKeyState</pre><pre>MapVirtualKeyA</pre><pre>GetKeyboardState</pre><pre>SetWindowsHookExA</pre><pre>UnhookWindowsHookEx</pre><pre>GetKeyboardLayout</pre><pre>GetAsyncKeyState</pre><pre>SetKeyboardState</pre><pre>CreateDialogIndirectParamA</pre><pre>USER32.dll</pre><pre>SetViewportOrgEx</pre><pre>OffsetViewportOrgEx</pre><pre>SetViewportExtEx</pre><pre>ScaleViewportExtEx</pre><pre>GetViewportExtEx</pre><pre>GetViewportOrgEx</pre><pre>GDI32.dll</pre><pre>comdlg32.dll</pre><pre>WINSPOOL.DRV</pre><pre>RegCloseKey</pre><pre>RegCreateKeyExA</pre><pre>RegOpenKeyExA</pre><pre>RegDeleteKeyA</pre><pre>RegEnumKeyExA</pre><pre>RegOpenKeyA</pre><pre>RegCreateKeyA</pre><pre>ADVAPI32.dll</pre><pre>ShellExecuteA</pre><pre>SHFileOperationA</pre><pre>ShellExecuteExA</pre><pre>SHELL32.dll</pre><pre>COMCTL32.dll</pre><pre>oledlg.dll</pre><pre>OLEPRO32.DLL</pre><pre>OLEAUT32.dll</pre><pre>RPCRT4.dll</pre><pre>SHDeleteKeyA</pre><pre>SHLWAPI.dll</pre><pre>HttpQueryInfoA</pre><pre>HttpSendRequestA</pre><pre>HttpOpenRequestA</pre><pre>WININET.dll</pre><pre>ueres.dll</pre><pre>Bitmap Files (*.bmp)|*.bmp|</pre><pre>Unnamed Toolbar No.%d</pre><pre>%s %s%s</pre><pre>W%c %d %s</pre><pre>FTP::</pre><pre>ID_ISENSE_KEYWORDLIST</pre><pre>ID_CVS_EXPORT</pre><pre>ID_CVS_IMPORT</pre><pre>ID_HTML_CMD28</pre><pre>ID_HTML_CMD27</pre><pre>ID_HTML_CMD26</pre><pre>ID_HTML_CMD25</pre><pre>ID_HTML_CMD24</pre><pre>ID_HTML_CMD23</pre><pre>ID_HTML_CMD22</pre><pre>ID_HTML_CMD21</pre><pre>ID_HTML_CMD20</pre><pre>ID_HTML_CMD19</pre><pre>ID_HTML_CMD18</pre><pre>ID_HTML_CMD17</pre><pre>ID_HTML_CMD16</pre><pre>ID_HTML_CMD15</pre><pre>ID_HTML_CMD14</pre><pre>ID_HTML_CMD13</pre><pre>ID_HTML_CMD12</pre><pre>ID_HTML_CMD11</pre><pre>ID_HTML_CMD10</pre><pre>ID_HTML_CMD09</pre><pre>ID_HTML_CMD08</pre><pre>ID_HTML_CMD07</pre><pre>ID_HTML_CMD06</pre><pre>ID_HTML_CMD05</pre><pre>ID_HTML_CMD04</pre><pre>ID_HTML_CMD03</pre><pre>ID_HTML_CMD02</pre><pre>ID_HTML_CMD01</pre><pre>ID_EDIT_HEXEBCDIC</pre><pre>ID_FIX_LEFTPANE</pre><pre>ID_FTP_OPEN</pre><pre>ID_FTP_SAVEAS</pre><pre>ID_KEYA</pre><pre>ID_KEYA_SHIFT</pre><pre>ID_KEYO</pre><pre>ID_KEYO_SHIFT</pre><pre>ID_KEYS</pre><pre>ID_KEYS_SHIFT</pre><pre>ID_KEYU</pre><pre>ID_KEYU_SHIFT</pre><pre>ID_RUNDOSCMD</pre><pre>ID_RUNDOSCMD1</pre><pre>ID_SYNC_WINDOWS</pre><pre>GNU\Aspell\bin\aspell-15.dll</pre><pre>*.tfg</pre><pre>*.mfg</pre><pre>%m.%d.%y</pre><pre>FTP::%s\</pre><pre>%m/%d/%y %H:%M</pre><pre>%s-SCBar-%d</pre><pre>%m/%d/%y, %H:%M</pre><pre>ExportedType</pre><pre>.4.4.4.t35</pre><pre>.2.2.2.2.4.#b.#s.#s.#b</pre><pre>.4.4.4</pre><pre>.4.2.2.2.2.4.#b.#s.#s</pre><pre>.4.2.2.#s.#b.t8</pre><pre>unknown error (%x)</pre><pre>file is not a NET executable !</pre><pre>file is not PE executable !</pre><pre>file is not executable !</pre><pre>#XXX</pre><pre>Image Files (*.gif;*.jpg;*.jpeg;*.bmp;*.png)|*.gif;*.jpg;*.jpeg;*.bmp;*.png||</pre><pre>http://www.w3.org/TR/REC-CSS2</pre><pre>HTML Tidy Config Files (*.txt;*.cfg;*.conf)|*.txt; *.cfg; *.conf||</pre><pre>*.dll</pre><pre>*.HLP; *.CHM</pre><pre>Please install latest version of Aspell for Windows</pre><pre>ignore-X-%s.csv</pre><pre>personal_ws-1.1 %s %d</pre><pre>Project contains one or more FTP files.</pre><pre>This version of Back Up doesn't support FTP files yet. Do you want to continue ?</pre><pre>CCfgKeyBd</pre><pre>Unknown Key</pre><pre>.PAVCFileException@@</pre><pre>Error writing keyboard file</pre><pre>Tool Cmd</pre><pre>*.BMP; *.ICO</pre><pre>GetCPInfoExA</pre><pre>kernel32.dll</pre><pre>BurlyWood</pre><pre>RGB(0x%X, 0x%X, 0x%X)</pre><pre>XXX</pre><pre>RGB(0xx,0xx,0xx)</pre><pre>%s%u%s</pre><pre>%s0xxxx%s</pre><pre>%s#%s%s</pre><pre>All Files (*.*)|*.*|</pre><pre>.vjsproj</pre><pre>.vcproj</pre><pre>.vbproj</pre><pre>.csproj</pre><pre>ues.id</pre><pre>\Microsoft .NET\</pre><pre>winexe</pre><pre>Windows Application</pre><pre>pass32</pre><pre>.\cset.paths</pre><pre>uedit32.ini</pre><pre>UEDIT32.mnu</pre><pre>UEDIT32.tbr</pre><pre>Please download the latest version from www.ultraedit.com</pre><pre>BetaKey</pre><pre>uedit32.reg</pre><pre>%u,%u,%d,%d,%d,%d,%d,%d,%d,%d</pre><pre>Recent Project %d</pre><pre>Compare EXE</pre><pre>Ctag EXE</pre><pre>#2$!*&%$#3(&</pre><pre>mailto:idm@idmcomp.com</pre><pre>http://www.idmcomp.com</pre><pre>http://www.ultraedit.com</pre><pre>WORDFILE.TXT</pre><pre>TAB Windows Font Height</pre><pre>TAB Windows Font</pre><pre>Extra Windows Font Height</pre><pre>Extra Windows Font</pre><pre>OLD FTP DIR</pre><pre>Skip FTP Connect Close</pre><pre>FindInFiles-Use Windows</pre><pre>-L %fi -f %fo</pre><pre>GNU\ctags.exe</pre><pre>tags.lst</pre><pre>Reload FTP Files</pre><pre>Use Windows Default Dir</pre><pre>NoAutoSaveFTPFiles</pre><pre>File%d</pre><pre>HexEdit</pre><pre>FTPRenameDelete</pre><pre>Cannot load resource dll: ueres.dll, quitting!</pre><pre>uninstal.exe</pre><pre>INSTALL.LOG</pre><pre>.PAVCException@@</pre><pre>sShortDate</pre><pre>ucl.exe</pre><pre>software\microsoft\windows\currentversion\app paths\uc.exe</pre><pre>uediff.exe</pre><pre>uedit32.exe</pre><pre>uedit32.exe "</pre><pre>*.prj</pre><pre>https:</pre><pre>http:</pre><pre>.java:</pre><pre>http://www.ultraedit.com/ue_register.html</pre><pre>%s\IDMComp\%s\%s</pre><pre>Basic.mfg</pre><pre>Basic.tfg</pre><pre>Advanced.tfg</pre><pre>Advanced.mfg</pre><pre>%s\%s\</pre><pre>"{" "(" "[" "<"</pre><pre>"{" "(" "["</pre><pre>"(" "[" "<"</pre><pre>"}" ")" "]" ">"</pre><pre>"}" ")" "]"</pre><pre>")" "]" ">"</pre><pre>"</" "/>"</pre><pre>STYLE_KEYWORD</pre><pre>STYLE_OPERATOR</pre><pre>!$*);^-/</pre><pre>0123456789</pre><pre>!"#$(* ,;01:3)4</pre><pre>]$*);^-/</pre><pre>Cannot create temp file for FTP Save</pre><pre>~atu.tmp</pre><pre>.html</pre><pre>~ue.html</pre><pre>ReportDouble</pre><pre>DOS Execute</pre><pre>Win Execute</pre><pre>MSWHEEL_ROLLMSG</pre><pre>{4e0be4eb-63dc-42a0-9a30-0cb1c39ff6b8}</pre><pre>{02062954-ddc8-424e-bf76-c97e844b1085}</pre><pre>\uedit32v11.cfg</pre><pre>IfFTP</pre><pre>*.TXT</pre><pre>HtmlCommandd</pre><pre>RichEd32.dll</pre><pre>Macro Auto Execute Error</pre><pre>*.EXE; *.COM; *.BAT</pre><pre>*.EXE</pre><pre>command.com</pre><pre>cmd.exe /c</pre><pre>\command.com /c</pre><pre>UEDOS32.EXE"</pre><pre>cmd /c</pre><pre>\command.com /E:2048 /c</pre><pre>%sel%</pre><pre>%col%</pre><pre>ftp:/</pre><pre>UETMPLTE.DAT</pre><pre>&%d %s</pre><pre>\Insert\*.ins</pre><pre>user32.dll</pre><pre>0xX 0xX</pre><pre>Error reading keyboard file</pre><pre>*.HTML;*.HTM;*.JAVA;*.JAV</pre><pre>*.H;*.HPP</pre><pre>*.C;*.CPP</pre><pre>*.INI</pre><pre>*.BAT</pre><pre>*.DOC</pre><pre>SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders</pre><pre>line %u column %u</pre><pre>%d/%m/%Y, %H:%M</pre><pre>%m/%d/%Y, %H:%M</pre><pre>Solution Files (*.prw)|*.prw||</pre><pre>Project Files (*.prj)|*.prj||</pre><pre>Bitmap Path%d</pre><pre>A severe error (%d) occured.</pre><pre>test.htm</pre><pre>IMPLEMENT_OLECREATE(@@CURSOR@@, , 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X);</pre><pre>DEFINE_GUID(@@CURSOR@@, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X);</pre><pre>static const GUID @@CURSOR@@ = { 0x%X, 0x%X, 0x%X, { 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X, 0x%X } };</pre><pre>AStyle [http://astyle.sf.net] ...</pre><pre>*.exe</pre><pre>Astyle (*.exe)|*.exe||</pre><pre>Astyle.exe</pre><pre>RichEd20.dll</pre><pre>MSH_SCROLL_LINES_MSG</pre><pre>Cannot allocate enough memory for operation!</pre><pre>0-9^-] </pre><pre>.,;:(){}<>'=</pre><pre>test.html</pre><pre>~ty.html</pre><pre>~ty.log</pre><pre>HTMLTIDY.DLL</pre><pre>csevalidator.dll</pre><pre>%%x</pre><pre><input type="password" /></pre><pre><font style="background-color: #xxx">|</font></pre><pre><font color="#xxx">|</font></pre><pre>%%X</pre><pre>document.write(unescape("</pre><pre>%%x</pre><pre>ShowCmd</pre><pre>www.serialz.to</pre><pre>9Down.COM</pre><pre>%A, %B %d, %Y</pre><pre>.java</pre><pre>\shell\print\ddeexec</pre><pre>\shell\open\ddeexec</pre><pre>NOTEPAD.EXE /P "%1"</pre><pre>NOTEPAD.EXE "%1"</pre><pre>ULTRAEDT.EXE</pre><pre>UEDIT32.EXE</pre><pre>FTP Accounts</pre><pre>Password</pre><pre>Password1</pre><pre>Save Password</pre><pre>Proxy Port</pre><pre>Cache Password</pre><pre>Passive Mode</pre><pre>Secure FTP</pre><pre>Key Path</pre><pre>Key Password Req</pre><pre>my key</pre><pre>FTP Account -</pre><pre>!@~_)* {}:</pre><pre>Long Name Support</pre><pre>Send After Login</pre><pre>Auto Browse FTP</pre><pre>FTP Connect On Change</pre><pre>SFTP Compression</pre><pre>FTP Debug</pre><pre>%s/%s,%s.%s</pre><pre>FTP Dialog</pre><pre>/qsys.lib/</pre><pre>/QSYS.LIB/</pre><pre>www.ultraedit.com</pre><pre>{lX-X-x-XX-XXXXXX}</pre><pre>UXTHEME.DLL</pre><pre>default.ini</pre><pre>*.MAC</pre><pre>Select .NET executable ...</pre><pre>.NET Executables (*.exe)|*.exe||</pre><pre>Please select first .NET executable file you want to protect !</pre><pre>%s: [%s] ok.</pre><pre>error: %s</pre><pre>file: %s</pre><pre>http://download8.htmlvalidator.com/idm/csesetup.exe</pre><pre>http://download8.htmlvalidator.com/idm/cselite.exe</pre><pre>%d=%s</pre><pre>projects.lst</pre><pre>Files - %s</pre><pre>%d Seconds,</pre><pre>%d Minutes,</pre><pre>%d Hours,</pre><pre>%d Days,</pre><pre>line %d of</pre><pre>warning %d in line %d of</pre><pre>error %d in line %d of</pre><pre>Pass32 Assembler</pre><pre>\winhlp32.exe</pre><pre>Language %d</pre><pre>TAGLIST.TXT</pre><pre>(Full keying)</pre><pre>9ACCT %s</pre><pre>PASS %s</pre><pre>USER %s</pre><pre>RETR %s</pre><pre>PORT %s,%d,%d</pre><pre>STOR %s</pre><pre>DELE %s</pre><pre>RNTO %s</pre><pre>RNFR %s</pre><pre>CWD %s</pre><pre>MKD %s</pre><pre>RMD %s</pre><pre>SITE chmod %d %s</pre><pre>[password not displayed]</pre><pre>tmp%d.tmp</pre><pre>a|name|href=$i|hreflang|type|rel=nofollow|rev|charset|id|class|lang|dir=ltr,rtl|title|style|shape|onfocus=$f|onblur=$f|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|target=_blank,_parent,_search,_self,_top|tabindex|accesskey|</pre><pre>abbr|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>acronym|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>address|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>area|shape|coords|nohref|usemap=$i|id|class|lang|dir=ltr,rtl|title|style|alt|href=$i|target=_blank,_parent,_self,_top|tabindex|accesskey|shape|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|onfocus=$f|onblur=$f|</pre><pre>b|id|class|lang|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>bdo|dir=ltr,rtl|lang|accesskey|class|id|language|tabindex|title|onclick=$f|onhelp=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>big|id|class|lang|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>blockquote|cite=$i|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>body|background=$i|text=$c|link=$c|vlink=$c|alink=$c|id|class|lang|dir=ltr,rtl|title|target=_blank,_parent,_self,_top|style|bgcolor=$c|onload=$f|onunload=$f|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>button|name|value|type=button,submit,reset|id|lang|dir=ltr,rtl|title|style|disabled|accesskey|tabindex|onfocus=$f|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>caption|align=top,bottom,left,right|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>center|clear|id|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>cite|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>code|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>col|span|width|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|align=left,center,right,justify,char|char|charoff|valign=top,middle,bottom,baseline|</pre><pre>colgroup|span|width|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|align=left,center,right,justify,char|char|charoff|valign=top,middle,bottom,baseline|</pre><pre>dd|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>del|cite=$i|datetime|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>dfn|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>dir|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>div|id|class|lang|dir=ltr,rtl|title|style|align=left,center,right,justify|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>dl|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>dt|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>em|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>fieldset|align=top,bottom,left,right|id|lang|dir=ltr,rtl|title|style|accesskey|onclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>form|action=$i|method=GET,POST|enctype|accept-charset|accept|name|id|lang|dir=ltr,rtl|style|title|target=_blank,_parent,_self,_top|onsubmit=$f|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>h1|id|class|lang|dir=ltr,rtl|title|style|align=left,center,right,justify|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>h2|id|class|lang|dir=ltr,rtl|title|style|align=left,center,right,justify|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>h3|id|class|lang|dir=ltr,rtl|title|style|align=left,center,right,justify|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>h4|id|class|lang|dir=ltr,rtl|title|style|align=left,center,right,justify|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>h5|id|class|lang|dir=ltr,rtl|title|style|align=left,center,right,justify|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>h6|id|class|lang|dir=ltr,rtl|title|style|align=left,center,right,justify|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>hr|align=left,center,right|noshade|size|width|id|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>i|id|class|lang|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>img|src=$i|align=top,middle,bottom,left,right|longdesc|name|id|class|alt|lang|width|height|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|ismap|hspace|vspace|</pre><pre>input|type=button,checkbox,file,hidden,image,password,radio,reset,submit,text|autocomplete=off,on|name|value|size|class|maxlength|checked|src=$i|id|lang|dir=ltr,rtl|title|style|alt|align=top,middle,bottom,left,right|accept|readonly|disabled|tabindex|accesskey|usemap=$i|ismap|onfocus=$f|onselect=$f|onchange=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|</pre><pre>ins|cite=$i|datetime|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>kbd|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>label|for|id|lang|dir=ltr,rtl|title|style|accesskey|onfocus=$f|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>legend|class|align=top,bottom,left,right|id|lang|dir=ltr,rtl|title|style|accesskey|onclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>li|type|start|value|compact|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>link|id|class|lang|dir|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|href=$i|hreflang|type=text/css,text/javascript|rel|rev|target=_blank,_parent,_self,_top|media|charset|</pre><pre>map|name|id|class|lang|dir=ltr,rtl|title|style|alt|href=$i|target|tabindex|accesskey|shape|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|onfocus=$f|onblur=$f|</pre><pre>menu|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>meta|name|content|scheme|http-equiv|lang|charset|url|</pre><pre>noframes|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>object|align=top,middle,bottom,left,right|classid=$i|codebase=$i|codetype|data=$i|type|archive|declare|standby|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|tabindex|usemap=$i|hspace|vspace|</pre><pre>ol|type|start|value|compact|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>optgroup|name|size|multiple|disabled|tabindex|onfocus=$f|onblur=$f|onchange=$f|id|lang|dir=ltr,rtl|title|style|disabled|tabindex|onclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>option|name|size|multiple|disabled|tabindex|onfocus=$f|onblur=$f|onchange=$f|id|lang|dir=ltr,rtl|title|style|onclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>p|id|class|lang|dir=ltr,rtl|title|style|align=left,center,right,justify|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>pre|width|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>q|cite=$i|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>s|id|class|lang|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>samp|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>select|name|size|multiple|disabled|tabindex|onfocus=$f|onblur=$f|onchange=$f|id|lang|dir=ltr,rtl|title|style|tabindex|onclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>small|id|class|lang|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>span|id|class|lang|dir=ltr,rtl|title|style|align|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>strike|id|class|lang|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>strong|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>sub|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>sup|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>table|border|summary|align=left,center,right|width|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|bgcolor=$c|frame|cellspacing|cellpadding|</pre><pre>tbody|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|align=left,center,right,justify,char|char|charoff|valign=top,middle,bottom,baseline|</pre><pre>td|headers|scope|abbr|axis|rowspan|colspan|nowrap|width|height|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|bgcolor=$c|align=left,center,right,justify,char|char|charoff|valign=top,middle,bottom,baseline|</pre><pre>textarea|name|rows|cols|class|id|lang|dir=ltr,rtl|title|style|readonly|disabled|tabindex|onfocus=$f|onselect=$f|onchange=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|</pre><pre>tfoot|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|align=left,center,right,justify,char|char|charoff|valign=top,middle,bottom,baseline|</pre><pre>th|headers|scope|abbr|axis|rowspan|colspan|nowrap|width|height|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|bgcolor=$c|char|charoff|valign=top,middle,bottom,baseline|</pre><pre>thead|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|align=left,center,right,justify,char|char|charoff|valign=top,middle,bottom,baseline|</pre><pre>tr|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|bgcolor=$c|align=left,center,right,justify,char|char|charoff|valign=top,middle,bottom,baseline|</pre><pre>tt|id|class|lang|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>u|id|class|lang|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>ul|type|start|value|compact|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f|</pre><pre>var|id|class|lang|dir=ltr,rtl|title|style|onclick=$f|ondblclick=$f|onmousedown=$f|onmouseup=$f|onmouseover=$f|onmousemove=$f|onmouseout=$f|onkeypress=$f|onkeydown=$f|onkeyup=$f||||</pre><pre>AdminExecuteSequence|</pre><pre>AdvtExecuteSequence|</pre><pre>Certificate|Id|BinaryKey|CertificatePath|Overwrite=yes,no|PFXPassword|Request=yes,no|StoreLocation=currentUser,localMachine|StoreName=ca,my,request,root|</pre><pre>Column|Id|Localizable=yes,no|Nullable=yes,no|PrimaryKey=yes,no|Type=binary,int,string|Width=$i|</pre><pre>Component|Id|ComPlusFlags=$i|DiskId|Guid=$u|KeyPath=yes,no|Location=local,source,either|NeverOverwrite=yes,no|Permanent=yes,no|SharedDllRefCount=yes,no|Transitive=yes,no|Win64=yes,no|</pre><pre>Control|Id|Bitmap=yes,no|Cancel=yes,no|CDROM=yes,no|CheckBoxValue|ComboList=yes,no|Default=yes,no|Disabled=yes,no|First=yes,no|Fixed=yes,no|FixedSize=yes,no|Floppy=yes,no|FormatSize=yes,no|HasBorder=yes,no|Height=$i|Help|Hidden=yes,no|Icon=yes,no|IconSize=16,32,48|Image=yes,no|Indirect=yes,no|Integer=yes,no|LeftScroll=yes,no|Multiline=yes,no|NoPrefix=yes,no|NoWrap=yes,no|Password=yes,no|ProgressBlocks=yes,no|Property|PushLike=yes,no|RAMDisk=yes,no|Remote=yes,no|Removable=yes,no|RightAligned=yes,no|RightToLeft=yes,no|ShowRollbackCost=yes,no|Sorted=yes,no|Sunken=yes,no|TabSkip=yes,no|Text|ToolTip|Transparent=yes,no|Type|UserLanguage=yes,no|Width=$i|X=$i|Y=$i|</pre><pre>CustomAction|BinaryKey|Directory|DllEntry|Error|ExeCommand|Execute=immediate,deferred,rollback,commit,oncePerProcess,firstSequence,secondSequence|FileKey|HideTarget=yes,no|Id|Impersonate=yes,no|InstallProperties|JScriptCall|PackagePath|PackageProductCode=$u|PackageSubstorage|Property|Return=check,ignore,asyncWait,asyncNoWait|TSAware=yes,no|Value|VBScriptCall|</pre><pre>DigitalCertificate|Name|src|</pre><pre>File|Id|Assembly=no,win32,.net|AssemblyApplication|AssemblyManifest|AssemblyRegisterComInterop=yes,no|BindPath|Checksum=yes,no|CompanionFile|Compressed=default,yes,no|DiskId|FontTitle|Hidden=yes,no|KeyPath=yes,no|LongName=$L|Name=$S|PatchAdded=yes,no|ProcessorArchitecture=neutral,x86|ReadOnly=yes,no|SelfRegCost=$i|src|System=yes,no|TrueType=yes,no|Vital=yes,no|</pre><pre>IniFile|Id|Action=addLine,createLine,addTag,removeLine,removeTag|Directory|Key|Name|Section|Value|</pre><pre>IniFileSearch|Id|Field=$i|File|Key|Section|Type=directory,file,registry|</pre><pre>InstallExecute|After|Before|Sequence=$i|</pre><pre>InstallExecuteAgain|After|Before|Sequence=$i|</pre><pre>InstallExecuteSequence|</pre><pre>ODBCDataSource|Id|DriverName|KeyPath=yes,no|Name|Registration=machine,user|</pre><pre>Package|AdminImage=yes,no|Comments|Compressed=yes,no|Description|Id=$u|InstallerVersion=$i|Keywords|Languages|Manufacturer|Platforms|ShortNames=yes,no|SummaryCodepage=$i|</pre><pre>Permission|Append=yes,no|ChangePermission=yes,no|CreateChild=yes,no|CreateFile=yes,no|CreateLink=yes,no|CreateSubkeys=yes,no|Delete=yes,no|DeleteChild=yes,no|Domain|EnumerateSubkeys=yes,no|Execute=yes,no|GenericAll=yes,no|GenericExecute=yes,no|GenericRead=yes,no|GenericWrite=yes,no|Notify=yes,no|Read=yes,no|ReadAttributes=yes,no|ReadExtendedAttributes=yes,no|ReadPermission=yes,no|Synchronize=yes,no|TakeOwnership=yes,no|Traverse=yes,no|User|Write=yes,no|WriteAttributes=yes,no|WriteExtendedAttributes=yes,no|</pre><pre>Registry|Id|Action=write,append,prepend,remove,removeKey|Key|KeyPath=yes,no|Name|Root=HKMU,HKCR,HKCU,HKLM,HKU|Type=string,integer,binary,expandable,multiString|Value|</pre><pre>RegistrySearch|Id|Key|Name|Root=HKCR,HKCU,HKLM,HKU|Type=directory,file,registry|Win64=yes,no|</pre><pre>ServiceInstall|Id|Account|Arguments|Description|DisplayName|EraseDescription=yes,no|ErrorControl=ignore,normal,critical|Interactive=yes,no|LocalGroup|Name|Password|Start=auto,demand,disabled,boot,system|Type=ownProcess,shareProcess,kernelDriver,systemDriver|Vital=yes,no|</pre><pre>Shortcut|Id|Advertise=yes,no|Arguments|Description|Directory|Hotkey=$i|Icon|IconIndex=$i|LongName=$L|Name=$S|Show=normal,minimized,maximized|Target|WorkingDirectory|</pre><pre>SqlDatabase|Id|ConfirmOverwrite=yes,no|ContinueOnError=yes,no|CreateOnInstall=yes,no|CreateOnUninstall=yes,no|Database|DropOnInstall=yes,no|DropOnUninstall=yes,no|Instance|Server|User|</pre><pre>SqlScript|Id|BinaryKey|ContinueOnError=yes,no|ExecuteOnInstall=yes,no|ExecuteOnUninstall=yes,no|RollbackOnInstall=yes,no|RollbackOnUninstall=yes,no|Sequence=$i|SqlDb|User|</pre><pre>SqlString|Id|ContinueOnError=yes,no|ExecuteOnInstall=yes,no|ExecuteOnUninstall=yes,no|RollbackOnInstall=yes,no|RollbackOnUninstall=yes,no|Sequence=$i|SQL|SqlDb|User|</pre><pre>User|Id|CanNotChangePassword=yes,no|CreateUser=yes,no|Disabled=yes,no|Domain|FailIfExists=yes,no|Name|Password|PasswordExpired=yes,no|PasswordNeverExpires=yes,no|RemoveOnUninstall=yes,no|UpdateIfExists=yes,no|</pre><pre>WebAddress|Id|Header|IP|KeyPath=yes,no|Port|Secure=yes,no|</pre><pre>WebApplication|Id|AllowSessions=default,yes,no|Buffer=default,yes,no|ClientDebugging=default,yes,no|DefaultScript=VBScript,JScript|Isolation=low,medium,high|Name|ParentPaths=default,yes,no|ScriptTimeout=$i|ServerDebugging=default,yes,no|SessionTimeout=$i|WebAppPool|</pre><pre>WebApplicationExtension|Id|CheckPath=yes,no|Executable|Script=yes,no|Verbs|</pre><pre>WebAppPool|Id|CpuAction=none,shutdown|Identity=networkService,localService,localSystem,other|IdleTimeout=$i|MaxCpuUsage|MaxWorkerProcesses=$i|QueueLimit=$i|RecycleMinutes=$i|RecycleRequests=$i|RefreshCpu=$i|User|</pre><pre>WebDir|Id|DirProperties|Path|WebApplication|WebSite|</pre><pre>WebDirProperties|Id|AnonymousAccess=yes,no|AnonymousUser|AspDetailedError=yes,no|BasicAuthentication=yes,no|CacheControlCustom|CacheControlMaxAge=$i|DefaultDocuments|DigestAuthentication=yes,no|Execute=yes,no|HttpExpires|IIsControlledPassword=yes,no|Index=yes,no|LogVisits=yes,no|Read=yes,no|Script=yes,no|WindowsAuthentication=yes,no|Write=yes,no|</pre><pre>WebError|ErrorCode=$i|Path|SubCode=$i|Type=default,file,url|</pre><pre>WebFilter|Id|Description|Flags=$i|LoadOrder|Path|WebSite|</pre><pre>WebProperty|Id=IIs5IsolationMode,MaxGlobalBandwidth,LogInUTF8|Value|</pre><pre>WebServiceExtension|Id|Allow=yes,no|Description|File|Group|UIDeletable=yes,no|</pre><pre>WebSite|Id|AutoStart=yes,no|ConfigureIfExists=yes,no|Description|Directory|DirProperties|Sequence=$i|StartOnInstall=yes,no|WebApplication|</pre><pre>WebVirtualDir|Id|Alias|Directory|DirProperties|WebApplication|WebSite|</pre><pre>aclui.dll</pre><pre>activeds.dll</pre><pre>advapi32.dll</pre><pre>GetEventLogInformation@20</pre><pre>ReportEventW@36</pre><pre>ReportEventA@36</pre><pre>ImpersonateNamedPipeClient@4</pre><pre>GetWindowsAccountDomainSid@12</pre><pre>MSChapSrvChangePassword@28</pre><pre>MSChapSrvChangePassword2@28</pre><pre>ElfReportEventW@48</pre><pre>ElfReportEventA@48</pre><pre>GetServiceKeyNameA@16</pre><pre>GetServiceKeyNameW@16</pre><pre>RegDeleteKeyA@8</pre><pre>RegDeleteKeyW@8</pre><pre>RegEnumKeyA@16</pre><pre>RegEnumKeyW@16</pre><pre>RegEnumKeyExA@32</pre><pre>RegEnumKeyExW@32</pre><pre>RegCreateKeyA@12</pre><pre>RegCreateKeyW@12</pre><pre>RegCreateKeyExA@36</pre><pre>RegCreateKeyExW@36</pre><pre>RegOverridePredefKey@8</pre><pre>RegCloseKey@4</pre><pre>RegFlushKey@4</pre><pre>RegOpenKeyA@12</pre><pre>RegOpenKeyW@12</pre><pre>RegOpenKeyExA@20</pre><pre>RegOpenKeyExW@20</pre><pre>RegNotifyChangeKeyValue@20</pre><pre>RegQueryInfoKeyA@48</pre><pre>RegQueryInfoKeyW@48</pre><pre>RegGetKeySecurity@16</pre><pre>RegSetKeySecurity@12</pre><pre>RegSaveKeyA@12</pre><pre>RegSaveKeyW@12</pre><pre>RegSaveKeyExA@16</pre><pre>RegSaveKeyExW@16</pre><pre>RegRestoreKeyA@12</pre><pre>RegRestoreKeyW@12</pre><pre>RegLoadKeyA@12</pre><pre>RegLoadKeyW@12</pre><pre>RegUnLoadKeyA@8</pre><pre>RegUnLoadKeyW@8</pre><pre>RegReplaceKeyA@16</pre><pre>RegReplaceKeyW@16</pre><pre>CryptGenKey@16</pre><pre>CryptDeriveKey@20</pre><pre>CryptDestroyKey@4</pre><pre>CryptSetKeyParam@16</pre><pre>CryptGetKeyParam@20</pre><pre>CryptExportKey@24</pre><pre>CryptImportKey@24</pre><pre>CryptHashSessionKey@12</pre><pre>CryptGetUserKey@12</pre><pre>CryptDuplicateKey@16</pre><pre>GetMultipleTrusteeOperationW@4</pre><pre>GetMultipleTrusteeOperationA@4</pre><pre>SetUserFileEncryptionKey@4</pre><pre>FreeEncryptionCertificateHashList@4</pre><pre>EncryptedFileKeyInfo@12</pre><pre>FreeEncryptedFileKeyInfo@4</pre><pre>authz.dll</pre><pre>bdnapi.dll</pre><pre>bignums.dll</pre><pre>cap.dll</pre><pre>comctl32.dll</pre><pre>crtdll.dll</pre><pre>acmdln_dll</pre><pre>amsg_exit</pre><pre>pipe</pre><pre>crypt32.dll</pre><pre>CertAddCRLContextToStore@16</pre><pre>CertAddCTLContextToStore@16</pre><pre>CertAddCertificateContextToStore@16</pre><pre>CertAddEncodedCRLToStore@24</pre><pre>CertAddEncodedCTLToStore@24</pre><pre>CertAddEncodedCertificateToStore@24</pre><pre>CertAddEncodedCertificateToSystemStoreA@12</pre><pre>CertAddEncodedCertificateToSystemStoreW@12</pre><pre>CertAddEnhancedKeyUsageIdentifier@8</pre><pre>CertAddSerializedElementToStore@32</pre><pre>CertAlgIdToOID@4</pre><pre>CertCloseStore@8</pre><pre>CertCompareCertificate@12</pre><pre>CertCompareCertificateName@12</pre><pre>CertCompareIntegerBlob@8</pre><pre>CertComparePublicKeyInfo@12</pre><pre>CertCreateCRLContext@12</pre><pre>CertCreateCTLContext@12</pre><pre>CertCreateCertificateContext@12</pre><pre>CertDeleteCRLFromStore@4</pre><pre>CertDeleteCTLFromStore@4</pre><pre>CertDeleteCertificateFromStore@4</pre><pre>CertDuplicateCRLContext@4</pre><pre>CertDuplicateCTLContext@4</pre><pre>CertDuplicateCertificateContext@4</pre><pre>CertDuplicateStore@4</pre><pre>CertEnumCRLContextProperties@8</pre><pre>CertEnumCTLContextProperties@8</pre><pre>CertEnumCTLsInStore@8</pre><pre>CertEnumCertificateContextProperties@8</pre><pre>CertEnumCertificatesInStore@8</pre><pre>CertFindAttribute@12</pre><pre>CertFindCTLInStore@24</pre><pre>CertFindCertificateInStore@24</pre><pre>CertFindExtension@12</pre><pre>CertFindRDNAttr@8</pre><pre>CertFindSubjectInCTL@20</pre><pre>CertFreeCRLContext@4</pre><pre>CertFreeCTLContext@4</pre><pre>CertFreeCertificateContext@4</pre><pre>CertGetCRLContextProperty@16</pre><pre>CertGetCRLFromStore@16</pre><pre>CertGetCTLContextProperty@16</pre><pre>CertGetCertificateContextProperty@16</pre><pre>CertGetEnhancedKeyUsage@16</pre><pre>CertGetIntendedKeyUsage@16</pre><pre>CertGetIssuerCertificateFromStore@16</pre><pre>CertGetSubjectCertificateFromStore@12</pre><pre>CertIsRDNAttrsInCertificateName@16</pre><pre>CertNameToStrA@20</pre><pre>CertNameToStrW@20</pre><pre>CertOIDToAlgId@4</pre><pre>CertOpenStore@20</pre><pre>CertOpenSystemStoreA@8</pre><pre>CertOpenSystemStoreW@8</pre><pre>CertRDNValueToStrA@16</pre><pre>CertRDNValueToStrW@16</pre><pre>CertRemoveEnhancedKeyUsageIdentifier@8</pre><pre>CertSaveStore@24</pre><pre>CertSerializeCRLStoreElement@16</pre><pre>CertSerializeCTLStoreElement@16</pre><pre>CertSerializeCertificateStoreElement@16</pre><pre>CertSetCRLContextProperty@16</pre><pre>CertSetCTLContextProperty@16</pre><pre>CertSetCertificateContextProperty@16</pre><pre>CertSetEnhancedKeyUsage@8</pre><pre>CertStrToNameA@28</pre><pre>CertStrToNameW@28</pre><pre>CertVerifyCRLRevocation@16</pre><pre>CertVerifyCRLTimeValidity@8</pre><pre>CertVerifyCTLUsage@28</pre><pre>CertVerifyRevocation@28</pre><pre>CertVerifySubjectCertificateContext@12</pre><pre>CertVerifyTimeValidity@8</pre><pre>CertVerifyValidityNesting@8</pre><pre>CryptExportPublicKeyInfo@20</pre><pre>CryptExportPublicKeyInfoEx@32</pre><pre>CryptGetMessageCertificates@20</pre><pre>CryptHashCertificate@28</pre><pre>CryptHashPublicKeyInfo@28</pre><pre>CryptImportPublicKeyInfo@16</pre><pre>CryptImportPublicKeyInfoEx@28</pre><pre>CryptMsgCalculateEncodedLength@24</pre><pre>CryptMsgClose@4</pre><pre>CryptMsgControl@16</pre><pre>CryptMsgCountersign@16</pre><pre>CryptMsgCountersignEncoded@28</pre><pre>CryptMsgEncodeAndSignCTL@24</pre><pre>CryptMsgGetAndVerifySigner@24</pre><pre>CryptMsgGetParam@20</pre><pre>CryptMsgOpenToDecode@24</pre><pre>CryptMsgOpenToEncode@24</pre><pre>CryptMsgSignCTL@28</pre><pre>CryptMsgUpdate@16</pre><pre>CryptMsgVerifyCountersignatureEncoded@28</pre><pre>CryptSignAndEncodeCertificate@36</pre><pre>CryptSignCertificate@36</pre><pre>CryptSignMessageWithKey@20</pre><pre>CryptVerifyCertificateSignature@20</pre><pre>CryptVerifyMessageSignatureWithKey@24</pre><pre>RegCreateKeyExU@36</pre><pre>RegQueryInfoKeyU@48</pre><pre>cryptnet.dll</pre><pre>CryptRetrieveObjectByUrlA@36</pre><pre>CryptRetrieveObjectByUrlW@36</pre><pre>CryptGetObjectUrl@32</pre><pre>cryptui.dll</pre><pre>CryptUIDlgViewCertificateW@8</pre><pre>CryptUIDlgViewCertificateA@8</pre><pre>CryptUIDlgViewCertificatePropertiesW@8</pre><pre>CryptUIDlgViewCertificatePropertiesA@8</pre><pre>CryptUIGetCertificatePropertiesPagesW@16</pre><pre>CryptUIGetCertificatePropertiesPagesA@16</pre><pre>CryptUIFreeCertificatePropertiesPagesW@8</pre><pre>CryptUIFreeCertificatePropertiesPagesA@8</pre><pre>CryptUIDlgSelectCertificateW@4</pre><pre>CryptUIDlgSelectCertificateA@4</pre><pre>CryptUIDlgCertMgr@4</pre><pre>CryptUIStartCertMgr@16</pre><pre>CryptUIWizCertRequest@24</pre><pre>CryptUIWizImport@20</pre><pre>CryptUIWizExport@20</pre><pre>CryptUIWizCreateCertRequestNoDS@16</pre><pre>CryptUIWizSubmitCertRequestNoDS@24</pre><pre>CryptUIWizFreeCertRequestNoDS@4</pre><pre>CryptUIWizQueryCertRequestNoDS@8</pre><pre>CryptUIDlgSelectCertificateFromStore@28</pre><pre>ctl3d32.dll</pre><pre>d3d8.dll</pre><pre>d3dim.dll</pre><pre>d3drm.dll</pre><pre>d3dx8d.dll</pre><pre>d3dxof.dll</pre><pre>dapi.dll</pre><pre>BatchExportA@4</pre><pre>BatchExportW@4</pre><pre>BatchImportA@4</pre><pre>BatchImportW@4</pre><pre>NTExportA@4</pre><pre>NTExportW@4</pre><pre>NWExportA@4</pre><pre>NWExportW@4</pre><pre>dbghelp.dll</pre><pre>IMPORT_DESCRIPTOR_dbghelp</pre><pre>FindExecutableImage@12</pre><pre>FindExecutableImageEx@20</pre><pre>ddraw.dll</pre><pre>dflayout.dll</pre><pre>dinput.dll</pre><pre>dinput8.dll</pre><pre>c_dfDIKeyboard</pre><pre>dlcapi.dll</pre><pre>dplay.dll</pre><pre>dplayx.dll</pre><pre>dpvoice.dll</pre><pre>dsetup.dll</pre><pre>dsound.dll</pre><pre>dsuiext.dll</pre><pre>FormatMsgResource</pre><pre>FormatMsgBox</pre><pre>dxerr.dll</pre><pre>dynloader.dll</pre><pre>edbbcli.dll</pre><pre>gc.dll</pre><pre>gdi32.dll</pre><pre>GetViewportExtEx@8</pre><pre>GetViewportOrgEx@8</pre><pre>OffsetViewportOrgEx@16</pre><pre>ScaleViewportExtEx@24</pre><pre>SetViewportExtEx@16</pre><pre>SetViewportOrgEx@16</pre><pre>UpdateICMRegKeyA@16</pre><pre>UpdateICMRegKeyW@16</pre><pre>gdiplus.dll</pre><pre>GdiplusShutdown@4</pre><pre>GdipSetStringFormatHotkeyPrefix@8</pre><pre>GdipSetPenLineJoin@8</pre><pre>GdipSetImageAttributesColorKeys@20</pre><pre>GdipSetCustomLineCapStrokeJoin@8</pre><pre>GdipGetStringFormatHotkeyPrefix@8</pre><pre>GdipGetPenLineJoin@8</pre><pre>GdipGetCustomLineCapStrokeJoin@8</pre><pre>glide2x.dll</pre><pre>grChromakeyMode@4</pre><pre>grChromakeyValue@4</pre><pre>grSstConfigPipeline@12</pre><pre>glu32.dll</pre><pre>glutExtensionSupported@4</pre><pre>glutInitWindowSize@8</pre><pre>glutKeyboardFunc@4</pre><pre>glutPassiveMotionFunc@4</pre><pre>glutReportErrors@0</pre><pre>glutWindowStatusFunc@4</pre><pre>hlink.dll</pre><pre>HlinkIsShortcut@4</pre><pre>HlinkTranslateURL@12</pre><pre>httpapi.dll</pre><pre>HttpAddUrl@12</pre><pre>HttpRemoveUrl@8</pre><pre>HttpCreateHttpHandle@8</pre><pre>HttpReceiveHttpRequest@32</pre><pre>HttpReceiveRequestEntityBody@32</pre><pre>HttpSendHttpResponse@44</pre><pre>HttpSendResponseEntityBody@44</pre><pre>HttpWaitForDisconnect@16</pre><pre>HttpInitializeServerContext@28</pre><pre>HttpSendHttpRequest@48</pre><pre>HttpSendRequestEntityBody@28</pre><pre>HttpReceiveHttpResponse@40</pre><pre>HttpSetServerContextInformation@20</pre><pre>HttpQueryServerContextInformation@32</pre><pre>HttpCancelHttpRequest@20</pre><pre>HttpInitialize@12</pre><pre>HttpTerminate@8</pre><pre>HttpOpenControlChannel@8</pre><pre>HttpQueryControlChannelInformation@20</pre><pre>HttpSetControlChannelInformation@16</pre><pre>HttpCreateConfigGroup@8</pre><pre>HttpDeleteConfigGroup@12</pre><pre>HttpAddUrlToConfigGroup@24</pre><pre>HttpRemoveUrlFromConfigGroup@16</pre><pre>HttpQueryConfigGroupInformation@28</pre><pre>HttpSetConfigGroupInformation@24</pre><pre>HttpCreateFilter@16</pre><pre>HttpOpenFilter@12</pre><pre>HttpShutdownFilter@4</pre><pre>HttpFilterAccept@20</pre><pre>HttpFilterClose@16</pre><pre>HttpFilterRawRead@28</pre><pre>HttpFilterAppWriteAndRawRead@12</pre><pre>HttpFilterRawWrite@28</pre><pre>HttpFilterAppRead@28</pre><pre>HttpFilterRawWriteAndAppRead@12</pre><pre>HttpFilterAppWrite@28</pre><pre>HttpCreateAppPool@16</pre><pre>HttpOpenAppPool@12</pre><pre>HttpShutdownAppPool@4</pre><pre>HttpQueryAppPoolInformation@20</pre><pre>HttpSetAppPoolInformation@16</pre><pre>HttpFlushResponseCache@16</pre><pre>HttpWaitForDemandStart@20</pre><pre>HttpRemoveAllUrlsFromConfigGroup@12</pre><pre>HttpReceiveClientCertificate@32</pre><pre>HttpGetCounters@20</pre><pre>HttpAddFragmentToCache@20</pre><pre>HttpReadFragmentFromCache@28</pre><pre>HttpQueryServiceConfiguration@32</pre><pre>HttpSetServiceConfiguration@20</pre><pre>HttpDeleteServiceConfiguration@20</pre><pre>icm32.dll</pre><pre>CMDeleteTransform@4</pre><pre>icmp.dll</pre><pre>icmui.dll</pre><pre>imagehlp.dll</pre><pre>ImageAddCertificate@12</pre><pre>ImageEnumerateCertificates@20</pre><pre>ImageGetCertificateData@16</pre><pre>ImageGetCertificateHeader@12</pre><pre>ImageRemoveCertificate@8</pre><pre>imm32.dll</pre><pre>ImmGetHotKey@16</pre><pre>ImmSetHotKey@16</pre><pre>ImmSimulateHotKey@8</pre><pre>ImmGetVirtualKey@4</pre><pre>ImmCreateSoftKeyboard@16</pre><pre>ImmDestroySoftKeyboard@4</pre><pre>ImmShowSoftKeyboard@8</pre><pre>iphlpapi.dll</pre><pre>GetTcpTable@12</pre><pre>GetUdpTable@12</pre><pre>GetTcpStatistics@4</pre><pre>GetUdpStatistics@4</pre><pre>SetTcpEntry@4</pre><pre>InternalGetTcpTable@12</pre><pre>InternalGetUdpTable@12</pre><pre>InternalSetTcpEntry@4</pre><pre>AllocateAndGetTcpTableFromStack@16</pre><pre>AllocateAndGetUdpTableFromStack@16</pre><pre>GetTcpTableFromStack@12</pre><pre>SetTcpEntryToStack@4</pre><pre>GetUdpTableFromStack@12</pre><pre>GetUdpStatsFromStack@4</pre><pre>GetTcpStatsFromStack@4</pre><pre>iprop.dll</pre><pre>irprops.dll</pre><pre>CallNamedPipeA@28</pre><pre>CallNamedPipeW@28</pre><pre>ConnectNamedPipe@8</pre><pre>CreateIoCompletionPort@16</pre><pre>CreateNamedPipeA@32</pre><pre>CreateNamedPipeW@32</pre><pre>CreatePipe@16</pre><pre>DisconnectNamedPipe@4</pre><pre>GetCPInfo@8</pre><pre>GetCPInfoExA@12</pre><pre>GetCPInfoExW@12</pre><pre>GetConsoleOutputCP@0</pre><pre>GetLargestConsoleWindowSize@4</pre><pre>GetNamedPipeHandleStateA@28</pre><pre>GetNamedPipeHandleStateW@28</pre><pre>GetNamedPipeInfo@20</pre><pre>GetProcessHeap@0</pre><pre>GetProcessHeaps@8</pre><pre>GetProcessShutdownParameters@8</pre><pre>GetSystemWindowsDirectoryA@8</pre><pre>GetSystemWindowsDirectoryW@8</pre><pre>GetWindowsDirectoryA@8</pre><pre>GetWindowsDirectoryW@8</pre><pre>PeekNamedPipe@24</pre><pre>SetConsoleOutputCP@4</pre><pre>SetNamedPipeHandleState@16</pre><pre>SetProcessShutdownParameters@8</pre><pre>SetThreadExecutionState@4</pre><pre>TransactNamedPipe@28</pre><pre>WaitNamedPipeA@8</pre><pre>WaitNamedPipeW@8</pre><pre>WinExec@8</pre><pre>lcclibc.dll</pre><pre>loadperf.dll</pre><pre>lsapi32.dll</pre><pre>lz32.dll</pre><pre>mapi32.dll</pre><pre>CloseIMsgSession@4</pre><pre>GetAttribIMsgOnIStg@12</pre><pre>HrComposeMsgID@24</pre><pre>HrDecomposeMsgID@24</pre><pre>OpenIMsgOnIStg@44</pre><pre>OpenIMsgSession@12</pre><pre>SetAttribIMsgOnIStg@16</pre><pre>mgmtapi.dll</pre><pre>mpr.dll</pre><pre>WNetPasswordChangeNotify@32</pre><pre>WNetSupportGlobalEnum@4</pre><pre>mprapi.dll</pre><pre>MprAdminInterfaceTransportAdd@20</pre><pre>MprAdminInterfaceTransportRemove@12</pre><pre>MprAdminInterfaceTransportGetInfo@20</pre><pre>MprAdminInterfaceTransportSetInfo@20</pre><pre>MprAdminTransportSetInfo@24</pre><pre>MprAdminTransportGetInfo@24</pre><pre>MprConfigTransportCreate@36</pre><pre>MprConfigTransportDelete@8</pre><pre>MprConfigTransportGetHandle@12</pre><pre>MprConfigTransportSetInfo@28</pre><pre>MprConfigTransportGetInfo@28</pre><pre>MprConfigTransportEnum@28</pre><pre>MprConfigInterfaceTransportAdd@28</pre><pre>MprConfigInterfaceTransportRemove@12</pre><pre>MprConfigInterfaceTransportGetHandle@16</pre><pre>MprConfigInterfaceTransportGetInfo@20</pre><pre>MprConfigInterfaceTransportSetInfo@20</pre><pre>MprConfigInterfaceTransportEnum@32</pre><pre>MprAdminPortEnum@32</pre><pre>MprAdminPortGetInfo@16</pre><pre>MprAdminPortClearStats@8</pre><pre>MprAdminPortDisconnect@8</pre><pre>MprAdminPortReset@8</pre><pre>msacm32.dll</pre><pre>acmDriverAddA@20</pre><pre>acmDriverAddW@20</pre><pre>acmDriverClose@8</pre><pre>acmDriverDetailsA@12</pre><pre>acmDriverDetailsW@12</pre><pre>acmDriverEnum@12</pre><pre>acmDriverID@12</pre><pre>acmDriverMessage@16</pre><pre>acmDriverOpen@12</pre><pre>acmDriverPriority@12</pre><pre>acmDriverRemove@8</pre><pre>mscms.dll</pre><pre>msi.dll</pre><pre>MsiViewExecute@8</pre><pre>MsiDatabaseGetPrimaryKeysA@12</pre><pre>MsiDatabaseGetPrimaryKeysW@12</pre><pre>MsiDatabaseImportA@12</pre><pre>MsiDatabaseImportW@12</pre><pre>MsiDatabaseExportA@16</pre><pre>MsiDatabaseExportW@16</pre><pre>msimg32.dll</pre><pre>mslsp32.dll</pre><pre>msvcrt.dll</pre><pre>crtCompareStringA</pre><pre>crtGetLocaleInfoW</pre><pre>crtLCMapStringA</pre><pre>acmdln</pre><pre>wcmdln</pre><pre>wexecl</pre><pre>wexecle</pre><pre>wexeclp</pre><pre>wexeclpe</pre><pre>wexecv</pre><pre>wexecve</pre><pre>wexecvp</pre><pre>wexecvpe</pre><pre>msvcrtd.dll</pre><pre>p__wcmdln</pre><pre>p__crtDbgFlag</pre><pre>p__crtBreakAlloc</pre><pre>p__crtAssertBusy</pre><pre>p__acmdln</pre><pre>CrtSetReportMode</pre><pre>CrtSetReportHook</pre><pre>CrtSetReportFile</pre><pre>CrtSetDumpClient</pre><pre>CrtSetDbgFlag</pre><pre>CrtSetDbgBlockType</pre><pre>CrtSetBreakAlloc</pre><pre>CrtSetAllocHook</pre><pre>CrtMemDumpStatistics</pre><pre>CrtMemDumpAllObjectsSince</pre><pre>CrtMemDifference</pre><pre>CrtMemCheckpoint</pre><pre>CrtIsValidPointer</pre><pre>CrtIsValidHeapPointer</pre><pre>CrtIsMemoryBlock</pre><pre>CrtDumpMemoryLeaks</pre><pre>CrtDoForAllClientObjects</pre><pre>CrtDbgReport</pre><pre>CrtDbgBreak</pre><pre>CrtCheckMemory</pre><pre>wWinMainCRTStartup</pre><pre>wmainCRTStartup</pre><pre>WinMainCRTStartup</pre><pre>mainCRTStartup</pre><pre>CRT_INIT@12</pre><pre>DllMainCRTStartup@12</pre><pre>msvfw32.dll</pre><pre>VideoForWindowsVersion@0</pre><pre>mswsock.dll</pre><pre>rcmd@24</pre><pre>rexec@24</pre><pre>rresvport@4</pre><pre>nal.dll</pre><pre>nddeapi.dll</pre><pre>netapi32.dll</pre><pre>DsRoleGetDcOperationProgress@12</pre><pre>DsRoleGetDcOperationResults@12</pre><pre>I_NetServerPasswordGet@28</pre><pre>I_NetServerPasswordSet@28</pre><pre>I_NetServerPasswordSet2@28</pre><pre>I_NetDfsManagerReportSiteInfo@8</pre><pre>RxNetUserPasswordSet@16</pre><pre>NetGetJoinableOUs@24</pre><pre>NetGetJoinInformation@12</pre><pre>NetJoinDomain@24</pre><pre>NetpUpgradePreNT5JoinInfo@0</pre><pre>NetpAssertFailed@16</pre><pre>NetRemoteComputerSupports@12</pre><pre>NetReplExportDirAdd@16</pre><pre>NetReplExportDirDel@8</pre><pre>NetReplExportDirEnum@28</pre><pre>NetReplExportDirGetInfo@16</pre><pre>NetReplExportDirSetInfo@20</pre><pre>NetReplExportDirLock@8</pre><pre>NetReplExportDirUnlock@12</pre><pre>NetReplImportDirAdd@16</pre><pre>NetReplImportDirDel@8</pre><pre>NetReplImportDirEnum@28</pre><pre>NetReplImportDirGetInfo@16</pre><pre>NetReplImportDirLock@8</pre><pre>NetReplImportDirUnlock@12</pre><pre>NetServerTransportAdd@12</pre><pre>NetServerTransportAddEx@12</pre><pre>NetServerTransportDel@12</pre><pre>NetServerTransportEnum@28</pre><pre>NetUnjoinDomain@16</pre><pre>NetUserChangePassword@16</pre><pre>NetWkstaTransportAdd@16</pre><pre>NetWkstaTransportDel@12</pre><pre>NetWkstaTransportEnum@28</pre><pre>netsh.dll</pre><pre>MatchCmdLine@16</pre><pre>MatchTagsInCmdLine@28</pre><pre>ntdll.dll</pre><pre>DbgSsHandleKmApiMsg@8</pre><pre>LdrQueryImageFileExecutionOptions@24</pre><pre>NtAcceptConnectPort@24</pre><pre>NtCompleteConnectPort@4</pre><pre>NtConnectPort@32</pre><pre>NtCreateKey@28</pre><pre>NtCreateNamedPipeFile@56</pre><pre>NtCreatePort@20</pre><pre>NtDelayExecution@8</pre><pre>NtDeleteKey@4</pre><pre>NtDeleteValueKey@8</pre><pre>NtEnumerateKey@24</pre><pre>NtEnumerateValueKey@24</pre><pre>NtFlushKey@4</pre><pre>NtImpersonateClientOfPort@8</pre><pre>NtListenPort@8</pre><pre>NtLoadKey2@12</pre><pre>NtLoadKey@8</pre><pre>NtNotifyChangeKey@40</pre><pre>NtOpenKey@12</pre><pre>NtQueryInformationPort@20</pre><pre>NtQueryKey@20</pre><pre>NtQueryMultipleValueKey@24</pre><pre>NtQueryValueKey@24</pre><pre>NtRegisterThreadTerminatePort@4</pre><pre>NtReplaceKey@12</pre><pre>NtReplyPort@8</pre><pre>NtReplyWaitReceivePort@16</pre><pre>NtReplyWaitReplyPort@8</pre><pre>NtRequestPort@8</pre><pre>NtRequestWaitReplyPort@12</pre><pre>NtRestoreKey@12</pre><pre>NtSaveKey@8</pre><pre>NtSetDefaultHardErrorPort@4</pre><pre>NtSetInformationKey@16</pre><pre>NtSetValueKey@24</pre><pre>NtUnloadKey@4</pre><pre>NtYieldExecution@0</pre><pre>RtlCheckRegistryKey@8</pre><pre>RtlCreateRegistryKey@8</pre><pre>RtlEnumProcessHeaps@8</pre><pre>RtlFormatCurrentUserKeyPath@4</pre><pre>RtlGetProcessHeaps@8</pre><pre>RtlQueryProcessHeapInformation@4</pre><pre>RtlValidateProcessHeaps@0</pre><pre>RtlpNtCreateKey@24</pre><pre>RtlpNtEnumerateSubKey@16</pre><pre>RtlpNtMakeTemporaryKey@4</pre><pre>RtlpNtOpenKey@16</pre><pre>RtlpNtQueryValueKey@20</pre><pre>RtlpNtSetValueKey@16</pre><pre>ZwAcceptConnectPort@24</pre><pre>ZwCompleteConnectPort@4</pre><pre>ZwConnectPort@32</pre><pre>ZwCreateKey@28</pre><pre>ZwCreateNamedPipeFile@56</pre><pre>ZwCreatePort@20</pre><pre>ZwDelayExecution@8</pre><pre>ZwDeleteKey@4</pre><pre>ZwDeleteValueKey@8</pre><pre>ZwEnumerateKey@24</pre><pre>ZwEnumerateValueKey@24</pre><pre>ZwFlushKey@4</pre><pre>ZwImpersonateClientOfPort@8</pre><pre>ZwListenPort@8</pre><pre>ZwLoadKey2@12</pre><pre>ZwLoadKey@8</pre><pre>ZwNotifyChangeKey@40</pre><pre>ZwOpenKey@12</pre><pre>ZwQueryInformationPort@20</pre><pre>ZwQueryKey@20</pre><pre>ZwQueryMultipleValueKey@24</pre><pre>ZwQueryValueKey@24</pre><pre>ZwRegisterThreadTerminatePort@4</pre><pre>ZwReplaceKey@12</pre><pre>ZwReplyPort@8</pre><pre>ZwReplyWaitReceivePort@16</pre><pre>ZwReplyWaitReplyPort@8</pre><pre>ZwRequestPort@8</pre><pre>ZwRequestWaitReplyPort@12</pre><pre>ZwRestoreKey@12</pre><pre>ZwSaveKey@8</pre><pre>ZwSetDefaultHardErrorPort@4</pre><pre>ZwSetInformationKey@16</pre><pre>ZwSetValueKey@24</pre><pre>ZwUnloadKey@4</pre><pre>ZwYieldExecution@0</pre><pre>ntmsapi.dll</pre><pre>SubmitNtmsOperatorRequestW@24</pre><pre>SubmitNtmsOperatorRequestA@24</pre><pre>WaitForNtmsOperatorRequest@12</pre><pre>CancelNtmsOperatorRequest@8</pre><pre>SatisfyNtmsOperatorRequest@8</pre><pre>ExportNtmsDatabase@4</pre><pre>ImportNtmsDatabase@4</pre><pre>query.dll</pre><pre>odbc32.dll</pre><pre>SQLAllocConnect@8</pre><pre>SQLAllocEnv@4</pre><pre>SQLAllocStmt@8</pre><pre>SQLBindCol@24</pre><pre>SQLCancel@4</pre><pre>SQLColAttributes@28</pre><pre>SQLColAttributesW@28</pre><pre>SQLColAttributesA@28</pre><pre>SQLConnect@28</pre><pre>SQLConnectW@28</pre><pre>SQLConnectA@28</pre><pre>SQLDescribeCol@36</pre><pre>SQLDescribeColW@36</pre><pre>SQLDescribeColA@36</pre><pre>SQLDisconnect@4</pre><pre>SQLError@32</pre><pre>SQLErrorW@32</pre><pre>SQLErrorA@32</pre><pre>SQLExecDirect@12</pre><pre>SQLExecDirectW@12</pre><pre>SQLExecDirectA@12</pre><pre>SQLExecute@4</pre><pre>SQLFetch@4</pre><pre>SQLFreeConnect@4</pre><pre>SQLFreeEnv@4</pre><pre>SQLFreeStmt@8</pre><pre>SQLGetCursorName@16</pre><pre>SQLGetCursorNameW@16</pre><pre>SQLGetCursorNameA@16</pre><pre>SQLNumResultCols@8</pre><pre>SQLPrepare@12</pre><pre>SQLPrepareW@12</pre><pre>SQLPrepareA@12</pre><pre>SQLRowCount@8</pre><pre>SQLSetCursorName@12</pre><pre>SQLSetCursorNameW@12</pre><pre>SQLSetCursorNameA@12</pre><pre>SQLSetParam@32</pre><pre>SQLTransact@12</pre><pre>SQLColumns@36</pre><pre>SQLColumnsW@36</pre><pre>SQLColumnsA@36</pre><pre>SQLDriverConnect@32</pre><pre>SQLDriverConnectW@32</pre><pre>SQLDriverConnectA@32</pre><pre>SQLGetConnectOption@12</pre><pre>SQLGetConnectOptionW@12</pre><pre>SQLGetConnectOptionA@12</pre><pre>SQLGetData@24</pre><pre>SQLGetFunctions@12</pre><pre>SQLGetInfo@20</pre><pre>SQLGetInfoW@20</pre><pre>SQLGetInfoA@20</pre><pre>SQLGetStmtOption@12</pre><pre>SQLGetTypeInfo@8</pre><pre>SQLGetTypeInfoW@8</pre><pre>SQLGetTypeInfoA@8</pre><pre>SQLParamData@8</pre><pre>SQLPutData@12</pre><pre>SQLSetConnectOption@12</pre><pre>SQLSetConnectOptionW@12</pre><pre>SQLSetConnectOptionA@12</pre><pre>SQLSetStmtOption@12</pre><pre>SQLSpecialColumns@40</pre><pre>SQLSpecialColumnsW@40</pre><pre>SQLSpecialColumnsA@40</pre><pre>SQLStatistics@36</pre><pre>SQLStatisticsW@36</pre><pre>SQLStatisticsA@36</pre><pre>SQLTables@36</pre><pre>SQLTablesW@36</pre><pre>SQLTablesA@36</pre><pre>SQLBrowseConnect@24</pre><pre>SQLBrowseConnectW@24</pre><pre>SQLBrowseConnectA@24</pre><pre>SQLColumnPrivileges@36</pre><pre>SQLColumnPrivilegesW@36</pre><pre>SQLColumnPrivilegesA@36</pre><pre>SQLDataSources@32</pre><pre>SQLDataSourcesW@32</pre><pre>SQLDataSourcesA@32</pre><pre>SQLDescribeParam@24</pre><pre>SQLExtendedFetch@20</pre><pre>SQLForeignKeys@52</pre><pre>SQLForeignKeysW@52</pre><pre>SQLForeignKeysA@52</pre><pre>SQLMoreResults@4</pre><pre>SQLNativeSql@24</pre><pre>SQLNativeSqlW@24</pre><pre>SQLNativeSqlA@24</pre><pre>SQLNumParams@8</pre><pre>SQLParamOptions@12</pre><pre>SQLPrimaryKeys@28</pre><pre>SQLPrimaryKeysW@28</pre><pre>SQLPrimaryKeysA@28</pre><pre>SQLProcedureColumns@36</pre><pre>SQLProcedureColumnsW@36</pre><pre>SQLProcedureColumnsA@36</pre><pre>SQLProcedures@28</pre><pre>SQLProceduresW@28</pre><pre>SQLProceduresA@28</pre><pre>SQLSetPos@16</pre><pre>SQLSetScrollOptions@16</pre><pre>SQLTablePrivileges@28</pre><pre>SQLTablePrivilegesW@28</pre><pre>SQLTablePrivilegesA@28</pre><pre>SQLDrivers@32</pre><pre>SQLDriversW@32</pre><pre>SQLDriversA@32</pre><pre>SQLBindParameter@40</pre><pre>SQLAllocHandle@12</pre><pre>SQLBindParam@32</pre><pre>SQLCloseCursor@4</pre><pre>SQLColAttribute@28</pre><pre>SQLColAttributeW@28</pre><pre>SQLColAttributeA@28</pre><pre>SQLCopyDesc@8</pre><pre>SQLEndTran@12</pre><pre>SQLFetchScroll@12</pre><pre>SQLFreeHandle@8</pre><pre>SQLGetConnectAttr@20</pre><pre>SQLGetConnectAttrW@20</pre><pre>SQLGetConnectAttrA@20</pre><pre>SQLGetDescField@24</pre><pre>SQLGetDescFieldW@24</pre><pre>SQLGetDescFieldA@24</pre><pre>SQLGetDescRec@44</pre><pre>SQLGetDescRecW@44</pre><pre>SQLGetDescRecA@44</pre><pre>SQLGetDiagField@28</pre><pre>SQLGetDiagFieldW@28</pre><pre>SQLGetDiagFieldA@28</pre><pre>SQLGetDiagRec@32</pre><pre>SQLGetDiagRecW@32</pre><pre>SQLGetDiagRecA@32</pre><pre>SQLGetEnvAttr@20</pre><pre>SQLGetStmtAttr@20</pre><pre>SQLGetStmtAttrW@20</pre><pre>SQLGetStmtAttrA@20</pre><pre>SQLSetConnectAttr@16</pre><pre>SQLSetConnectAttrW@16</pre><pre>SQLSetConnectAttrA@16</pre><pre>SQLSetDescField@20</pre><pre>SQLSetDescFieldW@20</pre><pre>SQLSetDescFieldA@20</pre><pre>SQLSetDescRec@40</pre><pre>SQLSetEnvAttr@16</pre><pre>SQLSetStmtAttr@16</pre><pre>SQLSetStmtAttrW@16</pre><pre>SQLSetStmtAttrA@16</pre><pre>SQLAllocHandleStd@12</pre><pre>SQLBulkOperations@8</pre><pre>odbcbcp.dll</pre><pre>bcp_exec@8</pre><pre>SQLLinkedServers@4</pre><pre>SQLLinkedCatalogsW@12</pre><pre>SQLLinkedCatalogsA@12</pre><pre>SQLInitEnumServers@8</pre><pre>SQLGetNextEnumeration@12</pre><pre>SQLCloseEnumServers@4</pre><pre>odbccp32.dll</pre><pre>SQLConfigDataSource@16</pre><pre>SQLConfigDataSourceW@16</pre><pre>SQLConfigDriver@28</pre><pre>SQLConfigDriverW@28</pre><pre>SQLCreateDataSource@8</pre><pre>SQLCreateDataSourceW@8</pre><pre>SQLGetAvailableDrivers@16</pre><pre>SQLGetAvailableDriversW@16</pre><pre>SQLGetConfigMode@4</pre><pre>SQLGetInstalledDrivers@12</pre><pre>SQLGetInstalledDriversW@12</pre><pre>SQLGetPrivateProfileString@24</pre><pre>SQLGetPrivateProfileStringW@24</pre><pre>SQLGetTranslator@32</pre><pre>SQLGetTranslatorW@32</pre><pre>SQLInstallDriver@20</pre><pre>SQLInstallDriverEx@28</pre><pre>SQLInstallDriverExW@28</pre><pre>SQLInstallDriverManager@12</pre><pre>SQLInstallDriverManagerW@12</pre><pre>SQLInstallDriverW@20</pre><pre>SQLInstallODBC@16</pre><pre>SQLInstallODBCW@16</pre><pre>SQLInstallTranslator@32</pre><pre>SQLInstallTranslatorEx@28</pre><pre>SQLInstallTranslatorExW@28</pre><pre>SQLInstallTranslatorW@32</pre><pre>SQLInstallerError@20</pre><pre>SQLInstallerErrorW@20</pre><pre>SQLManageDataSources@4</pre><pre>SQLPostInstallerError@8</pre><pre>SQLPostInstallerErrorW@8</pre><pre>SQLReadFileDSN@24</pre><pre>SQLReadFileDSNW@24</pre><pre>SQLRemoveDSNFromIni@4</pre><pre>SQLRemoveDSNFromIniW@4</pre><pre>SQLRemoveDefaultDataSource@0</pre><pre>SQLRemoveDriver@12</pre><pre>SQLRemoveDriverManager@4</pre><pre>SQLRemoveDriverW@12</pre><pre>SQLRemoveTranslator@8</pre><pre>SQLRemoveTranslatorW@8</pre><pre>SQLSetConfigMode@4</pre><pre>SQLValidDSN@4</pre><pre>SQLValidDSNW@4</pre><pre>SQLWriteDSNToIni@8</pre><pre>SQLWriteDSNToIniW@8</pre><pre>SQLWriteFileDSN@16</pre><pre>SQLWriteFileDSNW@16</pre><pre>SQLWritePrivateProfileString@16</pre><pre>SQLWritePrivateProfileStringW@16</pre><pre>oleacc.dll</pre><pre>oleaut32.dll</pre><pre>UserMSG_free_inst@4</pre><pre>UserMSG_free_local@4</pre><pre>UserMSG_from_local@8</pre><pre>UserMSG_to_local@8</pre><pre>olepro32.dll</pre><pre>opengl.dll</pre><pre>glGetTexEnvfv@12</pre><pre>glGetTexEnviv@12</pre><pre>glPassThrough@4</pre><pre>glTexEnvf@12</pre><pre>glTexEnvfv@12</pre><pre>glTexEnvi@12</pre><pre>glTexEnviv@12</pre><pre>glViewport@16</pre><pre>opengl32.dll</pre><pre>pdh.dll</pre><pre>PdhVerifySQLDBA@4</pre><pre>PdhVerifySQLDBW@4</pre><pre>PdhCreateSQLTablesA@4</pre><pre>PdhCreateSQLTablesW@4</pre><pre>penwin32.dll</pre><pre>ProcessHRC@8</pre><pre>pkdp32.dll</pre><pre>powrprof.dll</pre><pre>psapi.dll</pre><pre>qfloat.dll</pre><pre>rasapi32.dll</pre><pre>RasGetHport@4</pre><pre>RasSetOldPassword@8</pre><pre>rasdlg.dll</pre><pre>rassapi.dll</pre><pre>RasAdminPortClearStatistics@8</pre><pre>RasAdminPortDisconnect@8</pre><pre>RasAdminPortEnum@12</pre><pre>RasAdminPortGetInfo@20</pre><pre>resutils.dll</pre><pre>riched20.dll</pre><pre>rpcns4.dll</pre><pre>RpcNsBindingExportW@20</pre><pre>RpcNsBindingExportA@20</pre><pre>RpcNsBindingUnexportW@16</pre><pre>RpcNsBindingUnexportA@16</pre><pre>RpcNsBindingImportBeginW@20</pre><pre>RpcNsBindingImportBeginA@20</pre><pre>RpcNsBindingImportNext@8</pre><pre>RpcNsBindingImportDone@4</pre><pre>RpcNsMgmtBindingUnexportA@20</pre><pre>RpcNsMgmtBindingUnexportW@20</pre><pre>RpcNsBindingExportPnPW@16</pre><pre>RpcNsBindingExportPnPA@16</pre><pre>RpcNsBindingUnexportPnPW@16</pre><pre>RpcNsBindingUnexportPnPA@16</pre><pre>rpcrt4.dll</pre><pre>CStdStubBuffer_IsIIDSupported@8</pre><pre>I_RpcBindingInqTransportType@8</pre><pre>I_RpcFreePipeBuffer@4</pre><pre>I_RpcNsInterfaceExported@12</pre><pre>I_RpcNsInterfaceUnexported@12</pre><pre>I_RpcPauseExecution@4</pre><pre>I_RpcReallocPipeBuffer@8</pre><pre>I_RpcServerAllocateIpPort@8</pre><pre>I_RpcServerInqTransportType@4</pre><pre>NdrCorrelationPass@4</pre><pre>NdrGetPipeBuffer@12</pre><pre>NdrIsAppDoneWithPipes@4</pre><pre>NdrMarkNextActivePipe@4</pre><pre>NdrPipePull@16</pre><pre>NdrPipePush@12</pre><pre>NdrPipeSendReceive@8</pre><pre>NdrPipesInitialize@24</pre><pre>NdrPipesDone@4</pre><pre>RpcCertGeneratePrincipalNameA@12</pre><pre>RpcCertGeneratePrincipalNameW@12</pre><pre>rtm.dll</pre><pre>secur32.dll</pre><pre>ExportSecurityContext@16</pre><pre>ImportSecurityContextA@16</pre><pre>ImportSecurityContextW@16</pre><pre>setupapi.dll</pre><pre>SetupDiCreateDevRegKeyA@28</pre><pre>SetupDiCreateDevRegKeyW@28</pre><pre>SetupDiDeleteDevRegKey@20</pre><pre>SetupDiOpenClassRegKey@8</pre><pre>SetupDiOpenDevRegKey@24</pre><pre>sfc.dll</pre><pre>shell32.dll</pre><pre>WOWShellExecute@28</pre><pre>ShellExecuteW@24</pre><pre>ShellExecuteExW@4</pre><pre>ShellExecuteExA@4</pre><pre>ShellExecuteEx@4</pre><pre>ShellExecuteA@24</pre><pre>SHFileOperationW@4</pre><pre>SHFileOperationA@4</pre><pre>SHFileOperation@4</pre><pre>RealShellExecuteW@40</pre><pre>RealShellExecuteExW@44</pre><pre>RealShellExecuteExA@44</pre><pre>RealShellExecuteA@40</pre><pre>PathIsExe@4</pre><pre>FindExecutableW@12</pre><pre>FindExecutableA@12</pre><pre>FindExeDlgProc@16</pre><pre>shfolder.dll</pre><pre>shlwapi.dll</pre><pre>PathIsURLA@4</pre><pre>PathIsURLW@4</pre><pre>SHDeleteOrphanKeyA@8</pre><pre>SHDeleteOrphanKeyW@8</pre><pre>SHDeleteEmptyKeyA@8</pre><pre>SHDeleteEmptyKeyW@8</pre><pre>SHDeleteKeyA@8</pre><pre>SHDeleteKeyW@8</pre><pre>SHEnumKeyExA@16</pre><pre>SHEnumKeyExW@16</pre><pre>SHQueryInfoKeyA@20</pre><pre>SHQueryInfoKeyW@20</pre><pre>SHRegOpenUSKeyA@20</pre><pre>SHRegOpenUSKeyW@20</pre><pre>SHRegCreateUSKeyA@20</pre><pre>SHRegCreateUSKeyW@20</pre><pre>SHRegEnumUSKeyA@20</pre><pre>SHRegEnumUSKeyW@20</pre><pre>SHRegQueryInfoUSKeyA@24</pre><pre>SHRegQueryInfoUSKeyW@24</pre><pre>SHRegDeleteEmptyUSKeyA@12</pre><pre>SHRegDeleteEmptyUSKeyW@12</pre><pre>SHRegCloseUSKey@4</pre><pre>SHCopyKeyA@16</pre><pre>SHCopyKeyW@16</pre><pre>SHRegDuplicateHKey@4</pre><pre>AssocQueryStringByKeyW@24</pre><pre>AssocQueryStringByKeyA@24</pre><pre>AssocQueryKeyW@20</pre><pre>AssocQueryKeyA@20</pre><pre>UrlCompareA@12</pre><pre>UrlCompareW@12</pre><pre>UrlCombineA@20</pre><pre>UrlCombineW@20</pre><pre>UrlCanonicalizeA@16</pre><pre>UrlCanonicalizeW@16</pre><pre>UrlIsOpaqueA@4</pre><pre>UrlIsOpaqueW@4</pre><pre>UrlIsNoHistoryA@4</pre><pre>UrlIsNoHistoryW@4</pre><pre>UrlIsA@8</pre><pre>UrlIsW@8</pre><pre>UrlGetLocationA@4</pre><pre>UrlGetLocationW@4</pre><pre>UrlUnescapeA@16</pre><pre>UrlUnescapeW@16</pre><pre>UrlEscapeA@16</pre><pre>UrlEscapeW@16</pre><pre>UrlCreateFromPathA@16</pre><pre>UrlCreateFromPathW@16</pre><pre>PathCreateFromUrlA@16</pre><pre>PathCreateFromUrlW@16</pre><pre>UrlHashA@12</pre><pre>UrlHashW@12</pre><pre>UrlGetPartA@20</pre><pre>UrlGetPartW@20</pre><pre>UrlApplySchemeA@16</pre><pre>UrlApplySchemeW@16</pre><pre>wsnmp32.dll</pre><pre>SnmpSendMsg@20</pre><pre>SnmpRecvMsg@20</pre><pre>SnmpCancelMsg@8</pre><pre>SnmpSetPort@8</pre><pre>SnmpEncodeMsg@24</pre><pre>SnmpDecodeMsg@24</pre><pre>snmpapi.dll</pre><pre>SnmpSvcReportEvent@16</pre><pre>SnmpUtilVarBindListCpy@8</pre><pre>strlib.dll</pre><pre>svrapi.dll</pre><pre>tapi32.dll</pre><pre>toolbar.dll</pre><pre>toolhelp.dll</pre><pre>traffic.dll</pre><pre>url.dll</pre><pre>TranslateURLA@12</pre><pre>TranslateURLW@12</pre><pre>URLAssociationDialogA@24</pre><pre>URLAssociationDialogW@24</pre><pre>urlmon.dll</pre><pre>UrlMkBuildVersion@0</pre><pre>CreateURLMoniker@12</pre><pre>CreateURLMonikerEx@16</pre><pre>GetClassURL@8</pre><pre>IsValidURL@12</pre><pre>UrlMkSetSessionOption@16</pre><pre>UrlMkGetSessionOption@20</pre><pre>CoGetClassObjectFromURL@40</pre><pre>CoInternetParseUrl@28</pre><pre>CoInternetCombineUrl@28</pre><pre>CoInternetCompareUrl@12</pre><pre>CoInternetGetSecurityUrl@16</pre><pre>URLDownloadW@20</pre><pre>URLDownloadA@20</pre><pre>URLOpenPullStreamA@16</pre><pre>URLOpenPullStreamW@16</pre><pre>URLDownloadToFileA@20</pre><pre>URLDownloadToFileW@20</pre><pre>URLDownloadToCacheFileA@24</pre><pre>URLDownloadToCacheFileW@24</pre><pre>URLOpenBlockingStreamA@20</pre><pre>URLOpenBlockingStreamW@20</pre><pre>URLOpenStreamA@16</pre><pre>URLOpenStreamW@16</pre><pre>RegisterHotKey@16</pre><pre>UnregisterHotKey@8</pre><pre>EnumWindows@8</pre><pre>EnumChildWindows@12</pre><pre>EnumThreadWindows@12</pre><pre>CreateDialogIndirectParamA@20</pre><pre>CreateDialogIndirectParamW@20</pre><pre>LoadKeyboardLayoutA@8</pre><pre>LoadKeyboardLayoutW@8</pre><pre>ActivateKeyboardLayout@8</pre><pre>UnloadKeyboardLayout@4</pre><pre>GetKeyboardLayoutNameA@4</pre><pre>GetKeyboardLayoutNameW@4</pre><pre>GetKeyState@4</pre><pre>GetAsyncKeyState@4</pre><pre>GetKeyboardState@4</pre><pre>SetKeyboardState@4</pre><pre>GetKeyNameTextA@12</pre><pre>GetKeyNameTextW@12</pre><pre>GetKeyboardType@4</pre><pre>VkKeyScanA@4</pre><pre>VkKeyScanW@4</pre><pre>MapVirtualKeyA@8</pre><pre>MapVirtualKeyW@8</pre><pre>OemKeyScan@4</pre><pre>MsgWaitForMultipleObjects@20</pre><pre>MsgWaitForMultipleObjectsEx@20</pre><pre>EnumWindowStationsA@8</pre><pre>EnumWindowStationsW@8</pre><pre>EnumDesktopWindows@12</pre><pre>CreateWindowStationA@16</pre><pre>CreateWindowStationW@16</pre><pre>OpenWindowStationA@12</pre><pre>OpenWindowStationW@12</pre><pre>CloseWindowStation@4</pre><pre>SetProcessWindowStation@4</pre><pre>GetProcessWindowStation@0</pre><pre>SetWindowsHookA@8</pre><pre>SetWindowsHookW@8</pre><pre>UnhookWindowsHook@8</pre><pre>SetWindowsHookExA@16</pre><pre>SetWindowsHookExW@16</pre><pre>UnhookWindowsHookEx@4</pre><pre>CallMsgFilterA@8</pre><pre>CallMsgFilterW@8</pre><pre>CallMsgFilter@8</pre><pre>ArrangeIconicWindows@4</pre><pre>CascadeChildWindows@8</pre><pre>TileChildWindows@8</pre><pre>ExitWindowsEx@8</pre><pre>keybd_event@16</pre><pre>CascadeWindows@20</pre><pre>GetKeyboardLayout@4</pre><pre>GetKeyboardLayoutList@8</pre><pre>MapVirtualKeyExA@12</pre><pre>MapVirtualKeyExW@12</pre><pre>TileWindows@20</pre><pre>VkKeyScanExA@8</pre><pre>VkKeyScanExW@8</pre><pre>WINNLSGetIMEHotkey@4</pre><pre>userenv.dll</pre><pre>uxtheme.dll</pre><pre>version.dll</pre><pre>webpost.dll</pre><pre>win32spl.dll</pre><pre>winfax.dll</pre><pre>FaxEnumPortsA@12</pre><pre>FaxEnumPortsW@12</pre><pre>FaxGetPortA@8</pre><pre>FaxGetPortW@8</pre><pre>FaxOpenPort@16</pre><pre>FaxSetPortA@8</pre><pre>FaxSetPortW@8</pre><pre>winhttp.dll</pre><pre>WinHttpTimeFromSystemTime@8</pre><pre>WinHttpTimeToSystemTime@8</pre><pre>WinHttpCrackUrl@16</pre><pre>WinHttpCreateUrl@16</pre><pre>WinHttpCheckPlatform@0</pre><pre>WinHttpGetDefaultProxyConfiguration@4</pre><pre>WinHttpSetDefaultProxyConfiguration@4</pre><pre>WinHttpDetectAutoProxyConfigUrl@8</pre><pre>WinHttpGetProxyForUrl@16</pre><pre>WinHttpGetIEProxyConfigForCurrentUser@4</pre><pre>WinHttpOpen@20</pre><pre>WinHttpSetStatusCallback@16</pre><pre>WinHttpSetOption@16</pre><pre>WinHttpQueryOption@16</pre><pre>WinHttpConnect@16</pre><pre>WinHttpOpenRequest@28</pre><pre>WinHttpAddRequestHeaders@16</pre><pre>WinHttpSetCredentials@24</pre><pre>WinHttpSendRequest@28</pre><pre>WinHttpWriteData@16</pre><pre>WinHttpReceiveResponse@8</pre><pre>WinHttpQueryHeaders@24</pre><pre>WinHttpQueryAuthSchemes@16</pre><pre>WinHttpQueryDataAvailable@8</pre><pre>WinHttpReadData@16</pre><pre>WinHttpCloseHandle@4</pre><pre>WinHttpSetTimeouts@20</pre><pre>WinHttpAutoProxySvcMain@8</pre><pre>wininet.dll</pre><pre>CommitUrlCacheEntryA@44</pre><pre>CommitUrlCacheEntryW@44</pre><pre>CreateUrlCacheContainerA@32</pre><pre>CreateUrlCacheContainerW@32</pre><pre>CreateUrlCacheEntryA@20</pre><pre>CreateUrlCacheEntryW@20</pre><pre>CreateUrlCacheGroup@8</pre><pre>DeleteUrlCacheContainerA@8</pre><pre>DeleteUrlCacheContainerW@8</pre><pre>DeleteUrlCacheEntry@4</pre><pre>DeleteUrlCacheEntryA@4</pre><pre>DeleteUrlCacheEntryW@4</pre><pre>DeleteUrlCacheGroup@16</pre><pre>ExportCookieFileA@8</pre><pre>ExportCookieFileW@8</pre><pre>FindCloseUrlCache@4</pre><pre>FindFirstUrlCacheContainerA@16</pre><pre>FindFirstUrlCacheContainerW@16</pre><pre>FindFirstUrlCacheEntryA@12</pre><pre>FindFirstUrlCacheEntryExA@40</pre><pre>FindFirstUrlCacheEntryExW@40</pre><pre>FindFirstUrlCacheEntryW@12</pre><pre>FindFirstUrlCacheGroup@24</pre><pre>FindNextUrlCacheContainerA@12</pre><pre>FindNextUrlCacheContainerW@12</pre><pre>FindNextUrlCacheEntryA@12</pre><pre>FindNextUrlCacheEntryExA@24</pre><pre>FindNextUrlCacheEntryExW@24</pre><pre>FindNextUrlCacheEntryW@12</pre><pre>FindNextUrlCacheGroup@12</pre><pre>FreeUrlCacheSpaceA@12</pre><pre>FreeUrlCacheSpaceW@12</pre><pre>FtpCommandA@24</pre><pre>FtpCommandW@24</pre><pre>FtpCreateDirectoryA@8</pre><pre>FtpCreateDirectoryW@8</pre><pre>FtpDeleteFileA@8</pre><pre>FtpDeleteFileW@8</pre><pre>FtpFindFirstFileA@20</pre><pre>FtpFindFirstFileW@20</pre><pre>FtpGetCurrentDirectoryA@12</pre><pre>FtpGetCurrentDirectoryW@12</pre><pre>FtpGetFileA@28</pre><pre>FtpGetFileEx@28</pre><pre>FtpGetFileSize@8</pre><pre>FtpGetFileW@28</pre><pre>FtpOpenFileA@20</pre><pre>FtpOpenFileW@20</pre><pre>FtpPutFileA@20</pre><pre>FtpPutFileEx@20</pre><pre>FtpPutFileW@20</pre><pre>FtpRemoveDirectoryA@8</pre><pre>FtpRemoveDirectoryW@8</pre><pre>FtpRenameFileA@12</pre><pre>FtpRenameFileW@12</pre><pre>FtpSetCurrentDirectoryA@8</pre><pre>FtpSetCurrentDirectoryW@8</pre><pre>GetUrlCacheConfigInfoA@12</pre><pre>GetUrlCacheConfigInfoW@12</pre><pre>GetUrlCacheEntryInfoA@12</pre><pre>GetUrlCacheEntryInfoExA@28</pre><pre>GetUrlCacheEntryInfoExW@28</pre><pre>GetUrlCacheEntryInfoW@12</pre><pre>GetUrlCacheGroupAttributeA@28</pre><pre>GetUrlCacheGroupAttributeW@28</pre><pre>GetUrlCacheHeaderData@8</pre><pre>HttpAddRequestHeadersA@16</pre><pre>HttpAddRequestHeadersW@16</pre><pre>HttpCheckDavCompliance@20</pre><pre>HttpCheckDavComplianceA@20</pre><pre>HttpCheckDavComplianceW@20</pre><pre>HttpEndRequestA@16</pre><pre>HttpEndRequestW@16</pre><pre>HttpOpenRequestA@32</pre><pre>HttpOpenRequestW@32</pre><pre>HttpQueryInfoA@20</pre><pre>HttpQueryInfoW@20</pre><pre>HttpSendRequestA@20</pre><pre>HttpSendRequestExA@20</pre><pre>HttpSendRequestExW@20</pre><pre>HttpSendRequestW@20</pre><pre>ImportCookieFileA@4</pre><pre>ImportCookieFileW@4</pre><pre>IncrementUrlCacheHeaderData@8</pre><pre>InternetCanonicalizeUrlA@16</pre><pre>InternetCanonicalizeUrlW@16</pre><pre>InternetCombineUrlA@20</pre><pre>InternetCombineUrlW@20</pre><pre>InternetCrackUrlA@16</pre><pre>InternetCrackUrlW@16</pre><pre>InternetCreateUrlA@16</pre><pre>InternetCreateUrlW@16</pre><pre>InternetGetCertByURL@12</pre><pre>InternetGetCertByURLA@12</pre><pre>InternetOpenUrlA@24</pre><pre>InternetOpenUrlW@24</pre><pre>InternetShowSecurityInfoByURL@8</pre><pre>InternetShowSecurityInfoByURLA@8</pre><pre>InternetShowSecurityInfoByURLW@8</pre><pre>IsHostInProxyBypassList@12</pre><pre>IsUrlCacheEntryExpiredA@12</pre><pre>IsUrlCacheEntryExpiredW@12</pre><pre>LoadUrlCacheContent@0</pre><pre>ParseX509EncodedCertificateForListBoxEntry@16</pre><pre>PerformOperationOverUrlCacheA@40</pre><pre>ReadUrlCacheEntryStream@20</pre><pre>RegisterUrlCacheNotification@24</pre><pre>RetrieveUrlCacheEntryFileA@16</pre><pre>RetrieveUrlCacheEntryFileW@16</pre><pre>RetrieveUrlCacheEntryStreamA@20</pre><pre>RetrieveUrlCacheEntryStreamW@20</pre><pre>RunOnceUrlCache@16</pre><pre>SetUrlCacheConfigInfoA@8</pre><pre>SetUrlCacheConfigInfoW@8</pre><pre>SetUrlCacheEntryGroup@28</pre><pre>SetUrlCacheEntryGroupA@28</pre><pre>SetUrlCacheEntryGroupW@28</pre><pre>SetUrlCacheEntryInfoA@12</pre><pre>SetUrlCacheEntryInfoW@12</pre><pre>SetUrlCacheGroupAttributeA@24</pre><pre>SetUrlCacheGroupAttributeW@24</pre><pre>SetUrlCacheHeaderData@8</pre><pre>ShowClientAuthCerts@4</pre><pre>ShowX509EncodedCertificate@12</pre><pre>UnlockUrlCacheEntryFile@8</pre><pre>UnlockUrlCacheEntryFileA@8</pre><pre>UnlockUrlCacheEntryFileW@8</pre><pre>UnlockUrlCacheEntryStream@8</pre><pre>UpdateUrlCacheContentPath@4</pre><pre>winmm.dll</pre><pre>mciExecute@4</pre><pre>midiOutLongMsg@12</pre><pre>midiOutShortMsg@8</pre><pre>EnumPortsA@24</pre><pre>EnumPortsW@24</pre><pre>AddPortA@12</pre><pre>AddPortW@12</pre><pre>ConfigurePortA@12</pre><pre>ConfigurePortW@12</pre><pre>DeletePortA@12</pre><pre>DeletePortW@12</pre><pre>AddPortExW@16</pre><pre>AddPortExA@16</pre><pre>SetPortA@16</pre><pre>SetPortW@16</pre><pre>EnumPrinterKeyA@20</pre><pre>EnumPrinterKeyW@20</pre><pre>DeletePrinterKeyA@8</pre><pre>DeletePrinterKeyW@8</pre><pre>GetPrinterWebInformation@16</pre><pre>wintrust.dll</pre><pre>WinSubmitCertificate@4</pre><pre>wldap32.dll</pre><pre>ldap_extended_operation</pre><pre>ldap_extended_operationA</pre><pre>ldap_extended_operationW</pre><pre>ldap_msgfree</pre><pre>ldap_conn_from_msg</pre><pre>ldap_extended_operation_sW</pre><pre>ldap_extended_operation_sA</pre><pre>wow32.dll</pre><pre>ws2_32.dll</pre><pre>getservbyport@8</pre><pre>WSAAsyncGetServByPort@24</pre><pre>WSAJoinLeaf@32</pre><pre>wsock32.dll</pre><pre>GETXBYYSP_WSAAsyncGetServByPort@24</pre><pre>GETXBYYSP_getservbyport@8</pre><pre>wst.dll</pre><pre>wtsapi32.dll</pre><pre>WTSShutdownSystem@8</pre><pre>zlib.dll</pre><pre>.?AVCCmdTarget@@</pre><pre>.?AVCCmdUI@@</pre><pre>.?AVCTestCmdUI@@</pre><pre>.PAVCUserException@@</pre><pre>.PAVCArchiveException@@</pre><pre>.PAVCObject@@</pre><pre>.PAVCSimpleException@@</pre><pre>.PAVCResourceException@@</pre><pre>.?AVCToolCmdUI@@</pre><pre>.?AVCMDIFrameWnd@@</pre><pre>.?AVCMDIChildWnd@@</pre><pre>.PAVCMemoryException@@</pre><pre>.PAVCNotSupportedException@@</pre><pre>.?AVCNotSupportedException@@</pre><pre>.?AVCStatusCmdUI@@</pre><pre>.PAVCOleException@@</pre><pre>.PAVCOleDispatchException@@</pre><pre>zcÁ</pre><pre>%d.%m.%Y</pre><pre>%Documents and Settings%\%current user%\Application Data\IDMComp\UltraEdit\</pre><pre>%Documents and Settings%\%current user%\Application Data\IDMComp\UltraEdit\uedit32.INI</pre><pre>C:\TOTALCMD\UE\uedit32.exe</pre><pre>Keywords</pre><pre>C Keywords</pre><pre>Operators</pre><pre>OPERATORS</pre><pre><assemblyIdentity processorArchitecture="*" version="5.1.0.0"><pre>type="win32" name="uedit32.exe"/></pre><pre>name="Microsoft.Windows.Common-Controls" version="6.0.0.0"</pre><pre>publicKeyToken="6595b64144ccf1df" language="*"</pre><pre>373333737</pre><pre>037??804</pre><pre>111|111\111</pre><pre>1115111</pre><pre>1112111</pre><pre>111#111211121112111</pre><pre>1118111</pre><pre>33333335</pre><pre>*,.88, #</pre><pre>***[***2</pre><pre>%%X</pre><b>win7.exe_316:</b><pre>.text</pre><pre>`.rdata</pre><pre>@.data</pre><pre>.rsrc</pre><pre>t(j.Xj\f</pre><pre>SSShtxB</pre><pre>^SShq</pre><pre>Please contact the application's support team for more information.</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- CRT not initialized</pre><pre>- floating point support not loaded</pre><pre>operator</pre><pre>GetProcessWindowStation</pre><pre>USER32.DLL</pre><pre>d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb</pre><pre>COMCTL32.dll</pre><pre>SHLWAPI.dll</pre><pre>GetCPInfo</pre><pre>KERNEL32.dll</pre><pre>USER32.dll</pre><pre>GDI32.dll</pre><pre>COMDLG32.dll</pre><pre>RegCloseKey</pre><pre>RegCreateKeyExW</pre><pre>RegOpenKeyExW</pre><pre>ADVAPI32.dll</pre><pre>SHFileOperationW</pre><pre>ShellExecuteExW</pre><pre>SHELL32.dll</pre><pre>ole32.dll</pre><pre>OLEAUT32.dll</pre><pre>GetConsoleOutputCP</pre><pre>WINRAR.SFX</pre><pre>C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\win7.exe</pre><pre>:(,4;<=>;?@</pre><pre>3,45657879</pre><pre>8888888888887</pre><pre>version="1.0.0.0"</pre><pre><requestedExecutionLevel level="asInvoker"><pre>name="Microsoft.Windows.Common-Controls"</pre><pre>version="6.0.0.0"</pre><pre>publicKeyToken="6595b64144ccf1df"</pre><pre><!--The ID below indicates application support for Windows Vista --></pre><pre><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}" /></pre><pre><!--The ID below indicates application support for Windows 7 --></pre><pre><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}" /></pre><pre><!--The ID below indicates application support for Windows 8 --></pre><pre><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}" /></pre><pre><asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings"></asmv3:windowsSettings></pre><pre></pre><pre>Maximum allowed array size (%u) is exceeded</pre><pre>%.*ls(%u)%ls</pre><pre>rtmp%d</pre><pre>Crypt32.dll</pre><pre>GETPASSWORD1</pre><pre>%s %s</pre><pre>%s %s %s</pre><pre>%s%s%d</pre><pre>Software\Microsoft\Windows\CurrentVersion</pre><pre>%s.%d.tmp</pre><pre>winrarsfxmappingfile.tmp</pre><pre>-el -s2 "-d%s" "-p%s" "-sp%s"</pre><pre>__tmp_rar_sfx_access_check_%u</pre><pre>sfxcmd</pre><pre>WaitForMultipleObjects error %d, GetLastError %d</pre><pre><head><meta http-equiv="content-type" content="text/html; charset=</pre><pre>Shell.Explorer</pre><pre>riched20.dll</pre><pre>riched32.dll</pre><pre>KERNEL32.DLL</pre><pre>mscoree.dll</pre><pre>*C:\DOCUME~1\" %CurrentUserName% /><pre>WScript execution time was exceeded on script "%1!ls!".</pre><pre>Script execution was terminated.1Could not locate automation class named "%1!ls!".</pre><pre>Could not connect object.'Could not create object named "%1!ls!".1Initialization of the Windows Script Host failed.6Can't find script engine "%2!ls!" for script "%1!ls!".!Can't change default script host.=An attempt at saving your settings via the //S option failed.(Loading script "%1!ls!" failed (%2!ls!).</pre><pre>Loading your settings failed.,Execution of the Windows Script Host failed.,Unexpected error of the Windows Script Host._Windows Script Host access is disabled on this machine. Contact your administrator for details.<Attempt to execute Windows Script Host while it is disabled><pre>Missing job name.*Unicode is not supported on this platform.</pre><pre><The Windows Script Host settings have been reset to default><pre>Command line options are saved.4The default script host is now set to "wscript.exe".4The default script host is now set to "cscript.exe".,Successful execution of Windows Script Host.3Successful remote execution of Windows Script Host.</pre><pre>Win32 Error 0x%X</pre><pre>Windows Script Host(Windows Script Host (debugging disabled)</pre><pre>Usage: WScript scriptname.extension [option...] [arguments...]</pre><pre>Use engine for executing script</pre><pre>Changes the default script host to CScript.exe</pre><pre>Changes the default script host to WScript.exe (default)</pre><pre>Prevent logo display: No banner will be shown at execution time</pre><pre>#WScript Error - Windows Script Host!Input Error - Windows Script HostlThis Unicode version of WScript will only execute under Windows NT.</pre><pre>%6!ls! WScript - Script Execution Error!Windows Script Host Remote Script/Remote script object can only be executed once. Unable to execute remote script.</pre></The></pre></Attempt></pre></head></pre></requestedExecutionLevel></pre></assemblyIdentity></pre></pre></_tZ></pre></ftp>