Analysis Date2013-11-28 22:17:44
MD5562fe7389349f495308c01cca6e213dd
SHA1606d18d5969e5cd52cb359b16a3a8b9c8bb7e35f

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 5d197867072a8a7dbc93fb7fe1d30815 sha1: a7a4f49290c112bdaf1c4f9eed8cad599b5da5f4 size: 585728
Section.itext md5: 5adf24752f798ab9772accbb37818d12 sha1: b53781b652612d346865319566e4e9cc7217ac27 size: 8192
Section.data md5: e8ca5e1c3214eeb0859759adab6df23f sha1: 80541abf45e176f4b6e36164e9f7ba1bcefbcefe size: 16384
Section.bss md5: ab893875d697a3145af5eed5309bee26 sha1: c90116149196cbf74ffb453ecb3b12945372ebfa size: 40960
Section.idata md5: aabfc3abed965270eb9511778f79a21d sha1: c9b2bdd511b68ba9b62f633cc0a3178def51317d size: 20480
Section.tls md5: 620f0b67a91f7f74151bc5be745b7110 sha1: 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d size: 4096
Section.rdata md5: 77dba4a07591547f47bb1aaecc66b031 sha1: bb831d223afe3c93109f46d0aa32658f7d1e1ec9 size: 4096
Section.reloc md5: 098122bfb64ee2d667c26c6209ab1908 sha1: d112157e6a8006414b5a194dde43a1e807817b29 size: 36864
Section.rsrc md5: 8d4df687155089b3c52d6d498fbf0731 sha1: 91becbf60d65fa5058efc754e0f0fa7f658af775 size: 24576
Timestamp2012-06-03 18:33:20
VersionLegalCopyright: Copyright (C) 1999
InternalName: MSRSAAPP
FileVersion: 1, 0, 0, 1
CompanyName: Microsoft Corp.
Comments: Remote Service Application
ProductName: Remote Service Application
ProductVersion: 4, 0, 0, 0
FileDescription: Remote Service Application
OriginalFilename: MSRSAAP.EXE
PEhasha8df2b923234593031341035c9f9497e82689440
AVavgWin32/DH{IAMPUIEHTxVRHFM}
AVclamavWIN.Trojan.DarkKomet
AVaviraBDS/Backdoor.Gen
AVmcafeeBackDoor.xa
AVmsseVirTool:Win32/DelfInject.gen!BI

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit ➝
C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\Administrator\Local Settings\Temp\MSDCSC\java.exe\\x00
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate ➝
C:\Documents and Settings\Administrator\Local Settings\Temp\MSDCSC\java.exe\\x00
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\MSDCSC\java.exe
Creates FilePIPE\lsarpc
Creates ProcessC:\Documents and Settings\Administrator\Local Settings\Temp\MSDCSC\java.exe

Process
↳ C:\Documents and Settings\Administrator\Local Settings\Temp\MSDCSC\java.exe

RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate ➝
C:\Documents and Settings\Administrator\Local Settings\Temp\MSDCSC\java.exe\\x00
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates ProcessC:\Program Files\Internet Explorer\iexplore.exe
Creates ProcessC:\WINDOWS\explorer.exe
Creates MutexDC_MUTEX-MS847EB

Process
↳ C:\Program Files\Internet Explorer\iexplore.exe

Process
↳ C:\WINDOWS\explorer.exe

Network Details:

Flows TCP192.168.1.1:1031 ➝ 174.127.99.183:307
Flows TCP192.168.1.1:1031 ➝ 174.127.99.183:307

Raw Pcap

Strings
==??
???????????????
0000
000000
040904b0
1, 0, 0, 1
!1Aa
#+3;CScs
4, 0, 0, 0
66006666
6666
9-+,
&Abort
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
A call to an OS function failed/Application is not licensed to use this feature
Access violation
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
*A control cannot have itself as its parent
&All
Alt+
Ancestor for '%s' not found
Application Error1Format '%s' invalid or incompatible with argument
April
Assertion failed
August	September
Bitmap image is not valid
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
BkSp
Cancel
Cannot assign a %s to a %s
Cannot create file "%s". %s
Cannot drag a form
Cannot hide an MDI Child Form)Cannot change Visible in OnShow or OnHide"Cannot make a visible window modal
Cannot open clipboard/Menu '%s' is already being used by another form
Cannot open file "%s". %s
Canvas does not allow drawing
Class %s not found
clock
combobox
Comments
CompanyName
Confirm
Control-C hit
Copyright (C) 1999
Ctrl+
DCDATA
DCOM not installed"Unable to find a Table of Contents
December
Division by zero
Docked control must have a name%Error removing control from dock tree
 - Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.
 - Dock zone not found
Down
DVCLAL
ebutton
edit
EEEEEEEE
Enter
Error
Error creating window class+Cannot focus a disabled or invisible window!Control '%s' has no parent window
Error reading %s%s%s: %s
Exception in safecall method
explorerbar
External exception %x
Failed to create key %s
Failed to get data for '%s'
Failed to set data for '%s'
February
File access denied
FileDescription
File not found
FileVersion
Floating point division by zero
Floating point overflow
Floating point underflow
Friday
FriendlyName
header
&Help
Home
Icon image is not valid
&Ignore
Information
Integer overflow Invalid floating point operation
Interface not supported
InternalName
Invalid argument
Invalid argument to date encode
Invalid argument to time encode
Invalid class typecast0Access violation at address %p. %s of address %p
Invalid clipboard format Clipboard does not support Icons
Invalid data type for '%s' List capacity out of bounds (%d)
Invalid filename
Invalid ImageList
Invalid ImageList Index)Failed to read ImageList data from stream(Failed to write ImageList data to stream$Error creating window device context
Invalid image size
Invalid numeric input
Invalid pixel format
Invalid pointer operation
Invalid property path
Invalid property value
Invalid stream format$''%s'' is not a valid component name
Invalid variant operation%Invalid variant operation (%s%.8x)
Invalid variant type
Invalid variant type conversion
I/O error %d
January
@jjj
jjjj
jjjjj
jjjjjj
July
June
Left
LegalCopyright
List count out of bounds (%d)
List index out of bounds (%d)+Out of memory while expanding memory stream
listview
March
menu
Menu index out of range
Menu inserted twice
Metafile is not valid
Microsoft Corp.
Monday
MSRSAAP.EXE
MSRSAAPP
No argument for format '%s'"Variant method calls not supported
No help found for context$No topic-based help system installedNUnable to retrieve a pointer to a running object registered with OLE for %s/%s
No help found for %s#No context-sensitive help installed
Not enough timers available@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active$%s not in a class registration group
N&o to All
November
Null Renderer
October
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
Operation not supported
OriginalFilename
Out of memory
Out of system resources
PACKAGEINFO
page
PgDn
PgUp
Privileged instruction(Exception %s in module %s at %p.
ProductName
ProductVersion
progress
Property is read-only
Property %s does not exist
Range check error
Read
Read beyond end of file	Disk full
rebar
Remote Service Application
Resource %s not found
&Retry
Right
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Sample Grabber
Saturday
Scan line index out of range!Cannot change the size of an icon
scrollbar
Shift+
'%s' is not a valid GUID value
!'%s' is not a valid integer value('%s' is not a valid floating point value!'%s' is not a valid date and time
Space
spin
%s%s
%s.Seek not implemented$Operation not allowed on sorted list
%s (%s, line %d)
Stack overflow
startpanel
status
Stream read error
Stream write error
StringFileInfo
Sub-menu is not in menu
Sunday
System Error.  Code: %d.
taskband
taskbar
Thread creation error: %s
Thread Error: %s (%d)
Thursday
toolbar
tooltip
Too many open files
trackbar
Translation
traynotify
treeview
Tuesday	Wednesday
Unable to create directory
Unexpected variant error
Unsupported clipboard format
VarFileInfo
Variant or safe array is locked
Variant overflow
Video Capture
VS_VERSION_INFO
Warning
window
Write$Error creating variant or safe array)Variant or safe array index out of bounds
&Yes
Yes to &All
<&<}<	=
>,?>?[?
                                                                
 !"#$%
-.-.-.-
; <$<(<,<
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
								
<+=0=\=
=(=0=_=~=
: :$:(:,:0:
0?0\0|0
0.0.0.0
0 0$0(0,000@0`0h0l0p0t0x0|0
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
0 0(0,0004080<0@0D0H0L0P0\0p0
0 0$0(0,0:0B0t0
0"0&0*0.02060:0>0B0F0J0N0R0V0Z0^0b0
0%0)0/060:0T0]0f0r0|0
0&0*0.0F0J0N0h0x0
0 000P0X0\0`0d0h0l0p0t0x0
0"0*020:0B0J0R0Z0b0j0r0z0
0$0,040<0D0L0T0\0d0l0t0|0
00050p0n2
0&0.060>0F0N0V0^0
0'0-090d0q0}0
0 0=0e0
000P0X0\0`0d0h0l0p0t0x0|0
0(0<0T0h0|0
0.050L0U0_0
0)070J0d0p1z1
0.080=0W0a0f0
0*0A0^0
00B0S0k0
0"0d0i0
"0@0S0e0
0.0U0a0{0
0%0Y0r0
0(1@1^1c1x1}1
0"111E1P1|2
0 1=1]1z1
0123456789abcdef
0123456789ABCDEF
0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ/*-+.=
0123456789ABCDEFGHJKLMNPQRSTUVWXYZ
0 141G1
0.1G1_1
0[1g1n1
0/1I1h1
0;1J1^172
0-1k1u1!2n2
0	1N1e1
0?1P1f1
0-1S1]1
0)2@2q2*3t3
,030b2
030Z0r0
040<0@0D0H0L0P0T0X0\0.12161:1>1B1F1J1N1R1V1Z1^1b1f1j1n1r1v1z1
'040Q0
= =$=(=,=0=4=8=<=
> >$>(>,>0>4>8><>@>D>b>{>
:$:(:,:0:4:8:<:@:D:d:}:
=$=(=,=0=4=8=<=@=D=H=L=P=d=
:$:,:0:4:8:<:@:D:H:L:P:T:b:
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
<(<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
: :$:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?f?n?
= =$=(=,=0=4=8=<=@=D=H=P=d=y=}=
> >$>(>,>0>4>8><>@>D>X>x>
? ?$?(?,?0?4?B?F?J?N?`?q?u?
= =$=(=,=0=4=D=H=L=P=T=h={=
=$=0=4=@=D=L=P=T=X=\=`=d=h=l=p=t=x=|=
=$=(=0=4=<=@=H=L=T=X=`=d=l=p=x=|=
050@0G0R0j0v0
;#;0;5;B;G;T;Y;f;k;x;};
080@0d0h0l0
<0<8<<<@<D<H<L<P<T<X<x<
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
: :(:0:8:@:H:P:X:`:h:p:x:
: :0:8:@:H:P:X:x:
091c1h1
< <0<A<E<V<^<
:0;a;v;
?#?+?0?;?A?X?
;0<b<f<j<n<r<v<z<
;0c0j0
:&:0:;:C:H:S:Y:d:
?"?*?0?C?h?y?
;%;0;C;Y;o;
!0D0g0
?(?,?0?G?K?O?h?x?
;0H0W0b0t0
<0<H<h<p<t<x<|<
; ;0;H;P;\;p;x;|;
?0?H?t?
0J0O0a0
0L0b0x0
0L1`1m1
0O0W0k0
'0P0u0
: :$:0:P:X:\:`:d:h:l:p:t:x:|:
0UntMiscFunc
0UntPasswordAndData
(0V0u0
0W1Q2\2
0x%.2x%.2x%.2x%.2x%.2x%.2x
?"?0?y?
;0<;<Z<
-[[[[1
-{{{{1
?'?1?@?~?
1"101>1
1"1)10171>1E1L1S1Z1a1h1o1v1}1
1!1,1=1|1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1x1|1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1x1
1 1$1(1,1014181L1l1t1x1|1
1 1$1(181X1`1d1h1l1p1t1x1|1
1,1<1\1d1h1l1p1t1x1|1
1"1*121:1B1J1R1Z1b1j1r1z1
1$1,141<1D1L1T1\1d1l1t1|1
1$1*191>1C1U1d1z1
1#1(1F1S1b1t1y1
1!1)1G1Y1
1&1<1H1_1
1,1<1L1T1X1\1`1d1h1l1p1t1x1|1
1.1@1P1o1
1"121G1m1
1/13171;1?1C1G1K1O1S1W1[1_1c1g1k1o1s1w1{1
1!141d1s1
1#141O1
1%1A1P1T1\1`1l1p1x1|1
1$1D1a1
1.1d1q1
1>1F1d1i1r1x1
1(1H1,7074787<7@7H8P8T8x8|8
1+1K1_1z1
1 1m1u1|1
"1@1X1x1
1)21292A2[2w2|2
1 212L2Q2c2h2w2|2
121P1d1
1@2_2{2
1"2?2_2|2
1%222@2N2Z2
1%2-2;2K2S2s2
1%2,2i2m2q2u2y2}2
1&2?2K2R2\2t2
1%2-2S2
1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ
127.0.0.1
127.0.0.1:1604
1[2g2n2
1:2I2^2m2
1;2N2V2f2r2r3z3
131;1?1U1]1z1
131B1Y1h1
131S1p1
14181<1@1D1H1L1P1T1
141L1l1t1x1|1
=!=%=)=-=1=5=9=
<!<%<)<-<1<5<9<=<A<E<I<M<Q<U<Y<]<a<e<i<|<
=!=%=)=-=1=5=9=@=_=j=x=
161K1W1_1i1n1s1x1}1
171C1J1\1l1x1
171X1y1
;!;&;1;9;?;\;g;p;~;
="=1=9=G=V=a=p=x=
1A1P1^1o1
;,<1<^<c<,>1>\>a>
>,>1>>>C>P>U>b>g>t>y>
1F2X2j2
1K2]2d2
<1<N<w<
1O1]1{1
>1R1y1
1SCDesktop
1SCMydocs
1Z2e2t2
<2=?=]=
;";*;2;:;
 2001, 2002 Mike Lischke
 2004, 2005 Pierre le Riche / Professional Software Development
213C3L3
2$2(20242<2@2H2L2T2X2`2d2l2p2x2|2
2$2,2024282<2@2D2H2L2d2
2 2$2(2,20242
2 2$2(2,2024282<2@2D2H2L2P2T2b2j2
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2z2
2 2$2(2,2024282<2J2R2h2t2
2 2$2(2,2024282<2L2\2`2p2
2 2$2(2,2024282H2h2p2t2x2|2
2(222@2}2
2"2&2*2.22262:2>2B2F2J2N2R2V2Z2^2b2f2j2n2r2v2z2~2
2"2&2*2.222A2~2
2"2*222:2B2J2R2Z2b2j2r2z2
2 2$2(2,2F2N2V2^2f2n2v2~2
2!2/2=2*373Q3_3m3{3
2 2*2/252:2@2E2K2R2X2]2c2h2n2u2{2
2$2,242<2D2L2T2\2d2l2t2|2
2&2+282D2R2g2t2y2
2 2$282H2X2`2d2h2l2p2t2x2|2
2)2;2J2^2r2
2$2;2K2v2
2+23272M2Y2o2
2#232O2_2{2
223>3N3c3n3|3
2%242C2o2t2
2$272C2M2T2^2e2o2|2
2)282G2V2
2&2B2P2T2p2x2|2
2$2H2N2_2
2*2h2u2
2<2I2r2
2.2N2k2
2@2O2f2
2	3 303G3W3o3
2	343]3
2$3*4h4r4}4
2+373>3D3V3g3n3
2%3B3b3
2?3d3D4\4
2:3F3[3
2&3F3l3
2[3g3r3|3
2_3k3r3|3
2+3M3`3g3t3
242 3Y3
2:4O4Z5
263D3b3
<"<&<*<.<2<6<:<><B<F<J<N<R<d<u<y<
="=&=*=.=2=6=:=>=B=F=J=N=R=V=Z=^=2?
;";&;*;.;2;6;:;>;B;F;J;N;R;V;Z;^;b;f;j;n;r;v;z;~;
272J2T2Y2s2}2
='=2=7=B=G=R=W=b=g=u=~=
283A3J3P3a3l3q3
<"<*<2<:<B<J<R<Z<b<j<r<z<
="=*=2=:=B=J=R=Z=b=j=r=z=
>">*>2>:>B>J>R>Z>b>j>r>z>
;";*;2;:;B;J;R;Z;b;j;r;z;
:":*:2:::B:J:R:Z:b:j:r:z:
?"?*?2?:?B?J?R?Z?b?j?r?z?
?2?D?b?u?
2F2P2X2]2
='=2=G=_=n=v=
>,>2>;>H>i>n>
>#>2>I>{>
2J2Z2e2j2u2z2
=+=2=J=Q=d=|=
2M2U2]2b2{2
>	?2?O?
_2o2g4w4
2S3W3[3_3c3g3k3o3s3w3{3
2UntDCSettingsReader
<2<><W<
2W2f2s2~2
%.2x-%.2x-%.2x-%.2x-%.2x-%.2x
=2=;=y=
=3><>}>
303@3L3P3X3\3`3d3h3l3p3t3x3|3
30O1g1x1
313;3@3Z3d3i3
324:4G4N4\4g4m4
#32770
 32 bit
3$3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3 3(30383@3H3P3X3`3h3p3x3
3"3*323:3B3J3R3Z3b3j3r3z3
3 3(3,3034383<3@3D3H3\3|3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3~3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3h3x3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3p3
3 3$3(3,3034383<3T3X3\3`3d3h3l3p3t3
3"3&3*3.32363:3>3B3F3J3N3R3V3Z3^3b3f3j3n3r3v3z3~3
3#3'3+3/33373;3?3C3
3(3-3:3?3L3Q3^3c3p3u3
3.333F3K3^3c3|3
3&3,3>3L3h3l3t3x3|3
3&3.363>3F3N3V3^3f3n3v3~3
3"3-373>3H3O3Y3`3j3o3t3y3
3$3,383<3@3D3L3P3T3X3\3`3d3h3l3p3t3x3|3
3,3<3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3$3@3f3z6
3 3@3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3!3/3J3_3i3n3
3$3,3O3[3
3-393I3a3
3%393M3a3u3
3*3a3o3~3
3!3A3o3z3
3-3c3h3
3$3G3j3
3;3G3S3]3g3q3|3
3!3L3X3b3
3<3M3j3
3<3N3t3
3)4]4q4
3"4:4R4j415U5
3$454C4`4n4
3/474=4I4V4t4
3$494`4u4
3$4B4n4
3$4C445B5Y5
3?4O4f4~5
3+4V4k4y4
354>4C4e4r4
3$585L5`5t5
<#<'<+</<3<7<;<?<C<G<K<O<S<l<
<#>'>+>/>3>7>;>?>C>G>K>O>S>W>[>_>c>g>k>o>s>w>
=#='=+=/=3=7=;=?=C=G=K=O=S=W=[=_=c=g=k=o=s=w=
:3<7<;<?<C<G<K<O<S<W<[<_<c<g<k<o<s<w<{<
383@3D3H3L3P3T3X3\3`3p3
383F3T3
<#<3<8<\<s<
39?9G9P9X9c9n9
=%=3=A=O=
3CommDlg
?!?3?E?Z?
3F3J3N3R3V3Z3^3b3f3j3n3r3v3z3~3
3F4v4S5
3J4\4{4
>$>3>;>K>
3k4w4\6
3M3^3o3
3Messages
3T3a3j3s3
>3>T>u>
40D0T0t0
4 404<4@4P4X4\4`4d4h4l4p4t4x4|4
4!434\4~4
4$4(4044484<4@4D4H4L4P4T4X4\4`4n4|4
4 4(40484@4H4P4X4`4h4p4x4
4"4)41464L4W4j4
4!4)414G4Z4d4i4
4"4*424:4B4J4R4Z4b4j4r4z4
4 4$4(4,4044484<4@4D4H4L4P4\4g4k4y4
4 4$4(4,4044484<4@4D4H4L4P4T4\4t4
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4|4
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4D6
4 4$4(4,4044484D4H4T4X4d4h4
4"4&4*4.42464:4>4L4Z4^4o4s4w4
4$4,444<4D4L4T4\4d4l4t4|4
4&4.464
4$4)464;4H4M4Z4_4l4q4~4
4#4:4J4a4
4%4=4L4i4
4*464a4
4$484@4D4H4L4P4T4X4\4`4d4r4z4
4&484V4s4
4'4A4O4]4i4n4
4-4A4U4
4"4E4P4w4
4+4I4a4|4
4/4L4l4
4*4L4t4
4,4L4T4X4\4`4d4h4l4p4t4
4+4N4{4
4/4T4q4
454X4u4
4+555[5w5
4	5.5d5
4"5:5V5
4+565V5
4+566T6r6D7N7b7i7u7
484@4D4H4L4P4T4X4\4`4d4h4l4p4|4
;,;4;8;<;@;D;H;L;P;T;b;j;?<o<
<,<4<8<<<@<D<H<L<P<T<h<
:,:4:8:<:@:D:H:L:P:T:X:\:
< <(<,<4<8<@<D<L<P<X<\<d<h<p<t<|<
:4;B;i;
4C4a4~4
?4?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
?$?,?4?<?D?L?T?\?d?l?t?|?
4l5?6X6
;(;4;@;L;X;d;p;|;
4M4^5x5
4Q4a4w4
;%<4<R<
4R4]4j4u4
?"?4?@?R?b?l?~?
$;4$w	f
%.4x:%.4x
=4= >y>
4Y5^5c5w5
4Z5h5s5
505>5J5X5
506;6A6N6Y6g6
508V8b8z8
515?5M5[5i5w5
51595=5S5[5_5x5
536;6a6
545<5@5D5H5L5P5T5X5\5`5t5
545@5D5T5\5`5d5h5l5p5t5x5|5
5!505?5N5]5l5{556
5#525A5P5_5f6u6
5!5&51575<5G5M5R5]5c5h5s5y5~5
5"5*525:5B5J5R5Z5b5~5
5 5%52575D5I5V5[5h5m5z5
5#5.535B5J5U5Z5e5l5
5 5+5=5
5$5(5,505<5@5L5P5T5X5\5`5
5#5'5+5/5
5 5$5(5,5054585<5@5D5H5L5W5c5j5t5~5
5 5$5(5,5<5\5d5h5l5p5t5x5|5
5%5-555=5E5M5u5
5%5;5C5H5O5e5{5
5.5:5D5N5W5a5n5{5
5 5@5H5L5P5T5X5\5`5d5h5z6
555R5r5
5$5[5u5
5(585D5H5P5T5X5\5`5d5h5l5p5t5x5|5
5 595E5X5{5
5-595I5Z5g5
5$5a6}6
5)5B5s7
5)5F5z5
5!5H5[5
5&5K5R5`5e5r5y5~5
5?5K5R5]5o5
5+5L5T5\5d5l5t5
5)5P5u5
5 606@6H6L6P6T6X6\6`6d6h6l6p6t6
565>5W5_5{5
5 6'6.6
5#6.6D6U6g6q6
5&6\6z6	7
5#6M6v6
5=6P6_6
576>6S6
595V5v5
;5;=;A;X;};
;(;5;B;O;_;d;l;
5K5`5x5
;'<5<P<Y<t<
:(:5:?:Q:W:d:q:{:
5Themes
6064686<6R6V6Z6^6y6}6
606I6l6
6074787<7@7D7H7`7l7p7
616>6}6
616K6t6
617L7q7
626A6O6i6
637%8p9
647#:1:
 64 bit
658K8t8
6&606?6K6S6b6l6q6}6
6+616I6V6^6g6u6
6.63686=6V6
6,64686<6@6D6H6L6P6T6X6\6`6d6h6
6$646D6L6P6T6X6\6`6d6h6l6p6t6x6|6
6#646m6
6$656?6
6 6$646C6G6X6x6
6 6$6(6,6064686
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
6"6&6*6.62666:6>6B6F6J6N6R6V6Z6^6b6f6j6n6r6v6z6~6
6 6$6(666[6b6:8
6#6)6.696?6D6O6U6Z6e6k6p6{6
6$6(686@6D6H6L6P6T6X6\6`6d6h6l6p6~6
6#6;6K6
6&6.6M6R6Z6p6
6*6?6N6c6r6
6&6@6R6
6"6*6R6|6
6)6?6Z6f6n6
667d7m7
6+686F6	7
6*6E6S6_6m6
6%6H6b6x6
6#6H6f6
6"6O6x6
6 6T6d6l6t6|6
6*6u6}6
676T6t6
6	7#7A7
6!7@7d7
6	7"7e7s7
6,7<7i7
6(787k7y7
6.7A7t7
6=7b7t7
6]7k7~7
686@6D6H6L6P6T6X6\6`6
686H6V6i6
696P6]6
697C7l7
6B6[6t6
<!<.<6<B<O<V<\<h<
6F7U7/8?8e9
>'>6>F>c>
?.?6?>?F?N?V?\?u?
6g7u7?8h8
6I7Q7W7c7s7
>*>6>@>K>O>`>d>h>
6L6W6d6o6
<6===^=[>m>
6N7Y7n7
6p7!8;8E8
6R7_7y7
:$;6;<;T;
6T6X6d6h6
70Q0_0m0{0
717<7G7R7
737>7E7P7h7~7
748J8R8Z8b8j8r8z8
757<7u7
767S7s7
7,707\7`7
7&707A7^7
7"717@7H7P7X7y7
7%747C7R7a7p7
7)757=7I7T7Z7f7p7v7
7(757W7
7.767O7W7z7
7$7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
7#7.737>7C7U7f7o7t7
7 7$7(7,7074787<7@7D7H7\7
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7
7 7$7(7,7074787<7@7D7H7L7P7T7X7h7x7|7
7#7-777=7F7S7X7b7h7p7
7"7@7H7L7`7h7
7!7&7K7T7g7r7}7
7!7^7x7
7'7E7r7
7?7G7e7m7
7?7N7`7h7m7s7x7
7<7X7h7x7
7&838M8
7+8^8{8
7 8<8C8
7[8_8c8g8k8o8|8
7)8b8%:
7%8B8b8
7]8e8o8u8
7)8g8}8
7@8L8Y8k8w8~8
7,8O8i8{8
797C7S7Y7m7w7
7A7P7s7
>#>->7>A>L>V>a>k>v>
7B8O8i8w8
<-<7<B<T<f<
7G8F9U9l9
<#<(<-<7<G<R<_<
7i8s8y8}8
7J7R7Z7b7j7r7z7
7nduWlanTypes
7u8|8(989U9n9
7UntInputsControls
7Y8X9l9
>8>[>~>
80211_OPEN
80211_SHARED_KEY
808T8F9
818<8L8\8d8h8l8p8t8x8|8
829?9Y9g9u9
878A8g8
8,848L8T8p8
8'858A8i8
8#868;8N8S8f8k8~8
8,878B8J8R8\8f8k8z8
8 8(80888@8H8P8X8`8h8p8x8
8$8,808G8K8O8m8u8
8"8,828:8H8M8Y8c8i8q8
8"8+858B8O8j8r8z8
8	8 8?8
8 8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
8 8$8(8,80848B8J8R8Z8b8j8r8z8
8 8$8(8,808F8N8V8^8f8n8v8~8
8%8*8/8:8?8D8O8\8n9
8"8,8<8g8
8+888G8W8
8'8=8E8b8j8n8
8 8,8L8
8;8E8g8v8
8&8F8i8&:r:
8-8G8~8
8(8O8^8
8,8O8W8t8
8$8V8Z8^8v8
8 9-9O9U9|9
8 9'9z9
8$9A9y9
8=9B9b9s;x;
8,9E9c9o9z9
8,9H9n9
8%9J9b9
8$9J9g9
8.9W9|9
>8?=?A?E?L?e?
:8:B:i:
8D9O9i9
:8:@:D:H:L:P:T:X:\:`:|:
?$?8?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
;(;8;D;H;P;T;X;\;`;d;h;l;p;t;x;|;
8DLLMemory
>8>G>[>
<"<+<8<=<H<Q<`<w<
:!;8;J;W;p;
:(:8:N:V:b:l:u:
=(=8=P=e=
{8+{p+{h
8R9n9s9
8Registry
8S:f:<;(=^>
8@=_=w=
? ?$?8?X?`?d?h?l?p?t?x?|?
:8:@:Z:
909<9U9]9w9
9!:0:o:
90:R:W:
929[9x9
92:>:g:
92:?:O:i:
939A9P9
97;a;{;
9(909K9f9
9 989<9P9p9x9|9
9$9,9094989<9@9D9H9L9P9T9h9
9 9(90989@9H9P9X9`9h9p9x9
9"9*929:9B9J9R9Z9b9j9r9
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9 9$9(9,9094989@9X9t9x9
9 9$9(9,90949D9d9l9p9t9x9|9
9 9$9(9,90949p9x9
9&9+9>9C9_9s9
9,9=9A9T9t9|9
9&9.9D9L9d9l9
9"9:9f9
9$9/9G9]9s9
9 9$9m9r:v:z:~:
9,9=9X9w9
9.9c9,:L:T:X:\:`:d:h:l:p:t:x:|:
9)9L9p9
9%9L9U9]9d9l9x9
9"9M9Y9h9
9A9v:f;
:9:A:E:]:e:
9A:H:s:|:
9.:?:b:|:
9.:B:J:`:x:
;9<C<Z<
9$:D:c:
9E:u:k<w<
9F9U9d9s9
9G9S9Z9e9w9
9G:P:b:
=9>I>`>p>
9-:J:`:h:v:
?"?9?k?
;);9;K;
9K9P9X9
9L:W:b:|:
9]:m:-;
>(>9>=>P>p>x>|>
9&:[:s:
;+>??a?
ACanvas
accept
Accept
ACCESS DENIED (x64)
[ACMIn
acmStreamClose
acmStreamConvert
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader
Action
Actiond
ActivateKeyboardLayout
ActiveControlP
ActiveOfflineKeylogger
ActiveOnlineKeylogger
ActiveOnlineKeyStrokes
ACTIVEREMOTESHELL
ActiveX
ActnList
AddContact
AddSize
ADDSOCKS5
ADirectShow9
AdjustTokenPrivileges
AdjustWindowRectEx
advapi32.dll
<==A=E=I=P=
|afxCodeHook
akBottom
akLeft
akRight
alBottom
alClient
alCustom
	AlignInfo
	Alignment
	AlignRect
AlignWithMargins<
alLeft
alNone
AlphaBlendT
AlphaBlendValue
alRight
>A>M>[>c>p>
_AMMediaTypeH
Anchors
AnimateWindow
ANSI_CHARSET
AntiVirusDisableNotify
An unexpected memory leak has occurred. 
>'>A>O>]>k>y>
:!:-:A:O:^:u:
Apartment
AppData
ARABIC_CHARSET
Archive
Array 
<A<R<Y<_<e<l<|<
>+?A?S?o?|?
attrib "
AttribArchive
AttribHidden
AttribNormal
AttribRO
AttribSystem
AttribTemp
aUntWIFI
	AutoCheck
AutoConnect4
AutoHotkeys
AutoLineReduction
	AutoMergeLm
	AutoPopupLm
AutoScroll
AutoSizeLm
AVICAP32.DLL
<$<B<_<
;B0uGj
backinfoes
BALTIC_CHARSET
=*>B>c>n>
bdLeftToRight
bdRightToLeft
bdRightToLeftNoAlign
bdRightToLeftReadingOnly
BDSUnthemedDesigner
BeginBufferedPaint
BeginPaint
Be Right Back
:(:B:F:T:
:(:@:b:g:n:
BiDiMode
BiDiMode(n
BiDiModet
biHelp
biMaximize
biMinimize
biSystemMenu
BitBlt
Bitmap
bListUnit
BlockContact
BlockInput
;Blu	3
Boolean
BorderIcons
BorderStyle
BorderWidth
#BOT#CloseServer
#BOT#OpenUrl
#BOT#Ping
#BOT#RunPrompt
#BOT#SvrUninstall
Bottom
#BOT#URLDownload
#BOT#URLUpdate
#BOT#VisitUrl
BP_^[]
:B;P;q;
;%<B<q<
 Broadcast adress : 
 Broadcasts : NO
 Broadcasts : YES
B.rsrc
Brush<
bsBDiagonal
bsClear
bsCross
bsDiagCross
bsDialog
bsFDiagonal
bsHorizontal
bsNone
bsSingle
bsSizeable
bsSizeToolWin
bsSolid
bsToolWindow
bsVertical
BTERRORDownload File| Error on downloading file check if you type the correct url...|
BTERRORUpdate from URL| Error on downloading file check if you type the correct url...|
BTERRORVisit URL|An exception occured in the thread|
BTMemoryGetProcAddress: DLL doesn't export anything
BTMemoryGetProcAddress: exported symbol not found
BTMemoryGetProcAddress: name <-> ordinal number don't match
BTMemoryGetProcAddress: no export table found
 BTMemoryLoadLibary: BuildImportTable failed
BTMemoryLoadLibary: Can't attach library
BTMemoryLoadLibary: dll dos header is not valid
BTMemoryLoadLibary: Get DLLEntyPoint failed
BTMemoryLoadLibary: IMAGE_NT_SIGNATURE is not valid
BTMemoryLoadLibary: VirtualAlloc failed
BTRESULTClose Server|close command receive, bye bye...|
BTRESULTDownload File|Mass Download : File Downloaded , Executing new one in temp dir...|
BTRESULTHTTP Flood|Http Flood task finished!|
BTRESULTMass Download|Downloading File...|
BTRESULTOpen URL|
BTRESULTPing|Respond [OK] for the ping !|
BTRESULTRun command|
BTRESULTSyn Flood|Syn task finished!|
BTRESULTUDP Flood|UDP Flood task finished!|
BTRESULTUninstall|uninstall command receive, bye bye...|
BTRESULTUpdate from URL|Update : File Downloaded , Executing new one in temp dir...|
BTRESULTVisit URL|finished to visit 
BufferedPaintSetAlpha
buffer error
BuildImportTable: can't load library: 
BuildImportTable: GetProcAddress failed
BuildImportTable: ReallocMemory failed
Button
BUTTON
ButtonSize
<==b=y=
ByRef 
 bytes: 
 Bytes
 Bytes (
:-;;;c;
:/;c;{;
caFree
caHide
CallHelp
CallNextHookEx
CallWindowProcA
#CAMEND
CAMERA
caMinimize
Cancel
CanClose
CanDock
caNone
capGetDriverDescriptionA
Caption
Caption<
Cardinal
Category
C ;C$s
Cd;Cpt
CD-ROM
< =C=f=
=C=G=K=O=S=W=[=_=c=g=k=
;[;_;c;h;
CHANGEDATE
[ChangeID]
ChangeWindowName
CharLowerA
CharLowerBuffA
CharNextA
Charset
CharToOemA
CharUpperBuffA
CHATNUDGE
CHATOUT
Ch;Ctt
Checkedt
CheckMenuItem
CHIDED
CHIDEF
CHINESEBIG5_CHARSET
;ChwpV
$:Cjtc
ckAttachToInterface	OleServer
ckNewInstance
ckRemote
ckRunningInstance
ckRunningOrNew
cl3DDkShadow
cl3DLight
clActiveBorder
clActiveCaption
clAppWorkSpace
clAqua
Classes
^Classes
clBackground
clBlack
clBlue
clBtnFace
clBtnHighlight
clBtnShadow
clBtnText
clCaptionText
clCream
clDefault
CleanMsConfig
ClearC
clFuchsia
clGradientActiveCaption
clGradientInactiveCaption
clGray
clGrayText
clGreen
clHighlight
clHighlightText
clHotLight
Client
ClientHeight<
ClientToScreen
ClientWidth
clInactiveBorder
clInactiveCaption
clInactiveCaptionText
clInfoBk
clInfoText
:: Clipboard Change : size = 
Clipbrd
clLime
clMaroon
clMedGray
clMenu
clMenuBar
clMenuHighlight
clMenuText
clMoneyGreen
clNavy
clNone
clOlive
CloseCD
CLOSECHAT
CloseClipboard
CloseHandle
CloseServer
CloseServiceHandle
closesocket
CloseThemeData
CloseW
clPurple
clScrollBar
CLSIDFromProgID
clSilver
clSkyBlue
;CLt_3
clTeal
clWebAliceBlue
clWebAntiqueWhite
clWebAquamarine
clWebAzure
clWebBeige
clWebBisque
clWebBlack
clWebBlanchedAlmond
clWebBlue
clWebBlueViolet
clWebBrown
clWebBurlywood
clWebCadetBlue
clWebChartreuse
clWebChocolate
clWebCoral
clWebCornFlowerBlue
clWebCornSilk
clWebCrimson
clWebCyan
clWebDarkBlue
clWebDarkCyan
clWebDarkGoldenRod
clWebDarkGray
clWebDarkgreen
clWebDarkKhaki
clWebDarkMagenta
clWebDarkOliveGreen
clWebDarkOrange
clWebDarkOrchid
clWebDarkRed
clWebDarkSalmon
clWebDarkSeaGreen
clWebDarkSlateBlue
clWebDarkSlategray
clWebDarkTurquoise
clWebDarkViolet
clWebDeepPink
clWebDeepskyBlue
clWebDimGray
clWebDodgerBlue
clWebFirebrick
clWebFloralWhite
clWebForestGreen
clWebGainsboro
clWebGhostWhite
clWebGold
clWebGoldenRod
clWebGray
clWebGreen
clWebGreenYellow
clWebHoneydew
clWebHotPink
clWebIndianRed
clWebIndigo
clWebIvory
clWebKhaki
clWebLavender
clWebLavenderBlush
clWebLawnGreen
clWebLemonChiffon
clWebLightBlue
clWebLightCoral
clWebLightCyan
clWebLightGoldenrodYellow
clWebLightGreen
clWebLightgrey
clWebLightPink
clWebLightSalmon
clWebLightSeaGreen
clWebLightSkyBlue
clWebLightSlateGray
clWebLightSteelBlue
clWebLightYellow
clWebLime
clWebLimeGreen
clWebLinen
clWebMagenta
clWebMaroon
clWebMediumAquamarine
clWebMediumBlue
clWebMediumOrchid
clWebMediumPurple
clWebMediumSeaGreen
clWebMediumSlateBlue
clWebMediumSpringGreen
clWebMediumTurquoise
clWebMediumVioletRed
clWebMidnightBlue
clWebMintcream
clWebMistyRose
clWebMoccasin
clWebNavajoWhite
clWebNavy
clWebOldLace
clWebOlive
clWebOliveDrab
clWebOrange
clWebOrangeRed
clWebOrchid
clWebPaleGoldenrod
clWebPaleGreen
clWebPaleTurquoise
clWebPaleVioletRed
clWebPapayaWhip
clWebPeachPuff
clWebPeru
clWebPink
clWebPlum
clWebPowderBlue
clWebPurple
clWebRed
clWebRosyBrown
clWebRoyalBlue
clWebSaddleBrown
clWebSalmon
clWebSandyBrown
clWebSeaGreen
clWebSeashell
clWebSienna
clWebSilver
clWebSkyBlue
clWebSlateBlue
clWebSlateGray
clWebSnow
clWebSpringGreen
clWebSteelBlue
clWebTan
clWebTeal
clWebThistle
clWebTomato
clWebTurquoise
clWebViolet
clWebWheat
clWebWhite
clWebWhiteSmoke
clWebYellow
clWebYellowGreen
clWhite
clWindow
clWindowFrame
clWindowText
clYellow
cmd.exe
cMessengerAPI_TLB
=C=n=~=
CoAddRefServerProcess
CoCreateInstance
CoCreateInstanceEx
CoInitialize
CoInitializeEx
Color<
Colorx,
COMBOPATH
comctl32.dll
CoMessengerU
command
Command
 Command successfully executed!|
CommCtrl
commdlg_FindReplace
commdlg_help
CompareStringA
COMSPEC
connect
ConnectKind
Constraints
Consts
CONTINUE_P
Contnrs
Control
CONTROLIO
ControlOfs%.8X%.8X
Control Panel\Desktop
Controls
&Controls
ControlService
ControlsX
CopyEnhMetaFileA
CopyFileA
CopyMode@.
CoReleaseServerProcess
CoResumeClassObjects
CoSuspendClassObjects
CoTaskMemFree
CoUninitialize
CoWaitForMultipleHandles
crAppStart
crArrow
crCross
crDefault
crDrag
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBitmap
CreateDIBSection
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileMappingA
CreateFontIndirectA
CreateHalftonePalette
CreateIcon
CreateMenu
CreateMutexA
CreatePalette
CreatePenIndirect
CreatePipe
CreatePopupMenu
CreateProcessA
CreateRemoteThread
CreateServiceA
CreateSolidBrush
CreateThread
CreateToolhelp32Snapshot
CreateWindowExA
crHandPoint
crHelp
crHourGlass
crHSplit
crIBeam
crMultiDrag
crNoDrop
crSize
crSizeAll
crSizeNESW
crSizeNS
crSizeNWSE
crSizeWE
crSQLWait
crUpArrow
crVSplit
CryptApi
Ctl3D(n
$;Ctt?
?"?C?\?u?
Currency
CurrentControlSet
CurrentVersion
Cursor
CutMultiFiles
CUxTheme
CVariants
C(_^[Y]
:@:d:~:
<	=D={=
=?>D>{>
>">(>D>\>|>
d0m0z0
D0Q0k0y0
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
`.data
data error
DATAFLUX
DataSize: 
 Days and 
DC2_USERS
DC3_FEXEC
DCDATA
_DCEntryPoint
dclogs\
DCMUTEX
DCPERSFWBP
DCSC_CHATNUDGE
DCSC_CHATRELOAD
DCSC_DESTROYCHAT
DCSC_GRABPWDS
DCSC_INITCHAT
DCSC_POSTDATA
D$(#D$8
%d.%d.%d.%d
< <.<D<d<l<p<t<x<|<
= =$=D=d=l=p=t=x=|=
; ;$;(;D;d;l;p;t;x;|;
DDOSHTTPFLOOD
DDOSSYNFLOOD
DDOSUDPFLOOD
Decimal
Default
DEFAULT_CHARSET
DefaultMonitor
DEFAULT MONITOR (DISPLAY)
DefFrameProcA
 deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly 
DefMDIChildProcA
DefWindowProcA
DelContact
DelDir
dElElElElElElElEl
DeleteCriticalSection
DeleteDC
DeleteEnhMetaFile
DeleteFileA
DeleteFiles
DELETELOG
DeleteMenu
DeleteObject
DeleteReg
DeleteService
DelMSKey
Delphi%.8X
Delphi Component
Delphi Picture
Description
DesignSize
DESKTHMB
DESKTOP
DESKTOPCAPTURE
DESKTOPSTOP
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
=<>@>D>H>L>
;<;@;D;H;L;P;
;,;<;\;d;h;l;p;t;x;|;
?<?D?H?L?P?T?X?\?`?d?|?
=D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
=<=D=H=L=P=T=X=\=`=d=t=
D$HPkD$TdPV
Dialogs
>#>(>->;>D>I>N>\>e>j>
DIRATTRIB
DirectDraw
DirectShow9
DirectShow9'
DirectShow9	
DirectSound
DisabledTaskManager
DisableNotifications
DisableRegistryTools
DisableStartButton
DisableTaskMgr
Dispatch
DispatchMessageA
DispatchMessageW
DISPCAMS
DISPLAY
DisplayName
DisplayVersion
dkDock
dkDrag
D$LPkD$XdPV
D$LPkD$XdPW
dmActiveForm
dmAutomatic
	dmDesktop	dmPrimary
dmMainForm
dmManual
DockClient
DockSiteL
DOSCAP
DosDateTimeToFileTime
Double
[DOWN]
DownloadFail
DOWNLOADFILE
DOWNLOADFOLDER
DownloadSuccess
:':/:<:D:Q:Y:
DragKind
DragMode
DragObject
DragQueryFileA
DrawEdge
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextA
DrawThemeBackground
DrawThemeEdge
DrawThemeIcon
DrawThemeParentBackground
DrawThemeText
drivers\etc\hosts
Drives
dsDragEnter
dsDragLeave
dsDragMove
dStdCtrls
DUntScreenThumb
dUntSearchThread
dUntSynFlood
DVCLAL
DwmApi
dwmapi.dll
DWMAPI.DLL
DwmEnableComposition
DwmExtendFrameIntoClientArea
DwmIsCompositionEnabled
DWNFOLDERRES
DXTypes
=)=E=\=
EAbort
EAbstractError
EAccessViolation
EActnList
EAssertionFailed
EASTEUROPE_CHARSET
:%:E:b:
EBitsError
EClassNotFound
EComponentError
	EControlC
EConvertError
EDITSVR
EDivByZero
EDTDATE
EDTPATH
E`E`E`E`E`E`E`E`
E`E`E`E`E`E`E`E`E`E`E`E`E`E`E`E`E
	EExternal
EExternalException
EFCreateError
EFilerError
EFileStreamError
EFOpenError|p
:(:,:=:E:_:g:
EHeapException
EHelpSystemException
EInOutErrorh
	EIntError
EIntfCastError
EIntOverflow
EInvalidCast
EInvalidGraphicH*
EInvalidGraphicOperation
EInvalidOp
EInvalidOperation
EInvalidPointer
=,>e>i>p>
:%:E:J:\:f:u:
;#<e<l<
EListError
EMathError
EMenuError
|$( EMFt
EmptyBin
EmptyClipboard
EmptyWorkingSet
Enabled
Enabled<
Enabled|
EnabledStartButton
EnabledT
EnabledTaskManager
EnableFirewall
EnableLUA
EnableMenuItem
EnableScrollBar
EnableThemeDialogTexture
EnableTheming
EnableWindow
EndBufferedPaint
EndPaint
EndReceive
ENDSNAP
EnterCriticalSection
EnumCalendarInfoA
EnumChildWindows
EnumClipboardFormats
EnumDeviceDrivers
EnumDisplayDevicesA
EnumDisplayMonitors
EnumProcesses
EnumProcessModules
EnumResourceNamesA
EnumServicesStatusA
EnumThreadWindows
EnumWindows
	EOleError
EOleException
EOleSysError
EOSError
EOutOfMemory
EOutOfResources
	EOverflow
EPrivilege
E$PVSj
EqualRect
ERangeError(
EReadError
ERegistryException
EResNotFound
ERR|Cannot listen to port, try another one..|
ERR|Socket error..|
ESafecallException
ESocketError
EStackOverflow
EStreamError
EStringListError
EThreadL
EUnderflow
EVariantArrayCreateError
EVariantArrayLockedError
EVariantBadIndexError
EVariantBadVarTypeError
EVariantDispatchError
EVariantError
EVariantInvalidArgError,
EVariantInvalidOpError
EVariantNotImplError
EVariantOutOfMemoryError
EVariantOverflowError
EVariantTypeCastError
EVariantUnexpectedError
EWriteError
	Exception
ExcludeClipRect
ExitProcess
ExitThread
ExitWindowsEx
ExplicitHeight
ExplicitLeft
ExplicitTop
ExplicitWidth
explorer.exe
Explorern
ExtCtrls
ExtTextOutA
EZeroDivide
>(?-?f?
<F<^<~<
FAKEMSG
FastMM Borland Edition 
>.>>>F>[>c>
FComObj
-ffff!
File Attrib : [ 
FILEATTRIB
FILEBOF
FILEEND
FILEEOF
FILEERR
file error
FILEM002
FILEM004
FILEM005
FILEM006
FILEM007
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FILETRANSFER
FillRect
FILM003
FinalizeSections: VirtualProtect failed
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FindWindowA
FindWindowExA
FirewallPolicy
?+?\?f?l?
FlatSB
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollProp
FlatSB_GetScrollRange
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
FlatSB_SetScrollRange
FlatSB_ShowScrollBar
FMGRSC
FormatMessageA
Forms]
Formsh
Formsl
FormsL
	FormStyle<
  FourCC: 
	fpDefault
fpFixed
FPUMaskValue
fpVariable
FrameRect
FreeLibrary
FreeResource
#FreezeIO
fsBold
f;sDt~f
fsItalic
fsMDIChild	fsMDIForm
fsNormal
fsStayOnTop
fsStrikeOut
fsUnderline
FTPFILEUPLOAD
FTPHOST
FTPPASS
FTPPORT
FtpPutFileA
FTPROOT
FTPSIZE
FTPUPLOADK
FTPUSER
@?:F?v
;/;<;F;W;`;
>->G>a>
GateWay
:GauQFKu
:.;G;b;
GB2312_CHARSET
gdi32.dll
GdiFlush
GdipAlloc
GDIPAPI
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipDisposeImage
GdipDrawImageRectI
GdipFree
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
gdiplus.dll
GdiplusShutdown
GdiplusStartup
,GDIPOBJ
GdipSaveImageToStream
GdipSetInterpolationMode
"GDIPUTIL
;Gdth3
GENCODE
GetACP
GetActiveObject
GetActivePorts
GetActiveWindow
GetAppList
GetBitmapBits
GetBrushOrgEx
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
#GetClipboardText
GetClipBox
GetClipF
GetClipT
GetCommandLineA
GetComputerNameA
GetCPInfo
GetCurrentHwProfileA
GetCurrentPositionEx
GetCurrentProcess
GetCurrentProcessId
GetCurrentThemeName
GetCurrentThread
GetCurrentThreadId
GetCursor
GetCursorPos
GetDateFormatA
GetDCEx
GetDCOrgEx
GetDesktopWindow
GetDeviceCaps
GetDeviceDriverBaseNameA
GetDeviceDriverBaseNameW
GetDeviceDriverFileNameA
GetDeviceDriverFileNameW
GetDIBColorTable
GetDIBits
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GETDRIVEINFO
GetDrives
GetDriveTypeA
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetEnvironmentVariableA
GetErrorInfo
GetExitCodeProcess
GetExitCodeThread
GetFileAttrib
GetFileAttributesA
GetFileSize
GetFileTime
GetFileType
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFocus
GetForegroundWindow
GetFullInfo
GetFullPathNameA
gethostbyaddr
gethostbyname
gethostname
GetHostsFile
GetIconInfo
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyboardState
GetKeyboardType
GetKeyNameTextA
GetKeyState
GetLastActivePopup
GetLastError
GetLastInputInfo
GetLocaleInfoA
GetLocalTime
GETLOGSHISTORY
GetLongPathNameA
GetMappedFileNameA
GetMappedFileNameW
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuState
GetMenuStringA
GetMessageA
GetMessagePos
GetMiniWind
GetModuleBaseNameA
GetModuleBaseNameW
GetModuleFileNameA
GetModuleFileNameExA
GetModuleFileNameExW
GetModuleHandleA
GetModuleInformation
GetMonitorInfo
GetMonitorInfoA
GetMonitorInfoW
GETMONITORS
GETMSNINFO
GetMsnList
GetObjectA
GetOfflineLogs
GetPaletteEntries
GetParent
GetPixel
GetPrivilege
GetProcAddress
GetProcessHeap
GetProcessMemoryInfo
GetPropA
GetRgnBox
#GetScreenSize
GetScrollInfo
GetScrollPos
GetScrollRange
getservbyname
GetServList
GetSidIdentifierAuthority
GetSidSubAuthority
GetSidSubAuthorityCount
GetSIN
getsockname
GetSrchDrives
GetStartupInfoA
GetStartUpList
GetStdHandle
GetStockObject
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemDirectoryA
GetSystemInfo
GetSystemMenu
GetSystemMetrics
GetSystemPaletteEntries
GetSystemPowerStatus
GetTempPathA
GetTextExtentPoint32A
GetTextMetricsA
GetThemeAppProperties
GetThemeBackgroundContentRect
GetThemeBackgroundRegion
GetThemeBool
GetThemeColor
GetThemeDocumentationProperty
GetThemeEnumValue
GetThemeFilename
GetThemeFont
GetThemeInt
GetThemeIntList
GetThemeMargins
GetThemeMetric
GetThemePartSize
GetThemePosition
GetThemePropertyOrigin
GetThemeRect
GetThemeString
GetThemeSysBool
GetThemeSysColor
GetThemeSysColorBrush
GetThemeSysFont
GetThemeSysInt
GetThemeSysSize
GetThemeSysString
GetThemeTextExtent
GetThemeTextMetrics
GetThreadContext
GetThreadLocale
GetTickCount
GetTokenInformation
GetTokenInformation error
GetTopWindow
GetTorrent
GetUserDefaultLangID
GetUserNameA
GetVersion
GetVersionExA
GetVolumeInformationA
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowOrgEx
GetWindowPlacement
GetWindowRect
GetWindowsDirectoryA
GetWindowTextA
GetWindowTextLengthA
GetWindowTheme
GetWindowThreadProcessId
GetWinMetaFileBits
=&=>=G=[=i=}=
GlassFrame.Bottom
GlassFrame.Enabled
GlassFrame.Left
GlassFrame.Right
GlassFrame.SheetOfGlass
GlassFrame.Top
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
<G<L<Q<
GMD5Api
GMMSystem
Graphics
+Graphics
GraphUtil
GREEK_CHARSET
GroupIndex(n
?*?G?X?~?
<.=?=h=
Handled
HANGEUL_CHARSET
HARDWARE\DESCRIPTION\System
HARDWARE\DESCRIPTION\System\CentralProcessor\0
><>H>\>d>h>l>p>t>x>|>
: :$:(:<:H:\:d:h:l:p:t:x:|:
Heap32First
Heap32ListFirst
Heap32ListNext
Heap32Next
HeapAlloc
HeapFree
HEBREW_CHARSET
Height
Height8
HelpContext
HelpContextt
HelpFile
:	HelpIntfs
:	HelpIntfs	
HelpKeyword(n
HelpType
>%>,>H>g>y>
HideClock
HideDeskTop
HideFolder
HideStartButton
HideSystemTrayIcons
HideTaskBar
HideTaskBarIcons
HintDn
HitTest
HitTestThemeBackground
HKNewExpandString
HKNewInt
;H<]<l<
; ;$;(;@;`;h;l;p;t;x;|;
HorzScrollBar
Host: 
Ht Ht.
	htKeyword	htContext
http://
HTTP://
HttpQueryInfoA
;~hu	3
hUntSendStream
=H=V=c=r=
HWINDSENDTEXT
=-=I=]=
IAMStreamConfig4
IAMVideoProcAmp4
IBaseFilter<#
ICaptureGraphBuilder24
IChangeNotifier4
ICustomHelpViewer4
.idata
Identifier
IDesignerHookp
IDesignerNotify4
	IDispatch4
IDockManager4
IDTYPE
IExtendedHelpViewer
IFilterGraph4
Ignore
IgnoreFontProperty
IGraphBuilder
IHelpSelector4
IHelpSystem4
Ih;J4u
IHV_END
IHV_START
IInterface
IKsPropertySet4
image/bmp
ImageHlp
ImageIndex
image/jpeg
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_Write
ImageList_WriteEx
Images
IMediaControld
IMediaEventd
IMediaEventEx
IMediaFilter
IMessenger2
IMessenger3
IMessengerd
ImgList
imm32.dll
ImmGetCompositionStringA
ImmGetContext
ImmGetConversionStatus
ImmIsIME
ImmNotifyIME
ImmReleaseContext
ImmSetCompositionFontA
ImmSetCompositionWindow
ImmSetConversionStatus
ImmSetOpenStatus
incompatible version
incorrect data check
incorrect header check
	Incrementh
inet_addr
inet_ntoa
 inflate 1.2.3 Copyright 1995-2005 Mark Adler 
InflateRect
InfluenceRect
INFNAN
infoes
IniFiles
InitializeCriticalSection
InitializeFlatSB
InitializeProcessForWsWatch
InsertMenuA
InsertMenuItemA
INSTALL
InstallHKEY
InstallLocation
InstallService
insufficient memory
Integer
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
InternetCloseHandle
InternetConnectA
\Internet Explorer\iexplore.exe
InternetOpenA
InternetOpenUrlA
InternetReadFile
IntersectClipRect
IntersectRect
Interval
InvalidateRect
invalid bit length repeat
invalid block type
invalid code lengths set
invalid distance code
invalid distances set
invalid distance too far back
invalid literal/length code
invalid literal/lengths set
invalid stored block lengths
invalid window size
Invisible
ioctlsocket
IOleForm4
 IP : 
IPersist4
 IP Mask : 
%IPPORTSCAN
>">I>s>
ISampleGrabber4
ISampleGrabberCB4
IsAppThemed
IsBadReadPtr
IsChild
IsClipboardFormatAvailable
IsControl
IsDialogMessageA
IsDialogMessageW
IsEqualGUID
IsIconic
 is now open!|
IsRectEmpty
IsThemeActive
IsThemeBackgroundPartiallyTransparent
IsThemeDialogTextureEnabled
IsThemePartDefined
IStringsAdapter4
IsValidSid
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsWow64Process
IsZoomed
`.itext
iUntProcess
IUntSocks5
IVideoWindowd
=I=V=w=
>I>W>a>m>
I wasn't able to open the hosts file, maybe because UAC is enabled in remote computer!
;#;:;I;Y;f;l;
;*;=;J;g;p;
JOHAB_CHARSET
=!=J=S=
Jt'Jt5
>J?\?y?
<.=`=k=
=">)>@>k>
KACMConvertor
KbdLayerDescriptor
#KCMDDC51#-
kD$PdP
kD$TdP
#KEEPALIVE#
kernel32
kernel32.dll
keybd_event
KeylogOn
KEYNAME
KeyPreview
KILLPID
KillProcess
KILLREMOTESHELL
KillSProcess
KillTimer
;=<K<j=c>u>
K,;K$u
K\;K|wY
:!:_:k:r:|:
;=<K<]<s<z<
= =K=t=
Kt;K|sy
= =&=.=@=K=V=k=r=x=
KWindows
>]>k>x>
~KxI[)
:!:L:]:
>(>:>L>^>9?W?
LanErr
LanList
Layout File
layout text
=!=+===L=d=
LeaveCriticalSection
[LEFT]
<,<L<i<
Limited
LineTo
ListCam
listen
L$(#L$<
LoadBitmapA
LoadCursorA
LoadIconA
LoadKeyboardLayoutA
LoadLibraryA
LoadLibraryExA
LoadResource
LoadStringA
LocalAlloc
Local drive (default)
LocalFileTimeToFileTime
location
LockComp
LockResource
LockWorkStation
LogOffComp
LongWord
LookupAccountSidA
LookupPrivilegeDisplayNameA
LookupPrivilegeNameA
LookupPrivilegeValueA
 Loopback interface
?(?-?:???L?Q?^?c?p?u?
lstrcpyA
lstrcpynA
lstrlenA
l$()t$,
L$%#T$
>,>L>T>X>\>`>d>h>l>p>t>
>,>L>T>X>\>`>d>h>l>p>t>x>|>
</=<=L=u=
<$<L<W<^<i<
?+?L?X?p?|?
maActivate
maActivateAndEat
maAutomatic
maBottomToTop
MAC_CHARSET
	maDefault
Magellan MSWHEEL
MAINICON
maLeftToRight
maManual
maNoActivate
maNoActivateAndEat
maNone
maParent
MapViewOfFile
MapVirtualKeyA
MapWindowPoints
Margin
Margins
maRightToLeft
MaskBlt
maTopToBottom
	MaxHeight
Maximize
Maximized
MaxWidth
mbBarBreak
mbBreak
mbLeft
mbMiddle
mbNone
mbRight
mciSendStringA
=MD5Core
Md5GetFromFile
md5result
MDICLIENT
m/d/yy
memory allocation failed!
MenuAnimation
MenusL6
MessageBoxA
MessengerAPI_TLB
MessengerAPI_TLB"
Microsoft
	MinHeight
Minimize
Minimized
MinWidth
MJPGte
MkeDir
>M?k?u?
mmmm d, yyyy
:mm:ss
Mode<+
Module32First
Module32FirstW
Module32Next
Module32NextW
MODULES
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MONSIZE
MONSIZE0x0x0x0
MouseActivate
mouse_event
MousePos
MouseZ
MoveFileA
MoveFold
MoveToEx
Mozilla
msacm32.dll
MSGBOX
MSGCORE
MSGICON
MSGTITLE
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
MSH_SCROLL_LINES_MSG
MSH_WHEELSUPPORT_MSG
MSNAWAY
MSNBUSY
MSNINFO
MSNOFFINE
MSNONLINE
MSNSIGNOUT
MS Sans Serif
MS Shell Dlg 2
MSWHEEL_ROLLMSG
MulDiv
MULTIBIND
MultiByteToWideChar
MultiMon
MULTIPLUGS
mUntSendDataFluxThread
myappname
=%=@=n=
nduCType
nduEapTypes
nduL2cmn
:nduNtDDNdis
nduWinDot11
=nduWinNT
nduWlanAPI
need dictionary
netapi32.dll
NetApiBufferFree
Netbios
NETDATA
NETDRV
NetShareEnum
NetShareGetInfo
net start uxsms
netstat -a -n -o
net stop uxsms
Network
 Network interface
Neutral
NewFrame
	NewHeight
\newl\
NewLeft
	NewTarget
NewTop
NewWidth
: ;?;N;];l;
NoControlPanel
Normal
Normal/Unactive
Not Available
notepad
notepad.exe
NoToAll
=n=r=v=z=
ntdll.dll
Nt Nt,
NtQuerySystemInformation
NtUnmapViewOfSection
[NUM_LOCK]
NUntPluginsData
:><N<Y<_<h<l<
> >O>\>
ObjectMenuItem
:!;*;O;[;b;t;
odComboBoxEdit
odDisabled	odChecked	odFocused	odDefault
odGrayed
odHotLight
odInactive	odNoAccel
odNoFocusRect
odReserved1
odReserved2
odSelected
OEM_CHARSET
OemToCharA
Offline
OFFLINEK
OffsetRect
< of the Normal
> of the Normal
:/:;:O:i:
OK|Successfully started..|
OldCreateOrder
ole32.dll
oleaut32.dll
OleConst
OleMainThreadWndClass
OleServer
	OleServer
OleStr
OleVariant
OnActivateD
OnAdvancedDrawItem
OnAlignInsertBefore
OnAlignPosition
OnAlignPosition$
OnCanResize
OnChange
OnClick,
OnClick,,
OnClose
OnClosep
OnCloseQuery
OnConstrainedResize 
OnContextPopup
OnCreate
OnDblClick
OnDeactivate
	OnDestroy
OnDockDropP
OnDockOver,
OnDragDrop
OnDragOver
OnDrawItem
	OnEndDock
OnGetSiteInfo
OnHelp
OnHide
	OnKeyDownh
OnKeyPress
OnKeyUpd
Online
ONLINESTROKES
ONLINESTROKES\newl\:: 
OnMeasureItem
OnMouseActivate
OnMouseDown
OnMouseEnter
OnMouseLeave
OnMouseMove
	OnMouseUp$
OnMouseWheel
OnMouseWheelDown
OnMouseWheelUp
OnPaint
OnPopup
OnResize
OnShortCut
OnShowL
OnShowSV
OnStartDock
On The Phone
OnTimerSV
OnUnDock
OpenCD
OpenClipboard
OpenProcess
OpenProcessToken
OpenProcessToken error
OpenSCManagerA
OpenServiceA
OpenThemeData
OpenThreadToken
OpenWebPage
?-?O?r?
Orientationd*
:O:";=;S;f;
:O;S;W;[;_;c;g;k;
>*>O>t>
Out to lunch
out.txt
	OwnerDraw
>.>?>P>
paCenter
Padding|4
paLeft
Parameters
ParentBiDiMode
ParentBiDiMode<
ParentColor<
ParentFont@.
paRight
PASSWORD
PastMultiVM
PatBlt
PAUSED
PAUSED_P
=,=>=P=b=t=
PeekMessageA
PeekMessageW
PeekNamedPipe
PERSINST
:	;>;P;g;
ping 127.0.0.1 -n 4 > NUL && "
_PinInfo
Pitch<
PixelsPerInch
PixelsPerInchh7
PlayEnhMetaFile
PlaySoundA
PLUGIN
pmAuto
pmBlack
pmCopy	pmNotCopy
pmExplicit
pmMaskNotPen
pmMaskPenNot
pmMask	pmNotMask
pmMerge
pmMergeNotPen
pmMergePenNot
pmNone
pmNotMerge
pmNotXor
pmWhite
poDefaultPosOnly
poDefaultSizeOnly
poDesigned	poDefault
poDesktopCenter
Policies
poMainFormCenter
poNone
poOwnerFormCenter
poPrintToFit
poProportional
	PopupMenuL
	PopupMode
PopupParent
PortScanAdd
poScreenCenter
Position
Position<
POST /index.php/1.0
PostMessageA
PostQuitMessage
PowerOff
PQRhD*
PREVIEWF
Printers
PrintScale
PrintText
PROCESS
Process32First
Process32FirstW
Process32Next
Process32NextW
ProgIDFromCLSID
Progman
psAlternate
PSAPI.dll
psClear
psDash
psDashDotDot
psDot	psDashDot
psInsideFrame
psSolid
P?:S?u
psUserStyle
PtInRect
Publisher
:P:U:t:
P\YZ_^
Q<]_^[
qComConst
;";Q;[;d;
QQQQQQQQS3
QQQQQQQQSV
QQQQQQQQSVW
QQQQQQQQSVW3
QQQQQQQS
QQQQQQQSV
QQQQQQQSVW
QQQQQQSV
QQQQQQSVW
QQQQQQSVW3
QQQQQSVW
QQQQS3
QQQQSV
QQQQSVW
QTypInfo
QueryPerformanceCounter
QueryServiceStatus
QueryWorkingSet
QUICKUP
:Q;U;Y;];a;e;i;m;q;u;y;};
:Q:U:Y:]:d:
;,;Q;x;
?>?R?{?
R0_^[]
R0]_^[
R0Z_^[
:%:R:a:
	RadioItem|n
RaiseException
R ;C0|
R,;C4}!
.rdata
RDPCAPTURE
ReadFile
Read-Only
ReadProcessMemory
RealizePalette
Real Time
ReBarWindow32
Rebuild
RectVisible
Redirection
RedrawWindow
RefreshClipboard
RefreshList
REFRESHLOGS
REFRESHMODS
REFRESHPROC
RefreshSIN
REFRESHWIFI
REG_BINARY
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
REG_DWORD
RegEnumKeyExA
RegEnumValueA
REG_EXPAND_SZ
RegFlushKey
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
RegOpenKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegStr
REG_SZ
RELATEDCMD
ReleaseCapture
ReleaseDC
@.reloc
RemoteMachineName
#RemoteScreenSize
Removable
RemoveMenu
RemovePropA
RemoveServices
RenameFile
RenAppReg
ResetEvent
Resize
RESMON
RestartComp
RestartServer
RestartSocket
RestoreDC
ResultAttrib
ResumeThread
;,<R<]<e<t<
r*-H420to-
RHelpIntfs
Right<
[RIGHT]
rmdir "
RPCLanScan
R@PSWV
RSNA_PSK
"RTLConsts
RtlUnwind
RUNNING
RunPrompt
RunSelectedAsAdmin
RunSelectedHidden
RunSelectedShow
Runtime error     at 00000000
RUntRC4
RUSSIAN_CHARSET
<#<'<+</<R=V=Z=^=b=f=j=n=N?W?o?
>R?_?y?
R\Z_^[
S`]_^[
S$_^[]
S	_^[]
S0_^[]
;s0t=;
S8_^[]
sActiveX
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SAPI.SpVoice
SaveDC
Scaled
%s, ClassID: %s
ScreenSaver
ScreenSnap
ScreenToClient
ScrollWindow
Sd]_^[
SEARCHFILES
Security Center
select
Selected
SelectObject
SelectPalette
#SendClip
Sender
SendFilesToTrash
SendMessageA
SendMessageW
#SendTaskMgr
sendto
SendYourClipboard
server
SERVER
Services
SeShutdownPrivilege
SetActiveWindow
SetBkColor
SetBkMode
SetBrushOrgEx
SetCapture
Set cdaudio door closed wait
set cdAudio door open
SetClassLongA
SetClipboardData
SetCursor
SetCursorPos
SetDIBColorTable
SetEndOfFile
SetEnhMetaFileBits
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
SetFileTime
SetFocus
SetForegroundWindow
SetLastError
SetLayeredWindowAttributes
SetMenu
SetMenuItemInfoA
SetParent
SetPixel
SetPropA
SetRect
SetRectEmpty
SetROP2
SetScrollInfo
SetScrollPos
SetScrollRange
SetStretchBltMode
SetTextColor
SetThemeAppProperties
SetThreadContext
SetThreadLocale
SetThreadPriority
SetTimer
SetViewportOrgEx
SetWindowLongA
SetWindowLongW
SetWindowOrgEx
SetWindowPlacement
SetWindowPos
SetWindowsHookExA
SetWindowTextA
SetWindowTheme
SetWinMetaFileBits
" +s +h
SharedAccess
SheetOfGlass
shell32.dll
SHELL32.DLL
*ShellAPI
ShellExecuteA
ShellExecuteExA
Shell_traywnd
Shell_TrayWnd
SHEmptyRecycleBinA
SHFileOperationA
SHFolder.dll
SHGetFileInfoA
SHGetFolderPathA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHIFTJIS_CHARSET
(ShlObj
ShortCut
%ShortCut#
ShortCutText
ShortInt
ShowClock
ShowDeskTop
ShowFolder
ShowHint<
ShowOwnedPopups
ShowScrollBar
ShowStartButton
ShowSystemTrayIcons
ShowTaskBar
ShowTaskBarIcons
Show/Unactive
ShowWindow
Sh#S0f
shutdown
Shutdown
Single
Size$+
SizeofResource
)sl)sh)kX
Smallint
Smooth<
SnapBuffer
[SNAPSHOT]
socket
Sockets
SOCKS5CLOSE
SOCKS5FLUSH
SOCKS5STATUS
Software
Software\Borland\Delphi\Locales
SOFTWARE\Borland\Delphi\RTL
Software\Borland\Locales
SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder
SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\
SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg
SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\
\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Software\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
Software\Microsoft\Windows NT\CurrentVersion\Winlogon
SOUNDCAPTURE
SOUNDSTOP
Source
Source	TMenuItem
\space\
SpeakerVoice
%s, ProgID: "%s"
" /s /q
SrchDrives
%s (%s)
ssCtrl
ssDouble
ssFlat
ssHotTrack
ssLeft
ssMiddle
	ssRegular
ssRight
S(;S$s
ssShift
StandardProfile
STARTED
StartServiceA
StartServices
 Status : DOWN
 Status : UP
StdActns
StdVCL
StJ)Sp
STOPED
STOPED_P
STOPSEARCH
StopServices
stream end
stream error
StretchBlt
string
String
StringFromCLSID
Strings
Style<
SubMenuImages
SUBMREMOTESHELL
SuccesProc
) successfully dump in 
SvrUninstall
SVWUhzN
sx;P`u
S`_^[Y]
S$_^[Y]
SYMBOL_CHARSET
SyncObjs
SysAllocStringLen
SysConst
SYSERRCannot create the output file!
SYSERRCannot open remote process for reading..
SYSERRNot a valid range set!
SysFreeString
SYSINFO
SYSINFORemote process (
SysInit
SysListView32
SysReAllocStringLen
System
SYSTEM
SystemBiosDate
\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
System\CurrentControlSet\Services\
systeminfo
SystemParametersInfoA
SysUtils
S`Z]_^[
<*t"<0r=<9w9i
T0X0{0
t9;wlt4
;T<a<(=7=
TACMConvertor
TACMIn
TActionLinkSV
TAdvancedMenuDrawItemEvent
tagEXCEPINFO 
tagMULTI_QI
Tahoma
TAlign
TAlignInfo
TAlignInsertBeforeEvent
TAlignPositionEvent
TAnchorKind
TAnchors
TApplication
Target
TaskbarCreated
taskmgr
taskmgr.exe
TAsyncTask
TBaseDragControlObject
TBaseSocket
TBaseSocket,
TBasicAction
TBasicAction|
TBasicActionLink
	TBiDiMode
TBitmap
TBitmapCanvas
TBitmapImage
tbLeftButton
TBorderIcon
TBorderIcons
TBorderWidth
tbRightButton
TBrush
TBrushResourceManager
TBrushStyle
TByteArray
t';C8u
TCanResizeEvent
TCanvas
TCanvasx1
TCaption
TCaptureWebcam
TChangeLink
tcHt(Ht3
TClassFinder
TClipboard
TClipboardFormats
TClipboardh
TCloseAction
TCloseEvent
TCloseQueryEvent
TColor
TCommonDialog
TComponent
TComponentNamet
TConnectionHandler
TConnectKind
TConstrainedResizeEvent
TConstraintSize
TContainedAction
TContainedActionP
TContextPopupEvent
TControl
TControlActionLink
TControlCanvas
TControlScrollBar
TControlScrollBarl
TCriticalSection
TCursor
TCustomAction
TCustomActionList
TCustomActionListt
TCustomActionp
TCustomControl
TCustomControlAction
TCustomDockForm
TCustomDockForm<
TCustomForm
TCustomImageList
TCustomIpClient
TCustomIpClientt
TCustomMemoryStream
TCustomVariantType
TDataThread
	TDCWebCam
TDefaultMonitor
TDockDropEvent
TDockOverEvent
	TDockTree
	TDockZone
TDownloaderThreadU
TDragControlObject
TDragControlObjectEx
TDragDockObject
TDragDockObject|
TDragDockObjectEx
TDragDropEvent
	TDragKind
	TDragMode
TDragObject
TDragObject,
TDragOverEvent
TDragState
t$;^dt
TDumpThread
TEndDragEvent
TerminateProcess
	TErrorRec
TEvent
TExceptRec
TextHeight
	TFileName
TFiler
TFileStream
TFontCharset
TFontD.
	TFontName
TFontPitch
TFontStyle
TFontStyles
TFormBorderStyle
TFormP
TFormStyle
t"+G4PWV
TGdiplusBase
TGetSiteInfoEvent
TGlassFrame
TGlassFramep
	TGPBitmap
TGPGraphicsRP
TGPImage
TGraphic
TGraphicsObject@-
TGraphicsObjecth-
THAI_CHARSET
THandleObject
THandleStream
THelpContext
THelpEvent
THelpManager
	THelpType
THelpViewerNode
Theme manager 
The sizes of unexpected leaked medium and large blocks are: 
The unexpected small block leaks are:
THintAction
THintAction4
	THintInfo@
THintWindow
THintWindowD
This program must be run under Win32
Thread32First
Thread32Next
t%HtIHtm
t:HtVH
	ThumbSize
:[;T<I>
TIconImage
TIconL8
TIdentMapEntry
TImageIndex
TImeName
 Times.
TInputsControl
	TIntConst
TInterfacedObject
TInterfacedPersistent
TInterfacedPersistentdv
	TIpSocket
	TIpSocket,
T$$J;D$ v0
tjHt+Ht7
t%Jt?Jt[
TKeepAlive
	TKeyEvent
TKeyPressEvent
???T?l?
TlHelp32
TlsGetValue
TlsSetValue
	TMainMenu
	TMainMenu44
TMargins
TMarginSize
TMemoryStream
TMenu83
TMenuActionLink
TMenuAnimation
TMenuAnimations
TMenuAutoFlag
TMenuBreak
TMenuChangeEvent
TMenuDrawItemEvent
	TMenuItem
TMenuItemAutoFlag
TMenuItemStack
TMenuMeasureItemEvent
	TMetafile
TMetafileImage
TModuleInfo
TMonitor
TMouse
TMouseActivate
TMouseActivateEvent
TMouseButton
TMouseEvent
TMouseMoveEvent
TMouseWheelEvent
TMouseWheelUpDownEvent
tmpprint.txt
tmp.txt
$TMultiReadExclusiveWriteSynchronizer
TNotifyEvent
t;NtGNtSNt_
ToAscii
TObject
TObject	
ToGetClipT
TOleServer
TOleServerP
Toolhelp32ReadProcessMemory
too many length or distance symbols
TOrderedList
*.torrent
TOwnerDrawState
TPadding
TPatternManagerSV
TPenMode
	TPenStyle
TPersistent
TPersistenttu
TPicture
TPictureT4
TPlugThread
TPoint
TPopupAlignment
TPopupFormArray
TPopupList
TPopupMenu
TPopupMode
TPopupWndArray
	TPosition
TPrintScale
TPropFixup
TPropIntfFixup
TPUtilWindow
TQuickTransfer
TraceResult
TraceRoute
TrackButton
Tracking
_TrackMouseEvent
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
TransparentColor
TransparentColorValue
TrayClockWClass
TrayNotifyWnd
TRDPThread
TReader
TReceiveDataFlux
TReceiveFileThread
	TRegGroup
TRegGroups
	TRegistryS
TRemoteShell
TResourceManager
TResourceStream
TSampleGrabberCB
TSampleGrabberCBImpl
TSampleGrabberCBInt
TScanRange
TScreen
TScreen|
TScreenCapture
TScreenThumb
TScrollBarInc
TScrollBarStyle
TScrollingWinControl
TSearchRec`
TSearchThreadU
TSendDataFluxThread
TSendFileThreadU
TServerEventDispatch
TServerReaderU
TSharedImage
TSHFolder
TShiftState
	TShortCut
TShortCutEvent
TShortCutList
TShortCutListT
	TSiteList
TSizeConstraints
TSizeConstraintsX
TSocketHost
TSocketPort
TSocks5Config
TSoundCapture
TStack
TStartDockEvent
TStream
TStreamAdapter
TStringItem
TStringList
TStringList0y
TStrings
TStringsPw
TStringStream
TSynchroObject
TThemeServices
TThread`
TThreadList u
TThreadLocalCounter
TTimer
TTrackButton
t:;t$,v
:T;t;x;|;
TUnDockEvent
TUnitHashArray
TUploadFTP
TURKISH_CHARSET
`;t$ v?
;t$,v:
TVariantArray
TVideoImage
TVideoSample
TVisitThread
tVSVWU
TWinControl
TWinControlActionLink
TWindowState
TWMKey
>$>T>Y>
ty;s@u
u*;~8u
>U>g>l>
<)<?<U<k<
UnActiveOfflineKeylogger
UnActiveOnlineKeylogger
UnActiveOnlineKeyStrokes
UnBlockContact
Unexpected Memory Leak
#UnFreezeIO
UnhandledExceptionFilter
UnhookWindowsHookEx
UninitializeFlatSB
UninstallAPP
UninstallString
unknow
Unknow
UNKNOW
Unknown
Unknown compression
unknown compression method
UnmapViewOfFile
UnrealizeObject
UnregisterClassA
UntActivePorts
UntAntiSB
+UntAsyncTask
(UntBot
UntCaptureWebcam
UntControlKey
UntCore
UntCPU
UntDisableAero
)UntDownloaderThread
UntFTP
UntFun
untFunctions
UntFWB
 UntFWB
UntInfections
"UntIPUtils
UntKeepAlive
UntKeylogger
UntMain
UntMainConnectionThread
UntMClipboard
UntMsConfig
UntMSN
UntNetShareLister
UntProcess
UntQuickTransferThread
UntRC4
UntRDPThread
UntReceiveDataFluxThread
UntReceiveFileThread
UntRegEdit
UntRemoteDesktop
)UntRemoteShell
UntRemoteUtils
UntResizePic
UntRootKit
UntRPCScan
+UntScreenCapture
UntSendFileThread
UntServerReader
UntServices
UntSinInfo
UntSoundCaptureThread
untstartup
_UntUDPFlood
(UntUploadFTPThread
UntVars
UntWebCam
UntWindowManager
UPANDEXEC
UPDATE
UpdatesDisableNotify
UpdateWindow
UPFLUX
UPLOADEXEC
UPLOADFILE
URLDOWNLOADTOFILE
URLDownloadToFileA
UrlMon
URLMON.DLL
URLUpdate
UseDockManagerH
user32
USER32
user32.dll
User32.dll
USER32.DLL
Userinit
UserInit
\uTorrent\
UTypes
>U>_>v>
uxtheme.dll
VarAdd
VarAnd
VarBoolFromStr
VarBstrFromBool
VarBstrFromCy
VarBstrFromDate
VarCmp
VarCyFromStr
VarDateFromStr
VarDiv
VarI4FromStr
Variant
VariantChangeType
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
Variants
VarIdiv
VarMod
VarMul
VarNeg
VarNot
VarR4FromStr
VarR8FromStr
VarSub
$VarUtils
VarXor
Vd;VXr
VendorIdentifier
VerLanguageNameA
VerQueryValueA
version.dll
VertScrollBar
VFrames
`VFrames
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
Visible
Visible<
VkKeyScanA
vMenus
VSample
VSample8(
VWUUhdN
<v=z=~=
<&<@<W<
= >(>W>
>(?:?W?
WaitForMultipleObjectsEx
WaitForSingleObject
WaitMessage
Wallpaper
WallPaper
waveInAddBuffer
waveInClose
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
WavPlay
:.;W;c;k;s;
WEBCAMLIVE
WEBCAMSTOP
WEP104
WheelDelta
+WH+W@
WideCharToMultiByte
WideString
WideStrUtils
Width<
Widtht
WindowFromPoint
WindowMenu
Windows
Windows 2000
Windows 7
Windows 95
Windows 98
Windows Me
Windows NT 4.0
Windows Server 2003
WindowState
Windows Vista
Windows XP
WinDrive
WinExec
?WinInet
wininet.dll
winmm.dll
WINNLSEnableIME
WinSock
WinSvc
wlanapi.dll
WlanCloseHandle
WlanEnumInterfaces
WlanGetAvailableNetworkList
WlanOpenHandle
WlanQueryInterface
WndProcPtr%.8X%.8X
WPA_NONE
WPA_PSK
WPA_USE_GROUP OR RSN_USE_GROUP
WriteClip
WriteFile
WriteProcessMemory
WS2_32.DLL
WSACleanup
__WSAFDIsSet
WSAGetLastError
WSAIoctl
WSAStartup
wscsvc
wsMaximized
wsMinimized
wsNormal
wsock32.dll
WWinSpool
;X0t@S
;X0uG;u
XD;PHu
XRIGHT
XUntHTTPFlood
xUSock
XWHEEL
<#<'<,<y<}<
;";&;y;
yDirect3D9
YesToAll
{<:y&q?	
YStrUtils
YUntScanPorts
-YUNVt=-
_^[YY]
Y_^[Y]
$YZ_^[
$YZ]_^[
YZ]_^[
YZXtm1
(Z]_^[
$Z]_^[
ZLibEx
;Z;_;m;v;
>=?Z?q?v?
ZTUWVSPRTj