popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

2015-09-11 17:24:53

PDB Path

E:\nsmsrc\nsm\1210\1210f\client32\Release\PCICL32.pdb

PE Imphash

f0ebeb0de39f647e905e803bbc0c109b

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0018dd9c 0x0018de00 6.61378829161
.rdata 0x0018f000 0x0004cfb3 0x0004d000 5.8249348107
.data 0x001dc000 0x00012588 0x0000be00 4.71493418924
.tls 0x001ef000 0x00000015 0x00000200 0.0
.hhshare 0x001f0000 0x0000001c 0x00000200 0.0
.rsrc 0x001f1000 0x0017e1b8 0x0017e200 5.70687952542
.reloc 0x00370000 0x00022cb2 0x00022e00 6.03947822119

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x00336980 0x00000134 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_CURSOR 0x00336980 0x00000134 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_CURSOR 0x00336980 0x00000134 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_CURSOR 0x00336980 0x00000134 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_CURSOR 0x00336980 0x00000134 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_CURSOR 0x00336980 0x00000134 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_BITMAP 0x00344b58 0x00000628 LANG_NEUTRAL SUBLANG_SYS_DEFAULT dBase IV DBT, block length 1536, next free block index 40, next free block 4278255615, next used block 4294902015
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ICON 0x00364590 0x000010a8 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_MENU 0x00337090 0x000005ca LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_DIALOG 0x003376e0 0x00000136 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_STRING 0x0036d420 0x00000062 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_ACCELERATOR 0x0034a858 0x00000020 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_RCDATA 0x00253768 0x00000018 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_RCDATA 0x00253768 0x00000018 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_CURSOR 0x00336818 0x00000014 LANG_NEUTRAL SUBLANG_SYS_DEFAULT Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00336818 0x00000014 LANG_NEUTRAL SUBLANG_SYS_DEFAULT Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00336818 0x00000014 LANG_NEUTRAL SUBLANG_SYS_DEFAULT Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00336818 0x00000014 LANG_NEUTRAL SUBLANG_SYS_DEFAULT Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00336818 0x00000014 LANG_NEUTRAL SUBLANG_SYS_DEFAULT Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x00336818 0x00000014 LANG_NEUTRAL SUBLANG_SYS_DEFAULT Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_GROUP_ICON 0x0034a7e0 0x00000076 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data
RT_VERSION 0x00325a00 0x00000390 LANG_NEUTRAL SUBLANG_SYS_DEFAULT data

Imports

Library SHFOLDER.dll:
• 0x1118f6e0 SHGetFolderPathA
Library pcichek.dll:
• 0x1118fbf8 IsILS
• 0x1118fbfc CheckLicenseString
Library pcicapi.dll:
• 0x1118fbe4 CapiClose
• 0x1118fbe8 CapiOpen
• 0x1118fbec CapiListen
• 0x1118fbf0 CapiHangup
Library MPR.dll:
• 0x1118f63c WNetCancelConnection2A
• 0x1118f640 WNetGetConnectionA
• 0x1118f644 WNetAddConnection2A
Library COMCTL32.dll:
• 0x1118f0fc ImageList_Draw
• 0x1118f100 ImageList_LoadImageA
• 0x1118f104 ImageList_Destroy
• 0x1118f108 ImageList_ReplaceIcon
• 0x1118f10c ImageList_AddMasked
• 0x1118f114 None
• 0x1118f118 ImageList_DrawEx
• 0x1118f11c ImageList_GetIconSize
• 0x1118f120 ImageList_GetIcon
• 0x1118f124 ImageList_Create
Library VERSION.dll:
• 0x1118fa84 VerQueryValueA
• 0x1118fa88 GetFileVersionInfoA
Library WINMM.dll:
• 0x1118fa9c waveOutClose
• 0x1118faa0 waveOutReset
• 0x1118faa4 waveInClose
• 0x1118faa8 waveInUnprepareHeader
• 0x1118faac waveInReset
• 0x1118fab0 waveInStop
• 0x1118fab4 waveOutUnprepareHeader
• 0x1118fab8 waveInPrepareHeader
• 0x1118fabc waveOutSetVolume
• 0x1118fac0 waveOutOpen
• 0x1118fac4 waveInStart
• 0x1118fac8 waveInOpen
• 0x1118facc waveOutWrite
• 0x1118fad0 waveOutPrepareHeader
• 0x1118fad4 timeGetTime
• 0x1118fad8 timeEndPeriod
• 0x1118fadc timeBeginPeriod
• 0x1118fae0 PlaySoundA
• 0x1118fae4 waveInAddBuffer
Library WSOCK32.dll:
• 0x1118fb34 send
• 0x1118fb38 bind
• 0x1118fb3c listen
• 0x1118fb40 accept
• 0x1118fb44 htons
• 0x1118fb48 socket
• 0x1118fb4c connect
• 0x1118fb50 getpeername
• 0x1118fb54 gethostbyname
• 0x1118fb58 recv
• 0x1118fb5c shutdown
• 0x1118fb60 closesocket
• 0x1118fb64 WSACleanup
• 0x1118fb68 WSAStartup
• 0x1118fb6c WSAGetLastError
• 0x1118fb70 gethostname
• 0x1118fb74 htonl
• 0x1118fb78 ioctlsocket
• 0x1118fb7c inet_addr
• 0x1118fb80 setsockopt
Library KERNEL32.dll:
• 0x1118f2c8 IsBadReadPtr
• 0x1118f2cc SizeofResource
• 0x1118f2d0 CreateDirectoryA
• 0x1118f2d4 RemoveDirectoryA
• 0x1118f2d8 MoveFileA
• 0x1118f2dc MulDiv
• 0x1118f2e0 GetDiskFreeSpaceA
• 0x1118f2e4 GetCurrentDirectoryA
• 0x1118f2e8 SetFileTime
• 0x1118f2f0 DosDateTimeToFileTime
• 0x1118f2f4 GetVolumeInformationA
• 0x1118f2f8 FileTimeToDosDateTime
• 0x1118f300 OpenEventA
• 0x1118f304 MultiByteToWideChar
• 0x1118f308 OutputDebugStringA
• 0x1118f30c SetCurrentDirectoryA
• 0x1118f310 GetProcessHeap
• 0x1118f314 GetTimeFormatW
• 0x1118f318 GetDateFormatW
• 0x1118f31c RaiseException
• 0x1118f324 WideCharToMultiByte
• 0x1118f328 lstrlenW
• 0x1118f32c lstrlenA
• 0x1118f330 lstrcmpiA
• 0x1118f334 FlushInstructionCache
• 0x1118f338 lstrcmpA
• 0x1118f33c FindResourceExA
• 0x1118f340 TerminateThread
• 0x1118f344 ReleaseMutex
• 0x1118f348 WaitForSingleObjectEx
• 0x1118f34c GlobalReAlloc
• 0x1118f350 CreateNamedPipeA
• 0x1118f354 ConnectNamedPipe
• 0x1118f35c SetConsoleCtrlHandler
• 0x1118f360 IsDBCSLeadByteEx
• 0x1118f364 DisconnectNamedPipe
• 0x1118f368 WriteProfileStringA
• 0x1118f36c DefineDosDeviceA
• 0x1118f370 QueryDosDeviceA
• 0x1118f374 ResumeThread
• 0x1118f378 VirtualQueryEx
• 0x1118f37c GetThreadContext
• 0x1118f380 ReadProcessMemory
• 0x1118f384 PulseEvent
• 0x1118f388 CreateRemoteThread
• 0x1118f38c SetThreadContext
• 0x1118f394 CreateIoCompletionPort
• 0x1118f39c Beep
• 0x1118f3a0 GetSystemDefaultLangID
• 0x1118f3a4 GetSystemInfo
• 0x1118f3a8 SuspendThread
• 0x1118f3ac OpenThread
• 0x1118f3b0 GetProcessVersion
• 0x1118f3b4 GlobalGetAtomNameA
• 0x1118f3b8 HeapReAlloc
• 0x1118f3bc RtlUnwind
• 0x1118f3c0 DecodePointer
• 0x1118f3c4 EncodePointer
• 0x1118f3cc HeapAlloc
• 0x1118f3d0 HeapFree
• 0x1118f3d4 FindResourceA
• 0x1118f3d8 LoadResource
• 0x1118f3dc LockResource
• 0x1118f3e0 VirtualProtectEx
• 0x1118f3e4 WriteProcessMemory
• 0x1118f3e8 GetExitCodeThread
• 0x1118f3ec CompareStringA
• 0x1118f3f0 SetFilePointer
• 0x1118f3f4 GetProfileStringA
• 0x1118f3f8 GetOEMCP
• 0x1118f3fc GetShortPathNameA
• 0x1118f400 TerminateProcess
• 0x1118f404 SystemTimeToFileTime
• 0x1118f408 CreateFileMappingA
• 0x1118f40c OpenFileMappingA
• 0x1118f410 MapViewOfFile
• 0x1118f414 UnmapViewOfFile
• 0x1118f418 CreatePipe
• 0x1118f41c DuplicateHandle
• 0x1118f420 SetHandleInformation
• 0x1118f424 FormatMessageA
• 0x1118f428 LocalFree
• 0x1118f430 GetPriorityClass
• 0x1118f434 WinExec
• 0x1118f438 SearchPathA
• 0x1118f43c IsValidCodePage
• 0x1118f440 SetSystemTime
• 0x1118f444 _lopen
• 0x1118f448 _lclose
• 0x1118f44c DeleteFileA
• 0x1118f450 SetFileAttributesA
• 0x1118f454 GetSystemDirectoryA
• 0x1118f458 GetDateFormatA
• 0x1118f45c GetTimeFormatA
• 0x1118f460 GlobalSize
• 0x1118f468 OpenMutexA
• 0x1118f46c CreateMutexA
• 0x1118f470 SetErrorMode
• 0x1118f474 GetACP
• 0x1118f478 SetPriorityClass
• 0x1118f47c GetFileAttributesA
• 0x1118f480 GetTempFileNameA
• 0x1118f484 CopyFileA
• 0x1118f488 FileTimeToSystemTime
• 0x1118f48c GetComputerNameA
• 0x1118f490 ExitProcess
• 0x1118f494 GetModuleHandleA
• 0x1118f498 GetExitCodeProcess
• 0x1118f49c GetCurrentProcess
• 0x1118f4a0 LoadLibraryExA
• 0x1118f4a4 ExitThread
• 0x1118f4a8 GetDriveTypeA
• 0x1118f4ac GetWindowsDirectoryA
• 0x1118f4b0 IsDBCSLeadByte
• 0x1118f4b4 GetLocalTime
• 0x1118f4b8 GetFileSize
• 0x1118f4bc GlobalAlloc
• 0x1118f4c0 GlobalLock
• 0x1118f4c4 ReadFile
• 0x1118f4c8 GlobalUnlock
• 0x1118f4cc GlobalFree
• 0x1118f4d0 GetSystemPowerStatus
• 0x1118f4d8 FindFirstFileA
• 0x1118f4dc FindNextFileA
• 0x1118f4e0 FindClose
• 0x1118f4e8 GetUserDefaultLangID
• 0x1118f4ec GetModuleFileNameA
• 0x1118f4f0 GetCurrentProcessId
• 0x1118f4f4 CreateProcessA
• 0x1118f4f8 DeleteCriticalSection
• 0x1118f500 GetVersion
• 0x1118f504 CreateThread
• 0x1118f508 SetThreadPriority
• 0x1118f50c InterlockedIncrement
• 0x1118f510 WaitForMultipleObjects
• 0x1118f514 GetOverlappedResult
• 0x1118f518 ResetEvent
• 0x1118f51c InterlockedDecrement
• 0x1118f520 LeaveCriticalSection
• 0x1118f524 EnterCriticalSection
• 0x1118f528 GetLastError
• 0x1118f52c DeviceIoControl
• 0x1118f530 InterlockedExchange
• 0x1118f534 SetLastError
• 0x1118f538 GetProcAddress
• 0x1118f53c FreeLibrary
• 0x1118f540 LoadLibraryA
• 0x1118f544 CreateFileA
• 0x1118f548 GetTempPathA
• 0x1118f54c WriteFile
• 0x1118f550 GetCurrentThreadId
• 0x1118f554 CreateEventA
• 0x1118f558 WaitForSingleObject
• 0x1118f55c SetEvent
• 0x1118f560 GlobalDeleteAtom
• 0x1118f564 Sleep
• 0x1118f568 GlobalAddAtomA
• 0x1118f56c OpenProcess
• 0x1118f570 GetVersionExA
• 0x1118f574 GetTickCount
• 0x1118f578 CloseHandle
• 0x1118f580 VirtualProtect
• 0x1118f584 VirtualAlloc
• 0x1118f588 GetModuleHandleW
• 0x1118f58c VirtualQuery
• 0x1118f590 GetConsoleMode
• 0x1118f594 GetCommandLineA
• 0x1118f598 LCMapStringW
• 0x1118f59c GetCPInfo
• 0x1118f5a0 TlsAlloc
• 0x1118f5a4 TlsGetValue
• 0x1118f5a8 TlsSetValue
• 0x1118f5ac TlsFree
• 0x1118f5b4 IsDebuggerPresent
• 0x1118f5bc HeapCreate
• 0x1118f5c0 HeapDestroy
• 0x1118f5c4 GetStdHandle
• 0x1118f5c8 GetModuleFileNameW
• 0x1118f5cc HeapSize
• 0x1118f5d0 GetLocaleInfoW
• 0x1118f5d4 SetHandleCount
• 0x1118f5d8 GetFileType
• 0x1118f5dc GetStartupInfoW
• 0x1118f5e0 GetConsoleCP
• 0x1118f5e4 GetUserDefaultLCID
• 0x1118f5e8 GetLocaleInfoA
• 0x1118f5ec EnumSystemLocalesA
• 0x1118f5f0 IsValidLocale
• 0x1118f5f4 GetStringTypeW
• 0x1118f5f8 GetTimeZoneInformation
• 0x1118f5fc CreateFileW
• 0x1118f600 SetStdHandle
• 0x1118f608 GetEnvironmentStringsW
• 0x1118f610 FlushFileBuffers
• 0x1118f614 LoadLibraryW
• 0x1118f618 WriteConsoleW
• 0x1118f61c CompareStringW
• 0x1118f624 SetEndOfFile
• 0x1118f62c VirtualFree
• 0x1118f634 LocalAlloc
Library USER32.dll:
• 0x1118f6e8 GetScrollRange
• 0x1118f6ec CreateCursor
• 0x1118f6f0 HideCaret
• 0x1118f6f4 OemToCharBuffA
• 0x1118f6f8 ScrollWindow
• 0x1118f6fc SetScrollPos
• 0x1118f700 SetScrollRange
• 0x1118f704 ClipCursor
• 0x1118f708 DrawIconEx
• 0x1118f70c RemoveMenu
• 0x1118f710 SetActiveWindow
• 0x1118f714 AdjustWindowRectEx
• 0x1118f718 TrackPopupMenuEx
• 0x1118f71c SetMenuDefaultItem
• 0x1118f720 InsertMenuItemA
• 0x1118f724 EndMenu
• 0x1118f728 SetMenuInfo
• 0x1118f72c GetMenuInfo
• 0x1118f730 GetScrollInfo
• 0x1118f734 SetScrollInfo
• 0x1118f738 TileWindows
• 0x1118f73c GetWindowRgn
• 0x1118f740 GetAsyncKeyState
• 0x1118f744 EnumThreadWindows
• 0x1118f748 EnumDisplaySettingsA
• 0x1118f74c CreateDesktopA
• 0x1118f750 PostMessageW
• 0x1118f754 OpenInputDesktop
• 0x1118f758 GetMenuItemRect
• 0x1118f75c mouse_event
• 0x1118f760 MapVirtualKeyA
• 0x1118f764 CharLowerBuffA
• 0x1118f768 ShowCursor
• 0x1118f76c SwitchDesktop
• 0x1118f770 AttachThreadInput
• 0x1118f774 GetCursor
• 0x1118f780 DialogBoxParamA
• 0x1118f784 SetClassLongA
• 0x1118f788 MapDialogRect
• 0x1118f794 RedrawWindow
• 0x1118f798 InvalidateRgn
• 0x1118f79c CharNextA
• 0x1118f7a0 LoadAcceleratorsA
• 0x1118f7a4 ScreenToClient
• 0x1118f7a8 ModifyMenuA
• 0x1118f7ac CreateMenu
• 0x1118f7b0 MoveWindow
• 0x1118f7b4 SetCursorPos
• 0x1118f7b8 DrawTextW
• 0x1118f7bc IsDialogMessageA
• 0x1118f7c0 UnionRect
• 0x1118f7c4 DrawFocusRect
• 0x1118f7c8 wsprintfW
• 0x1118f7cc EndDialog
• 0x1118f7d0 OpenWindowStationA
• 0x1118f7dc CloseWindowStation
• 0x1118f7e4 GetUserObjectSecurity
• 0x1118f7e8 SetUserObjectSecurity
• 0x1118f7ec MessageBoxIndirectA
• 0x1118f7f0 WinHelpA
• 0x1118f7f4 UnhookWindowsHookEx
• 0x1118f7f8 SetWindowsHookExA
• 0x1118f7fc CreateDialogParamA
• 0x1118f800 GetLastActivePopup
• 0x1118f804 CallNextHookEx
• 0x1118f808 GetUpdateRect
• 0x1118f80c BeginDeferWindowPos
• 0x1118f810 EndDeferWindowPos
• 0x1118f814 GetTopWindow
• 0x1118f818 DestroyCursor
• 0x1118f81c GetActiveWindow
• 0x1118f820 IsZoomed
• 0x1118f824 CreatePopupMenu
• 0x1118f828 AppendMenuA
• 0x1118f82c CopyRect
• 0x1118f830 EqualRect
• 0x1118f834 LoadStringA
• 0x1118f838 ClientToScreen
• 0x1118f83c DeferWindowPos
• 0x1118f840 IsChild
• 0x1118f844 GetWindowPlacement
• 0x1118f848 TranslateAcceleratorA
• 0x1118f84c SetRectEmpty
• 0x1118f850 SetMenu
• 0x1118f854 SetWindowPlacement
• 0x1118f858 GetForegroundWindow
• 0x1118f85c CharUpperBuffA
• 0x1118f860 WindowFromPoint
• 0x1118f864 WaitForInputIdle
• 0x1118f86c GetCursorPos
• 0x1118f870 CheckDlgButton
• 0x1118f874 SetForegroundWindow
• 0x1118f878 EnumChildWindows
• 0x1118f880 CountClipboardFormats
• 0x1118f884 EnumClipboardFormats
• 0x1118f888 GetClipboardData
• 0x1118f894 RegisterWindowMessageA
• 0x1118f898 DestroyIcon
• 0x1118f89c CharUpperA
• 0x1118f8a0 ExitWindowsEx
• 0x1118f8a4 GetDesktopWindow
• 0x1118f8a8 MessageBoxA
• 0x1118f8ac keybd_event
• 0x1118f8b0 GetThreadDesktop
• 0x1118f8b4 SetThreadDesktop
• 0x1118f8b8 wvsprintfA
• 0x1118f8bc CreateCaret
• 0x1118f8c0 ShowCaret
• 0x1118f8c4 DestroyCaret
• 0x1118f8c8 UnregisterClassA
• 0x1118f8cc SetTimer
• 0x1118f8d0 KillTimer
• 0x1118f8d4 SetDlgItemTextA
• 0x1118f8d8 SendMessageA
• 0x1118f8dc SendDlgItemMessageA
• 0x1118f8e0 PostMessageA
• 0x1118f8e4 ShowWindow
• 0x1118f8e8 DefWindowProcA
• 0x1118f8ec CallWindowProcA
• 0x1118f8f0 PostThreadMessageA
• 0x1118f8f4 GetQueueStatus
• 0x1118f8f8 GetDlgItem
• 0x1118f8fc GetDlgCtrlID
• 0x1118f900 GetDC
• 0x1118f904 ReleaseDC
• 0x1118f908 InvalidateRect
• 0x1118f90c GetKeyState
• 0x1118f910 PeekMessageA
• 0x1118f914 SetCaretPos
• 0x1118f918 DrawMenuBar
• 0x1118f91c GetSystemMenu
• 0x1118f920 OpenClipboard
• 0x1118f924 EmptyClipboard
• 0x1118f928 SetClipboardData
• 0x1118f92c MessageBeep
• 0x1118f930 CloseClipboard
• 0x1118f934 FindWindowExA
• 0x1118f938 DeleteMenu
• 0x1118f93c GetWindowTextLengthA
• 0x1118f940 GetFocus
• 0x1118f944 GetClassInfoExA
• 0x1118f948 DestroyWindow
• 0x1118f94c DefDlgProcA
• 0x1118f950 RegisterClassExA
• 0x1118f954 IsDlgButtonChecked
• 0x1118f958 GetDlgItemTextA
• 0x1118f95c IsIconic
• 0x1118f960 GetMenu
• 0x1118f964 SystemParametersInfoA
• 0x1118f968 IntersectRect
• 0x1118f96c GetCursorInfo
• 0x1118f970 GetIconInfo
• 0x1118f974 IsWindowVisible
• 0x1118f978 GetWindow
• 0x1118f97c SendMessageTimeoutA
• 0x1118f980 GetClassLongA
• 0x1118f984 CopyIcon
• 0x1118f988 CopyImage
• 0x1118f98c LoadImageA
• 0x1118f990 OpenDesktopA
• 0x1118f994 EnumDesktopWindows
• 0x1118f998 CloseDesktop
• 0x1118f99c EnumWindows
• 0x1118f9a0 GetClassNameA
• 0x1118f9a4 GetClassInfoA
• 0x1118f9a8 LoadIconA
• 0x1118f9ac RegisterClassA
• 0x1118f9b0 BringWindowToTop
• 0x1118f9b4 GetMessageA
• 0x1118f9b8 TranslateMessage
• 0x1118f9bc DispatchMessageA
• 0x1118f9c0 SetPropA
• 0x1118f9c4 GetPropA
• 0x1118f9c8 RemovePropA
• 0x1118f9cc GetCapture
• 0x1118f9d0 SetCapture
• 0x1118f9d4 ReleaseCapture
• 0x1118f9d8 CreateWindowExA
• 0x1118f9dc BeginPaint
• 0x1118f9e0 EndPaint
• 0x1118f9e4 wsprintfA
• 0x1118f9e8 PostQuitMessage
• 0x1118f9ec GetMenuItemID
• 0x1118f9f0 CheckMenuItem
• 0x1118f9f4 EnableMenuItem
• 0x1118f9f8 GetMenuItemInfoA
• 0x1118f9fc SetMenuItemInfoA
• 0x1118fa00 PtInRect
• 0x1118fa04 GetWindowDC
• 0x1118fa08 LoadMenuA
• 0x1118fa0c GetSubMenu
• 0x1118fa10 GetMenuItemCount
• 0x1118fa14 DestroyMenu
• 0x1118fa18 InflateRect
• 0x1118fa1c GetSystemMetrics
• 0x1118fa20 FindWindowA
• 0x1118fa28 IsWindow
• 0x1118fa2c SetFocus
• 0x1118fa30 SetWindowPos
• 0x1118fa34 GetParent
• 0x1118fa38 GetWindowTextA
• 0x1118fa3c SetWindowTextA
• 0x1118fa40 GetWindowLongA
• 0x1118fa44 SetWindowLongA
• 0x1118fa48 MapWindowPoints
• 0x1118fa4c GetClientRect
• 0x1118fa50 DrawTextA
• 0x1118fa54 OffsetRect
• 0x1118fa58 IsWindowEnabled
• 0x1118fa5c SetRect
• 0x1118fa60 GetWindowRect
• 0x1118fa64 FillRect
• 0x1118fa68 LoadBitmapA
• 0x1118fa6c GetSysColor
• 0x1118fa70 SetCursor
• 0x1118fa74 LoadCursorA
• 0x1118fa78 UpdateWindow
• 0x1118fa7c EnableWindow
Library GDI32.dll:
• 0x1118f140 EndPage
• 0x1118f144 StartPage
• 0x1118f148 ExtEscape
• 0x1118f14c ExtTextOutA
• 0x1118f150 CreateDIBitmap
• 0x1118f158 RealizePalette
• 0x1118f15c EqualRgn
• 0x1118f160 CreateBrushIndirect
• 0x1118f164 SetMapMode
• 0x1118f168 GetDCOrgEx
• 0x1118f16c SetBrushOrgEx
• 0x1118f170 PatBlt
• 0x1118f174 CreatePatternBrush
• 0x1118f178 GetTextMetricsA
• 0x1118f17c StretchBlt
• 0x1118f180 GetDIBits
• 0x1118f184 CreateDIBSection
• 0x1118f188 GdiFlush
• 0x1118f18c GetRegionData
• 0x1118f190 CombineRgn
• 0x1118f194 GetNearestPaletteIndex
• 0x1118f198 GetBkMode
• 0x1118f19c CreateFontIndirectW
• 0x1118f1a0 SetBitmapBits
• 0x1118f1a4 UnrealizeObject
• 0x1118f1a8 SetDIBits
• 0x1118f1ac SetWindowOrgEx
• 0x1118f1b0 AddFontResourceA
• 0x1118f1b4 CreatePenIndirect
• 0x1118f1b8 GetClipRgn
• 0x1118f1bc GetWindowOrgEx
• 0x1118f1c0 IntersectClipRect
• 0x1118f1c4 Arc
• 0x1118f1c8 Chord
• 0x1118f1cc Pie
• 0x1118f1d0 Polyline
• 0x1118f1d4 RoundRect
• 0x1118f1d8 SetPolyFillMode
• 0x1118f1dc SetTextJustification
• 0x1118f1e0 SetTextCharacterExtra
• 0x1118f1e4 SelectPalette
• 0x1118f1e8 RemoveFontResourceA
• 0x1118f1ec CreateCompatibleDC
• 0x1118f1f0 CreateCompatibleBitmap
• 0x1118f1f4 SelectObject
• 0x1118f1f8 GetObjectA
• 0x1118f1fc CreateRectRgn
• 0x1118f200 CreateRectRgnIndirect
• 0x1118f204 PtInRegion
• 0x1118f208 RectInRegion
• 0x1118f20c CreatePalette
• 0x1118f210 GetPaletteEntries
• 0x1118f214 GetTextExtentPoint32A
• 0x1118f218 BitBlt
• 0x1118f21c DeleteDC
• 0x1118f220 RectVisible
• 0x1118f224 SetRectRgn
• 0x1118f228 DeleteObject
• 0x1118f22c GetBkColor
• 0x1118f230 GetTextColor
• 0x1118f234 GetStretchBltMode
• 0x1118f238 SetStretchBltMode
• 0x1118f23c GetBitmapBits
• 0x1118f240 BeginPath
• 0x1118f244 TextOutA
• 0x1118f248 EndPath
• 0x1118f24c PathToRegion
• 0x1118f250 GetRgnBox
• 0x1118f254 OffsetRgn
• 0x1118f258 FillRgn
• 0x1118f25c FrameRgn
• 0x1118f260 CreateBitmap
• 0x1118f264 CreateDCA
• 0x1118f268 SelectClipRgn
• 0x1118f26c LineDDA
• 0x1118f270 Polygon
• 0x1118f274 CreateFontIndirectA
• 0x1118f278 CreateHatchBrush
• 0x1118f27c GetDeviceCaps
• 0x1118f280 SetBkColor
• 0x1118f284 ExtFloodFill
• 0x1118f288 GetPixel
• 0x1118f28c SetPixel
• 0x1118f290 SetPixelV
• 0x1118f294 Ellipse
• 0x1118f298 Rectangle
• 0x1118f29c SetROP2
• 0x1118f2a0 MoveToEx
• 0x1118f2a4 LineTo
• 0x1118f2a8 GetStockObject
• 0x1118f2ac CreatePen
• 0x1118f2b0 CreateSolidBrush
• 0x1118f2b4 GetTextExtentPointA
• 0x1118f2b8 SetBkMode
• 0x1118f2bc SetTextColor
• 0x1118f2c0 GetMapMode
Library WINSPOOL.DRV:
• 0x1118faec DeletePrinter
• 0x1118faf0 AddPrinterA
• 0x1118faf4 EnumPrintersA
• 0x1118faf8 None
• 0x1118fafc None
• 0x1118fb00 EnumJobsA
• 0x1118fb04 EnumPrinterDriversA
• 0x1118fb08 AbortPrinter
• 0x1118fb0c StartPagePrinter
• 0x1118fb10 WritePrinter
• 0x1118fb14 ClosePrinter
• 0x1118fb18 StartDocPrinterA
• 0x1118fb1c EndPagePrinter
• 0x1118fb20 EndDocPrinter
• 0x1118fb24 OpenPrinterA
• 0x1118fb28 GetPrinterA
• 0x1118fb2c SetJobA
Library COMDLG32.dll:
• 0x1118f12c ChooseFontA
• 0x1118f130 PageSetupDlgA
• 0x1118f134 GetOpenFileNameA
• 0x1118f138 GetSaveFileNameA
Library ADVAPI32.dll:
• 0x1118f000 EnumServicesStatusA
• 0x1118f008 RegisterEventSourceA
• 0x1118f00c ReportEventA
• 0x1118f010 DeregisterEventSource
• 0x1118f014 RegCreateKeyA
• 0x1118f018 SetTokenInformation
• 0x1118f01c SetServiceStatus
• 0x1118f024 LogonUserA
• 0x1118f028 ControlService
• 0x1118f02c StartServiceA
• 0x1118f030 RegQueryInfoKeyW
• 0x1118f034 CryptGetProvParam
• 0x1118f038 CryptReleaseContext
• 0x1118f040 FreeSid
• 0x1118f04c LookupPrivilegeValueA
• 0x1118f050 AdjustTokenPrivileges
• 0x1118f054 QueryServiceConfigA
• 0x1118f058 CreateProcessAsUserA
• 0x1118f068 GetAclInformation
• 0x1118f06c InitializeAcl
• 0x1118f070 GetAce
• 0x1118f074 AddAce
• 0x1118f078 AddAccessAllowedAce
• 0x1118f07c IsValidSid
• 0x1118f080 GetLengthSid
• 0x1118f084 CopySid
• 0x1118f088 RegQueryInfoKeyA
• 0x1118f08c RegDeleteKeyA
• 0x1118f090 RegEnumKeyExA
• 0x1118f094 RegEnumValueA
• 0x1118f098 RegCreateKeyExA
• 0x1118f09c RegSetValueExA
• 0x1118f0a0 RegDeleteValueA
• 0x1118f0a4 RegFlushKey
• 0x1118f0a8 RegOpenKeyExA
• 0x1118f0ac RegCloseKey
• 0x1118f0b0 OpenSCManagerA
• 0x1118f0b4 OpenServiceA
• 0x1118f0b8 QueryServiceStatus
• 0x1118f0bc CloseServiceHandle
• 0x1118f0c0 GetUserNameA
• 0x1118f0c4 LookupPrivilegeNameA
• 0x1118f0c8 RegQueryValueExA
• 0x1118f0cc GetTokenInformation
• 0x1118f0d0 LookupAccountSidA
• 0x1118f0dc GetSidSubAuthority
• 0x1118f0e4 EqualSid
• 0x1118f0e8 RevertToSelf
• 0x1118f0ec OpenProcessToken
• 0x1118f0f4 GetUserNameW
Library SHELL32.dll:
• 0x1118f6b4 ExtractIconExA
• 0x1118f6bc SHGetFileInfoA
• 0x1118f6c0 SHGetMalloc
• 0x1118f6c4 SHGetDesktopFolder
• 0x1118f6c8 SHGetPathFromIDListA
• 0x1118f6cc FindExecutableA
• 0x1118f6d0 ExtractIconA
• 0x1118f6d4 Shell_NotifyIconA
• 0x1118f6d8 ShellExecuteA
Library ole32.dll:
• 0x1118fb88 CoUninitialize
• 0x1118fb8c CoInitialize
• 0x1118fb90 CoCreateInstance
• 0x1118fb94 CreateStreamOnHGlobal
• 0x1118fb98 StringFromGUID2
• 0x1118fb9c ReleaseStgMedium
• 0x1118fba0 OleDuplicateData
• 0x1118fba4 CreateDataAdviseHolder
• 0x1118fba8 CoTaskMemFree
• 0x1118fbac CLSIDFromProgID
• 0x1118fbb0 OleInitialize
• 0x1118fbb4 OleUninitialize
• 0x1118fbb8 CoTaskMemAlloc
• 0x1118fbbc CoTaskMemRealloc
• 0x1118fbc0 CoInitializeSecurity
• 0x1118fbd0 OleSetContainedObject
• 0x1118fbd4 CLSIDFromString
• 0x1118fbd8 CoGetClassObject
• 0x1118fbdc OleLockRunning
Library OLEAUT32.dll:
• 0x1118f658 LoadTypeLib
• 0x1118f65c VariantCopy
• 0x1118f660 OleLoadPicture
• 0x1118f664 SysFreeString
• 0x1118f668 SysAllocString
• 0x1118f66c VariantClear
• 0x1118f670 VariantInit
• 0x1118f674 VariantChangeType
• 0x1118f678 SysStringLen
• 0x1118f67c SysAllocStringLen
• 0x1118f680 VarUI4FromStr
• 0x1118f684 OleCreateFontIndirect
• 0x1118f688 LoadRegTypeLib
• 0x1118f690 SysStringByteLen
• 0x1118f694 SafeArrayUnaccessData
• 0x1118f698 SafeArrayAccessData
• 0x1118f69c SafeArrayGetElemsize
• 0x1118f6a0 SafeArrayGetUBound
• 0x1118f6a4 SafeArrayGetLBound
• 0x1118f6a8 SafeArrayGetDim
• 0x1118f6ac SafeArrayCreate
Library NETAPI32.dll:
• 0x1118f64c NetApiBufferFree
• 0x1118f650 NetUserEnum
Library WININET.dll:
• 0x1118fa94 InternetCrackUrlA

Exports

Ordinal Address Name
1 0x111584f0 _GetRawWMIStringW@16
2 0x11158360 _GetWMIStringW@16
3 0x11159d30 _IsAcerA@8
4 0x11030a50 _NSMClient32@8
5 0x11092090 _NSMFindClass@12
6 0x111e82ac br_close
7 0x111e82a8 br_open
8 0x111e829c br_poll
9 0x111e82a0 br_status
!This program cannot be run in DOS mode.
`.rdata
@.data
.hhshare
@.reloc
F(SQRP
F(PQRj
N,RPSWj
t&Hu4V
;0u RVj
<+t%<-t!<0u
F@9^8u
RSPQWV
RSPQWV
M QRPhL
PSQRWV
M QRPhP
PSQRWV
RSPQVW
r2vR9E
t49^tt/j
PQRhX2
SVW=#I
;8u!RWj
^p9~hr
^T9~Lr
^89~0r
t0hddd
NT9A<u
U(jcRS
Ht"HuV
PSWhDN
tX<;tT
F0PQRhLO
SVWh$P
SVWPh\S
WRPQh@
WWjPQR
RWQSh ,
FhQRPh
QPPPPPPPPPP
RVVVVVVVVVV
RPQhlY
RPQh$Y
PVWh|b
PWRhhe
PQRh e
N(RQhlU
t,@j|P
9F,ul9G,ugj
Fujj-W
F PSSj
~1HWPhb
RPPj&P
8DESTV
t*Hu_h4
WRQPVh
RSPWQh$
:^L^[t
WjUPhM
WjUPhO
7u7h@D
tW<"u53
PVSWh<
<pts<s
9G|~MSV
QPRWhl
t;Vj.j
VVVVVVVV
VVVVVVVV
VRPh ,
t.Fj;V
J0Phd"
QVVVVVV
I0Phd"
QSPPh8
EEEEEEEEEE
EEEEEEEEEEEEEEEEEEEE
EEEEEEEEEEEEEE
EEEEEEE
EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE
EEEEEEEEEEEE
EEEEEEEE
E !E"#$%%%E&'(E)E*+,-.E/012345E67EE8EEEEEEEE9:;<EEEE=EEEEE>?@AEEBCD
un9W`t
Ht\Ht8
VTPQRh
SVW=TUU
;:u#QWj
PQRVhp
tR8tN
tGSSSS
t[SSSS
t;<*t7
PCIRuR
ItDIus
;0u RVj
;:u!SWj
tQRQWHP
PQJRh@
SXPQRj
u*SSSS
HtAHt
SVWh
tmPPh@
txHtJHt
WPRQhp
PQWSRV
RSQWVP
QSRWVP
u9jWSW
u7jWSW
u jWVW
PPPPPPPP
PPPPPPPj
RPQVh0
t3SSSh
FD9^4r
y<;q@t<
FX9^hw
Ah9Yxw
~<;~@t
QVSVVP
W,SPQR
a SVWP
F0PSVh
PPPPPPPj
PSSSSSSSj
G(PVVh
WWWWPQ
t%SShD
FHt_Sh
QSSSSh
QSSSSh
_9N,u3
~49~Ht^
t:9F@t5
;F,t+j
;N0tij
@ SSRSWh
QSSSSSSSSj
PSSSSSSSj
~@9~@u3
F@9^8u
QRWWSQ
ud8S$u_
RPQhlA
tYSSSj
QPVh0A
QRPhx@
SPVSRQ
VQRVWP
VRPVWQ
VRPVWQ
SRVSPQ
SRVSPQ
P<9P@t
Pt9Pxt$
WPQRh|?
u=8C$u8
RPQh(H
WVSh0I
;0u RVj
$t:VSPW
~HWh4S
~HWh$S
I VRPQ
:u#WQj
@(QRSV
U SQRP
90u+9p
N Qh (
N Qh@)
Ht6Ht%-
49_^[]
t9j0h@c
9F t:j"htc
tBj-h8g
t:j=hDh
uCj$h|j
;0u RVj
HtCjh@q
HtHjh@q
<z~)<A|
ph;plt
F`9^Pr
GD)_p)_l
Wlf+Wp
Wlf+Wd
ts9_ tn9_$ti
O(9O$u
~(9~$u
N09F0u
O@;H s
O@;H(s
Oh;O\sQ
Gh9Ghr
@PAQBR
;0u RVj
t8Ht'Ht
QSVWh`=
^X9^Tt
t@_^[3
h5GSNW
*PVj*j*j*j*W
j*j*Wj*j*SPV
VRPQhx
RSSSSSS
RWSPh$
Vl+VdQ
Nh+N`R
RPVQSW
u+SSSS
8X0tSht
WSRPhH
QVRj h
PVQj h
f9Fh[_
WSPQRV
t_@j,P
PSSSSSQh
PVVVVh
;0u RVj
ttVj\W
9CXt(WS
t!9FTu
<,t#<;t
u=9~Tu8
t=;=DG
SVW=\t
;8u!RWj
^0;F,t
7t%Hu>
SWQRPhx!
Pj(SRht%
SWRQPh
u?9Ght
QPRh('
SVPQRW
SVQR@PW
SVRPQW
SVPQBRW
QRWhd.
KhRPWQ
Sj hp1
t8Vj2hp2
t/Wh|A
SVj.P3
<SVWj<
SVWtL+
SVWt[+
Ht5Ht)Ht
sXVPQW
HthHtC
RPQWhTI
taHt>H
tuWPj@
PQRhxc
RPVWhDc
t WSWhh
9^ltk9]
9~ltq9}
Ht"Huq
OH+OD2
OX;wHt
uUVh\m
HtFHt&
RPQh0r
KSOWVRhlq
PVSh q
uNVWh@m
t-Ht#Ht
FXSWRP
B(PQSj
V(RQPj
u!j0h8/
u!j0h8/
;S@u\j
;S8u\j
;K<u\j
;J4uPj
tU;~HtP
F(QRWWP
;8u!RWj
u4VhT(
u4VhT(
$VSPQW
HtHHtk2
QQSVWd
PPPPPPPP
PPPPPPPP
.t|PVj@
9} tK9}$uA9}(uA
9E vcP
9}$tB+
9u(vDVSj
9u v&V
t"SS9] u
t=MOC
HtHu4j
t*=RCC
;7|G;p
tR99u2
f-00f=
f-00f=
uTVWh27
^SSSSS
tWItHIt9It
HHt$HHt
?If90t
u)jAXf;
j@j ^V
<at,<rt"<wt
URPQQhp
F Pj*S
F$Pj+Sj
F(Pj,S
F,Pj-S
F0Pj.S
F4Pj/S
F8PjDS
F<PjES
F@PjFS
FDPjGS
FHPjHS
FLPjIS
FPPjJS
FTPjKS
FXPjLS
F\PjMS
F`PjNS
FdPjOS
FhPj8S
FlPj9S
FpPj:S
FtPj;S
FxPj<S
F|Pj=S
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
CHPjPV
CLPjQV
>:u8FV
VVVVVQRSSj
HHt$HHt
;t$,v-
UQPXY]Y[
tRHtCHt4Ht%HtFHHt
t VV9u
tCHt(Ht
<+t"<-t
+t HHt
x9;~$}4
m_hWnd
e:\nsmsrc\nsm\1210\1210f\ctl32\wndclass.h
e:\nsmsrc\nsm\1210\1210f\ctl32\action.h
V12.00
V12.10
m_pToolbar
e:\nsmsrc\nsm\1210\1210f\ctl32\floatbar.h
Progman
NSMAnnotate
invalid string position
string too long
L@hSub
..\CTL32\annotate.cpp
%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%d,%s
FillStyle
FillColour
PenWidth
PenStyle
PenColour
Annotate
$@edit
DISPLAY
ShowAppIds
Monitor
hWnd=%x, uiMsg=x%x, wP=x%x, lP=x%x
NSMAnnotate::m_aProp
NsAppSystem
127.0.0.1
e:\nsmsrc\nsm\1210\1210f\ctl32\NSMString.h
<td valign="middle" align="center"><p align="center">
<img border="0" src="%s" align="left" width="16">&nbsp;</p></td>
<td><p align="left"><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><a>%s</a></font></p></td>
&nbsp;
<td ><p align="left"><font face="Verdana, Arial, Helvetica, sans-serif" size="2"><a href="%s%s" target=blank >%s</a></font></p></td>
http://
https://
<div align="center"><img src="URL_list.gif" height="78"><br>
</div> </td>
<div align="left">
<table border="0" cellpadding="0" height="23" >
<HTML%s><Body><title>Approved URLs</title>
<body bgcolor="#FFFFFF">
<div align="center">
<center>
<table >
<td>
<div align="center">
<center>
<table border="1" cellspacing="0" cellpadding="3" bgcolor="#FFFFFF" bordercolor="#6089B7">
</table>
</div>
</table>
</center>
</div>
<tr><td >
<div align="center"> <p align="center"><font face="Verdana, Arial, Helvetica, sans-serif" size="2">&nbsp;</font> </div>
</td></tr>
</table>
</center>
</div>
</body></Html>
Store\
%s%s.htm
ApprovedWebList
Kernel32.dll
CancelIo
Send EV_CONFIGSET from %s@%d
nbytes <= sizeof (extra_bytes)
..\ctl32\AUDIO.CPP
*extra_bytes
*format_tag
*samples_per_sec
*bytes_per_sec
*block_align
*bits_per_sample
Error. cvt buf overflow1
Adjusting inexact audio conversion from %d to %d (%d b/smp)
acmStreamUnprepareHeader err=%d, has=%x
acmStreamConvert err=%d, has=%x
acmStreamPrepareHeader err=%d, has=%x, cb=%d, pb=%x
ash.pbDst
acmStreamSize err=%d, has=%x
MM_WIM_CLOSE hwi=%x
Error. soundlevel < -32768
Error. soundlevel > 32767
@f[%d]=%f, < -1.0
Warning. %s
f[%d]=%f, > 1.0
DisableSoundACM
Vista StopCapturing ret %d
StopCapturing NT6
SYSTEM\CurrentControlSet\Services\nsafltr\Parameters
DisableDriver
Error. Vista RemoveAudioCaptureEventListener ret %s
Vista RemAudioCapEvtListener(%p)
CloseCaptureSounds NT6, pAudioCap=%p
error. bad audio logic
Error. Vista AddAudioCaptureEventListener ret %s
Vista AddAudioCapEvtListener(%p)
Vista new pAudioCap=%p
Error. Vista AudioCapture GetInstance ret %s
InitCaptureSounds NT6
\\.\NSAudioFilter
DisableSounds
Error. preventing capbuf overflow
Error. NULL capbuf
Vista StartCapturing ret %d
StartCapturing NT6
Hook_bits_per_sample
Hook_channels
New hooked channels,bitspersample=%d,%d (old %d,%d)
invalid map/set<T> iterator
Threshold
Sleep(%d)
SleepBeforeClose
DisableReset
Audiothread stopped, threadcnt=%d
Vista AudioCap FreeInstance (pAudioCap=%p)
Error %d waiting for audio (nEvents=%d)
Audiothread started, threadcnt=%d
hAudio
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmStreamClose
acmStreamOpen
msacm32.dll
idata->hEvent
VoiceVol
Error. waveOutOpen ret %d
Error. acmStreamOpen (out) ret %d
FailWaveOutOpen
err == 0
waveInAddBuffer err=%d
waveInPrepareHeader err=%d
wh->lpData
Error. waveInStop ret %d
Error. waveInOpen ret %d
Error. acmStreamOpen (in) ret %d
Error. waveOutWrite e=%d. Closing audio out
Error. waveOutPrepareHeader e=%d. Closing audio out
Error. hwo=0
SoundVol
Error %d. hwo2=0, iwf=%p
Error. hash (%d) != format_hash (%d)
DeviceChange
RegisterWindow
RemoveAudioCaptureEventListener
AddAudioCaptureEventListener
IsCapturing
StopCapturing
StartCapturing
UnInitialise
Initialise
AudioCapture.dll
Unknown error %d
StillInstances
Exception
BadParam
NotFound
NoCapClients
AlreadyStopped
AlreadyStarted
CannotGetFunc
DllInitFailed
CannotLoadDll
RequiresVista
%sNSSilence.exe %u %u
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=
!!!!:11/09/15 09:21:05 V12.10F2
ios_base::eofbit set
ios_base::failbit set
ios_base::badbit set
bad locale name
bad cast
map/set<T> too long
MulticastShow
Multicast
ViewControl
ViewShare
ViewWatch
LatLong
PINConnect
UnicodeKeyStroke
AutoWirelessAndBattery
ControlInstMess
LaunchURL
ChangeSecurity
MuteSound
GroupLeader
UnixFileProps
UnixFilePerms
Rewards
JoinClass
AudioFilter
DosBox
PrintCapture
Journal
Thumbnails16
Thumbnails8
Thumbnails
StudentTesting
LeadShow
ShowVideo
LockMouseAndKeybd
LockKeyboard
LockMouse
Clipboard
StudentReg
SendWork
ControlWebUse
MonitorWebUse
ControlApps
MonitorApps
CoBrowse
StudentSurvey
ControlPrinters
BlockInstMess
MonitorInstMess
ControlUSB
ControlCD
MonitorKeyboard
Whiteboard
SecretView
StripWallpaper
WirelessState
BatteryState
ApplicationsInventory
ProcessesInventory
SoftwareInventory
HardwareInventory
ServicesInventory
HotfixesInventory
FileTransferUDP
RemoteCommand
FileTransfer
EditRegistry
ShowScreen
ShowReplay
ShowApplic
Inventory
PowerOff
ViewGDI
PowerOn
Message
Execute
TakeCAD
DoAudio
Reboot
LogOut
(Not known)
advapi
Default
Locales\%d\
e:\nsmsrc\nsm\1210\1210f\ctl32\headctrl.h
..\ctl32\headctrl.cpp
SysHeader32
m_hImageList
..\ctl32\imagelst.cpp
product
vector<T> too long
NSM.LIC
maxslaves
e:\nsmsrc\nsm\1210\1210f\ctl32\listview.h
..\ctl32\liststat.cpp
\\.\NSWFPDrv
nslsp.dll
PackedCatalogItem
SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries
NSMIdentifyWnd
NSMIdentifyWnd::m_aProp
..\ctl32\NSMIdentifyWnd.cpp
pInfo2->m_pDesc
pInfo1->m_pDesc
pInfo2->m_pName
pInfo1->m_pName
..\ctl32\NSMInvListView.cpp
e:\nsmsrc\nsm\1210\1210f\ctl32\imagelst.h
User32.dll
NSMWControl32
NSSWControl32
QueueUserWorkItem
IPTip_Main_Window
ACPI\PNP0C60
PNP0C60
CompatibleIDs
SYSTEM\CurrentControlSet\Enum\ACPI
touchkbd, systype=%d, chassis=%d, took %d ms
OpenKbd. No touch kbd
c:\program files\common files\microsoft shared\ink\tabtip.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\TabTip.exe
OpenKbd keyrect(L=%d, T=%d, R=%d, B=%d)
uxtheme.dll
IsAppThemed
OpenThemeData
CloseThemeData
SetWindowTheme
DrawThemeBackground
GetThemeFont
DrawThemeText
NsAppSystem Info : Is Control Channel Active : %s...
deque<T> too long
NsAppSystem Info : Control Channel Not Active (already stopped)...
NsAppSystem Info : Control Channel & Started App System - App Server + BG Task Control Channel Stopped
NsAppSystem Info : Control Channel & Started App System - App Server + BG Task Control Channel Stopping...
NsAppSystem Error : RequestChatJoin() : %hs
REQUEST RECV : RequestChatJoin("%s")
NsAppSystem Error : RequestChatLeave() : %hs
REQUEST RECV : RequestChatLeave("%s")
NsAppSystem Error : RequestSendChatMessage() : %hs
REQUEST RECV : RequestSendChatMessage("%s")
NsAppSystem Error : RequestChatHistory() : %hs
REQUEST RECV : RequestChatHistory()
NsAppSystem Error : RequestChatMembers() : %hs
REQUEST RECV : RequestChatMembers()
NsAppSystem Error : RequestSendHelpRequest() : %hs
REQUEST RECV : RequestSendHelpRequest("%s")
!"NOT IMPLEMENTED"
..\NsAppSystem\NsAsApplicationObjects\Client32\NsAsMetroClientManager.cpp
MESSAGE
REGISTRATION
SURVEY
command >= 0 && command < ARRAY_SIZE
NsAppSystem Error : ~CNsAsMetroClientManager() : %hs
NsAppSystem Info : Control Channel & Started App System - App Server + BG Task Control Channel (Already Started or Invalid environment for module (win 8 metro?))...
NsAppSystem Info : App System Control Channel Started...
NsAppSystem Info : App System Control Channel Starting...
NsAppSystem Info : App System Server Started...
NsAppSystem Info : App System Server Starting...
NetSupport App System - App Server + BG Task Control Channel Component
NsAppSystem Info : Control Channel and App System - App Server + BG Task Control Channel Starting...
NsAppSystem Info : Control Channel Command Sent : %d
NsAppSystem Info : Control Channel Sending Command : %d
NSSecurity.dll
HasActiveAntiVirus
HasActiveAntiSpyware
HasActiveFirewall
EnableFirewall
CheckUACState
EnableUAC
CheckWindowsUpdateState
SetWindowsUpdateState
IsIEPhishingFilerEnabled
EnableIEPhishingFiler
IsIEProtectedModeEnabled
EnableIEProtectedMode
GetNSPState
GetActivePowerScheme
SetActivePowerPolicy
GetPowerPolicies
GetNextPowerPolicy
ClosePowerPolicies
picholder w=%d, h=%d
NSMBmpClass WM_PAINT rcNew L=%d, T=%d, R=%d, B=%d, W=%d, H=%d
NSMBmpClass WM_PAINT rcClt L=%d, T=%d, R=%d, B=%d, W=%d, H=%d
DecompressPNGToBitmap
PCIImage.dll
:neutral:
:arrow:
:idea:
:wink:
:roll:
:twisted:
:gavin:
:evil:
:razz:
:angry:
:cool:
:shock:
:oops:
:smile:
:grin:
FlashWindowEx
e:\nsmsrc\nsm\1210\1210f\ctl32\nsmdlg.h
e:\nsmsrc\nsm\1210\1210f\ctl32\DataStream.h
NSMChatExDlg
NSMChatSizeWnd
:;(8^+<|*
DisableSmileys
SHELLDLL_DefView
InitFrame - m_WBFrameWnd = %x
ChatPath
OnDestroy - delete m_WBFrameWnd
Chat Window Destroyed
NSMChatExDlg::OnWhiteBoard - Mode %d
UpdateWhiteboard - OnWhiteboard
%d,%d,%d,%d,%d,%d
UpdateWhiteboard - parse pnc [%s]
RDH - UpdateWhiteboard - window is bad, return
RDH: CHATEX_WB_HIDE
RDH: CHATEX_WB_SHOW
RDH::CHATEX_WB_UPDATE received
CHATEX Whiteboard - flags %x, submode %x
toastChat.png
toastImageAndText.png
pcicl32.dll
ChatEx::Disconnect
AddToJournal
riched32
RDH::Stop Chat Thread
RDH:: destroy dialog %x
DisableChatSave
DisableTutorJournal
DisableStudentJournal
DisableJournal
..\CTL32\chatexw.cpp
RDH::Start ChatThread - object %x
ChatEx
RDH::Dialog already created so restore
e:\nsmsrc\nsm\1210\1210f\ctl32\winman.h
..\ctl32\chatw.cpp
TypeLib
Software
SYSTEM
SECURITY
Hardware
Interface
FileType
Component Categories
Delete
NoRemove
ForceRemove
GetProductInfo
SetProcessDPIAware
Wtsapi32.dll
WTSFreeMemory
WTSQuerySessionInformationA
psapi.dll
GetModuleFileNameExA
GetProcessImageFileNameA
\hh.exe -mapid %u %s
NSMClientLookup::Called: %u
NSMClientLookup::NewConnection: %u
Forwarding NC message to %s (command=%d len=%d)
>127.0.0.1:%d
*channel
_Debug
tracefile
%d.exe
TraceModuleName
Warning. IPC took %d ms - possible unresponsiveness
HandleIPC ret %x, took %d ms
Warning. IPC msg but no wnd. Waiting...
IPC, what=%d, msg=x%x, wP=x%x, lP=x%x, timeout=%d, sender=x%x (%d)
IPC copydata, dw=%d, cb=%d, pv=x%x, sender=x%x (%d)
DropConnection callback
Retrying...
Error. not all transports loaded (%d/%d)
*max_sessions
LoadTransports(%d)
UseNCS
Protocols
#32770
Tapiexe
TapiFix
BridgeThread::Attempting to open bridge...
Bridge
Exit Msgloop, quit=%d
AdminUserAcknowledge
PCIRES
Luid Low=%x, High=%x, Attr=%x, name=%s
"%sWINST32.EXE"
"%sWINSTALL.EXE"
WinInet.dll
InternetOpenA
InternetQueryDataAvailable
InternetQueryOptionA
InternetReadFile
InternetCloseHandle
InternetConnectA
InternetErrorDlg
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
Trying to reinstall gdihook5
/Q /Q
AutoInstallGdihook5
System\CurrentControlSet\Services\Gdihook5
screenscrape
BasePort
Warning. No user detected
IsMultiPointShell hUser=%p, user=%s, sesh=%d
SRCShell
metro=%d
%sIsMetro.exe
NSTWControl32
EV_RESUMED
EnclosureType
SOFTWARE\NetSupport Ltd\Client32
pcicl32_res.dll
Setting resource langid=%d
\GetUserLang.exe"
SetClientResLang called, gPlatform %x
SupportsAndroid
NSSLongCaption
TechConsole
SupportsChrome
AssistantURL
AssistantName
NSSConfName
NSSAppDataDir
NSMAppDataDir
SupportEMail
SupportWWW
NSSTLA
NSSName
ShortName
LongName
product.dat
DisconnectAll
IgnorePowerResume
Stop resuming
APMSUSPEND, suspended=%u, suspending=%u, resuming=%u
DisableStandby
*TapiFixPeriod
%s (%s)
%s @ %s
Logging
Info. assert, restarting...
Client32
Assert. File %hs, line %d, err %d, Expr %s
www.netsuppport247.com
client.asp?chatid=0
%s%03d
%s%c%02d
hydrapark#
Inventory already generated, %s etc
Pregenerating inventory x%x, %s etc
DisablePreInventory
DisableInventory
iSentTo <= 1
CLIENT32.CPP
Received NC_COHABIT (apptype=%d listen_port=%d datagram_port=%d)
*roaming
gMain.cfg == m_cfg
inactive
shrink_wrap
licensee
expiry
serial_no
_License
LoadOnStartup
com%d %d /A%d /B%d /D%d /M%s /P%s /T%d /N%s
Inactivity
PasswordFile
CAPICAPICAPI
ComPort
BaudRate
Password
br_status
br_close
br_open
nbbr32.dll
tcbr32.dll
ipbr32.dll
Protocol
_profileSection
Usernames
client.
ReplayUser
login != logged_in
Error. Can't open %s
Warning. DSReg e=%d, e2=%d
Accel=restored
set %s=15, e=%d
Software\NSL\Saved\DS
accel=%d, wdm=%d, key=%s, mix=%s, dev=%s
Acceleration
%02d/%02d/%02d %02d:%02d:%02d.%03d
DirectSound\Device Presence
DirectSound\Mixer Defaults
DirectSound
WARN: clientname is empty!
WARN: Could not open TS lookup file: "%s" (%d), user="%s"
WARN: LoginUser failed (%d) user="%s"
LookupFileUser
WARN: No TS lookup file specified!
*LookupFile
DisableConsoleClient
Portable Tech Console\nsm.lic
Portable Tutor\nsm.lic
*** Set eval flags failed, error [%d]
HasEval
V1.10.2
V12.00.2
V12.10.2
*** Set eval flags registy, key [%s]
*** Activate new license file in registy, key [%s]
ReplaceLicFile : Revert to previous license
ReplaceLicFile : License error %d reading %s
*** product after copy %d
*** product before copy %d
Product
*** Copy enforce section for config %x
*** Copied and read new license file
ReplaceLicFile : Load new license file
ReplaceLicFile : Status after renames %d - error %d
ReplaceLicFile : Attempt to rename %s to %s
ReplaceLicFile : Status after config test %d - lic error %d
ReplaceLicFile : Written file %s, read into temporary config
ReplaceLicFile : Rename current license file to %s
%snsm.%02d.lic
%snsm.%s.%02d.lic
ReplaceLicFile : Read license file
ReplaceLicFile : bWriteFile = %d, LoadLicense = %d
ReplaceLicFile : flags & 2 - just reread the license details
ReplaceLicFile : File checksum matches new checksum so don't write file but load
ReplaceLicFile : New checksum and disk checksum don't match so we write file
ReplaceLicFile : Checksums match, nothing to do:
ReplaceLicFile : Checksum from current license file - [%s]:
ReplaceLicFile : Checksum from new license - [%s]:
ReplaceLicFile : Checksum from config %x - [%s]:
_checksum
%snsm.lic
InternetCode
Key [%s], code [%s]
Activate only
ReplaceLicFile : Start - flags %d
NSToast.exe -s1 "%s" -s2 "%s" -s3 "%s" -png "%s" -ico "%s" -ii %d -hwnd %u
Isolation_old_tutor
Isolation_old_student
Isolation
SOFTWARE\Microsoft\Internet Explorer\Main
GetLatLong=%s, took %d ms
?IP=%s
http://geo.netsupportsoftware.com/location/loca.asp
SetChannel(%s), oldchan=<%s>
LookupFileMode
UseLookupFile
NSA.LIC
ProtectedStorage
SYSTEM\CurrentControlSet\Hardware Profiles\Current\System\CurrentControlSet\Enum
EnableAudioHook(%d, %d), gCount=%d
DisableGeolocation
Finished terminate
Stop tracing, almost terminated
pSlash
Error %s unloading audiocap dll
delete gMain.ev
Warning. Unprocessed notify, type=%d
Warning. Unprocessed notify NC_CMD, cmd=%d
deleted ipc
Termed
TermUI...
remove smartcard devices
HookDirectSound
Unload Hook
Error. Multiple Terminate.
Terminate Client32 (err=%d)
multipoint=%d, softxpand=%d, pid=%d
computername=%s, clientname=%s, tsmode=%d, vui=%d, vsvc=%d
client32 dbi %hs
%session%
$session$
%sessionname%
%s.%02d
Warning: Unexpanded clientname=<%s>
ClientName
MacAddress
ts macaddr=%s
Trying to get mac addr for %u.%u.%u.%u
ListenPort
TSMode
client32
Error x%x reading %s, sesh=%d
client32.ini
Info. GPF, restarting...
*ListenPort
TraceIPC
UseIPC
Global\NSMWClassAdmin
EnableSmartcardAuth
UseNTSecurity
EnableSmartcardLogon
AlwaysOnTop
*PriorityClass
Error. Could not load transports - perhaps another client is running
*StartupDelay
_debug
TracePriv
Windows CE
Windows 2016
Windows 10 x64
Windows 10
Windows 2012 R2
Windows 8.1 x64
Windows 8.1
Windows 2012
Windows 8 x64
Windows 8
Windows 7 x64
Windows 7
Windows 2008 x64
Windows 2008
Windows Vista x64
Windows Vista
Windows 2003 x64
Windows XP x64
Windows 2003
Windows XP
Windows 2000
Windows NT
Windows Millennium
Windows 98
Windows 95
UseLegacyPrintCapture
Windows XP Ding.wav
Windows Ding.wav
*BeepSound
*BeepUsingSpeaker
DisableHelp
NoFTWhenLoggedOff
DisableJournalMenu
DisableRequestHelp
DisableReplayMenu
DisableJoinClass
ShowKBEnable
ScreenScrape
DisableRunplugin
DisableAudioFilter
DisableAudio
DisableTSAdmin
RestartAfterError
NeedsReinstall
LSPloaded=%d, WFPloaded=%d
MiniDumpType
AssertTimeout
EnableGradientCaptions
Assist.htm
win8ui
Intel error "%s"
Error. Wrong hardware. Terminating
IsILS returned %d, isvistaservice %d
nss32.chm
Error x%x reading nsm.lic, sesh=%d
hClientRunning = %x, pid=%d (x%x)
closed ok
Info. Trying to close client
Info. Client running as user=%s, type=%d
Info. Client already running, pid=%d (x%x)
pcicl32
gClient.hNotifyEvent
Session shutting down, exiting...
NSMWClassVista
istaUI
istaService
cl32main
Found new explorer hwnd=x%x h=%d,w=%d,style=x%x (%s)
Found old explorer hwnd=x%x h=%d,w=%d,style=x%x (%s)
\Explorer.exe
CabinetWClass
TCOSTREAM_MESSAGE_STATUS_NSM_D94BA140-B4AF-41d4-9BC1-170A169F64CB
TCOSTREAM_MESSAGE_STOP_NSMVIEWSESSION_D94BA140-B4AF-41d4-9BC1-170A169F64CB
TCOSTREAM_MESSAGE_START_NSMVIEWSESSION_E2A17544-CDEE-4786-90E2-BB2F5A3C4FA0
NSMWClass247
/cobrowse
kernel32.dll
GetNativeSystemInfo
CurrentMinorVersionNumber
CurrentMajorVersionNumber
CurrentVersion
SOFTWARE\Microsoft\Windows NT\CurrentVersion
/thumb
/scrape
PCIMutex
_debug\tracefile
_debug\trace
SOFTWARE\Policies\NetSupport\Client\standard
Client32:Init
NSMWClass
close new explorer wnd x%x
No new explorer wnd
"%sNSMExec.exe" %s
*ExitMetroDelay
Error. WindowsD not generated
Error. ExitMetro code cannot init kbfilter
Exit Win10 Start screen (%s)
ProcessIdToSessionId
DisableStopClient32
ImpersonateCurrentUser
DisableClientConnect
DisableDisconnect
DisableLocalInventory
ShowUIOnConnect
Journals
JournalPath
JpegQuality
FontSizeFooter
FontSize
MarginBottom
MarginRight
MarginLeft
MarginTop
ImpersonateNetworkDrives
AutoICFConfig
1 -1 -1 -1 -1 10 10 800 700
WindowPos
Hotkeys
Toolbar
TextLabels
DisablePrintCapture
StatusMode
ExecMode
ScaleToFit
ScaleToFitMode
1000,50
BeepSound
BeepUsingSpeaker
nss_lock_image.jpg
ImageFile
MinimumEncryption
DisableManageServices
DisableCloseApps
StopSkip
StartSkip
ScrollDelay
Scrollbars
Cachesize
AutoScroll
WebServerPort
225.16.8.68
MulticastListenAddress
KeepAlive
bridge.psw
ViewModeAcknowledgement
TicklePeriod
SysTray
SOS_Alt
SOS_Ctrl
SOS_LShift
SOS_RShift
LogAppend
client32.log
Logfile
Buffers
%s%s.bin
m_pDoInv == NULL
clientinv.cpp
%s%s%s.bin
m_pDoInv
NSMClientInv::SendInvData(%x), left=%x
Pregenerated Inventory x%x
..\ctl32\clipbrd.cpp
*pData
CF_PRIVATELAST
CF_GDIOBJFIRST
CF_GDIOBJLAST
CF_PRIVATEFIRST
CF_DSPENHMETAFILE
CF_DSPMETAFILEPICT
CF_DSPBITMAP
CF_DSPTEXT
CF_OWNERDISPLAY
CF_MAX
CF_LOCALE
CF_HDROP
CF_ENHMETAFILE
CF_UNICODETEXT
CF_WAVE
CF_RIFF
CF_PENDATA
CF_PALETTE
CF_DIB
CF_OEMTEXT
CF_TIFF
CF_DIF
CF_SYLK
CF_METAFILEPICT
CF_BITMAP
CF_TEXT
IgnoreFormats
Native
OwnerLink
Ole Private Data
ObjectLink
Link Source Descriptor
Link Source
Object Descriptor
Embed Source
DataObject
Error Opening Clip
Error enumclip, e=%d, x%x
ppFormats
pData && pSize
(*ppClipData)->pData
!*ppClipData
openclip Error: Cant open clip
Sendclip Error: Cant open clip
CheckClip Error: Can't open clip, e=%d
DisableClipBoard
#32770
GetGUIThreadInfo
SendInput
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!@#$%^&')(.-_{}~.
ComboBox
IsWindow(hWin)
CltAutoLogon.cpp
pszDomain!=NULL
DirectUIHWND
Logon
LogonUI
passWd!=NULL
userNm!=NULL
domain!=NULL
IsWindow(hDia)
WTSGetActiveConsoleSessionId
CloseTouchInputHandle
GetTouchInputInfo
Invalid percentage value
RUNPLUGIN2
AckDlgTimeoutAccept
%02d:%02d
%d:%02d:%02d
CLTCONN.CPP
ValidAddresses.
UserNames
SecurityKey2
SecurityKey
Client
SharedUserAck
Log off event received. Close Window
*pEnd == 0
Warning. DoRefresh bitblts took %d ms
SilentRefresh L=%d, T=%d, W=%d, H=%d
silent
!"Unknown platform"
platformid
c:\program files
"%PROG%
Survey
\Rewards.bin
sd - Post WM_CLOSE to %08x
DisableShutDown
GPFOnReboot
FALSE || !"assertOnReboot"
AssertOnReboot
DisableReboot
DisablePowerOff
DisableLogoff
Login name %s
Not logged in!
Get login name. Check if logged in
GetName
DoUserLogin
limitcolorbits
DoFlushOptimal, maxcb=%d, cb=%d, gcb=%d
DisableAudioOut
DisableAudioIn
Recv AudioFmt, mode=%d, smp/s=%d, bits=%d
Avoided clip hang
<Unknown>
Show16
Show has overrun too much, aborting
NSMW16Class
IgnoreMacAddress
Info. Set MacAddr to %s
Info. macaddr[%d]=%s, ipaddr=%hs/%hs
VIRTNET
%d adapters in chain, %d adapters by size
pGetAdaptersInfo
GetAdaptersInfo
IPHLPAPI.DLL
Info. Unable to load netapi32
Warning. Netbios() returned x%x
Info. Netbios macaddr=%s
%02x%02x%02x%02x%02x%02x
*
Netbios
netapi32.dll
ListenAddress
RunAnnot
NSMClassList
userdomain$
Computername$
fullname$
loginname$
/weblock.htm
redirect:
http://127.0.0.1
RESUMEPRINTING
PRINTER=*
FILETYPES=
BLOCKPRINTING
PRINTER=*
FILETYPES=
BLOCK=1
BLOCKPRINTING
SETOPTICALDRIVEACCESS
ACCESSMODES=%u
SETOPTICALDRIVEACCESS
SETUSBMASSSTORAGEACCESS
ACCESSMODES=%u
SETUSBMASSSTORAGEACCESS
redirect:
%sinclude:
exclude:
include:
exclude:
PCIVideoSlave32
DoMMData - could not find %s window
%sblockapp.jpg
BlockedAppFile
DoDriveShield
PluginInstall: Close plugins
####### SENDING PLUGIN_INIT to connection
####### CheckPluginsInitialized - initialize %s plugin
DEVICES
IMCTRL
PRINTMAN
WEBCTRL
APPCTRL
DisableThumbnail
DisableWatch
DisableRemoteCmd
idata->pCobrowse
NSSStudentUIClass
VolumeControl : Unhandled exception!
VolumeControl exception : %hs
...ret %d
Muting with VolCtrl, mute=%d...
Info. NC_BATTERY took %d ms
DisableBatteryInfo
pcihooks.dll
DisableTyping
8.7.0.0
DisableWhenLoggedOn
send RDP_INFO_END_OF_RESET
NO VALID SMARTCARD DEVICE!!!
Error %d writing to smartcard device
Written %u bytes to smartcard device
transferred == datalen
Error %d reading from smartcard device
Read %u bytes from smartcard device
handling RDP_CMD_RESET
handling RDP_CMD_DISCONN_NONSCRAPE
handling RDP_CMD_ACKSCRAPE
SendJournalStatustoSTUI(%d, %d, %d, %d)
Journal status( bNoMenu = %d, gpJournal = %x, %d, %d) bVistaUI %d
pcinssui.exe
CLIENT32.EXE
NSSADMUI.EXE
PCICTLUI.EXE
PCINSSUI.EXE
Info. Set Volume, Locked %d, Volume %d, Max volume %d
DisableKeys
**** Reset expire flag
Reset JoinClass, ReplayMenu, RequestHelp, Journal and Audio, ts=%d, vui=%d, config %x
IsFree %d, was free %d
Expired
DoNewLic received (VistaUI=%d)
%sPlaySound.exe
StudentPicked.wav
%sSounds\%s
StudentSelected.wav
RandomSelect
SetSystemTime ret %d
%s (%d)
DoExecStoreApp:%s, result %d
ActApp.exe %s
ExecStoreApp, %s chg to %s
AppUserModelId
Software\Classes\ActivatableClasses\Package\DefaultBrowser_NOPUBLISHERID\Server\DefaultBrowserServer
DefaultBrowser_NOPUBLISHERID
From Tutor
DoSetWin8Mode::Mode %d
DisableTouch
Inject Touch Up @ %d,%d, id=%d
Inject Touch Down @ %d,%d, w=%d,h=%d, id=%d
SetMon %d
tooltips_class32
*UserAckRejectDefault
AckDlgTimeOut
*UserAckRejectWording
AckDlgDisplayText
*UserAckWording
helpdesk.ico
Set register header bitmap %x
No OEM image so use default
Try OEM image...
Set register header
RecIsMember(%ls, %ls) ret %d, took %u ms
IsMember(%ls, %ls) ret %d, took %u ms
LDAP://
ADsOpenObject(root) took %d ms, ret %x
gpfnADsEnumerateNext
ADsEnumerateNext
gpfnADsGetObject
ADsGetObject
gpfnADsOpenObject
ADsOpenObject
activeds.dll
Disconnect the Tutor
Register for log off event
m_idata
Create Message Dialog
Unregister log off event
Destroy Window
NSA %s
"%s" %s
\\.\%u\
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\%s
nsclienttb
NoExecWhenLoggedOff
DisableExec
SurveyResults
Error. Failed to get username for Register, e=%d
Info. No logged on user for Register
StudentRegister
"%s%s" %s
nsmexec.exe
DoRegisterUser
Send cached inventory
NC_INVENTORY Flags=x%x
Inventory already running - ignored
Failed to load player (%d)
DoShowVideo - could not find %s window
pcivideovi.exe /X
Error: Invalid data in approvedweblist
Error. NC_APPROVEDWEBLIST continuation ignored - missing start
DoApprovedWebList
UnloadMirrorOnEndView
Fully Authenticated (pCC=%x, user=%s)
STUDENTUI: Error launching studentui
STUDENTUI: Found window handle %x
/utf8
"%s%s"
StudentUI.exe
send RDP_INFO_HOOK_LOADED
dwEvent == EV_RELOADHOOK
ALERT: Smartcard device already acquired by another connection
AcquireSmartcardDevice called
idata->pSmartcardDevice == theSmartcardDevice
ReleaseSmartcardDevice called
Adding Journal Item, type=%d
Journal prevented duplicate lesson details
Stop Journal
Start Journal, params=%s
libhpdf.dll
NC_JOURNAL jcmd=%d
TraceJournal
SelectGroup
ScrapeWinlogon(false)
ScrapeWinlogon(true), mode=%x, flags=%x
TCP Retries
Packets/sec
*ExitMetroCloseDelay
ActivateStui=-1, @%d,%d, actwin=%x [%s]
*ExitMetroBreak
"%sNSClientTB.exe"
NSMCoolbar
ActivateStui=%d, @%d,%d, actwin=%x [%s]
%s PLUGIN_%s CMD_%s %hs
UNREGISTER
REGISTER
RESEND
CHANGE
ACTIVATE
DATA_OVERWRITE
TC_LIST
TC_FILTER
EXECUTE
NTGroups
ADGroups
UseADSecurity
*** Warning. Failed Attack %u, from %s, at %s
LastAttacker
LastAttack
%04d/%02d/%02d %02d:%02d:%02d
FailedAttacks
Software\Productive Computer Insight\Client32
%s, %d
Info. Connection Rejected, reason=%d
send %s, enabledhook=%d
RDP_INFO_NOVIEW_LOGGEDOFF
RDP_INFO_VIEW_SCRAPE
idata->mode & NC_SENDSCR
LoadMirrorOnScreenScrape
*ScreenScrape
Send RDP_WARN_NONSCRAPE_DISCONN
TCAppData.dat
RESUMEPRINTING
TCPRNData.dat
ACCESSMODES=
TCCDData.dat
TCUSBData.dat
TCListData.dat
TCFilterData.dat
NewFilter=%.900s
OldFilter=%.900s
"localhost"
"localhost"000-240
redirect:
http://%s/
"%s"000-240
"%s"000-240
localhost
redirect:
http://localhost/
TracePlugins
%s|%s|
SOFTWARE\Productive Computer Insight\Client32\AutoReconnect
DisableReconnect
ScrapeLogon
list<T> too long
IsHacked(%x)
IsHacked(%x).
Client.
DoSetMode chg to %x (%x) from %x (%x)
ViewModeAck
NoAckWhenLoggedOff
*ViewModeAcknowledgement
DisableChat
*ShowKBEnable
ShowToWindow
DisableShow
DisableControl
DisableShare
GPFOnCAD
FALSE || !"assertOnCad"
AssertOnCAD
DoCAD, DisableSAS=%d
DisableSAS
Keeping hShowPipe
NSMLogonUser Failed
Send CAD
client32provider reported error, send CAD just in case (lap %d)
IPC client32login SendMessage ret %d (ipc err=%s
error opening ipc lap %d to logon, e=%d, %s
Global\Client32Provider
LegalNoticeText
LegalNoticeCaption
Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Software\Microsoft\Windows\CurrentVersion\Policies\System
DoAutoLogon - appear to be logged on so ignore
DisableLogon
pnc != NULL
idata != NULL
NsAppSystem Error : DoMessage() : Unhandled exception!
NsAppSystem Error : DoMessage() : %s
Message. %s (NsAppSystem : NotifyGeneralMessageReceived())
10.21.0.0
ReconnectDelay
Disconnect(%p), closing player
Disconn - not closing studentui, wnd %x not iswindow
Disconnect closing studentui
LogoffOnDisconnect
*LogoffOnDisconnectIfUserChanged
DisconnDlgDisplayText
Show enabling mirror
CacheSize
idata->hShowEvent
Error creating hShowPipe, e=%d
\\.\pipe\nsm_ctl32_show_%d
DisableCobrowse
PolicyChanged, disconnect
PolicyChanged, userack needed, disconnect
UserAcknowledge
PolicyChanged, invalid user, disconnect
JoinChat
RDH::Create whiteboard object %x, ref count %d
WhiteBoard
RDH::CHATEX_INVITE received - whiteboard %x
RDH::Release whiteboard ref
RDH::CHATEX_CLOSE received
toastMessage.png
Result of SendMessage %d
Send Message to StudentUI
DisableMessage
DoNSMProtect - CANNOT ACCESS PREFERENCES!!!
DoNSMProtect - PASSWORDS DO NOT MATCH!!!
Northpoint
Northpoint Lockdown Preferences
DoNSMProtect - Turn OFF
DoNSMProtect - Turn ON
Announcement from %s [announcer-apptype: 0x%x] [target-apptype: 0x%x] [flags: 0x%08x]
Announce Error from %s. Invalid crc - ignoring
*CurrentUserName
Channel
*ClassInfo
NameReq Error from %s. Invalid crc - ignoring
IgnoreBroadcastMsg
%spciinv.dll
%sremcmdstub.exe
UserAck
AckDlgTimeout
NoAckWhenCurrentUser
DoSelect, rejecting, reason=%d
Error: Reject connect attempt for Tutor only
Warning. Tutor is product %d we are product %d, set to expired
*** Our product %d - cfg = %x
%s(%s)
SecurityKeySet
activation=%d, expiry=%s
Expiry
Activation
\Registry\Machine\SOFTWARE\Classes\NPPr675hg
EvalDaysLeft
Warning. EvalDaysLeft==-1, setting expired=1
Info: enabling service/app management for Tech Console connection
CurrentRealName
CurrentUserName
*MacAddress
ThisIpAddr=%s, SubnetMask=%s, Wireless=%d
Wireless
SubnetMask
DisableDisconnectTutors
Priority
Shared
DisableCtl16
!"Memory Error"
NSL NSPSCR 1
BiosModel
BiosSerialNumber
BiosManufacturer
bios mfr=%s, serno=%s
NonAcerClient
Getting bios info
DisableSecurity
NSMClientConnection
Info. NC_WIRELESS took %d ms
DisableWirelessInfo
Warning. DoNotify(%d) not processed
Warning. Eval period expired - ignoring cmd %d (x%x) - idata %x - VistaUI %d
Unable to select/accept connection within 10sec, ignoring cmd %d
gMain.pReconnThread
CltReconn.cpp
Stop reconn to %s
Reconn
net stop client32
command.com
command
word.exe
wordpad.exe
wordpad
notepad.exe
notepad
edit.com
Unsupported Command: %s
CloseHandle_1
remcmdstub.exe %u %u %u %u %%COMSPEC%%
close pipe read
Broken ReadPipe
CltRemCmd
CloseHandle5
CloseHandle4
CloseHandle3
CloseHandle2
CloseHandle
DuplicateHandle
DuplicateHandle2
CreatePipe2
CreatePipe
Close Read Pipe
Close Write Pipe
UseNTSecurityForRemoteCmd
Replay
CltReplay.cpp
NoSwitchMsg
KeepAspect
FullScreen
*Toolbar
*TextLabels
*Statusbar
*WindowPos
m_hWnd || !"CltReplayClass Window failed to create"
NSMCltReplayClass
NSMClientReplayWin::m_aProp
NSMReplayWin
CltReplay
Error %d blitting from winlogon, took %d ms
/thumb:
ThumbWL
creating @%s %s
"%sclient32.exe" /thumb:%s
Winsta0\%s
Thumbnails: mon=%d, w=%d, h=%d, c=%d, interval=%d
thumb %d*%d -> %d*%d*%d (limit=%d*%d), nBytes=%d, blitTime=%d, packTime=%d, sendTime=%d
GetDIBits ret %d lines
*TraceThumbs
*LegacyThumbnails
StretchBlt ret %d, e=%d
Client32ThumbDib_%x
Exit thumb thread
Cobrowse FindWindow ret %x
Cobrowse WaitForInputIdle ret %x
m_hAppWin
CobrowseProxy.cpp
CobrowseProxy::RunCobrowse
Bridge
PrintCapture
Client
_debug
Dialup
FileTransfer
General
Journal
_License
NameLookup
MMPlayer
Startup
HelpRequest
GroupLeader
Record
Register
Replay
ShowRecord
PrintManagement
Devices
KeyMonitor
StudentToolbar
Protect
Mobile
Assistant
(idata->flags & CFG_VOLATILE) == 0
..\ctl32\Config.cpp
Courier
Terminal
traceConfig
Standard
idata->hCurrConfig
Software\Classes\VirtualStore\MACHINE\%s\%s\ConfigList
NetSupport School Pro
NetSupport School
General\ProductId
%sUseHKLM
buflen >= sizeof (TCHAR)
WARNING: *NOT* Sending EV_CONFIGSET from %s@%d
cfg %x: Set [%s]%s=%s
(NULL)
_tcslen(section) + 1 + _tcslen(key) + 1 <= countof(keybuf)
maxname < _tsizeof (keybuf)
strlen (k.m_k) < _tsizeof (m_szSectionAndKey)
maxname < _tsizeof (m_szSectionAndKey)
PCICTL
..\CTL32\configplus.cpp
e:\nsmsrc\nsm\1210\1210f\ctl32\configplus.h
result <= buflen
DisableUserPolicies
%s\%s\%s\
Software\Policies\NetSupport
Client.%04d.%s
Software\Policies\NetSupport\Client\Standard
Software\Policies\NetSupport\Client
enforce
defaults
?starT
?expirY
cd_install
_version
%s.%04d.%s
_include
%c%04d%s
*force_quiet
Error %d reading %s
Invalid product (%s)
ACM.LIC
%d %d %d %d %d %d %d %d %d
!This program requires Microsoft Windows.
DOMAIN
KERNEL
domain.exe
tX<"t$<\t
t^<"t'<\t
_C_FILE_INFO=
NetApi.dll
NetWkstaGetInfo
xdomain error %d
<<NMSG>>
- stack overflow
- integer divide by 0
- not enough space for environment
- unexpected heap error
- unexpected QuickWin error
- not enough space for arguments
- no main procedure
run-time error
- floating-point support not loaded
ctl_getconnectivityinfo
ctl_getcodepage
ctl_clearpin
ctl_controlpinrequest
ctl_controlsendpin
ctl_clientpinrequest
ctl_getlocalipaddressinuse
ctl_sendname
ctl_broadcastdata
ctl_findslavesex
ctl_publishserviceex
ctl_publishservice
ctl_escape
ctl_getfailedreason
ctl_loadbridge
ctl_myaddr
ctl_callremote
ctl_closeremote
ctl_openremote
ctl_maxpacket
ctl_helpreq
ctl_pause
ctl_subset
ctl_sendto
ctl_sendif
ctl_sendex
ctl_send
ctl_connected
ctl_nsessions
ctl_hangup
ctl_call
ctl_getsession
ctl_findslaves
ctl_close
ctl_open
ctl_pingnet
ctl_networks
ctl_bridgename
ctl_remotename
ctl_netname
ctl_installed
..\ctl32\Connect.cpp
ctl_version
info: session %d hungup, no longer need EV_CALLED_CONTROL
Processed EV_CALLED_CONTROL s=%d, addr=%s
CalledControl queuing connectCB
CalledControl connectCB (ConnectToClient)
Processing EV_CALLED_CONTROL s=%d, addr=%s, xtra=%s...
NSMConnReg
!"call this only once per object"
LimitColorbits
"%s%s%s%s
xdomain.exe"
xdomain.txt
xdomain.exe
Info: GetDomain took %d ms
Info: waiting for lanmanworkstation to start (%d)
lanmanworkstation
NetApiBufferFree
NetWkstaGetInfo
idata->sendbytes + idata->sendpackets == 0 || idata->dead
idata->selcount == 0
CheckSelProc(%s), selcount=%d (!=0), session=%d, pc=%x, pd=%x
Codepage
932, 949, 1361, 874, 862
idata->tr
NC_REFRESH %s
nbytes=%d, max=%d, sesh=%d
send1 encrypted len=%d from %d
m_lookup
Windows
Device
No default printer,,LPT1:
Drivers
Printer
op - obuf <= _tsizeof (obuf)
%03d%s
$CLIENTNAME$
$PROMPT$
ReportDriver
*LocalClient
Unpausing sessionz %dz, rxpending = %d, lag = %d, pausedfor %d ms
idata->compress_idata
ResetCompressor(been_reset=1)
ResetCompressor(flush=1)
Compress
%04x: %s
offset=%04x, nbytes=%04x (%d), nc=x%x
Decompress error: %s
nclen=%d, bytesleft=%d, cmd=%d (%x), nbytes_c=%d, nbytes_uc=%d, p=%x, p0=%x
Decomp, nbytes_c=%d
datalen + idata->recvbytes <= MAX_DEFLATE_SIZE (MAX_STREAMLEN)
DoStream error, been_reset=1
Compression Error. (s%d) NSMConnection::DoStream **** not selected ****
Serial
*slot == NULL
SendBig (s%d) %-4u bytes
WARN: transport lib (%d) does not export ctl_publishservice(ex)
transport > 0 && transport < TR_END
pszPIN && _tcslen(pszPIN) == PIN_LENGTH
UseUdpNetworkSpeed
Pause(%d)
NCS: updated callname "%s" to "%s"
EnumConn error, idata=%x
Documents:
Desktop:
FixEHParent
Broadcast channel/room <%s>
NSMLookup!Announce, target=%s, flags=0x%08x
(null)
IsMemberChannel(%s, %s) returned %s
ConnectToRoom
ConnectOnStartup
BrowseAndConnect
PublishClass
??CTL32.DLL
TCP/IP
NetBIOS
idata->n_connections=%d
CloseTransports slept for %u ms
CallControl - ctl_call(%s,%d) ret %d
SendFlush(%d,%d), CF_NORESET=%d, cbits=%d
LimitColorBits
*FullColourOnSlowLink
Encrypt Manager
EncryptionType
des_enable
RememberPassword
!idata->clientinfo.is_client
Enable
%s - %s
idata->isprinter
Error. incomplete config
AwaitAccept took %d ms, cancelled=%d, call_result=%d
ConnectTimeout
ChannelUtf8
ChromeUtf8
Error. Too many config items. Probable DoS attack
Error. Config key too long. Probable DoS attack
ClientCfg %s\%s=%s
TraceClientConfig
c_idata->selcount == 0
session
_tcslen (buf) < _tsizeof (buf)
%02d-%s-%02d %02d:%02d:%02d
MODEM.LOG
ColourReduction
LowBandwidthMode
DisableRememberPassword
ControlName
DefaultUsername
client says NotMyPin
client says pin ok
old client cannot do pin
ImageWhenLocked
BlankWhenLocked
BlankClientScreen
WallPaper
*DisablePrintCapture
Filename
IsPrinter
NoAndroid
%u.%u.%u.%u
<No username>
Description
*product
_assist
fake_product
QConnectReason
idata->selcount
!idata->prevent_select
CONNECT
erased=%d, idata->dead=%d
Deregister NC_CHATEX for conn=%s, q=%p
connSend (s%d) %-4u bytes: %s
!bSentLogin
Connect, Send AudioFmt, mode=%d, smp/s=%d, bits=%d
NameResp from %s(%s), len=%d/%d, flags=%d, channel=%s
tracerecv
idata->RMap.empty ()
status=%d, event=%x, cmd=%d, type=%d
idata->tr == NULL || idata->tr == (TRANSPORT *) -1 || idata->dead
NSMConnection
DestroyThread finished, lwr==upr
DestroyThread finished, NULL lid
DestroyThread finished, cid==-1
*slot == c
slot %d, ppConn=%x, *ppConn=%x, c=%x
NSMFConnection
Error: %s
pEntry->sofar (%d) != pEntry->totlen (%d), uid=%u, pEntry=%x
bigdata(%x)=%s
too much data, biguid=%u, thislen=%d, sofar=%d, totlen=%d, more=%d, excess=%d, allzero=%d, Excess: %s
Warning. Bigneasy can't alloc %u
Error: ignored last bigneasy data without earlier data (biguid=%d)
r->queue != queue
Register NC_CHATEX for conn=%s, q=%p
Receive
Queue EV_CALLED_CONTROL: session=%d addr=%s extra=%s
Error %dz discarded %-4u bytes: %s
nc->command == NC_ACCEPT
idata->dialup == NULL
UseWebSock
AccelerateBrowse
*maxslaves
NBCTL32.DLL
Warning. Discarding Unreg cmd %d (x%x), datalen=%d, data: %02x %02x %02x %02x
Pausing sessionz %dz, rxpending = %d, lag = %d
datalen=%d (x%x), cmd=%d, direct=%d
r->threadid != GetCurrentThreadId ()
Error. NULL compress_idata
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
McAfee Clean
Cylance Unsafe
Zillya Tool.NetSup.Win32.224
Sangfor Clean
K7AntiVirus Unwanted-Program ( 005b7e491 )
Alibaba Clean
K7GW Unwanted-Program ( 005b7e491 )
Cybereason Clean
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec Clean
tehtris Clean
ESET-NOD32 Win32/RemoteAdmin.NetSupportManager.Z potentially unsafe
APEX Clean
Avast Clean
Cynet Clean
Kaspersky not-a-virus:HEUR:RemoteAdmin.Win32.NetSup.gen
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
TACHYON Clean
Sophos Clean
F-Secure Clean
DrWeb Program.RemoteAdmin.840
VIPRE Clean
TrendMicro Clean
McAfeeD Clean
Trapmine Clean
FireEye Clean
Emsisoft Clean
SentinelOne Clean
GData Clean
Jiangmin Clean
Webroot Clean
Varist W32/RemoteAdmin.OOWP-2683
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm not-a-virus:HEUR:RemoteAdmin.Win32.NetSup.gen
Microsoft Clean
Google Detected
AhnLab-V3 Clean
Acronis Clean
BitDefenderTheta Clean
MAX Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Clean
MaxSecure Trojan.Malware.121218.susgen
Fortinet Clean
AVG Clean
DeepInstinct Clean
alibabacloud Clean
No IRMA results available.