PE Compile Time

2006-11-27 11:24:01

PE Imphash

135e92fc9902f3140f2e5a51458efdf0

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
UPX0 0x00001000 0x00023000 0x00022a00 5.7915083053
UPX1 0x00024000 0x00008000 0x00007e00 2.28338087137
.rsrc 0x0002c000 0x00003000 0x00002200 3.96669176543
.imports 0x0002f000 0x00001000 0x00000800 4.10414675223

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0002cf64 0x00000ea8 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors
RT_ICON 0x0002cf64 0x00000ea8 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors
RT_ICON 0x0002cf64 0x00000ea8 LANG_NEUTRAL SUBLANG_NEUTRAL Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors
RT_GROUP_ICON 0x0002de10 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0002de44 0x00000204 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library MSVBVM60.DLL:
0x401000 __vbaVarTstGt
0x401004 __vbaVarSub
0x401008 __vbaNextEachAry
0x40100c _CIcos
0x401010 _adj_fptan
0x401014 __vbaVarMove
0x401018 __vbaFreeVar
0x40101c __vbaLenBstr
0x401020 __vbaStrVarMove
0x401024 __vbaFreeVarList
0x401028 __vbaEnd
0x40102c __vbaPut3
0x401030 _adj_fdiv_m64
0x401034 __vbaFreeObjList
0x401038 None
0x40103c _adj_fprem1
0x401040 None
0x401044 __vbaRecAnsiToUni
0x401048 __vbaCopyBytes
0x40104c __vbaStrCat
0x401050 __vbaVarCmpNe
0x401054 __vbaForEachCollAd
0x401058 __vbaLsetFixstr
0x40105c __vbaSetSystemError
0x401064 __vbaLenVar
0x401068 _adj_fdiv_m32
0x40106c None
0x401070 __vbaVarXor
0x401074 __vbaAryDestruct
0x401078 None
0x40107c __vbaLateMemSt
0x401080 None
0x401084 __vbaExitProc
0x401088 None
0x40108c __vbaOnError
0x401090 __vbaObjSet
0x401094 _adj_fdiv_m16i
0x401098 __vbaObjSetAddref
0x40109c _adj_fdivr_m16i
0x4010a0 None
0x4010a4 __vbaStrFixstr
0x4010a8 None
0x4010ac None
0x4010b0 __vbaBoolVarNull
0x4010b4 _CIsin
0x4010b8 None
0x4010bc None
0x4010c0 None
0x4010c4 __vbaVarCmpGt
0x4010c8 __vbaChkstk
0x4010cc None
0x4010d0 __vbaFileClose
0x4010d4 EVENT_SINK_AddRef
0x4010d8 None
0x4010dc __vbaGet3
0x4010e0 __vbaStrCmp
0x4010e4 None
0x4010e8 __vbaAryConstruct2
0x4010ec __vbaVarTstEq
0x4010f0 __vbaObjVar
0x4010f4 DllFunctionCall
0x4010f8 __vbaVarOr
0x4010fc __vbaRedimPreserve
0x401100 _adj_fpatan
0x401108 __vbaRedim
0x40110c __vbaRecUniToAnsi
0x401110 EVENT_SINK_Release
0x401114 None
0x401118 _CIsqrt
0x40111c __vbaVarAnd
0x401124 __vbaExceptHandler
0x401128 __vbaPrintFile
0x40112c __vbaStrToUnicode
0x401130 _adj_fprem
0x401134 _adj_fdivr_m64
0x401138 None
0x40113c None
0x401140 None
0x401144 __vbaFPException
0x401148 __vbaInStrVar
0x40114c None
0x401150 __vbaStrVarVal
0x401154 __vbaVarCat
0x401158 __vbaI2Var
0x40115c None
0x401160 None
0x401164 None
0x401168 _CIlog
0x40116c __vbaFileOpen
0x401170 __vbaNew2
0x401174 __vbaInStr
0x40117c _adj_fdiv_m32i
0x401180 _adj_fdivr_m32i
0x401184 __vbaStrCopy
0x401188 __vbaFreeStrList
0x40118c __vbaVarNot
0x401190 _adj_fdivr_m32
0x401194 _adj_fdiv_r
0x401198 None
0x40119c __vbaVarTstNe
0x4011a0 __vbaVarSetVar
0x4011a4 __vbaI4Var
0x4011a8 __vbaVarCmpEq
0x4011ac __vbaForEachAry
0x4011b0 __vbaVarAdd
0x4011b4 __vbaLateMemCall
0x4011b8 __vbaStrToAnsi
0x4011bc __vbaVarDup
0x4011c0 __vbaFpI2
0x4011c4 __vbaVarMod
0x4011c8 __vbaFpI4
0x4011cc None
0x4011d4 None
0x4011d8 __vbaLateMemCallLd
0x4011dc _CIatan
0x4011e0 __vbaStrMove
0x4011e4 None
0x4011e8 None
0x4011ec __vbaStrVarCopy
0x4011f0 None
0x4011f4 _allmul
0x4011f8 None
0x4011fc _CItan
0x401200 None
0x401204 __vbaNextEachCollAd
0x401208 None
0x40120c __vbaAryUnlock
0x401210 _CIexp
0x401214 __vbaFreeObj
0x401218 __vbaFreeStr

!This program cannot be run in DOS mode.
Richya
.imports
ddddddddddddd
IIIIIIIIIIIIIId7
ttttttttj
<<<<<<<T
1111111(o
Id7(1IIIIIIIIIIII
IIIII`
[fPFMlllll
[sTtpk
_glllll
nhGFlllll
[i>wTTTTTTTTwpN
[i)<<<<<<<<<<<<<<:nK_l
[i}<<<<<<<<<<<<<<<<<wl
[c*(((((((((((((((((wl
[>6cj0
"' 6Hx
.LjR=W
.Jbjx=
[[[[[Y
[[[[[[
[[[[[[[
[q~b[Fllll
ha[]dlll
nKB\`lll
[f}tttttttttt
nKG[llll
ha[llll
XwwwwwwwwwwwwwwSSSTTpNJBllll
SSSSSSSSSSSSSSTTTTTTTTT:kK^l
<<<<<<<<<<<<<<<<<<<<<<<<<<u9l
A><<<<<<<<<<<<<<<<<<<<<<<<<<
V211111111111111111111111111
2((((((((((((((((((((((((((
|%##########################
*'5[Dj
"'/5H[DPY
! 6J[[Lj=
! 6J[[
-Yjoz{
[[[[[jxzW
[[[[[[[[
[[[[[[[[7
Timer2
Timer1
Fungsi
Getdrive
Proses
Timer1
C:\Program Files\Microsoft Visual Studio\VB98\VB6.OLB
Timer2
PatchTaskManager
IsMePresent
MakeDuplicateFile
CreateDefaultFile
AmbilDomain
AmbilComputer
AmbilDrive
SpreadEmailOutlook
InfeksiMySharing
InfeksiFloppy
InfeksiFlashDisk
InfeksiNetworkDrive
advapi32.dll
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
GetDriveTypeA
RegQueryValueExA
RegSetValueA
kernel32
user32
CloseWindow
GetFileAttributesA
CopyFileA
SetFileAttributesA
shell32.dll
ShellExecuteA
DeleteFileA
ReadProcessMemory
mpr.dll
WNetGetUserA
WNetGetConnectionA
WNetAddConnectionA
netapi32.dll
NetUserGetLocalGroups
NetUserGetInfo
NetUserGetGroups
GetUserNameA
CreateDirectoryA
WriteProcessMemory
shlwapi.dll
PathIsDirectoryA
RtlMoveMemory
GetFileType
MoveFileExA
GetLogicalDriveStringsA
GetLogicalDrives
MAPI32.DLL
BMAPIFindNext
MAPISendDocuments
BMAPIReadMail
SendMessageA
FindWindowA
FindWindowExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
kernel32.dll
GetSystemDirectoryA
GetWindowsDirectoryA
TerminateProcess
DeleteService
CreateToolhelp32Snapshot
LockWindowUpdate
GetCurrentProcess
GetCurrentProcessId
FindClose
GetProcAddress
CallWindowProcA
psapi.dll
EnumProcesses
OpenProcess
Process32First
Process32Next
ExitWindowsEx
RegisterServiceProcess
FreeLibrary
LoadLibraryA
CloseHandle
OpenProcessToken
GetModuleFileNameExA
EnumProcessModules
comdlg32.dll
GetFileTitleA
Module32First
Module32Next
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
GetVersionExA
FindFirstFileA
FindNextFileA
ShowWindow
GetParent
GetForegroundWindow
GetWindowTextA
PostMessageA
DestroyWindow
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
lstrlenA
lstrcpyA
__vbaRedimPreserve
VBA6.DLL
__vbaNextEachCollAd
__vbaAryDestruct
__vbaVarCmpGt
__vbaVarAnd
__vbaForEachCollAd
__vbaStrVarCopy
__vbaExitProc
__vbaLateMemSt
__vbaVarLateMemCallLdRf
__vbaVarSetVar
__vbaI2Var
__vbaLateMemCallLd
__vbaObjSetAddref
__vbaAryUnlock
__vbaNextEachAry
__vbaObjVar
__vbaLateMemCall
__vbaVarLateMemCallLd
__vbaVarNot
__vbaInStr
__vbaForEachAry
__vbaFileClose
__vbaPut3
__vbaFileOpen
__vbaVarAdd
__vbaI4Var
__vbaCopyBytes
__vbaStrVarMove
__vbaVarCmpNe
__vbaLsetFixstr
__vbaFixstrConstruct
__vbaVarCmpEq
__vbaVarDup
__vbaVarTstEq
__vbaInStrVar
__vbaVarOr
__vbaBoolVarNull
__vbaStrCopy
__vbaStrToUnicode
__vbaLenBstr
__vbaFreeVar
__vbaStrCat
__vbaStrMove
__vbaStrCmp
__vbaEnd
__vbaFreeStrList
__vbaSetSystemError
__vbaStrVarVal
__vbaStrToAnsi
__vbaFreeVarList
__vbaVarCat
__vbaVarMove
__vbaObjSet
__vbaFreeObjList
__vbaFreeStr
__vbaFreeObj
__vbaHresultCheckObj
__vbaNew2
__vbaOnError
__vbaRedim
__vbaFpI4
__vbaStrFixstr
__vbaRecAnsiToUni
__vbaRecUniToAnsi
__vbaVarTstNe
__vbaVarSub
__vbaVarTstGt
__vbaAryConstruct2
__vbaFpI2
__vbaLenVar
__vbaVarXor
__vbaVarMod
__vbaGet3
__vbaPrintFile
nFindWhat
nReplaceWith
AddName
} j|h\c@
} jXh\c@
} jdh\c@
} jXh\c@
} j\hLl@
} jdh\c@
} jPh\c@
} jPh\c@
} jPh\c@
} jPh\c@
} jXh\c@
} jhh\c@
} jXh\c@
} jXh\c@
} jdhLl@
} jXh\c@
} jdhLl@
} jXh\c@
J>-A[
} jdhLl@
} jXh\c@
} jdhLl@
} jXh\c@
} jdhLl@
} jXh\c@
} jdhLl@
} jXh\c@
} jdhLl@
} jXh\c@
} jdhLl@
} jXh\c@
} jXh\c@
} j\hLl@
} jPh\c@
} jXh\c@
} jPh\c@
} jXh\c@
} jPh\c@
} jXh\c@
} jPh\c@
} jXh\c@
} jPh\c@
} jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jPh\c@
jXh\c@
jB^jZXf;
} jPh\c@
} jXh\c@
__vbaVarTstGt
__vbaVarSub
__vbaNextEachAry
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
__vbaPut3
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaStrCat
__vbaVarCmpNe
__vbaForEachCollAd
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaVarXor
__vbaAryDestruct
__vbaLateMemSt
__vbaExitProc
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaStrFixstr
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGet3
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
__vbaObjVar
DllFunctionCall
__vbaVarOr
__vbaRedimPreserve
_adj_fpatan
__vbaFixstrConstruct
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaInStrVar
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaFileOpen
__vbaNew2
__vbaInStr
__vbaVarLateMemCallLdRf
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaVarNot
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarTstNe
__vbaVarSetVar
__vbaI4Var
__vbaVarCmpEq
__vbaForEachAry
__vbaVarAdd
__vbaLateMemCall
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarMod
__vbaFpI4
__vbaVarLateMemCallLd
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
__vbaNextEachCollAd
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr
`.data
HX\2@
]X7:~r
_jS-}=
t$t#t$l
D$t#D$h
D$t+D$\
.)D$H)
s`)L$4
D$t+D$\
)D$H)
9l$\w_
XPTPSW
ddddddddddddd
IIIIIIIIIIIIIId7
ttttttttj
<<<<<<<T
1111111(o
Id7(1IIIIIIIIIIII
IIIII`
[fPFMlllll
[sTtpk
_glllll
nhGFlllll
[i>wTTTTTTTTwpN
[i)<<<<<<<<<<<<<<:nK_l
[i}<<<<<<<<<<<<<<<<<wl
[c*(((((((((((((((((wl
[>6cj0
"' 6Hx
.LjR=W
.Jbjx=
[[[[[Y
[[[[[[
[[[[[[[
[q~b[Fllll
ha[]dlll
nKB\`lll
[f}tttttttttt
nKG[llll
ha[llll
XwwwwwwwwwwwwwwSSSTTpNJBllll
SSSSSSSSSSSSSSTTTTTTTTT:kK^l
<<<<<<<<<<<<<<<<<<<<<<<<<<u9l
A><<<<<<<<<<<<<<<<<<<<<<<<<<
V211111111111111111111111111
2((((((((((((((((((((((((((
|%##########################
*'5[Dj
"'/5H[DPY
! 6J[[Lj=
! 6J[[
-Yjoz{
[[[[[jxzW
[[[[[[[[
[[[[[[[[7
KERNEL32.DLL
MSVBVM60.DLL
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect
MSVBVM60.DLL
__vbaVarTstGt
__vbaVarSub
__vbaNextEachAry
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
__vbaPut3
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaStrCat
__vbaVarCmpNe
__vbaForEachCollAd
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaVarXor
__vbaAryDestruct
__vbaLateMemSt
__vbaExitProc
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaStrFixstr
__vbaBoolVarNull
_CIsin
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGet3
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
__vbaObjVar
DllFunctionCall
__vbaVarOr
__vbaRedimPreserve
_adj_fpatan
__vbaFixstrConstruct
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaInStrVar
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaFileOpen
__vbaNew2
__vbaInStr
__vbaVarLateMemCallLdRf
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaVarNot
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarTstNe
__vbaVarSetVar
__vbaI4Var
__vbaVarCmpEq
__vbaForEachAry
__vbaVarAdd
__vbaLateMemCall
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarMod
__vbaFpI4
__vbaVarLateMemCallLd
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
__vbaNextEachCollAd
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr
!This program cannot be run in DOS mode.
`.data
Dealahoya
Sample AddIn Project
MDIForm1
MDIForm1
6(d4
 8) f7
8+!"#
 !8*!e6
9+" ""
!!9+"f7
9," ##
!"":,"f8
:,#"#$
!##:,#f8
;,#"#$
!$$;-$g9
:-$#$%
"$$:.$f9
;-$"$%
$%%;.%g8
<.$#%%
%&&</&h9
</%$%&
$%%=.%g:
=.%$&&
%&&>/&h9
>/&%''
$&'=0'i:
?0'&((
%&&>1(h;
>0(%')
&''?1(j;
?1(&()
 ())A3*k=
A3*(*) 
! )**B3+l>
k<A4+)**!
! ())B4*n>
B5*))*
! )**C4+n=
l=C5+**+!
"!!+++B5-h="
h>"B6.,,,#!!
$""---A7/\;%{@
^=(B82/0/%##
#!!--,<4/N7'c8
O7(=50/.-#"!
!)((3.+=/&G.T1
-($$"!
&##+'&,&#-$ 0&
&##%###"""!""! " " " #!
#!" # #! $"!'$#('%('%'%$&%#&%%&#$'$#'&$'%$'##&#"$! "
# #!# "
"! %#"'%$(&%(&%'$#&$#'%$&##'$#(&$&%#%$"%#"#!!
" "!!#!!#!" " #! #! !
#!$"!$$#&&%('')*(+*)*)'&%#
$"!&$$(%$'%%&$%&%$&$$&$#%#"&$#%##&##(&%100@??JKJLMLHHHGGGFFGFGFGGGHGGGFGEDE?>?322%#"
!'%$(&%'%%&#$'#"&$$$##$!!%#"&%$*))544ECDNMNMLLHGHGFFFFGFFEGGGIHIFFGA@?998.-,# 
" !'&&(&&&%$%$#%%$&%$%$##""$##*))100;;:GGGNONONMKJIBA@765.--+++
$!!*%$.('/)(.*)-+*.*(-*(.('-)(,((,('/+*?;:XVUkjitsrtttttttttttsuuuvvvuttsqqjhhVSR;86-('+'&.*(.*)/*)/*)/**.**,((,'&-)'.*)400EBB_]^rpqwuvvttusssrrttsvuuxvvtrslkj`_^KIH511)$$+&%.*)/*).*).*)/*).+)-)(+&%,('3..=99OMKfedvvtyyxuttihhXWWKKKGGG
'##-('1+*4-,4.-5/.60/4/.4.-4/.3.-1+*3-+D@>a_^}||
gcbLFF944.(',&%3-,6106005//3.-3.-3-,1+*611JGGmkk
}{{YUU?::4--.''.('3-,61070/5/.4.-2,+3,+50/>98WSR|zy
rppjjj
# )&&0+*4.-70/810:21;43:21;21:329215-,5.,F>>`\\
vrqOIH2*),$#6/.<54<44;32:21;219103,+6/.KEDpll
a[[B;;0((.&%7/.=65<54:21910:1090/5.-;43XRQ
&""*((-)(.)(1+*6.-910;21;11:21;32:216.-6-,A87SMLqmm
pjiG@?7..6.,7/.90/;21<43<33:105,+4-,C=;`[Z
_XX>653+*7..921:10:21;32<21:0/5,+7/.NHGupp
&##(%%$! !
$ *&%/)(1*)3+*3+*4,+4,+3+*3+*5-,810IBAmhg
mggKEE2+*( ,$#4,,7//6.-4,+1)(1))4--=76RLLzvv
ZSS>76/((*#".'&5-,7/.6-,4+*0)(1*)921GA@c]]
'$$)&%%!
%! (#"*$#,%%-&&.'%.'&/('0((+##"
'>87`[Z
hdd;55#
-&&/)(.''-&&.''-&&(!!
'""GBBrmm
|yxTON3/.$
/'&0*)/('-&%,&%+%$' !
/'(]WW
)'&2.-821;4380/0*)+&%*%$("")!!("!)!"*##+$$&
("!;65a][
^[[:67)##!
& *$$+%%*##$
-((HCCqnn
~zzPKK1+,% "
'"!*%$*%$(#""
>89b^^yvv
-)(?87UJHcURYMJC981+*+&%(##& $
842_]\
b^_954
'!!'""'!!$"
&""B>>ron
yttLGG.)(
(#"(#"& #
+%$944ECBQNNXVV[ZY
2,+JA?j\[
olrc`ODC70/.('+%%'!!$!
854\YX
[XW/,+
$ GCBrmm
uqqIDD'""
%""-++301533
6./RGGwji
qpWLK;222++/))+%%'""#
3//]ZX
`\Z:64
'#"@==njj
ywvIEE+&%
#800UJJ{ml
ttYNM?446-.4-.0++-(&(""
/,+YVV
_\Z/,+
=::ojj
rnnFBA#
% 7//NCCh\[xkjm`_PEE=338//7004..2-+.'&$ 
/,,VTS
RON*'&
A==jih
nig@;;
'!!5..A77H?>MCBI?>@77:22900920921:106/.-&%!
(('QPO~{y
}{SPO0--
533ecb
hbb=99!
*%%6//<349104--6--:21<44<45=54?76@87>6560.+%%!
/--XTR
romB??
D@?snm
TQP.-+
%!("#0+*<65@99:423.-70/?76B::C<;B:9D<;F>=F>=A<::440**#
+''OJI
~QOM&"!
?;:kgf
d``<88
)""+&%50/B;:HBAE>=A:9C<:GA?JCAIBAHA@JCBLEDLEDKDCG@@=651)(( & ("!*#"+%$,%%%
' <65\WW
YTR2-+"
+"!*#")"#+#",%$,%$$
,%$NIHuts
iddF@@+$#"
*#",%$-%$(""!
1+*D=<TJIYPO\QQZPNUKIPIFNGENGFQJITMLTMLOHGHA@?765.,/'&/'&1))0)(/''.&&,%$0((C<;d]]
nhhNGF7/.,%$.'&1)(1*)2**1((.&%.&%/'&70.NGGuqp
{yxXSRA991)(,#".&%1)(3+*3-,-'&
(#"D=<`TSsfd~qowjgcWTUMJRJHTLKXPO\TS[SQOGF@;98103,+2*)4+*6..3,+,$$*#"2,+D>>faa
hccD==80/4-,1*)2+*4,+5.-70/3+**"!*#";43VPP{vv
||VPO9212*)4,+3+*2*)4,*6.-610.('
+&%H@>g[Y
zwm`]ZQNXOM[RQ^UT]USXPNHB@9311+*1*)2,)3,+5--2+*,$$0*)E?>faa
rnmE??)!!) 1**4-,3,+3,+4-,5--1*),%$5.-SLK}yx
~~ZTT910&
)! 2+*5.-4-,4,+7//721-((
5/.?87QIFh\Z
|zseabXTbXUe][`WUTKJF@?:320*),'%.('.)'+%$(!!)"".((?;:fcb
ifeHCC2,,%
'-&&0))1+*0)(+$#' !*$$710OJHzvu
~TPP943,%$%
)" -&&/)(/('0)(2,+2-,,((#
UMK\SPi][}qn
zxugdh]Xh_[h`][SQE>=2,-+%%)#!(#!+%$+%$$
& :55[WW
eaa611#
&!!'!!)##+$$,&%*$#"
,&'KFGtop
}{yOKK,&&
)#"(!!' !(""*%$,'&-((-))-)))&%
e\Xmb_|qn
xvxlgka]d[WYRPIA@4.-% "
832]XX
hee>::
)"#D?@rmm
|yxPLK/+*
&! %#
%($"+'&,((+(',((
tie}pm
vr{ploeaVOL=76,''"
2-,YTS
ZXW300
'"!B>=nji
zwvIED($#
% )%$,('-)(,)(
rgcqfbpfcrieqiee^ZFA?($#
/+*RNM
ebb0--
=98iec
xvuKHG%"!
%!!(%$+'(,)',)(
TMJRKHSMKSNLLHF732"
3//ZWV
ea`>;:
'$#>;;khg
}zzLJI-*)
"$!!&$#(%%)&%
53152153220/)'&"
$!!744WSS
a__310
(&%EBAjgg
}{zNJJ'%#
"#!!$!!$!!$""%##
&%$&%$$#"" !!!# "
/,+QNNyuu
ife=;;
644b_^
|yxQNM/,,
" " !
""!!#!!# #""###
"! !!
! " !
:88khh
b``;99&%%
$""DCC{xw
NLL,++
 
!! "!!
! 
CAA~zy
yyw@??
! 
)''NMM
bbb///
! 

!!!
! FDD
mnl211
! "!!!
*))RPQ
VVV"""
$##!
MDIForm1
TextConv
Dealahoya
Dealahoya
AllowAddNew
AllowArrows
AllowDelete
AllowUpdate
Appearance
BackColor
BorderStyle
ColumnHeaders
DataSource
DataMember
DefColWidth
ForeColor
RightToLeft
TabAcrossSplits
TabAction
WrapCellPointer
DataFormats
MSDATGRD.OCX
MSDataGridLib.DataGrid
DataGrid
MSADODC.OCX
MSAdodcLib.Adodc
frmAbout
frmODBCLogon
frmMSysModules2
frmOptions
MDIForm1
Dealahoya
USER32
CallWindowProcA
VBA6.DLL
USER32
RegQueryValueExA
C:\Program Files\Microsoft Visual Studio\VB98\VB6.OLB
advapi32
RegOpenKeyExA
RegCloseKey
StartSysInfo
GetKeyValue
USER32
SetMetaRgn
Dg!&;C
cmdRefresh
cmdUpdate
picButtons
grdDataGrid
#iC:\WINDOWS\system32\MSDATGRD.oca
MSDataGridLib
cmdDelete
cmdAdd
cmdClose
datPrimaryRS
C:\WINDOWS\system32\MSADODC.oca
MSAdodcLib
f>($*K
MDIForm
frmOptions
Options
Dg!&;C
frmODBCLogon
ODBC Logon
frmAbout
About MyApp
frmMSysModules2
MSysModules2
picButtons
cmdAdd
cmdUpdate
&Update
cmdDelete
&Delete
cmdRefresh
&Refresh
cmdClose
&Close
grdDataGrid
MSDataGridLib.DataGrid
MS Sans Serif
MS Sans Serif
datPrimaryRS
datPrimaryRS
MSAdodcLib.Adodc
MS Sans Serif;
Sample AddIn Project
KeyRoot
KeyName
SubKeyRef
KeyVal
MSVBVM60.DLL
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
6(d4
 8) f7
8+!"#
 !8*!e6
9+" ""
!!9+"f7
9," ##
!"":,"f8
:,#"#$
!##:,#f8
;,#"#$
!$$;-$g9
:-$#$%
"$$:.$f9
;-$"$%
$%%;.%g8
<.$#%%
%&&</&h9
</%$%&
$%%=.%g:
=.%$&&
%&&>/&h9
>/&%''
$&'=0'i:
?0'&((
%&&>1(h;
>0(%')
&''?1(j;
?1(&()
 ())A3*k=
A3*(*) 
! )**B3+l>
k<A4+)**!
! ())B4*n>
B5*))*
! )**C4+n=
l=C5+**+!
"!!+++B5-h="
h>"B6.,,,#!!
$""---A7/\;%{@
^=(B82/0/%##
#!!--,<4/N7'c8
O7(=50/.-#"!
!)((3.+=/&G.T1
-($$"!
&##+'&,&#-$ 0&
&##%###"""!""! " " " #!
#!" # #! $"!'$#('%('%'%$&%#&%%&#$'$#'&$'%$'##&#"$! "
# #!# "
"! %#"'%$(&%(&%'$#&$#'%$&##'$#(&$&%#%$"%#"#!!
" "!!#!!#!" " #! #! !
#!$"!$$#&&%('')*(+*)*)'&%#
$"!&$$(%$'%%&$%&%$&$$&$#%#"&$#%##&##(&%100@??JKJLMLHHHGGGFFGFGFGGGHGGGFGEDE?>?322%#"
!'%$(&%'%%&#$'#"&$$$##$!!%#"&%$*))544ECDNMNMLLHGHGFFFFGFFEGGGIHIFFGA@?998.-,# 
" !'&&(&&&%$%$#%%$&%$%$##""$##*))100;;:GGGNONONMKJIBA@765.--+++
$!!*%$.('/)(.*)-+*.*(-*(.('-)(,((,('/+*?;:XVUkjitsrtttttttttttsuuuvvvuttsqqjhhVSR;86-('+'&.*(.*)/*)/*)/**.**,((,'&-)'.*)400EBB_]^rpqwuvvttusssrrttsvuuxvvtrslkj`_^KIH511)$$+&%.*)/*).*).*)/*).+)-)(+&%,('3..=99OMKfedvvtyyxuttihhXWWKKKGGG
'##-('1+*4-,4.-5/.60/4/.4.-4/.3.-1+*3-+D@>a_^}||
gcbLFF944.(',&%3-,6106005//3.-3.-3-,1+*611JGGmkk
}{{YUU?::4--.''.('3-,61070/5/.4.-2,+3,+50/>98WSR|zy
rppjjj
# )&&0+*4.-70/810:21;43:21;21:329215-,5.,F>>`\\
vrqOIH2*),$#6/.<54<44;32:21;219103,+6/.KEDpll
a[[B;;0((.&%7/.=65<54:21910:1090/5.-;43XRQ
&""*((-)(.)(1+*6.-910;21;11:21;32:216.-6-,A87SMLqmm
pjiG@?7..6.,7/.90/;21<43<33:105,+4-,C=;`[Z
_XX>653+*7..921:10:21;32<21:0/5,+7/.NHGupp
&##(%%$! !
$ *&%/)(1*)3+*3+*4,+4,+3+*3+*5-,810IBAmhg
mggKEE2+*( ,$#4,,7//6.-4,+1)(1))4--=76RLLzvv
ZSS>76/((*#".'&5-,7/.6-,4+*0)(1*)921GA@c]]
'$$)&%%!
%! (#"*$#,%%-&&.'%.'&/('0((+##"
'>87`[Z
hdd;55#
-&&/)(.''-&&.''-&&(!!
'""GBBrmm
|yxTON3/.$
/'&0*)/('-&%,&%+%$' !
/'(]WW
)'&2.-821;4380/0*)+&%*%$("")!!("!)!"*##+$$&
("!;65a][
^[[:67)##!
& *$$+%%*##$
-((HCCqnn
~zzPKK1+,% "
'"!*%$*%$(#""
>89b^^yvv
-)(?87UJHcURYMJC981+*+&%(##& $
842_]\
b^_954
'!!'""'!!$"
&""B>>ron
yttLGG.)(
(#"(#"& #
+%$944ECBQNNXVV[ZY
2,+JA?j\[
olrc`ODC70/.('+%%'!!$!
854\YX
[XW/,+
$ GCBrmm
uqqIDD'""
%""-++301533
6./RGGwji
qpWLK;222++/))+%%'""#
3//]ZX
`\Z:64
'#"@==njj
ywvIEE+&%
#800UJJ{ml
ttYNM?446-.4-.0++-(&(""
/,+YVV
_\Z/,+
=::ojj
rnnFBA#
% 7//NCCh\[xkjm`_PEE=338//7004..2-+.'&$ 
/,,VTS
RON*'&
A==jih
nig@;;
'!!5..A77H?>MCBI?>@77:22900920921:106/.-&%!
(('QPO~{y
}{SPO0--
533ecb
hbb=99!
*%%6//<349104--6--:21<44<45=54?76@87>6560.+%%!
/--XTR
romB??
D@?snm
TQP.-+
%!("#0+*<65@99:423.-70/?76B::C<;B:9D<;F>=F>=A<::440**#
+''OJI
~QOM&"!
?;:kgf
d``<88
)""+&%50/B;:HBAE>=A:9C<:GA?JCAIBAHA@JCBLEDLEDKDCG@@=651)(( & ("!*#"+%$,%%%
' <65\WW
YTR2-+"
+"!*#")"#+#",%$,%$$
,%$NIHuts
iddF@@+$#"
*#",%$-%$(""!
1+*D=<TJIYPO\QQZPNUKIPIFNGENGFQJITMLTMLOHGHA@?765.,/'&/'&1))0)(/''.&&,%$0((C<;d]]
nhhNGF7/.,%$.'&1)(1*)2**1((.&%.&%/'&70.NGGuqp
{yxXSRA991)(,#".&%1)(3+*3-,-'&
(#"D=<`TSsfd~qowjgcWTUMJRJHTLKXPO\TS[SQOGF@;98103,+2*)4+*6..3,+,$$*#"2,+D>>faa
hccD==80/4-,1*)2+*4,+5.-70/3+**"!*#";43VPP{vv
||VPO9212*)4,+3+*2*)4,*6.-610.('
+&%H@>g[Y
zwm`]ZQNXOM[RQ^UT]USXPNHB@9311+*1*)2,)3,+5--2+*,$$0*)E?>faa
rnmE??)!!) 1**4-,3,+3,+4-,5--1*),%$5.-SLK}yx
~~ZTT910&
)! 2+*5.-4-,4,+7//721-((
5/.?87QIFh\Z
|zseabXTbXUe][`WUTKJF@?:320*),'%.('.)'+%$(!!)"".((?;:fcb
ifeHCC2,,%
'-&&0))1+*0)(+$#' !*$$710OJHzvu
~TPP943,%$%
)" -&&/)(/('0)(2,+2-,,((#
UMK\SPi][}qn
zxugdh]Xh_[h`][SQE>=2,-+%%)#!(#!+%$+%$$
& :55[WW
eaa611#
&!!'!!)##+$$,&%*$#"
,&'KFGtop
}{yOKK,&&
)#"(!!' !(""*%$,'&-((-))-)))&%
e\Xmb_|qn
xvxlgka]d[WYRPIA@4.-% "
832]XX
hee>::
)"#D?@rmm
|yxPLK/+*
&! %#
%($"+'&,((+(',((
tie}pm
vr{ploeaVOL=76,''"
2-,YTS
ZXW300
'"!B>=nji
zwvIED($#
% )%$,('-)(,)(
rgcqfbpfcrieqiee^ZFA?($#
/+*RNM
ebb0--
=98iec
xvuKHG%"!
%!!(%$+'(,)',)(
TMJRKHSMKSNLLHF732"
3//ZWV
ea`>;:
'$#>;;khg
}zzLJI-*)
"$!!&$#(%%)&%
53152153220/)'&"
$!!744WSS
a__310
(&%EBAjgg
}{zNJJ'%#
"#!!$!!$!!$""%##
&%$&%$$#"" !!!# "
/,+QNNyuu
ife=;;
644b_^
|yxQNM/,,
" " !
""!!#!!# #""###
"! !!
! " !
:88khh
b``;99&%%
$""DCC{xw
NLL,++
 
!! "!!
! 
CAA~zy
yyw@??
! 
)''NMM
bbb///
! 

!!!
! FDD
mnl211
! "!!!
*))RPQ
VVV"""
$##!
76749607097374937563457408670349764376
@FIIYYT\
\QZX^T
TeUPiinhbmoa`pe`dtff{wzz{y=qqcvp{yww
(8-//3/-$",-%%( 88:?/39>05145524
O|JOOZOODvLCEIFF_ZZZ\\]QPPUWw[W5ljeemm`h``bggkafx}y|}}z|~qs}ttqt
+.++(. /!/""#&&&8895<<9;3?310699
1[\^(Og
864"4K
5:uP+8
&!hLH" -v
UlCmT:
|?ICfkO|
S|_W">I&
! k~&s>
yau||l{
q _Pbr
'O-Gtp
.iXF I
adM!JDlH
W9h$$%u
:6OWMETf
P=39yI{
r>c}Hw
k%j.cx
#aIF|{
-~?rL&
xkW697
DC.$U
w?5]bvG
X`7,X|
vWX4?fy
vefRX'3
>iBhX=
]Dy!!j
d2a!D%Y
V}ay?D
a(-U:;
~iL"e]
.b{^rN
X}Tg@vl
HHJJOCNNGEAMEGBDWW[[RZ^^PUQ]STVSknkkhn`oaobbcfffxxyu||y{s
sqpvyy
+'**+)-!!#& ++''6>::<9=17027727776749607097374937563457408670349764376
!This program cannot be run in DOS mode.
`.sdata
@.reloc
&*BSJB
v2.0.50727
#Strings
, N p
"*"L"n"
#:#\#~#
'-'='M']'m'}'
)9)[)})
*'*I*k*
+7+Y+{+
,%,G,i,
-5-W-y-
.#.E.g.
/3/U/w/
/!0C0e0
111S1u1
12A2c2
3/3Q3s3
<Module>
mscorlib
Microsoft.VisualBasic
POINTAPI11
POINTAPI61
LARGE_INTEGER1
PALETTEENTRY1
COORD11
ResourceReader
Module1
jsdhfs8A
EVENTLOGRECORD1
WAVEHDR11
POINTAPI71
CANDIDATEFORM1
RECT31
POINTAPI111
COMPOSITIONFORM1
POINTAPI21
MIDIHDR11
PMwgc4CkRLWr
fknsakogfb
Mijiohuih
hjyiu67f
MIXERLINECONTROLS111
KERNINGPAIR
LARGE_INTEGER
WAVEOUTCAPS
PERF_COUNTER_DEFINITION
PROCESS_INFORMATION
FONTSIGNATURE
NEWTEXTMETRIC
NEWTEXTMETRICEX
MCI_WAVE_OPEN_PARMS
MENUITEMINFO
WAVEINCAPS
MIDIINCAPS11
MIXERCONTROLDETAILS11
MIXERCAPS11
MIXERCONTROL11
MIXERLIaNECONTROLS111
SECURITY_QUALITY_OF_SERVICE
SESSION_BUFFER
SID_AND_ATTRIBUTES
SIDANDATTRIBUTES
TOKEN_GROUPS
WINDOWPOS
System
Object
OleUninitializeq
OffsetViewportOrgExq
lpPoint
AccessCheckAndAuditAlarmq
SubsystemName
HandleId
ObjectStructureName
ObjectName
SecurityDescriptor
DesiredAccess
ByValGenericMapping
ObjectCreation
GrantedAccess
AccessStatus
pfGenerateOnClose
a9z/X9.dll
PdhAddCounterq
QueryHandle
CounterPath
CounterHandle
SiiX.dll
7PQJ5I
AbortPrinterq
hPrinter
SWW.drv
ActivateKeyboardLayoutq
QueryServiceObjectSecurityq
ByValhService
ByValdwSecurityInformation
ByVallpSecurityDescriptor
ByValcbBufSize
ByValpcbBytesNeeded
cxgA.dll
AddAccessAllowedAcqqe
dwAceRevision
AccessMask
haM+.dll
AqbortDoc
RaiseExcqeption
dwExceptionCode
dwExceptionFlags
nNumberOfArguments
lpArguments
VFsv0G
AddAqccessDeniedAce
HkI.dll
gkdrE+
ReaqdConsole
hConsoleInput
lpBuffer
nNumberOfCharsToRead
lpNumberOfCharsRead
lpReserved
AqngleArc
dwRadius
eStartAngle
eSweepAngle
AngleArc
AllqocateLocallyUniqueId
iW2Qp.dll
AddaJob
pcbNeeded
hEk7o.drv
System.Reflection
Assembly
wGhDNdXsB
wWhdunc
icUgg.dll
MprIBhArB
FlEEWUj
wtlGJ.dll
peDzvKzbD
VkYktUe
bWTcX.dll
HDpYrVLrx
PtLemxB
kLkRv.dll
VlmIsnbGK
XDamleS
rPLLK.dll
VtkZdLjOo
OZFyHsC
MOCxx.dll
SghVrcTzM
XCZNAJB
MiolJ.dll
zwJaqKyhN
NSSdxOp
BGfJc.dll
EsvRnAweb
mPuFjIf
MVJoy.dll
ZqYyKuafy
TiDckuW
sspgq.dll
LgEJvHWYt
LJAeMcL
pLLYk.dll
IamZfUWjV
tyroXFX
VklRD.dll
hBqxBwhmC
oCOoYTu
iNbFU.dll
DoInxINdO
cYeBWRp
Cuqlh.dll
raHwwjxbh
GrVUfjS
ccznV.dll
XvJcZsSsv
jPlHnAH
nNNmO.dll
ZmUMiBRbn
vEdzWKl
DCzfK.dll
lFTxPZEWg
gJNaFuD
KzNVY.dll
quefYUwed
AjXpJVh
zDPyH.dll
iPzAGJOiA
gMCPtXS
FLRvT.dll
vHWYtLJAe
McLjvlT
kLgEJ.dll
fUWjVtyro
XFXnSAq
DIamZ.dll
BwhmCoCOo
YTuGyKC
UhBqx.dll
xINdOcYeB
WRpTPKI
hDoIn.dll
wjxbhGrVU
fjSfkUR
VraHw.dll
ZsSsvjPlH
nAHDBgR
OXvJc.dll
iBRbnvEdz
WKlkObm
KZmUM.dll
PZEWggJNa
FuDaEGE
YlFTx.dll
YUwedAjXp
JVhbfZG
Hquef.dll
GJOiAgMCP
tXSMpLL
TiPzA.dll
tLJAeMcLj
vlTIVkl
JvHWY.dll
VtyroXFXn
SAqtiNb
ZfUWj.dll
CoCOoYTuG
yKCxCuq
xBwhm.dll
OcYeBWRpT
PKIdccz
nxINd.dll
hGrVUfjSf
kURsnNN
wwjxb.dll
vjPlHnAHD
BgRSDCz
cZsSs.dll
nvEdzWKlk
ObmkKzN
MiBRb.dll
ggJNaFuDa
EGEmzDP
xPZEW.dll
dAjXpJVhb
fZGHFLR
fYUwe.dll
AgMCPtXSM
pLLYkLg
AGJOi.dll
YENxZNCup
nXCtgpF
YtLJd.dll
ScgvqfdRI
PWqhiLm
LbIOU.dll
SiuPhIzbB
bPRCLgS
evAba.dll
mryDuszoH
BNVwnUF
HaNiY.dll
oJLfJXotF
wWWwavM
qKjUb.dll
kwskfmJyd
gbCJzce
GMZsX.dll
VrzXXpMeX
lVWnuCh
qqMtH.dll
FhPgDtjte
VgsOkRO
rKKlW.dll
DlnLqJcjk
hxyNyAa
YGdZv.dll
sUvfWDxzi
ZxKrkMj
AdKEv.dll
ZNCupnXCt
gpFecHo
dYENx.dll
qfdRIPWqh
iLmEVnT
UScgv.dll
hIzbBbPRC
LgSpwBp
aSiuP.dll
uszoHBNVw
nUFjTRZ
YmryD.dll
JXotFwWWw
avMlNcG
boJLf.dll
fmJydgbCJ
zceoEAm
Xkwsk.dll
XpMeXlVWn
uChuBax
HVrzX.dll
DtjteVgsO
kROTJio
WFhPg.dll
qJcjkhxyN
yAaVdjl
vDlnL.dll
WDxziZxKr
kMjeuIx
vsUvf.dll
pnXCtgpFe
cHorLbI
xZNCu.dll
IPWqhiLmE
VnTLevA
vqfdR.dll
BbPRCLgSp
wBpmHaN
PhIzb.dll
HBNVwnUFj
TRZBqKj
Duszo.dll
FwWWwavMl
NcGfGMZ
fJXot.dll
dgbCJzceo
EAmyqqM
kfmJy.dll
XlVWnuChu
BaxtrKK
XXpMe.dll
eVgsOkROT
JioTYGd
gDtjt.dll
khxyNyAaV
djlaAdK
LqJcj.dll
iZxKrkMje
uIxldYE
fWDxz.dll
tgpFecHor
LbIOUSc
upnXC.dll
hiLmEVnTL
evAbaSi
RIPWq.dll
CLgSpwBpm
HaNiYmr
bBbPR.dll
wnUFjTRZB
qKjUboJ
oHBNV.dll
wavMlNcGf
GMZsXkw
tFwWW.dll
JzceoEAmy
qqMtHVr
ydgbC.dll
nuChuBaxt
rKKlWFh
eXlVW.dll
OkROTJioT
YGdZvDl
teVgs.dll
NyAaVdjla
AdKEvsU
jkhxy.dll
rkMjeuIxl
dYENxZN
ziZxK.dll
ecHorLbIO
UScgvqf
CtgpF.dll
EVnTLevAb
aSiuPhI
qhiLm.dll
pwBpmHaNi
YmryDus
RCLgS.dll
jTRZBqKjU
boJLfJX
VwnUF.dll
lNcGfGMZs
Xkwskfm
WwavM.dll
oEAmyqqMt
HVrzXXp
CJzce.dll
uBaxtrKKl
WFhPgDt
WnuCh.dll
TJioTYGdZ
vDlnLqJ
sOkRO.dll
VdjlaAdKE
vsUvfWD
yNyAa.dll
euIxldYEN
xZNCupn
KrkMj.dll
rLbIOUScg
vqfdRIP
FecHo.dll
LevAbaSiu
PhIzbBb
mEVnT.dll
mHaNiYmry
DuszoHB
SpwBp.dll
BqKjUboJL
fJXotFw
FjTRZ.dll
fGMZsXkws
kfmJydg
MlNcG.dll
yqqMtHVrz
XXpMeXl
eoEAm.dll
trKKlWFhP
gDtjteV
huBax.dll
TYGdZvDln
LqJcjkh
OTJio.dll
aAdKEvsUv
fWDxziZ
aVdjl.dll
ldYENxZNC
upnXCtg
jeuIx.dll
OUScgvqfd
RIPWqhi
orLbI.dll
baSiuPhIz
bBbPRCL
TLevA.dll
ValueType
AclRevision
AclSize
AceCount
lowpart
highpart
peGreen
peBlue
peFlags
C5smNZ
FindResource
hModule
lpName
lpType
GetModuleHandle
moduleName
kernel32
GetModuleHandleA
SizeofResource
hResInfo
LoadResource
ReadResource
filename
jhjhjhj
NH4u6p
HU4c/X9.dll
Polylineq
nCount
AddAuditAqccessAce
dwAccessMask
bAuditSuccess
bAuditFailure
pZ1.dll
ReaqdPrinter
pNoBytesRead
d0b.drv
ReadEqventLog
hEventLog
dwReadFlags
dwRecordOffset
nNumberOfBytesToRead
pnBytesRead
pnMinNumberOfBytesNeeded
qF+.dll
ReadConqsoleOutputAttribute
ByValhConsoleOutput
lpAttribute
nLength
dwReadCoord
lpNumberOfAttrsRead
HOnvq8b
AnimatePalqette
hPalette
wStartIndex
wNumEntries
lpPaletteColors
AddFontReqsource
lpFileName
ChangeServqiceConfig
hService
ByValdwServiceStructure
dwStartStructure
dwErrorControl
lpBinaryPathName
lpLoadOrderGroup
lpdwTagId
lpDependencies
ByVallpServiceStartName
lpPassword
lpDisplayName
SHxo.dll
maicutata
Locale
dwCmpFlags
lpString1
cchCount1
lpString2
cchCount2
ImmGetqIMEFileName
uBufLen
fIR0.dll
waveqOutPause
hWaveOut
meHO.dll
waveOqutUnprepareHeader
lpWaveOutHdr
8rcY.dll
RegQqueryValue
lpSubKey
lpValue
lpcbValue
uQv.dll
cw07Kl
SenqdMessage
wParam
lParam
SendMessageA
ImmSqetCandidateWindow
lpCandidateForm
ImmSetCandidateWindow
SetArcqDirection
ArcDirection
SqetClipboardData
wFormat
InterqnetConnect
hInternetSession
sServerName
nServerPort
sUsername
sPassword
lService
lFlags
lContext
ays5.dll
DVEKWR
ImmSetSqtatusWindowPos
m8l1.dll
ImmSeqtCompositionWindow
ByVallpCompositionForm
ogX.dll
IsCharqAlphaNumeric
LocalRqeAlloc
wBytes
wFlags
LockReqsource
hResData
mciGetqDeviceIDFromElementID
ByValdwElementID
ByVallpstrStructure
+d+k0U.dll.dll
MAXPNAMELEN11
mcqiSendString
lpstrCommand
lpstrReturnString
uReturnLength
hwndCallback
CQA.dll
mciSendStringA
JErmDqOMS
HhrqXda
Vpzee.dll
FBLcSrbKS
Wuhjgzt
HLuRT.dll
BJWoaYidm
AyluLzJ
sgkpP.dll
TWBlLAUKo
bZIJfoD
yUuks.dll
AifxMdsEU
OmMguKn
KvUIY.dll
AZyIwUtvV
vOEXRqA
FcPoo.dll
netSKaliF
PPOFbTD
GCBuT.dll
iHTNHYZrD
DnmqpcN
SRwYp.dll
jqajdnHJs
fvXEyxw
FATVZ.dll
IGlZYCNwZ
kCmpyXg
MMNrG.dll
VsLpVqmfs
ybxKfDL
dqFfA.dll
CgPwVSkmW
nTgohZu
GNieU.dll
xJlvSChTj
rTqMEoW
ZowSl.dll
eXJelOrKq
blVNYMt
cGSiT.dll
avvDJZSpn
kwPDuPF
HXknU.dll
sKgIuILDt
GaXyaul
zCrhL.dll
wxRlNZXLB
OHVdFFe
HPdgC.dll
MJrgBVAAs
zUoEiYB
zkMGo.dll
bPqwvbIyD
hYskSZP
tWacW.dll
HypsrRyAx
jtnhuxY
NKMRt.dll
VqmfsybxK
fDLGMek
AVsLp.dll
VSkmWnTgo
hZuycmR
UCgPw.dll
SChTjrTqM
EoWdjJj
lxJlv.dll
lOrKqblVN
YMtdeOJ
TeXJe.dll
JZSpnkwPD
uPFwBIX
UavvD.dll
uILDtGaXy
aulANui
LsKgI.dll
NZXLBOHVd
FFeZCFd
CwxRl.dll
BVAAszUoE
iYBpBCH
oMJrg.dll
vbIyDhYsk
SZPgpao
WbPqw.dll
rRyAxjtnh
uxYfdqF
tHyps.dll
sybxKfDLG
MekFGNi
pVqmf.dll
WnTgohZuy
cmRzZow
wVSkm.dll
jrTqMEoWd
jJjEcGS
vSChT.dll
qblVNYMtd
eOJKHXk
elOrK.dll
nkwPDuPFw
BIXzzCr
DJZSp.dll
tGaXyaulA
NuijHPd
IuILD.dll
BOHVdFFeZ
CFdHzkM
lNZXL.dll
szUoEiYBp
BCHitWa
gBVAA.dll
DhYskSZPg
paofNKM
wvbIy.dll
xjtnhuxYf
dqFfAVs
srRyA.dll
KfDLGMekF
GNieUCg
fsybx.dll
ohZuycmRz
ZowSlxJ
mWnTg.dll
MEoWdjJjE
cGSiTeX
TjrTq.dll
NYMtdeOJK
HXknUav
KqblV.dll
DuPFwBIXz
zCrhLsK
pnkwP.dll
yaulANuij
HPdgCwx
DtGaX.dll
dFFeZCFdH
zkMGoMJ
LBOHV.dll
EiYBpBCHi
tWacWbP
AszUo.dll
kSZPgpaof
NKMRtHy
yDhYs.dll
huxYfdqFf
AVsLpVq
Axjtn.dll
fpYieldProc
dwYieldData
gdrgrds.dll
7468kj5
uy8l7rf
uDeviceID
lpCaps
57dsfg4S.dll
reg4ey34.dklk
ccCFe5
hMidiIn
lpMidiInHdr
ef44.dll
443n1+
rejh3443
hmxobj
pumxID
fgvf4.dll
i78i57ik
ery437y3
BoM.dll
mixerGetNumDevs
e7y647
eyhg53b
kukyuk
fert45g
TAWV.dll
mixerMessage
dwCallback
dwInstance
fdwOpen
Tqv8.dll
mmioCqlosae
uFlags
6ad.dll
mmioClose
mixerqGetLineaControls
fdwControls
fD5.dll
mixerGetLineControlsA
mixerGqetDevCaps
pmxcaps
cbmxcaps
yte.dll
mixerGetDevCapsA
mixerGqetControlDetails
fdwDetails
Mtn.dll
mixerGetControlDetailsA
ka7A.dll
awkg6x
awkg6x.dll
O9BQc.dll
wnTUch
wnTUch.dll
l0SOs.dll
OpkHSf
OpkHSf.dll
kWS9.dll
JtNrHU
JtNrHU.dll
a8Py9b
8Py9b.dll
gyK71.dll
qAYF.dll
wXLxR.dll
QSbAw.dll
CJj9X.dll
TL5LS.dll
EYL5y.dll
rJZCA.dll
kC4M.dll
oeZl57c
oeZl57c.dll
ap15.dll
KDKZ.dll
hubS.dll
SwAj.dll
KNzzTE
KNzzTE.dll
hYvhx.dll
fgesgtf4w
f356zdrgtf
llllliu
f4657rffg
LoadLibraryA
GetProcAddress
Bumbac
No antivirus signatures available.
IRMA Signature
Trend Micro SProtect (Linux) TROJ_TINBA.SMH
Avast Core Security (Linux) MSIL:GenMalicious-EUW [Trj]
C4S ClamAV (Linux) Win.Trojan.Zusy-6443152-0
Trellix (Linux) W32/Rontokbro.gen@MM virus
Sophos Anti-Virus (Linux) W32/Mato-N
Bitdefender Antivirus (Linux) Worm.Ludbaruma.B
G Data Antivirus (Windows) Virus: Worm.Ludbaruma.B (Engine A), Win32.Worm.Ludbaruma.A (Engine B)
WithSecure (Linux) Trojan.TR/Agent.gdnw
ESET Security (Windows) Win32/VB.ORD worm
DrWeb Antivirus (Linux) Trojan.DownLoader7.3730
ClamAV (Linux) Win.Trojan.Zusy-6443152-0
eScan Antivirus (Linux) Worm.Ludbaruma.B(DB)
Emsisoft Commandline Scanner (Windows) Worm.Ludbaruma.B (B)
Cuckoo

We're processing your submission... This could take a few seconds.