分析任务

分析类型 虚拟机标签 开始时间 结束时间 持续时间
文件 (Windows) win7-sp1-x64-shaapp01-1 2017-05-12 22:07:29 2017-05-12 22:09:56 147 秒

魔盾分数

10.0

Adware病毒

文件详细信息

文件名 Vstrat
文件大小 2755248 字节
文件类型 PE32 executable (GUI) Intel 80386, for MS Windows
MD5 5a71c47f8a7932e7d556a0618739a915
SHA1 e67b3a3ff81d66cd94ce56b88a4228922b7cf4e9
SHA256 d248ae56f22a0abfabe57dae428981b170e363c956a78d587ad515926d0c0580
SHA512 dbce8898d66f8cbfcc0c58cb347ed6d8d271059e3aa50c5317d14e7453456b38b4e59889cc179018f065118b0fb4f7c6b86fe47f28c54ae721f634ae0149f70d
CRC32 D97BA19C
Ssdeep 49152:LDjBK2u57gXkhoFKVbz8fPKLPpRAHV0X3:XdnFc/8fPoBRAH6
Yara 登录查看Yara规则
样本下载 提交误报

登录查看威胁特征

运行截图


访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

域名解析 (可点击查询WPING实时安全评级)

无域名信息.


摘要

登录查看详细行为信息

PE 信息

初始地址 0x00400000
入口地址 0x004127c4
声明校验值 0x002a5aff
实际校验值 0x002a5aff
最低操作系统版本要求 4.0
编译时间 2014-10-14 11:53:25
载入哈希 759ba7b8ba859a9e92400a80c1922019
图标
图标精确哈希值 09b54e6df16799d64b8c40f0c3babc10
图标相似性哈希值 c3e2d21e7d7c09b689a24571b390a8fc

版本信息

Translation
LegalCopyright
InternalName
FileVersion
CompanyName
LegalTrademarks
Comments
ProductName
ProductVersion
FileDescription
OriginalFilename

微软证书验证 (Sign Tool)

SHA1 时间戳 有效性 错误
f5cbbed0263cc7f1a5201a912d790a13fce975ae Thu Oct 16 11:22:44 2014
WinVerifyTrust returned error 0x800B010C
证书链 Certificate Chain 1
发行给 VeriSign Class 3 Public Primary Certification Authority - G5
发行人 VeriSign Class 3 Public Primary Certification Authority - G5
有效期 Thu Jul 17 075959 2036
SHA1 哈希 4eb6d578499b1ccf5f581ead56be3d9b6744a5e5
证书链 Certificate Chain 2
发行给 VeriSign Class 3 Code Signing 2010 CA
发行人 VeriSign Class 3 Public Primary Certification Authority - G5
有效期 Sat Feb 08 075959 2020
SHA1 哈希 495847a93187cfb8c71f840cb7b41497ad95c64f
证书链 Certificate Chain 3
发行给 SHANGHAI FENGHAN NETWORK INFORMATION TECHNOLOGY STUDIO
发行人 VeriSign Class 3 Code Signing 2010 CA
有效期 Fri Apr 07 075959 2017
SHA1 哈希 15267ed2b828b25443e73962b147381c8408ed8c
证书链 Timestamp Chain 1
发行给 UTN-USERFirst-Object
发行人 UTN-USERFirst-Object
有效期 Wed Jul 10 024036 2019
SHA1 哈希 e12dfb4b41d7d9c32b30514bac1d81d8385e2d46
证书链 Timestamp Chain 2
发行给 COMODO Time Stamping Signer
发行人 UTN-USERFirst-Object
有效期 Mon May 11 075959 2015
SHA1 哈希 3dbb6db5085c6dd5a1ca7f9cf84ecb1a3910cac8

PE 数据组成

名称 虚拟地址 虚拟大小 原始数据大小 特征 熵(Entropy)
.text 0x00001000 0x0027ce2c 0x0027d000 IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6.09
.data 0x0027e000 0x000233e0 0x00001000 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0.00
.rsrc 0x002a2000 0x0001f454 0x00020000 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7.56

覆盖

偏移量 0x0029f000
大小 0x00001ab0

资源

名称 偏移量 大小 语言 子语言 熵(Entropy) 文件类型
RT_CURSOR 0x002c0cfc 0x000002ec LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 1.79 data
RT_CURSOR 0x002c0cfc 0x000002ec LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 1.79 data
RT_CURSOR 0x002c0cfc 0x000002ec LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 1.79 data
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_ICON 0x002a2940 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL 6.52 GLS_BINARY_LSB_FIRST
RT_STRING 0x002c1250 0x00000022 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 0.38 data
RT_STRING 0x002c1250 0x00000022 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 0.38 data
RT_STRING 0x002c1250 0x00000022 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 0.38 data
RT_STRING 0x002c1250 0x00000022 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 0.38 data
RT_STRING 0x002c1250 0x00000022 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 0.38 data
RT_STRING 0x002c1250 0x00000022 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 0.38 data
RT_GROUP_CURSOR 0x002c0cc0 0x00000014 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 2.32 MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0
RT_GROUP_CURSOR 0x002c0cc0 0x00000014 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 2.32 MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0
RT_GROUP_CURSOR 0x002c0cc0 0x00000014 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 2.32 MS Windows cursor resource - 1 icon, 40x16, hotspot @64x0
RT_GROUP_ICON 0x002a28a0 0x000000a0 LANG_NEUTRAL SUBLANG_NEUTRAL 3.60 MS Windows icon resource - 11 icons, 16x16, 16 colors
RT_VERSION 0x002a2550 0x00000350 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED 3.64 data

导入

库: MSVBVM60.DLL:
0x401004 __vbaR8FixI4
0x401008 __vbaVarTstGt
0x40100c __vbaVarSub
0x401010 __vbaStrI2
0x401014 None
0x401018 _CIcos
0x40101c _adj_fptan
0x401020 __vbaStrI4
0x401024 __vbaVarMove
0x401028 None
0x40102c __vbaVarVargNofree
0x401030 __vbaAryMove
0x401034 __vbaFreeVar
0x401038 None
0x40103c __vbaLineInputStr
0x401040 None
0x401044 __vbaLateIdCall
0x401048 __vbaLenBstr
0x40104c __vbaStrVarMove
0x401050 None
0x401054 __vbaVarIdiv
0x401058 __vbaPut3
0x40105c __vbaFreeVarList
0x401060 __vbaEnd
0x401064 _adj_fdiv_m64
0x401068 None
0x40106c __vbaPut4
0x401070 EVENT_SINK_Invoke
0x401074 __vbaNextEachVar
0x401078 __vbaRaiseEvent
0x40107c __vbaFreeObjList
0x401080 None
0x401088 __vbaStrErrVarCopy
0x40108c __vbaVarFix
0x401090 _adj_fprem1
0x401094 __vbaRecAnsiToUni
0x401098 None
0x40109c None
0x4010a0 __vbaI2Abs
0x4010a4 __vbaResume
0x4010a8 __vbaCopyBytes
0x4010ac __vbaForEachCollAd
0x4010b0 None
0x4010b4 __vbaVarCmpNe
0x4010b8 __vbaStrCat
0x4010bc __vbaError
0x4010c0 None
0x4010c4 None
0x4010c8 __vbaLsetFixstr
0x4010cc None
0x4010d0 __vbaRecDestruct
0x4010d4 __vbaSetSystemError
0x4010d8 None
0x4010dc None
0x4010e0 __vbaLenBstrB
0x4010e8 __vbaNameFile
0x4010ec None
0x4010f0 None
0x4010f4 __vbaVargVarCopy
0x4010f8 __vbaLenVar
0x4010fc _adj_fdiv_m32
0x401100 None
0x401104 __vbaAryVar
0x401108 __vbaVarTstLe
0x40110c Zombie_GetTypeInfo
0x401110 __vbaVarXor
0x401114 __vbaVarCmpGe
0x401118 __vbaAryDestruct
0x40111c None
0x401124 __vbaLateMemSt
0x401128 __vbaBoolStr
0x40112c __vbaStrBool
0x401130 None
0x401134 __vbaVarForInit
0x401138 __vbaForEachCollObj
0x40113c __vbaExitProc
0x401140 None
0x401144 __vbaI4Abs
0x401148 None
0x40114c None
0x401150 __vbaOnError
0x401154 __vbaObjSet
0x401158 None
0x40115c None
0x401160 _adj_fdiv_m16i
0x401164 None
0x401168 __vbaObjSetAddref
0x40116c _adj_fdivr_m16i
0x401170 __vbaVarIndexLoad
0x401174 None
0x401178 None
0x40117c None
0x401180 __vbaFpR4
0x401184 None
0x401188 __vbaForEachCollVar
0x40118c __vbaStrFixstr
0x401190 __vbaBoolVar
0x401194 None
0x401198 None
0x40119c None
0x4011a0 __vbaFPFix
0x4011a4 None
0x4011a8 None
0x4011ac __vbaRefVarAry
0x4011b0 __vbaVargVar
0x4011b4 __vbaVarTstLt
0x4011b8 __vbaBoolVarNull
0x4011bc __vbaFpR8
0x4011c0 _CIsin
0x4011c4 None
0x4011c8 None
0x4011cc __vbaErase
0x4011d0 None
0x4011d4 __vbaVarCmpGt
0x4011d8 None
0x4011dc __vbaVargVarMove
0x4011e0 None
0x4011e4 __vbaLateMemStAd
0x4011ec __vbaChkstk
0x4011f0 None
0x4011f4 __vbaFileClose
0x4011f8 EVENT_SINK_AddRef
0x4011fc __vbaVarAbs
0x401200 None
0x401208 __vbaGet3
0x40120c None
0x401210 __vbaStrCmp
0x401214 __vbaGet4
0x401218 __vbaPutOwner3
0x40121c __vbaAryConstruct2
0x401220 __vbaVarTstEq
0x401224 __vbaDateR8
0x401228 __vbaPutOwner4
0x40122c __vbaR4Str
0x401234 __vbaObjVar
0x401238 __vbaPrintObj
0x40123c __vbaI2I4
0x401240 None
0x401244 DllFunctionCall
0x401248 None
0x40124c __vbaVarLateMemSt
0x401250 __vbaVarOr
0x401254 None
0x401258 __vbaFpUI1
0x40125c __vbaCastObjVar
0x401260 None
0x401264 __vbaLbound
0x401268 __vbaRedimPreserve
0x40126c __vbaStrR4
0x401270 _adj_fpatan
0x401274 __vbaR4Var
0x40127c None
0x401280 __vbaLateIdCallLd
0x401288 __vbaStrR8
0x40128c __vbaRedim
0x401290 __vbaRecUniToAnsi
0x401294 EVENT_SINK_Release
0x401298 __vbaNew
0x40129c None
0x4012a0 None
0x4012a4 __vbaUI1I2
0x4012a8 _CIsqrt
0x4012ac __vbaObjIs
0x4012b0 __vbaVarAnd
0x4012b4 None
0x4012bc None
0x4012c0 __vbaUI1I4
0x4012c4 __vbaVarMul
0x4012c8 __vbaExceptHandler
0x4012cc None
0x4012d0 None
0x4012d4 __vbaPrintFile
0x4012d8 None
0x4012dc __vbaStrToUnicode
0x4012e0 None
0x4012e4 __vbaDateStr
0x4012e8 None
0x4012ec _adj_fprem
0x4012f0 _adj_fdivr_m64
0x4012f4 None
0x4012f8 __vbaR8ErrVar
0x4012fc __vbaLateIdStAd
0x401300 __vbaI2Str
0x401304 None
0x401308 __vbaVarDiv
0x40130c None
0x401310 None
0x401314 None
0x401318 None
0x40131c __vbaVarCmpLe
0x401320 __vbaFPException
0x401324 None
0x401328 __vbaInStrVar
0x40132c __vbaStrCompVar
0x401330 None
0x401334 None
0x401338 __vbaGetOwner3
0x40133c __vbaUbound
0x401340 __vbaStrVarVal
0x401344 __vbaGetOwner4
0x401348 __vbaVarCat
0x40134c __vbaDateVar
0x401350 __vbaLsetFixstrFree
0x401354 __vbaI2Var
0x401358 None
0x40135c None
0x401360 None
0x401364 _CIlog
0x401368 __vbaErrorOverflow
0x40136c None
0x401370 __vbaFileOpen
0x401378 __vbaVar2Vec
0x40137c __vbaR8Str
0x401380 None
0x401384 None
0x401388 __vbaInStr
0x40138c __vbaNew2
0x401390 __vbaVarInt
0x401394 None
0x401398 _adj_fdiv_m32i
0x40139c None
0x4013a0 _adj_fdivr_m32i
0x4013a4 __vbaVarSetObj
0x4013a8 None
0x4013ac __vbaStrCopy
0x4013b0 __vbaI4Str
0x4013b4 None
0x4013b8 __vbaVarNot
0x4013bc __vbaVarCmpLt
0x4013c0 __vbaFreeStrList
0x4013c4 None
0x4013c8 _adj_fdivr_m32
0x4013cc __vbaR8Var
0x4013d0 __vbaPowerR8
0x4013d4 _adj_fdiv_r
0x4013d8 None
0x4013dc None
0x4013e0 None
0x4013e4 __vbaVarTstNe
0x4013e8 None
0x4013ec __vbaVarSetVar
0x4013f0 __vbaI4Var
0x4013f4 __vbaVarCmpEq
0x4013f8 None
0x4013fc None
0x401400 __vbaLateMemCall
0x401404 __vbaAryLock
0x401408 __vbaVarAdd
0x40140c None
0x401410 __vbaStrToAnsi
0x401414 __vbaVarDup
0x401418 __vbaStrComp
0x40141c None
0x401420 None
0x401424 __vbaVerifyVarObj
0x401428 __vbaFpI2
0x40142c __vbaVarMod
0x401430 __vbaUnkVar
0x401434 __vbaVarTstGe
0x40143c __vbaVarCopy
0x401440 None
0x401444 __vbaFpI4
0x401450 __vbaLateMemCallLd
0x401454 None
0x401458 _CIatan
0x40145c __vbaI2ErrVar
0x401460 None
0x401464 __vbaAryCopy
0x401468 __vbaStrMove
0x40146c __vbaCastObj
0x401470 __vbaForEachVar
0x401474 None
0x401478 __vbaR8IntI4
0x40147c __vbaStrVarCopy
0x401480 None
0x401484 None
0x401488 None
0x40148c _allmul
0x401490 None
0x401494 __vbaLateIdSt
0x401498 None
0x40149c _CItan
0x4014a0 __vbaNextEachCollAd
0x4014a4 None
0x4014a8 __vbaAryUnlock
0x4014ac __vbaFPInt
0x4014b0 None
0x4014b4 __vbaVarForNext
0x4014b8 _CIexp
0x4014bc __vbaMidStmtBstr
0x4014c0 None
0x4014c4 __vbaRecAssign
0x4014c8 __vbaI4ErrVar
0x4014cc __vbaFreeStr
0x4014d0 __vbaFreeObj
0x4014d4 None

.text
`.data
.rsrc
MSVBVM60.DLL
VStart
6, 0
0, 32, 3GetWeb
24
mySplit2
= MT
Downloader
mySplit
PickColor
8HotKeyBox
picButton
Menus
XButton
XList
VB5!6&vb6chs.dll
VStart
VStart
VStart.XList
XList
VStart.XButton
XButton
VStart.Menus
Menus
VStart.picButton
picButton
VStart.HotKeyBox
HotKeyBox
VStart.PickColor
PickColor
VStart.mySplit
mySplit
VStart.Downloader
Downloader
VStart.mySplit2
mySplit2
VStart.GetWeb
GetWeb
ReadyState
ieframe.dll
SHDocVwCtl.WebBrowser
WebBrowser
MSWINSCK.OCX
MSWinsockLib.Winsock
Winsock
Enabled
COMCTL32.OCX
ComctlLib.TabStrip
TabStrip
COMCTL32.OCX
ComctlLib.StatusBar
StatusBar
COMCTL32.OCX
ComctlLib.TreeView
TreeView
COMCTL32.OCX
ComctlLib.ListView
ListView
COMCTL32.OCX
ComctlLib.ImageList
ImageList
frmMain
XList
XButton
clsData
modMain
modData
ModINI
modSysTray
ModMenu
FrmMenu
Menus
frmAbout
modSysDlg
modBrowseDirectory
modShowProperties
frmShortInfo
modColor
frmInputBox
modPrintIcon
picButton
modShell
CreateLnkCls
modDisk
frmBarSort
frmClass
modWheel
modHotKey
HotKeyBox
frmSetHotKey
frmSysLink
modSysPath
frmConfig
modReg
modShutDown
frmImport
frmSetTime
modTime
frmTime
PickColor
modDial
frmShadow
frmTimeTip
frmMsgBox
modMD5
mPoint
modRgn
modOSVersion
frmTip
modEnCode
frmShortSort
mySplit
modZoomForm
ModMixer
frmVol
clsBoboMixer
frmMail
frmMailBox
modMail
modBaseQp
CMessage
CMessages
frmMailDel
frmMailMSN
Downloader
frmEFolder
modToolBar
frmGetUrl
frmHotKey
clsVSFile
mySplit2
frmItem
frmLockView
frmSkin
frmDowning
modVIcon
clsMFile
frmvIconAsk
frmMoveBar
modEndProcess
frmRecentSetup
frmWeather
GetWeb
frmSendText
modForceFore
modPinInDeskTop
modShadePicture
frmCDROM
frmList
frmListWindow
modShowWindow
modSysClear
frmAddBat
frmExBat
frmFind
modCDROM
frmAddClass
frmAddLogin
frmAddRemind
frmShowRemind
modAlpha
frmGetExIcon
frmMoveShort
frmGoLogin
modAutoComplete
frmFont
modHash
frmAddSoftLogin
frmTray
clsCoreAudio
modUrlCache
clsdate
clsToolTip
modUTF
modGDIPlus
frmAddBar
frmWelcome
frmHTGO
frmWeb
modInternet
modSysInfo
modFileMD5
modHookPaster
modBase64
frmLockHome
modLockIEHome
VbsJson
VStart
GetWeb3
Timer1
Timer9
Timer4
Timer5
Timer7
tpaGetWeb4
Timer6
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
GetWeb2
Timer2
picDDE
GetWeb1
Timer3
mnuMain
Timer8
kernel32
CreateMutexA
CloseHandle
SendActiveStat
SendExperStat
LinkAndSendMessage
LinkAndSendMessage2
LoadCRString
LoadTrayMenu
mnuMainLoad
PicClass
mnuMain_Click
ATXList
ShowfrmMail
ShowEnFolderFrm
Shell32.dll
SHQueryRecycleBinA
SHEmptyRecycleBinA
SHUpdateRecycleBinIcon
ShellExecuteA
Files\dataengine_.dll
user32
SetWindowPos
ShowWindow
FindWindowA
FindWindowExA
SendMessageA
setadvertisement
GetProcAddress
GetModuleHandleA
IsWow64Process
GetTempPathA
GetTempFileNameA
LCMapStringA
PlaySoundA
lstrlenA
winmm.dll
sndPlaySoundA
gdi32
GetDeviceCaps
SetLayeredWindowAttributes
DeleteFileA
ImgMatch
SetProcessWorkingSetSize
GetCurrentProcess
GetCursorPos
GetShortPathNameA
GetFileAttributesA
GetAsyncKeyState
SetWindowLongA
GetDoubleClickTime
Sleep
imgSkin
cmdClose
picFind
,GetTime1
Downloader1
ConSoft
GoStat
mnuBar
mnuClass
lstFind
picSearchButton
imgCmd
lbTime
mnuSkin
lbClass
mnuAnyShort
cmdRecent
cmdWeather
mnuAddShort
cmdMin
cmdMax
List1
tbSearchBox
lbCmd
mnuShort
imgClass
cmdSkin
PicClassBar
mnuPlugins
mnuSearch
SetParent
GetForegroundWindow
GetTickCount
ReleaseCapture
SHAppBarMessage
GetDataPic
Timer8_Timer
NoHtmlString
SetWeatherButton
ClassOLEOver
FindNextH
DeleteAnyItem
RunAnyItem
ExportAnyItem
PrintSkin
ExportAnyToPath
MoveClass
DeleteClass
cmdMin_Click
cmdMax_Click
SetAutoHeight
RunOneItem
AddToRecent
ShowSetTime
GetURLTitle
AddOneSysLink
BrowseAddShort
DlgAddShort
AddOneShort
LoadDesktop
SearchShortcuts
FC:\Program Files (x86)\Microsoft Visual Studio\VB98\VBA6.dll
StartGetWeather
GetWeather
SetList1
SetListStyle
LoadDataFile
PrintPicClass
imgClassClick
IfInStr
ClsLastMove
LoadBars
List1_BarClick
SetBarPw
AddOneAutoLogin
ShowLockView
SetBarTitle
DeleteBar
mnuBarShow
mnuShort_Click
ShowAdvProperties
ShortInfo
CopyShort
PasteShort
DelShort
ReLoadList
ActiveMe
HideMe
OutMe
GetWForScr
GetFormatTime
GetStartTime
GetPrivateProfileStringA
WritePrivateProfileStringA
GetVersionExA
LoadImageA
shell32
Shell_NotifyIconA
Command1
C:\Windows\SysWow64\COMCTL32.oca
ComctlLib
mySplit21
picLine
mySplit1
cmdMail
mySplit3
cmdExit
mnuMailDel
mnuCheckAll
mnuMailDel2
mnuNewBox
mnuCheckThis
Winsock1
C:\Windows\SysWow64\MSWINSCK.oca
MSWinsockLib
mnuRunMail
mySplit22
mnuMailBox
mnuCheckOne
mySplit23
mnuExit
cboSkin
mnuDelBox
mnuChangeBox
mnuMailDown
mnuSetup
imgContent
cmdCheck
txtContent
mnuSplit6
mnuSplit5
mnuSplit3
mnuMail
mnuSplit2
mnuSplit1
mnuMailApp
cmdNew
mnuEnabled
mnuFile
lbContent
List2
mnuCheckMail
File1
Tree1
cmdStop
LoadMailBox
AddToList2
ShowProMsg
CheckThisMail
ChangeList
CanDelMail
SetSBText
SetNewName
ListMail
NoCrlf
SaveMail
Tree1_NodeClick
advapi32.dll
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegSetValueA
RegQueryValueExA
Files\Vstart32.dll
StartHook
UnLoadHook
EnableLock
LoadStartupPage
SaveStartupPage
"cmdLock
lbUnLock
lbLock
opUrl
Image2
Image1
tbHome
lbLockStat
lbLockTag
GetBarBackPic
Class
C:\Windows\SysWow64\msvbvm60.dll\3
VBRUN
UnloadMe
LoadFile
SaveFile
AddBar
AddShort
MoveShort
DeleteShort
ClearShort
GetBarTitle
GetBarPW
GetBarStyle
GetBarUrl
GetBarShortCount
GetBarFID
GetBarLID
GetBarDelete
SetBarStyle
SetBarBackPic
SetBarUrl
SetBarFID
SetBarLID
SetBarShortCount
GetShortsPID
GetShortsNID
GetShortsBID
GetShortsTitle
SetShortsTitle
GetShortsLink
SetShortsLink
GetShortsMin
SetShortsMin
GetShortsIcon
SetShortsIcon
GetShortsCommand
SetShortsCommand
GetShortsDir
SetShortsdir
GetShortsColor
SetShortsColor
GetShortsTimes
SetShortsTimes
GetShortsTag
SetShortsTag
GetWindowLongA
CallWindowProcA
GetPixel
cboMemory
RegisterHotKey
UnregisterHotKey
RegisterWindowMessageA
SHGetFileInfoA
comctl32.dll
ImageList_Draw
ImageList_DrawEx
ExtractIconExA
DrawIconEx
DestroyIcon
SetPixel
SetPixelV
BitBlt
SelectObject
CreateCompatibleDC
DeleteObject
Label4
CreateDIBSection
GetBitmapBits
SetBitmapBits
_lopen
_lclose
_lread
cboMoveSecond
_llseek
WriteFile
GetFileSize
cboProClass
cboTime
Label7
cboTime2
cboVol
Label3
cboCloseCDRom
cboTip
cmdFile
cmdFile2
cmdApp
cmdShowFormat
imgPic
hsAlpha
cmdOK
Label5
Label1
Label25
Label26
Label23
Label24
cmdAddStartMenu
Label29
Label27
Label28
cmdFont
cmdMiniClock
Label21
Label22
Label20
Label18
Label19
Label12
Label13
Label11
Label16
Label17
Label14
lbDown
Label15
cmdCannel
cmdChPW2
Frame7
Label40
Label8
Label38
Frame
Label36
Label37
Label39
cmdSetPW
cmdClsPW
cmdChPW
cmdClsVIcon
Label32
Label33
cmdAddToDeskTop
cmdDown
txtBP
cmdBackUp
Label2
Label30
cmdResume
mnuPara
mnuAddPara
txtFolder
Label31
cmdItem
Label34
Label35
txtBrowser
txtTime
Label6
PicColor1
PicColor2
PicColor3
Label9
Label10
ReadFile
HaveClock
LoadSkins
LoadConfig
cmdChange
cmdAddHotKey
Image3
&hkey1
Frame1
cmdDel
LoadHotKeyList
cmdAdd
LoadTimeList
cmdTO
cmdCancelDown
picNet
Image5
imgPre
picSkin
lbName
lbDate
lbDowning
Down2
Image4
imgNow
lbSkinMake
Down1
cmdDownList
RoundMkdir
FindItem
Check1
lbOEM
cmdUpDate
KeyBin
wininet.dll
InternetDial
InternetHangUp
InternetAutodial
cmdSetup
InternetAutodialHangup
InternetGetConnectedStateExA
InternetGetConnectedState
rasapi32.dll
RasEnumConnectionsA
RasEnumEntriesA
RasHangUpA
cmdPass
cmdRemove
cmdEdit
RemoveFW
SetupFW
EditPW
AppFolder
imgVol2
imgVol1
SetVol
GetVolMute
ChangeMute
ChangeSh
GetCompType
GetCompName
CreateToolhelp32Snapshot
Process32First
Process32Next
TerminateProcess
OpenProcess
PSAPI.DLL
GetModuleFileNameExA
EnumProcessModules
SetPriorityClass
VBA6.DLL
__vbaVarMul
__vbaVarAdd
__vbaFpR4
__vbaFpR8
__vbaPowerR8
__vbaVarTstNe
__vbaCastObjVar
__vbaExitProc
__vbaVarTstEq
__vbaNextEachCollObj
__vbaCastObj
__vbaStrVarMove
picMoveTop
MoveOver
__vbaLateMemSt
__vbaForEachCollObj
__vbaFpI4
__vbaLateIdSt
__vbaNew
__vbaVarCat
__vbaStrVarVal
__vbaVarSub
__vbaVarTstGt
__vbaVarTstLe
cmdPW
picMoveLeft
__vbaI4Str
__vbaVarMove
__vbaErrorOverflow
__vbaNameFile
__vbaStrCat
picMovePrint
__vbaStrToUnicode
__vbaStrI4
__vbaStrComp
__vbaVarDup
imgDown
picMovePrint2
__vbaEnd
__vbaLenBstr
__vbaFreeStrList
__vbaSetSystemError
__vbaFreeObj
__vbaStrToAnsi
__vbaVarCmpNe
__vbaVarAnd
__vbaBoolVarNull
__vbaI2I4
__vbaFreeVarList
__vbaFreeObjList
__vbaLateIdCall
__vbaFreeVar
__vbaObjSet
__vbaLateIdCallLd
__vbaI4Var
__vbaObjSetAddref
__vbaStrCmp
__vbaFreeStr
__vbaHresultCheckObj
__vbaNew2
lbTag
__vbaStrMove
__vbaInStr
__vbaOnError
__vbaStrCopy
kpicMoveRight
picList
Pdown
imgScroll
picSll
imgScroll2
PicSll2
imgBP
picLT
imgbk
picMoveBottom
picIcon
txtPW
lbIcon
UserControl
picBar
imgBar
SetFindButton
SetFindButtonPic
FC:\Windows\SysWOW64\stdole2.tlb
stdole
FixPB1
SetMyBP
SetBackPicture
NoMoveItem
SetItemLocation
SetMoveItem
GetSCap
SetColor
SetPicture
SetPicture2
SetEnabled
SetName
SetNoMove
SetTag
Rlist
ClsList
UnloadItem
GetListTop
GetListHeight
GetPicIcon
GetlbIcon
ClsBar
PrintBar
GetBarCap
GetBarTag
SetBarCap
SetBarTag
GetTag
GetCap
SetToolTip
SetBarClick
SetBarToolTip
ClearMoreSelect
MouseDownSelect
SetMovePicture
MoveItem
IsMoveInRect
AddBackDown
DelBackDown
IsInBackDown
SelectAll
SetItemSelect
AddlbTag
ResizeHaveTag
ClearlbTag
PageUpDown
SetShortFont
SetBarFont
ShowPw
SetvScroll
SetIconStyle
SetItemWH
SetSkinMe
SetSkinPic
SetWheel
GotoBottom
GotoTop
GotoPoint
GotoPoint2
SetFontBold
AnyMouseUp
MouseMove
LabelMouseMove
MouseDown
MouseUp
UpMouseDown
ForeColor
DownMouseDown
BarMouseMove
BarMouseOut
BarMouseDown
BarMouseUp
BarClick
BarReClick
BackMouseMove
BackMouseDown
BackMouseUp
AllMouseMove
DBClick
ItemDBClick
Click
FindButtonClick
KeyDown2
KeyPress2
EnterPW
DragToList
DragToNull
DragToBar
BarOLEDragOver
OLEDragDrop
ICONOLEDragDrop
OLEDragOver
ICONOLEDragOver
__vbaStrR4
__vbaStrVarCopy
msimg32.dll
AlphaBlend
TransparentBlt
GetDC
__vbaR4Str
__vbaR4Var
__vbaAryDestruct
__vbaUbound
__vbaAryVar
__vbaAryCopy
__vbaVarForNext
__vbaVarForInit
__vbaRaiseEvent
__vbaPrintObj
__vbaVarCopy
__vbaFPInt
__vbaVarVargNofree
__vbaI2Var
__vbaGenerateBoundsError
__vbaRedimPreserve
__vbaR8IntI4
IfDraw
BackColor
ToolTip
MouseOnColor
MouseDownColor
Style3DColor1
Style3DColor2
StyleColor
StyleColor2
Picture
style
PicString
enabled
caption
DrawMouseOn
DrawMouseOut
SetButton
MouseOn
MouseOut
__vbaVarFix
lMonth
lYear
sWeekDay
__vbaCopyBytes
__vbaVarDiv
__vbaBoolVar
__vbaResume
__vbaPrintFile
wHoliday
lHoliday
sHoliday
__vbaFileClose
__vbaAryUnlock
__vbaAryLock
__vbaRedim
__vbaLineInputStr
lSolarTerm
__vbaFileOpen
__vbaErase
IsLeap
CryptAcquireContextA
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
CryptGetHashParam
RegEnumValueA
sWeekDayStr
sMonth
sYear
IsToday
GanZhi
YearAttribute
UpNumber
CDayStr
CMonthStr
Constellation
sInitDate
lInitDate
SHGetSpecialFolderPathA
GetWindowsDirectoryA
GetSystemDirectoryA
OpenVSFile
CreateVSFile
peW[,
SetEndOfFile
OpenFile
GetOneFile
AddOneFolder
AddOneFile
SaveList
ListPath
GetFileInfo
SHFileOperationA
IconFiles
IconIndex
ToPath
Title
WorkDir
FileName
TivePath
uAction
CloseFileName
CreateLnkFile
OpenFileName
GetVolumeInformationA
GetDiskFreeSpaceA
GetDriveTypeA
GetLogicalDriveStringsA
[QuqCreateFile
OpenFile
AddFile
ExFile
GetWindow
GetWindowTextLengthA
GetWindowTextA
IsWindowVisible
GetWindowThreadProcessId
DeleteDC
UpdateLayeredWindow
AppMe
txtUrl
txtInfo
txtTag
cmdMod
cmdShuxing
cmdDir
LbCap
imgTop
MoveMe
Text1
lblCaption
ChMany
Picture1
AddDial
AddPlug
__vbaVarCmpGe
__vbaVarCmpLe
__vbaRecAnsiToUni
__vbaPutOwner4
__vbaGetOwner4
__vbaVarInt
__vbaAryConstruct2
__vbaUI1I4
__vbaDateVar
__vbaVarCmpEq
__vbaVarOr
__vbaRecUniToAnsi
__vbaLsetFixstr
SetForegroundWindow
GetActiveWindow
SetActiveWindow
__vbaVarTstLt
DrawTextA
PrintItem
txtLink
__vbaR8Str
LoadMenu
FixKey
AddKey
ReFix
GetsTag
AddSub
ShowMenu
UnloadMenu
GetCheck
GetCaption
GetSubCaption
GetMenuHeight
GetMenuWidth
UnLoad
SubClick
__vbaLateMemCallLd
__vbaLateMemStAd
__vbaLateMemCall
__vbaLbound
__vbaI4ErrVar
comdlg32.dll
GetOpenFileNameA
mnuSysPath
mnuPath1
GetSaveFileNameA
__vbaLenVar
__vbaRecDestruct
__vbaRecDestructAnsi
__vbaLsetFixstrFree
__vbaFixstrConstruct
SHBrowseForFolder
SHGetPathFromIDList
lstrcatA
cmdShowMsg
cmdNShow
ShellExecuteEx
ZchpicCol
cmdIcon
cmdFolder
cmdSysLink
cmdAutoLogin
cboTitle
cmdBat
txtIcon
txtDir
txtCommand
cmdChPath
ChMin
mnuPath
mnuPath2
HKBox1
txtHotKey
PicColor
mnuSPath
Frame3
cmdPre
Option1
opWeb
Option2
txtTitle
Mg_oIE
C:\Windows\SysWOW64\ieframe.dll
SHDocVw
g_oIE2
Frame0
cmdNext
Frame2
opSoft
lbPCode
Option3
cmdSave
OpenIE
CatchString
g_oIE_BeforeNavigate2
IsInCollection
g_oIE_DocumentComplete
g_oIE_NewWindow2
g_oIE2_BeforeNavigate2
cmdText
cmdTime
cmdUp
LoadTmpBat
txtPath
~/f,{
ChooseColorA
wininet
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FindCloseUrlCache
DeleteUrlCacheEntryA
RtlMoveMemory
lstrcpyA
LocalAlloc
LocalFree
GetUrlCacheEntryInfoA
gdiplus
GdiplusStartup
GdiplusShutdown
GdipDrawImageRect
GdipCreateFromHDC
GdipDeleteGraphics
GdipLoadImageFromFile
GdipDisposeImage
__vbaVargVarMove
__vbaVargVarCopy
__vbaVar2Vec
__vbaAryMove
__vbaPut3
MouseIcon
MousePointer
DrawLine
LoadBat
o}(cmdAllNot
cmdRefresh
cmdAll
picWebIcon
GetWebList
HaveImage
mnuFind
picOut
picTool
cmdFind
txtKey
cmdFind_Click
R{vU_
Login
Login2
txtMsg
lbClose
advapi32
ExitWindowsEx
OpenProcessToken
LookupPrivilegeValueA
SetSystemPowerState
AdjustTokenPrivileges
Powrprof
SetSuspendState
__vbaStrCompVar
__vbaI2ErrVar
__vbaInStrVar
__vbaStrI2
__vbaObjVar
mciSendCommandA
mciSendStringA
cmdIconMag
cmdAddIcon
picMain
cmdReName
SetFilePw
SaveIndexFile
LoadIcon
peW[,
__vbaVargVar
__vbaRecAssign
mnuPDown
LText
SetKeyCode
GetkeyString
mnuBKSP
*NW[&{
mnuHome
mnuDelete
mnuLine
mnuTab
mnuEnd
mnuEnter
mnuRight
mnuDown
mnuUp
cmdControl
mnuPop
mnuESC
mnuPUp
mnuLeft
/T(u/
/T(u/
R{vU_
[{|+R/
USMO:N
cboCDROM
*N{|+R,{3
eQ:N
__vbaVarLateMemCallLd
__vbaVarSetVar
X[*Npe:N
lbFont
cboFont
cboSize
/cboIcon
cmdReturn
cmdDefault
lbWidth
ChangeHS
SetList
zz<h,
c:yag
c:yag
c:yag
__vbaVarLateMemCallLdRf
__vbaVarLateMemSt
oleaut32.dll
\Pbk(
__vbaLenBstrB
mnuMod2
cmdModMin
cmdFan
cmdNull
cmdDelInList
mnuRealPath
mnuVSPath
cmdFan2
cboDir
cmdStart
mnuReplace
mnuNoMin
cmdNull2
cmdModPath
mnuRunMin
cmdAll2
ListDir
picMod
mnuMod
cmdModIcon
OleCreatePictureIndirect
doExport
doImport
SearchOn
qQ~b0R
__vbaUI1I2
PicDate
picCh9
cmdAddRemind
Picture2
cmdGo
ChTime
cboWeek
cboMonth
cboYear
cboType
txtNum
lbDay
txtName
IsTime
Loadlbday
SetThisTime
AllVis
`txtMusic
Check2
cmdOpen
__vbaI2Str
__vbaDateStr
__vbaStrErrVarCopy
,g!kV
ShColor
cmdPOP
lbColor
lbKey
Color
OpenMe
CloseMe
GetColor
NewColor
kernel32.dll
msvbvm60.dll
VarPtr
iRYO
__vbaError
__vbaGetOwner3
SetWindowRgn
CreateRectRgn
CombineRgn
SystemParametersInfoA
GetClassNameA
DrawAnimatedRects
GetWindowRect
__vbaFpI2
__vbaVarIdiv
__vbaI2Abs
__vbaMidStmtBstr
__vbaFpUI1
NewEnum
mixerClose
mixerGetControlDetailsA
mixerGetDevCapsA
mixerGetID
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetNumDevs
mixerMessage
mixerOpen
mixerSetControlDetails
GlobalAlloc
GlobalLock
GlobalFree
__vbaStrFixstr
Initialise
GetMute
SetMute
GetValue
SetValue
GetMax
GetMin
TMixer
Muter
IsStereo
GetVolume
SetVolume
GetBalance
SetBalance
Count
Remove
__vbaI4Abs
cmdClear
txtMail
txtPW2
ChStart
ChNotice
ChVoice
txtPOP3
cmdGetPop
CheckMailFile
GetPOPSmtp
LoadCboTime
HBcmdCancel
{vU_
{vU_
CreateFromText
FMTime
DeContent
FindDeString
DeString
CombineMessage
Headers
MessageBody
MessageText
Encrypted
Comments
Keywords
References
InReplyTo
Sender
ReplyTo
Subject
MessageTo
MessageID
SendDate
Received
ReturnPath
imgBottom
lbMail
tmrOpen
tmrAlert
tmrClose
GetSystemMetrics
ShowMe
__vbaStrBool
__vbaBoolStr
__vbaR8FixI4
__vbaGet3
__vbaVarIndexLoadRefLock
__vbaVarIndexLoad
__vbaRefVarAry
BeginDownload
CancelDownload
DownloadProgress
DownloadError
DownloadComplete
__vbaPutOwner3
Shlwapi.dll
SHAutoComplete
DllGetVersion
__vbaNextEachCollAd
__vbaForEachCollAd
__vbaVarSetObj
R{vU_,
8lbBar
__vbaObjIs
__vbaStrR8
__vbaGet4
__vbaPut4
Command2
v0R{|+R
cboSheng
cboCity
lbCity
lbWeather
lbWenDu
lbPM25
lbWenDu1
lbWenDu2
lbWenDu3
lbButton
GetWeatherStat
NX[(W
WideCharToMultiByte
MultiByteToWideChar
Encode
Decode
__vbaVarIndexLoadRef
lblUrl
AttachThreadInput
IsIconic
__vbaFPFix
Text2
Y6R0R(
N!kSb
GetClientRect
^\'`(
[WebBrowser1
=0C:\Windows\SysWOW64\ieframe.oca
SHDocVwCtl
O9e0W@W
CreateWindowExA
InitCommonControlsEx
DestroyWindow
WindowFromPoint
CreateBalloon
SetHandle
Destroy
VisibleTime
DelayTime
O9e0W@W(
R{vU_(
__vbaVarCmpGt
__vbaNextEachCollVar
__vbaForEachCollVar
__vbaVerifyVarObj
__vbaLateIdStAd
mnuRes
mnuColse
CloseWindow
IsWindow
GetClassLongA
GoTray
CheckPath
AddTray
DelTray
eQtepe
d"}0R
txtQQ
chHide
cmdTest
e{vU_aSGr
__vbaVarTstGe
__vbaUnkVar
_W[SO
h~{W[SO
__vbaVarCmpLt
__vbaVarMod
__vbaVarXor
__vbaVarNot
__vbaDateR8
__vbaVarAbs
__vbaR8Var
Files\helper.dll
GetCPULowID
GetCPUHighID
GetHDSerial
GetMacAddr
GetSysName
__vbaR8ErrVar
__vbaNextEachVar
__vbaForEachVar
__vbaVarSetObjAddref
GetWeb
Downloader
FrmMenu
Form1
Menus
Timer1
HotKeyBox
Text1
picButton
Timer1
frmShadow
Form2
Form2
Timer1
frmExBat
Form1
Timer2
Timer1
mySplit
Line1
Line2
mySplit2
Line2
Line1
XButton
Timer1
frmGoLogin
Form1
Timer3
Timer2
Timer1
frmMailDel
Form1
cmdCancel
frmAddClass
Form1
cmdCannel
cmdOK
txtTitle
lblCaption
frmCDROM
Form1
cmdCannel
cmdOK
cboCDROM
Label1
frmTimeTip
Form1
Timer1
cmdCannel
cmdOK
lbTime
lbCap
frmInputBox
Form1
Text1
cmdOK
cmdCannel
lblCaption
Caption
frmWeb
Form1
WebBrowser1
SHDocVwCtl.WebBrowser
frmListWindow
Form1
cmdOK
cmdCannel
List1
txtTitle
Label1
frmDowning
Form1
Timer1
Down1
VStart.Downloader
cmdCannel
Label1
frmMoveBar
Form1
Picture1
List1
VStart.XList
cmdCannel
frmHTGO
Form1
Downloader1
VStart.Downloader
Timer1
GetTime1
VStart.GetWeb
GetWeb1
VStart.GetWeb
frmShortSort
Form1
List1
Frame2
Picture2
Frame1
Picture1
cmdOK
cmdCannel
frmRecentSetup
Form1
Frame1
Check1
cboCity
cboCity
cboSheng
Label1
cmdSetup
cmdCannel
cmdOK
frmFont
Form1
cboSize
cboFont
List1
cmdOK
cmdCannel
Label4
Label3
Label2
lbFont
ABCabc
Label1
frmSysLink
Form1
Timer1
ChMany
Picture1
List1
VStart.XList
cmdOK
ComctlLib.TabStrip
frmItem
Form1
cmdDefault
cmdReturn
cmdOK
cmdCannel
List1
VStart.XList
cboIcon
Label2
Label1
lbWidth
Label4
Label3
Shape1
frmSendText
Form1
cmdControl
cmdOK
cmdCannel
Text1
Label1
mnuPop
mnuPop
mnuEnter
mnuBKSP
mnuTab
mnuESC
mnuDelete
Delete
mnuLine
mnuUp
mnuDown
mnuLeft
mnuRight
mnuHome
mnuEnd
mnuPUp
Page Up
mnuPDown
Page Down
frmGetExIcon
Form1
Check1
Timer1
cmdCannel
txtPath
List1
VStart.XList
Picture1
cmdFile
VStart.XButton
Label1
frmLockView
Form1
cmdCannel
cmdOK
txtBP
cboIcon
cmdFile2
VStart.XButton
lbBar
frmAddBar
Form1
Option2
Option1
Text2
http://
Text1
cmdCannel
cmdOK
cmdFolder
VStart.XButton
lblUrl
lblCaption
frmAddSoftLogin
Form1
cmdTest
chHide
txtPW
txtNum
txtQQ
cmdCannel
cmdOK
cmdFile
VStart.XButton
Label4
Label3
Label2
Label1
QQ2008
frmWeather
Form1
Form1
Timer3
Timer2
Timer1
GetWeb1
VStart.GetWeb
Line1
lbWenDu3
lbWenDu2
lbWenDu1
lbWenDu
lbPM25
lbButton
lbButton
lbButton
lbWeather
lbCity
frmBarSort
Form1
Picture1
List1
VStart.XList
cmdOK
imgBar
Label1
frmTray
DDDDDDDDD@
Timer1
mnuFile
mnuFile
mnuRes
mnuLine
mnuColse
frmMailBox
Form1
Frame1
Picture1
cmdPW
cmdClear
ChVoice
cmdGetPop
ChNotice
ChStart
cboTime
txtPW2
mySplit2
VStart.mySplit
txtPW
txtName
txtPOP3
Label7
Label6
Label5
Label4
Label3
Label2
cmdCannel
cmdOK
cmdNext
mySplit1
VStart.mySplit
txtMail
Label1
Image1
frmAddLogin
Form1
Timer2
Timer1
cmdPre
cmdNext
cmdCannel
cmdSave
Frame0
opSoft
opWeb
Label3
Label7
Frame1
Option3
txtUrl
http://
Option2
Option1
Label2
Label1
Frame3
txtTitle
Label5
Label8
Frame2
Label6
lbPCode
Label4
frmFind
_E~J0
Form1
picTool
Label2
cmdFind
picOut
List1
VStart.XList
cmdCannel
txtKey
Label1
mnuShort
mnuShort
mnuFind
frmGetUrl
Form1
cmdAdd
cmdAllNot
cmdAll
picWebIcon
txtTitle
txtLink
cmdRefresh
List1
ComctlLib.ListView
cmdOK
cmdCannel
ImageList1
ComctlLib.ImageList
Image1
mnopqrstuvwxyz{|]^_`abcdefghijklMNOPQRSTUVWXYZ[\=>?@ABCDEFGHIJKL-./0123456789:;<
!"#$%&'()*+,
Label1
Label2
frmTip
Form1
txtInfo
txtUrl
txtTag
picIcon
cmdMod
VStart.XButton
cmdDir
VStart.XButton
cmdShuxing
VStart.XButton
LbCap
Line1
imgTop
ShTop
ShStyle
PickColor
Picture1
picColor
ShColor
16777215
lbColor
Image2
Image1
Line1
Line2
Command1
cmdPOP
lbKey
frmAddRemind
Form1
Check2
txtMusic
Check1
txtMsg
cmdCannel
cmdOK
cmdFile
VStart.XButton
`cc`dd
bggimmrww`dd
k9qttosskooimmillPQQ_aaaee
wxxnooPQQ???]__cgg
eee___SSSIIIgiifii
cmdOpen
VStart.XButton
Label1
frmMsgBox
Form1
cmdCannel
cmdOK
Image1
[i2Pd
@PN1D
lbCap
Caption
frmMoveShort
Form1
cmdCannel
cmdOK
Tree1
ComctlLib.TreeView
ImageList1
ComctlLib.ImageList
Label1
Image2
<=>?@ABCDEFGHI
Image1
xyuzzzzzzzzu{|
stuuuuuuuuuuvw
cjkYYll@mnopqr
]^_WJJKY3`Oabc
GHIJKLMNO*PQRS
1<=>?@'A*BCDEF
#$%&'()*+,-./0
frmvIconAsk
Form1
Command2
Command1
Image1
Label2
Label1
frmShowRemind
gEW>*
hFW>*
iGW>*
jHW>*
kJW>*
dAW>*
dC~aJ
Form1
Timer1
mySplit1
VStart.mySplit
cmdOK
txtMsg
lbClose
lbTime
Image1
frmSetHotKey
Form1
txtTag
txtDir
txtCommand
cmdDel
VStart.XButton
Timer1
cmdCannel
cmdOK
txtLink
hKey1
VStart.HotKeyBox
cmdFolder
VStart.XButton
cmdFile
VStart.XButton
cmdSysLink
VStart.XButton
cmdChPath
VStart.XButton
cmdText
VStart.XButton
cmdBat
VStart.XButton
cmdAutoLogin
VStart.XButton
R{vU_
Label5
Label4
Label3
Label2
Label1
mnuPath
mnuPath
mnuPath1
mnuPath2
frmVol
Form1
Timer2
Timer1
Label1
shVol
imgVol1
imgVol2
frmWelcome
Form1
Check1
Command1
Command1
cmdOK
Label3
Image1
Label1
frmShortInfo
Form1
cmdCannel
cmdOK
Frame
txtIcon
cmdChPath
VStart.XButton
PicColor
VStart.PickColor
txtDir
ChMin
mySplit3
VStart.mySplit
txtCommand
txtLink
mySplit1
VStart.mySplit
cboTitle
HKBox1
VStart.HotKeyBox
txtHotKey
cmdFolder
VStart.XButton
cmdFile
VStart.XButton
cmdSysLink
VStart.XButton
cmdIcon
VStart.picButton
cmdBat
VStart.XButton
picCol
VStart.picButton
cmdShowMsg
VStart.XButton
cmdAutoLogin
VStart.XButton
R{vU_
cmdNShow
VStart.XButton
Label1
Label6
Label3
Label4
Label5
Label7
Label2
Frame
txtTag
ComctlLib.TabStrip
mnuPath
mnuPath
mnuPath1
mnuPath2
mnuSysPath
mnuSysPath
mnuSPath
mnuSPath
mnuAddPara
mnuAddPara
mnuPara
mnuPara
frmTime
Form1
Command1
Command1
List1
ComctlLib.ListView
mySplit21
VStart.mySplit2
mySplit22
VStart.mySplit2
cmdOK
VStart.XButton
cmdChange
VStart.XButton
cmdDel
VStart.XButton
cmdAdd
VStart.XButton
Frame1
ImageList1
ComctlLib.ImageList
frmClass
Form1
File1
*.ico
picLine
picIcon
VStart.picButton
picMain
List2
VStart.XList
cmdOK
cmdDown
VStart.XButton
cmdUp
VStart.XButton
cmdReName
VStart.XButton
879:;4
12((34
cmdDel
VStart.XButton
cmdAdd
VStart.XButton
k7 j6YqX
Picture1
List1
VStart.XList
cmdAddIcon
VStart.XButton
cmdIconMag
VStart.XButton
cmdPw
VStart.XButton
Label1
frmImport
Form1
cmdModPath
VStart.XButton
cmdModMin
VStart.XButton
cmdModIcon
VStart.XButton
Frame
cmdFan2
VStart.XButton
cmdNull2
VStart.XButton
cmdAll2
VStart.XButton
List2
ComctlLib.ListView
picMod
cmdDelInList
VStart.XButton
ListDir
File1
cmdCannel
cmdOK
Frame
cboDir
Combo1
mySplit1
VStart.mySplit
cmdStart
cmdDel
VStart.XButton
cmdFan
VStart.XButton
cmdNull
VStart.XButton
cmdAll
VStart.XButton
List1
ComctlLib.ListView
Label4
Image1
Label1
Label2
Label3
ComctlLib.TabStrip
imgList2
ComctlLib.ImageList
mnuMod
mnuRealPath
mnuVSPath
mnuReplace
mnuMod2
mnuRunMin
mnuNoMin
frmHotKey
Form1
mySplit21
VStart.mySplit2
Command1
Command1
ComctlLib.StatusBar
mySplit22
VStart.mySplit2
cmdOK
VStart.XButton
cmdChange
VStart.XButton
cmdDel
VStart.XButton
cmdAddHotKey
VStart.XButton
Frame1
List1
ComctlLib.ListView
Tree1
ComctlLib.TreeView
hkey1
VStart.HotKeyBox
ImageList2
ComctlLib.ImageList
Image3
ImageList1
ComctlLib.ImageList
frmMailMSN
Form1
tmrAlert
tmrClose
tmrOpen
lbMail
Label2
Image4
Image3
imgBottom
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Image1
frmLockHome
Form1
cmdLock
tbHome
opUrl
opUrl
opUrl
lbUnLock
Image2
GIF89a@
lbLock
lbLockTag
lbLockStat
Image1
GIF89a@
frmAddBat
Form1
txtTime
List1
ComctlLib.ListView
Frame1
cmdAdd
txtCommand
txtDir
txtLink
cmdFolder
VStart.XButton
cmdFile
VStart.XButton
cmdSysLink
VStart.XButton
cmdAutoLogin
VStart.XButton
R{vU_
cmdText
VStart.XButton
Label4
Label1
Label2
cmdOK
cmdCannel
cmdTime
VStart.XButton
cmdDown
VStart.XButton
cmdUp
VStart.XButton
cmdDel
VStart.XButton
Label3
Image2
lmnopqrstuvwml
abcdefg]hijkba
UVWXYZ[\]^_`VU
IJKLMNOPQRSTJI
ABCCDEFGH
Image1
ImageList1
ComctlLib.ImageList
frmSkin
Form1
Timer1
Down2
VStart.Downloader
cmdDown
Down1
VStart.Downloader
File1
cmdDel
cmdOK
cmdChange
picSkin
lbDowning
aaaaaaa
imgSkin
Tree1
ComctlLib.TreeView
picNet
cmdCancelDown
cmdDownList
lbSkinMake
Line1
imgNow
efgfhghff
]^___`_abcd
WXYYYYZYY[\
RSTUTVUVVSR
'$%:%4#NONNNPQ
%&%$-&%JKKKKLM
%-'4'-4BCDCEFGHI&:4;4:&<=><<?@>A%-'4'-%566667869%&-$-&./000/12/3#$%&%%'((((()*+,
imgPre
GIF89aP
Xd:^J
Shape2
lbDate
lbName
Label1
Image5
Shape1
Image4
bcdefgfgb
\]^_Z`a`a]\
VWMXYZ[Z[WV
PQIRSTUTUQP
JFKLMNONOFJ
DEFGHIIIIED
<=>?9@ABCBC?>=<
Image3
eYfghijklmnopq
/0&123456789:;
Image2
opqprqrpp
ghiiijiklmn
abccccdccef
\]^_^`_``]\
VWXYZYZZZW[
:OPQRSSSSTU
DEFGHIHIJIKLMND
:;<=>?;@A;;=BAC
345644744446849
+,-.,/0,,,01-02
#$%&'''''''()*#
Image1
mnnnnnmo
IJKLMNOPAAONMQ
%&'()*+*),'
ImageList1
ComctlLib.ImageList
frmSetTime
Form1
txtName
txtLink
txtCommand
txtDir
Frame2
picCh9
txtNum
cboType
Label7
Label6
Label5
txtTime
cboYear
cboMonth
PicDate
Picture1
lbDay
cboWeek
ChTime
Check1
Label3
Frame1
Picture2
cmdOK
cmdCannel
cmdFolder
VStart.XButton
cmdFile
VStart.XButton
cmdSysLink
VStart.XButton
cmdChPath
VStart.XButton
cmdBat
VStart.XButton
cmdAutoLogin
VStart.XButton
R{vU_
cmdAddRemind
VStart.XButton
gEW>*
hFW>*
iGW>*
jHW>*
kJW>*
dAW>*
dC~aJ
cmdGo
VStart.XButton
Label8
Label2
Label1
Label4
mnuPath
mnuPath
mnuPath1
mnuPath2
frmList
Timer9
lstFind
VStart.XList
picFind
Timer8
Timer7
picSearchButton
VStart.picButton
tbSearchBox
Timer6
Timer5
Timer4
Timer2
PicClassBar
PicClass
lbClass
imgClass
Timer3
cmdClose
VStart.picButton
cmdSkin
VStart.picButton
cmdMin
VStart.picButton
cmdRecent
VStart.picButton
Timer1
List1
VStart.XList
cmdWeather
VStart.picButton
cmdMax
VStart.picButton
imgSkin
mnuClass
VStart.Menus
mnuAnyShort
VStart.Menus
mnuSearch
VStart.Menus
GetWeb1
VStart.GetWeb
ImgMatch
lbCmd
(0)
imgCmd
mnuSkin
VStart.Menus
ImgMatch
ImgMatch
ImgMatch
ImgMatch
ImgMatch
ImgMatch
ImgMatch
ImgMatch
ImgMatch
imgCmd
imgCmd
imgCmd
imgCmd
j9Zvh
imgCmd
:i>Vs]
imgCmd
imgCmd
imgCmd
suvklly|~
imgCmd
mnuPlugins
VStart.Menus
mnuBar
VStart.Menus
mnuShort
VStart.Menus
mnuAddShort
VStart.Menus
lbTime
lbCmd
lbCmd
XList
Timer2
picMovePrint2
picMovePrint
imgDown
picFind
...(F3)
cmdPW
txtPW
Timer1
picLT
picSll
PicSll2
Pdown
picList
picMoveBottom
picMoveRight
picMoveTop
picMoveLeft
PicIcon
lbTag
lbIcon
imgbk
picBar
imgBP
imgScroll2
imgBar
imgScroll
frmEFolder
fghijklmnopq
,-./01234560
Form1
Command1
Command1
cmdExit
VStart.XButton
cmdApp
VStart.XButton
cmdPass
VStart.XButton
cmdRemove
VStart.XButton
cmdSetup
VStart.XButton
Frame1
mySplit21
VStart.mySplit2
mySplit22
VStart.mySplit2
mySplit23
VStart.mySplit2
List1
ComctlLib.ListView
picDDE
cmdDel
VStart.XButton
cmdAdd
VStart.XButton
cmdEdit
VStart.XButton
cmdTO
VStart.XButton
ImageList1
ComctlLib.ImageList
ImageList2
ComctlLib.ImageList
Image1
frmConfig
Form1
Timer2
Timer1
Tree1
ComctlLib.TreeView
mySplit1
VStart.mySplit
File1
Command1
cmdOK
cmdCannel
Frame
Shift
cboTime
cboTime2
cmdMiniClock
cmdDown
(2.3MB)
Label26
Label25
Label24
Label23
Label13
lbDown
Frame
cmdClsVIcon
cboVol
cboCloseCDRom
Label35
Label36
Label28
Label27
Label22
Label3
Label12
Label19
Frame
cboMoveSecond
txtFolder
txtBrowser
cmdFile
VStart.XButton
cmdApp
VStart.XButton
Label39
Label30
Label29
Label20
Frame
cboTip
cmdFont
cmdItem
txtTime
txtBP
hsAlpha
cboSkin
PicColor1
VStart.PickColor
PicColor2
VStart.PickColor
PicColor3
VStart.PickColor
Frame7
Label2
Label1
Label5
cmdFile2
VStart.XButton
cmdShowFormat
VStart.XButton
Label21
Label18
Label17
Label16
Label15
Label6
Label9
Label11
Label10
Frame
List1
TrayStart
Label14
Label4
Frame
cmdChPW2
cboMemory
cboProClass
cmdSetPW
cmdChPW
cmdClsPW
cmdBackUp
cmdResume
cmdAddToDeskTop
cmdAddStartMenu
Label40
Label7
Label38
Label37
Label8
Label34
Label33
Label32
Label31
ImageList1
ComctlLib.ImageList
imgPic
imgPic
?778$S
['7,I
V!8''9#
9))T^V(
9^^17(
:b+*!'<
%d'''!a
'''TK
`T!AW
=]'@I
imgPic
/jKK/FQe
K/Of@e
lKKK////Ze
imgPic
1GGGGG
44+"1
imgPic
mnopqrst6uvwxyzk{
_`ab'cdefghijkl
OPQ'RSTUVWXCYZ[\]
@AB)CDEFGHIJKLMN
0123456789:;<=>?
"#$%&'()*+,)-./
imgPic
8NN44G
I1j76g&"%U"GGGGGGG
##vGGG#
imgPic
CD88EE8FFG'HIJ/
:;<=> ? @AB
&012345676689/
!"#$%
mnuAddPara
mnuAddPara
mnuPara
mnuPara
frmMail
Form1
Command1
Command1
mySplit21
VStart.mySplit2
picLine
imgContent
lbContent
List1
ComctlLib.ListView
Timer2
Timer1
List2
Winsock1
MSWinsockLib.Winsock
File1
*.vsm
txtContent
ComctlLib.StatusBar
Tree1
ComctlLib.TreeView
mySplit1
VStart.mySplit
mySplit3
VStart.mySplit
cmdNew
VStart.XButton
cmdCheck
VStart.XButton
9hscl
cmdStop
VStart.XButton
cmdMail
VStart.XButton
cmdExit
VStart.XButton
mySplit22
VStart.mySplit2
mySplit23
VStart.mySplit2
!!"#$%&'()*+
!"#$%&'()*
fghij_klmn_opqrs
^_1`abc1Ude
XY1SZ[\1UR]
DNOP1QRST1UVWM
:;<=111>?@ABC
*+,-./01234567
!"#$$%&'()
ImageList2
ComctlLib.ImageList
ImageList1
ComctlLib.ImageList
mnuFile
mnuCheckAll
mnuRunMail
mnuSplit1
mnuCheckOne
mnuCheckMail
mnuSplit2
mnuExit
mnuMailBox
mnuCheckThis
mnuSplit3
mnuNewBox
mnuDelBox
mnuChangeBox
mnuSetup
mnuMailApp
mnuSplit5
mnuEnabled
mnuMail
mnuMailDel
mnuMailDown
mnuSplit6
mnuMailDel2
frmAbout
Form1
mySplit1
VStart.mySplit
cmdUpDate
cmdOK
Frame1
Image2
dedhihghg121
}~}}~}|}|676
LMLBCBBCB#$#
uuu^_^^_^^_^^_^^_^]^]-.-
;<;wxwxyxsss"#"
XYXTUTSTS###
bcb]^]]]]()(
lbOEM
Label10
: http://t.qq.com/vstart2014
Label9
: Vstart@021.com
Label6
: http://www.3LSoft.com
Label7
Label5
Label4
Label1
VStart
Label3
Label2
VStart
Image1
frmMain
<z./R
OO*++
2``L"O
I00``:(
NI?O+
SZUeR
EUdO,
FormDDE
Timer9
Timer8
Timer7
Timer6
Timer5
Timer4
picDDE
Timer3
Timer2
Timer1
GetWeb4
VStart.GetWeb
GetWeb3
VStart.GetWeb
GetWeb2
VStart.GetWeb
GetWeb1
VStart.GetWeb
mnuMain
VStart.Menus
3lsoft
3lsoft
/&&**
/&&**
/&&**
0(((((
/&&**
/&&**
/&&**
/&&**
(((((
(&&**
(&&**
(&&**&
(&&**
(&&**
strPath
MainIndex
pData
pFileIndex
MeHeight
MeWidth
MeTop
MeLeft
strWT_Stat
strWT_Weather
strWT_WeatherIcon
strWT_WenDu
strWT_WenDu1
strWT_FengLi
strWT_PM25
strWT_Weather2
strWT_WenDu2
strWT_WeatherIcon2
strWT_Weather3
strWT_WenDu3
strWT_WeatherIcon3
strWT_City
strWT_CityGet
strWT_CityPY
AutoMoveIndex
AutoMoveType
LastActiveForm
IsMaxForm
Index
strUrl
strFile
sPath
bRefresh
BIndex
m_State
m_oMessage
m_colMessages
curMailIndex
CanClose
pFileName
pTitle
pDate
pPassWord
pBarCount
pBarRealCount
pBarMaxCount
pShortCount
pShortRealCount
pShortMaxCount
strTitle
strLink
strIcon
strCommand
lngColor
strTag
AddInLast
lngStyle
strBackPic
strPW
ShortCount
strMin
strDir
lngTimes
toIndex
sFile
stype
Tfile
toVol
mIndex
Count
MoveItemIndex
BkOption
BCount
NBIndex
VistaStyle
CanSelectAny
BackDown_String
BackDown_Add
myBackPicture
SelectIcon
MoveOn
strToolTip
ifDown
strCap
FontName
FontSize
ShowCaption
RightCaption
wIcon2
BarCol
barwidth
barcc1
barcc2
picBar
PicUpDown
PicScroll
Button
Shift
KeyCode
KeyAscii
remPW
NewIndex
OldIndex
Barindex
Effect
State
ScreenX
ScreenY
New_IfDraw
New_BackColor
New_Tag
New_ToolTip
New_ForeColor
New_Picture
New_style
New_PicString
New_Enabled
New_caption
New_Font
LeapFlag
nFileName
nSize
nTime
nPath
cSize
dFile
dStart
fSize
fCHTime
fCTTime
fName
fStart
fTyle
LnkCommand
sFileName
sIconIndex
sToPath
sTitle
sTivePath
FilePath
LnkFileTitle
ToPath
IconIndex
strCmd
LnkFile
FileCount
cFileName
cFileLen
cFileStart
sTempFileName
WriteOver
frmSD
OldSubC
MaxWidth
MaxHeight
NowSubMenu
ClickIndex
ClickSubIndex
MenuCount
MyFS2
LeftBmp
BackColor
Style1Color
Style2Color
LineColor
ItemColor
SubMenu
SubMenuC
BCheck
SubMenuS
SubIndex
strLoginString
strLoginTitle
strLastUrl
pDisp
Flags
TargetFrameName
PostData
Headers
Cancel
ppDisp
New_MouseIcon
Headers text.
New_MousePointer
New_DrawLine
New_Tag2
uFlag
fClear
sicon
fList
strInputTitle
lngDel
vKeyCode
WinDown
TimeString
tType
tTime
tName
tLink
New_Color
intColor
mType
vNewValue
mValue
oMessage
vntIndexKey
strMessage
strDate
vData
Message text without headers.
Message text with headers.
Value of Encrypted header field.
Value of Comments header field.
Value of Keywords header field.
Value of References header field.
Value of In-Reply-To header field.
Value of BCC header field.
Value of CC header field.
Value of Sender header field.
Value of ReplyTo header field.
Value of Subject header field.
Value of From header field.
Value of To header field.
Value of Message-ID header field.
Value of Date hesder field.
Value of Received header field.
Value of Return-Path header field.
vSize
Duration
SaveFile
CurBytes
MaxBytes
Uft8File
strContent
Object
hwndObject
szText
style
szCentered
szTitle
mvarIcon
ForeColor
lData
PathStr
Ph$$D
Rh ,D
Ph`,D
Rhh.D
Ph4:D
}#j h(>D
}#jph(>D
}#jTh(>D
}#j<h(>D
}#j<h(>D
}#jTh(>D
}#jTh(>D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
j(h<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
PhlLD
Ph 0D
jXh0"D
Ph@0D
Ph@0D
Ph 0D
jXh0"D
PhX0D
j@hHSD
j4hXSD
PhlSD
jlh(>D
}#jXh0"D
}#jXh0"D
}#jph0"D
}#jph0"D
j@hHSD
jTh(WD
j@hHSD
Rh8YD
Rh@YD
PhTYD
PhhYD
PhhYD
PhhYD
j@hHSD
jdhp,D
jXhHWD
jXhHWD
jXhHWD
jphHWD
jxhHWD
jXhHWD
jphHWD
jxhHWD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jlh(WD
j@hHSD
j@hHSD
jDh<,D
j\hHWD
j\hHWD
jphHWD
jxhHWD
j\hHWD
j@hHSD
j@hHSD
jTh(WD
j@hHSD
jphp,D
j@hHSD
jxhp,D
j@hHSD
j@hHSD
jTh(WD
j@hHSD
j@hHSD
jph(WD
j@hHSD
jxh(WD
j@hHSD
j@hHSD
j@hHSD
jlh(WD
j@hHSD
jphp,D
jxhp,D
j@hHSD
j@hHSD
jphp,D
jxhp,D
j@hHSD
jTh(WD
jlh(WD
j@hHSD
}#jXhHWD
}#jXhHWD
}#j|hp,D
}#j|hp,D
}#j|hp,D
}#jxhp,D
}#j|hp,D
}#jxhp,D
}#jxhp,D
}#jphp,D
}#jxhp,D
}#jxhp,D
}#jxhp,D
}#jXhHWD
j|hp,D
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jxhp,D
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j|hp,D
}#j@hHSD
}#jXhHWD
}#jXhHWD
}#jXhHWD
}#jlhp,D
}#jXhHWD
}#jXhHWD
}#jXhHWD
}#jlhp,D
}#j@hHSD
}#j`hp,D
PhhhD
}#j@hHSD
PhphD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jxhp,D
j@hHSD
j@hHSD
jphp,D
j@hHSD
jxhp,D
jxhp,D
jphp,D
jphp,D
jxhp,D
jxhp,D
jphp,D
jphp,D
jxhp,D
jxhp,D
j@hHSD
j@hHSD
jPhp,D
j@hHSD
j@hHSD
j@hHSD
jPhp,D
j@hHSD
j@hHSD
jlh(WD
j@hHSD
j@hHSD
j`h(WD
jdh(WD
j@hHSD
j@hHSD
jlh(WD
j@hHSD
j@hHSD
j`h(WD
jdh(WD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#j`hp,D
}#j\hHWD
j@hHSD
jXhHWD
jphp,D
j`hHWD
jxhp,D
jhhHWD
j@hHSD
jph(WD
j@hHSD
jxh(WD
j@hHSD
j@hHSD
j@hHSD
j`h(WD
jdh(WD
j@hHSD
j@hHSD
jlh(WD
j@hHSD
j@hHSD
jdh(WD
j@hHSD
jlh(WD
j@hHSD
j@hHSD
j@hHSD
j`h(WD
jdh(WD
j@hHSD
j@hHSD
jlh(WD
jxhp,D
jxhp,D
jthp,D
jthp,D
j|hp,D
j|hp,D
jthp,D
jthp,D
j|hp,D
j|hp,D
j@hHSD
jxhp,D
jphp,D
jphp,D
jphp,D
jphp,D
j@hHSD
jph(WD
jxh(WD
jph(WD
jxh(WD
jph(WD
jxh(WD
jph(WD
jxh(WD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jdh(WD
j@hHSD
jlh(WD
j@hHSD
j@hHSD
j@hHSD
jPhp,D
j@hHSD
j@hHSD
j@hHSD
jlh(WD
j@hHSD
j@hHSD
j`h(WD
jdh(WD
j@hHSD
j@hHSD
} j@hHSD
j@hHSD
jxh(WD
}#j|h(WD
j@hHSD
jph(WD
} j@hHSD
}#jxh(WD
} jTh(WD
jLhHSD
j@hHSD
j@hHSD
jxh(WD
j|h(WD
jLhHSD
j@hHSD
jxhp,D
jxhp,D
jxhp,D
jxhp,D
j|hp,D
j|hp,D
jxhp,D
jxhp,D
j|hp,D
j|hp,D
jxhp,D
j|hp,D
j|hp,D
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jxhp,D
j|hp,D
jThp,D
jThp,D
jThp,D
jThp,D
j@hHSD
jThp,D
j@hHSD
jdh(WD
jThp,D
jThp,D
jThp,D
jThp,D
j\hHWD
j\hHWD
j\hHWD
}#jXhHWD
jXhHWD
}#jXhHWD
jXhHWD
jxhp,D
jxhp,D
j|hp,D
jxhp,D
j|hp,D
jxhp,D
jXhHWD
jxhp,D
j|hp,D
jxhp,D
j|hp,D
jxhp,D
jxhp,D
j|hp,D
jxhp,D
j|hp,D
jxhp,D
jXhHWD
jxhp,D
PhdLD
j|hp,D
j|hp,D
j@hHSD
jxhp,D
jxhp,D
j|hp,D
j@hHSD
jxhp,D
jxhp,D
j|hp,D
j@hHSD
jxhp,D
jxhp,D
j|hp,D
j@hHSD
jThp,D
j`hp,D
jdhp,D
j$hdmD
j$hdmD
j$hdmD
}#j`hp,D
}#jDh<,D
}#j`hp,D
}#jDh<,D
j`hp,D
PQhphD
RPhphD
RPhphD
N\Qh8$D
\Rj$j
`Pj0j
Rh\nD
QhdnD
RhlnD
QhtnD
Ph\nD
PhdnD
PhlnD
PhtnD
N\h8$D
Ph(qD
Ph(qD
Qh uD
Qh uD
Rh@uD
RhLwD
PhLwD
QhhwD
PhPxD
RhXxD
RhXxD
Ph|xD
Rh|xD
Rh|xD
Qh4yD
Rh@yD
Qh@yD
Ph\yD
PhlyD
Ph8zD
PhXzD
Rhh{D
Ph${D
Ph4}D
QhD}D
jlh\}D
jPh\}D
jHh\}D
PhdnD
}#jDh<,D
}#jDh<,D
}#jDh<,D
PhX.D
jTh(WD
jTh(WD
jTh(WD
j(h<,D
} jDh<,D
}#jTh(WD
}#jPh(WD
}#jTh(WD
}#j4h<,D
}#j4h<,D
}#j4h<,D
}#j4h<,D
PhdnD
jLhHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jth(>D
jLhHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jLhHSD
j@hHSD
j@hHSD
RhtnD
PhtnD
PhdnD
Ph\nD
PhX.D
Ph(qD
PhdnD
jDh<,D
PhPxD
Ph(qD
QhdnD
PhlnD
}#j(h<,D
Rh\nD
PhPxD
PhPxD
PhPxD
PhPxD
PhPxD
PhPxD
QhdnD
QhlnD
Rh\nD
QhtnD
Qh\nD
PhdLD
} j@h\}D
} j@h\}D
Rhl}D
Qhl}D
Rhl}D
Rhl}D
Phl}D
jXhHWD
jth(>D
Phh{D
} jph(>D
} j8h(>D
} jth(>D
} jlh(>D
PhlnD
} jph(>D
} j4h(>D
} j4h(>D
} jlh(>D
jXh0"D
jXh0"D
jHh<,D
jHh<,D
Ph\nD
Ph\nD
jHh<,D
jHh<,D
Ph\nD
Ph8lD
Ph8lD
Ph\nD
}#jth(>D
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jdh\}D
QhTYD
Phh{D
Rhh{D
jThthD
jDh<,D
jLhHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
RhTYD
}#j@hHSD
}#j@hHSD
}#j4hXSD
}#jLhHSD
}#j@hHSD
}#j@hHSD
}#j@hHSD
Ph lD
Phh{D
}#j@hHSD
}#jXhHWD
}#j,hXSD
}#j,hXSD
}#j,hXSD
}#j,hXSD
}#j,hXSD
}#j,hXSD
}#j,hXSD
}#j4hXSD
}#j4hXSD
}#j@hHSD
QhlnD
}#j4hXSD
j@hHSD
j@hHSD
jLhHSD
j@hHSD
}#j@hHSD
j@hHSD
j@hHSD
j@hHSD
jth(>D
} jdh\}D
jth(>D
jPhthD
jThthD
jThthD
jThthD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#jhhthD
}#jlhthD
}#jphthD
}#jththD
}#jhhthD
}#jlhthD
}#jphthD
}#jththD
QhL=D
jPhthD
jth(>D
jth(>D
jth(>D
jth(>D
jth(>D
j@hHSD
j@hHSD
jThthD
j@hHSD
j@hHSD
}#j@hHSD
}#j@hHSD
}#jTh(WD
}#j@hHSD
}#jPh(WD
}#j@hHSD
}#j@hHSD
}#jPh(WD
}#jTh(WD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#jdh(WD
}#j@hHSD
}#jlh(WD
}#j@hHSD
j@hHSD
jdh(WD
j@hHSD
jlh(WD
j@hHSD
jdh(WD
j@hHSD
jlh(WD
j|hp,D
jTh(WD
j|hp,D
jTh(WD
}#jXhHWD
}#jXhHWD
jPhp,D
jThp,D
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jdh(WD
j@hHSD
PhphD
jXhHWD
jPhp,D
jThp,D
jPhp,D
jXhHWD
jXhHWD
jlhthD
jPhp,D
jThp,D
j@hHSD
j`h(WD
jThp,D
jPhp,D
jPhp,D
j@hHSD
j`hHWD
j@hHSD
jhhHWD
F`pxj
jTh(WD
j\hHWD
4Rh\IA
jPh(WD
}#jth(>D
j(hLZD
j0hLZD
j4hLZD
jPh<ZD
jHh<ZD
jLh<ZD
}6j,hLZD
jTh<ZD
j@hHSD
j@hHSD
}lj hLZD
j0h<ZD
j@h<ZD
j hLZD
}qj$hLZD
j@h<ZD
jDh<ZD
j0hLZD
j(hLZD
j hLZD
jHh<ZD
jPh<ZD
j@h<ZD
jTh(WD
j@hHSD
j@hHSD
j@hHSD
j0h<ZD
j8h<ZD
j@h<ZD
j<h<ZD
j4h<ZD
j<h<ZD
j4h<ZD
jDh<ZD
j<h<ZD
}#j@hHSD
}#j@hHSD
}#jXhHWD
j0hXSD
j,hXSD
0hXSD
j4hXSD
j4hXSD
Ph4}D
j,hXSD
}#jthp,D
}#j$hXSD
}#j$hXSD
j4hXSD
j@hHSD
Ph\nD
}#jTh(WD
}#jTh(WD
}#j@hHSD
}#jTh(WD
}#j@hHSD
j4hXSD
Ph4}D
Ph4}D
Ph4}D
}#jLhHSD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#j4hXSD
}#j@hHSD
}#j4hXSD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#j@hHSD
j$hXSD
jThp,D
jphp,D
jthp,D
jThp,D
jphp,D
jphp,D
jphp,D
jThp,D
jxhp,D
j|hp,D
jThp,D
jxhp,D
jxhp,D
jxhp,D
}#j@hHSD
}#jTh(WD
}#j@hHSD
}#j$hXSD
}#j$hXSD
Ph4}D
jThthD
jThthD
j4hXSD
j4hXSD
j,hXSD
j\hHWD
>h\nD
B@PhlnD
PhdnD
j4h<,D
j$hXSD
j$hXSD
jTh(WD
}#jXhHWD
RhtnD
PhtnD
PhtnD
jth(>D
jth(>D
jth(>D
j$hXSD
j$hXSD
}#jXhHWD
}#jXhHWD
}#jXhHWD
}#jXhHWD
}#j,hXSD
}#j,hXSD
}#j4hXSD
}#j4hXSD
j$hXSD
RhtnD
PhtnD
PhtnD
PhtnD
PhtnD
RhtnD
PhtnD
PhtnD
PhtnD
PhtnD
jTh(WD
jTh(WD
jDh<,D
jth(>D
j4hXSD
j4hXSD
j<hXSD
$hXSD
j4hXSD
j4hXSD
Ph(qD
Ph(qD
j,hXSD
j4hXSD
j4hXSD
PhtnD
j,hXSD
j4hXSD
j4hXSD
j4hXSD
j4hXSD
jXhHWD
j\hHWD
jTh(WD
jTh(WD
j4hXSD
jTh(WD
jTh(WD
jXhHWD
jXhHWD
jXhHWD
jXhHWD
jXhHWD
jXhHWD
(hXSD
j,hXSD
0hXSD
j,hXSD
0hXSD
j,hXSD
j4h<,D
j,hXSD
j4hXSD
j4hXSD
j4hXSD
j4h<,D
jTh(WD
j4hXSD
j4hXSD
j4hXSD
j4hXSD
j4hXSD
j4hXSD
PhtnD
jTh(WD
jTh(WD
jXhHWD
j\hHWD
jlh(WD
jDh<,D
j\hHWD
jXhHWD
j\hHWD
jTh(WD
jTh(WD
jTh(WD
jTh(WD
jTh(WD
PhtnD
PhtnD
jLhHSD
j@hHSD
PhlnD
j@hHSD
j@hHSD
jph(>D
jxh(>D
j|h(>D
jth(>D
jth(>D
QhL=D
PhX.D
j@hHSD
j@hHSD
j4h<,D
jlh(WD
j@hHSD
jlh(WD
j@hHSD
jlh(WD
j@hHSD
jlh(WD
jlh(WD
jlh(WD
jlh(WD
jlh(WD
jlh(WD
jlh(WD
jlh(WD
jlh(WD
jlh(WD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jTh(WD
j@hHSD
j@hHSD
j@hHSD
jTh(WD
jPh(WD
jTh(WD
jTh(WD
jTh(WD
jTh(WD
jTh(WD
jTh(WD
jTh(WD
jTh(WD
j@hHSD
jTh(WD
jhhthD
jphthD
}#jxh(>D
}#jth(>D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#j@hHSD
}#j`hHWD
} jph0"D
}#j@hHSD
}#j`hHWD
}#j@hHSD
}#jphHWD
}#j@hHSD
}#jhhHWD
} jph0"D
} jxh0"D
}#j@hHSD
}#j`hHWD
}#j@hHSD
}#jhhHWD
} jph0"D
} jxh0"D
Ph4"E
PhH"E
Ph\"E
Phl"E
Rh #E
Ph,#E
Ph,#E
Vh0#E
Vh<#E
PhlnD
QhdnD
j@hHSD
}#j4h(>D
}#j4h(>D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
j@hHSD
j4h<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
j4h(>D
Ph(qD
PhPxD
PhPxD
jLhHSD
jLhHSD
jth(>D
PhH%E
PhlSD
} jdh\}D
PhtnD
V4j4h(>D
Rhh{D
N4j8h(>D
N4jth(>D
N4j4h(>D
V4j8h(>D
V4jth(>D
jLhHSD
jLhHSD
j@hHSD
jLhHSD
j@hHSD
PhtnD
jLhHSD
j@hHSD
PhtnD
j@hHSD
jXh0"D
jDh<,D
j@hHSD
j`hHWD
jph0"D
j@hHSD
j`hHWD
j@hHSD
jphHWD
j@hHSD
jhhHWD
j@hHSD
jxhHWD
jph0"D
jxh0"D
j@hHSD
j`hHWD
j@hHSD
jhhHWD
j@hHSD
jxhHWD
jph0"D
jxh0"D
jDh<,D
jDh<,D
jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
j4h<,D
j4h<,D
jph0"D
jph0"D
jxh0"D
} jXh0"D
} jXh0"D
} jxh0"D
} j|h0"D
} jph0"D
} jth0"D
} jph0"D
} jth0"D
}#jph0"D
}#jxh0"D
} jxh0"D
} jph0"D
jph0"D
jph0"D
jph0"D
j@hHSD
}#jlh(WD
Rh(*E
Ph<*E
j@hHSD
Ph<*E
}#j\hHWD
}#j@hHSD
j@hHSD
}#jphHWD
}#jthHWD
}#j@hHSD
j@hHSD
}#jxhHWD
}#j|hHWD
PhlSD
QhL=D
j@hHSD
}#j@hHSD
Qh(*E
Ph<*E
Qh(*E
Php*E
}#j@hHSD
Php*E
}#j\hHWD
}#j@hHSD
}#j@hHSD
}#jphHWD
}#jthHWD
}#j@hHSD
}#j@hHSD
}#jxhHWD
}#j|hHWD
}#j@hHSD
}#j`hHWD
}#j@hHSD
}#jhhHWD
}#j@hHSD
}#j@hHSD
}#j`hHWD
}#j@hHSD
}#jhhHWD
}#j@hHSD
j@hHSD
jlh(WD
Rh(*E
Ph<*E
j@hHSD
Ph<*E
j\hHWD
j@hHSD
j@hHSD
jphHWD
}#jthHWD
j@hHSD
j@hHSD
jxhHWD
}#j|hHWD
j@hHSD
jlh(WD
Qh(*E
j@hHSD
j\hHWD
j@hHSD
j@hHSD
jphHWD
}#jthHWD
j@hHSD
j@hHSD
jxhHWD
}#j|hHWD
j@hHSD
j@hHSD
j@hHSD
j4h<,D
Ph(*E
Ph<*E
Ph(*E
Php*E
}#j@hHSD
Ph<*E
}#j\hHWD
}#j@hHSD
}#j@hHSD
}#jphHWD
}#jthHWD
}#j@hHSD
}#j@hHSD
}#jxhHWD
}#j|hHWD
}#j@hHSD
}#j`hHWD
}#j@hHSD
}#jhhHWD
}#j@hHSD
}#j@hHSD
}#j`hHWD
}#j@hHSD
}#jhhHWD
}#j@hHSD
}#jth(>D
jth(>D
V4jth(>D
RhL=D
RhlSD
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jth(>D
;h8.E
PhdLD
PhT.E
QhL=D
N4jth(>D
V4jth(>D
N4jth(>D
j@hHSD
jhhHWD
jxh0"D
j@hHSD
jhhHWD
j@hHSD
jxhHWD
jxh0"D
j@hHSD
j`hHWD
jph0"D
j@hHSD
j`hHWD
j@hHSD
jphHWD
jph0"D
j@hHSD
j`hHWD
jph0"D
} jXh0"D
} jxh0"D
} jph0"D
}#j@hHSD
}#jTh(WD
}#j@hHSD
}#jTh(WD
}#j@hHSD
}#j@hHSD
}#jlh(WD
} jdh0"D
}#j@hHSD
}#j@hHSD
Qh(*E
Ph<*E
}#j@hHSD
Ph<*E
}#j\hHWD
}#j@hHSD
}#j@hHSD
}#jphHWD
}#jthHWD
}#j@hHSD
}#j@hHSD
}#jxhHWD
}#j|hHWD
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#jth(>D
}#jDh<,D
}#jXhHWD
}#jXhHWD
}#jXhHWD
}#jphHWD
}#jXhHWD
}#jxhHWD
}#jXhHWD
}#jphHWD
}#jXhHWD
}#jXhHWD
}#jxhHWD
}#jXhHWD
}#jphHWD
}#jxhHWD
}#jDh<,D
}#j\hHWD
PhX3E
j\hHWD
jLhHSD
jLhHSD
j@hHSD
j@hHSD
j@hHSD
PhlnD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jhhHWD
j@hHSD
j@hHSD
j@hHSD
j`hHWD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
jTh(WD
j@hHSD
j@hHSD
j@hHSD
j`hHWD
j@hHSD
j@hHSD
jlh(WD
j@hHSD
j\hHWD
}#j@hHSD
}#jphp,D
}#jxhp,D
}#j@hHSD
}#jXhHWD
j@hHSD
j\hHWD
jLhHSD
j@hHSD
jLhHSD
j@hHSD
j\hHWD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
} j h(>D
} jph(>D
}#jDh<,D
}#jDh<,D
}#jDh<,D
}#jDh<,D
} jph(>D
}#j4h(>D
}#j<h(>D
} jlh(>D
j@hHSD
j\hHWD
j@hHSD
j\hHWD
V4j4h(>D
N4jDh(>D
V4j<h(>D
Ph 5E
PhX6E
Ph47E
PhH7E
}#jXhD6E
} jXh0"D
Qh\7E
V4jth(>D
N4jth(>D
Qhh{D
W4jth(>D
O4jth(>D
N4jth(>D
jTh(WD
Ph<8E
N4jth(>D
PhX8E
j|h(>D
N4jth(>D
}#j@hHSD
}#j@hHSD
}#j@hHSD
}#jlh(WD
}#j@hHSD
}#jxhp,D
}#jphp,D
}#jphp,D
}#jxhp,D
jlh(>D
}#jTh(WD
}#jPh(WD
Ph<?E
} jph0"D
} jph0"D
j@hHSD
jXhHWD
j@hHSD
jXhHWD
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
j@hHSD
jXhHWD
j@hHSD
jXhHWD
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jDh<,D
jdh\}D
jth(>D
jth(>D
PhPxD
jXh0"D
jXh0"D
jXh0"D
QhL=D
N4jth(>D
jth(>D
jph0"D
jph0"D
jxh0"D
jxh0"D
jxh0"D
jph0"D
jph0"D
jXh0"D
jph0"D
} jxh0"D
} jph0"D
jXh0"D
jXh0"D
jXh0"D
jXh0"D
jph0"D
jph0"D
jth0"D
jth0"D
jph0"D
jph0"D
jth0"D
jth0"D
jxh0"D
jxh0"D
j|h0"D
j|h0"D
jph0"D
jph0"D
jth0"D
jph0"D
jph0"D
jth0"D
jxh0"D
jxh0"D
j|h0"D
jxh0"D
j|h0"D
jph0"D
jth0"D
jph0"D
jth0"D
jxh0"D
j|h0"D
jph0"D
jth0"D
jph0"D
jth0"D
Ph$EE
Ph0EE
Ph@EE
PhhEE
QhpEE
PhpEE
Rh|EE
Rh8BE
}#jTh(WD
PhtnD
jXhHWD
jXhHWD
PhlnD
j@hHSD
j4h(>D
j<h(>D
j@hHSD
jph(>D
j4h(>D
j<h(>D
jlh(>D
}#j|hp,D
jThthD
}#jdhLJE
}#jXhLJE
}#jlhLJE
}#j`hLJE
}#j,hLJE
jThthD
jxhLJE
jxhLJE
jHhLJE
}#jHhLJE
}#jHhLJE
jTh(WD
jTh(WD
PhlnD
PhdnD
j@hHSD
j h(>D
jph(>D
jth(>D
jlh(>D
jXhHWD
jXhHWD
jLhHSD
j@hHSD
j,hXSD
j@hHSD
j h(>D
jph(>D
j<h(>D
j,hXSD
jlh(>D
j$hXSD
j$hXSD
j<hXSD
j$hXSD
Rh(LE
j,hLJE
j,hLJE
jHhLJE
PhHLE
PhdLE
Qh$PE
Rh8PE
PhDPE
QhXPE
RhdPE
PhpPE
Ph(QE
Qh<QE
RhPQE
PhdQE
QhpQE
Rh|QE
QhdLD
RhdLD
RhTSE
jXh`FE
jXh`FE
Ph(ZE
RhhZE
Ph|ZE
RhXVE
QhXVE
VPWSj
VQWSj
j4h<,D
j4h<,D
PhdLD
Ph(_E
PhL_E
Ph(_E
PhL_E
Ph\_E
Ph(_E
PhL_E
Ph(_E
PhL_E
Ph@`E
jTh(WD
jTh(WD
jlh(WD
j@hHSD
j@hHSD
jTh(WD
jTh(WD
jlh(WD
j@hHSD
j@hHSD
j@hHSD
j@hHSD
RhdLD
RhdLD
RhdLD
Ph$dE
PhPxD
MSVBVM60.DLL
EVENT_SINK_GetIDsOfNames
__vbaR8FixI4
__vbaVarTstGt
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
__vbaLineInputStr
__vbaLateIdCall
__vbaLenBstr
__vbaStrVarMove
__vbaVarIdiv
__vbaPut3
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaPut4
EVENT_SINK_Invoke
__vbaNextEachVar
__vbaRaiseEvent
__vbaFreeObjList
__vbaVarIndexLoadRef
__vbaStrErrVarCopy
__vbaVarFix
_adj_fprem1
__vbaRecAnsiToUni
__vbaI2Abs
__vbaResume
__vbaCopyBytes
__vbaForEachCollAd
__vbaVarCmpNe
__vbaStrCat
__vbaError
__vbaLsetFixstr
__vbaRecDestruct
__vbaSetSystemError
__vbaLenBstrB
__vbaHresultCheckObj
__vbaNameFile
__vbaVargVarCopy
__vbaLenVar
_adj_fdiv_m32
__vbaAryVar
__vbaVarTstLe
Zombie_GetTypeInfo
__vbaVarXor
__vbaVarCmpGe
__vbaAryDestruct
__vbaVarIndexLoadRefLock
__vbaLateMemSt
__vbaBoolStr
__vbaStrBool
__vbaVarForInit
__vbaForEachCollObj
__vbaExitProc
__vbaI4Abs
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
__vbaFpR4
__vbaForEachCollVar
__vbaStrFixstr
__vbaBoolVar
__vbaFPFix
__vbaRefVarAry
__vbaVargVar
__vbaVarTstLt
__vbaBoolVarNull
__vbaFpR8
_CIsin
__vbaErase
__vbaVarCmpGt
__vbaVargVarMove
__vbaLateMemStAd
__vbaNextEachCollObj
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarAbs
__vbaGenerateBoundsError
__vbaGet3
__vbaStrCmp
__vbaGet4
__vbaPutOwner3
__vbaAryConstruct2
__vbaVarTstEq
__vbaDateR8
__vbaPutOwner4
__vbaR4Str
__vbaNextEachCollVar
__vbaObjVar
__vbaPrintObj
__vbaI2I4
DllFunctionCall
__vbaVarLateMemSt
__vbaVarOr
__vbaFpUI1
__vbaCastObjVar
__vbaLbound
__vbaRedimPreserve
__vbaStrR4
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaStrR8
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaObjIs
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaVarMul
__vbaExceptHandler
__vbaPrintFile
__vbaStrToUnicode
__vbaDateStr
_adj_fprem
_adj_fdivr_m64
__vbaR8ErrVar
__vbaLateIdStAd
__vbaI2Str
__vbaVarDiv
__vbaVarCmpLe
__vbaFPException
__vbaInStrVar
__vbaStrCompVar
__vbaGetOwner3
__vbaUbound
__vbaStrVarVal
__vbaGetOwner4
__vbaVarCat
__vbaDateVar
__vbaLsetFixstrFree
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVarLateMemCallLdRf
__vbaVar2Vec
__vbaR8Str
__vbaInStr
__vbaNew2
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaVarSetObj
__vbaStrCopy
__vbaI4Str
__vbaVarNot
__vbaVarCmpLt
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
__vbaPowerR8
_adj_fdiv_r
__vbaVarTstNe
__vbaVarSetVar
__vbaI4Var
__vbaVarCmpEq
__vbaLateMemCall
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaStrComp
__vbaVerifyVarObj
__vbaFpI2
__vbaVarMod
__vbaUnkVar
__vbaVarTstGe
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaFpI4
__vbaVarSetObjAddref
__vbaRecDestructAnsi
__vbaLateMemCallLd
_CIatan
__vbaI2ErrVar
__vbaAryCopy
__vbaStrMove
__vbaCastObj
__vbaForEachVar
__vbaR8IntI4
__vbaStrVarCopy
_allmul
__vbaLateIdSt
_CItan
__vbaNextEachCollAd
__vbaAryUnlock
__vbaFPInt
__vbaVarForNext
_CIexp
__vbaMidStmtBstr
__vbaRecAssign
__vbaI4ErrVar
__vbaFreeStr
__vbaFreeObj
NI?O+
SZUeR
EUdO,
OO*++
2``L"O
I00``:(
<z./R
wwwww
http://tj5.3lsoft.com/ysqd5_install_
http://tj5.3lsoft.com/ysqd5_uninstall_
http://tj5.3lsoft.com/ysqd5_start_
http://tj5.3lsoft.com/ysqd5_active_
http://tj5.3lsoft.com/ysqd5_experience_
http://tj5.3lsoft.com/server_time
Failed to load driver.
5.7 Build 2014.10.14
10058
http://www.baidu.com/s?wd=%s&tn=84002058_dg
http://www.google.com.hk/search?q=%s&client=aff-9991&ie=GB2312&oe=utf8&hl=zh-CN&newwindow=1
http://tianqi.021.com/weatherapi.php?py=
3lsoft
ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz
tooltips_class32
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=
http://www.hao123.com/?tn=93524668_hao_pg
http://www.baidu.com/?vstart
www.hao123.com
www.baidu.com
RegAsm.exe
ActiveMe
vsEnFolder|vsEnFolderDDE
Close
ReLoad
|FormDDE
nopre
debug
VStart5
PassWord
MYVER
MYVER2
Config
RunTimes
/APP/\Files\RegAsm.exe
[hide] CoreAudio.dll /codebase
UpDate2.exe
UpDate.exe
OnTop
InDeskTop
NoMove
RunMinXList
SearchOption
User50\HotKey.vsh
HotKey
AllLock
Running
UpDateFile.exe
Enabled
vsEnFolder.exe
Plugins\MiniClock\MiniClock.exe
http://ud5.3lsoft.com/
AutoBackUp
http://www.3lsoft.com
MenuColor1
MenuColor2
MenuColor3
MenuColor4
MenuColor5
User50\
frmMail
CanClose
(&U)...
(&S)...
UpLoadOpen
Click
Files\Start.wav
ShowWeather
(0)
MCAddCtrl
MCAddAlt
MCAddShift
MCAddRight
rundll32.exe user32.dll,LockWorkStation
BackUp
BackUp\
.vbak
Files\Vstart64.exe
Files
IfDraw
BackColor
ToolTip
ForeColor
MouseOnColor
MouseDownColor
Style3DColor1
Style3DColor2
StyleColor
StyleColor2
Picture
style
PicString
Caption
XButton
Style3dColor1
Style3dColor2
kernel32
IsWow64Process
/gouwu
http://shop.3lsoft.com
/game
http://game.3lsoft.com
/haowande
http://haowande.3lsoft.com
/site
http://www.hao123.com/?tn=29065018_68_hao_pg
SOFTWARE\vstart
ExePath
install
uninstall
COMCTL32.OCX
Files\COMCTL32.OCX
MSWINSCK.OCX
Files\MSWINSCK.OCX
XList
Weather
vb6chs.dll
Files\vb6chs.dll
Files\vssafe2.dll
vssafe2.dll
Files\wmi_monitor.dll
wmi_monitor.dll
regsvr32.exe /s "
ChangeUser.exe
ChangeUser2.exe
ChangeUser2.exe 3lsoft
Files\Config.
Files\History.ini
Welcome.htm
?ysqd
baidu.com
NoUseVIcon
VIcon.idx
VIcon.VDB
User50\index.vsi
File\New.vbak
Files\dataengine_.dll
vstart5
LockPW
User50
Files\New.vbak
\Installer\
MyLnk
/APP/MyLnk\
InternetShortcut
Skin\
\Setup.ini
Setup.ini
Main.skn
AutoHide
LargeIcon
viScroll
NoExeIcon
AutoLoadUrlIcon
CacheUrlIcon
OneClickOpen
NoAllNet
LockNoExit
AllowWIcon
HideTitle
AskForDel
AutoGetFocus
RightTitle
BackPicture
FormatTime
VistaStyle
DelayTime3
HideFindButton
AllowSound
UseSimpleTip
week time
NoAllowTray
AutoRun
AutoSort
AskForSysOpen
AskForHandup
MoveForActive
MonitorOffToLock
NoMenu
NoBTClose
GetLnkLink
GetUrlLink
UseExplorer
ActiveToMouse
UseXiangDui
MCForXList
NoShowVol
BrowserType
BrowserPath
OpenFolderAtOther
FolderAppPath
GoLoginNow
HideInLowFBL
NoShortTip
AutoLRHeight
UseIconOpen
RunOnDbClick
CheckInStart
UpdateQuiet
MinAfterRun
HideAfterRun
UseTrayStart
TrayInMin
NoClose
NoRunMiniClock
WheelForBar
dhHide
dhMin
TrayStartFile
lngVolChange
DelayTime
DelayTime2
Memory
FolderOpenType
ERNoMsg
ERNoPro
ERNoVC
TrayStart.vst
DefFontColor
ProClass
Files\Icons.dll<
color
http://
favicon.ico
WebIcon\
https://
ftp://
0123456789
frmTray
TaskbarCreated
Images\
Files\Tray
- 3LSoft
MenuLeft.bmp
8421504
MenuCount
MaxHeight
MaxWidth
PrintItem
MenuCheck.ico
AppMe
MyFS2
ClickIndex
ClickSubIndex
NowSubMenu
http://t.qq.com/vstart2014
http://www.3LSoft.com
mailto:Vstart@021.com
*.txt
properties
(*.*)
LastViewFolder2
(*.exe;*.dll;*.icl)
*.exe;*.dll;*.icl
[nore],[hide],[min],[max],[en],[sysf]
S_Normal.bmp
Recent_Title
Recent_Link
Recent_Icon
Recent_Dir
Recent_Cmd
Recent_Min
%SystemDrive%,%SystemPath%,%WinDir%,%ProgramFiles%,%TEMP%,%Favorites%,%Desktop%,%MyDocument%
Icons\
Small\
Plugins\
System\NetWork.ico
System\Program.ico
/favicon.ico
DrawLine
https
MousePointer
\explorer.exe
\SHELL32.dll
MouseIcon
RunCount
*Explorer.exe /n,::
*Explorer.exe /e,/n,::
VStart
NoParameter
explain.ini
rundll32.exe shell32.dll,Control_RunDLL
frmExBat
strLink
/ACTIVE/
/HIDE/
/EXIT/
/NOHOTKEY/
/SWHOTKEY/
/SWLOCK/
/GETURL/
/ADDLOGIN/
/HOTKEY/
/TIME/
/ENFOLDER/
/EMAIL/
/SEARCH/
[sysf]
[NoRe]
[hide]
[min]
[max]
%systemroot%
Rundll32.exe url.dll, FileProtocolHandler "
mstsc "
Explorer.exe
2345.co
?ystt5
?ystt6
:\Program Files\Internet Explorer\iexplore.exe
%systemdrive%
%systempath%
%windir%
%programfiles%
programfiles
%mydocument%
%temp%
%favorites%
%desktop%
%userprofile%
USERPROFILE
/APP/
sndvol32.exe
ClearFolder
SetProcessMemory
KillProgram
ShowWindow
OpenCDRom
CloseCDRom
OCCDRom
O-CCDRom
GoBar
FolderOption
Rundll32.exe shell32.dll,Options_RunDLL 0
ShutDown
ReBoot
LogOut
Dormancy
Hangup
LockMe
Suspend
ScreenSavers
EmptyRecycle
ClearIEUrl
ClearIEHistory
ClearCookies
ClearRecent
S-HDeskTop
S-HTaskBar
MonitorOff
ShowActWindow
TopActWindow
PinInDeskTop
KillActWindowProc
CloseActWindow
MinToTray
CreateShortcut
WindowStyle
AppEvents\Schemes\Apps\Explorer\EmptyRecycleBin\.Current
Shell_traywnd
Progman
SHELLDLL_DefView
SysListView32
WScript.Shell
ExpandEnvironmentStrings
TargetPath
Arguments
WorkingDirectory
IconLocation
VStart50,
yyyy-mm-dd
+02G0zUkSI0A0G2A3
(*.ico)
*.ico
Icons\Small\
Icons\Small
Shift
Shift+
Ctrl+
Ctrl+Shift+
Ctrl+Alt+
Shift+Alt+
Ctrl+Shift+Alt+
User50\HotKeyTag.ini
Files\SysLink.vss
#Hangup
#System\Hangup
#System\Rasphone
/Active/
/Hide/
/Exit/
/SWHotKey/
/SWLock/
#VStart
explain
\explain.ini
/GetUrl/
/HotKey/
/Time/
/EnFolder/
/EMail/
/Search/
/AddLogin/
#GoBar
#System\ControlPanel
#SETPROCESSMEMORY
E:\qq\qq.exe
#SetProcessMemory
#KILLPROGRAM
#KillProgram
#CLEARFOLDER
#ClearFolder
#SHOWWINDOW
#ShowWindow
#OPENCDROM
#CLOSECDROM
#OCCDROM
#O-CCDROM
#GOBAR
Desktop
SpecialFolders
(*.exe)
*.exe
(*.vbak)
*.vbak
VS5BK-
yyyymmdd
user50\
Files\Config.ini
Config.ini
\VStart\Plugins\MiniClock.vst
Plugins\Temp.exe
*.bmp;*.jpg;*.gif;*.ico
VStart.exe nopre
http://products.3lsoft.com/xuehu.asp
week,time,y,m,d,nl1,nl2,jq,jr,ww,st,\n,\b,\*
BarFontColor
Picture
TrayStart
1,2,3,4,5,8,10,15,20,25,30,35,40,45,50
ListColor
BarColor1
AlphaMe
Software\Microsoft\Windows\CurrentVersion\Run
VStart5.0
.exe"
Software\Microsoft\Internet Explorer\Main
Start Page
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell
Control Panel\Desktop
AutoEndTasks
Folder\shell\vsEnFolder
command
vsEnFolder.exe %1
Folder\shell\vsEnFolder\Command
SeShutdownPrivilege
rundll32.exe powrprof.dll,SetSuspendState
*.lnk;*.url
enabled
XX:XX
yyyy-MM-dd HH:mm
hh:mm
31,29,31,30,31,30,31,31,30,31,30,31
yyyy-MM-dd
User50\Time.vsh
Color
AskTime
16777215,12632319,12640511,12648447,12648384,16777152,16761024,16761087,14737632,8421631,8438015,8454143,8454016,16777088,16744576,16744703,12632256,255,33023,65535,65280,16776960,16711680,16711935,8421504,192,16576,49344,49152,12632064,12582912,12583104,4210752,128,16512,32896,32768,8421376,8388608,8388736,0,64,8256,16448,16384,4210688,4194304,4194368
RngSizeY4
RngSizeX1
RngSizeY1
RngSizeX2
RngSizeY2
RngSizeY3
RngSizeX3
RngSizeX4
UNKOWN
Win9X
NT351
Win2000
Win2003
Vista
-64bit
-32bit
TipTop.bmp
Shell_TrayWnd
TrayNotifyWnd
Width
Height
WindowState
[ALL]
[VSM]
USER
USER
PASS
PASS ******
TOP 1 1
octets
DELE
Files\msg.wav
MailApp
Files\POPSmtp.ini
3lpopsmtp3l
encrypted
0,1,2,3,5,10,15,30,45,60,90,120,180,240,300,360,720
base64DeccodeTmp
QpDeccodeTmp
received
return-path
sender
reply-to
message-id
in-reply-to
references
keywords
subject
comments
content-transfer-encoding
base64
quoted-printable
=?gb2312?
=?iso-8859-1?
user50\enFolder.vsf
EnFolder
AutoPW
Document
Title
Explorer.exe
Explorer.exe "
vsEnFolder.exe"
Selected
LocationURL
0 0
yyyy-mm-dd hh:mm:ss
ItemWidth
www.3lsoft.com
Internet Explorer
sina.com
Windows Media Player
skin\
http://www.3lsoft.com/Skin/
http://www.3lsoft.com/Skin/list3.txt
skin/list3.txt
skin\list3.txt
VSSKINLIST
Skin\Pre
http://www.3lsoft.com/Skins/
\pre.gif
\pre.txt
Skin\Pre\
ShowvIconAsk
\SYSTEMROOT\
ShengName
CityName
CityPY
WeatherCheck
Files\City.txt
Sheng
cmdFontColor1
C_Down.ico
Plugins\MyWeather\MyWeather.exe
Plugins\MyWeather
PM2.5
\wIcon
Icons\wIcon
\nothing.png
weatherinfo
WenDu
dload
#ENTER#
{ENTER}
#TAB#
{TAB}
#DOWN#
{DOWN}
#LEFT#
{LEFT}
#RIGHT#
{RIGHT}
#HOME#
{HOME}
#END#
{END}
#PAGEUP#
{PGUP}
#PAGEDOWN#
{PGDN}
#BACKSPACE#
#ESC#
{ESC}
#DELETE#
{DEL}
Program Manager
(&U)...
cmdWeather
"city":null
weather1
wind1
value
temp1
temp2
weather2
temp3
weather3
CityGet
WeatherIcon
WenDu1
FengLi
Weather2
WenDu2
WeatherIcon2
Weather3
WenDu3
WeatherIcon3
Width
Height
&nbsp;
(&P)...
(&E)...
(&M)...
(&C)...
###.0
mnuAnyShort
mnuClass
mnuSearch
cmdMin
Min_Down.bmp
Min_Move.bmp
Min_Normal.bmp
IsMax
Re_Normal.bmp
Max_Normal.bmp
cmdMax
Re_Down.bmp
Max_Down.bmp
Re_Move.bmp
Max_Move.bmp
cmdSkin
(&T)...
(&S)...
Skin_Down.bmp
Skin_Move.bmp
Skin_Normal.bmp
Close_Down.bmp
Close_Move.bmp
Close_Normal.bmp
S_Down.bmp
S_Move.bmp
button
_Normal.ico
ImgMatch
_Down.ico
cmdFontColor2
_Move.ico
(&K)...
(&P)...
(&M)...
(&B)...
*EXPLORER.EXE /N,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
(&B)...
*EXPLORER.EXE /N,::{645FF040-5081-101B-9F08-00AA002F954E}
(&B)...
*EXPLORER.EXE /N,::{208D2C60-3AEA-1069-A2D7-08002B30309D}
(&B)...
Explorer /select,
mnuAddShort
LockRecent
LastViewFolder1
SearchButton_Normal.bmp
RecentBWidth
RecentBHeight
MaxWidth
MaxHeight
FixWidth
FixHeight
CmdControlWidth
CmdControlheight
CmdMinWidth
CmdMinHeight
CmdMaxWidth
CmdMaxHeight
CmdSkinWidth
CmdSkinHeight
CmdCloseWidth
CmdCloseHeight
NoClassCaption
NoMenuCaption
ClassIconSize
TimeCapColor
TimeCapBold
MainColor
Bar.bmp
UpDown.bmp
Scroll.bmp
BarFontName
BarFontSize
ShortFontName
ShortFontSize
CommandFontName
CommandFontSize
ClassFontName
ClassFontSize
LastIndex
BarColor2
Files\Find.ico
Skin-
ClassBDirection
ClassBSub
ClassBIconLeft
ClassBIconTop
ClassShowText
ClassTextLeft
ClassTextTop
ClassTextWidth
ClassTextHeight
back.jpg
ClassTextFontColor
C_Normal.ico
LastBar
CLass
Google(&G)
SearchButton_Down.bmp
SearchButton_Move.bmp
C_Move.ico
about:blank
back.bmp
?ystt7
?ystt8
Files\Change.wav
mnuBar
mnuPlugins
TimeCapLeft
TimeCapTop
ListLeft
ListTop
ListWidth
ListHeight
RecentBLeft
RecentBTop
cmdLeft
cmdTop
ClassBFirstLeft
ClassBFirstTop
ClassBWidth
ClassBHeight
CmdMinLeft
CmdMinTop
CmdMaxLeft
CmdMaxTop
CmdSkinLeft
CmdSkinTop
CmdCloseLeft
CmdCloseTop
ShowSearchBox
SearchBoxLeft
SearchBoxTop
SearchBoxWidth
SearchBoxHeight
SearchBoxBKColor
SearchBoxFontColor
SearchButtonLeft
SearchButtonTop
SearchButtonWidth
SearchButtonHeight
MarkColor
*!#?}>-^<+/
......
*#%?+!>
(&C)...
(&S)...
(&U)...
(&F)...
(&S)...
mnuShort
compmgmt.msc
#EmptyRecycle
?ncpa.cpl
Explorer /select,"
?sysdm.cpl
?inetcpl.cpl
::{645FF040-5081-101B-9F08-00AA002F954E}
*EXPLORER.EXE /N,::{450D8FBA-AD25-11D0-98A8-0800361B1103}
::{450D8FBA-AD25-11D0-98A8-0800361B1103}
yvalue
Software\Microsoft\Internet Explorer\TypedUrls
<Delay>
#System\intl
Forms
Length
password
PicString
(*.wav)
*.wav
Files\go.htm
focus
submit
image
Click
submit
8,9,10,11,12,14,16,18,20,22,24,26,28,36,48,72
ShortFont
BarFont
ClassFont
CommandFont
(QQ.exe)
/START QQUIN:
PWDHASH:
/STAT:4
SOFTWARE\TENCENT\QQ
Install
QQ.exe
program manager
vs_code
Parent
MouseIcon
Files\ConSoft.vs
http://down.3lsoft.com/help/ck2.html
,Sign,
SoftID,
,SoftVer,
,SysVer,
,QID,
,MacID,
,DiskID,
,CpuID,
,IsOld,
,IsWB,
,Time,
,Key,
,UID,
,ConSoftID,
,RecID,null,SysVer,
,Shortcut,
,ExperienceID,
Channel
Files\Config.bak
yymmdd
\\uninstall.exe
SOFTWARE\Hintsoft
SOFTWARE\Sicent
SOFTWARE\Goyoo
ysqd5
RNxkgqAf1vt31sMA2cdFLuTWgTeDe03H
IELockUrl
Vstart64.exe
FirstAskIEHomeLock
Asked
(-?(?:0|[1-9]\d*))(\.\d+)?([eE][-+]?\d+)?
Pattern
Global
MultiLine
IgnoreCase
([\s\S]*?)(["\\\x00-\x1f])
Scripting.Dictionary
Count
false
Dictionary
None dictionary object
Items
Execute
No JSON object could be ScanOnced
Expecting property name
Expecting : delimiter
Expecting , delimiter
Unterminated string starting
SubMatches
Invalid control character
Invalid escape
caption
caption
caption
_extenty5
_extenty5
caption
caption
caption
caption
caption
_extenty5
stylecolor
caption
caption
caption
caption
caption
_extenty5
_extenty5
caption
caption
caption
caption
caption
caption
_extentx5
_extentx5
stylecolor
stylecolor
stylecolor
stylecolor
stylecolor
caption
_extenty5
_extentx5
_extentx5
stylecolor
stylecolor
stylecolor
stylecolor
caption
caption
caption
caption
caption
caption
caption
caption
caption
drawline
stylecolor
drawline
drawline
drawline
drawline
drawline
drawline
stylecolor
stylecolor
enabled
stylecolor
stylecolor
stylecolor
_extentx5
_extentx5
_extentx5
_extenty5
caption
caption
caption
caption
_extentx5
_extenty5
_extenty5
stylecolor
stylecolor
stylecolor
enabled
stylecolor
stylecolor
_extentx5
_extentx5
_extenty5
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
080404B0
Comments
http://www.3lsoft.com
CompanyName
(3LSoft)
FileDescription
LegalCopyright
http://www.3lsoft.com
LegalTrademarks
http://www.3lsoft.com
ProductName
(VStart)
FileVersion
ProductVersion
InternalName
VStart
OriginalFilename
VStart.exe
Pause
Enter
防病毒引擎/厂商 病毒名/规则匹配 病毒库日期
Bkav W32.HfsAdware.7AD3 20170512
MicroWorld-eScan 未发现病毒 20170512
nProtect Trojan/W32.Inject.2755248 20170512
CMC 未发现病毒 20170511
CAT-QuickHeal Trojan.Inject 20170512
ALYac 未发现病毒 20170512
Malwarebytes 未发现病毒 20170512
VIPRE Trojan.Win32.Generic!BT 20170512
SUPERAntiSpyware 未发现病毒 20170512
CrowdStrike 未发现病毒 20170130
K7GW Riskware ( 0040eff71 ) 20170512
K7AntiVirus Riskware ( 0040eff71 ) 20170512
Baidu 未发现病毒 20170503
F-Prot 未发现病毒 20170512
Symantec Trojan.Gen.2 20170511
ESET-NOD32 未发现病毒 20170512
TrendMicro-HouseCall TROJ_GEN.R0EBC0OD217 20170512
Paloalto 未发现病毒 20170512
ClamAV 未发现病毒 20170512
Kaspersky 未发现病毒 20170512
BitDefender 未发现病毒 20170512
NANO-Antivirus Trojan.Win32.Inject.eluran 20170512
ViRobot 未发现病毒 20170512
Avast Win32:Adware-gen [Adw] 20170512
Tencent 未发现病毒 20170512
Endgame 未发现病毒 20170503
Emsisoft Application.AdSoft (A) 20170512
Comodo 未发现病毒 20170512
F-Secure 未发现病毒 20170512
DrWeb Adware.Softcnapp.1 20170512
Zillya Adware.AdwapperCRT.Win32.838 20170511
Invincea 未发现病毒 20170413
McAfee-GW-Edition Artemis!Trojan 20170511
TheHacker 未发现病毒 20170508
Ikarus 未发现病毒 20170512
Cyren W32/Application.IBQP-7008 20170512
Jiangmin 未发现病毒 20170512
Webroot W32.Adware.Gen 20170512
Avira TR/Injector.ejnsh 20170512
Antiy-AVL 未发现病毒 20170512
Kingsoft 未发现病毒 20170512
Microsoft BrowserModifier:Win32/Xiazai 20170512
Arcabit 未发现病毒 20170512
AegisLab 未发现病毒 20170512
ZoneAlarm 未发现病毒 20170512
GData Win32.Trojan.Agent.CSSGC8 20170512
AVG AdPlugin.WGB 20170512
Sophos Generic PUA OG (PUA) 20170512
AhnLab-V3 未发现病毒 20170512
McAfee Artemis!5A71C47F8A79 20170512
AVware Trojan.Win32.Generic!BT 20170512
Ad-Aware 未发现病毒 20170512
Zoner 未发现病毒 20170512
Rising 未发现病毒 20170512
Yandex Trojan.Inject!w1ZjIS7FO+w 20170510
SentinelOne 未发现病毒 20170330
Fortinet 未发现病毒 20170512
VBA32 Trojan.Inject 20170512
Panda PUP/AdvertisingApps 20170512
Qihoo-360 未发现病毒 20170512

进程树


Vstrat.exe, PID: 2272, 上一级进程 PID: 292

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

TCP

源地址 源端口 目标地址 目标端口
192.168.21.201 49159 23.41.75.27 80

UDP

源地址 源端口 目标地址 目标端口
192.168.21.201 62530 192.168.21.1 53

域名解析 (可点击查询WPING实时安全评级)

无域名信息.

TCP

源地址 源端口 目标地址 目标端口
192.168.21.201 49159 23.41.75.27 80

UDP

源地址 源端口 目标地址 目标端口
192.168.21.201 62530 192.168.21.1 53

HTTP 请求

URI HTTP数据
URL专业沙箱检测 -> http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c%3D
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.verisign.com

URL专业沙箱检测 -> http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo%2FX8AUm7%2BPSp50CEGlOLg7OygwUEOx1UyT01EY%3D
GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo%2FX8AUm7%2BPSp50CEGlOLg7OygwUEOx1UyT01EY%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.verisign.com

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

No TLS

Suricata HTTP

No Suricata HTTP

未发现网络提取文件
文件名 VIcon.VDB
相关文件
C:\Users\test\AppData\Local\Temp\VIcon.VDB
文件大小 2 字节
文件类型 data
MD5 c4103f122d27677c9db144cae1394a66
SHA1 1489f923c4dca729178b3e3233458550d8dddf29
SHA256 96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7
CRC32 41D912FF
Ssdeep 3::
下载提交魔盾安全分析
没有发现相似的分析.
HTML 总结报告
(需15-60分钟同步)
下载

Processing ( 16.966 seconds )

  • 8.907 NetworkAnalysis
  • 4.881 VirusTotal
  • 1.986 Static
  • 0.31 peid
  • 0.256 TargetInfo
  • 0.236 BehaviorAnalysis
  • 0.206 Strings
  • 0.163 Dropped
  • 0.011 AnalysisInfo
  • 0.004 Memory
  • 0.004 config_decoder
  • 0.002 Debug

Signatures ( 0.185 seconds )

  • 0.023 dyre_behavior
  • 0.022 antiav_detectreg
  • 0.017 encrypted_ioc
  • 0.01 infostealer_ftp
  • 0.01 md_bad_drop
  • 0.007 antiav_detectfile
  • 0.007 ransomware_files
  • 0.006 persistence_autorun
  • 0.006 stealth_timeout
  • 0.006 infostealer_im
  • 0.005 geodo_banking_trojan
  • 0.005 infostealer_bitcoin
  • 0.004 antianalysis_detectreg
  • 0.004 infostealer_mail
  • 0.004 network_http
  • 0.003 antiemu_wine_func
  • 0.003 infostealer_browser
  • 0.003 antivm_vbox_files
  • 0.003 disables_browser_warn
  • 0.002 tinba_behavior
  • 0.002 dridex_behavior
  • 0.002 reads_self
  • 0.002 betabot_behavior
  • 0.002 browser_security
  • 0.001 network_tor
  • 0.001 mimics_filetime
  • 0.001 antivm_vbox_libs
  • 0.001 kibex_behavior
  • 0.001 antivm_generic_scsi
  • 0.001 shifu_behavior
  • 0.001 exec_crash
  • 0.001 antidbg_windows
  • 0.001 vawtrak_behavior
  • 0.001 antidbg_devices
  • 0.001 banker_zeus_mutex
  • 0.001 bot_drive
  • 0.001 bot_drive2
  • 0.001 browser_addon
  • 0.001 modify_proxy
  • 0.001 disables_system_restore
  • 0.001 md_url_bl
  • 0.001 mimics_extension
  • 0.001 modify_security_center_warnings
  • 0.001 modify_uac_prompt
  • 0.001 network_cnc_http
  • 0.001 office_security
  • 0.001 rat_pcclient
  • 0.001 rat_spynet
  • 0.001 recon_fingerprint
  • 0.001 stealth_hiddenreg
  • 0.001 stealth_hide_notifications

Reporting ( 0.477 seconds )

  • 0.475 ReportHTMLSummary
  • 0.002 Malheur
Task ID 92569
Mongo ID 5915c245bb7d570bd1450b52
Cuckoo release 1.4-Maldun