Analysis

Category Started Completed Duration Log
FILE 2023-05-25 04:02:08 2023-05-25 04:05:13 185 seconds Show Log
  • Error: cuckoo1: the guest initialization hit the critical timeout, analysis aborted.

    

MalScore

0.0

Benign

Machine

Name Label Manager Started On Shutdown On
cuckoo1 cuckoo1 VirtualBox 2023-05-25 04:02:08 2023-05-25 04:05:13

File Details

File Name update.tmp
File Size 712192 bytes
File Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 620f32e56b46e90e8aee43febc59f6e3
SHA1 d5edd63dd1390a1420b85f746e12a66625ae9354
SHA256 bcc9d63213012bf25a37f48015e5f755d359f3b08d05d35319b03b4a72710730
SHA512 8a9d2a2eb3891265cec379978399ad6c9b4bf3e12e0f381946b4390621b943b97fa04fbb87ad628652bd765b706eb2ff56001f24de24e9bcc487a59ca2f07d9c
CRC32 E93245BC
Ssdeep 12288:zuA/ac4cUrPN37qzHxA6bA7xfmL+weNERfJbkrNZcRgJmuxTfDkNQXExyc:zN/ac4cUrPN37qzHxA6odmL+tNE70tmt
ClamAV None matched
Yara None matched

Signatures

No signatures


Screenshots

No screenshots available.

Hosts

No hosts contacted.

DNS

No domains contacted.


Summary

PE Information

Image Base 0x00400000
Entry Point 0x00496bf0
Reported Checksum 0x00000000
Actual Checksum 0x000b63a2
Minimum OS Version 1.0
Compile Time 1992-06-19 17:22:17
Icon
Icon Exact Hash 30adcb5c0b2e3c35eaec2c110733c9f8
Icon Similarity Hash 90e08353399b64f1d1c0f523db68e760

Version Infos

FileVersion 51.52.0.0
FileDescription Setup/Uninstall
Translation 0x0000 0x04b0

Sections

Name Virtual Address Virtual Size Size of Raw Data Characteristics Entropy
CODE 0x00001000 0x00095e2c 0x00096000 IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6.60
DATA 0x00097000 0x0000109c 0x00001200 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4.30
BSS 0x00099000 0x000014a0 0x00000000 IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0.00
.idata 0x0009b000 0x000025a4 0x00002600 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5.03
.tls 0x0009e000 0x00000008 0x00000000 IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0.00
.rdata 0x0009f000 0x00000018 0x00000200 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 0.20
.reloc 0x000a0000 0x000088e0 0x00000000 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 0.00
.rsrc 0x000a9000 0x00014000 0x00014000 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 4.92

Resources

Name Offset Size Language Sub-language Entropy File type
RT_CURSOR 0x000aa244 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.80 data
RT_CURSOR 0x000aa244 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.80 data
RT_CURSOR 0x000aa244 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.80 data
RT_CURSOR 0x000aa244 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.80 data
RT_CURSOR 0x000aa244 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.80 data
RT_CURSOR 0x000aa244 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.80 data
RT_BITMAP 0x000aa860 0x000000e8 LANG_NEUTRAL SUBLANG_NEUTRAL 3.35 GLS_BINARY_LSB_FIRST
RT_BITMAP 0x000aa860 0x000000e8 LANG_NEUTRAL SUBLANG_NEUTRAL 3.35 GLS_BINARY_LSB_FIRST
RT_ICON 0x000ab2c0 0x000008a8 LANG_ENGLISH SUBLANG_ENGLISH_US 3.91 data
RT_ICON 0x000ab2c0 0x000008a8 LANG_ENGLISH SUBLANG_ENGLISH_US 3.91 data
RT_ICON 0x000ab2c0 0x000008a8 LANG_ENGLISH SUBLANG_ENGLISH_US 3.91 data
RT_ICON 0x000ab2c0 0x000008a8 LANG_ENGLISH SUBLANG_ENGLISH_US 3.91 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_STRING 0x000aeaac 0x000000ae LANG_NEUTRAL SUBLANG_NEUTRAL 3.05 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_RCDATA 0x000ba798 0x00001faf LANG_NEUTRAL SUBLANG_NEUTRAL 5.49 data
RT_GROUP_CURSOR 0x000bc7ac 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 Lotus 1-2-3
RT_GROUP_CURSOR 0x000bc7ac 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 Lotus 1-2-3
RT_GROUP_CURSOR 0x000bc7ac 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 Lotus 1-2-3
RT_GROUP_CURSOR 0x000bc7ac 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 Lotus 1-2-3
RT_GROUP_CURSOR 0x000bc7ac 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 Lotus 1-2-3
RT_GROUP_CURSOR 0x000bc7ac 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 Lotus 1-2-3
RT_GROUP_ICON 0x000bc7c0 0x0000003e LANG_ENGLISH SUBLANG_ENGLISH_US 2.65 MS Windows icon resource - 4 icons, 16x16, 16-colors
RT_VERSION 0x000bc800 0x00000158 LANG_ENGLISH SUBLANG_ENGLISH_US 3.04 370 sysV pure executable not stripped
RT_MANIFEST 0x000bc958 0x00000560 LANG_ENGLISH SUBLANG_ENGLISH_US 5.05 XML document text

Imports

Library kernel32.dll:
0x49b178 VirtualFree
0x49b17c VirtualAlloc
0x49b180 LocalFree
0x49b184 LocalAlloc
0x49b188 WideCharToMultiByte
0x49b18c TlsSetValue
0x49b190 TlsGetValue
0x49b194 MultiByteToWideChar
0x49b198 GetModuleHandleA
0x49b19c GetLastError
0x49b1a0 GetCommandLineA
0x49b1a4 WriteFile
0x49b1a8 SetFilePointer
0x49b1ac SetEndOfFile
0x49b1b0 RtlUnwind
0x49b1b4 ReadFile
0x49b1b8 RaiseException
0x49b1bc GetStdHandle
0x49b1c0 GetFileSize
0x49b1c4 GetSystemTime
0x49b1c8 GetFileType
0x49b1cc ExitProcess
0x49b1d0 CreateFileA
0x49b1d4 CloseHandle
Library user32.dll:
0x49b1dc MessageBoxA
Library oleaut32.dll:
0x49b1e4 SafeArrayPutElement
0x49b1e8 SafeArrayCreate
0x49b1ec VariantChangeTypeEx
0x49b1f0 VariantCopyInd
0x49b1f4 VariantClear
0x49b1f8 SysStringLen
0x49b1fc SysAllocStringLen
Library advapi32.dll:
0x49b204 RegSetValueExA
0x49b208 RegQueryValueExA
0x49b20c RegQueryInfoKeyA
0x49b210 RegOpenKeyExA
0x49b214 RegEnumValueA
0x49b218 RegEnumKeyExA
0x49b21c RegDeleteValueA
0x49b220 RegDeleteKeyA
0x49b224 RegCreateKeyExA
0x49b228 RegCloseKey
0x49b22c OpenThreadToken
0x49b230 OpenProcessToken
0x49b238 GetUserNameA
0x49b23c GetTokenInformation
0x49b240 FreeSid
0x49b244 EqualSid
Library kernel32.dll:
0x49b250 lstrcmpA
0x49b254 WriteProfileStringA
0x49b25c WriteFile
0x49b260 WaitForSingleObject
0x49b264 VirtualFree
0x49b268 VirtualAlloc
0x49b26c UnmapViewOfFile
0x49b270 TransactNamedPipe
0x49b274 TerminateThread
0x49b278 TerminateProcess
0x49b27c Sleep
0x49b280 SizeofResource
0x49b288 SetLastError
0x49b28c SetFileTime
0x49b290 SetFilePointer
0x49b294 SetFileAttributesA
0x49b298 SetErrorMode
0x49b29c SetEndOfFile
0x49b2a4 RemoveDirectoryA
0x49b2a8 ReleaseMutex
0x49b2ac ReadFile
0x49b2b4 OpenProcess
0x49b2b8 OpenMutexA
0x49b2bc MultiByteToWideChar
0x49b2c0 MulDiv
0x49b2c4 MoveFileExA
0x49b2c8 MoveFileA
0x49b2cc MapViewOfFile
0x49b2d0 LockResource
0x49b2d4 LocalFree
0x49b2dc LoadResource
0x49b2e0 LoadLibraryExA
0x49b2e4 LoadLibraryA
0x49b2e8 IsDBCSLeadByte
0x49b2ec IsBadWritePtr
0x49b2f0 GlobalUnlock
0x49b2f4 GlobalReAlloc
0x49b2f8 GlobalHandle
0x49b2fc GlobalLock
0x49b300 GlobalFree
0x49b304 GlobalDeleteAtom
0x49b308 GlobalAlloc
0x49b30c GlobalAddAtomA
0x49b314 GetVersionExA
0x49b318 GetVersion
0x49b320 GetTickCount
0x49b328 GetSystemInfo
0x49b32c GetSystemDirectoryA
0x49b334 GetShortPathNameA
0x49b338 GetProfileStringA
0x49b33c GetProcAddress
0x49b344 GetOverlappedResult
0x49b348 GetModuleHandleA
0x49b34c GetModuleFileNameA
0x49b350 GetLogicalDrives
0x49b354 GetLocaleInfoA
0x49b358 GetLocalTime
0x49b35c GetLastError
0x49b360 GetFullPathNameA
0x49b364 GetFileSize
0x49b368 GetFileAttributesA
0x49b36c GetExitCodeProcess
0x49b374 GetDriveTypeA
0x49b378 GetDiskFreeSpaceA
0x49b37c GetCurrentThreadId
0x49b380 GetCurrentThread
0x49b384 GetCurrentProcessId
0x49b388 GetCurrentProcess
0x49b390 GetComputerNameA
0x49b394 GetCommandLineA
0x49b398 GetACP
0x49b39c FreeResource
0x49b3a0 InterlockedExchange
0x49b3a4 FreeLibrary
0x49b3a8 FormatMessageA
0x49b3ac FlushFileBuffers
0x49b3b0 FindResourceA
0x49b3b4 FindNextFileA
0x49b3b8 FindFirstFileA
0x49b3bc FindClose
0x49b3c8 DeviceIoControl
0x49b3cc DeleteFileA
0x49b3d0 CreateThread
0x49b3d4 CreateProcessA
0x49b3d8 CreateNamedPipeA
0x49b3dc CreateMutexA
0x49b3e0 CreateFileMappingA
0x49b3e4 CreateFileA
0x49b3e8 CreateEventA
0x49b3ec CreateDirectoryA
0x49b3f0 CopyFileA
0x49b3f4 CompareStringA
0x49b3f8 CompareFileTime
0x49b3fc CloseHandle
Library mpr.dll:
0x49b404 WNetOpenEnumA
0x49b40c WNetGetConnectionA
0x49b410 WNetEnumResourceA
0x49b414 WNetCloseEnum
Library version.dll:
0x49b41c VerQueryValueA
0x49b424 GetFileVersionInfoA
Library gdi32.dll:
0x49b42c UnrealizeObject
0x49b430 TextOutA
0x49b434 StretchDIBits
0x49b438 StretchBlt
0x49b43c SetWindowOrgEx
0x49b440 SetViewportOrgEx
0x49b444 SetTextColor
0x49b448 SetStretchBltMode
0x49b44c SetROP2
0x49b450 SetPixel
0x49b454 SetBkMode
0x49b458 SetBkColor
0x49b45c SelectPalette
0x49b460 SelectObject
0x49b464 SaveDC
0x49b468 RoundRect
0x49b46c RestoreDC
0x49b470 RemoveFontResourceA
0x49b474 Rectangle
0x49b478 RectVisible
0x49b47c RealizePalette
0x49b480 Polyline
0x49b484 Pie
0x49b488 PatBlt
0x49b48c MoveToEx
0x49b490 LineTo
0x49b494 LineDDA
0x49b498 IntersectClipRect
0x49b49c GetWindowOrgEx
0x49b4a0 GetTextMetricsA
0x49b4a4 GetTextExtentPointA
0x49b4b0 GetStockObject
0x49b4b4 GetPixel
0x49b4b8 GetPaletteEntries
0x49b4bc GetObjectA
0x49b4c0 GetDeviceCaps
0x49b4c4 GetDIBits
0x49b4cc GetClipBox
0x49b4d0 GetBitmapBits
0x49b4d4 ExtFloodFill
0x49b4d8 ExcludeClipRect
0x49b4dc EnumFontsA
0x49b4e0 Ellipse
0x49b4e4 DeleteObject
0x49b4e8 DeleteDC
0x49b4ec CreateSolidBrush
0x49b4f0 CreateRectRgn
0x49b4f4 CreatePenIndirect
0x49b4f8 CreatePalette
0x49b4fc CreateFontIndirectA
0x49b500 CreateDIBitmap
0x49b504 CreateCompatibleDC
0x49b50c CreateBrushIndirect
0x49b510 CreateBitmap
0x49b514 Chord
0x49b518 BitBlt
0x49b51c Arc
0x49b520 AddFontResourceA
Library user32.dll:
0x49b528 WindowFromPoint
0x49b52c WinHelpA
0x49b530 WaitMessage
0x49b534 WaitForInputIdle
0x49b538 UpdateWindow
0x49b53c UnregisterClassA
0x49b540 UnhookWindowsHookEx
0x49b544 TranslateMessage
0x49b54c TrackPopupMenu
0x49b554 ShowWindow
0x49b558 ShowOwnedPopups
0x49b55c ShowCursor
0x49b560 SetWindowRgn
0x49b564 SetWindowsHookExA
0x49b568 SetWindowTextA
0x49b56c SetWindowPos
0x49b570 SetWindowPlacement
0x49b574 SetWindowLongW
0x49b578 SetWindowLongA
0x49b57c SetTimer
0x49b580 SetScrollPos
0x49b584 SetScrollInfo
0x49b588 SetRectEmpty
0x49b58c SetRect
0x49b590 SetPropA
0x49b594 SetMenu
0x49b598 SetForegroundWindow
0x49b59c SetFocus
0x49b5a0 SetCursor
0x49b5a4 SetCapture
0x49b5a8 SetActiveWindow
0x49b5ac SendNotifyMessageA
0x49b5b0 SendMessageTimeoutA
0x49b5b4 SendMessageW
0x49b5b8 SendMessageA
0x49b5bc ScrollWindowEx
0x49b5c0 ScrollWindow
0x49b5c4 ScreenToClient
0x49b5c8 ReplyMessage
0x49b5cc RemovePropA
0x49b5d0 RemoveMenu
0x49b5d4 ReleaseDC
0x49b5d8 ReleaseCapture
0x49b5e0 RegisterClassA
0x49b5e4 PtInRect
0x49b5e8 PostQuitMessage
0x49b5ec PostMessageA
0x49b5f0 PeekMessageA
0x49b5f4 OffsetRect
0x49b5f8 OemToCharBuffA
0x49b5fc OemToCharA
0x49b604 MessageBoxA
0x49b608 MessageBeep
0x49b60c MapWindowPoints
0x49b610 MapVirtualKeyA
0x49b614 LoadStringA
0x49b618 LoadIconA
0x49b61c LoadCursorA
0x49b620 LoadBitmapA
0x49b624 KillTimer
0x49b628 IsZoomed
0x49b62c IsWindowVisible
0x49b630 IsWindowEnabled
0x49b634 IsWindow
0x49b638 IsRectEmpty
0x49b63c IsIconic
0x49b640 IsDialogMessageA
0x49b644 InvalidateRect
0x49b648 IntersectRect
0x49b64c InsertMenuItemA
0x49b650 InsertMenuA
0x49b654 InflateRect
0x49b65c GetWindowTextA
0x49b660 GetWindowRgn
0x49b664 GetWindowRect
0x49b668 GetWindowPlacement
0x49b66c GetWindowLongA
0x49b670 GetSystemMetrics
0x49b674 GetSystemMenu
0x49b678 GetSysColor
0x49b67c GetSubMenu
0x49b680 GetScrollPos
0x49b684 GetPropA
0x49b688 GetParent
0x49b68c GetWindow
0x49b690 GetMessagePos
0x49b694 GetMessageA
0x49b698 GetMenuStringA
0x49b69c GetMenuState
0x49b6a0 GetMenuItemCount
0x49b6a4 GetMenu
0x49b6a8 GetLastActivePopup
0x49b6ac GetKeyState
0x49b6b0 GetKeyNameTextA
0x49b6b4 GetIconInfo
0x49b6b8 GetForegroundWindow
0x49b6bc GetFocus
0x49b6c0 GetDesktopWindow
0x49b6c4 GetDCEx
0x49b6c8 GetDC
0x49b6cc GetCursorPos
0x49b6d0 GetCursor
0x49b6d4 GetClientRect
0x49b6d8 GetClassInfoW
0x49b6dc GetClassInfoA
0x49b6e0 GetCapture
0x49b6e4 GetActiveWindow
0x49b6e8 FrameRect
0x49b6ec FindWindowA
0x49b6f0 FillRect
0x49b6f4 ExitWindowsEx
0x49b6f8 EqualRect
0x49b6fc EnumWindows
0x49b700 EnumThreadWindows
0x49b704 EndPaint
0x49b708 EnableWindow
0x49b70c EnableMenuItem
0x49b710 DrawTextW
0x49b714 DrawTextA
0x49b718 DrawMenuBar
0x49b71c DrawIconEx
0x49b720 DrawIcon
0x49b724 DrawFrameControl
0x49b728 DrawFocusRect
0x49b72c DispatchMessageA
0x49b730 DestroyWindow
0x49b734 DestroyMenu
0x49b738 DestroyIcon
0x49b73c DestroyCursor
0x49b740 DeleteMenu
0x49b744 DefWindowProcA
0x49b748 DefMDIChildProcA
0x49b74c DefFrameProcA
0x49b750 CreateWindowExA
0x49b754 CreatePopupMenu
0x49b758 CreateMenu
0x49b75c CreateIcon
0x49b760 ClientToScreen
0x49b764 CheckMenuItem
0x49b768 CallWindowProcW
0x49b76c CallWindowProcA
0x49b770 CallNextHookEx
0x49b774 BringWindowToTop
0x49b778 BeginPaint
0x49b77c AppendMenuA
0x49b780 CharPrevA
0x49b784 CharNextA
0x49b788 CharLowerBuffA
0x49b78c CharLowerA
0x49b790 CharUpperBuffA
0x49b794 CharToOemBuffA
0x49b798 AdjustWindowRectEx
Library comctl32.dll:
0x49b7ac ImageList_DragMove
0x49b7b0 ImageList_DragLeave
0x49b7b4 ImageList_DragEnter
0x49b7b8 ImageList_EndDrag
0x49b7bc ImageList_BeginDrag
0x49b7c8 ImageList_Destroy
0x49b7cc ImageList_Create
0x49b7d0 InitCommonControls
Library ole32.dll:
0x49b7d8 CoTaskMemFree
0x49b7dc CLSIDFromProgID
0x49b7e0 CoCreateInstance
0x49b7e8 CoUninitialize
0x49b7ec CoInitialize
0x49b7f0 IsEqualGUID
Library oleaut32.dll:
0x49b7f8 GetActiveObject
0x49b7fc RegisterTypeLib
0x49b800 LoadTypeLib
0x49b804 SysFreeString
Library shell32.dll:
0x49b80c ShellExecuteExA
0x49b810 ShellExecuteA
0x49b814 SHGetFileInfoA
0x49b818 ExtractIconA
Library shell32.dll:
0x49b820 SHChangeNotify
0x49b824 SHBrowseForFolder
0x49b828 SHGetPathFromIDList
0x49b82c SHGetMalloc
Library comdlg32.dll:
0x49b834 GetSaveFileNameA
0x49b838 GetOpenFileNameA
Library ole32.dll:
0x49b840 CoDisconnectObject
Library advapi32.dll:

`DATA
.idata
.rdata
P.reloc
P.rsrc
System
Uh6&@
UWVSj
Uhx?@
F wJ@
F$wJ@
F zJ@
|HtE=
,UpT@
,E<V@
,UpT@
,E<V@
UhBW@
]$SQRPj
Exception
EInOutError
ERangeError
EZeroDivide
EInvalidPointer
UhPq@
Uh+q@
AM/PM
m/d/yy
mmmm d, yyyy
AMPM
:mm:ss
TNotifyEvent
TObject
EFOpenError
EFilerError
EWriteError
EComponentError
Classes
Classes
Classes
Classes
TFileStream
TCustomMemoryStream
TResourceStream
TComponentName
Strings
False
%s_%d
False
Caption
Checked
Default
ShortCut
Alignment
ShortCutText
UhW"A
UhE'A
ShH%A
EOutOfResources
TDragObject
Controls
TMouseEvent
TObject
TMouseButton
TShiftState
Integer
TMouseMoveEvent
TObject
TShiftState
Integer
TKeyEvent
TKeyPressEvent
TDragOverEvent
TObject
TObject
Integer
Integer
TDragDropEvent
TObject
TObject
Integer
TStartDragEvent
TEndDragEvent
TObject
TObject
Integer
HelpContext
TGraphicControl,3A
Controls
Controls
Controls
crDefault
crArrow
crCross
crIBeam
crSizeNESW
crSizeNS
crSizeNWSE
crSizeWE
crUpArrow
crHourGlass
crDrag
crNoDrop
crHSplit
crVSplit
crMultiDrag
crSQLWait
crAppStart
crHelp
crSize
Uhv:A
UhC@A
IsControl
C$PVj
UhqcA
UhwgA
Uh#hA
MS Sans Serif
Delphi%.8X
ControlOfs%.8X%.8X
EInvalidGraphic
Graphics
Graphics
Graphics
Graphics
clBlack
clMaroon
clGreen
clOlive
clNavy
clPurple
clTeal
clGray
clSilver
clRed
clLime
clYellow
clBlue
clFuchsia
clAqua
clWhite
clScrollBar
clBackground
clActiveCaption
clInactiveCaption
clMenu
clWindow
clWindowFrame
clMenuText
clWindowText
clCaptionText
clActiveBorder
clInactiveBorder
clAppWorkSpace
clHighlight
clHighlightText
clBtnFace
clBtnShadow
clGrayText
clBtnText
clInactiveCaptionText
clBtnHighlight
cl3DDkShadow
cl3DLight
clInfoText
clInfoBk
clNone
Graphics
Position
Tracking
TCloseEvent
TCloseQueryEvent
Forms1
BorderStyle
AutoScrollp+A
ClientWidth
Color
PrintScale
Scaled
VertScrollBar
OnHide(,A
OnKeyDownd,A
OnKeyPress(,A
OnKeyUp|+A
OnMouseMove|+A
Forms
Forms
<Ys$h
CTL3D32.DLL
Ctl3dRegister
Ctl3dUnregister
Ctl3dSubclassCtl
Ctl3dSubclassDlgEx
Ctl3dDlgFramePaint
Ctl3dCtlColorEx
Ctl3dAutoSubclass
Ctl3dUnAutoSubclass
Ctl3DColorChange
BtnWndProc3d
ulj@h
TPUtilWindow
PixelsPerInch
TextHeight
MDICLIENT
Uh.+B
UhZ(B
Uh5*B
Uh@-B
UhS/B
Uh'0B
TApplication
sxhT7B
MAINICON
Sh|;B
UhlEB
StdCtrls
Alignment
AutoSizep+A
DragCursor,+A
DragMode
ParentColor
ParentFont
PopupMenu
ShowAccelChar
ShowHint
Transparent
Visible
OnEndDrag|+A
OnMouseMove|+A
OnMouseUpD-A
TabStop
StdCtrls(
AutoSelect
BorderStyleDTB
Color
DragCursor,+A
DragMode
MaxLength
OEMConvert
ParentColor
ParentCtl3D
ParentFont
PopupMenu
ReadOnly
ShowHint\+A
TabOrder
TabStopp+A
OnExit(,A
OnKeyDownd,A
OnKeyPress(,A
OnKeyUp|+A
OnMouseMove|+A
OnMouseUpD-A
StdCtrls
StdCtrls*
Color
DragCursor,+A
DragMode
MaxLength
OEMConvert
ParentColor
ParentCtl3D
ParentFont
PopupMenu
ScrollBars
ShowHint\+A
TabOrder
TabStop
Visible
WantReturns
WantTabs
OnExit(,A
OnKeyDownd,A
OnKeyPress(,A
OnKeyUp|+A
OnMouseMove|+A
OnMouseUpD-A
TDrawItemEvent
TWinControl
Integer
TRect
TMeasureItemEvent
TWinControl
TCustomComboBoxHeB
TabStop
StdCtrls%
Color
Ctl3D,+A
DropDownCount
MaxLength
ParentColor
ParentCtl3D
ParentFont
PopupMenu
ShowHint
Sorted\+A
TabOrder
TabStopp+A
OnDragOverldB
OnExit(,A
OnKeyDownd,A
OnKeyPress(,A
OnMeasureItemD-A
OnStartDrag
StdCtrls
Cancelp+A
Caption
DragCursor,+A
DragMode
ModalResult
ParentFont
PopupMenu
ShowHint\+A
TabOrder
TabStop
OnExit(,A
OnKeyDownd,A
OnKeyPress(,A
OnKeyUp|+A
OnMouseMove|+A
OnMouseUpD-A
cbGrayed
TabStop
StdCtrls!
Alignment
AllowGrayedp+A
Caption
Color
DragCursor,+A
DragMode
ParentColor
ParentCtl3D
ParentFont
PopupMenu
ShowHint\rB
State\+A
TabOrder
TabStop
OnExit(,A
OnKeyDownd,A
OnKeyPress(,A
OnKeyUp|+A
OnMouseMove|+A
OnMouseUpD-A
TRadioButtonhyB
StdCtrls
Alignmentp+A
Caption
Color
DragCursor,+A
DragMode
ParentColor
ParentCtl3D
ParentFont
PopupMenu
ShowHint\+A
TabOrder
TabStop
OnExit(,A
OnKeyDownd,A
OnKeyPress(,A
OnKeyUp|+A
OnMouseMove|+A
OnMouseUpD-A
lbOwnerDrawVariable
StdCtrls*
Columns
DragCursor,+A
DragMode
Enabled
Items
MultiSelect
ParentColor
ParentCtl3D
ParentFont
PopupMenu
ShowHint
Style\+A
TabOrder
TabWidth
OnDragOverldB
OnExit(,A
OnKeyDownd,A
OnKeyPress(,A
OnMeasureItem|+A
OnMouseMove|+A
OnMouseUpD-A
StdCtrls
StdCtrls
StdCtrls
COMBOBOX
BUTTON
BUTTON
BUTTON
BUTTON
BUTTON
LISTBOX
x1234x
x5678x
GetSystemWow64DirectoryA
kernel32.dll
USERPROFILE
RegDeleteKeyExA
advapi32.dll
D$ Pj
CheckTokenMembership
advapi32.dll
GetUserDefaultUILanguage
kernel32.dll
.DEFAULT\Control Panel\International
Locale
Control Panel\Desktop\ResourceLocale
[ExceptObject=nil]
Microsoft Sans Serif
MS Sans Serif
ChangeWindowMessageFilter
user32.dll
ChangeWindowMessageFilterEx
user32.dll
ShutdownBlockReasonCreate
user32.dll
ShutdownBlockReasonDestroy
user32.dll
false
user32.dll
MonitorFromWindow
GetMonitorInfoA
TWindowDisabler-Window
TWindowDisabler-Window
Align
Shape
Style
ExtCtrls
ExtCtrls$
DragCursor,+A
DragMode
Enabledp+A
Color
Locked
ParentColor
ParentCtl3D
ParentFont
PopupMenu
ShowHint\+A
TabOrder
TabStop
OnExit|+A
OnMouseMove|+A
OnResizeD-A
commdlg_help
commdlg_FindReplace
WndProcPtr%.8X%.8X
UIStateForm
Unknown
Itanium
TSetupLanguageEntryA
TPSList
Invalid float
Unknown Identifier
[Set]
[Method]
[Variant]
[Unknown]
Interface
Invalid Type
Uh/$C
0hP(C
0hh(C
Variant(IDispatch)
Exception:
Proc:
[Invalid]
No Error
Cannot Import
Invalid Type
Internal error
Invalid Header
Invalid Opcode
Invalid Opcode Parameter
no Main Proc
Out of Global Vars range
Out of Proc Range
Out Of Range
Out Of Stack Range
Type Mismatch
Unexpected End Of File
Version error
divide by Zero
Math error
Could not call proc
Out of Record Fields Range
Null Pointer Exception
Null variant error
Out Of Memory
Exception:
Interface not supported
Unknown error
Uhk1C
UhI9C
Uhj:C
UhLNC
UhBQC
Type Mismatch
Type Mismatch
Type Mismatch
Type Mismatch
Type Mismatch
Type Mismatch
Type Mismatch
UhdXC
UhfYC
Uh'`C
Invalid array
Invalid array
OLE error %.8x
Uh$cC
Variant does not reference an OLE object
Type Mismatch
IDISPATCH
Type Mismatch
Type Mismatch
Out Of String Range
!NOTIFICATIONVARIANTSET
!NOTIFICATIONVARIANTGET
INTTOSTR
STRTOINT
STRTOINTDEF
DELETE
INSERT
STRGET
STRSET
UPPERCASE
LOWERCASE
LENGTH
SETLENGTH
ROUND
TRUNC
STRTOFLOAT
FLOATTOSTR
REPLICATE
STRINGOFCHAR
!ASSIGNED
UNASSIGNED
VARISEMPTY
VARISNULL
VARTYPE
IDISPATCHINVOKE
GETARRAYLENGTH
SETARRAYLENGTH
RAISELASTEXCEPTION
RAISEEXCEPTION
EXCEPTIONTYPE
EXCEPTIONPARAM
EXCEPTIONPROC
EXCEPTIONPOS
EXCEPTIONTOSTRING
ANSIUPPERCASE
ANSILOWERCASE
SIZEOF
BOOLEAN
TDATETIME
!OPENARRAY
Uhf.D
Could not call proc
Uhm1D
Could not call proc
Could not call proc
UhV6D
Cannot cast interface
UhN9D
Could not call proc
Uh3:D
UhU?D
Could not call proc
UhMAD
Could not call proc
UhZFD
Could not call proc
Uh|HD
UhgJD
Could not call proc
class
Uh:QD
Uh#RD
UhrSD
Uh@VD
UhC^D
Type mismatch
Capacity should be >= Length
Type mismatch
Type mismatch
Type mismatch
Type mismatch
Type mismatch
UhImD
UhxjD
Ph4wI
Uh'mD
NIL Interface Exception
Unknown Method
UhYuD
Uh(wD
Expected return address at stack base
UNLOADDLL
DLLGETLASTERROR
CREATE
ASSIGN
FINDCOMPONENT
CREATE
OWNER
DESTROYCOMPONENTS
COMPONENTS
COMPONENTCOUNT
COMPONENTINDEX
COMPONENTSTATE
DESIGNINFO
APPEND
ADDSTRINGS
CLEAR
DELETE
INDEXOF
INSERT
COUNT
COMMATEXT
LOADFROMFILE
SAVETOFILE
STRINGS
OBJECTS
DUPLICATES
SORTED
ONCHANGE
ONCHANGING
WRITE
READBUFFER
WRITEBUFFER
COPYFROM
POSITION
CREATE
HANDLE
CREATE
CREATE
HANDLE
PIXELSPERINCH
STYLE
CHORD
ELLIPSE
FILLRECT
FLOODFILL
LINETO
MOVETO
RECTANGLE
REFRESH
ROUNDRECT
TEXTHEIGHT
TEXTOUT
TEXTWIDTH
HANDLE
PIXELS
ONCHANGE
CREATE
CREATE
LoadFromFile
SaveToFile
Empty
Height
Width
OnChange
LoadFromStream
SaveToStream
Canvas
Handle
CREATE
BRINGTOFRONT
INVALIDATE
REFRESH
REPAINT
SENDTOBACK
UPDATE
SETBOUNDS
SHOWHINT
ALIGN
CLIENTHEIGHT
CLIENTWIDTH
VISIBLE
ENABLED
PARENT
HANDLE
SHOWING
TABORDER
TABSTOP
CANFOCUS
FOCUSED
CONTROLS
CONTROLCOUNT
SCROLLINVIEW
CREATENEW
CLOSE
SHOWMODAL
RELEASE
ACTIVE
CLEAR
CLEARSELECTION
SELECTALL
MODIFIED
SELLENGTH
SELSTART
SELTEXT
LINES
DROPPEDDOWN
ITEMS
ITEMINDEX
ITEMS
ITEMINDEX
SELCOUNT
SELECTED
OLE error %.8x
ShTwI
ShTwI
CREATEOLEOBJECT
GETACTIVEOLEOBJECT
Align
AutoSizep+A
DragCursor,+A
DragMode
ForceLTRReading
ParentColor
ParentFont
PopupMenu
ShowAccelChar
ShowHint\+A
TabOrder
TabStop
Visible
OnEndDrag|+A
OnMouseMove|+A
OnMouseUpD-A
STATIC
uxtheme.dll
OpenThemeData
CloseThemeData
DrawThemeBackground
DrawThemeText
GetThemeBackgroundContentRect
GetThemePartSize
GetThemeTextExtent
GetThemeTextMetrics
GetThemeBackgroundRegion
HitTestThemeBackground
DrawThemeEdge
DrawThemeIcon
IsThemePartDefined
IsThemeBackgroundPartiallyTransparent
GetThemeColor
GetThemeMetric
GetThemeString
GetThemeBool
GetThemeInt
GetThemeEnumValue
GetThemePosition
GetThemeFont
GetThemeRect
GetThemeMargins
GetThemeIntList
GetThemePropertyOrigin
SetWindowTheme
GetThemeFilename
GetThemeSysColor
GetThemeSysColorBrush
GetThemeSysBool
GetThemeSysSize
GetThemeSysFont
GetThemeSysString
GetThemeSysInt
IsThemeActive
IsAppThemed
GetWindowTheme
EnableThemeDialogTexture
IsThemeDialogTextureEnabled
GetThemeAppProperties
SetThemeAppProperties
GetCurrentThemeName
GetThemeDocumentationProperty
DrawThemeParentBackground
EnableTheming
NewCheckListBox&
Color
DragCursor,+A
DragMode
Enabled
OnExit(,A
OnKeyDownd,A
OnKeyPress(,A
OnKeyUp|+A
OnMouseMove|+A
OnMouseUpD-A
OnStartDrag
ParentColor
ParentCtl3D
ParentFont
PopupMenu
RequireRadioSelection
ShowHint
ShowLines\+A
TabOrder
Visible
oleacc.dll
LresultFromObject
CreateStdAccessibleObject
Radio item cannot have disabled child items
List item and state item count mismatch
PhlyI
PhlyI
CreateStdAccessibleObject failed
NotifyWinEvent
user32.dll
msctls_progress32
RICHED20.DLL
RICHED32.DLL
RichEdit20A
RICHEDIT
/Text
TTextFileReader
TTextFileWriter
File I/O error %d
TStoredDecompressor
Unexpected end of stream
Compressed block is corrupted
Compressed block is corrupted
Compressed block is corrupted
The setup files are corrupted. Please obtain a new copy of the program.
Messages file "%s" is missing. Please correct the problem or obtain a new copy of the program.
0x%.8x
UhX E
UhA!E
Uh4"E
Uh]%E
hl%E
Wow64DisableWow64FsRedirection
kernel32.dll
Wow64RevertWow64FsRedirection
shell32.dll
Uhf&E
Uh_'E
Uhv(E
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
Uht*E
Uhr+E
Uhu1E
WININIT.INI
[rename]
DeleteFile
MoveFile
MoveFileEx
UhM5E
Uho6E
UhS9E
Software\Microsoft\Windows\CurrentVersion\SharedDLLs
Software\Microsoft\Windows\CurrentVersion\SharedDLLs
RegCreateKeyEx
Software\Microsoft\Windows\CurrentVersion\SharedDLLs
Software\Microsoft\Windows\CurrentVersion\SharedDLLs
RegOpenKeyEx
Uh^>E
sfc.dll
SfcIsFileProtected
cmd.exe" /C "
COMMAND.COM" /C
SeShutdownPrivilege
Uh7JE
SYSTEM\CurrentControlSet\Control\Session Manager
PendingFileRenameOperations
PendingFileRenameOperations2
WININIT.INI
SYSTEM\CurrentControlSet\Control\Session Manager
PendingFileRenameOperations
PendingFileRenameOperations2
UhDNE
WININIT.INI
[rename]
Software\Microsoft\Windows\CurrentVersion\Fonts
Software\Microsoft\Windows NT\CurrentVersion\Fonts
GetDiskFreeSpaceExA
kernel32.dll
Environment
PhtwI
PhtwI
PhXzI
PhxzI
PhDwI
CoCreateInstance
IPropertyStore::SetValue
IPropertyStore::Commit
IShellLink::QueryInterface
IPersistFile::Save
UhaXE
LoadTypeLib
RegisterTypeLib
Uh=ZE
hLZE
Uh ZE
UnRegisterTypeLib
OLEAUT32.DLL
GetProcAddress
LoadTypeLib
ITypeLib::GetLibAttr
UnRegisterTypeLib
CoInitialize failed (0x%.8x)
SHCreateItemFromParsingName
shell32.dll
PhLaE
Cannot debug. Debugger version ($%.8x) does not match Setup version ($%.8x)
Failed to create DebugClientWnd
[Paused]
Uh'aE
UhLdE
Cannot evaluate variable because [Code] isn't running yet
Log opened. (Time zone: UTC%s%.2u:%.2u)
Uh,hE
%.4u-%.2u-%.2u
%s Log %s #%.3u.txt
UhgjE
Uh1jE
%.4u-%.2u-%.2u %.2u:%.2u:%.2u.%.3u
Uh3kE
Log closed.
Uh1lE
MsgWaitForMultipleObjects
GetExitCodeProcess
Vh4nE
regsvr32.exe"
/s "
Spawning 64-bit RegSvr32:
Spawning 32-bit RegSvr32:
CreateProcess
DllRegisterServer
DllUnregisterServer
Uh9rE
Spawning _RegDLL.tmp
CreateMutex
CreateFileMapping
MapViewOfFile
ReleaseMutex
_isetup\_RegDLL.tmp
_RegDLL.tmp %u %u
CreateProcess
REGDLL failed with exit code 0x%x
REGDLL mutex wait failed (%d, %d)
OleInitialize
LoadLibrary
GetProcAddress
REGDLL returned unknown result code %d
UhitE
Cannot register 64-bit DLLs on this version of Windows
HELPER_EXE_AMD64
HELPER_EXE_IA64
FillWideCharBuffer: Invalid Buf
FillWideCharBuffer: MultiByteToWideChar failed
Uh}yE
Starting 64-bit helper process.
Cannot utilize 64-bit features on this version of Windows
64-bit helper EXE wasn't extracted
\\.\pipe\InnoSetup64BitHelper-%.8x-%.8x-%.8x-%.8x%.8x
CreateNamedPipe
CreateFile
SetNamedPipeHandleState
helper %d 0x%x
CreateProcess
Helper process PID: %u
Stopping 64-bit helper process. (PID: %u)
Helper isn't responding; killing it.
Helper process exited.
Helper process exited with failure code: 0x%x
Helper process exited, but failed to get exit code.
Uhr~E
CreateEvent
TransactNamedPipe
TransactNamedPipe/GetOverlappedResult
Helper: Response message has wrong size
Helper: Wrong sequence number
Helper: Command did not execute
Ping failed; helper seems to have died.
HelperGrantPermission: Invalid entry count
LoadTypeLib
RegisterTypeLib
ITypeLib::GetLibAttr
UnRegisterTypeLib
HelperRegisterTypeLibrary: StatusCode invalid
SOFTWARE\Microsoft\.NETFramework
InstallRoot
.NET Framework not found
SOFTWARE\Microsoft\.NETFramework\Policy\v4.0
v4.0.30319
SOFTWARE\Microsoft\.NETFramework\Policy\v2.0
v2.0.50727
SOFTWARE\Microsoft\.NETFramework\Policy\v1.1
v1.1.4322
.NET Framework version %s not found
.NET Framework not found
Fusion.dll
Failed to load .NET Framework DLL "%s"
CreateAssemblyCache
Failed to get address of .NET Framework CreateAssemblyCache function
.NET Framework CreateAssemblyCache function failed
InstallAssembly
UninstallAssembly
MoveFileEx failed (%d).
Deleting directory: %s
Stripped read-only attribute.
Failed to strip read-only attribute.
Not stripping read-only attribute because the directory does not appear to be empty.
Failed to delete directory (%d). Will retry later.
Failed to delete directory (%d). Will delete on restart (if empty).
Failed to delete directory (%d).
DataSize range exceeded
Deleting file: %s
Failed to delete the file; it may be in use (%d).
ExtractRecData: Unicode data unsupported by this build
Deleting file: %s
Stripped read-only attribute.
Failed to strip read-only attribute.
The file appears to be in use (%d). Will delete on restart.
Failed to delete the file; it may be in use (%d).
Decrementing shared count (%d-bit): %s
Shared count reached zero.
Unregistering 64-bit DLL/OCX: %s
Unregistering 32-bit DLL/OCX: %s
Unregistration successful.
Not unregistering DLL/OCX again: %s
Unregistering 64-bit type library: %s
Unregistering 32-bit type library: %s
Unregistration successful.
Uninstalling from GAC: %s
Starting the uninstallation process.
Running Exec filename:
Running Exec parameters:
CreateProcess failed (%d).
Process exit code: %u
File doesn't exist. Skipping.
Running ShellExec filename:
Running ShellExec parameters:
ShellExecuteEx failed (%d).
File/directory doesn't exist. Skipping.
Skipping RunOnceId "%s" filename: %s
Unregistering font: %s
utUserDefined:
Uninstallation process succeeded.
NumRecs range exceeded
EndOffset range exceeded
AllocWideCharStr: MultiByteToWideChar failed
advapi32.dll
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
CLASSES_ROOT
CURRENT_USER
MACHINE
USERS
ISCryptGetVersion
ArcFourInit
ArcFourCrypt
inflateInit_
inflate
inflateEnd
inflateReset
zlib: Internal error. Code %d
1.2.1
zlib: Compressed data is corrupted
BZ2_bzDecompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
bzlib: Internal error. Code %d
bzlib: Too much memory requested
bzlib: Compressed data is corrupted
lzmadecomp: %s
lzmadecomp: Compressed data is corrupted (%d)
DecodeToBuf failed (%d)
Align
BackColor
DragCursor,+A
DragMode
Enabled
PopupMenu
ShowHint
ReplaceWithColor
OnEndDrag|+A
OnMouseMove|+A
OnMouseUpD-A
TNewEdit`
BidiCtrls
BidiCtrls
BidiCtrls
BidiCtrls
BidiCtrls
BidiCtrls
BidiCtrls
PasswordEdit(
AutoSelect
BorderStyleDTB
Color
DragCursor,+A
DragMode
MaxLength
OEMConvert
ParentColor
ParentCtl3D
ParentFont
ParentShowHint
PopupMenu
ReadOnly
ShowHint\+A
TabOrder
TabStopp+A
OnExit(,A
OnKeyDownd,A
OnKeyPress(,A
OnKeyUp|+A
OnMouseMove|+A
OnMouseUpD-A
TFolderRenameEvent
Boolean
FolderTreeView
TabOrder
TabStop
TabOrder
TabStop
c:\directory
user32.dll
MonitorFromWindow
GetMonitorInfoA
Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
FriendlyTree
SysTreeView32
Uhk"F
Internal error: Item already expanding
(%d)
Uhh/F
UhJ/F
Uh*0F
Uh;4F
SHPathPrepareForWriteA
shell32.dll
TNewNotebookh7F
DragCursor,+A
DragMode
ParentColor
ParentFont
PopupMenu
ShowHint\+A
TabOrder
TabStop
OnExit|+A
OnMouseMove|+A
OnMouseUpD-A
Color,+A
DragMode
PageIndex
ParentColor
ParentFont
PopupMenu
OnExit|+A
OnMouseMove|+A
OnMouseUpD-A
SelFolderForm
UhkHF
Wizard
PreparingPage
ComponentsListClickCheck
LicenseAcceptedRadioClick#
Wizard
[name]
[name/ver]
Uh`YF
CheckSerial
Uhz^F
UhPbF
UhNdF
Uh#dF
c:\directory
shell32.dll
STOPIMAGE
(Default)
Uh-}F
Could not find page with ID %d
Software\Microsoft\Windows\CurrentVersion\Uninstall
%s\%s_is1
Inno Setup: App Path
Inno Setup: Icon Group
Inno Setup: No Icons
Inno Setup: Setup Type
Inno Setup: Selected Components
Inno Setup: Deselected Components
Inno Setup: Selected Tasks
Inno Setup: Deselected Tasks
Inno Setup: User Info: Name
Inno Setup: User Info: Organization
Inno Setup: User Info: Serial
[Error]
PrepareToInstall
UpdateReadyMemo
CurPageChanged
ShouldSkipPage
CheckPassword
NextButtonClick
PrepareToInstall failed: %s
Need to restart Windows? %s
BackButtonClick
CancelButtonClick
/:*?"<>|
/:*?"<>|
\/:*?"<>|
\/:*?"<>|
Failed to proceed to next wizard page; aborting.
Failed to proceed to next wizard page; showing wizard.
SHPathPrepareForWriteA
shell32.dll
NewDisk
DISKIMAGE
Source file corrupted:
%s-%d.bin
%s-%d%s.bin
..\DISK%d\
Asking user for new disk containing "%s".
Invalid slice header (1)
Invalid slice header (2)
Invalid slice header (3)
Invalid slice header (4)
Failed to read salt
Cannot call file extractor recursively
Cannot read an encrypted file before the key has been set
Failed to read CompID
Invalid CompID
Already on last slice
Cannot call file extractor recursively
SHA-1 hash mismatch
LoggedMsgBox returned an unexpected value. Assuming Abort.
%.4u-%.2u-%.2u %.2u:%.2u:%.2u.%.3u
(invalid)
{app}
{group}
{language}
RegSetValueEx
RegCreateKeyEx
RegOpenKeyEx
%.4u%.2u%.2u
Software\Microsoft\Windows\CurrentVersion\Uninstall\
Inno Setup: Setup Version
5.3.10 (a)
Inno Setup: App Path
InstallLocation
Inno Setup: Icon Group
Inno Setup: No Icons
Inno Setup: User
Inno Setup: Setup Type
Inno Setup: Selected Components
Inno Setup: Deselected Components
Inno Setup: Selected Tasks
Inno Setup: Deselected Tasks
Inno Setup: User Info: Name
Inno Setup: User Info: Organization
Inno Setup: User Info: Serial
Inno Setup: Language
DisplayName
DisplayIcon
UninstallString
" /SILENT
QuietUninstallString
DisplayVersion
Publisher
URLInfoAbout
HelpTelephone
HelpLink
URLUpdateInfo
Readme
Contact
Comments
ModifyPath
NoModify
NoRepair
InstallDate
MajorVersion
MinorVersion
EstimatedSize
RegisterPreviousData
RegisterPreviousData raised an exception.
Creating directory: %s
Setting permissions on directory: %s
Failed to set permissions on directory (%d).
Setting NTFS compression on directory: %s
Unsetting NTFS compression on directory: %s
Failed to set NTFS compression state (%d).
Software\Microsoft\Windows\CurrentVersion\Fonts
Software\Microsoft\Windows NT\CurrentVersion\Fonts
Failed to set value in Fonts registry key.
Failed to open Fonts registry key.
AddFontResource
Setting permissions on file: %s
Failed to set permissions on file (%d).
Setting NTFS compression on file: %s
Unsetting NTFS compression on file: %s
Failed to set NTFS compression state (%d).
-- File entry --
Dest filename: %s
Non-default bitness: 64-bit
Non-default bitness: 32-bit
Dest file is protected by Windows File Protection.
Time stamp of our file: %s
Time stamp of our file: (failed to read)
Dest file exists.
Skipping due to "onlyifdoesntexist" flag.
Time stamp of existing file: %s
Time stamp of existing file: (failed to read)
Version of our file: %u.%u.%u.%u
Version of our file: (none)
Version of existing file: %u.%u.%u.%u
Existing file is a newer version. Skipping.
Existing file's SHA-1 hash matches our file. Skipping.
Existing file's SHA-1 hash is different from our file. Proceeding.
Failed to read existing file's SHA-1 hash. Proceeding.
Same version. Skipping.
Version of existing file: (none)
Couldn't read time stamp. Skipping.
Same time stamp. Skipping.
Existing file has a later time stamp. Skipping.
Existing file is protected by Windows File Protection. Skipping.
User opted not to overwrite the existing file. Skipping.
User opted not to strip the existing file's read-only attribute. Skipping.
Stripped read-only attribute.
Failed to strip read-only attribute.
Skipping due to "onlyifdestfileexists" flag.
Installing the file.
Uninstaller requires administrator: %s
The existing file appears to be in use (%d). Will replace on restart.
The existing file appears to be in use (%d). Retrying.
DeleteFile
Leaving temporary file in place for now.
MoveFile
Successfully installed the file.
Registering file as a font ("%s")
Will register the file (a type library) later.
Will register the file (a DLL/OCX) later.
Incrementing shared file count (64-bit).
Incrementing shared file count (32-bit).
Installing into GAC
Cannot install files to 64-bit locations on this version of Windows
IconFile=
IconIndex=
desktop.ini
CLSID2
.ShellClassInfo
{0AFACED1-E828-11D1-9187-B532F1E9575D}
target.lnk
{group}\
Filename: %s
target.lnk
Desktop.ini
Software\Microsoft\Windows\CurrentVersion\App Paths\
-- Icon entry --
Setting permissions on registry key: %s\%s
Could not set permissions on the registry key because it currently does not exist.
Failed to set permissions on registry key (%d).
Uh+(G
@? t/j
Cannot access 64-bit registry keys on this version of Windows
{olddata}
olddata
break
Failed to parse "qword" value
UhM*G
UhG+G
Registration executable created: %s
; This file was created by the installer for:
; Location:
; List of files to be registered on the next reboot. DO NOT EDIT!
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\Windows\CurrentVersion\RunOnce
InnoSetupRegFile.%.10d
" /REG
/REGSVRMODE
Registering 64-bit DLL/OCX: %s
Registering 32-bit DLL/OCX: %s
Registration successful.
Registering 64-bit type library: %s
Registering 32-bit type library: %s
Registration successful.
Delaying registration of all files until the next logon since a restart is needed.
Uhc6G
UhE7G
UhB:G
unins???.*
unins
UhJ;G
unins%.3d
CreateFile
Uh->G
Directory for uninstall files: %s
Will append to existing uninstall log: %s
Will overwrite existing uninstall log: %s
Creating new uninstall log: %s
LoggedMsgBox returned an unexpected value. Assuming Cancel.
DeleteFile
MoveFile
Uh^AG
NeedRestart
Will restart because NeedRestart returned True.
NeedRestart raised an exception.
Not calling NeedRestart because a restart has already been deemed necessary.
Uh>IG
Uh-GG
UhWHG
Starting the installation process.
Failed to get a non empty installation "AppId"
"AppId" cannot exceed 128 bytes (encoded)
User canceled the installation process.
Rolling back changes.
Installation process succeeded.
Uh`LG
UhOLG
ExtractTemporaryFile: The file "%s" was not found
TSelectLanguageFormLOG
SelLangForm
UhdSG
Inno Setup: Language
false
Unexpected end of expression while reading string constant
Unterminated string
Invalid symbol '%s' found
Uh([G
ExpandConstant
Can only call function "ExpandConstant" within parameter lists
Invalid token '%s' found
Maximum number of parameters exceeded
Uh!]G
Invalid token '%s' found
Invalid token
Invalid token '%s' found
Invalid token '%s' found
WriteStringToStream: Length limit exceeded
AllowSetForegroundWindow
user32.dll
QuerySpawnServer: Unexpected response: $%x
CallSpawnServer: Unexpected response: $%x
CallSpawnServer: Unexpected status: %d
UhxcG
Uh[cG
GetFinalPathNameByHandleA
kernel32.dll
UhRiG
GetCurrentDirectory
runas
ShellExecuteEx
ShellExecuteEx returned hProcess=0
MsgWaitForMultipleObjects
GetExitCodeProcess
Uh/lG
Wnd=$%x
Wh8oG
AllocateHWnd
Uh#oG
kernel32.dll
VerSetConditionMask
VerifyVersionInfoW
TMainForm4qG
%.48s~%.8x
Software\Microsoft\Windows\CurrentVersion\Uninstall
%s\%s_is1
PasswordCheckHash
UhGvG
Expression error '%s'
"BeforeInstall" or "AfterInstall" parameter with no CodeRunner
Expression error '%s'
UhszG
Expression error '%s'
PhtwG
PhtwG
"Check" parameter with no CodeRunner
Cannot install files to 64-bit locations on this version of Windows
Setup
Group
NoIcons
SetupType
Components
Tasks
Silent
VerySilent
NoRestart
Password
RestartExitCode
SaveInf
Setup
Group
NoIcons
SetupType
Components
Tasks
;-8|I
Cannot evaluate "%s" constant during Uninstall
Cannot access a 64-bit key in a "reg" constant on this version of Windows
Failed to parse "reg" constant
Failed to parse "ini" constant
Failed to parse "param" constant
"code" constant with no CodeRunner
Cannot evaluate "code" constant because of possible side effects
Failed to parse "code" constant
Failed to parse "drive" constant
Failed to parse "cm" constant
Unknown custom message name "%s" in "cm" constant
userdesktop
userstartmenu
userprograms
userstartup
sendto
fonts
userappdata
userdocs
usertemplates
userfavorites
localappdata
commondesktop
commonstartmenu
commonprograms
commonstartup
commonappdata
commondocs
commontemplates
commonfavorites
srcexe
userinfoname
userinfoorg
userinfoserial
wizardhwnd
An attempt was made to expand the "app" constant but Setup didn't create the "app" dir
An attempt was made to expand the "app" constant before it was initialized
syswow64
Cannot expand "syswow64" constant because there is no SysWOW64 directory
srcexe
Cannot expand "pf64" constant on this version of Windows
Cannot expand "cf64" constant on this version of Windows
{cf}\Microsoft Shared\DAO
computername
username
groupname
Cannot expand "groupname" constant because it was not available at install time
An attempt was made to expand the "groupname" constant before it was initialized
sysuserinfoname
sysuserinfoorg
userinfoname
userinfoorg
userinfoserial
uninstallexe
group
Cannot expand "group" constant because it was not available at install time
An attempt was made to expand the "group" constant before it was initialized
Failed to expand "group" constant
language
wizardhwnd
dotnet11
dotnet20
dotnet2032
dotnet2064
Cannot expand "dotnet2064" constant on this version of Windows
dotnet40
dotnet4032
dotnet4064
Cannot expand "dotnet4064" constant on this version of Windows
param:
code:
drive:
Failed to expand shell folder constant "%s"
Unknown constant "%s"
Unclosed constant
Software\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion
SOFTWARE\Microsoft\Windows NT\CurrentVersion
RegisteredOwner
RegisteredOrganization
SystemDrive
ProgramFilesDir
\Program Files
CommonFilesDir
Common Files
Failed to get path of 64-bit Program Files directory
Failed to get path of 64-bit Common Files directory
cmd.exe
COMMAND.COM
Created temporary directory:
_isetup
\_RegDLL.tmp
REGDLL_EXE
\_setup64.tmp
Failed to remove temporary directory:
_isetup\_shfoldr.dll
SHFOLDERDLL
Failed to get version numbers of _shfoldr.dll
shfolder.dll
shell32.dll
Failed to load DLL "%s"
SHGetFolderPathA
Failed to get address of SHGetFolderPath function
Warning: SHGetFolderPath failed with code 0x%.8x on folder 0x%.4x
Found pending rename or delete that matches one of our files: %s
setup:
uninstall:
files:
;-8|I
Windows version: %u.%u.%u%s (NT platform: %s)
64-bit Windows: %s
Processor architecture: %s
User privileges: Administrative
User privileges: Power User
User privileges: None
Cancel
Abort
Retry
Ignore
Try Again
Continue
OK/Cancel
Abort/Retry/Ignore
Yes/No/Cancel
Yes/No
Retry/Cancel
Cancel/Try Again/Continue
User chose %s.
AppMessageBox failed.
User chose %s.
MsgBox failed.
/SPAWNWND=$%x /NOTIFYWND=$%x
64-bit install mode: %s
ExtractLongWord: Missing comma
%d.%d
Service Pack
_isetup\_isdecmp.dll
Failed to load DLL "%s"
ZlibInitDecompressFunctions failed
BZInitDecompressFunctions failed
_isetup\_iscrypt.dll
Failed to load DLL "%s"
ISCryptInitFunctions failed
CheckPassword
/SL5=
/Log=
/Silent
/VerySilent
/NoRestart
/NoIcons
/NoCancel
/Lang=
/Type=
/Components=
/Tasks=
/MergeTasks=
/LoadInf=
/SaveInf=
/DIR=
/GROUP=
/Password=
/RestartExitCode=
/SuppressMsgBoxes
/DETACHEDMSG
/SPAWNWND=
/NOTIFYWND=
/DebugSpawnServer
/DEBUGWND=
The file %1 is missing from the installation directory. Please correct the problem or obtain a new copy of the program.
The setup files are corrupted. Please obtain a new copy of the program.
The setup files are corrupted, or are incompatible with this version of Setup. Please correct the problem or obtain a new copy of the program.
-0.bin
Setup
Setup version: Inno Setup version 5.3.10 (a)
Original Setup EXE:
Setup command line:
Windows NT
Windows
CheckPassword
CheckSerial
InitializeSetup
InitializeSetup raised an exception (fatal).
InitializeSetup returned False; aborting.
NameAndVersion
%1 %2
Deinitializing Setup.
GetCustomSetupExitCode
GetCustomSetupExitCode raised an exception.
DeinitializeSetup
DeinitializeSetup raised an exception.
Not restarting Windows because Setup is being run from the debugger.
Restarting Windows.
Arial
http://www.innosetup.com/
RemObjects Pascal Script home page:
http://www.remobjects.com/ps
Exception message:
CurStepChanged
CurStepChanged raised an exception.
CurStepChanged raised an exception (fatal).
InitializeWizard
InitializeWizard raised an exception (fatal).
Cannot run files in 64-bit locations on this version of Windows
-- Run entry --
Run as: Original user
Run as: Current user
Type: Exec
Type: ShellExec
Filename:
Parameters:
CreateProcess
Process exit code: %u
File doesn't exist. Skipping.
ShellExecuteEx
File/directory doesn't exist. Skipping.
Need to restart Windows? %s
Will not restart Windows automatically.
kernel32.dll
GetNativeSystemInfo
IsWow64Process
GetSystemWow64DirectoryA
RegDeleteKeyExA
advapi32.dll
System\CurrentControlSet\Control\Windows
CSDVersion
System\CurrentControlSet\Control\ProductOptions
ProductType
WinNT
LanmanNT
ServerNT
ScriptDlg
ScriptDlg
ScriptDlg
ScriptDlg
TOutputMsgWizardPage$ H
ScriptDlg
ScriptDlg
ScriptDlg
Uh2(H
Uhi+H
Uh9,H
UhK.H
tPht{I
TUninstallProgressForm(8H
UninstProgressForm
Uhn<H
Pht{I
Uh[=H
ParentBackground
AdjustHeight
Uht?H
Uh,@H
AddCheckBox
AddGroup
AddRadioButton
CheckItem
Checked
State
ItemCaption
ItemEnabled
ItemLevel
ItemObject
ItemSubItem
RTFText
ChangeDirectory
CreateNewDirectory
Directory
SetPaths
FindNextPage
PageCount
Pages
Notebook
Center
CenterInsideControl
ControlsFlipped
FlipControlsOnShow
RightToLeft
ShowAboutBox
CancelButton
NextButton
BackButton
OuterNotebook
InnerNotebook
WelcomePage
InnerPage
FinishedPage
LicensePage
PasswordPage
InfoBeforePage
UserInfoPage
SelectDirPage
SelectComponentsPage
SelectProgramGroupPage
SelectTasksPage
ReadyPage
PreparingPage
InstallingPage
InfoAfterPage
DiskSpaceLabel
DirEdit
GroupEdit
NoIconsCheck
PasswordLabel
PasswordEdit
PasswordEditLabel
ReadyMemo
TypesCombo
Bevel
WizardBitmapImage
WelcomeLabel1
InfoBeforeMemo
InfoBeforeClickLabel
MainPanel
Bevel1
PageNameLabel
PageDescriptionLabel
WizardSmallBitmapImage
ReadyLabel
FinishedLabel
YesRadio
NoRadio
WizardBitmapImage2
WelcomeLabel2
LicenseLabel1
LicenseMemo
InfoAfterMemo
InfoAfterClickLabel
ComponentsList
ComponentsDiskSpaceLabel
BeveledLabel
StatusLabel
FilenameLabel
ProgressGauge
SelectDirLabel
SelectStartMenuFolderLabel
SelectComponentsLabel
SelectTasksLabel
LicenseAcceptedRadio
LicenseNotAcceptedRadio
UserInfoNameLabel
UserInfoNameEdit
UserInfoOrgLabel
UserInfoOrgEdit
PreparingErrorBitmapImage
PreparingLabel
FinishedHeadingLabel
UserInfoSerialLabel
UserInfoSerialEdit
TasksList
RunList
DirBrowseButton
GroupBrowseButton
SelectDirBitmapImage
SelectGroupBitmapImage
SelectDirBrowseLabel
SelectStartMenuFolderBrowseLabel
PreparingYesRadio
PreparingNoRadio
CurPageID
AdjustLabelHeight
IncTopDecHeight
PrevAppDir
OuterNotebook
InnerPage
InnerNotebook
InstallingPage
MainPanel
PageNameLabel
PageDescriptionLabel
WizardSmallBitmapImage
Bevel1
StatusLabel
ProgressBar
BeveledLabel
Bevel
CancelButton
Uh"\H
Caption
Description
Surface
SurfaceHeight
SurfaceWidth
OnActivate
OnBackButtonClick
OnCancelButtonClick
OnNextButtonClick
OnShouldSkipPage
Uhp_H
Edits
PromptLabels
SubCaptionLabel
Values
AddEx
CheckListBox
SelectedValueIndex
SubCaptionLabel
Values
UhDbH
Buttons
Edits
PromptLabels
SubCaptionLabel
Values
Buttons
Edits
PromptLabels
SubCaptionLabel
Values
IsSaveButton
MsgLabel
RichEditViewer
SubCaptionLabel
Msg1Label
Msg2Label
ProgressBar
SetProgress
SetText
UhyiH
function PageFromID(const ID: Integer): TWizardPage;
function PageIndexFromID(const ID: Integer): Integer;
function CreateCustomPage(const AfterID: Integer; const ACaption, ADescription: String): TWizardPage;
function CreateInputQueryPage(const AfterID: Integer; const ACaption, ADescription, ASubCaption: String): TInputQueryWizardPage;
function CreateInputOptionPage(const AfterID: Integer; const ACaption, ADescription, ASubCaption: String; Exclusive, ListBox: Boolean): TInputOptionWizardPage;
function CreateInputDirPage(const AfterID: Integer; const ACaption, ADescription, ASubCaption: String; AAppendDir: Boolean; ANewFolderName: String): TInputDirWizardPage;
function CreateInputFilePage(const AfterID: Integer; const ACaption, ADescription, ASubCaption: String): TInputFileWizardPage;
function CreateOutputMsgPage(const AfterID: Integer; const ACaption, ADescription, AMsg: String): TOutputMsgWizardPage;
function CreateOutputMsgMemoPage(const AfterID: Integer; const ACaption, ADescription, ASubCaption: String; const AMsg: AnsiString): TOutputMsgMemoWizardPage;
function CreateOutputProgressPage(const ACaption, ADescription: String): TOutputProgressWizardPage;
function ScaleX(X: Integer): Integer;
function ScaleY(Y: Integer): Integer;
function CreateCustomForm: TSetupForm;
function BrowseForFolder(const Prompt: String; var Directory: String; const NewFolderButton: Boolean): Boolean;
function GetOpenFileName(const Prompt: String; var FileName: String; const InitialDirectory, Filter, DefaultExtension: String): Boolean;
function GetSaveFileName(const Prompt: String; var FileName: String; const InitialDirectory, Filter, DefaultExtension: String): Boolean;
function MsgBox(const Text: String; const Typ: TMsgBoxType; const Buttons: Integer): Integer;
function MinimizePathName(const Filename: String; const Font: TFont; MaxLen: Integer): String;
function FileExists(const Name: String): Boolean;
function DirExists(const Name: String): Boolean;
function FileOrDirExists(const Name: String): Boolean;
function GetIniString(const Section, Key, Default, Filename: String): String;
function GetIniInt(const Section, Key: String; const Default, Min, Max: Longint; const Filename: String): Longint;
function GetIniBool(const Section, Key: String; const Default: Boolean; const Filename: String): Boolean;
function IniKeyExists(const Section, Key, Filename: String): Boolean;
function IsIniSectionEmpty(const Section, Filename: String): Boolean;
function SetIniString(const Section, Key, Value, Filename: String): Boolean;
function SetIniInt(const Section, Key: String; const Value: Longint; const Filename: String): Boolean;
function SetIniBool(const Section, Key: String; const Value: Boolean; const Filename: String): Boolean;
procedure DeleteIniEntry(const Section, Key, Filename: String);
procedure DeleteIniSection(const Section, Filename: String);
function GetEnv(const EnvVar: String): String;
function GetCmdTail: String;
function ParamCount: Integer;
function ParamStr(Index: Integer): string;
function AddBackslash(const S: String): String;
function RemoveBackslash(const S: String): String;
function RemoveBackslashUnlessRoot(const S: String): String;
function AddQuotes(const S: String): String;
function RemoveQuotes(const S: String): String;
function GetShortName(const LongName: String): String;
function GetWinDir: String;
function GetSystemDir: String;
function GetSysWow64Dir: String;
function GetTempDir: String;
function StringChange(var S: String; const FromStr, ToStr: String): Integer;
function StringChangeEx(var S: String; const FromStr, ToStr: String; const SupportDBCS: Boolean): Integer;
function UsingWinNT: Boolean;
function FileCopy(const ExistingFile, NewFile: String; const FailIfExists: Boolean): Boolean;
function ConvertPercentStr(var S: String): Boolean;
function RegValueExists(const RootKey: Integer; const SubKeyName, ValueName: String): Boolean;
function RegQueryStringValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultStr: String): Boolean;
function RegQueryMultiStringValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultStr: String): Boolean;
function RegDeleteKeyIncludingSubkeys(const RootKey: Integer; const SubkeyName: String): Boolean;
function RegDeleteKeyIfEmpty(const RootKey: Integer; const SubkeyName: String): Boolean;
function RegKeyExists(const RootKey: Integer; const SubKeyName: String): Boolean;
function RegDeleteValue(const RootKey: Integer; const SubKeyName, ValueName: String): Boolean;
function RegGetSubkeyNames(const RootKey: Integer; const SubKeyName: String; var Names: TArrayOfString): Boolean;
function RegGetValueNames(const RootKey: Integer; const SubKeyName: String; var Names: TArrayOfString): Boolean;
function RegQueryDWordValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultDWord: Cardinal): Boolean;
function RegQueryBinaryValue(const RootKey: Integer; const SubKeyName, ValueName: String; var ResultStr: AnsiString): Boolean;
function RegWriteStringValue(const RootKey: Integer; const SubKeyName, ValueName, Data: String): Boolean;
function RegWriteExpandStringValue(const RootKey: Integer; const SubKeyName, ValueName, Data: String): Boolean;
function RegWriteMultiStringValue(const RootKey: Integer; const SubKeyName, ValueName, Data: String): Boolean;
function RegWriteDWordValue(const RootKey: Integer; const SubKeyName, ValueName: String; const Data: Cardinal): Boolean;
function RegWriteBinaryValue(const RootKey: Integer; const SubKeyName, ValueName: String; const Data: AnsiString): Boolean;
function IsAdminLoggedOn: Boolean;
function IsPowerUserLoggedOn: Boolean;
function FontExists(const FaceName: String): Boolean;
function GetUILanguage: Integer;
function AddPeriod(const S: String): String;
function CharLength(const S: String; const Index: Integer): Integer;
function SetNTFSCompression(const FileOrDir: String; Compress: Boolean): Boolean;
procedure ExtractTemporaryFile(const FileName: String);
function CheckForMutexes(Mutexes: String): Boolean;
function DecrementSharedCount(const Is64Bit: Boolean; const Filename: String): Boolean;
procedure DelayDeleteFile(const Filename: String; const Tries: Integer);
function DelTree(const Path: String; const IsDir, DeleteFiles, DeleteSubdirsAlso: Boolean): Boolean;
function GenerateUniqueName(Path: String; const Extension: String): String;
function GetComputerNameString: String;
function GetMD5OfFile(const Filename: String): String;
function GetMD5OfString(const S: AnsiString): String;
function GetMD5OfUnicodeString(const S: String): String;
function GetSHA1OfFile(const Filename: String): String;
function GetSHA1OfString(const S: AnsiString): String;
function GetSHA1OfUnicodeString(const S: String): String;
function GetSpaceOnDisk(const DriveRoot: String; const InMegabytes: Boolean; var Free, Total: Cardinal): Boolean;
function GetUserNameString: String;
procedure IncrementSharedCount(const Is64Bit: Boolean; const Filename: String; const AlreadyExisted: Boolean);
function Exec(const Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ResultCode: Integer): Boolean;
function ExecAsOriginalUser(const Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ResultCode: Integer): Boolean;
function ShellExec(const Verb, Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ErrorCode: Integer): Boolean;
function ShellExecAsOriginalUser(const Verb, Filename, Params, WorkingDir: String; const ShowCmd: Integer; const Wait: TExecWait; var ErrorCode: Integer): Boolean;
function IsProtectedSystemFile(const Filename: String): Boolean;
function MakePendingFileRenameOperationsChecksum: String;
function ModifyPifFile(const Filename: String; const CloseOnExit: Boolean): Boolean;
procedure RegisterServer(const Is64Bit: Boolean; const Filename: String; const FailCriticalErrors: Boolean);
function UnregisterServer(const Is64Bit: Boolean; const Filename: String; const FailCriticalErrors: Boolean): Boolean;
procedure UnregisterFont(const FontName, FontFilename: String);
procedure RestartReplace(const TempFile, DestFile: String);
function CreateShellLink(const Filename, Description, ShortcutTo, Parameters, WorkingDir, IconFilename: String; const IconIndex, ShowCmd: Integer): String;
procedure RegisterTypeLibrary(const Is64Bit: Boolean; const Filename: String);
function UnregisterTypeLibrary(const Is64Bit: Boolean; const Filename: String): Boolean;
function WizardForm: TWizardForm;
function MainForm: TMainForm;
function ActiveLanguage: String;
function IsComponentSelected(const Components: String): Boolean;
function IsTaskSelected(const Tasks: String): Boolean;
function ExpandConstant(const S: String): String;
function ExpandConstantEx(const S: String; const CustomConst, CustomValue: String): String;
function ExitSetupMsgBox: Boolean;
function GetShellFolder(Common: Boolean; const ID: TShellFolderID): String;
function GetShellFolderByCSIDL(const Folder: Integer; const Create: Boolean): String;
function InstallOnThisVersion(const MinVersion, OnlyBelowVersion: String): Integer;
function GetWindowsVersion: Cardinal;
procedure GetWindowsVersionEx(var Version: TWindowsVersion);
function GetWindowsVersionString: String;
function SuppressibleMsgBox(const Text: String; const Typ: TMsgBoxType; const Buttons, Default: Integer): Integer;
function IsWin64: Boolean;
function Is64BitInstallMode: Boolean;
function ProcessorArchitecture: TSetupProcessorArchitecture;
function CustomMessage(const MsgName: String): String;
function SetupMessage(const ID: TSetupMessageID): String;
function Random(const Range: Integer): Integer;
function FileSize(const Name: String; var Size: Integer): Boolean;
procedure Beep;
function Trim(const S: string): string;
function TrimLeft(const S: string): string;
function TrimRight(const S: string): string;
function GetCurrentDir: string;
function SetCurrentDir(const Dir: string): Boolean;
function ExpandFileName(const FileName: string): string;
function ExpandUNCFileName(const FileName: string): string;
function ExtractRelativePath(const BaseName, DestName: string): string;
function ExtractFileDir(const FileName: string): string;
function ExtractFileDrive(const FileName: string): string;
function ExtractFileExt(const FileName: string): string;
function ExtractFileName(const FileName: string): string;
function ExtractFilePath(const FileName: string): string;
function ChangeFileExt(const FileName, Extension: string): string;
function FileSearch(const Name, DirList: string): string;
function RenameFile(const OldName, NewName: string): Boolean;
function DeleteFile(const FileName: string): Boolean;
function CreateDir(const Dir: string): Boolean;
function RemoveDir(const Dir: string): Boolean;
function CompareStr(const S1, S2: string): Integer;
function CompareText(const S1, S2: string): Integer;
function GetDateTimeString(const DateTimeFormat: String; const DateSeparator, TimeSeparator: Char): String;
function SysErrorMessage(ErrorCode: Integer): String;
function ForceDirectories(Dir: string): Boolean;
function GetVersionNumbers(const Filename: String; var VersionMS, VersionLS: Cardinal): Boolean;
function GetVersionNumbersString(const Filename: String; var Version: String): Boolean;
procedure Sleep(const Milliseconds: LongInt);
function FindWindowByClassName(const ClassName: String): HWND;
function FindWindowByWindowName(const WindowName: String): HWND;
function SendMessage(const Wnd: HWND; const Msg, WParam, LParam: Longint): Longint;
function PostMessage(const Wnd: HWND; const Msg, WParam, LParam: Longint): Boolean;
function SendNotifyMessage(const Wnd: HWND; const Msg, WParam, LParam: Longint): Boolean;
function RegisterWindowMessage(const Name: String): Longint;
function SendBroadcastMessage(const Msg, WParam, LParam: Longint): Longint;
function PostBroadcastMessage(const Msg, WParam, LParam: Longint): Boolean;
function SendBroadcastNotifyMessage(const Msg, WParam, LParam: Longint): Boolean;
function LoadDLL(const DLLName: String; var ErrorCode: Integer): Longint;
function CallDLLProc(const DLLHandle: Longint; const ProcName: String; const Param1, Param2: Longint; var Result: Longint): Boolean;
function FreeDLL(const DLLHandle: Longint): Boolean;
procedure CreateMutex(const Name: String);
procedure OemToCharBuff(var S: AnsiString);
procedure CharToOemBuff(var S: AnsiString);
procedure CoFreeUnusedLibraries;
procedure Log(const S: String);
procedure BringToFrontAndRestore;
function WizardDirValue: String;
function WizardGroupValue: String;
function WizardNoIcons: Boolean;
function WizardSetupType(const Description: Boolean): String;
function WizardSelectedComponents(const Descriptions: Boolean): String;
function WizardSelectedTasks(const Descriptions: Boolean): String;
function WizardSilent: Boolean;
function IsUninstaller: Boolean;
function UninstallSilent: Boolean;
function CurrentFileName: String;
function CastStringToInteger(var S: String): Longint;
function CastIntegerToString(const L: Longint): String;
procedure Abort;
function GetExceptionMessage: String;
procedure RaiseException(const Msg: String);
procedure ShowExceptionMessage;
function Terminated: Boolean;
function GetPreviousData(const ValueName, DefaultValueData: String): String;
function SetPreviousData(const PreviousDataKey: Integer; const ValueName, ValueData: String): Boolean;
function LoadStringFromFile(const FileName: String; var S: AnsiString): Boolean;
function LoadStringsFromFile(const FileName: String; var S: TArrayOfString): Boolean;
function SaveStringToFile(const FileName: String; const S: AnsiString; const Append: Boolean): Boolean;
function SaveStringsToFile(const FileName: String; const S: TArrayOfString; const Append: Boolean): Boolean;
function SaveStringsToUTF8File(const FileName: String; const S: TArrayOfString; const Append: Boolean): Boolean;
function EnableFsRedirection(const Enable: Boolean): Boolean;
function UninstallProgressForm: TUninstallProgressForm;
Cannot call "%s" function during Setup
Cannot call "%s" function during Uninstall
Cannot call "%s" function during non Unicode Setup or Uninstall
An attempt was made to access MainForm before it has been created
An attempt was made to access WizardForm before it has been created
An attempt was made to access UninstallProgressForm before it has been created
PAGEFROMID
PAGEINDEXFROMID
CREATECUSTOMPAGE
CREATEINPUTQUERYPAGE
CREATEINPUTOPTIONPAGE
CREATEINPUTDIRPAGE
CREATEINPUTFILEPAGE
CREATEOUTPUTMSGPAGE
CREATEOUTPUTMSGMEMOPAGE
CREATEOUTPUTPROGRESSPAGE
SCALEX
SCALEY
CREATECUSTOMFORM
BROWSEFORFOLDER
GETOPENFILENAME
GETSAVEFILENAME
MSGBOX
MINIMIZEPATHNAME
Invalid RootKey value
Cannot access 64-bit registry keys on this version of Windows
FILEEXISTS
DIREXISTS
FILEORDIREXISTS
GETINISTRING
GETINIINT
GETINIBOOL
INIKEYEXISTS
ISINISECTIONEMPTY
SETINISTRING
SETINIINT
SETINIBOOL
DELETEINIENTRY
DELETEINISECTION
GETENV
GETCMDTAIL
PARAMCOUNT
PARAMSTR
ADDBACKSLASH
REMOVEBACKSLASH
REMOVEBACKSLASHUNLESSROOT
ADDQUOTES
REMOVEQUOTES
GETSHORTNAME
GETWINDIR
GETSYSTEMDIR
GETSYSWOW64DIR
GETTEMPDIR
STRINGCHANGE
STRINGCHANGEEX
USINGWINNT
FILECOPY
CONVERTPERCENTSTR
REGKEYEXISTS
REGVALUEEXISTS
REGDELETEKEYINCLUDINGSUBKEYS
REGDELETEKEYIFEMPTY
REGDELETEVALUE
REGGETSUBKEYNAMES
REGGETVALUENAMES
REGQUERYSTRINGVALUE
REGQUERYMULTISTRINGVALUE
REGQUERYDWORDVALUE
REGQUERYBINARYVALUE
REGWRITESTRINGVALUE
REGWRITEEXPANDSTRINGVALUE
REGWRITEMULTISTRINGVALUE
REGWRITEDWORDVALUE
REGWRITEBINARYVALUE
ISADMINLOGGEDON
ISPOWERUSERLOGGEDON
FONTEXISTS
GETUILANGUAGE
ADDPERIOD
CHARLENGTH
SETNTFSCOMPRESSION
EXTRACTTEMPORARYFILE
CHECKFORMUTEXES
DECREMENTSHAREDCOUNT
Cannot access 64-bit registry keys on this version of Windows
DELAYDELETEFILE
DELTREE
GENERATEUNIQUENAME
GETCOMPUTERNAMESTRING
GETMD5OFFILE
GETMD5OFSTRING
GETMD5OFUNICODESTRING
GETSHA1OFFILE
GETSHA1OFSTRING
GETSHA1OFUNICODESTRING
GETSPACEONDISK
GETUSERNAMESTRING
INCREMENTSHAREDCOUNT
EXECASORIGINALUSER
SHELLEXEC
SHELLEXECASORIGINALUSER
ISPROTECTEDSYSTEMFILE
MAKEPENDINGFILERENAMEOPERATIONSCHECKSUM
MODIFYPIFFILE
REGISTERSERVER
UNREGISTERSERVER
UNREGISTERFONT
RESTARTREPLACE
CREATESHELLLINK
REGISTERTYPELIBRARY
UNREGISTERTYPELIBRARY
Unknown custom message name "%s"
WIZARDFORM
MAINFORM
ACTIVELANGUAGE
{language}
ISCOMPONENTSELECTED
ISTASKSELECTED
EXPANDCONSTANT
EXPANDCONSTANTEX
EXITSETUPMSGBOX
GETSHELLFOLDER
GETSHELLFOLDERBYCSIDL
INSTALLONTHISVERSION
GETWINDOWSVERSION
GETWINDOWSVERSIONSTRING
%u.%.2u.%u
SUPPRESSIBLEMSGBOX
ISWIN64
IS64BITINSTALLMODE
PROCESSORARCHITECTURE
CUSTOMMESSAGE
SETUPMESSAGE
RANDOM
FILESIZE
TRIMLEFT
TRIMRIGHT
GETCURRENTDIR
SETCURRENTDIR
EXPANDFILENAME
EXPANDUNCFILENAME
EXTRACTRELATIVEPATH
EXTRACTFILEDIR
EXTRACTFILEDRIVE
EXTRACTFILEEXT
EXTRACTFILENAME
EXTRACTFILEPATH
CHANGEFILEEXT
FILESEARCH
RENAMEFILE
DELETEFILE
CREATEDIR
REMOVEDIR
COMPARESTR
COMPARETEXT
GETDATETIMESTRING
SYSERRORMESSAGE
FORCEDIRECTORIES
GETVERSIONNUMBERS
GETVERSIONNUMBERSSTRING
%u.%u.%u.%u
SLEEP
FINDWINDOWBYCLASSNAME
FINDWINDOWBYWINDOWNAME
SENDMESSAGE
POSTMESSAGE
SENDNOTIFYMESSAGE
REGISTERWINDOWMESSAGE
SENDBROADCASTMESSAGE
POSTBROADCASTMESSAGE
SENDBROADCASTNOTIFYMESSAGE
LOADDLL
CALLDLLPROC
FREEDLL
CREATEMUTEX
OEMTOCHARBUFF
CHARTOOEMBUFF
COFREEUNUSEDLIBRARIES
(There is no current exception)
Inno Setup CodeFile:
Inno Setup CodeFile:
SAVESTRINGSTOUTF8FILE
BRINGTOFRONTANDRESTORE
WIZARDDIRVALUE
WIZARDGROUPVALUE
WIZARDNOICONS
WIZARDSETUPTYPE
WIZARDSELECTEDCOMPONENTS
WIZARDSELECTEDTASKS
WIZARDSILENT
ISUNINSTALLER
UNINSTALLSILENT
CURRENTFILENAME
An attempt was made to call the "CurrentFileName" function from outside a "Check", "BeforeInstall" or "AfterInstall" event function belonging to a "[Files]" entry
CASTSTRINGTOINTEGER
CASTINTEGERTOSTRING
ABORT
GETEXCEPTIONMESSAGE
RAISEEXCEPTION
SHOWEXCEPTIONMESSAGE
TERMINATED
GETPREVIOUSDATA
SETPREVIOUSDATA
LOADSTRINGFROMFILE
LOADSTRINGSFROMFILE
SAVESTRINGTOFILE
SAVESTRINGSTOFILE
SAVESTRINGSTOUTF8FILE
ENABLEFSREDIRECTION
Cannot disable FS redirection on this version of Windows
UNINSTALLPROGRESSFORM
function
procedure
Uhs"I
FindFirst
FindNext
FindClose
FmtMessage
Format
GetWindowsVersionEx
Script error:
Exception "%s" at address %p
TScriptRunner.SetPSExecParameters: Invalid type
TScriptRunner.LoadScript failed
UhY/I
SetupForm
user32.dll
MonitorFromRect
GetMonitorInfoA
Uht5I
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
QueryCancelAutoPlay
TUninstSharedFileForm
UninstSharedFileForm
Uha>I
Exception message:
to All
Remove shared file %s? User chose %s%s
UhlAI
InitializeUninstallProgressForm
InitializeUninstallProgressForm raised an exception (fatal).
UhlCI
h8DI
ShDDI
Deleting Uninstall data files.
/Log=
/INITPROCWND=
/SECONDPHASE=
/FIRSTPHASEWND=
/SILENT
/VERYSILENT
/NoRestart
/SuppressMsgBoxes
/DEBUGWND=
CurUninstallStepChanged
CurUninstallStepChanged raised an exception.
CurUninstallStepChanged raised an exception (fatal).
Uh3JI
/INITPROCWND=$%x
STATIC
/SECONDPHASE="%s" /FIRSTPHASEWND=$%x
Custom message data corrupted
UhGXI
UhNWI
UhETI
Uh!VI
Uninstall
Setup version: Inno Setup version 5.3.10 (a)
Original Uninstall EXE:
Uninstall DAT:
Uninstall command line:
Cannot find utCompiledCode record for this version of the uninstaller
utCompiledCode[1] is invalid
Install was done in 64-bit mode but not running 64-bit Windows now
InitializeUninstall
InitializeUninstall raised an exception (fatal).
InitializeUninstall returned False; aborting.
Setup cannot continue at this time, shutdown negotiation is in progress. Click OK to retry.
Removed all? %s
UninstallNeedRestart
Will restart because UninstallNeedRestart returned True.
UninstallNeedRestart raised an exception.
Not calling UninstallNeedRestart because a restart has already been deemed necessary.
Need to restart Windows? %s
Will not restart Windows automatically.
DeinitializeUninstall
DeinitializeUninstall raised an exception.
Restarting Windows.
Not restarting Windows because Uninstall is being run from the debugger.
Uninstall
Detected restart. Removing temporary directory.
Uh*bI
isRS-???.tmp
isRS-
UhNcI
isRS-%.3u.tmp
Uh*gI
Uh^gI
/REGU
Setup
Inno-Setup-RegSvr-Mutex
Got EAbort exception.
Exception message:
DisableProcessWindowsGhosting
user32.dll
UhqkI
/SL5=
/UNINSTMODE
/REGSVRMODE
Ph<iI
UhAmI
UhjmI
Setup
FRuntime error at 00000000
Error
FTPF0
MS Sans Serif
0123456789abcdefInno Setup Setup Data (5.3.10)
Inno Setup Uninstall Log (b)
Inno Setup Uninstall Log (b) 64-bit
Inno Setup Messages (5.1.11)
kernel32.dll
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
WideCharToMultiByte
TlsSetValue
TlsGetValue
MultiByteToWideChar
GetModuleHandleA
GetLastError
GetCommandLineA
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
ExitProcess
CreateFileA
CloseHandle
user32.dll
MessageBoxA
oleaut32.dll
SafeArrayPutElement
SafeArrayCreate
VariantChangeTypeEx
VariantCopyInd
VariantClear
SysStringLen
SysAllocStringLen
advapi32.dll
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueA
GetUserNameA
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
kernel32.dll
lstrcmpA
WriteProfileStringA
WritePrivateProfileStringA
WriteFile
WaitForSingleObject
VirtualFree
VirtualAlloc
UnmapViewOfFile
TransactNamedPipe
TerminateThread
TerminateProcess
Sleep
SizeofResource
SetNamedPipeHandleState
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesA
SetErrorMode
SetEndOfFile
SetCurrentDirectoryA
RemoveDirectoryA
ReleaseMutex
ReadFile
QueryPerformanceCounter
OpenProcess
OpenMutexA
MultiByteToWideChar
MulDiv
MoveFileExA
MoveFileA
MapViewOfFile
LockResource
LocalFree
LocalFileTimeToFileTime
LoadResource
LoadLibraryExA
LoadLibraryA
IsDBCSLeadByte
IsBadWritePtr
GlobalUnlock
GlobalReAlloc
GlobalHandle
GlobalLock
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetUserDefaultLangID
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryA
GetSystemDefaultLCID
GetShortPathNameA
GetProfileStringA
GetProcAddress
GetPrivateProfileStringA
GetOverlappedResult
GetModuleHandleA
GetModuleFileNameA
GetLogicalDrives
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileSize
GetFileAttributesA
GetExitCodeProcess
GetEnvironmentVariableA
GetDriveTypeA
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetComputerNameA
GetCommandLineA
GetACP
FreeResource
InterlockedExchange
FreeLibrary
FormatMessageA
FlushFileBuffers
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
DeviceIoControl
DeleteFileA
CreateThread
CreateProcessA
CreateNamedPipeA
CreateMutexA
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileA
CompareStringA
CompareFileTime
CloseHandle
mpr.dll
WNetOpenEnumA
WNetGetUniversalNameA
WNetGetConnectionA
WNetEnumResourceA
WNetCloseEnum
version.dll
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
gdi32.dll
UnrealizeObject
TextOutA
StretchDIBits
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
RemoveFontResourceA
Rectangle
RectVisible
RealizePalette
Polyline
PatBlt
MoveToEx
LineTo
LineDDA
IntersectClipRect
GetWindowOrgEx
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectA
GetDeviceCaps
GetDIBits
GetCurrentPositionEx
GetClipBox
GetBitmapBits
ExtFloodFill
ExcludeClipRect
EnumFontsA
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateFontIndirectA
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
AddFontResourceA
user32.dll
WindowFromPoint
WinHelpA
WaitMessage
WaitForInputIdle
UpdateWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowOwnedPopups
ShowCursor
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropA
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetCapture
SetActiveWindow
SendNotifyMessageA
SendMessageTimeoutA
SendMessageW
SendMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
ReplyMessage
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClassA
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
OffsetRect
OemToCharBuffA
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetScrollPos
GetPropA
GetParent
GetWindow
GetMessagePos
GetMessageA
GetMenuStringA
GetMenuState
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassInfoW
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
ExitWindowsEx
EqualRect
EnumWindows
EnumThreadWindows
EndPaint
EnableWindow
EnableMenuItem
DrawTextW
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuA
CharPrevA
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemBuffA
AdjustWindowRectEx
comctl32.dll
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
InitCommonControls
ole32.dll
CoTaskMemFree
CLSIDFromProgID
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
CoInitialize
IsEqualGUID
oleaut32.dll
GetActiveObject
RegisterTypeLib
LoadTypeLib
SysFreeString
shell32.dll
ShellExecuteExA
ShellExecuteA
SHGetFileInfoA
ExtractIconA
shell32.dll
SHChangeNotify
SHBrowseForFolder
SHGetPathFromIDList
SHGetMalloc
comdlg32.dll
GetSaveFileNameA
GetOpenFileNameA
ole32.dll
CoDisconnectObject
advapi32.dll
AdjustTokenPrivileges
wxr""/p
r""/p
wr""/p
wwwwwwwxp
wwwwwwww
.text
`.rdata
@.data
.pdata
@.rsrc
COMCTL32.dll
StrToInt64ExW
StrToIntW
SHLWAPI.dll
GetLastError
LocalFree
CloseHandle
ReadFile
WriteFile
GetCommandLineW
SetConsoleCtrlHandler
SetProcessShutdownParameters
SetCurrentDirectoryW
GetSystemDirectoryW
SetErrorMode
ExitProcess
KERNEL32.dll
FreeSid
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
ADVAPI32.dll
CommandLineToArgvW
SHELL32.dll
OLEAUT32.dll
.text
`.rdata
@.pdata
@.srdata
@.sdata
.data
.rsrc
PAX0(
0< @Da
PAX0(
@Al0(
(AK?#
COMCTL32.dll
StrToInt64ExW
StrToIntW
SHLWAPI.dll
GetLastError
LocalFree
CloseHandle
WriteFile
ReadFile
GetCommandLineW
SetConsoleCtrlHandler
SetProcessShutdownParameters
SetCurrentDirectoryW
GetSystemDirectoryW
SetErrorMode
ExitProcess
KERNEL32.dll
FreeSid
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid
GetNamedSecurityInfoW
ADVAPI32.dll
CommandLineToArgvW
SHELL32.dll
OLEAUT32.dll
.text
`.rdata
@.rsrc
DllRegisterServer
DllUnregisterServer
COMCTL32.dll
GetCommandLineA
ReleaseMutex
FreeLibrary
GetProcAddress
LoadLibraryExA
SetCurrentDirectoryA
SetErrorMode
WaitForSingleObject
GetLastError
MapViewOfFile
ExitProcess
KERNEL32.dll
OleUninitialize
OleInitialize
ole32.dll
.text
`.data
.rsrc
@.reloc
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Common Administrative Tools
Common Programs
Common Documents
Common AppData
Administrative Tools
History
Cookies
Cache
Local AppData
AppData
My Music
My Pictures
Personal
DllGetVersion
shlwapi.dll
SHGetFolderPathW
shell32.dll
SOFTWARE\Microsoft\Windows\CurrentVersion
ProfileDirectory
Software\Microsoft\Windows\CurrentVersion\ProfileReconciliation
RegValue
RegKey
Default
MustBeRelative
DefaultDir
LocalFile
CentralFile
*windir
WideCharToMultiByte
GetProcAddress
FreeLibrary
LoadLibraryA
GetVersionExA
MultiByteToWideChar
lstrlenW
lstrlenA
ExpandEnvironmentStringsW
GetWindowsDirectoryA
GetWindowsDirectoryW
LockResource
LoadResource
FindResourceExW
EnumResourceLanguagesW
GetSystemDefaultLangID
EnumResourceNamesW
lstrcatA
lstrcpyA
CompareStringW
CreateDirectoryA
CreateDirectoryW
GetLastError
ExpandEnvironmentStringsA
lstrcpynW
GetFileAttributesA
GetFileAttributesW
GetSystemDirectoryA
GetSystemDirectoryW
IsBadWritePtr
DisableThreadLibraryCalls
GlobalAlloc
GlobalFree
KERNEL32.dll
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyA
RegCreateKeyExA
RegSetValueExW
RegSetValueExA
AddAccessAllowedAce
LookupAccountSidW
GetAce
InitializeAcl
SetFileSecurityW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ADVAPI32.dll
SHFOLDER.dll
SHGetFolderPathA
SHGetFolderPathW
70F0X0
819C9V9_9
dll\shfolder.dbg
biSystemMenu
BrowseButtonClick
biSystemMenu
NewFolderButtonClick
PathEditChange
biSystemMenu
biSystemMenu
bsTopLine
InnerPage
bsTopLine
InstallingPage
biSystemMenu
biSystemMenu
bsTopLine
CancelButtonClick
NextButtonClick
BackButtonClick
InnerPage
bsTopLine
LicensePage
LicenseNotAcceptedRadioClick
LicenseAcceptedRadioClick
PasswordPage
InfoBeforePage
UserInfoPage
UserInfoEditChange
UserInfoEditChange
UserInfoEditChange
SelectDirPage
DirBrowseButtonClick
DirEdit
SelectComponentsPage
TypesComboChange
SelectProgramGroupPage
NoIconsCheckClick
GroupBrowseButtonClick
GroupEdit
SelectTasksPage
ReadyPage
PreparingPage
InstallingPage
InfoAfterPage
clWindow
jjjjjjh
jjjjh
Button
Explorer
COMBOBOX
MAINICON
%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex2Cannot have more than one MDI form per application
Grid too large for operation Too many rows or columns deleted
Invalid value for current item
Cancel
ABCDEFGHIJKLMNOP
Failed to get data for '%s'9Synchronize called when main VCL thread in a WaitFor call0Unknown RichEdit conversion file extension (.%s)
/Menu '%s' is already being used by another form
Invalid numeric input
External exception %x
December
Saturday
All Users
n%USERPROFILE%
r%SYSTEMROOT%
CommonFilesDir
ProgramFilesDir
VS_VERSION_INFO
StringFileInfo
040904B0
CompanyName
Microsoft Corporation
FileDescription
Shell Folder Service
FileVersion
5.50.4807.2300
InternalName
shfolder
LegalCopyright
Copyright (C) Microsoft Corp. 1981-2001
OriginalFilename
shfolder.dll
ProductName
Microsoft(R) Windows (R) 2000 Operating System
ProductVersion
5.50.4807.2300
OleSelfRegister
VarFileInfo
Translation
My Music
sicas
My Music
Hudba
Musik
Eigene Musik
Oma musiikki
Ma musique
Musica
My Music
My Music
Mijn muziek
Min musikk
Moja muzyka
Min musik
My Music
Musika
Hudba
Moja glasba
VS_VERSION_INFO
StringFileInfo
000004b0
FileDescription
Setup/Uninstall
FileVersion
51.52.0.0
VarFileInfo
Translation
No antivirus signatures available.

Hosts

No hosts contacted.

TCP

No TCP connections recorded.

UDP

No UDP connections recorded.

DNS

No domains contacted.

HTTP Requests

No HTTP requests performed.

SMTP traffic

No SMTP traffic performed.

IRC traffic

No IRC requests performed.

ICMP traffic

No ICMP traffic performed.

CIF Results

No CIF Results

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Suricata HTTP

No Suricata HTTP

Sorry! No dropped Suricata Extracted files.
Sorry! No dropped files.
JSON Report Download

Comments



No comments posted

Processing ( 0.96 seconds )

  • 0.398 Static
  • 0.333 VirusTotal
  • 0.146 peid
  • 0.042 Strings
  • 0.017 TargetInfo
  • 0.012 NetworkAnalysis
  • 0.01 AnalysisInfo
  • 0.001 Debug
  • 0.001 config_decoder

Signatures ( 0.022 seconds )

  • 0.004 antiav_detectreg
  • 0.002 persistence_autorun
  • 0.002 antiav_detectfile
  • 0.002 infostealer_ftp
  • 0.001 tinba_behavior
  • 0.001 rat_nanocore
  • 0.001 cerber_behavior
  • 0.001 antianalysis_detectfile
  • 0.001 antianalysis_detectreg
  • 0.001 browser_security
  • 0.001 disables_browser_warn
  • 0.001 infostealer_bitcoin
  • 0.001 infostealer_im
  • 0.001 infostealer_mail
  • 0.001 ransomware_extensions
  • 0.001 ransomware_files

Reporting ( 0.014 seconds )

  • 0.014 JsonDump
Task ID 1755
Mongo ID 646f24cd2694ed0be09631fe
Cuckoo release 1.3-NG