3d051afe58729f238398f9e77ebf419e_JaffaCakes118

resource	yara_rule
static1/unpack001/$PLUGINSDIR/AccessControl.dll	acprotect
static1/unpack001/htmlayout.dll	acprotect

resource	yara_rule
static1/unpack001/wrapper.dll	aspack_v212_v242

resource	yara_rule
static1/unpack001/$PLUGINSDIR/AccessControl.dll	upx
static1/unpack001/htmlayout.dll	upx

resource
unpack001/$PLUGINSDIR/AccessControl.dll
unpack002/out.upx
unpack001/$PLUGINSDIR/Dialer.dll
unpack001/$PLUGINSDIR/NSISpcre.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/inetc.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsUnzip.dll
unpack001/$TEMP/HomePageChange.exe
unpack001/$TEMP/Newtonsoft.Json.dll
unpack001/AsianRiddles.wrp.exe
unpack001/EaxAc3.dll
unpack001/OpenAL32.dll
unpack001/htmlayout.dll
unpack001/ogg.dll
unpack001/vorbis.dll
unpack001/vorbisfile.dll
unpack001/wrapper.dll

.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:0a:27:a0:4d:ba:a9:df:0c:06:de:bb:a3:98:30:54
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/12/2011, 00:00

Not After

31/12/2014, 23:59

Subject

CN=Alawar Entertainment Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=-,O=Alawar Entertainment Inc,L=Alexandria,ST=Virginia,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

99:34:1b:99:5d:0b:92:4e:e2:80:2f:a1:fb:9a:a1:b4:dc:66:e3:5c
Signer

Actual PE Digest

99:34:1b:99:5d:0b:92:4e:e2:80:2f:a1:fb:9a:a1:b4:dc:66:e3:5c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime

CompareFileTime

SearchPathW

GetShortPathNameW

GetFullPathNameW

MoveFileW

SetCurrentDirectoryW

GetFileAttributesW

GetLastError

CreateDirectoryW

SetFileAttributesW

Sleep

GetTickCount

CreateFileW

GetFileSize

GetModuleFileNameW

GetCurrentProcess

CopyFileW

ExitProcess

GetWindowsDirectoryW

GetTempPathW

GetCommandLineW

SetErrorMode

CloseHandle

lstrlenW

lstrcpynW

GetDiskFreeSpaceW

GlobalUnlock

GlobalLock

CreateThread

LoadLibraryW

CreateProcessW

lstrcmpiA

GetTempFileNameW

lstrcatW

GetProcAddress

LoadLibraryA

GetModuleHandleA

OpenProcess

lstrcpyW

GetVersionExW

GetSystemDirectoryW

GetVersion

lstrcpyA

RemoveDirectoryW

lstrcmpiW

lstrcmpW

ExpandEnvironmentStringsW

GlobalAlloc

WaitForSingleObject

GetExitCodeProcess

GlobalFree

GetModuleHandleW

LoadLibraryExW

FreeLibrary

WritePrivateProfileStringW

GetPrivateProfileStringW

WideCharToMultiByte

MulDiv

lstrlenA

WriteFile

ReadFile

MultiByteToWideChar

SetFilePointer

FindClose

FindNextFileW

FindFirstFileW

DeleteFileW

lstrcpynA

user32

ScreenToClient

GetMessagePos

CallWindowProcW

IsWindowVisible

LoadBitmapW

CloseClipboard

SetClipboardData

EmptyClipboard

OpenClipboard

TrackPopupMenu

GetWindowRect

AppendMenuW

CreatePopupMenu

GetSystemMetrics

EndDialog

EnableMenuItem

GetSystemMenu

SetClassLongW

IsWindowEnabled

SetWindowPos

DialogBoxParamW

CheckDlgButton

CreateWindowExW

SystemParametersInfoW

RegisterClassW

SetDlgItemTextW

GetDlgItemTextW

MessageBoxIndirectW

CharNextA

CharUpperW

CharPrevW

DispatchMessageW

PeekMessageW

wsprintfA

DestroyWindow

CreateDialogParamW

SetTimer

SetWindowTextW

PostQuitMessage

SetForegroundWindow

ShowWindow

wsprintfW

SendMessageTimeoutW

LoadCursorW

SetCursor

GetWindowLongW

GetSysColor

CharNextW

GetClassInfoW

ExitWindowsEx

FindWindowExW

GetDlgItem

SetWindowLongW

LoadImageW

GetDC

EnableWindow

InvalidateRect

SendMessageW

DefWindowProcW

BeginPaint

GetClientRect

FillRect

DrawTextW

EndPaint

IsWindow

gdi32

SetBkColor

GetDeviceCaps

DeleteObject

CreateBrushIndirect

CreateFontIndirectW

SetBkMode

SetTextColor

SelectObject

shell32

SHBrowseForFolderW

SHGetPathFromIDListW

SHGetFileInfoW

ShellExecuteW

SHFileOperationW

SHGetSpecialFolderLocation

advapi32

RegEnumKeyW

RegOpenKeyExW

RegCloseKey

RegDeleteKeyW

RegDeleteValueW

RegCreateKeyExW

RegSetValueExW

RegQueryValueExW

RegEnumValueW

comctl32

ImageList_AddMasked

ImageList_Destroy

ord17

ImageList_Create

ole32

CoTaskMemFree

OleInitialize

OleUninitialize

CoCreateInstance

version

GetFileVersionInfoSizeW

GetFileVersionInfoW

VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$OUTDIR/Uninstall.exe.nsis

$PLUGINSDIR/AccessControl.dll

.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Exports

ClearOnFile

ClearOnRegKey

DenyOnFile

DenyOnRegKey

DisableFileInheritance

DisableRegKeyInheritance

EnableFileInheritance

EnableRegKeyInheritance

GetCurrentUserName

GetFileGroup

GetFileOwner

GetRegKeyGroup

GetRegKeyOwner

GrantOnFile

GrantOnRegKey

NameToSid

RevokeOnFile

RevokeOnRegKey

SetFileGroup

SetFileOwner

SetOnFile

SetOnRegKey

SetRegKeyGroup

SetRegKeyOwner

SidToName

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

out.upx

.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/Dialer.dll

.dll windows:5 windows x86 arch:x86

08b0635362e7aeb50569ca1a61d5a13f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress

LoadLibraryW

FreeLibrary

lstrcpynW

GlobalAlloc

Exports

AttemptConnect

AutodialHangup

AutodialOnline

AutodialUnattended

GetConnectedState

Sections

.text
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 551B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/NSISpcre.dll

.dll windows:5 windows x86 arch:x86

836f4951fb4175e54bfc7d7dac9c4c85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

D:\projects\NSISpcre\Release\NSISpcre.pdb

Imports

kernel32

GlobalAlloc

WideCharToMultiByte

lstrcpynW

MultiByteToWideChar

GlobalFree

lstrcpyW

EncodePointer

DecodePointer

GetCurrentThreadId

GetCommandLineA

GetLastError

HeapFree

HeapAlloc

RaiseException

TerminateProcess

GetCurrentProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

IsProcessorFeaturePresent

Sleep

HeapSize

GetProcAddress

GetModuleHandleW

ExitProcess

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

InterlockedIncrement

SetLastError

InterlockedDecrement

SetHandleCount

GetStdHandle

InitializeCriticalSectionAndSpinCount

GetFileType

GetStartupInfoW

DeleteCriticalSection

GetModuleFileNameA

FreeEnvironmentStringsW

GetEnvironmentStringsW

HeapCreate

HeapDestroy

QueryPerformanceCounter

GetTickCount

GetCurrentProcessId

GetSystemTimeAsFileTime

GetCPInfo

GetACP

GetOEMCP

IsValidCodePage

WriteFile

GetModuleFileNameW

RtlUnwind

HeapReAlloc

LeaveCriticalSection

EnterCriticalSection

LoadLibraryW

LCMapStringW

GetStringTypeW

user32

wsprintfW

Exports

RECheckPattern

REClearAllOptions

REClearOption

REFind

REFindClose

REFindNext

REGetOption

REMatches

REQuoteMeta

REReplace

RESetOption

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

GlobalFree

GlobalSize

GetLastError

lstrcpyW

lstrcpynW

GetProcAddress

WideCharToMultiByte

lstrcatW

lstrlenW

lstrcmpiW

LoadLibraryW

GetModuleHandleW

MultiByteToWideChar

VirtualAlloc

VirtualProtect

FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString

StringFromGUID2

Exports

Alloc

Call

Copy

Free

Get

Int64Op

Store

StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/asktoolbar.bmp

$PLUGINSDIR/inetc.dll

.dll windows:5 windows x86 arch:x86

0ca59bdeada30c9db45574a2801b70d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

wininet

InternetOpenW

InternetCrackUrlW

InternetConnectW

HttpEndRequestW

HttpAddRequestHeadersW

HttpOpenRequestW

InternetErrorDlg

InternetCloseHandle

HttpAddRequestHeadersA

InternetQueryOptionW

InternetSetOptionW

InternetSetFilePointer

InternetGetLastResponseInfoW

FtpOpenFileW

FtpCreateDirectoryW

HttpQueryInfoW

HttpSendRequestExW

HttpSendRequestW

InternetWriteFile

InternetReadFile

comctl32

ord17

kernel32

MultiByteToWideChar

LCMapStringW

RtlUnwind

GetModuleFileNameW

HeapReAlloc

HeapSize

IsValidCodePage

GetOEMCP

GetACP

GetCPInfo

EnterCriticalSection

LeaveCriticalSection

GetSystemTimeAsFileTime

GetCurrentProcessId

HeapAlloc

HeapFree

GlobalFree

lstrcpyW

lstrcpynW

GlobalAlloc

lstrlenW

WriteFile

ReadFile

lstrcmpW

GetLastError

DeleteFileW

CloseHandle

SleepEx

SetFilePointer

GetTickCount

lstrcatW

GetFileSize

CreateFileW

GetFileAttributesExW

lstrcmpiW

GetProcAddress

LoadLibraryW

MulDiv

GetModuleHandleW

TerminateThread

WaitForSingleObject

CreateThread

CreateFileA

WideCharToMultiByte

GetCurrentThreadId

DecodePointer

GetCommandLineA

TerminateProcess

GetCurrentProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

IsProcessorFeaturePresent

GetStringTypeW

EncodePointer

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

InterlockedIncrement

SetLastError

InterlockedDecrement

QueryPerformanceCounter

Sleep

ExitProcess

SetHandleCount

GetStdHandle

InitializeCriticalSectionAndSpinCount

GetFileType

GetStartupInfoW

DeleteCriticalSection

GetModuleFileNameA

FreeEnvironmentStringsW

GetEnvironmentStringsW

HeapCreate

HeapDestroy

user32

SetDlgItemTextW

SetWindowPos

SystemParametersInfoW

GetClientRect

GetWindowRect

SetTimer

LoadIconW

UpdateWindow

DestroyWindow

KillTimer

RedrawWindow

DispatchMessageW

TranslateMessage

GetMessageW

IsDialogMessageW

IsWindowVisible

EnableWindow

CreateDialogParamW

FindWindowExW

wsprintfA

wsprintfW

IsWindow

MessageBoxW

GetParent

SetWindowTextW

SetWindowLongW

GetWindowLongW

SendDlgItemMessageW

ShowWindow

GetDlgItem

PostMessageW

GetWindowTextW

SendMessageW

Exports

get

head

post

put

Sections

$PLUGINSDIR/nsDialogs.dll

.dll windows:5 windows x86 arch:x86

9ea5bdc8c90dfcffe309465c26c89758

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

MulDiv

lstrlenW

HeapFree

GetProcessHeap

lstrcmpiW

HeapReAlloc

lstrcpynW

GetFileAttributesW

lstrcpyW

GetCurrentDirectoryW

SetCurrentDirectoryW

HeapAlloc

GlobalFree

user32

LoadCursorW

RemovePropW

DrawFocusRect

GetPropW

DrawTextW

GetWindowTextW

GetDlgItem

SetWindowLongW

SetWindowPos

CreateDialogParamW

MapWindowPoints

GetWindowRect

SetCursor

CreateWindowExW

IsWindow

SetTimer

KillTimer

DispatchMessageW

TranslateMessage

GetMessageW

IsDialogMessageW

ShowWindow

wsprintfW

GetClientRect

CharPrevW

CallWindowProcW

SetPropW

DestroyWindow

MapDialogRect

CharNextW

SendMessageW

GetWindowLongW

gdi32

SetTextColor

shell32

SHGetPathFromIDListW

SHBrowseForFolderW

comdlg32

GetSaveFileNameW

CommDlgExtendedError

GetOpenFileNameW

ole32

CoTaskMemFree

Exports

Create

CreateControl

CreateItem

CreateTimer

GetUserData

KillTimer

OnBack

OnChange

OnClick

OnNotify

SelectFileDialog

SelectFolderDialog

SetRTL

SetUserData

Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/nsUnzip.dll

.dll windows:5 windows x86 arch:x86

66e414936a2f6934e6e40d52047d6b75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject

GetProcessHeap

GetDriveTypeA

InitializeCriticalSection

GetVolumeInformationA

LeaveCriticalSection

InterlockedExchange

GetLastError

EnterCriticalSection

CreateMutexA

ReleaseMutex

CloseHandle

GetFullPathNameA

DosDateTimeToFileTime

SetVolumeLabelA

SetFilePointer

GetLocaleInfoA

SetEndOfFile

SystemTimeToFileTime

SetFileTime

GetFileAttributesA

FileTimeToSystemTime

FindFirstFileA

SetFileAttributesA

HeapFree

GetLocalTime

FindNextFileA

GetFileTime

FileTimeToLocalFileTime

GetVersion

LocalFileTimeToFileTime

GlobalLock

GlobalUnlock

lstrcpyA

CreateDirectoryA

DeleteFileA

SetEnvironmentVariableA

CompareStringW

CompareStringA

HeapSize

WriteConsoleW

GetConsoleOutputCP

WriteConsoleA

GetLocaleInfoW

ReadFile

LoadLibraryA

GetCurrentProcess

HeapAlloc

lstrlenA

CreateFileA

GlobalFree

lstrcmpiA

lstrlenW

MultiByteToWideChar

lstrcpynW

WideCharToMultiByte

GlobalAlloc

lstrcpynA

FindClose

lstrcmpA

HeapReAlloc

InterlockedDecrement

GetCPInfo

RtlUnwind

GetSystemTimeAsFileTime

SetStdHandle

GetFileType

InterlockedIncrement

GetCurrentThreadId

GetCommandLineA

TerminateProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

HeapCreate

HeapDestroy

VirtualFree

DeleteCriticalSection

VirtualAlloc

GetModuleHandleW

Sleep

GetProcAddress

ExitProcess

WriteFile

GetStdHandle

GetModuleFileNameA

GetACP

GetOEMCP

IsValidCodePage

TlsGetValue

TlsAlloc

TlsSetValue

TlsFree

SetLastError

SetHandleCount

GetStartupInfoA

LCMapStringA

LCMapStringW

GetStringTypeA

GetStringTypeW

GetTimeZoneInformation

GetConsoleCP

GetConsoleMode

FlushFileBuffers

InitializeCriticalSectionAndSpinCount

GetFileInformationByHandle

PeekNamedPipe

GetCurrentDirectoryA

GetUserDefaultLCID

EnumSystemLocalesA

IsValidLocale

FreeEnvironmentStringsA

GetEnvironmentStrings

FreeEnvironmentStringsW

GetEnvironmentStringsW

QueryPerformanceCounter

GetTickCount

GetCurrentProcessId

SetEnvironmentVariableW

user32

CharUpperA

wsprintfA

GetWindowTextLengthA

SendMessageA

GetWindowTextA

GetDlgItem

EndDialog

SetWindowTextA

EnableWindow

DialogBoxParamA

SetDlgItemTextA

OemToCharA

CharToOemA

advapi32

GetSecurityDescriptorGroup

AdjustTokenPrivileges

IsValidSecurityDescriptor

GetSecurityDescriptorSacl

IsValidSid

GetSecurityDescriptorOwner

SetKernelObjectSecurity

LookupPrivilegeValueA

GetSecurityDescriptorControl

GetKernelObjectSecurity

OpenProcessToken

IsValidAcl

GetSecurityDescriptorDacl

Exports

Extract

ExtractA

GetPassword

Sections

22eeff170605c041d0215a0a483e6e59

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

28:6f:8a:30:e2:ea:c6:96:5b:93:6f:82:6a:05:30:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/06/2008, 00:00

Not After

17/06/2011, 23:59

Subject

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:bb:3a:d7:eb:76:f4:9d:8c:36:55:a1:cd:ac:e4:e5:b7:46:7a:63
Signer

Actual PE Digest

07:bb:3a:d7:eb:76:f4:9d:8c:36:55:a1:cd:ac:e4:e5:b7:46:7a:63

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\hudson\jobs\AskStub\workspace\AskStub\Release\APNIC.pdb

Imports

kernel32

lstrcmpW

lstrcatW

GetLastError

CloseHandle

GetCurrentProcess

GetProcAddress

LoadLibraryW

GetVersionExW

WriteFile

lstrlenA

WideCharToMultiByte

GetLocalTime

CreateDirectoryW

GetTempPathW

CreateFileW

GetFileTime

FormatMessageW

GetPrivateProfileStringW

InterlockedDecrement

GetModuleHandleW

FreeLibrary

DeleteFileW

MultiByteToWideChar

GetSystemDefaultLangID

GetStringTypeW

lstrlenW

LocalFree

lstrcmpiW

lstrcpyW

GetConsoleOutputCP

WriteConsoleW

FlushFileBuffers

CreateFileA

IsValidCodePage

LCMapStringA

LCMapStringW

ReadFile

GetStringTypeA

HeapSize

GetConsoleMode

WriteConsoleA

SetStdHandle

LoadLibraryA

InitializeCriticalSectionAndSpinCount

GetLocaleInfoA

GetOEMCP

GetACP

GetCPInfo

SetLastError

GetConsoleCP

SetFilePointer

GetCurrentProcessId

GetTickCount

QueryPerformanceCounter

GetEnvironmentStringsW

FreeEnvironmentStringsW

GetEnvironmentStrings

FreeEnvironmentStringsA

GetModuleFileNameA

GetStartupInfoA

GetFileType

GetStdHandle

SetHandleCount

ExitProcess

Sleep

HeapReAlloc

VirtualAlloc

DeleteCriticalSection

VirtualFree

HeapDestroy

HeapCreate

LeaveCriticalSection

EnterCriticalSection

RtlUnwind

TerminateProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

RaiseException

GetSystemTimeAsFileTime

HeapFree

GetCurrentThreadId

GetCommandLineA

HeapAlloc

TlsGetValue

TlsAlloc

TlsSetValue

TlsFree

InterlockedIncrement

GetModuleHandleA

advapi32

RegDeleteKeyW

RegCreateKeyExW

RegSetValueExW

RegQueryValueExW

RegQueryInfoKeyW

RegEnumValueW

RegDeleteValueW

RegOpenKeyExW

RegEnumKeyExW

RegCloseKey

shell32

SHGetFolderPathW

ole32

CoCreateInstance

CoUninitialize

CoInitialize

oleaut32

SysAllocString

SysFreeString

shlwapi

SHDeleteKeyW

PathFileExistsW

StrStrIW

wininet

HttpEndRequestW

InternetReadFile

HttpSendRequestW

HttpOpenRequestW

InternetSetOptionW

InternetCloseHandle

InternetConnectW

InternetCrackUrlW

InternetOpenW

HttpSendRequestExW

HttpQueryInfoW

version

GetFileVersionInfoW

GetFileVersionInfoSizeW

VerQueryValueW

rpcrt4

UuidCreate

UuidToStringW

RpcStringFreeW

Exports

DoCheckInstall

DoCheckOverInstall

DoPostInstall

DoPreCheck

DoPreInstall

GetPayloadPath

VolatileStoreClearMacroData

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$TEMP/AwrAskToolbar/ApnStub.exe

.exe windows:5 windows x86 arch:x86

86fb79068ef3ff29722239f60c6b67f4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

28:6f:8a:30:e2:ea:c6:96:5b:93:6f:82:6a:05:30:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/06/2008, 00:00

Not After

17/06/2011, 23:59

Subject

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f0:94:ef:8e:10:5c:c7:23:d5:68:01:fb:14:da:13:e3:cb:ed:ab:64
Signer

Actual PE Digest

f0:94:ef:8e:10:5c:c7:23:d5:68:01:fb:14:da:13:e3:cb:ed:ab:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\jobs\AskStub\workspace\AskStub\Release\APNStub.pdb

Imports

msi

ord224

crypt32

CertFreeCertificateContext

CertGetNameStringW

urlmon

IsValidURL

URLDownloadToFileW

kernel32

SetEnvironmentVariableA

GetStartupInfoW

CompareStringW

CompareStringA

CreateFileA

lstrlenW

GetTempPathW

lstrcatW

DeleteFileW

lstrcpyW

GetTickCount

Sleep

GetModuleFileNameW

GetTempFileNameW

FindFirstFileW

GetNativeSystemInfo

SetFilePointer

GetCurrentProcess

CompareFileTime

CreateDirectoryW

WriteFile

WideCharToMultiByte

GetVersionExW

ReadFile

CreateFileW

MultiByteToWideChar

FlushFileBuffers

GetLastError

FindClose

IsWow64Process

GetSystemInfo

FindNextFileW

CloseHandle

GetSystemTime

FreeLibrary

WaitForSingleObject

LoadLibraryW

FormatMessageW

GetExitCodeProcess

SetLastError

GetProcAddress

LocalFree

WriteConsoleW

GetConsoleOutputCP

WriteConsoleA

SetStdHandle

GetLocaleInfoA

GetStringTypeW

GetStringTypeA

LCMapStringA

LoadLibraryA

InitializeCriticalSectionAndSpinCount

RtlUnwind

GetConsoleMode

GetConsoleCP

HeapSize

LCMapStringW

IsValidCodePage

FileTimeToSystemTime

FileTimeToLocalFileTime

GetDriveTypeW

GetFullPathNameW

GetModuleHandleA

TerminateProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

HeapFree

GetCurrentDirectoryA

HeapAlloc

RaiseException

GetDriveTypeA

DeleteCriticalSection

LeaveCriticalSection

EnterCriticalSection

GetModuleHandleW

ExitProcess

GetStdHandle

GetModuleFileNameA

FreeEnvironmentStringsW

GetEnvironmentStringsW

GetCommandLineW

SetHandleCount

GetFileType

GetStartupInfoA

TlsGetValue

TlsAlloc

TlsSetValue

TlsFree

InterlockedIncrement

GetCurrentThreadId

InterlockedDecrement

HeapCreate

VirtualFree

QueryPerformanceCounter

GetCurrentProcessId

GetSystemTimeAsFileTime

GetTimeZoneInformation

VirtualAlloc

HeapReAlloc

GetCPInfo

GetACP

GetOEMCP

user32

wsprintfW

MessageBoxW

GetForegroundWindow

shell32

ShellExecuteExW

ole32

IIDFromString

CoInitializeEx

CoCreateInstance

rpcrt4

UuidToStringW

RpcStringFreeW

UuidCreate

wininet

InternetOpenW

InternetCrackUrlW

InternetConnectW

InternetCloseHandle

HttpSendRequestA

HttpQueryInfoW

HttpOpenRequestW

HttpAddRequestHeadersA

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$TEMP/AwrAskToolbar/ApnToolbarInstaller.exe

.exe windows:5 windows x86 arch:x86

3cbdd98c6525d44f6005a58fa0889697

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

28:6f:8a:30:e2:ea:c6:96:5b:93:6f:82:6a:05:30:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/06/2008, 00:00

Not After

17/06/2011, 23:59

Subject

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

38:0a:36:0f:28:3e:e8:d6:7d:ef:b7:5c:36:84:e5:ed:ec:e0:ff:bd
Signer

Actual PE Digest

38:0a:36:0f:28:3e:e8:d6:7d:ef:b7:5c:36:84:e5:ed:ec:e0:ff:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\hudson\jobs\ToolbarCore_Staging\workspace\build\ToolbarCore\toolbar\ie\src\toolbar\wrapper\Release\externalwrapper.pdb

Imports

shlwapi

PathFileExistsW

StrStrIW

StrCmpNIW

SHDeleteValueW

msi

ord159

ord92

ord8

ord205

ord113

ord163

ord160

ord20

ord32

ord118

ord125

ord70

kernel32

SetEndOfFile

GetLocaleInfoW

WriteConsoleW

GetConsoleOutputCP

WriteConsoleA

GetCommandLineW

FileTimeToDosDateTime

GetTempFileNameW

lstrlenA

FindResourceW

LoadResource

WaitForSingleObject

GetTickCount

WriteFile

WideCharToMultiByte

SizeofResource

GetExitCodeProcess

CreateFileW

MultiByteToWideChar

lstrlenW

GetTempPathW

FindFirstFileA

FindClose

GetLocalTime

lstrcmpiW

lstrcatW

CloseHandle

FileTimeToLocalFileTime

GetProcessHeap

LocalFree

lstrcpyW

CreateFileA

SetFilePointer

ReadFile

GetLastError

GetVersionExW

CreateDirectoryW

GetPrivateProfileStringW

GetFileTime

InterlockedDecrement

GetSystemDefaultLangID

FreeLibrary

GetCurrentProcess

GetModuleHandleW

LoadLibraryW

GetProcAddress

GetSystemInfo

SetStdHandle

LoadLibraryA

InitializeCriticalSectionAndSpinCount

TlsSetValue

TlsFree

SetLastError

GetCurrentThreadId

HeapCreate

VirtualFree

DeleteFileW

TlsAlloc

TlsGetValue

IsValidCodePage

GetOEMCP

GetModuleHandleA

IsValidLocale

EnumSystemLocalesA

GetLocaleInfoA

GetUserDefaultLCID

HeapSize

GetACP

GetStringTypeW

LCMapStringA

LCMapStringW

RtlUnwind

GetCurrentProcessId

QueryPerformanceCounter

RaiseException

GetEnvironmentStringsW

FreeEnvironmentStringsW

GetModuleFileNameW

GetStringTypeA

FlushFileBuffers

GetConsoleMode

GetConsoleCP

GetStartupInfoA

GetFileType

SetHandleCount

GetModuleFileNameA

GetStdHandle

ExitProcess

HeapReAlloc

VirtualAlloc

GetStartupInfoW

GetCPInfo

GetSystemTimeAsFileTime

InterlockedIncrement

InterlockedCompareExchange

InterlockedExchange

Sleep

InitializeCriticalSection

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

HeapFree

HeapAlloc

TerminateProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

user32

GetSystemMetrics

advapi32

RegEnumKeyExW

RegDeleteKeyW

RegDeleteValueW

RegSetValueExW

RegCloseKey

RegOpenKeyExW

RegEnumValueW

RegQueryInfoKeyW

RegQueryValueExW

shell32

ShellExecuteExW

CommandLineToArgvW

SHGetFolderPathW

ole32

CoCreateInstance

OleInitialize

OleUninitialize

CoUninitialize

CoInitialize

oleaut32

SysAllocString

VariantInit

SysFreeString

wininet

InternetSetOptionW

HttpSendRequestW

HttpSendRequestExW

InternetCanonicalizeUrlW

HttpSendRequestA

HttpAddRequestHeadersA

HttpOpenRequestW

HttpQueryInfoW

InternetConnectW

InternetCrackUrlW

InternetOpenW

HttpEndRequestW

InternetCloseHandle

InternetReadFile

version

GetFileVersionInfoW

VerQueryValueW

GetFileVersionInfoSizeW

rpcrt4

UuidToStringW

RpcStringFreeW

UuidCreate

Sections

.text
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$TEMP/HomePageChange.exe

.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\projects\tools\HomePageChange\HomePageChange\obj\x86\Debug\HomePageChange.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$TEMP/Newtonsoft.Json.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\Temp\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$TEMP/installdatapl_$HWNDPARENT/11134/installdata.zip

.zip

config.ini

$TEMP/installdatapl_$HWNDPARENT/11206/installdata.zip

.zip

config.ini

$TEMP/installdatapl_$HWNDPARENT/11368/installdata.zip

.zip

config.ini

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/11491/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/11648/installdata.zip

.zip

config.ini

$TEMP/installdatapl_$HWNDPARENT/11752/installdata.zip

.zip

config.ini

$TEMP/installdatapl_$HWNDPARENT/11925/installdata.zip

.zip

config.ini

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/12107/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/12431/installdata.zip

.zip

config.ini

$TEMP/installdatapl_$HWNDPARENT/13235/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/13788/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/14256/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/14884/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/14913/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/15963/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/16040/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/18627/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/19672/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/19741/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/20001/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20002/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/20002/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/20004/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/20005/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20006/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20007/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/20008/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20011/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20013/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20017/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20022/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20023/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20028/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20030/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20033/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/20036/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20037/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20042/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20043/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20045/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20048/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/20055/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20067/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20083/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20084/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20087/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20090/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20092/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20095/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20096/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20098/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20099/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20103/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/20116/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20140/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20161/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20166/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20172/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20178/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/20178/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/20189/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20193/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20232/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20237/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20240/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/20663/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/21170/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/21617/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/23569/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/23646/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/23908/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/24056/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/24760/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/24761/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/25521/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/25754/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/25754/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/25755/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/25755/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/26210/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/26418/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/26559/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/27279/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/29753/installdata.zip

.zip

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/29753/wdata/support_form_ok.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/cert_activation.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/email_activation.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/frame.html

.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/games.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/ieframe_tab0.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/ieframe_tab0nofooter.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/ieframe_tab1.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/ieframe_tab2.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/ieframe_tab3.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/ieframe_tab4.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/no_connect.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_alipay.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_avangate.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_aw_online_activation.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_aw_subscription.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_aw_subscription_info.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_aw_subscription_v2.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_boacompra.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_boacompra_positivo.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_boacompra_sms.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_boleto.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_cards.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_cards_info.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_direct_debet.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_djuice.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_enter_key.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_gate2play.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_igame.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_ipko.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_kwedit.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_lotus.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_more.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_more_info.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_mtransfer.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_novotelecom.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_paynet.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_paypal.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_rewardspay.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_safe_cart.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_seven_eleven.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_sms.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_sms_djuice.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_sms_ppc.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_sms_ptterms.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_terminal.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_trialpay.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_uol.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_vcards.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_vio.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_virgopass.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_wavepoint.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_wm.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_wmyandex.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_yandex.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/payments_yetipay.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/register.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/register_ie.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/register_wr.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/rentsoft_error.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/start_registered.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/start_unregistered.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/support_form.html

$TEMP/installdatapl_$HWNDPARENT/30320/wdata/support_form_ok.html

$_20_/$R4

$_20_/Alawar.ico

$_20_/Alawar.url

Alawar.url

AsianRiddles.exe

.exe windows:5 windows x86 arch:x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

65:0a:27:a0:4d:ba:a9:df:0c:06:de:bb:a3:98:30:54
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/12/2011, 00:00

Not After

31/12/2014, 23:59

Subject

CN=Alawar Entertainment Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=-,O=Alawar Entertainment Inc,L=Alexandria,ST=Virginia,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

34:99:38:6c:0a:da:26:2f:1f:b3:8b:10:fc:88:f0:0b:0d:fd:b3:44
Signer

Actual PE Digest

34:99:38:6c:0a:da:26:2f:1f:b3:8b:10:fc:88:f0:0b:0d:fd:b3:44

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

AsianRiddles.wrp.exe

.exe windows:4 windows x86 arch:x86

3f821d74bb3ff59c62b3083de9eacfd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DEBUG_STRIPPED

Imports

openal32

alSourcef

alcGetError

alListenerfv

alcOpenDevice

alcCreateContext

alcMakeContextCurrent

alcDestroyContext

alcCloseDevice

alSourceStop

alSourcePlay

alBufferData

alGetError

alGetSourcei

alDeleteSources

alGenBuffers

alDeleteBuffers

alcGetCurrentContext

alGenSources

alSourceQueueBuffers

alSourcei

alSourceUnqueueBuffers

d3d9

Direct3DCreate9

d3dx9_43

D3DXCompileShader

D3DXGetImageInfoFromFileInMemory

D3DXCreateTextureFromFileInMemoryEx

D3DXMatrixTranslation

D3DXMatrixRotationYawPitchRoll

D3DXMatrixMultiply

D3DXMatrixPerspectiveFovLH

D3DXMatrixLookAtLH

D3DXMatrixScaling

D3DXCreateTexture

D3DXGetImageInfoFromFileA

D3DXCreateTextureFromFileExA

gdi32

GetStockObject

psapi

GetProcessMemoryInfo

winmm

timeGetTime

vorbisfile

ov_time_total

ov_read

ov_open_callbacks

ov_comment

ov_info

ov_pcm_total

ov_clear

ov_pcm_seek

kernel32

AddAtomA

CloseHandle

CopyFileA

CreateDirectoryA

CreateFileA

CreateSemaphoreA

CreateThread

DeleteCriticalSection

DeleteFileA

EnterCriticalSection

ExitProcess

FindAtomA

FindClose

FindFirstFileA

FindNextFileA

GetAtomNameA

GetCurrentDirectoryA

GetCurrentProcess

GetCurrentThreadId

GetExitCodeThread

GetFileAttributesA

GetLastError

GetModuleHandleA

GetProcAddress

GlobalMemoryStatus

InitializeCriticalSection

InterlockedDecrement

InterlockedExchange

InterlockedIncrement

IsDBCSLeadByteEx

LeaveCriticalSection

MoveFileA

MultiByteToWideChar

ReleaseSemaphore

RemoveDirectoryA

SetCurrentDirectoryA

SetLastError

SetThreadPriority

SetUnhandledExceptionFilter

Sleep

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TryEnterCriticalSection

VirtualProtect

VirtualQuery

WaitForSingleObject

WideCharToMultiByte

msvcrt

_fdopen

_itoa

_read

_stat

_stricmp

_write

__getmainargs

__lc_codepage

__mb_cur_max

__p__environ

__p__fmode

__set_app_type

_assert

_cexit

_errno

_filelengthi64

_iob

_lseeki64

_onexit

_setjmp

_setmode

_wfopen

abort

acos

atexit

atof

atoi

calloc

ceil

cos

exit

exp

fclose

fflush

fgetpos

floor

fmod

fopen

fputc

fread

free

fseek

fsetpos

ftell

fwrite

getc

getenv

getwc

iswctype

localeconv

longjmp

malloc

memchr

memcpy

memmove

pow

putc

putwc

setlocale

setvbuf

signal

sin

sprintf

strchr

strcmp

strcoll

strcpy

strerror

strftime

strlen

strstr

strtol

strtoul

strxfrm

swprintf

time

towlower

towupper

ungetc

ungetwc

wcscat

wcscoll

wcsftime

wcslen

wcsncpy

wcstombs

wcsxfrm

shell32

SHGetPathFromIDListA

SHGetSpecialFolderLocation

ShellExecuteA

user32

AdjustWindowRectEx

ClipCursor

CreateWindowExW

DefWindowProcA

DispatchMessageA

GetClipCursor

GetCursorPos

GetSystemMetrics

LoadCursorA

LoadImageA

MapVirtualKeyA

MessageBoxA

PeekMessageA

RegisterClassExA

ScreenToClient

SetWindowLongA

SetWindowPos

SetWindowTextW

ShowCursor

ShowWindow

SystemParametersInfoA

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

EaxAc3.dll

.dll windows:4 windows x86 arch:x86

3d053d82a43c0f9d1de9afbade262af7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

TlsGetValue

InitializeCriticalSection

CloseHandle

WaitForSingleObjectEx

LeaveCriticalSection

EnterCriticalSection

CreateEventA

SetEvent

OutputDebugStringA

GetStartupInfoA

GetFileType

RtlUnwind

GetStringTypeW

GetStringTypeA

LCMapStringW

LCMapStringA

MultiByteToWideChar

GetCommandLineA

GetVersion

HeapAlloc

HeapFree

GetLastError

FlushFileBuffers

WriteFile

ExitProcess

ReadFile

SetFilePointer

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

TlsSetValue

TlsAlloc

TlsFree

SetLastError

DeleteCriticalSection

SetHandleCount

GetStdHandle

GetModuleFileNameA

FreeEnvironmentStringsA

FreeEnvironmentStringsW

WideCharToMultiByte

GetEnvironmentStrings

GetEnvironmentStringsW

HeapDestroy

HeapCreate

VirtualFree

VirtualAlloc

HeapReAlloc

GetCPInfo

SetStdHandle

CreateFileA

GetACP

GetOEMCP

GetProcAddress

LoadLibraryA

SetEndOfFile

winmm

waveOutGetErrorTextA

timeKillEvent

timeEndPeriod

waveOutUnprepareHeader

timeBeginPeriod

timeGetTime

waveOutRestart

timeSetEvent

waveOutPrepareHeader

waveOutWrite

waveOutPause

waveOutReset

waveOutGetPosition

waveOutClose

timeGetDevCaps

waveOutGetNumDevs

waveOutOpen

waveOutGetDevCapsA

Exports

EAXAC3ClosePlaybackDevice

EAXAC3CloseStream

EAXAC3GetErrorString

EAXAC3GetFunctionTable

EAXAC3GetLastError

EAXAC3GetPosition

EAXAC3LockBuffer

EAXAC3OpenPlaybackDevice

EAXAC3OpenStream

EAXAC3PauseStream

EAXAC3PlayStream

EAXAC3PrePlayStream

EAXAC3QueryDeviceCaps

EAXAC3QueryFile

EAXAC3QueryMemory

EAXAC3QueryNoOfFramesReqForPlayback

EAXAC3QueryNumberOfDevices

EAXAC3ResumeStream

EAXAC3SetFilePosition

EAXAC3SetPlaybackMode

EAXAC3StopStream

EAXAC3UnLockBuffer

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

OpenAL32.dll

.dll windows:4 windows x86 arch:x86

f0ac2d5429f14998deb84e9eb8f7b668

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

IsBadWritePtr

GetProcAddress

LoadLibraryA

FreeLibrary

RtlUnwind

LCMapStringW

LCMapStringA

GetStringTypeW

GetStringTypeA

MultiByteToWideChar

GetOEMCP

GetACP

GetCPInfo

RaiseException

WriteFile

GetEnvironmentStringsW

EnterCriticalSection

LeaveCriticalSection

CloseHandle

CreateThread

CreateEventA

InitializeCriticalSection

SetEvent

DeleteCriticalSection

WaitForSingleObjectEx

Sleep

ExitThread

HeapAlloc

HeapFree

HeapReAlloc

GetCommandLineA

GetVersion

GetModuleHandleA

GetModuleFileNameA

GetEnvironmentVariableA

GetVersionExA

HeapDestroy

HeapCreate

VirtualFree

VirtualAlloc

ExitProcess

TerminateProcess

GetCurrentProcess

SetHandleCount

GetStdHandle

GetFileType

GetStartupInfoA

FreeEnvironmentStringsA

FreeEnvironmentStringsW

WideCharToMultiByte

GetEnvironmentStrings

winmm

waveOutWrite

waveOutUnprepareHeader

waveOutClose

timeSetEvent

waveOutPrepareHeader

timeKillEvent

timeEndPeriod

timeGetDevCaps

timeBeginPeriod

waveOutOpen

waveOutReset

timeGetTime

user32

PostThreadMessageA

GetForegroundWindow

GetMessageA

ole32

CoInitialize

CoUninitialize

CoCreateInstance

Exports

EAXGet

EAXSet

alBufferData

alDeleteBuffers

alDeleteSources

alDisable

alDistanceModel

alDopplerFactor

alDopplerVelocity

alEAXAC3GetFunctionTable

alEnable

alGenBuffers

alGenSources

alGetBoolean

alGetBooleanv

alGetBufferf

alGetBufferi

alGetDouble

alGetDoublev

alGetEnumValue

alGetError

alGetFloat

alGetFloatv

alGetInteger

alGetIntegerv

alGetListener3f

alGetListenerf

alGetListenerfv

alGetListeneri

alGetProcAddress

alGetSource3f

alGetSourcef

alGetSourcefv

alGetSourcei

alGetString

alIsBuffer

alIsEnabled

alIsExtensionPresent

alIsSource

alListener3f

alListenerf

alListenerfv

alListeneri

alSource3f

alSourcePause

alSourcePausev

alSourcePlay

alSourcePlayv

alSourceQueueBuffers

alSourceRewind

alSourceRewindv

alSourceStop

alSourceStopv

alSourceUnqueueBuffers

alSourcef

alSourcefv

alSourcei

alcCloseDevice

alcCreateContext

alcDestroyContext

alcGetContextsDevice

alcGetCurrentContext

alcGetEnumValue

alcGetError

alcGetIntegerv

alcGetProcAddress

alcGetString

alcIsExtensionPresent

alcMakeContextCurrent

alcOpenDevice

alcProcessContext

alcSuspendContext

Sections

.zip

Resources/Pack02

.zip

Resources/Pack03

.zip

Resources/Pack04

.zip

Resources/Pack05

.zip

Resources/Pack06

.zip

Resources/Pack07

.zip

Resources/Pack08

.zip

Resources/Pack09

.zip

Resources/data/data.xml

Resources/data/de

.zip

Resources/data/en

.zip

Resources/data/pl

.zip

Resources/data/ru

.zip

Resources/data/share/audio/music

.zip

Resources/data/share/audio/sound

.zip

Resources/data/share/bin

.zip

Resources/data/share/font

.zip

Resources/data/share/fx

.zip

Resources/data/share/image/.DS_Store

Resources/data/share/image/._.DS_Store

Resources/data/share/image/game_screen

.zip

Resources/data/share/image/gui

.zip

Resources/data/share/image/help_window

.zip

Resources/data/share/image/level_screen

.zip

Resources/data/share/image/loading_screen

.zip

Resources/data/share/image/nagscreen_window

.zip

Resources/data/share/image/pack_screen

.zip

Resources/data/share/image/shop_window

.zip

Resources/data/share/image/title_screen

.zip

Resources/data/share/image/trophies_screen

.zip

Resources/data/share/image/tutorial_window

.zip

Resources/data/share/main/GameProcess

.zip

Resources/data/share/main/other

.zip

Resources/data/share/main/scenes/confirms

.zip

Resources/data/share/main/scenes/credits

.zip

Resources/data/share/main/scenes/game_screen

.zip

Resources/data/share/main/scenes/help

.zip

Resources/data/share/main/scenes/levels

.zip

Resources/data/share/main/scenes/options

.zip

Resources/data/share/main/scenes/other

.zip

Resources/data/share/main/scenes/packs

.zip

Resources/data/share/main/scenes/players

.zip

Resources/data/share/main/scenes/store

.zip

Resources/data/share/main/scenes/title

.zip

Resources/data/share/main/scenes/training

.zip

Resources/data/share/main/scenes/trophy

.zip

Resources/game.xml

d3dx9_43.dll

.dll windows:6 windows x86 arch:x86

5fb75b2a87c1fa7cc3d7904a0b97084a

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

9b:28:ef:17:5d:cd:b3:d3:ec:10:d1:6d:64:92:d2:24:02:c3:2b:3e
Signer

Actual PE Digest

9b:28:ef:17:5d:cd:b3:d3:ec:10:d1:6d:64:92:d2:24:02:c3:2b:3e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

d3dx9_43.pdb

Imports

msvcrt

_isatty

_write

_lseeki64

__pioinfo

__badioinfo

wctomb

_itoa

_snprintf

_fileno

isleadbyte

?terminate@@YAXXZ

_onexit

_lock

__dllonexit

_unlock

_amsg_exit

_initterm

_XcptFilter

srand

strtod

fread

fflush

fwrite

abort

_tempnam

exit

isalpha

atof

atol

isxdigit

_ultoa

wcstombs

_CIexp

_isnan

rand

atoi

isalnum

floor

_strtime

_strdate

sscanf

isspace

isdigit

_setjmp3

longjmp

ldexp

frexp

calloc

realloc

_CIlog

setlocale

_strdup

free

_clearfp

ceil

_controlfp

malloc

_CIatan

_CIcos

_CIasin

_finite

_CIsin

_CIatan2

_CIacos

memmove

qsort

_CIfmod

_purecall

_stricmp

modf

iswspace

iswalpha

iswdigit

iswpunct

_CIsqrt

memcpy

memset

_CIpow

??2@YAPAXI@Z

??3@YAXPAX@Z

_iob

_vsnprintf

_vsnwprintf

_errno

__CxxFrameHandler

gdi32

GetTextMetricsA

GetObjectA

GetGlyphOutlineA

CreateDIBSection

DeleteDC

DeleteObject

SelectObject

GetCharacterPlacementW

GetCharacterPlacementA

SetTextColor

SetBkColor

SetBkMode

GetTextMetricsW

GetFontLanguageInfo

CreateFontIndirectA

CreateFontIndirectW

SetTextAlign

SetMapMode

CreateCompatibleDC

ExtTextOutA

MoveToEx

ExtTextOutW

TranslateCharsetInfo

GetCurrentObject

GetOutlineTextMetricsA

GetGlyphOutlineW

GetObjectW

kernel32

DeleteFileW

SetFilePointer

GetFileSize

CreateFileMappingA

MapViewOfFile

UnmapViewOfFile

FindResourceA

LoadResource

LockResource

SizeofResource

FreeResource

CompareStringA

LeaveCriticalSection

EnterCriticalSection

DeleteCriticalSection

InitializeCriticalSection

FormatMessageA

LocalFree

CreateFileW

GetFileSizeEx

GetFullPathNameW

GetLastError

IsDBCSLeadByte

WriteFile

GetTempPathA

MoveFileA

CreateFileA

ReadFile

CloseHandle

DeleteFileA

InterlockedDecrement

InterlockedIncrement

IsProcessorFeaturePresent

VirtualFree

GetACP

WideCharToMultiByte

MultiByteToWideChar

OutputDebugStringA

GetModuleHandleA

FreeLibrary

LoadLibraryA

GetVersionExA

GetSystemInfo

GetProcAddress

VirtualAlloc

GetProcessHeap

HeapFree

HeapAlloc

DisableThreadLibraryCalls

MoveFileW

GetTempFileNameW

GlobalMemoryStatus

SetEndOfFile

ExpandEnvironmentStringsA

IsBadCodePtr

IsBadReadPtr

IsBadWritePtr

WaitForSingleObject

ReleaseMutex

CreateMutexA

Sleep

InterlockedExchange

InterlockedCompareExchange

RtlUnwind

QueryPerformanceCounter

GetTickCount

GetCurrentThreadId

GetCurrentProcessId

GetSystemTimeAsFileTime

TerminateProcess

GetCurrentProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetVersion

GetTempFileNameA

FindResourceW

advapi32

RegOpenKeyA

RegQueryValueExA

RegCloseKey

Exports

D3DXAssembleShader

D3DXAssembleShaderFromFileA

D3DXAssembleShaderFromFileW

D3DXAssembleShaderFromResourceA

D3DXAssembleShaderFromResourceW

D3DXBoxBoundProbe

D3DXCheckCubeTextureRequirements

D3DXCheckTextureRequirements

D3DXCheckVersion

D3DXCheckVolumeTextureRequirements

D3DXCleanMesh

D3DXColorAdjustContrast

D3DXColorAdjustSaturation

D3DXCompileShader

D3DXCompileShaderFromFileA

D3DXCompileShaderFromFileW

D3DXCompileShaderFromResourceA

D3DXCompileShaderFromResourceW

D3DXComputeBoundingBox

D3DXComputeBoundingSphere

D3DXComputeIMTFromPerTexelSignal

D3DXComputeIMTFromPerVertexSignal

D3DXComputeIMTFromSignal

D3DXComputeIMTFromTexture

D3DXComputeNormalMap

D3DXComputeNormals

D3DXComputeTangent

D3DXComputeTangentFrame

D3DXComputeTangentFrameEx

D3DXConcatenateMeshes

D3DXConvertMeshSubsetToSingleStrip

D3DXConvertMeshSubsetToStrips

D3DXCreateAnimationController

D3DXCreateBox

D3DXCreateBuffer

D3DXCreateCompressedAnimationSet

D3DXCreateCubeTexture

D3DXCreateCubeTextureFromFileA

D3DXCreateCubeTextureFromFileExA

D3DXCreateCubeTextureFromFileExW

D3DXCreateCubeTextureFromFileInMemory

D3DXCreateCubeTextureFromFileInMemoryEx

D3DXCreateCubeTextureFromFileW

D3DXCreateCubeTextureFromResourceA

D3DXCreateCubeTextureFromResourceExA

D3DXCreateCubeTextureFromResourceExW

D3DXCreateCubeTextureFromResourceW

D3DXCreateCylinder

D3DXCreateEffect

D3DXCreateEffectCompiler

D3DXCreateEffectCompilerFromFileA

D3DXCreateEffectCompilerFromFileW

D3DXCreateEffectCompilerFromResourceA

D3DXCreateEffectCompilerFromResourceW

D3DXCreateEffectEx

D3DXCreateEffectFromFileA

D3DXCreateEffectFromFileExA

D3DXCreateEffectFromFileExW

D3DXCreateEffectFromFileW

D3DXCreateEffectFromResourceA

D3DXCreateEffectFromResourceExA

D3DXCreateEffectFromResourceExW

D3DXCreateEffectFromResourceW

D3DXCreateEffectPool

D3DXCreateFontA

D3DXCreateFontIndirectA

D3DXCreateFontIndirectW

D3DXCreateFontW

D3DXCreateKeyframedAnimationSet

D3DXCreateLine

D3DXCreateMatrixStack

D3DXCreateMesh

D3DXCreateMeshFVF

D3DXCreateNPatchMesh

D3DXCreatePMeshFromStream

D3DXCreatePRTBuffer

D3DXCreatePRTBufferTex

D3DXCreatePRTCompBuffer

D3DXCreatePRTEngine

D3DXCreatePatchMesh

D3DXCreatePolygon

D3DXCreateRenderToEnvMap

D3DXCreateRenderToSurface

D3DXCreateSPMesh

D3DXCreateSkinInfo

D3DXCreateSkinInfoFVF

D3DXCreateSkinInfoFromBlendedMesh

D3DXCreateSphere

D3DXCreateSprite

D3DXCreateTeapot

D3DXCreateTextA

D3DXCreateTextW

D3DXCreateTexture

D3DXCreateTextureFromFileA

D3DXCreateTextureFromFileExA

D3DXCreateTextureFromFileExW

D3DXCreateTextureFromFileInMemory

D3DXCreateTextureFromFileInMemoryEx

D3DXCreateTextureFromFileW

D3DXCreateTextureFromResourceA

D3DXCreateTextureFromResourceExA

D3DXCreateTextureFromResourceExW

D3DXCreateTextureFromResourceW

D3DXCreateTextureGutterHelper

D3DXCreateTextureShader

D3DXCreateTorus

D3DXCreateVolumeTexture

D3DXCreateVolumeTextureFromFileA

D3DXCreateVolumeTextureFromFileExA

D3DXCreateVolumeTextureFromFileExW

D3DXCreateVolumeTextureFromFileInMemory

D3DXCreateVolumeTextureFromFileInMemoryEx

D3DXCreateVolumeTextureFromFileW

D3DXCreateVolumeTextureFromResourceA

D3DXCreateVolumeTextureFromResourceExA

D3DXCreateVolumeTextureFromResourceExW

D3DXCreateVolumeTextureFromResourceW

D3DXDebugMute

D3DXDeclaratorFromFVF

D3DXDisassembleEffect

D3DXDisassembleShader

D3DXFVFFromDeclarator

D3DXFileCreate

D3DXFillCubeTexture

D3DXFillCubeTextureTX

D3DXFillTexture

D3DXFillTextureTX

D3DXFillVolumeTexture

D3DXFillVolumeTextureTX

D3DXFilterTexture

D3DXFindShaderComment

D3DXFloat16To32Array

D3DXFloat32To16Array

D3DXFrameAppendChild

D3DXFrameCalculateBoundingSphere

D3DXFrameDestroy

D3DXFrameFind

D3DXFrameNumNamedMatrices

D3DXFrameRegisterNamedMatrices

D3DXFresnelTerm

D3DXGenerateOutputDecl

D3DXGeneratePMesh

D3DXGetDeclLength

D3DXGetDeclVertexSize

D3DXGetDriverLevel

D3DXGetFVFVertexSize

D3DXGetImageInfoFromFileA

D3DXGetImageInfoFromFileInMemory

D3DXGetImageInfoFromFileW

D3DXGetImageInfoFromResourceA

D3DXGetImageInfoFromResourceW

D3DXGetPixelShaderProfile

D3DXGetShaderConstantTable

D3DXGetShaderConstantTableEx

D3DXGetShaderInputSemantics

D3DXGetShaderOutputSemantics

D3DXGetShaderSamplers

D3DXGetShaderSize

D3DXGetShaderVersion

D3DXGetVertexShaderProfile

D3DXIntersect

D3DXIntersectSubset

D3DXIntersectTri

D3DXLoadMeshFromXA

D3DXLoadMeshFromXInMemory

D3DXLoadMeshFromXResource

D3DXLoadMeshFromXW

D3DXLoadMeshFromXof

D3DXLoadMeshHierarchyFromXA

D3DXLoadMeshHierarchyFromXInMemory

D3DXLoadMeshHierarchyFromXW

D3DXLoadPRTBufferFromFileA

D3DXLoadPRTBufferFromFileW

D3DXLoadPRTCompBufferFromFileA

D3DXLoadPRTCompBufferFromFileW

D3DXLoadPatchMeshFromXof

D3DXLoadSkinMeshFromXof

D3DXLoadSurfaceFromFileA

D3DXLoadSurfaceFromFileInMemory

D3DXLoadSurfaceFromFileW

D3DXLoadSurfaceFromMemory

D3DXLoadSurfaceFromResourceA

D3DXLoadSurfaceFromResourceW

D3DXLoadSurfaceFromSurface

D3DXLoadVolumeFromFileA

D3DXLoadVolumeFromFileInMemory

D3DXLoadVolumeFromFileW

D3DXLoadVolumeFromMemory

D3DXLoadVolumeFromResourceA

D3DXLoadVolumeFromResourceW

D3DXLoadVolumeFromVolume

D3DXMatrixAffineTransformation

D3DXMatrixAffineTransformation2D

D3DXMatrixDecompose

D3DXMatrixDeterminant

D3DXMatrixInverse

D3DXMatrixLookAtLH

D3DXMatrixLookAtRH

D3DXMatrixMultiply

D3DXMatrixMultiplyTranspose

D3DXMatrixOrthoLH

D3DXMatrixOrthoOffCenterLH

D3DXMatrixOrthoOffCenterRH

D3DXMatrixOrthoRH

D3DXMatrixPerspectiveFovLH

D3DXMatrixPerspectiveFovRH

D3DXMatrixPerspectiveLH

D3DXMatrixPerspectiveOffCenterLH

D3DXMatrixPerspectiveOffCenterRH

D3DXMatrixPerspectiveRH

D3DXMatrixReflect

D3DXMatrixRotationAxis

D3DXMatrixRotationQuaternion

D3DXMatrixRotationX

D3DXMatrixRotationY

D3DXMatrixRotationYawPitchRoll

D3DXMatrixRotationZ

D3DXMatrixScaling

D3DXMatrixShadow

D3DXMatrixTransformation

D3DXMatrixTransformation2D

D3DXMatrixTranslation

D3DXMatrixTranspose

D3DXOptimizeFaces

D3DXOptimizeVertices

D3DXPlaneFromPointNormal

D3DXPlaneFromPoints

D3DXPlaneIntersectLine

D3DXPlaneNormalize

D3DXPlaneTransform

D3DXPlaneTransformArray

D3DXPreprocessShader

D3DXPreprocessShaderFromFileA

D3DXPreprocessShaderFromFileW

D3DXPreprocessShaderFromResourceA

D3DXPreprocessShaderFromResourceW

D3DXQuaternionBaryCentric

D3DXQuaternionExp

D3DXQuaternionInverse

D3DXQuaternionLn

D3DXQuaternionMultiply

D3DXQuaternionNormalize

D3DXQuaternionRotationAxis

D3DXQuaternionRotationMatrix

D3DXQuaternionRotationYawPitchRoll

D3DXQuaternionSlerp

D3DXQuaternionSquad

D3DXQuaternionSquadSetup

D3DXQuaternionToAxisAngle

D3DXRectPatchSize

D3DXSHAdd

D3DXSHDot

D3DXSHEvalConeLight

D3DXSHEvalDirection

D3DXSHEvalDirectionalLight

D3DXSHEvalHemisphereLight

D3DXSHEvalSphericalLight

D3DXSHMultiply2

D3DXSHMultiply3

D3DXSHMultiply4

D3DXSHMultiply5

D3DXSHMultiply6

D3DXSHPRTCompSplitMeshSC

D3DXSHPRTCompSuperCluster

D3DXSHProjectCubeMap

D3DXSHRotate

D3DXSHRotateZ

D3DXSHScale

D3DXSaveMeshHierarchyToFileA

D3DXSaveMeshHierarchyToFileW

D3DXSaveMeshToXA

D3DXSaveMeshToXW

D3DXSavePRTBufferToFileA

D3DXSavePRTBufferToFileW

D3DXSavePRTCompBufferToFileA

D3DXSavePRTCompBufferToFileW

D3DXSaveSurfaceToFileA

D3DXSaveSurfaceToFileInMemory

D3DXSaveSurfaceToFileW

D3DXSaveTextureToFileA

D3DXSaveTextureToFileInMemory

D3DXSaveTextureToFileW

D3DXSaveVolumeToFileA

D3DXSaveVolumeToFileInMemory

D3DXSaveVolumeToFileW

D3DXSimplifyMesh

D3DXSphereBoundProbe

D3DXSplitMesh

D3DXTessellateNPatches

D3DXTessellateRectPatch

D3DXTessellateTriPatch

D3DXTriPatchSize

D3DXUVAtlasCreate

D3DXUVAtlasPack

D3DXUVAtlasPartition

D3DXValidMesh

D3DXValidPatchMesh

D3DXVec2BaryCentric

D3DXVec2CatmullRom

D3DXVec2Hermite

D3DXVec2Normalize

D3DXVec2Transform

D3DXVec2TransformArray

D3DXVec2TransformCoord

D3DXVec2TransformCoordArray

D3DXVec2TransformNormal

D3DXVec2TransformNormalArray

D3DXVec3BaryCentric

D3DXVec3CatmullRom

D3DXVec3Hermite

D3DXVec3Normalize

D3DXVec3Project

D3DXVec3ProjectArray

D3DXVec3Transform

D3DXVec3TransformArray

D3DXVec3TransformCoord

D3DXVec3TransformCoordArray

D3DXVec3TransformNormal

D3DXVec3TransformNormalArray

D3DXVec3Unproject

D3DXVec3UnprojectArray

D3DXVec4BaryCentric

D3DXVec4CatmullRom

D3DXVec4Cross

D3DXVec4Hermite

D3DXVec4Normalize

D3DXVec4Transform

D3DXVec4TransformArray

D3DXWeldVertices

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

htmlayout.dll

.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Exports

HTMLayoutAppendMasterCSS

HTMLayoutAttachEventHandler

HTMLayoutAttachEventHandlerEx

HTMLayoutCallBehaviorMethod

HTMLayoutClassNameA

HTMLayoutClassNameW

HTMLayoutClearAttributes

HTMLayoutClipboardCopy

HTMLayoutCloneElement

HTMLayoutCombineURL

HTMLayoutControlGetType

HTMLayoutControlGetValue

HTMLayoutControlSetValue

HTMLayoutCreateElement

HTMLayoutDataReady

HTMLayoutDataReadyAsync

HTMLayoutDeclareElementType

HTMLayoutDeleteElement

HTMLayoutDetachElement

HTMLayoutDetachEventHandler

HTMLayoutDialog

HTMLayoutElementGetExpando

HTMLayoutElementSetExpando

HTMLayoutEnumElementStyles

HTMLayoutEnumResources

HTMLayoutEnumerate

HTMLayoutFindElement

HTMLayoutGetAttributeByName

HTMLayoutGetAttributeCount

HTMLayoutGetCharacterRect

HTMLayoutGetChildrenCount

HTMLayoutGetElementByUID

HTMLayoutGetElementHtml

HTMLayoutGetElementHwnd

HTMLayoutGetElementIndex

HTMLayoutGetElementInnerText

HTMLayoutGetElementInnerText16

HTMLayoutGetElementLocation

HTMLayoutGetElementState

HTMLayoutGetElementText

HTMLayoutGetElementType

HTMLayoutGetElementUID

HTMLayoutGetFocusElement

HTMLayoutGetGraphin

HTMLayoutGetMinHeight

HTMLayoutGetMinWidth

HTMLayoutGetNthAttribute

HTMLayoutGetNthChild

HTMLayoutGetParentElement

HTMLayoutGetRootElement

HTMLayoutGetScrollInfo

HTMLayoutGetSelectedHTML

HTMLayoutGetStyleAttribute

HTMLayoutHidePopup

HTMLayoutHttpRequest

HTMLayoutInit

HTMLayoutInsertElement

HTMLayoutIsElementEnabled

HTMLayoutIsElementVisible

HTMLayoutLoadFile

HTMLayoutLoadHtml

HTMLayoutLoadHtmlEx

HTMLayoutMoveElement

HTMLayoutParseValue

HTMLayoutPostEvent

HTMLayoutProc

HTMLayoutProcND

HTMLayoutProcW

HTMLayoutProcessUIEvent

HTMLayoutRangeAdvancePos

HTMLayoutRangeCreate

HTMLayoutRangeFromPositions

HTMLayoutRangeFromSelection

HTMLayoutRangeInsertHtml

HTMLayoutRangeIsEmpty

HTMLayoutRangeRelease

HTMLayoutRangeReplace

HTMLayoutRangeToHtml

HTMLayoutRender

HTMLayoutRenderElement

HTMLayoutRequestElementData

HTMLayoutScrollToView

HTMLayoutSelectElements

HTMLayoutSelectElementsW

HTMLayoutSelectParent

HTMLayoutSelectParentW

HTMLayoutSelectionExist

HTMLayoutSendEvent

HTMLayoutSetAttributeByName

HTMLayoutSetCSS

HTMLayoutSetCallback

HTMLayoutSetCapture

HTMLayoutSetDataLoader

HTMLayoutSetElementHtml

HTMLayoutSetElementInnerText

HTMLayoutSetElementInnerText16

HTMLayoutSetElementState

HTMLayoutSetHttpHeaders

HTMLayoutSetMasterCSS

HTMLayoutSetMediaType

HTMLayoutSetMode

HTMLayoutSetOption

HTMLayoutSetScrollPos

HTMLayoutSetStyleAttribute

HTMLayoutSetTimer

HTMLayoutSetTimerEx

HTMLayoutSetupDebugOutput

HTMLayoutShowPopup

HTMLayoutShowPopupAt

HTMLayoutSortElements

HTMLayoutSwapElements

HTMLayoutTraverseUIEvent

HTMLayoutUpdateElement

HTMLayoutUpdateElementEx

HTMLayoutUpdateView

HTMLayoutUpdateWindow

HTMLayoutVisitElements

HTMLayoutWindowAttachEventHandler

HTMLayoutWindowDetachEventHandler

HTMLayout_UnuseElement

HTMLayout_UseElement

HTMLiteAdvanceFocus

HTMLiteCreateInstance

HTMLiteDestroyInstance

HTMLiteFindElement

HTMLiteGetDocumentMinHeight

HTMLiteGetDocumentMinWidth

HTMLiteGetRootElement

HTMLiteGetTag

HTMLiteLoadHtmlFromFile

HTMLiteLoadHtmlFromMemory

HTMLiteMeasure

HTMLiteRender

HTMLiteRenderOnBitmap

HTMLiteSetCallback

HTMLiteSetDataReady

HTMLiteSetDataReadyAsync

HTMLiteSetMediaType

HTMLiteSetTag

HTMLiteTraverseUIEvent

HTMPrintCreateInstance

HTMPrintDestroyInstance

HTMPrintGetDocumentHeight

HTMPrintGetDocumentMinWidth

HTMPrintGetRootElement

HTMPrintGetTag

HTMPrintLoadHtmlFromFile

HTMPrintLoadHtmlFromMemory

HTMPrintMeasure

HTMPrintRender

HTMPrintSetDataReady

HTMPrintSetHyperlinkAreaCallback

HTMPrintSetLoadDataCallback

HTMPrintSetMediaType

HTMPrintSetNextPageCallback

HTMPrintSetTag

ValueBinaryData

ValueBinaryDataSet

ValueClear

ValueCopy

ValueElementsCount

ValueFloatData

ValueFloatDataSet

ValueFromString

ValueGetValueOfKey

ValueInit

ValueInt64Data

ValueInt64DataSet

ValueIntData

ValueIntDataSet

ValueInvoke

ValueNthElementKey

ValueNthElementValue

ValueNthElementValueSet

ValueSetValueToKey

ValueStringData

ValueStringDataSet

ValueToString

ValueType

_ValueEnumElements@12

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

UPX1
Size: 670KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

license.txt

logo/splash1.png

.png

logo/splash2.png

.png

manifest.xml

.xml

ogg.dll

.dll windows:4 windows x86 arch:x86

f402829fa5197e576c2d2672a068ba81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GetFileType

HeapReAlloc

HeapFree

GetCommandLineA

GetVersion

GetModuleHandleA

GetModuleFileNameA

GetEnvironmentVariableA

GetVersionExA

HeapDestroy

HeapCreate

VirtualFree

VirtualAlloc

InitializeCriticalSection

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

ExitProcess

RtlUnwind

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

TlsSetValue

TlsAlloc

TlsFree

SetLastError

TlsGetValue

GetLastError

SetHandleCount

GetStdHandle

HeapAlloc

GetStartupInfoA

FreeEnvironmentStringsA

FreeEnvironmentStringsW

WideCharToMultiByte

GetEnvironmentStrings

GetEnvironmentStringsW

WriteFile

GetCPInfo

GetACP

GetOEMCP

GetProcAddress

LoadLibraryA

InterlockedDecrement

InterlockedIncrement

MultiByteToWideChar

LCMapStringA

LCMapStringW

GetStringTypeA

GetStringTypeW

Exports

ogg_packet_clear

ogg_page_bos

ogg_page_continued

ogg_page_eos

ogg_page_granulepos

ogg_page_packets

ogg_page_pageno

ogg_page_serialno

ogg_page_version

ogg_stream_clear

ogg_stream_destroy

ogg_stream_eos

ogg_stream_flush

ogg_stream_init

ogg_stream_packetin

ogg_stream_packetout

ogg_stream_packetpeek

ogg_stream_pagein

ogg_stream_pageout

ogg_stream_reset

ogg_stream_reset_serialno

ogg_sync_buffer

ogg_sync_clear

ogg_sync_destroy

ogg_sync_init

ogg_sync_pageout

ogg_sync_pageseek

ogg_sync_reset

ogg_sync_wrote

oggpack_adv

oggpack_adv1

oggpack_bits

oggpack_bytes

oggpack_get_buffer

oggpack_look

oggpack_look1

oggpack_read

oggpack_read1

oggpack_readinit

oggpack_reset

oggpack_write

oggpack_writealign

oggpack_writeclear

oggpack_writeinit

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

vorbis.dll

.dll windows:4 windows x86 arch:x86

f9e5b92aeb3cb2df32d09eb499cf0f10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

ogg

oggpack_writealign

oggpack_bytes

oggpack_readinit

oggpack_look

oggpack_adv

oggpack_read

oggpack_write

oggpack_writeclear

oggpack_writeinit

oggpack_reset

oggpack_get_buffer

msvcrt

_CIpow

free

calloc

_adjust_fdiv

_initterm

ldexp

ceil

_ftol

malloc

realloc

memmove

floor

frexp

toupper

qsort

kernel32

DisableThreadLibraryCalls

Exports

_floor_P

_mapping_P

_residue_P

vorbis_analysis

vorbis_analysis_blockout

vorbis_analysis_buffer

vorbis_analysis_headerout

vorbis_analysis_init

vorbis_analysis_wrote

vorbis_bitrate_addblock

vorbis_bitrate_flushpacket

vorbis_block_clear

vorbis_block_init

vorbis_comment_add

vorbis_comment_add_tag

vorbis_comment_clear

vorbis_comment_init

vorbis_comment_query

vorbis_comment_query_count

vorbis_commentheader_out

vorbis_dsp_clear

vorbis_encode_setup_init

vorbis_encode_setup_managed

vorbis_encode_setup_vbr

vorbis_info_blocksize

vorbis_info_clear

vorbis_info_init

vorbis_packet_blocksize

vorbis_synthesis

vorbis_synthesis_blockin

vorbis_synthesis_headerin

vorbis_synthesis_init

vorbis_synthesis_pcmout

vorbis_synthesis_read

vorbis_synthesis_trackonly

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 860KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

vorbisfile.dll

.dll windows:4 windows x86 arch:x86

f7f3b65d02aadf0bf4ae2da698f9d79b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

ogg

ogg_page_eos

ogg_stream_packetpeek

ogg_page_continued

ogg_page_granulepos

ogg_page_serialno

ogg_sync_reset

ogg_stream_clear

ogg_stream_init

ogg_sync_pageseek

ogg_stream_packetout

ogg_stream_reset_serialno

ogg_stream_pagein

ogg_sync_wrote

ogg_sync_init

ogg_sync_buffer

ogg_sync_clear

vorbis

vorbis_packet_blocksize

vorbis_synthesis

vorbis_synthesis_init

vorbis_block_init

vorbis_info_blocksize

vorbis_synthesis_trackonly

vorbis_synthesis_blockin

vorbis_info_init

vorbis_comment_init

vorbis_synthesis_headerin

vorbis_block_clear

vorbis_dsp_clear

vorbis_info_clear

vorbis_comment_clear

vorbis_synthesis_read

vorbis_synthesis_pcmout

msvcrt

free

_errno

malloc

calloc

ftell

fclose

realloc

fseek

floor

_adjust_fdiv

fread

_ftol

_initterm

kernel32

DisableThreadLibraryCalls

Exports

ov_bitrate

ov_bitrate_instant

ov_clear

ov_comment

ov_info

ov_open

ov_open_callbacks

ov_pcm_seek

ov_pcm_seek_page

ov_pcm_tell

ov_pcm_total

ov_raw_seek

ov_raw_tell

ov_raw_total

ov_read

ov_seekable

ov_serialnumber

ov_streams

ov_test

ov_test_callbacks

ov_test_open

ov_time_seek

ov_time_seek_page

ov_time_tell

ov_time_total

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

wdata/new_images/b_logo_game.jpg

.jpg

wrapper.dll

.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Exports

??0INIFile@@QAE@PBD_N@Z

??0INIFile@@QAE@PB_W_N@Z

??1INIFile@@QAE@XZ

?DllGetRegInfo@@YAXPAD@Z

?DllSetRegKey@@YAPADXZ

?ReadInteger@INIFile@@QAEHPBD0H@Z

?ReadInteger@INIFile@@QAEHPB_W0H@Z

?ReadString@INIFile@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD00@Z

?SetConnection@@YAXPAX@Z

?StartWrapper@@YAHXZ

?WriteValue@INIFile@@QAEXPB_W00_N@Z

?WriteValue@INIFile@@QAEXPB_W0ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z

?WriteValue@INIFile@@QAEXPB_W0H_N@Z

?add_to_mem_store@@YAXPB_WPAXI@Z

?add_to_mem_store@PluginAPI@@YAXPB_WPAXI@Z

?banner_clicked@@YA_NXZ

?banner_clicked@PluginAPI@@YA_NXZ

?debugLog@@YAXPBD@Z

?get@INIFile@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0@Z

?get@INIFile@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W0@Z

?getACP@INIFile@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W0@Z

?getAsUTF8@INIFile@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W0@Z

?get_cache_path@PluginAPI@@YAPB_WXZ

?get_game_id@PluginAPI@@YAHXZ

?get_initial_page@@YAHXZ

?get_initial_page@PluginAPI@@YAHXZ

?get_locale@PluginAPI@@YAPBDXZ

?get_partner_id@PluginAPI@@YAHXZ

?get_protocol_version@PluginAPI@@YAPBDXZ

?get_stats_url@PluginAPI@@YAPBDXZ

?get_user_id@PluginAPI@@YAHXZ

?get_user_id_token@PluginAPI@@YAPBD_N@Z

?handle_hyperlink@@YAXPB_W@Z

?handle_hyperlink@PluginAPI@@YAXPB_W@Z

?is_game_to_start@@YA_NXZ

?is_game_to_start@PluginAPI@@YA_NXZ

?set@INIFile@@QAE_NPBD00_N@Z

?set@INIFile@@QAE_NPB_W00_N@Z

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

65:0a:27:a0:4d:ba:a9:df:0c:06:de:bb:a3:98:30:54Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

99:34:1b:99:5d:0b:92:4e:e2:80:2f:a1:fb:9a:a1:b4:dc:66:e3:5cSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 409KB

.ndata Size: - Virtual size: 1.8MB

.rsrc Size: 293KB - Virtual size: 293KB

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 28KB

UPX1 Size: 5KB - Virtual size: 8KB

.rsrc Size: 2KB - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 348B

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 1024B - Virtual size: 996B

08b0635362e7aeb50569ca1a61d5a13f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 571B

.rdata Size: 1024B - Virtual size: 551B

.data Size: - Virtual size: 16B

.reloc Size: 512B - Virtual size: 210B

836f4951fb4175e54bfc7d7dac9c4c85

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Exports

Exports

Sections

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

65:0a:27:a0:4d:ba:a9:df:0c:06:de:bb:a3:98:30:54
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

99:34:1b:99:5d:0b:92:4e:e2:80:2f:a1:fb:9a:a1:b4:dc:66:e3:5c
Signer

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 409KB

.ndata
Size: - Virtual size: 1.8MB

.rsrc
Size: 293KB - Virtual size: 293KB

UPX0
Size: - Virtual size: 28KB

UPX1
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 2KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 348B

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 1024B - Virtual size: 996B

.text
Size: 1024B - Virtual size: 571B

.rdata
Size: 1024B - Virtual size: 551B

.data
Size: - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 210B

.text
Size: 103KB - Virtual size: 102KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 963B

.data
Size: 512B - Virtual size: 64B

.reloc
Size: 1024B - Virtual size: 588B

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 9KB - Virtual size: 15KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: - Virtual size: 48B

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 590B

.text
Size: 137KB - Virtual size: 136KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 19KB