Analysis Date2014-08-16 16:16:11
MD5188be1eb1827269c669b0d6efd36cda8
SHA10a14c04c3093192120cdd13ba0ad5e20403afb00

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rdata md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.data md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: 4af34e09cd38afe76391b3fcea5b0030 sha1: 174b3e53534e49621436ea43e818911901251c6c size: 12288
Section.vmp0 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.vmp1 md5: 0a037caac490ce453b35155737c48f76 sha1: d26133cf1d795f7f71864598cb7f68d267e0fe17 size: 1437696
Section.reloc md5: 95378f2bd4efd6606139bfdb1aa4021c sha1: 35ae05ab043426b697aedb0fa4f5eaec5db5dbd6 size: 4096
Timestamp2012-02-05 13:46:02
VersionLegalCopyright: 作者版权所有 请尊重并使用正版
FileVersion: 2.5.0.0
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
ProductName: 逆天
ProductVersion: 2.5.0.0
FileDescription: 易语言程序
PEhash41e1c273f19fa5ca01248e219ea6cd680394adef
IMPhashfd1f4da873df97e4c6613062d3de2da6
AV360 SafeGen:Heur.PWSIME.2
AVAd-AwareGen:Heur.PWSIME.2
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVArcabit (arcavir)Heur.W32
AVAuthentiumno_virus
AVAvira (antivir)TR/Agent.1458176.104
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. Webno_virus
AVEmsisoftGen:Heur.PWSIME.2
AVEset (nod32)no_virus
AVFortinetRiskware/FlyStudio_Packed
AVFrisk (f-prot)no_virus
AVF-SecureGen:Heur.PWSIME.2
AVGrisoft (avg)SHeur4.CADC
AVIkarusTrojan.Win32.Reconyc
AVK7Trojan ( 00256aa91 )
AVKasperskyTrojan.Win32.Reconyc.cagu
AVMalwareBytesno_virus
AVMcafeeno_virus
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)Gen:Heur.PWSIME.2
AVNormanno_virus
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)Trojan.Swisyn:HackTool.Sniffer.WpePro
AVYara APTno_virus
AVZillya!no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012014081620140817\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\kubo51[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\logo[1].gif
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\xiaoyuang.ys168[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\87dyw[1].htm
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\3d42_appcompat.txt
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\logo[1].gif
Creates FileC:\windows\svchost.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\logo[1].gif
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Deletes FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013061320130614\index.dat
Deletes FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013052720130603\index.dat
Creates ProcessC:\windows\svchost.exe
Creates ProcessC:\WINDOWS\system32\drwtsn32 -p 1264 -e 168 -g
Creates ProcessC:\WINDOWS\system32\dwwin.exe -x -s 364
Creates Mutex_!SHMSFTHISTORY!_
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!mshist012014081620140817!
Creates MutexMSIMGSIZECacheMutex
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSwww.87dyw.com
Winsock DNSwww.kubo51.com
Winsock DNSwww.le6tv.com
Winsock DNSxiaoyuang.ys168.com

Process
↳ C:\windows\svchost.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\logo[2].gif
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\logo[1].gif
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\logo[2].gif
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\3214[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\52shanhu[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\feixiandao.uueasy[1].htm
Winsock DNSwww.5266.me
Winsock DNSfeixiandao.uueasy.com
Winsock DNSwww.7798k.com
Winsock DNSwww.5213dy.com
Winsock DNSwww.3214.cn
Winsock DNSwww.0419dj.com
Winsock DNSwww.lelev8.net
Winsock DNSwww.ewasai.com
Winsock DNSwww.7799k.com
Winsock DNS7798k.com
Winsock DNSwww.1314521li.com
Winsock DNSwww.1314521kan.com
Winsock DNSwww.87dyw.com
Winsock DNSwww.llv8.cc
Winsock DNSwww.52shanhu.com
Winsock DNSwww.11111wg.com
Winsock DNSwww.6699kan.com
Winsock DNSwww.0419kan.com
Winsock DNSwww.66iu.com
Winsock DNSwww.le6tv.com
Winsock DNSwww.6625.me
Winsock DNSwww.11111wg.net

Process
↳ C:\WINDOWS\system32\dwwin.exe -x -s 364

Process
↳ C:\WINDOWS\system32\drwtsn32 -p 1264 -e 168 -g

Network Details:

DNSxiaoyuang.ys168.com
Type: A
222.73.47.229
DNSwww.kubo51.com
Type: A
123.60.89.22
DNSwww.0419dj.com
Type: A
59.45.79.57
DNSwww.6699kan.com
Type: A
23.110.26.14
DNSwww.87dyw.com
Type: A
192.187.97.125
DNSwww.52shanhu.com
Type: A
209.222.14.3
DNSa.uueasy.com
Type: A
42.120.63.199
DNSwww.7799k.com
Type: A
23.80.195.34
DNS39712.vhost13.cloudvhost.net
Type: A
116.255.200.174
DNSwww.le6tv.com
Type: A
DNSwww.5213dy.com
Type: A
DNSwww.11111wg.net
Type: A
DNS7798k.com
Type: A
DNSwww.11111wg.com
Type: A
DNSwww.7798k.com
Type: A
DNSfeixiandao.uueasy.com
Type: A
DNSwww.6625.me
Type: A
DNSwww.ewasai.com
Type: A
DNSwww.5266.me
Type: A
DNSwww.3214.cn
Type: A
DNSwww.lelev8.net
Type: A
DNSwww.66iu.com
Type: A
DNSwww.llv8.cc
Type: A
DNSwww.1314521kan.com
Type: A
DNSwww.1314521li.com
Type: A
DNSwww.0419kan.com
Type: A
HTTP GEThttp://xiaoyuang.ys168.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.kubo51.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://xiaoyuang.ys168.com/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.kubo51.com/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.87dyw.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.0419dj.com/nitian.htm
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.87dyw.com/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.6699kan.com/tongji/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.52shanhu.com/jueai.htm
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.52shanhu.com/1.htm
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.87dyw.com/wstv
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.87dyw.com/tv/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://feixiandao.uueasy.com/index-htm-m-bbs-cateid-6.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://feixiandao.uueasy.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.7799k.com/tongji/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.3214.cn/?jueai
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.52shanhu.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://feixiandao.uueasy.com/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.3214.cn/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.52shanhu.com/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Flows TCP192.168.1.1:1032 ➝ 222.73.47.229:80
Flows TCP192.168.1.1:1034 ➝ 123.60.89.22:80
Flows TCP192.168.1.1:1035 ➝ 222.73.47.229:80
Flows TCP192.168.1.1:1036 ➝ 123.60.89.22:80
Flows TCP192.168.1.1:1039 ➝ 59.45.79.57:80
Flows TCP192.168.1.1:1040 ➝ 23.110.26.14:80
Flows TCP192.168.1.1:1041 ➝ 192.187.97.125:80
Flows TCP192.168.1.1:1042 ➝ 192.187.97.125:80
Flows TCP192.168.1.1:1043 ➝ 209.222.14.3:80
Flows TCP192.168.1.1:1044 ➝ 209.222.14.3:80
Flows TCP192.168.1.1:1045 ➝ 192.187.97.125:80
Flows TCP192.168.1.1:1046 ➝ 192.187.97.125:80
Flows TCP192.168.1.1:1047 ➝ 42.120.63.199:80
Flows TCP192.168.1.1:1048 ➝ 42.120.63.199:80
Flows TCP192.168.1.1:1050 ➝ 23.80.195.34:80
Flows TCP192.168.1.1:1051 ➝ 116.255.200.174:80
Flows TCP192.168.1.1:1052 ➝ 209.222.14.3:80
Flows TCP192.168.1.1:1053 ➝ 42.120.63.199:80
Flows TCP192.168.1.1:1054 ➝ 116.255.200.174:80
Flows TCP192.168.1.1:1055 ➝ 209.222.14.3:80

Raw Pcap
0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   41636365 70743a20 2a2f2a0d 0a416363   Accept: */*..Acc
0x00000020 (00032)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000030 (00048)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000040 (00064)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000050 (00080)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000060 (00096)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000070 (00112)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000080 (00128)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000090 (00144)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000a0 (00160)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000b0 (00176)   73743a20 7869616f 7975616e 672e7973   st: xiaoyuang.ys
0x000000c0 (00192)   3136382e 636f6d0d 0a436f6e 6e656374   168.com..Connect
0x000000d0 (00208)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x000000e0 (00224)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f786961 6f797561 6e672e79   tp://xiaoyuang.y
0x00000040 (00064)   73313638 2e636f6d 2f0d0a41 63636570   s168.com/..Accep
0x00000050 (00080)   742d4c61 6e677561 67653a20 656e2d75   t-Language: en-u
0x00000060 (00096)   730d0a41 63636570 742d456e 636f6469   s..Accept-Encodi
0x00000070 (00112)   6e673a20 677a6970 2c206465 666c6174   ng: gzip, deflat
0x00000080 (00128)   650d0a55 7365722d 4167656e 743a204d   e..User-Agent: M
0x00000090 (00144)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x000000a0 (00160)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000b0 (00176)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000c0 (00192)   3b205356 313b202e 4e455420 434c5220   ; SV1; .NET CLR 
0x000000d0 (00208)   322e302e 35303732 37290d0a 486f7374   2.0.50727)..Host
0x000000e0 (00224)   3a207869 616f7975 616e672e 79733136   : xiaoyuang.ys16
0x000000f0 (00240)   382e636f 6d0d0a43 6f6e6e65 6374696f   8.com..Connectio
0x00000100 (00256)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x00000110 (00272)   0a                                    .

0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   41636365 70743a20 2a2f2a0d 0a416363   Accept: */*..Acc
0x00000020 (00032)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000030 (00048)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000040 (00064)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000050 (00080)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000060 (00096)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000070 (00112)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000080 (00128)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000090 (00144)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000a0 (00160)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000b0 (00176)   73743a20 7777772e 6b75626f 35312e63   st: www.kubo51.c
0x000000c0 (00192)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x000000d0 (00208)   4b656570 2d416c69 76650d0a 0d0a650d   Keep-Alive....e.
0x000000e0 (00224)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f777777 2e6b7562 6f35312e   tp://www.kubo51.
0x00000040 (00064)   636f6d2f 0d0a4163 63657074 2d4c616e   com/..Accept-Lan
0x00000050 (00080)   67756167 653a2065 6e2d7573 0d0a4163   guage: en-us..Ac
0x00000060 (00096)   63657074 2d456e63 6f64696e 673a2067   cept-Encoding: g
0x00000070 (00112)   7a69702c 20646566 6c617465 0d0a5573   zip, deflate..Us
0x00000080 (00128)   65722d41 67656e74 3a204d6f 7a696c6c   er-Agent: Mozill
0x00000090 (00144)   612f342e 30202863 6f6d7061 7469626c   a/4.0 (compatibl
0x000000a0 (00160)   653b204d 53494520 362e303b 2057696e   e; MSIE 6.0; Win
0x000000b0 (00176)   646f7773 204e5420 352e313b 20535631   dows NT 5.1; SV1
0x000000c0 (00192)   3b202e4e 45542043 4c522032 2e302e35   ; .NET CLR 2.0.5
0x000000d0 (00208)   30373237 290d0a48 6f73743a 20777777   0727)..Host: www
0x000000e0 (00224)   2e6b7562 6f35312e 636f6d0d 0a436f6e   .kubo51.com..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a                       ive....

0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   41636365 70743a20 2a2f2a0d 0a416363   Accept: */*..Acc
0x00000020 (00032)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000030 (00048)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000040 (00064)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000050 (00080)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000060 (00096)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000070 (00112)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000080 (00128)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000090 (00144)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000a0 (00160)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000b0 (00176)   73743a20 7777772e 38376479 772e636f   st: www.87dyw.co
0x000000c0 (00192)   6d0d0a43 6f6e6e65 6374696f 6e3a204b   m..Connection: K
0x000000d0 (00208)   6565702d 416c6976 650d0a0d 0a777777   eep-Alive....www
0x000000e0 (00224)   2e6b7562 6f35312e 636f6d0d 0a436f6e   .kubo51.com..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a                       ive....

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f777777 2e383764 79772e63   tp://www.87dyw.c
0x00000040 (00064)   6f6d2f0d 0a416363 6570742d 4c616e67   om/..Accept-Lang
0x00000050 (00080)   75616765 3a20656e 2d75730d 0a416363   uage: en-us..Acc
0x00000060 (00096)   6570742d 456e636f 64696e67 3a20677a   ept-Encoding: gz
0x00000070 (00112)   69702c20 6465666c 6174650d 0a557365   ip, deflate..Use
0x00000080 (00128)   722d4167 656e743a 204d6f7a 696c6c61   r-Agent: Mozilla
0x00000090 (00144)   2f342e30 2028636f 6d706174 69626c65   /4.0 (compatible
0x000000a0 (00160)   3b204d53 49452036 2e303b20 57696e64   ; MSIE 6.0; Wind
0x000000b0 (00176)   6f777320 4e542035 2e313b20 5356313b   ows NT 5.1; SV1;
0x000000c0 (00192)   202e4e45 5420434c 5220322e 302e3530    .NET CLR 2.0.50
0x000000d0 (00208)   37323729 0d0a486f 73743a20 7777772e   727)..Host: www.
0x000000e0 (00224)   38376479 772e636f 6d0d0a43 6f6e6e65   87dyw.com..Conne
0x000000f0 (00240)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x00000100 (00256)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6e6974 69616e2e 68746d20   GET /nitian.htm 
0x00000010 (00016)   48545450 2f312e31 0d0a4163 63657074   HTTP/1.1..Accept
0x00000020 (00032)   3a202a2f 2a0d0a41 63636570 742d4c61   : */*..Accept-La
0x00000030 (00048)   6e677561 67653a20 656e2d75 730d0a41   nguage: en-us..A
0x00000040 (00064)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000050 (00080)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000090 (00144)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x000000a0 (00160)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x000000b0 (00176)   35303732 37290d0a 486f7374 3a207777   50727)..Host: ww
0x000000c0 (00192)   772e3034 3139646a 2e636f6d 0d0a436f   w.0419dj.com..Co
0x000000d0 (00208)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000e0 (00224)   6c697665 0d0a0d0a 636f6d0d 0a436f6e   live....com..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a                       ive....

0x00000000 (00000)   47455420 2f746f6e 676a692f 20485454   GET /tongji/ HTT
0x00000010 (00016)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000020 (00032)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000030 (00048)   6167653a 20656e2d 75730d0a 41636365   age: en-us..Acce
0x00000040 (00064)   70742d45 6e636f64 696e673a 20677a69   pt-Encoding: gzi
0x00000050 (00080)   702c2064 65666c61 74650d0a 55736572   p, deflate..User
0x00000060 (00096)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000070 (00112)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000080 (00128)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x00000090 (00144)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000a0 (00160)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000b0 (00176)   3237290d 0a486f73 743a2077 77772e36   27)..Host: www.6
0x000000c0 (00192)   3639396b 616e2e63 6f6d0d0a 436f6e6e   699kan.com..Conn
0x000000d0 (00208)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000e0 (00224)   76650d0a 0d0a636f 6d0d0a43 6f6e6e65   ve....com..Conne
0x000000f0 (00240)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x00000100 (00256)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6a7565 61692e68 746d2048   GET /jueai.htm H
0x00000010 (00016)   5454502f 312e310d 0a416363 6570743a   TTP/1.1..Accept:
0x00000020 (00032)   202a2f2a 0d0a4163 63657074 2d4c616e    */*..Accept-Lan
0x00000030 (00048)   67756167 653a2065 6e2d7573 0d0a4163   guage: en-us..Ac
0x00000040 (00064)   63657074 2d456e63 6f64696e 673a2067   cept-Encoding: g
0x00000050 (00080)   7a69702c 20646566 6c617465 0d0a5573   zip, deflate..Us
0x00000060 (00096)   65722d41 67656e74 3a204d6f 7a696c6c   er-Agent: Mozill
0x00000070 (00112)   612f342e 30202863 6f6d7061 7469626c   a/4.0 (compatibl
0x00000080 (00128)   653b204d 53494520 362e303b 2057696e   e; MSIE 6.0; Win
0x00000090 (00144)   646f7773 204e5420 352e313b 20535631   dows NT 5.1; SV1
0x000000a0 (00160)   3b202e4e 45542043 4c522032 2e302e35   ; .NET CLR 2.0.5
0x000000b0 (00176)   30373237 290d0a48 6f73743a 20777777   0727)..Host: www
0x000000c0 (00192)   2e353273 68616e68 752e636f 6d0d0a43   .52shanhu.com..C
0x000000d0 (00208)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000e0 (00224)   416c6976 650d0a0d 0ae84510 5ee65c99   Alive.....E.^.\.
0x000000f0 (00240)   b42af6d0 75a2200f 57e0a28a 80053de0   .*..u. .W.....=.
0x00000100 (00256)                                         

0x00000000 (00000)   47455420 2f312e68 746d2048 5454502f   GET /1.htm HTTP/
0x00000010 (00016)   312e310d 0a416363 6570743a 202a2f2a   1.1..Accept: */*
0x00000020 (00032)   0d0a4163 63657074 2d4c616e 67756167   ..Accept-Languag
0x00000030 (00048)   653a2065 6e2d7573 0d0a4163 63657074   e: en-us..Accept
0x00000040 (00064)   2d456e63 6f64696e 673a2067 7a69702c   -Encoding: gzip,
0x00000050 (00080)   20646566 6c617465 0d0a5573 65722d41    deflate..User-A
0x00000060 (00096)   67656e74 3a204d6f 7a696c6c 612f342e   gent: Mozilla/4.
0x00000070 (00112)   30202863 6f6d7061 7469626c 653b204d   0 (compatible; M
0x00000080 (00128)   53494520 362e303b 2057696e 646f7773   SIE 6.0; Windows
0x00000090 (00144)   204e5420 352e313b 20535631 3b202e4e    NT 5.1; SV1; .N
0x000000a0 (00160)   45542043 4c522032 2e302e35 30373237   ET CLR 2.0.50727
0x000000b0 (00176)   290d0a48 6f73743a 20777777 2e353273   )..Host: www.52s
0x000000c0 (00192)   68616e68 752e636f 6d0d0a43 6f6e6e65   hanhu.com..Conne
0x000000d0 (00208)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000e0 (00224)   650d0a0d 0aae64a2 5010b0ec 6a3845e1   e.....d.P...j8E.
0x000000f0 (00240)   070f                                  ..

0x00000000 (00000)   47455420 2f777374 76204854 54502f31   GET /wstv HTTP/1
0x00000010 (00016)   2e310d0a 41636365 70743a20 2a2f2a0d   .1..Accept: */*.
0x00000020 (00032)   0a416363 6570742d 4c616e67 75616765   .Accept-Language
0x00000030 (00048)   3a20656e 2d75730d 0a416363 6570742d   : en-us..Accept-
0x00000040 (00064)   456e636f 64696e67 3a20677a 69702c20   Encoding: gzip, 
0x00000050 (00080)   6465666c 6174650d 0a557365 722d4167   deflate..User-Ag
0x00000060 (00096)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000070 (00112)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x00000080 (00128)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x00000090 (00144)   4e542035 2e313b20 5356313b 202e4e45   NT 5.1; SV1; .NE
0x000000a0 (00160)   5420434c 5220322e 302e3530 37323729   T CLR 2.0.50727)
0x000000b0 (00176)   0d0a486f 73743a20 7777772e 38376479   ..Host: www.87dy
0x000000c0 (00192)   772e636f 6d0d0a43 6f6e6e65 6374696f   w.com..Connectio
0x000000d0 (00208)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x000000e0 (00224)   0a3652e9 405499f0 62a12057 eb4cad56   .6R.@T..b. W.L.V
0x000000f0 (00240)   3562a710 554f6762 2df6245f b366a5ac   5b..UOgb-.$_.f..
0x00000100 (00256)   5f4f2712 66951a40 e10a3d21 12725115   _O'.f..@..=!.rQ.
0x00000110 (00272)   1b2559e9                              .%Y.

0x00000000 (00000)   47455420 2f74762f 20485454 502f312e   GET /tv/ HTTP/1.
0x00000010 (00016)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000020 (00032)   41636365 70742d4c 616e6775 6167653a   Accept-Language:
0x00000030 (00048)   20656e2d 75730d0a 41636365 70742d45    en-us..Accept-E
0x00000040 (00064)   6e636f64 696e673a 20677a69 702c2064   ncoding: gzip, d
0x00000050 (00080)   65666c61 74650d0a 55736572 2d416765   eflate..User-Age
0x00000060 (00096)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000070 (00112)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000080 (00128)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x00000090 (00144)   5420352e 313b2053 56313b20 2e4e4554   T 5.1; SV1; .NET
0x000000a0 (00160)   20434c52 20322e30 2e353037 3237290d    CLR 2.0.50727).
0x000000b0 (00176)   0a486f73 743a2077 77772e38 37647977   .Host: www.87dyw
0x000000c0 (00192)   2e636f6d 0d0a436f 6e6e6563 74696f6e   .com..Connection
0x000000d0 (00208)   3a204b65 65702d41 6c697665 0d0a0d0a   : Keep-Alive....
0x000000e0 (00224)   d2c1c32c b48e9ac6 09b10877 6db427b9   ...,.......wm.'.
0x000000f0 (00240)   04263a11 cc514684 b3498842 131e03c0   .&:..QF..I.B....
0x00000100 (00256)   8a2c228a 9e74407c f9218526 f2232c05   .,"..t@|.!.&.#,.
0x00000110 (00272)   01213f34 b95278e8 35a88794 86340999   .!?4.Rx.5....4..
0x00000120 (00288)   468e5642 271c94c6 21c4c1c2 08f901     F.VB'...!......

0x00000000 (00000)   47455420 2f696e64 65782d68 746d2d6d   GET /index-htm-m
0x00000010 (00016)   2d626273 2d636174 6569642d 362e6874   -bbs-cateid-6.ht
0x00000020 (00032)   6d6c2048 5454502f 312e310d 0a416363   ml HTTP/1.1..Acc
0x00000030 (00048)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000040 (00064)   2d4c616e 67756167 653a2065 6e2d7573   -Language: en-us
0x00000050 (00080)   0d0a4163 63657074 2d456e63 6f64696e   ..Accept-Encodin
0x00000060 (00096)   673a2067 7a69702c 20646566 6c617465   g: gzip, deflate
0x00000070 (00112)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000080 (00128)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000090 (00144)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000a0 (00160)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000b0 (00176)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000c0 (00192)   2e302e35 30373237 290d0a48 6f73743a   .0.50727)..Host:
0x000000d0 (00208)   20666569 7869616e 64616f2e 75756561    feixiandao.uuea
0x000000e0 (00224)   73792e63 6f6d0d0a 436f6e6e 65637469   sy.com..Connecti
0x000000f0 (00240)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x00000100 (00256)   0d0ae74a 70547270 6113a5e1 83cc49e2   ...JpTrpa.....I.
0x00000110 (00272)   4a81b20e db71                         J....q

0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   41636365 70743a20 2a2f2a0d 0a416363   Accept: */*..Acc
0x00000020 (00032)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000030 (00048)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000040 (00064)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000050 (00080)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000060 (00096)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000070 (00112)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000080 (00128)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000090 (00144)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000a0 (00160)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000b0 (00176)   73743a20 66656978 69616e64 616f2e75   st: feixiandao.u
0x000000c0 (00192)   75656173 792e636f 6d0d0a43 6f6e6e65   ueasy.com..Conne
0x000000d0 (00208)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000e0 (00224)   650d0a0d 0a1fa081 1a18a109 f8c30b18   e...............
0x000000f0 (00240)   61ee52af f20ca09f 764015c4 60         a.R.....v@..`

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f666569 7869616e 64616f2e   tp://feixiandao.
0x00000040 (00064)   75756561 73792e63 6f6d2f0d 0a416363   uueasy.com/..Acc
0x00000050 (00080)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000060 (00096)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000070 (00112)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000080 (00128)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000090 (00144)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x000000a0 (00160)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x000000b0 (00176)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x000000c0 (00192)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000d0 (00208)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000e0 (00224)   73743a20 66656978 69616e64 616f2e75   st: feixiandao.u
0x000000f0 (00240)   75656173 792e636f 6d0d0a43 6f6e6e65   ueasy.com..Conne
0x00000100 (00256)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x00000110 (00272)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f3f6a75 65616920 48545450   GET /?jueai HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a41 63636570 742d4c61 6e677561   *..Accept-Langua
0x00000030 (00048)   67653a20 656e2d75 730d0a41 63636570   ge: en-us..Accep
0x00000040 (00064)   742d456e 636f6469 6e673a20 677a6970   t-Encoding: gzip
0x00000050 (00080)   2c206465 666c6174 650d0a55 7365722d   , deflate..User-
0x00000060 (00096)   4167656e 743a204d 6f7a696c 6c612f34   Agent: Mozilla/4
0x00000070 (00112)   2e302028 636f6d70 61746962 6c653b20   .0 (compatible; 
0x00000080 (00128)   4d534945 20362e30 3b205769 6e646f77   MSIE 6.0; Window
0x00000090 (00144)   73204e54 20352e31 3b205356 313b202e   s NT 5.1; SV1; .
0x000000a0 (00160)   4e455420 434c5220 322e302e 35303732   NET CLR 2.0.5072
0x000000b0 (00176)   37290d0a 486f7374 3a207777 772e3332   7)..Host: www.32
0x000000c0 (00192)   31342e63 6e0d0a43 6f6e6e65 6374696f   14.cn..Connectio
0x000000d0 (00208)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x000000e0 (00224)   0a650d0a 0d0a636f 6d0d0a43 6f6e6e65   .e....com..Conne
0x000000f0 (00240)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x00000100 (00256)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f777777 2e333231 342e636e   tp://www.3214.cn
0x00000040 (00064)   2f3f6a75 6561690d 0a416363 6570742d   /?jueai..Accept-
0x00000050 (00080)   4c616e67 75616765 3a20656e 2d75730d   Language: en-us.
0x00000060 (00096)   0a416363 6570742d 456e636f 64696e67   .Accept-Encoding
0x00000070 (00112)   3a20677a 69702c20 6465666c 6174650d   : gzip, deflate.
0x00000080 (00128)   0a557365 722d4167 656e743a 204d6f7a   .User-Agent: Moz
0x00000090 (00144)   696c6c61 2f342e30 2028636f 6d706174   illa/4.0 (compat
0x000000a0 (00160)   69626c65 3b204d53 49452036 2e303b20   ible; MSIE 6.0; 
0x000000b0 (00176)   57696e64 6f777320 4e542035 2e313b20   Windows NT 5.1; 
0x000000c0 (00192)   5356313b 202e4e45 5420434c 5220322e   SV1; .NET CLR 2.
0x000000d0 (00208)   302e3530 37323729 0d0a486f 73743a20   0.50727)..Host: 
0x000000e0 (00224)   7777772e 33323134 2e636e0d 0a436f6e   www.3214.cn..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a                       ive....

0x00000000 (00000)   47455420 2f746f6e 676a692f 20485454   GET /tongji/ HTT
0x00000010 (00016)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000020 (00032)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000030 (00048)   6167653a 20656e2d 75730d0a 41636365   age: en-us..Acce
0x00000040 (00064)   70742d45 6e636f64 696e673a 20677a69   pt-Encoding: gzi
0x00000050 (00080)   702c2064 65666c61 74650d0a 55736572   p, deflate..User
0x00000060 (00096)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000070 (00112)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000080 (00128)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x00000090 (00144)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000a0 (00160)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000b0 (00176)   3237290d 0a486f73 743a2077 77772e37   27)..Host: www.7
0x000000c0 (00192)   3739396b 2e636f6d 0d0a436f 6e6e6563   799k.com..Connec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a 0d0a0d0a 636f6d0d 0a436f6e   ........com..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a                       ive....

0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   41636365 70743a20 2a2f2a0d 0a416363   Accept: */*..Acc
0x00000020 (00032)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000030 (00048)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000040 (00064)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000050 (00080)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000060 (00096)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000070 (00112)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000080 (00128)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000090 (00144)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000a0 (00160)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000b0 (00176)   73743a20 7777772e 35327368 616e6875   st: www.52shanhu
0x000000c0 (00192)   2e636f6d 0d0a436f 6e6e6563 74696f6e   .com..Connection
0x000000d0 (00208)   3a204b65 65702d41 6c697665 0d0a0d0a   : Keep-Alive....
0x000000e0 (00224)   61323230 30662035 37653061 32386120   a2200f 57e0a28a 
0x000000f0 (00240)   38303035 33646530 2020202e 2a2e2e75   80053de0   .*..u
0x00000100 (00256)   2e202e57 2e2e2e2e 2e3d2e0a            . .W.....=..

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f777777 2e353273 68616e68   tp://www.52shanh
0x00000040 (00064)   752e636f 6d2f0d0a 41636365 70742d4c   u.com/..Accept-L
0x00000050 (00080)   616e6775 6167653a 20656e2d 75730d0a   anguage: en-us..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20677a69 702c2064 65666c61 74650d0a    gzip, deflate..
0x00000080 (00128)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x00000090 (00144)   6c6c612f 342e3020 28636f6d 70617469   lla/4.0 (compati
0x000000a0 (00160)   626c653b 204d5349 4520362e 303b2057   ble; MSIE 6.0; W
0x000000b0 (00176)   696e646f 7773204e 5420352e 313b2053   indows NT 5.1; S
0x000000c0 (00192)   56313b20 2e4e4554 20434c52 20322e30   V1; .NET CLR 2.0
0x000000d0 (00208)   2e353037 3237290d 0a486f73 743a2077   .50727)..Host: w
0x000000e0 (00224)   77772e35 32736861 6e68752e 636f6d0d   ww.52shanhu.com.
0x000000f0 (00240)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x00000100 (00256)   702d416c 6976650d 0a0d0a              p-Alive....


Strings
8..
..
.
..
.
..
. +
..v
.
.
.
.
.Q
5.
6[
A
.q6
.
....
.F[
.....
c.
..
....
.u..
 ...
45..c....t.`
..ON..da
s.
]m..
..
-~.
L
.
.
.
h
A....
.
.a6

080404B0
2.5.0.0
Comments
DEFAULT_ICON(
FileDescription
FileVersion
(http://www.eyuyan.com)
IEXT_IDB_STATEIMAGES
LegalCopyright
ProductName
ProductVersion
StringFileInfo
TEXTINCLUDE
Translation
VarFileInfo
VS_VERSION_INFO
"!~%~,~
)+<@_+
0}2Pk<
0(4h+ou
04"x`hX@pl\
0(4"`X@pPl14
+0^6}V
0 $<8,
0_81cI
08($&DhlxXHp@tpdx`
,08h~)f
0'8kTx
}09Xjz
0B+Cey
)0 b@M
0B)OtlG
0c,a4S
[0Ckk;
0'?;C,p
']\/0d
0 &`\d|
0	@{"d1
'0@db(#t
0, &dDxpPhL
0Do!A)
$0 (dpX\Tt@xlDPdl
: 0ecM
=0el=tt=}
0F\<<Fh
0F\Y0j\SteG5
0F|Y|CteG5
0GDI32.dll
0gl;LQ
,<0haeu
0<hgtw
0<hlhu
(0"|\hLP@Y
"0=hY,
0<I0F$#
0JL!Dt
)#+0lH
0m-ca>d
0Mskaf
0$(NHPxlDL|@`Y
,0NltLxpPHXP`|XL,
0NlXdDtpHL|hxhL,q
<0$NT|@`tDldpPXH|
 0$NX|tdL@px@TDtT
0 ,&\|pHd`hLxDPx\
0$,"PTdTx`hpXL|hp
,0(&P`xTXH@dhLt``
0RfK/Fx_f
+>&0sT
0The procedure entry point %s could not be located in the dynamic link library %s
0"`\thpLlD
}0<v<Z`p
+0/WBO
)0WSHY
0x;',(
0-X18,
0"xD`Tl1
,0"@X\`dTPpp1
)0}XP'<
0Yee'~
0Y@lliF
0z.dF;
)10s=;
1(1DeRoC
}1(1_g
11k?\1)
@1(1@psiD-
1 1@SteS
[13CSW
1'3kMO
1,$	5J5
19[kUbt
|1|aerC
1agekUO
1@aMCL
1b+*r	
\1|CgtS-<,
1|CteG5|
1d7F<)
,1\daoL
1ddaoL
|1|delo5d.gl5
1didoM
1diVtP
1dMteG5d
1dratS
1DTteG
>1}EQU
1`ertS-`
1@etnI5cesr510
-1,FHYHbmoC
`1`FteG
1|FteS
1 ,^GtQa
{ 1)Gy
\1h5Yx-
|1|hCsI-
1hevaw5PtuO5esua
@1hFteS
1HotPL
$1HsulF
 1HtirW-
1htluM
1HTteG5Zemi5
1HTtxE-H
-1HwarD-Y
1ISUJ3S[q
1iuUp}
1)kaYm
1lacoL
1laerC-
1levaw5F
1@llaC
1lrpsw-F
1LSgeR
1lSteG
1`LteG
1ltpmE51
1LWteG
1lyarG
\1\MteG
\1\MteS
.1N{$`0#m
`1\PdnE
1PFslT-
1pnepO
1pSteG
1PvaeL
\1\rahC
`1`rtsl-
<1`SteG
!),&#1Sw
1tacoL-
1tbolG
1TEniW-T
1TlcxE
1TpaeH
1trtsl-
;*1twf
)1$$us'|!
1`WteS-
1xaerC5x
1XCteG-F
1XDteG
1xFelO
1XWteS-
	1yBs=
1ZLHg-N
2{[^#+
2#$%[0{
-2@$3)
25J3n{
2,7/i"
2`G#bJk
2gi_sq
2{h6$Kt
#2!i{$
;2i}1M
2ka ;V
|'2kd4
2k&T\Ptpd|`tD@|H
>)_%2Q
2Q$h.w
2QLCPU?
2;Soo/S[
&2T*L^
2y_tMw
2z==b=j=R
30u4[y
3<1F,2^
31ZL;p
33he|w
^3_#4b](Oa
34;T9	i?
_35_^<MN
3$6NQ/
3B,]GW
3?C;XshK4Z
	3Dg(Ap
3e>!MRZ
3F,}+=
3>F+kw
3fzqcq
[3hgg$
`#3hX\
{3I_bF
'^#3Ik
3,_.Jc
3jC[G7
3k}vP'
3.;nS>
3oaO e
3oEa![O9}a;
3qn@?g
3"q?>X
3s0[wSOA
3#!Sq{7
	3u[ !
3[U-Qm
3)'w$a
3W-%Jx
3W.kn/
3)wwzm
3%|z3==
(<4 ,$
4%||$%
40<$,8
4< 0(haRf
4<,0hThw
4<,0N|DT`dXPxPH@l\
40NTL1<
4$0Nx\x`XTpDL
 (40&pPTtLd`|
?40S7"
:415j8
46Qtt_
48hUcu
, 48`l@pHd\XThT|
|_4[a&
(,4BN5
4c<aq*Lg
"4Dagl
4D#K% 0
/4;Eo;ao;]o;yo;
4FX14FX1XMteG
4Fx$$Fl
4Gwcoyi\tN
4_gX[3k
4hB6c!
4,<&hd|lX@tD|\10
($4"HD`xhL@t
4%I6`0
{4iz>ObK
,4k;5G
_4lJJ=
(4"Lxtd`h|@tP\tp
4&mIi~
}*4Mn|
?4*msc
4N.kVS
,$4"`\p\DPL|@xd|| 
 4(&Ph`|@lTXP\H
 (4"p@Lt|l\TDxXPH0
4"PT`|dL@DlH@px
4"PxDD`l|LpX\dL
4:sR8b>D
4sZ3ay
4+^tc?
4&td\pPhx|PD@t\4
,<4"TH`hxY
4&|t@pX\TLLhd\p<
4"`txLXHD|`dPhx 
-4-uQqX
4wD:$J>
&4W,n%
$<4"XDpdxTP\hhtX|
4"XdTlpD|\Xj
4&xhLtTpdXtl
4"\XhPd|T`
&50eS81
50IX.[
5-}\@3
%@56XX
<5-7I`
5;9?=c
5AT,Q	
5bS+>S
5c$eoA
5CicAd
5C{kut
/5clWT
5Cy)n	
5^D{]1
5DX$$4
5f 0B]
5G;79e?[=
!5=G{ma
/5goCo6
5jXtceR5Y$
5L1DPdnE
^5[$M{
5]&okc}
5P  <8$
5!pfut
[5@'Q.
5q9=?]
5qaZT?
5r:lZ[
5rX)VT
_5T0b;
_5T[b;
5T JF)
5T]m9H
5T%U0l)gFF
5-uw4o
[5UY0E
5;W!OO
5yn{+j
5YtnuoR
64	]05
%`6a f
6-bPDhr
6~cHQ5r
6co	eE1
6{eWY8
6gf~[W'
6h1l]L
6HltdxTD
 6HS_{}4
6"`\LHt|PX`dTTT 
6'L+QA
6Lv;D1
6n?mdY2
6O8.n-
6oL aehA
6:!oSz
/6RxY/#2!
*6.T|-
"6tCRif
6t}&$J
6"tl\LPH@|@Ddll
6"T:^S
 6TUy]
#6u+fCd
6"ujk3
[+6!#:v
6v4FtQs
6V:;)Do
6#vg{}
~6v!WXStf
\6W*>:
[{6wIo
6(ww+gB
6	X8KP
6XE?9<\
|6;YVh
6ZTc2"
+7@4i3z/
7#4s^k
7$$5_T>!
795{`uf
{7bsEv
<7cs~~
7di&}u
,!=7eg
7;eI=3t
)7*g!}
:7-H?D
7hg{S#
%:7hjwQ
7HpS&3~k
#7'<i#
7|JS\@Ri
7Ke7!$
7Kee($
7L5<;l
7|mD%4
7md?/K
7n<I~=
_7oqDH
!'7Q$);'
7Rz?2j
7?t'z5
'7X.,|
7Y{`c,p
7+YI!<
7|zdH~u_
7%z<Iq
,]>8/$
?~@+)8
+?8!)+
<8$,0 
-\`<80
(<$,8 0
(8<,0$
804N|TPl`d\xH10
"&80%)<M
80&\X|hxP
81XaerC
=8:^(26
 8(4<,
8($,<4
84($0&|@XdHtpT`Px`
}84AN7
84&dP1<
8$4&Dtt@LXl
84 ,<h
85na[32
"'8+"'8
$); "&8!"&8
8AD7#-
!.=)8C
8cQb+N
8&@dXDHTlP
8FNe=<+
.8@/)h
8$h6$f
,8("`hHp|DT@xXt`H1$
8,hR0f
(8#[I$
{8JcT7
8Ju;N=S
{'8k[2
8kdnac@
)8leC=y!0
!"8Li.
 8(,<&ltxXL
8+MANc
8N%5&Au7B
"&8n!%7
8 NhXPdL@Dp|`tdH(
8NL@tXHpxDXPhlp
8Np|LdT@XPLHt\H01
8NTld|xt@LlphTl
8Ot5+N
+,8p4>YC
8Pdo1r
8pdt\hTLPl|H`
8,$&PpL`T\DXXl|PP
8<, &Pp|tL`@l`\
,8|Pp`t\T@hHx@
8qptseD-
(8#rO$
%%8Sm=
8$&\@tdhLXDpHlHP
(8"tDxhT|
*8T?nC
8"@Ttl
<.8UNS
@8 v%=p
8.V+Uf
8"xL`tHP@ddDXTD8
"{8,Y=)
"&8y"&8@!'8
	8yU[w
8YVM5?
$*}[9,
%95Uwt
]+@96?&
#'98'+>
\+`9'A5
9AS_Q5SQ
-+9Bau
9@c_F:
9c@=i~
"(9d"&8G"&7
_9d#Y_
9]ehrf
9(eweK
9;G^{n
9g?S=s=
9h8NTdLD@PX\Lt|pP
:9h9Ru
9He8ET
;)9I?/
9i&H/m
"(:9KS_
9?[!l~
}%9N%sC
9Q^{/+
[9QCV!
9SkMea
9.stuKr]
)9ubqu
9uUg	~
%9:YoCt
a0A(Uh
a[%?0N
	a13FI
a1h79g
A[$1_l
!:a3}3CS
a\+37g
)A3-9%
a5cuU1#
A!_)5#Ql#E
a?66FV
<A[6T<
a#6xJ{
A71j($*
a7S,!8l
#A8a>gP
a8.ekt
,A=$8x
a)9"g2
acit-P
^a>cn\[
\acoL-
Ad2Ti_Us)
ad\eKP
_ADGKc|
adil-F
 adOJ}
adqK"C
ADVAPI32.dll
a~:.}&e
aECpr_
Aeg-xT\`
Ael-DxX|L@L$
a}Eos0
|aerC-
|aerC-cIet
aG`%2T
Agni-F
Agn-|@pTXDHxX
aGQ}G'
agtcmc["R
'!"|}AGW
aHf>y8tc
Ahg#'`5
"ahKf5(
aHla5L
a&|HtXLxl`
a}	j",,
a<JW4c
aJXVl(#
AKdDxh`tP,
AKdLxXXlLX<
AKGgKd
aKgs[|
AKLpthhd|L
a+knM%
<Ak.o=z
AKPtp8
aKui<3
[A[k'X
AKX|@p 
{'|@\aky
A.lUnG
a+`@lV
am5D2M
}am[]ga
	Aom[V
Apa5PTL 
A}pE#K
|Apmc5|
+aPSA?Q
aqS}K|
araP-F
A*ry$,
as+f!q,
Asgn5h
A:S!S{g=:l
*?"!At
a@t4#Qs
at.;bOCA
AT$ip1
Atu-Fh
`au<6|>
&auMvUA
AUv*p"j1T0
av8$Au
a?#w#3+
~AW-8,
aW no*
"aW&[V
AxE-TL,
a"`@xhdpH|
AXs%^#
A[X-X[
Ayra5Fd
Ayr-dTT|
#AZ)R!a4hg
B)/}_:=
)b>1Et#
b,>1n3_~_
%b2?HiS[
b4nfVj#-
\B8m1,
B[A/9XM'W
B_AoAh)
!B"&a[P
`bbaT-
BbFDW6
=,=B/`c
bc$l`U
|b!Cqm
"[BC`u
BdFJ[.
b"DP`\|xLTx@
bEaMJ5
)bE,d]
Bega-D
bEm4#N
bEs'#~H
bE-tXK
bGC`X-
BGgS#g
(B)Gh+
B-g?h;0
^ BgXg
bHoEDHoyzHo
bHoE[Ho
bHoElHo
);BI7TG'1
\]bJg%
Bk~G'K
BL\00,8
bL%Kud{[
B:=~M+
^bn7]28s
}bnd!B
bnkCBY
b n+r5
b Ntx@`D|xXHp\LH4
)b]OAV#
Bo#CXxW
Bo:HWt
>b;p.ZT
B#r.&s|
<BT`8V
bUc{k8
b'uoPu	
bu"Tdhp\L|Dlt`h\
bV/eGa
B]VR%*O
bWGvJT
BW##XQ,
b&x+#^
b&xR#ET
b'y!/$
bYe!-k=
^@c!/,<
c1JUCHa1P
C2+3{;
c&3c^ll
c!3Kc!
!c3m|'
c/4"&g6E
<_C4*U8
|	_C71+=
c7C\|(7
=c7K.I
}c8gcJ
c\#90 
+_CaEe>k
c;aK0S?>;
C'AkGE
CAu!H#
CBSa#q
cbY;Cf
+c'#+C-
c\c=35
=C)c(7
!cCa_<
Cca$IV
}C"c]f
$CciJn
C}$CN6
C	cO\K8
cc}uko
C"Dhtd
.CDp*J
CDw5\PXxll|DX@
C}eEKIO
%!(CEj?:8
C'emyp
<cEQ .
cE/seJ
c@E.u\
_=&C#[f
^$CF]{-
cFv.E<
|CgeR5
*cGVJA
C)gxu,
c#	H%!^
ChooseColorA
>)C%;I}
CI Hn."
cino-p
%C]i,X
$	<CJ(
Cj;is1
c'JkCL
C/;JP&E
C%K37AJi
=CK3c(c(
c';k3K
C^KA%\
CkglaM
C#K	HH
	Ckl!"j
+>]cK]q
c&K$W-*
Cl7+%p}
Cl##{e
CLe@at
ClosePrinter
c"Lp`P|tl@`HXL
`CN#^9p
(c nm7R
CnVVt[ArG2Au
c=.NYe*
)#Co[!]
C,]~O[
]'cOe;H
Cog;Sg
col5LPd@\``d,
coll5Fx
COMCTL32.dll
comdlg32.dll
;Cp#4L
cP7!C7
#)cpeo
cPSc|'c
cpX55a
CQ4Fv5
)c&Qa"
&C+QFW
c q*Km
(cQo{u
<cqp+'
	cRmCi
c.#R~Z
CsEHU+ 
,*C#?s]G
!C#smU&
\CteG-\
`CteS-`
 %	cT;g
:|c;TR
Ctxe-1\TteG
,C=u-]
%C)?>U
,cu7+3
C"{VU|
c?Yk.n
<C,YpK
CY|+!y
c(z1|h
Cz"9l6]d{
Cz]s[u
D@0<8,
d+0^O"
d1daerC
D1DNteG
d1dtixE-corP
D1DWteG-odni-ceRw5FD
d1xdaoL5
	D&;+2
d.235ll
D23IP-
#d2EZd4"F
_D~2w	
"d3[#A
d#4[F#
d5B'_;7$E
#d5>.d
d6Ei/u2
d6$' k
d7<0Vv
d7Po?'
%[(d7v
:|D8z6
d-a}\"
DaerC-j
$d'B11
db\rt%J
'd |C]
DCDet-D
d@c'ku
dCn_=,v
D#@c\x
d{cxBuAa
D CXS0
d_)d2fk
&|DdH`pTPlt\|@<
@dDHT`XH0
_dD Je
ddjK&3
DdJram
\d@DLlt`x|p
DdLp|\hTl``8
\dD`lx\h@`d
DdniF-
("|\Ddq
DD]t<!
&d`\D@tHhxxl@T$Y
"|\@DdtXxPH
De?2\T
#de4[Ru
de%(_I
Dekov-
DeleD-
demo5Y
dEteG-
DFoaB$2
DFteG-Seli
dg'1"_
@d]G$e
Dg "[E
[DGH:F
dG|nad
dGth!C
dgU^}x
D@\h`@`,
-dH,4(
"DhdtHTlt\X`Tx
DH'$fD
`|DHht@dTLB|8<
dH\l`LY<
DHLX`XL,
dHniW-
DHoybHoE&HoqMHo
DHoy|Ho=
DHoy(Ho)HHo1RHo
$,&d|\HpTlHDtL|L$
"\dHPXTxpdltT@
dHt\T\DXL`|tXj
<&D|hxPH
Didim-
DIlr-FX
DI-mcP5
d+i!ms
DjLdaoL-Y0
~>.DJ|uZ
DkBH0#
d!$:kC
d^k=I>J
dk]KYa/
dKPL`|HHX@t
"dkqs5
dKu@]hLM
DlaeR5Pezi-
~d!,ld
DldppHXL
dlp)!1h
DLpdP`\@pY<
dl\pPdP8
"`dl|P@XhH\HD| 
"DL@TlpHxTPhhh
"`@dL|T\pXDdDD 
"D\@LxHPl`pXLT
D|L\XPdd@
d&LxT\@h`pt
<&DlXt\Px@p|dp@
dM0A)E
[>d{M[1
dm2K*#
?DmD.k
<d@Mp40H
DMteG51
DMteG-asse-
d_NaFw
@dneS-
dNk{XF
d?-.nS
*}`DNUNw
d.nWv&?
/ %D$o
	Do7T'
doMt5e
dopwe5d
DOscCsM
dOteG5
!dPA[h\
DpDltxd 
dP`Dt$
"Dp\hHlPLXx|XH
|@D\PhlL@`$
"|Dp\h`PlpLT\@<
"DphXLPd@Tt\|l
"dp`\lX
<&dP\l|`XLxtl\d$
DplX|\p@TxT(
DpP`Lh|dXpx4
DPp@tXld
DP`TdXLXh$
&dP\@XhH|`L`
.D/qD6
d}Q?M'
d+qT	W\c
dsffO5
ds"{)Q
DT}#C)
Dtd_N/uE
`DTDPH8
"DTdt|p@lH`PHH
`Dt@hPxXLlThT 
"Dt\H`Th
d"tHT|xP\ddh``D4
&D`|Th\@Y
&dT|LDxHt1
DtlXH\L`PpBt
d""T\|PD@`Xxddp\
DtTu8m'
\dtx1(Y,
&D@tXLHxPh\|Dl1 
"dtx`@lTPY
}duMPl)
DU&pkq
DUR)o7l
dv trloO
d\&~W]
dWY`d1
"|`@DxdTpHXh@`<
dxEtx-
&dxHHhTDP
("DxhHX@t|h\Pl@
D@\XHpPlt`
&DxhX|@lpD`T@L
dx`lDpxLH@L
dxlLPXlt4
@|dxl`pL|Xhj
D$>xOp
|@\dXPD`xpLlDj
`dxP@L\ttl
&dXPt@LH\hPl\d$|
dxptXPlp
"DX`TdHxtxhPpp
"dx`tH|hLhlP
 &dX|TH@tP`Y,
d|XthXh
"D`@XtLHPXpT@@j8
$"dXTY<
"`DxY41
dXyh9We
!D(YCn
DYDaerC-
dYdwarD
Dye	dZ
dy#kAQU
.dzAk/
dzQGDD
e#(<+#
E>0pw'
=,e2(0yS
^E4#:|
E5J?cKG.
e5![kt
E5/ovT
E#_6+&
e6(%[6X(, 
e7,FNCn
E'7k5K
e}7Q;;
E8/,p(
E8!#=uF
)EaL]y
_E%}c>,
{e'cBL
ecru-\
(E`cWt
%	}e d
%"eD}+
e$!d/e
/eD]V nI
eE<mk&
\eerF-
e*eT]8
Ee	u.F
Efi6,V
e;G2+(
Eg9Xl%k
eGC~.?
EGJ "o
eG)urj
egUU5!V
eH4sPS6!
EiDa6z
#Ejgsb
ek1Eq756u
EkeV#3
eKhLhHt
eKLtxth
eKT\hXDPXd,
$e#kw~
eld5HTttphp<
@eleD5j
E"lhT@P|Hp1$
!ELuss
ElyokDW
e->!M`
(E!@%m
/eM9Nz+
!e+M_d
eMks-erFm
EmS-A9
Em<,=U
E	N\F9
.eNJ`}
@eppU-@
eP&uX 
EQv!_N
>eraL3
(e;!rC|g
[+ER_g
erhT5eMda5Y
eRla5j
'>/ER#q{
eR-uU]
>/;es6
e\[SA'qn
etel-motA
e:|'Tk
/;ETnK
ETqB(k+
Etro5\
eU# |)
E+u41m
Eug;_a
e&}wS"
exEl-T1XlehS
eY3dm`<
eY[Ei9V
e".yX}G
ezi-hltxPP
-\( ,F
F1LpaeH
F1+wE$
F1@WteG
f3A-`0
f"3GNzO
f3%$Ji
":f#4%\
f.[5@,
F5RPC^
f7A5S;i
f.85q,Fd
F{+9Bl
f:9-PY
fB@5P1@banE51
~F)>bb
(^f!c*
<fc5<L
fC"caS
fc#CuI&
,F))C(E
f/C.wK
FcXwl^
fddKG]
FDYDPteG-
fE#5x1,
"fEHCd
f:E-P1<
\$fE[R
,fESc-
Ffj/d#7-
f).]fx
Fga\tIc
!FGi>kq
fGq$kX3
FgT]pKc
Fh1$Fh
Fh1hidim
&%+(FHP
<Fi]1:
fi P|/
Fi>'q;
Fiw<~_P
fJ35p1
fj5KgIc}4
fJA5\j
,Fj FH
FjhbolG-h
`_[FjKt
:fJ$Y'
_Fkf;c/
FkiVdu
f+k{K3
!F!@kq
fkq9ie
~,fk;s
fKZ-dj0
~~fLN+<X
\F-l"V
fM35jTLEHS
/fok2V
-f?p|[
Fp1pCteG5
f.p5q$j YDbolG
FqPaerC5P
'F"rCd
]"FRz'
>`Fs%h
fsO|)vc
F(sY}a
(FT,0F
f>T[!A
F !TB7
f(-"tL
f>--tY8
F\Uhyu
FU?y7U
F+v>d#
FV*dU{W.
Fvf3de
%FVNVd
FV&S)6j
fWDN7c
F~wk/:[RC
f:W>x|
[f~xPD5,W|
Fx<V[8
fYd73N
FYdMteG-d
F|Y|dniW-
f"y-`F
 FY Fx
Fylo-Mlli
f"y-@xh$
FYxpaeH5x
g15L,/
g;3#"?
g3"|dxH@Ll\ttT`H<
G4dE	v
G~4f&kk
g!4Irc
G4Q_UlS
)g]5AmS
[g6lFe7
g:72jG
.~	G[7EA
g8zY3<
G &b/P
<'"g	c
GCA-7m3=
GCd#&'
>%GcGe
g cH."
g'[?,D
g"DtLlx\Td|@`xP
%+GDY5Ap
	Gec]q
&GE,g>
g'ekki
GEKt3A
GetModuleHandleA
GetProcAddress
GetVersion
g%fhW5S
G<g#{-
^g;G`1
G.g`ak
GgmmLE
gHoACHo
gHoAnHoY
gHoAZHo5~Ho
GHoMZHo5(Ho)!Ho
GHoMzHoY\Ho
GhW/9YHS
|Gi}4l
?GIA"{
gKO8,s
@gks TJ
{+gk$'Y
gl1K|n&/
g/ljK["
}g[LQ7
g&|Lt\pxH`TDXLh<
glU_mk2W
GmBgNn
GmBTn_
gM,HT,b
^gN\P|@HlpDLd``t
.gnr+g
Go3MOAe
`G,^Oe`
	~GO$g
'GokI=
gOo(8Uw
Gop!Q}
g_oTn	
gPnTE+
GPtaa,W
;g~QA/
gqKFew
gq}KH]
 GqQ:R
GS%:(;
gSHO7;
GSIook
gsq1 0
gSq1SF
!G*"T,
G`tc#u
gt"\hDXx@T|PPlx`
gt!&k|!f
+*g:tn1
gv:0FK
Gw3oyi\tN
"{<gWf
`;gwlR
gWqCoc
[-gWUA
[-gWUC
-gzh!hD
(gzr7.
 $(<h%
]+}H0)
H0|-`\
H04-D 
H0L-x(4
H0P5L|$
H0`-t$$
h0y,#G
H1`5Pd  
H18-T,,4(0
H1(-DP0 0F
H1|-Dx0
H1HetnI
h1hevoM-
h1hidim5
H1p-X$
H2<-|0
H2(5d,
H2|-h0$0
H2h-tX,
H2L-h0$ 
H2x-x, 
H3$5\84
H3h-HP($
H3H-L0
h3kcB5
H3L5d|
H3p-xP0(
H3x-LH
H4`5D@(<<
H4(-H0$,<8
H4Ip~?
H4L5\0
H4<-l((F
H4p-dx
H4X-X<(4
h$#5%^
H505H((40
H58-dt
H5d-dt,
H5h-\(<
H5\-l$
H5`-TL0
H5|-tx
H5T-x0
H5X-XT
H60-p<
H6bA^GT
H6D-|@8,
H6<-h,
H6l-L$
H6$-tD
H6t-D4<
,$h6Uu
H7,5@D4
H78-D 
H7$-Hl
;h!7k{'
H7L-H80
H7P-Tl
H7<-`x,,
H\ ,(8
h80(I0
h8 4$0,<
haerC-iDet
hbcyo|
h\BeC}
h#b	h3b;
@hcta-
hCteS5h
^;h{cY
H`D|dpD
hdFa	"nc
 "`HD|hXTPTtLxl 
HdLl\P
hDLXL@\@| 
"HdLxp|ThdDlL|
`hDpd@|H(4
"hd@PlT
&Hd`|\pThtLDXD
`HdtDd
"|H`dTpXPdL1,
"`Hd|xD@pTX
h|dx!I
HediW5
HeerF5F
HE;g+g
heilC-1
hE}|jf
heleD-h
HeSA5I
Hevaw-
heyF1l
h+F9^5
Hf$r^MO97F
	Hg8-X
hh+`^1
@hHdldh`8
&Hh|LDdPxxT\Pt
h@hmCA#
HHo1MHo
HHo1vHoe
("|h\H`PtXhTdH`<
hHPXlD@TLt\P|(1(F
hHt|@xtlDt\
&hHX|@tlx@P\ph(
HIdek-H
hjSD2c.
Hj#W#P
!h$k^ 	
H`><kL
`'hkP0
Hl3#3G
Hl/3dsX
hld|\ 
hLd\18
h@ldDLDx|`tlD(10
(;HldDSN
H\Lj,1
HlK.%2
HL$okB}c(
hl\PP@
hLteS-
hltH\|XDDd
"hltxpHd\@@D\p(
("\hlXp@dPhH`Lt
"Hl\xpL`hl@dlD
("Hlxt\`T|Y
h~M	ddXV
H[?m;T
hmunE5
h(n, 0
hNu#P!K
!Ho1gHoAfHo
!Ho1~Ho
!Ho1PHo
]Ho-fHo
]Ho-[Ho
HomlHo
HomzHo
hoohC-(8F
*H op3F
&HoqQHo
]Ho-THo
HOVk68>R
(Ho)YHo%xHo
|Ho=zHo
hoZsI-
"HP@14
&Hpdh|tl``TLLp
&HPDth|ppT@\LH
"|hpH@tDdxX1
h<"|pl
HP@lxhtpd
HPplTLXDl
"|HPT@1 
&`hp\tHTdPP|p| 
hPtld@p`L<
"|h`PtpDXLxLD1
"HpT@X|lddP`X|
hPT@XlTH4
HPxX@d|l<
``h{%!%Q!%(
%Hq>nW
HrCg@b	g 
-H#RzSg
h%SjlR
hsul5x
Hsw#RU
]h"swTT+C
"HT`1$F
\htdXd8
&ht@HlL|Pxd\T@(
"|h@tHxpl@
"@HT\LxD`d
"HtpXT@`\dlDl1<
HtStn-
h`TtXH
hTx\@DLtT
"Htx`hLd
HucoD-
HUK4,D
hUltR-
{&huyL
h@<'v>
{HvKe{Ttk
+hx3cNb:
#H	Xc!
"HXd`DpxTH\|x|
hXDth 
'&|hxD\T@Ht1 
&hX+eR
"hxHD\Pl|`@T`X(
&HXhL`lpTpPtdd
"\|H`X@hP|Tx
hxLDt@PX|xh
HXLlPD@\\T 
"h\XPd`
<"HXpDhTt|x@`hP
 "Hxpl|dD
&H\`xptdl|XPt@$
 h+.'Z
$!hzg&
HZo@W"
HZP,e\
[;^i)@
@i[#|\
i"1}!N
-I2MdI_}
i'@2:O~)
i2o=0I
I3m+;S
|i4%g!
i!5dTsD
$i6_$awR
I6dT]@R
i}7ml%
;I95?e=
i#9ST|<	oa
iA4a8A0
i<#+aoU
IaY}tR\
	'+i{C
Ic:12|
iD~|c_
I>dK)Y
)IDn3/
i"|DTdxt`@L\LLt<
:i&dt@|j(
,id!U7
Idv3&S!U:
@iD^X!
IEh.k%
Ieno510
Ie#/p%
$I$ES>
I&eU $td
If/doOT
IFHaU8T
I=gADa
@igeR-rets
IGoTOC
!I-g{p1
&>i-h{
I=h!I	
I&HpDPt\d`Thx@@
[i]iT#
iJB+;jU}<	
I-J|SS
i&=k>bD
.i*&kd
Ik?Fd(kM
$iN5s6
I"-,O{
I{p"}L
Ipuo5F
iqS Uc
irPe-T
+I)Rr#/
irtt-etub-F
,/i_[S5
-iSfYc
IS,YG}
iTdgER
i&TlpxL
i}tS!$
i@U\-|
iUkI c
iUn&zw
Iu(_SA
Iv37&T
%IV\4A
iVJZ=:
iWel51
=IXEa`
Iyr8qd1%
IyxMKqc
*iy'ZM
@j<1TpaeH5
~#j%2i
J2~"s|
J*3$Ck:
,j(4DrGjH
J]4')s
\j4YpwarD
j5}*:"-A
j6^d^>
J#71CD
J7/`[My9
J'8kdp
Ja(d/i[
|j|aerC
!J^a`M
j;bis1
\j\bolG5
-j`BteG
j\cehC-
jcSeQI
.j|cu1gN
 [J]-D9
jdSteG5kcot
jEtR3rI
jf?2D,2
<@Jfh>
'JgeP/
~jGkcN
j'$GV/
jHEteG-H
jHVteG
/*)\jI
<J{iLM._[
jJ|&MW
jjp}Y-k
jLilaV
jLomeR
jlTteS-
J+m} [
JNcTzM(
jnkX;:
'J(ogT(
#joU?S
J>"}oz
jPbanE
JPCuk'
-jPFteS
(j,q F
jR5Wj:
j\RESU
JRM#GGo
JS8i*]
]J`&sK
j"t|TLpHPLXd\h
[juw`%
jVc7B%[
Jw7L5I
-j\WteG-
">Jx#2
jXEteS
jxZw[V1
j~[y'3
JY	'vD
Jz$>7T
<+>@,k
!''k%+
#'!k'%
`'"$K'
K1`CteG5Bpil
k1:cZ5
K1DeppA
K@1 F@
K1$F@1$
K1hdmoc-23gl5Fh
K1@IelO
$-[%K1m
K1\tseR
K`1`WteG5odni
K2P#w3
K '3[C!
+k3ML)
K3RMO6g8g
+.k4NW
`-k'5p
k65$:;
K8%I6P
K=:9eo
k9&[^S(
k9)@tN
kACi/%,
Kacit-
K\Aeld
KAeRl5
KAKdhl@p|
KAKHXx\0
KAKxDLP`
KALGg?
K`alPw
Kaobp-dr
KaPet-
KApor5
KApor-p
KaPre-
kaqKeS
KArol-Y
 k+&As"5
Kasse-
K\Atsa
KaVtn-F
K>$b]$
kb4KO3
Kbair-
KbanE5
`-kB'd
KBdil-hsur-
KBkco-
K|bOtn
kc6#"d
KccAe-T
KCedi5
kceh-d
K@ceRt
/}kc GuG%1
Kciti-|
kc_mSog
\kcoL-
K-C{;S
KcxEd5
!)$KD/
KD1DtxeT
Kdaer-|
KdAple
Kdarel5
KdD\ltD
KdeccA5
KdertS
Kdesu-
KdFnep-Neli
KDHhT<
KDmEtc51DeRsI5
Kd<N"T
KDoCet5
Kdoisn-sn
KDpLXH 
KDppX$
Kdtapm
KE7YIu
KeDla-q
KeK`|lptlD(
Kelbi-d
Kelif-
K@eMel-
K|emiT-|
KeMks-\
K`erap-`
K\erFl
Kerid5Y`aerC
KeRmo5|
KERNEL32.dll
KE)RSz
KertS5
Kesol-
K\etIu-q 
K`Etsa
K\etsy-Y
K(%|<eV0F<%
KEwod5l
K"eY&:=
KeziS-
kf?AY:
KFdh;,
kF/[ G
kf">!k
KfnIe-H
KFwod-1
'[kg)!
	[Kg9_
Kgass-
Kgass5
K#+g*g+
kgG?jht~/
KGHnO-
Kgola5h
K\grOw
KgrOw-q
KgRpi-
KgRtc5
Kg'$u5
kGU[=Sy+&
Kh1hBteS
KH{cZa8D:
Khdeld-
KhdniW5h
KHdtH(
K{HDW<
KhecxE5oitp5liFn
KhEtsa
(,khfa
KhioPw
KHitam
K|`H`LD,
KHliFe51
KhSroF
KhSyal
KHtcej
KhtK`P@LlD\D|0
k"`@HtlxpXTLPTp L<$
KHtnem-
K|H`@tPt|h(
Khx@dPXlplXL<
['ki;#
KIDet-
KiFkc5
k'ikom
KilCt-
,~kINv
KioPt-
KIroF-tupn-T
K|irPe
Kisre-
KivnE-\
KiWet-wodn
KiWll-Y`orcS
k!J4v|
[KJaB65
KjbOs5D
K`j`evaw
KjtSteG-tert-Y
*K"k[a
'kkGcTa
K%)K{l/d
kkSG[A
()kKSi
~kK/	Zq
KL1LiWsI
KL$48 
Klaco-
Klaper
Klbair5
KlBhc-doMt-
klD\A,
K\lecc
KLetad
KLH`l,
KliFe5
KlilCy-aobp
KllAm-co
Klld.-
K`loCk
KLodni
Klort-
KL@`tl\D\pT$
KlxL|HH\PD|
KlXTdL@XxDdd 
K|lxThPXpl@
*KM{d^
K?mETG
KmiTm5
@,`KMS}
km*#!t#
K|mtiB-
Kmulo5H
K}n7)~7
KnaHe-d
KnaRl5
K\neMk
KnocI-F
KnUee5t
Knuor5P
KoCsy5p
K`odni
Kodni-
K'oEoJ'
K`oFet
Kogyl-ngRn5
KoN_l-
KoRet-P
KoseR5YDdaoL
K\oseR-ecru
KOtro-
Kp1pdaeR-eliF
Kp  4,
KpaCe5
KPAeli
KPAema
KpAssa-
KPaVte
KPceSl
KPeli5P
KpleH-
KPLtxd|l|||
KPollA
KporP-itre-
KPropw
KptH`DPpX\px
KPtxeN5eliF
Kpwei-Otro-
KpXh\|`ldH
KP@xXltl 
@k[Q4`
KqPohnU
kqU4T5
KrCez-|
]kREg)
Kretn5
K`riDm-
"krM1Y
K\rolo
Kruos5|
K|sety5j,
KSgXdC
Ksret-ofnI
KsseM-1(Fp
KStne-
KSune-\
Ktapm5
KtaPn-
KtceR5
Ktcer-h
KtCgl-
K\tDl\8
KTDtt0
KtdxXTDHX\,
@KteG-@
KTeldn
KteMet
KTforP
KtiBI-
KtjtMteS-
KtKLT`ltx|XX`$
Ktlaic
KTlEet
KTL"L"Fk3
KTlxt`PLDdTh0
KtPet-x
KtrbiL5t
KtSye-F
KTtals
ktx8Oz
KtYtllaC
}k|Ufg
kU[R=S
;k{USLr
KveDm51
	$KW8+
Kwl[3B
Kwodn-
KX1XigeR
KXAero-X
KXbpil
Kxceri-
KX%/$.}d
KXdL\H@DPTTD 
K`xDTdpp
KXeRet
KXertS
KXetuc5
KxeTw51$
KxeTw-neLt-
KxEye5
KXgass-Ae
KXGtuO
KxiWts
KxLd\lH
Kx|lH@p`,
KXmaNe-j
KXodni
Kxpame
Kxp|DThtPthl
KXq4FX
KxrtPd
Kxssal
KX\xLLtlL`(
KXx|L`TDtHDh
\;ky; $
]'_kY[
KY414FqLOgtS
KY FY\VteG
KyM%Q1N
Kyreu-d
kyrKB]
Kytpm-
KYtratS
KYTSteS
KYXaerC-rPet5
?).l}"
L^@$0"
-l0$44
L0`4TN
-l1$Fl
L`1=,k
L1LpaeH
L1teelS51
=L=4=<=d=l=T=\=
L5;:rb
#l65Z$Ov
L6Xket
L6y0Z9
l*"?]8
L8.Caz
L9	%KIlk
-)l+a&
L>@?|A
lAla5x
Larot5nOeg5
LBmY#	
lbolG5
LbolG-L
LBtaP-L
+l[DA,T
lDdnE-
&LDdplPxH|\XP
@LDhHXll
"`lDhj
"l@dhPxpLhHTHd,
"lDhtTP`LL@HD
"lDh|T\txH1
l'dk<4
lDlh@`HtPDp<
|l\`DLp@`
&LdP\|tTDhX@j 
L~"DS~
lDteG5cive-l
"`L|@DThXxl\\| 
lecHDA
LeniL-
LEteS-
LetnI-
LfRJ^S
lFteG5
lf{{wf3
:LGg{W@)
L)]H+`
&LH|\dlTh@`D`@q
LHdplpX4
l;\hdQ
"|lHDx@`\dh|\|<
:Lhf,6K
&LH`|l1
&lH@LXDPtj 
#lH#nJKR4S
lHP`L$
L^hR<f
lHT`D|dhL\`0
LHT\@Pp\
|LIet-
liFh-1<
 /)[LIo[q
ljaLrc
ljdap}
ljh>g?p5C
LjLlihC-
-Ljt3IDG
Lk4A9<
Lk4G<Ad
 lKC1h	
LK=RSr
lKt\`\l
Ll8<( 
,%LL <A
"lL|DdPT`lx@TX,
"LlHdXP\
|lliF51
%llk}.33o%
~Llk3d+
@lLN2Id
l_lolh
"lL|\pHY
"\LLthHxD|TXHL
Llx\Hdp|d4
 "l|`\LxP|h@phh,X4
&l@Lx|Xdpx\1
lM0!E"
;l\_}#m[]ga
lMzIU|
LnaHe-L
lNX:(j}
 Ln:Xk
Lnypc5YLrtsl-
'L,?OA
LOADER ERROR
LOa[QqC
lO%jv3
LotAt-L
)"l`\p
Lpdht|`HXTp
`LPDXY$
$&LPHh\|d@lTtpd
`LPHph\X`tldD j8j
`lphXLH@dTdDT 
LPl\D0
lp|P`,
"LP|THD\@|Xxpd
lPtuO-
lPtxl|@|x0
lPv'c|
"`L|P\x1
\lPxD@XtxHdLj<Y FxY
"l\Px`pDLtt@xY
!*lq&,
Lq4&a8
l&>r8^
lsuco-
\-Ltce
,&lT`dDLxtL\XXY(
lt|dPx
\LteG51(
@L|THh
"@l\thH|1
L@Th`lxlh
LtHt`x<
LTiAe?
LTlDdd\xDl 
Ltnia5L
Lt|P@lD`hTd1(
"l@\|Tx
@LtxD$
"l|TXDP\hdt@lD,
lTX`@pH|hLdTP,
LtyBk-se
#*lU6&
luv7fRh
lv%CNj/c
'	@lVM
LV%sak$
L-VtOL
$+LW(:
)LwE,LNX
l&Wk++^
%LwMF*
lW|Q_<
lxcyi)A
@`l|xDT\TpD
LXhDHTpdp4
@lxH`TDhp\`
&lx\|LdphXtX
"LXlhHdD@XpP@X
"lXLxhPTHHp|
&`lX@PHd
l`xPLHp\XXD
LX\`pq
&lXthTPxh@dH8@$
LXxPlXt@xx0
LYLDteG5
)lz&jRI
LZlRD5
M0#Etl
M1Z{b#
.m2=7w
M2!fq{$
M%|3]^
M3kiK1
m\4;aM?o
	M	4kE'&
;M5NJu
,m#.5q
m5w\s,f
MA1b.4a[
mapy3\+
mbMTCeN
m=b-$z
mC8!'t
mC,K7C1
mD%4>l
M"d|\h`tlL@xX
	MDl*WC
mEBW6d
m`_EN.
M:eO5]
>M]erG
MessageBoxA
met-Xp
'_/m$g
%mg5]bi
Mgia?k
mGMu/=
'MgtB1d
m@hPdl"f
MhUExJ
midiStreamOut
m=iN:t)
';\MiTYQ
mI.-VaiO
mjNXDdTxhH`H\tld
_MJVS-
mK$d,S
mKtppd|x@
{+m\'l>
ML)3o1
&}.ML"Sv
mM3coP
mMoz#S3k
mmT+[b
Mn5VNd
M-~)N9
.m{ncK
m\npd-fP:
&MNWk/7*F
m'okik
mp5=Tb
m.'Pmf]
Mp!-Y5
M#QmrV
~MR5B6
MroF-F
~MsBi 
MSF3Cv
mtiB5FD
muD5}}
)mU'QL
MuQuy!
#MvA}u
-m#'vj@^
mW#gta
[MYU=R
mZeN6qT
)}?}n[
;n.49G
N#4+K+
n'4kp$
[N5am@
N78KRe
_n\=7C
^=n-9%
n~>92Q
n	A5!sl/
~nadjh
NaFwP#k
?na.Odprm$;9
N<BsRr
n{\C/5V
!NCQ]1c
\nctow
ND|dP`hXT\LXY
NDh|dlLp\D`Tht
NDPTXpLl|ht`DH
NdTne>
NdXTxptlL
Ndx`Y(F|
)nek{+
nep-LL$
|nepO-pilC
nera-t
N.^F>c
N<#fh%
nfoMI?
nFQS"|
ng-FYvh
ngW+Bi3
NH'<aCe
NhdlLtXDppP\Tl
NHDtpTLpPh@l`D
,N\`HhhTLpl|P|\
^nHkZ[
nHoY!Ho1\Ho
Nhpx\tLlPP
+(nht[sB
NHTX\hd|``L@hl
{!NH|`x@
NhXtH@\dDx`xdq
n]{I|4Y
Nj-A9"^
%(NJcCI
/NJ|[dE
Nkiu9LF
]Nk_j3
nKlLH<
nkxb A
nKx|L\TlhPhX@
N"L`@|Ht\x`1
N@`l\LxPp@D|DL
n</lNk
NlPD@T
NlPp@hXd
N|lpT@\P1
NltLhXd10j0
?NlT|LX@hDpH`XL,t,
NlxtpTP`\\L@H\,
nmk5!QY
NndVUO[
nNjCSf
no]l@Uf
noLw-P
N>oV	1
-Np@@`h\LTPDd`p
N`P|Hlx@T
N|PxX`Hh@@Ll
Np`|X\xXhlLD|
NQv|*a
NRF~hs
,nRl*C
n[S_fc:
Nsnk/|=
NtHhxdlD\L`|Tx1
NtHTpL`|@tlxpH4
NTLdDHphxhl`p\
NtLld18
NtLpXH@dThY
N\`tPDpdxTl1
NTt`\PDh@TdL|
$( N`tT\xLdH\j
Ntx`d|lDp@H@DL4
NU8k?w
nU\d>E
N'VkF>
&{NWhd
NxH|TLtp`Hdhld8
NXh\xt|D`pTP|T
NX`lTH@tx\10
NX(M&`
NXp|\`DtxH\@Xl
~NxPSFT\Hgk
NxTlpH`XDH|d|p8
$NxtpLX`hD@TlL|8
Nx@tTdlH\pLY
NXtxPh
NxXlh1<
NxXTdH@p\\t|h1
?#/o''.(
"<?}-O
o;0o;Lo;ho;
o17#hgl
&o2By9
o3HC13
(O4'(`i
O4l!ig
O75Jh\Dw
O7GI|~
O=9}H=/
;''O _a
o~B7KR/
"=OC7p
.$ocb]
+oCeL/}
O%cGokO
oCHC15
OCo{s7
@ocU8ZW
odE2k5|J
,odkDLco
"OD'<L_
odni-@
\odni-w
*?OE/e{
oFg Si
ofG/t^&
of-m3l
ofnI5Y
{oG"\)
OgdUxo
oGxRKY
@oHsw-
/oI59FT
oIrh6-,
oitc5Y
oiX!L<M@
oJvpG~i
ojw%sSl=
o?J'X(M
+'Ok_{
Ok;?4w
ok#>gU
}ol3K)
oL%9kL
ole32.dll
oLoT5p
on3wd;
onkQuW
o;No;ho;ZoGt
onSigN
on,T:.A
o;&o;Bo;>o;Zo;vo;
oOCyE1
;Oo;ko;
oP5?'s
OP%k7/;:
;OpR*E
@&O_*Q
orFD5x
]o'R+N/
{o^Se',
*:O"T`
@OteG5
o tMk&
O(uckHr
O{+&ur
Ovd{NWEVz
OvUKe=
OWb	%UK
OWBZlX
~|owe`[3**"
oWZz\#
#:$p>+
;#P#| #^
*=p=0/
!+>p1@A
|p1DSK
P1PCteG5
p1pmreT-
P1PSteG
P7MK1+m"
P7Sm_,
p8g[t@
P8j#.B
,+p8;Ze)
pAret-
PAteS-
P|)"Ca:u
)p>CB`
pcp-V(
p(CY$c
@"`Pd|
&pD`1(
PdahQ;
&\|pD@dP1
PDhL\dHlT|L
"pdH|P
=&@|Pd`hTX|Lx\h
"@pdHXhdPLl|
p~D)@j
P'DkJ$
PD,KTjy
@PDLDdHDP8
,"p\D`Lhx@d
&pD`LlPt@Dd|PX1
"pDLT`
&PDL`T|hpxdHpL
&`pD@LtXdT|l
,pd*N!
p&`|dpDtLltXh\T 
pDteG-
p~DW@j
PDxT\d@HPXt
pe6$*]
PeekMessageA
>\/P"E]G{
PetnE-irCr-
Pevaw-CtuO
"-Pf6UD
P-fJ,S
pFteG-
PFteG5
PFteS-
p]!)Fx
P\Hh`lXL\H<
p\Hhxl
&phlL`@PX\1$
p`hLPp 
"@PHLpTh
 "pHP\dD`hL|X@D0
&`|PhT@\dLXxxD H,0
"PHtxdh\XPlDh@
@phX|dpH`@H
@|PHxllh`l 
"P\`hxpld1
"P@hXpldTD|\HL
"Ph|xt`pT@DLlL
!piCkp
pilC-Y
PjHId3
pJ)"Y(
p<@k+@
P`K'1a
{p%K)d
p>$KlV
p	l33	
`pLDhD<
PL\dtt
&P|L\h`HThl
`PLhlDXXTT@8
p|l\@HThX`x
,"p@lhT\tx`1
P_/(@lI
&`pl\LhP
|PlLh\`tXp$
~&pLlPXHtdpxD1 F
"p`LlTtPHpxd\l0
"pl`LtTXhPP1
plM*ks
"\Pl@pHxtph`
PlpLhDX|XH@pT1
&pLPX|DT@hlhTT0
"PLp|X@xtH\TTx
PLtdDhP8
"PLtX@x\lTdDt
"plXH\1(
`plxL@dP
"PlXLTh@|x
#&\`P|Lxt|lDhP\
"Plx\T@LhppHDD
`pLXx\|XH
PNeli51
pnera5
#pNHj+
PooHs-
POteG5cejb
&`pPDH\x@ld1,
`p\Pd@@xl`
|PpHlXtH\dTHd<D(
&\pPhtdlLX`xPL
\Pphx`Dd|Xt
pplXxp
pPteG5
pPteG-p
pPteS51,
PpX|D`xtTH|
&pP|X@LDHpxT\
&PpxlD|LTx@h@Y(	
"\PpXTx
pqpolnU
Prolo-P
	$pR\S
p#ry;Kf
P~	s2W[q
p]S|$P
"PTDHxLd|lh`H\Y
$"|\pT@h`DXLl@p<
"pTHh181,
"P@THh|t`LX@dX
"PtH@Tlh
&PTHX|
"P|t`h@XpHDxD@
PTH@Xptl|D
&\Pth`XxLtD|L1
){p*Ti
p|Tlh@PD 
Ptl@pd|x\T400
"pt@LXdHx``lpt0
`PTLxHt\d1$FL
pT\PlH|xhl
`P|TT@DP0
*=&`PTtphj
&PtXd\l|p
"pT|@`XLH
pT\x@LhHxDtHH0
p@TxtL|`XpP
*puKcE
.pUMr`d
PWd</1
PW.s0D
"pXd\@DTl|HpX\0P8 
pX\DH|tPdLD 
P}"XDHY<1
&P`X@DLHl@xdPD
p\xdtTpPLLD
p\xDXhDD4
pxHT`@\tLhP@@
&PxHtTXhlx\pL\
pxL@\`HThPx$
"PXL\|xlHDpdhx
"p|XPdLTH`@t
pxTX@tLH\`d|H0
PXxhdL|lD`
PY,Fh1,F
pY jpiWsI-Fp
PYPaerC
&@%/+q
q ?)%*
$ "`\q0FX
Q1bT%7
Q]21!e
'q2s?f
Q4iLeN
!Q4Nc I
q8~WIU
q9;"^!Qs
QA=a8L
Q,c=4Ewh
q`CgeR
Q]cI6a|syw'%
QCKtyQs
QcM}D`y
;qcMeQG~
q`CteS
q]d2U?m
|Q-D/~3
qDCMOC
QDF#Jv
}q?do>/6
Qd'=rzqs
\QeH18
qf0]Vj^
q <<Fh
qf>O(S<)
:qFY#!
>>Qg8f
-q?im=
_#QJ5$
Q!j&Qe7
Qk&Ertc`5
!Qk$GS
QK\i[h?
qKtJY|
+q$KZuSd{
Q!	l6+
qLCteG-erru-hTtn5daer
QLK)F	d
q&LlD|phd@T
qLPdnE
qlPteG
qltsoP
=QM)0v
qno#bd
QNphT|P\Xx`DH\t0d,
qN+S|,
qoledlg.dll
-QOo%#
_*Q]~p&
<qPdniF
qQE}%#
Q;>%@S
\Qs5SQ
:qS5X:L
qS9S%Q
QSDb#?
qtOgeR
Q!TS"'
QuH"d|XhLHDTxp@dd$
q$W+!T
qWv.=f
#+Q.&X
q\X2d8
qxaBsI-x
qxCteG
q"@xd|XDThhtLlH
qXeRoC
QXet>'b
q+Y	9Y7
QZG"j}?
r$"#3K$
R4Wkp,!
R53b0p
>r8n`}
r8&X@Lpl`h\h|x\D
rA+3	R
rah5DHdXL8
@rahC-
rc_b&rl
.rdata
Re!7jG%
r!E'[bA
RectVisible
RegOpenKeyExA
.reloc
rets-dniW
rets-FX
[~Rf{"
Rf*+MH
rFwo-|
&>rg*[
/rgDAF
rGq|Du
R'%gZ!_cQ
r""`Htp\TPdhxDpH 
/RHw3Eza
RichRe
|rIMZi3
R&J[_d	
r'jS13W
%rK%#$
=r_.k<p'
>r|l|q
r	m[jt
R)nb!;
RNjO)t,
Ro1Q=g+
rO83^z7
rorr-edoM
r.%!@p
r)p>[B`
Rpil-T
+rPwe+
R>r?+U
RRxSO2
'RSB3MV
RS(O/+
R;.S>oz
rSPLp>
#_rT34$f
RTCzEO
`RteS-`
rtSm-X
r"t@T\dLxD\|hhX4
>%R=tu
RU>5_%
ruos-xEec-
ru)qf?
rVu,!X
r!#*w3
rw"cPu
RWfB`"
rW)"qs5
=(RyR|
{Rz/G&
r,zml!U
;+*?%s
?|s	;<
{{.s`-_
++?S_$
s0;<nM
S14#ck
+S#3G30;O
(=s3t.I
s!4#	J
S$5"as
	>S5:d
S{6_/)
S6?p&as
S6ZWTt
S%87;{o
S9v[LZ
SA0+nZ
sAbo61'
saC\&-
\SAc&5
salC-As
Sb3+!`j
Sb*jP]
#s/BsZSO
Sc{e T
s{	Cqs
!ScZ(f
^sd^1HK
/Sd\^92h
<sdc<$
+sDU,#
s&|dX\xHP
seb{sL^
sei5|D|Tp`l(
`sffO-eRte
]sf>wv"
"sg9J[
sG<h}P
s}=GJ4/
SHELL32.dll
ShellExecuteA
SHESRD
$SHK>V
shRPyR<
}Si6>hd
siLe-1$
\-]Sj|
/Sjc2U
Sj:HlYqi
+s?!{k
s:k-3]
#SKahN@
s'/;kbi
` Skh<4
S'%kk+
SL3+pM
slsu$*
||!s(m=
:SMlA*
s($MLS
/S;Mo;=_
S#(no[O,h
SoA=\l
|solC-<0
SOpg~?B
`soPr-
S+oXim
s/$pCkSTcu
SPo+C,
s R}7X[
&SRM/~
:S#r's
"S{.s{
_S<|-?S
)SS7Gs
/sSbHy
S}SD=UA
s}SS0`k}
`SteG-lorc
StgCreateDocfileOnILockBytes
SthC6f
S'tN5\l
< St_O^
STUQU]
!	S-U&
'"SU)'
SU9=|!
#sukoK
Su+sG33
%_SUSQH
#&s)uU
sU?Vn)z{
S;WSP[
{sXe&1
:sx_n.
\SYB<R
Sycf #7
-Syd}M
*~,Sz)H
t1htk\
]t1Isc
t1tMNIW-
T1TSteG-
T2$BP|
}T2 E{#
t4^,|/
	T+4[c
T4Ewwu
t5%Fk|
,!T5{T
T+\6J)>
t_7d=Kx
t8,( <
T,,840
t8k1_m
TaerC-
TahnU-
~t:aQgC	
tare-aTro-
^T^bz<
TbzC$.
TC2#+s3
tce5htdDHL@L|T8
tce-|`X 
T@/c=k{
!]Tcq[
t%*+d?
t]db-Q
}	tdcF
"tD`d@HphLXxTD4
(<,"TdDH`\px
|\`tDdHx`XhdT<
tDh	1y
&\TdhD@|P|H
t|@|\dHl8
"tdH`p
TDh@\|p8
&TdH@xLlX||
Tdi*S!
TDl\h@1
T|dlxHL\
tdniF5
"T|@\DPHpXLxDL
"`tD\PhX@dTpT@ 
TdPLT8
tdP\xphLDXD
(&|T@dpxPldLD|P<
td``TTL
"TdXpHht|p`@|p
(&T`\DX@|ptlL@T
TeerF-
T;[/eG
tela-1
teleD-
Teli5p
Teli-elti5AKj
teMm-X
t$!F$go
t<GA[K
TgamI-T
tg-	Ok
tG&p`hLlHXtLd\pd0
"thDLp
$&THD\@`l|X\hHT1$FH
&\tHDxXXph`Pp\
The ordinal %u could not be located in the dynamic link library %s
!This program cannot be run in DOS mode.
tH@l\xPH0
TH#o#C
Th|P`D\d8
 "ThPDlHxdt\|pj
\`T|HpxlhPLl,
 "THpXx|l@Ldtl
thtaP-eRoT-noig-
tH(,+U
$&@|\thxlLH`HpT
THxLl|P`pD\Lt
tI5UTh
tI8uS}
tidim-
TIG]CW
T@i/ i
tiQo4I
`$Tit?C
Titpe-
tIun-F
T i;y^
TjgG)A
tjtevaw5
-TK3 H
tkcoL-eliF
t?Kd@ge
TkF;EN
tKtPPD8
`TL<,$
tL51cp
tlBhc-
"T|lhpH`dH@xpT
T%l@^O]
'<"T\LplX`d`hD@P
TLp	ny!\
TL`pT\
tLpTHDXTx@PH
"@`T\LpxhdHXpX
"`tLp@xPlD|\tP 
@tlTlpH`T
TLtt`,
\tLTX`\X0
;T.lWekT~
!#Tlwy%
TMcoUe
TmhlNh
Tn|%1Q
/?to,\
Todni-
TotmV\
."t|@P
tphD@Pd`Tp
"@|T`\pHh`DL|t
tPhHT|dlX|p 
"TpHL@Dlh
"`tPHPDd@h\lt` 
TpHth\L`d|xXL
tpHTLhdl@`Dtx4
&tPl`DHh|dx@tt41
"T@P`lDxL@XdP`
T@\ppH|pp4
\tpPhxxx
"\tPTl|xdD`p|d
&\|tpTx@PXdHh`
TP\x@h|
"T@p`xHl\Td|P`
-"`t@q
T"QtU4
<$T/qU
=TR]f&#T
T!+RVsz
`tseD5F
@TsLdHf
TSNIW-T
T%`sv%
<%tt,%
&\t`T1
"tTdHxL@hx|
\TteG-Mtxe-irte
tT $Fl
"Tt@L\PXx`d
"tTl\XLhpxPd
@`TtPd 
&\`@TtpDlh@HXt
"Tt@\pLh`X|HY8
@t`TXp|Lxh
TTxTH 
"tTxX\Ld|\plT\4
tuj3Do
tUwc\ 3
TuWn$/
/tVEczG
]t$vS_
TwC|-n
T|-W?}g
tWKHiA	
twodn-
T&@Wq2
TwRh#O
|txdhX@Pltt
"|tXH\Pxh|Lp\X<
tXiF;D
"@TxlHXDhTdtY0F10
"Tx|LlPp\hdDh@
tXpDT|x$
"txpDX@hTHx\Hd4L
TX|PT$
TxtdH|dL
&TXtH|hpxTL`x
tX@Tth$
"txU/)
"`TxX@|PlX\HD` 
\T%y9.}
'TyJ@$
T&yj"i=uF"
TyKD|Tl
tYtMteG-
tYtrdeR
T;?zYy
U0-!%#
U0t_N 
u{,4Bvy
.,U4c3+i
U6D;a~
U9l,Oy
U9tTZa
\-ua<O]
Uas]mTc
uauYap
U~]BR!
u[b/.=ym3ugL
uB+Z'H
uc-$C(
|uCf4C
+UCGl!
UcTPW:
\ucY`N
_UD1QE
udKHRC
>u%dnEOJ
uE]C6?
u-E*Ww?
U^}F(]
u<}F31=|
"U^FB#
ufSd/b
UF"tpL\XH@lh|d`x4P
<U-G{6
Ug&oO}
=ugSKV
uId54.y
uin?_0
u;ITDM
!UKDiP
ukDx:c
}|Uk'M
{UMD0hO
uMoT-Bitl
!Umt)G
une5d|XLhtTHlP 
une5lT0
uNlhtxX1
UN?MuD
uO_5@1PlacS514
{uOLEAUT32.dll
"UO(Rl
>UOTEkBj
U|p<-}
>U:pil+
URa1M4O
uR>G6)
uR;=Q!O
u\RT#;
U$S\cM8
USER32.dll
u/Ss=}!;
,uStFl
:?^>u|t
UtuO5H
UtuO-q
=UWp+'
uwQ9E6
uxl-X1
ux`-X1 
u\$-Y(
uz9Yk6
U,ZdJ1
v2fu]HC
;-v4ho
!V?7Y]Q
~*v;9x
va|OH3
Vb?PqSf
VBX>dk_
~vC,dS
+.v@d$
?V%[Ds
v(e]ez
Vgc* U
vgElD.
vg:IFm
VG,\OeV
vg#@-r
v|h'cU
vHoebHoElHo
vHoe"Ho
vHoeWHo
V',;#hR
VI2JO3/
VirtualProtect
v&+J'i
`vJ>RI
vk`czo26i
:V:K:r
%vk{;t
v@]l-^
vlEGUCA
vlp~lh
v#)o&u
V"p+='
@vpK$R-
^v+qdS
:VQFxG
vr$]4.
VR;)sW4%p
-Vspci@C{
`VteG-
|VteG5pwei
V*uD?.
VUWT$Wb
"VwuFpA
V&xP@hlDL1<
v+Z9@u/
w}#-,,
w]]-1 F
~W2:S!S{g=:l
w3<aXfCg
W4!-%4
W4 -f^
W51Prtsl
#?W_5FKu
=w5lme
w5+umM
#W6>+C
w)/80Yh
W8%@u]
`+WA}5
Wa^^Cn
wAPC%Y
WCB:!q\
w=%D=K
w	DkD?
wd#Pcl
w]D~W#T
wd%-YTMteS-
we-D}:"
Wf(8[{
^~W|Fb
W[,FcD
$+W]G6l
#wg"#do
W(-}gFG
WG#FTG#S
wgqNd"
wic#2Y
$WINMM.dll
WINSPOOL.DRV
WjA~1@
Wjy<-L+
W&K3|`
!wkD#|
WK!{lvDh
WK%XSh.
wkY-|1 
wl)",,
;w?%-L+
~)WN]c`l
wnnniW
Wo=CHo
wod5`@t||
wod-HDpX\lxp`<
wodn-1LDteG
Wo=fHo
Wo=^Ho
WoIgHoAMHo
WoI~Ho
WoUbHo
WoUDHo
WoU!Ho
WoU!Ho1xHoQDHoy&HoqfHo
WoUMHo
WoUPHo
WoUQHo
Wo^v(h
W/:oVm
WQgEL-/M|
Wr{,"	
WS2_32.dll
W*svDA
WsYm"c
wTA8pl
`WteS-
\WteS5
WUb\3i
wu]ezn
wuI51,
W'Uk[Y
w>UWY=
\=wUZa
wVA}cd
W*W2C:
W$wGq/];
(Ww[,t&S
wx7-d (
`Wyor-1 
WZ0PGB
Wz&PWk:
-\x004
x1xbolG
x1xCteS5
x1xeleR
X1XISLC
x3=`_cM
X3elo5ld.2-l
X3GSjY
x4B]U49
X!4;;q	
X'4r$)
x_6a|5
'x6}O=
X6;u$n
xaBsI5irWd-x
xaerh-x
xagKVc
X,AsqL
x/aS.'y
XavnI-
x[AWRG
x!BGqU
Xb/Hr2
xB/m#	8}
xbolG5x
_X$<c]
=XC;$M
XCP3o!!#
Xc.qeW
xCq/sR
XCteG5fnIP
"XdDp\
XDesa-X
"x\|DHPdXTt``H8
"XDHPhY$
Xd!#ID
"XDlHhd`p|xP\`
x@dllT|Dx
&xDL|Y(
-xdmjC
&XD\plTHt|L@xH
xDpPpDL(
"x\dp@TLlXDXL`8
\@Xdptlx|th
@\Xd`tH|h 
XdThP|tHdxpT@
"\@XDT`lHhxthPY0
"x`dtL\ph
&Xd@T\th18Y0FT
|xEgr-
xeleR-F
xemaN-x
	xEX7c5
?X-=F>
XG;'@ch
x#gc!}r8
XgE.d3
*)^xH#
Xh3oC/}
"xHdlT\L@HpXL@8
XH`Dp@P|dj
xHD\T`L`LP
#%xhe_
x\@h||h 
\xHhDdPL\@|dP
"X\@hHtpPl`LXX
,"`xhLlhPDTX1
xhL@lPD`H 
XHlpP@
Xh`lptH\h|d@t
|x|Hlpx 
"x`hLX\
"`Xh|Lxl@dHP`x 
xHoQbHo
xHoQ~Ho
xHoQzHo
xHphdT\D`tX`X81
&xhPtDTd@HH||H8
"xh\@PXD|T`
&X@\|H`TDPlpt\
&XHThdLtPx@p|D
&XHtP1 
&xH@t`\PLdDh@|1
xhtP|LHdt\`d|8
(<&XhxdtDPpP\
"XHxlD|tq
XHxlL|TP,
Xidim-P
XigeR-X
XisiV5
}@%X@Iy
Xj4FX(4Fd
XJ?[c\
xjxEteS
X#}/}l
-Xl(<8
"\@X`ldpP\HTdX
xLdpTlh`TD
XLdQN}
Xlgna-X
"|xl\hHL@DPTP
XlI[%,
XllPDP
xlLtd`p@`@
&|XLph
"XlpPdx|tDL\XT
x@LptDd||`Tt@8
&XLPtxp\`@DT`t
&xl`tpT
(XL@T|Ptx4Tldtd
"XLXH|P1
xl|@\`xTdt\4
<&xLXtpd
}Xn~)H
x_Nn.5
X]=OiZJ
&xP\1 
"XP1 FD
"xP@d\
Xp@|Dddht\8
"X@pDTHhlTx
Xp@dtlPLp8
"@x|pDtP`Ld\t@
"\`xPht@D|dLpl
&x|`@phtL
"XphtPDlH`Tdl
"XplD@L`|\xT@
"XplPd@HLl\14
XpmoC-1
xPteS-
x_!`r>
+X'R/b
XRig(s
"x!RKp
XSteG-X
"xt|\`
X'TC3K
&`XtD|L@\1
"XTD`pH\PDLxY(
&XTdPLHxh|@`LD
|`XtHD\t
XthPp@DLDd\@D
XtiaW-
x\tLHX@10FL
\xtLxHd|T,
@XtpdTX
&`XT|@phHTLtLD 
x@tpl`D\|XD` 
xTpp|<
,&xtP\TL\@XlhTL8
x\@TPXHDHXt0
xtsoP-
xTteG-
&xTtHDpl\PhdT`8Y 
x\t@XpH|hlTtp8
xTYYk)#l
XUelO5
"Xu%h?
xujdA-
xutpa-j
]XW3rc
XW'csq
.XwgHc
xw&`pD14
|Xxd@PTDphh4
XXDxL0
xXhldT\|p`
&xXlD|hL@\P`X@8j
"`\xXL|hd@tHDp 
x?"XpL|PtD@XH\L1(1,
"x@`XT|\hpdPP\8
XxtP\@
X_XV,rX
XYXStxE-cele-
&"x&Z)
xZ6/vuTb
	y1rvQENsK
y23~]@5
)Y?3E;
@Y488F
-@Y4F`
y%4!_j
Y4?s	s
y5"{t['
;]Ya"/
\Y\aerC
y&b$}h
y%Bw>k
Y!cj0~!
yCSk,+,
Y|daoL
YdCteG
Y\dniF
yeKe-`
`Y`etnI
,Y,F1PSteG-P
YfbI76
yf*H!"
y(h"?5
YHAELO
YHGslT-FH
YHo%(Ho)zHo
YhSteG5
YHWteG-odni
Y@igeB-1
yii0lR
Y\illE
yIqHkg
]YjA6N
YjUUH0k
	Y+`k	
yk,DrZM
YLHteS
Y"\Lh`x@XtlY0
Yl~Tx#
y*#mYCw
yN"lt`PD@LX@xTxX,
|?y\P';5
YpJ[Vw}
\ypoC-tceR
YpsolC
yPS=TO
y"|p`thlPd\q
|YPWteG
`yQCAR
y Quc"
yRPnfx
YS)Ev#
yS__g,PT
Y\SteG
YsW2wB
YT&\+e%@
$YteGHS
YTRteG
YTtiaW
yuk;_>
_yuL_'
"#y&#uL#UX#K
/Y|V{72
ywe;WZ
\Y\WteG
^/Y='x
YxAslT
YxkeeP
YxTteG-
Yyg_yb
yz!c%5
YzP@xlhHLT\X,
yZXY	Xc
=	z(./
%)z	+&
Z.7[IT
Z>'7Ta
ZA-[FJ_
^{Zc0|\y
Z+$cRaU
zdDlh|X\THp
zDhqsu
+Ze2%!-3
ZF5E9}
{#z&FlQ
Z^fQ5=A
Zh2 +h#5
zh@HLXdxDP`L0
zh@HtDdxLp|t 
ZHo5DHoyMHo
ZHo5DHoyxHoQDHoyVHo
ZHo5(Ho)`
ZHo5MHo
ZHo5WHo
ZHo5xHoQ]Ho-~Ho
zHoYGHoM&Hoq
zHoY(Ho
zHoYYHo%^Ho
zHoYZHo5fHo
zID*it
{zI$ko
;Z}I=R
'{?ZIyM*K
_ZJ=As>
ZJ.jMA
!|zjkL
zJW=&uu
z[]`KD
zL!$?H
zL#JT$
zlpPt`xTdLH
?;	Z$M
zoT9SP
zo=U>#
#zOY4O
ZQ^D$VW
Z[QQsP
zR5e#%H
>+z#R#t
:ZTc	(
}zT|C/wf
'-zTD|	Y
ztIgnY>
 z|t\lpPX`dL
zuA!0" #"
Z)+v1~
zv1c4r
Z.V{I^
"zVS;S
zWh:gu
zw"t]3
].Z^[x0TYe
zxUs;1
Z_X`,vLG}F
zY%*1\
zy8dH 
Z\|zy]@H