Analysis Date2015-02-09 23:43:31
MD5ada91a26b00cfbb0fb3a8ab9f5bd4e26
SHA11f8a4dc8c0261a33e84d63f8f0a70775005f4621

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 5c912e95d0ef1c1094deaac0d016b788 sha1: f2bfeee2eb68797b3475cbce8163406f0bddf818 size: 471040
Section.rdata md5: e47e4b677459ec745dc9b2a9f7e8e168 sha1: fe12be4e704000303ebb2abf47084d1a80f863e4 size: 1888256
Section.data md5: d4e23ef890091b9b54c555e98ac58e11 sha1: cc2fade7d3a88bd7e72464c7e78f13425396ef22 size: 61440
Section.rsrc md5: 4e46c9e5bcd6ea684cb191c00ef25bac sha1: 7529bbfc4773982ceb087a49be2bf0f0c833db01 size: 114688
Timestamp2013-05-11 08:47:10
VersionLegalCopyright: 作者版权所有 请尊重并使用正版
FileVersion: 1.0.0.0
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
ProductName: 易语言程序
ProductVersion: 1.0.0.0
FileDescription: 易语言程序
PackerMicrosoft Visual C++ v6.0
PEhashca5f6b3a7203ad8783082a82fba644830661457e
IMPhash65f2091341120f6916e874573bf3ce63
AV360 Safeno_virus
AVAd-Awareno_virus
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVArcabit (arcavir)no_virus
AVAuthentiumW32/Agent.EW.gen!Eldorado
AVAvira (antivir)TR/Agent.2539520.37
AVBullGuardno_virus
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)Win32.VirTool.DelfInject.gen!X.4.a
AVClamAVWin.Trojan.Agent-204211
AVDr. Webno_virus
AVEmsisoftno_virus
AVEset (nod32)no_virus
AVFortinetRiskware/FlyStudio
AVFrisk (f-prot)W32/Agent.EW.gen!Eldorado
AVF-SecureTrojan:W32/DelfInject.R
AVGrisoft (avg)SHeur4.CGHA
AVIkarusno_virus
AVK7no_virus
AVKasperskyTrojan.Win32.Generic
AVMalwareBytesSpyware.OnlineGames
AVMcafeeno_virus
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)no_virus
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\Microsoft\Multimedia\DrawDib\vga.drv 1024x768x24(BGR 0) ➝
31,31,31,31\\x00
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\explorrer.exe ➝
C:\WINDOWS\explorrer.exe
RegistryHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page ➝
http://www.ttx123.cn/?u=sytlzq\\x00
Creates FileC:\WINDOWS\explorrer.exe
Creates FileC:\WINDOWS\Plaza_165_10990.exe
Creates FileC:\WINDOWS\sytlzq_0.exe
Creates FileC:\WINDOWS\setups_66_54648.exe
Creates FileC:\SkinH_EL.dll
Creates FileC:\WINDOWS\KINSTALLERS_66_48115.exe
Creates FileC:\WINDOWS\down_s_66_46068.exe
Creates FileC:\WINDOWS\kuping_s_32216.exe
Creates ProcessC:\WINDOWS\setups_66_54648.exe
Creates ProcessC:\WINDOWS\Plaza_165_10990.exe
Creates ProcessC:\WINDOWS\KINSTALLERS_66_48115.exe
Creates ProcessC:\WINDOWS\down_s_66_46068.exe
Creates ProcessC:\WINDOWS\sytlzq_0.exe
Creates ProcessC:\WINDOWS\explorrer.exe
Creates ProcessC:\WINDOWS\kuping_s_32216.exe

Process
↳ C:\Program Files\Internet Explorer\iexplore.exe

RegistryHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window_Placement ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Locked ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutex_SHuassist.mtx
Creates MutexShell.CMruPidlList

Process
↳ C:\WINDOWS\explorrer.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\223[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\logo[1].gif
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\logo[1].gif
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\2345[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012015020920150210\index.dat
Deletes FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013061320130614\index.dat
Deletes FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013052720130603\index.dat
Creates Mutex_!SHMSFTHISTORY!_
Creates MutexMSIMGSIZECacheMutex
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!mshist012015020920150210!
Winsock DNSwww.2345.com
Winsock DNSwww.223.so

Process
↳ C:\WINDOWS\sytlzq_0.exe

Creates FileC:\WINDOWS\SYSTEM32\REDIR.EXE
Creates FileC:\WINDOWS\SYSTEM32\MSCDEXNT.EXE
Creates FileC:\WINDOWS\SYTLZQ_0.EXE
Creates FileC:\WINDOWS\SYSTEM32\COMMAND.COM
Creates FileC:\WINDOWS\TEMP\scs1.tmp
Creates FileC:\WINDOWS\TEMP\scs2.tmp
Creates FileC:\WINDOWS\SYSTEM32\HIMEM.SYS
Creates FileC:\WINDOWS\SYSTEM32\DOSX.EXE
Deletes FileC:\WINDOWS\TEMP\scs1.tmp
Deletes FileC:\WINDOWS\TEMP\scs2.tmp

Process
↳ C:\WINDOWS\KINSTALLERS_66_48115.exe

Creates FileC:\WINDOWS\SYSTEM32\REDIR.EXE
Creates FileC:\WINDOWS\TEMP\scs4.tmp
Creates FileC:\WINDOWS\SYSTEM32\COMMAND.COM
Creates FileC:\WINDOWS\SYSTEM32\HIMEM.SYS
Creates FileC:\WINDOWS\SYSTEM32\DOSX.EXE
Creates FileC:\WINDOWS\SYSTEM32\MSCDEXNT.EXE
Creates FileC:\WINDOWS\TEMP\scs3.tmp
Creates FileC:\WINDOWS\KINSTA~1.EXE
Deletes FileC:\WINDOWS\TEMP\scs4.tmp
Deletes FileC:\WINDOWS\TEMP\scs3.tmp

Process
↳ C:\WINDOWS\down_s_66_46068.exe

Creates FileC:\WINDOWS\SYSTEM32\REDIR.EXE
Creates FileC:\WINDOWS\SYSTEM32\MSCDEXNT.EXE
Creates FileC:\WINDOWS\DOWN_S~1.EXE
Creates FileC:\WINDOWS\SYSTEM32\COMMAND.COM
Creates FileC:\WINDOWS\TEMP\scs5.tmp
Creates FileC:\WINDOWS\SYSTEM32\HIMEM.SYS
Creates FileC:\WINDOWS\SYSTEM32\DOSX.EXE
Creates FileC:\WINDOWS\TEMP\scs6.tmp
Deletes FileC:\WINDOWS\TEMP\scs5.tmp
Deletes FileC:\WINDOWS\TEMP\scs6.tmp

Process
↳ C:\WINDOWS\kuping_s_32216.exe

Creates FileC:\WINDOWS\SYSTEM32\REDIR.EXE
Creates FileC:\WINDOWS\SYSTEM32\MSCDEXNT.EXE
Creates FileC:\WINDOWS\TEMP\scs8.tmp
Creates FileC:\WINDOWS\SYSTEM32\COMMAND.COM
Creates FileC:\WINDOWS\TEMP\scs7.tmp
Creates FileC:\WINDOWS\KUPING~1.EXE
Creates FileC:\WINDOWS\SYSTEM32\HIMEM.SYS
Creates FileC:\WINDOWS\SYSTEM32\DOSX.EXE
Deletes FileC:\WINDOWS\TEMP\scs8.tmp
Deletes FileC:\WINDOWS\TEMP\scs7.tmp

Process
↳ C:\WINDOWS\setups_66_54648.exe

Creates FileC:\WINDOWS\SETUPS~1.EXE
Creates FileC:\WINDOWS\SYSTEM32\REDIR.EXE
Creates FileC:\WINDOWS\TEMP\scsA.tmp
Creates FileC:\WINDOWS\SYSTEM32\COMMAND.COM
Creates FileC:\WINDOWS\SYSTEM32\HIMEM.SYS
Creates FileC:\WINDOWS\SYSTEM32\DOSX.EXE
Creates FileC:\WINDOWS\SYSTEM32\MSCDEXNT.EXE
Creates FileC:\WINDOWS\TEMP\scs9.tmp
Deletes FileC:\WINDOWS\TEMP\scsA.tmp
Deletes FileC:\WINDOWS\TEMP\scs9.tmp

Process
↳ C:\WINDOWS\Plaza_165_10990.exe

Creates FileC:\WINDOWS\SYSTEM32\REDIR.EXE
Creates FileC:\WINDOWS\TEMP\scsC.tmp
Creates FileC:\WINDOWS\SYSTEM32\COMMAND.COM
Creates FileC:\WINDOWS\SYSTEM32\HIMEM.SYS
Creates FileC:\WINDOWS\SYSTEM32\DOSX.EXE
Creates FileC:\WINDOWS\SYSTEM32\MSCDEXNT.EXE
Creates FileC:\WINDOWS\PLAZA_~1.EXE
Creates FileC:\WINDOWS\TEMP\scsB.tmp
Deletes FileC:\WINDOWS\TEMP\scsC.tmp
Deletes FileC:\WINDOWS\TEMP\scsB.tmp

Network Details:

DNScname.303.mysql.sh.cn
Type: A
180.169.18.4
DNSwww.2345.com
Type: A
42.62.30.180
DNSwxyz.souweng.com
Type: A
122.227.0.163
DNS08911.xdwscache.glb0.lxdns.com
Type: A
8.37.235.5
DNS08911.xdwscache.glb0.lxdns.com
Type: A
8.37.235.6
DNS08911.xdwscache.glb0.lxdns.com
Type: A
8.37.234.3
DNS08911.xdwscache.glb0.lxdns.com
Type: A
8.37.234.4
DNS08911.xdwscache.glb0.lxdns.com
Type: A
8.37.235.2
DNS08911.xdwscache.glb0.lxdns.com
Type: A
8.37.235.3
DNStf01.dlmix.glb0.lxdns.com
Type: A
8.37.234.10
DNStf01.dlmix.glb0.lxdns.com
Type: A
8.37.234.11
DNStf01.dlmix.glb0.lxdns.com
Type: A
8.37.234.12
DNStf01.dlmix.glb0.lxdns.com
Type: A
8.37.235.9
DNStf01.dlmix.glb0.lxdns.com
Type: A
8.37.235.10
DNStf01.dlmix.glb0.lxdns.com
Type: A
8.37.235.11
DNStf01.dlmix.glb0.lxdns.com
Type: A
8.37.235.12
DNStf01.dlmix.glb0.lxdns.com
Type: A
8.37.234.9
DNSwww.078079.com
Type: A
DNSwww.223.so
Type: A
DNSj.union.ijinshan.com
Type: A
DNSd.union.ijinshan.com
Type: A
HTTP GEThttp://www.078079.com/cpa/sytlzq_0.exe
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.2345.com/?k1850
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.2345.com/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.223.so/?sp11264
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.223.so/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://j.union.ijinshan.com/jump.php?u_key=291023
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://j.union.ijinshan.com/jump.php?u_key=294644
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://d.union.ijinshan.com/kuping/jm/kuping_s_32216.exe
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://j.union.ijinshan.com/jump.php?u_key=294651
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://j.union.ijinshan.com/jump.php?u_key=297700
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Flows TCP192.168.1.1:1032 ➝ 180.169.18.4:80
Flows TCP192.168.1.1:1033 ➝ 42.62.30.180:80
Flows TCP192.168.1.1:1034 ➝ 42.62.30.180:80
Flows TCP192.168.1.1:1036 ➝ 122.227.0.163:80
Flows TCP192.168.1.1:1037 ➝ 122.227.0.163:80
Flows TCP192.168.1.1:1038 ➝ 8.37.235.5:80
Flows TCP192.168.1.1:1039 ➝ 8.37.235.5:80
Flows TCP192.168.1.1:1040 ➝ 8.37.234.10:80
Flows TCP192.168.1.1:1041 ➝ 8.37.235.5:80
Flows TCP192.168.1.1:1042 ➝ 8.37.235.5:80

Raw Pcap
0x00000000 (00000)   47455420 2f637061 2f737974 6c7a715f   GET /cpa/sytlzq_
0x00000010 (00016)   302e6578 65204854 54502f31 2e310d0a   0.exe HTTP/1.1..
0x00000020 (00032)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x00000030 (00048)   6c6c612f 342e3020 28636f6d 70617469   lla/4.0 (compati
0x00000040 (00064)   626c653b 204d5349 4520362e 303b2057   ble; MSIE 6.0; W
0x00000050 (00080)   696e646f 7773204e 5420352e 30290d0a   indows NT 5.0)..
0x00000060 (00096)   41636365 70743a20 2a2f2a0d 0a486f73   Accept: */*..Hos
0x00000070 (00112)   743a2077 77772e30 37383037 392e636f   t: www.078079.co
0x00000080 (00128)   6d0d0a43 61636865 2d436f6e 74726f6c   m..Cache-Control
0x00000090 (00144)   3a206e6f 2d636163 68650d0a 0d0a       : no-cache....

0x00000000 (00000)   47455420 2f3f6b31 38353020 48545450   GET /?k1850 HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a41 63636570 742d4c61 6e677561   *..Accept-Langua
0x00000030 (00048)   67653a20 656e2d75 730d0a41 63636570   ge: en-us..Accep
0x00000040 (00064)   742d456e 636f6469 6e673a20 677a6970   t-Encoding: gzip
0x00000050 (00080)   2c206465 666c6174 650d0a55 7365722d   , deflate..User-
0x00000060 (00096)   4167656e 743a204d 6f7a696c 6c612f34   Agent: Mozilla/4
0x00000070 (00112)   2e302028 636f6d70 61746962 6c653b20   .0 (compatible; 
0x00000080 (00128)   4d534945 20362e30 3b205769 6e646f77   MSIE 6.0; Window
0x00000090 (00144)   73204e54 20352e31 3b205356 313b202e   s NT 5.1; SV1; .
0x000000a0 (00160)   4e455420 434c5220 322e302e 35303732   NET CLR 2.0.5072
0x000000b0 (00176)   37290d0a 486f7374 3a207777 772e3233   7)..Host: www.23
0x000000c0 (00192)   34352e63 6f6d0d0a 436f6e6e 65637469   45.com..Connecti
0x000000d0 (00208)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000e0 (00224)   0d0a                                  ..

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f777777 2e323334 352e636f   tp://www.2345.co
0x00000040 (00064)   6d2f3f6b 31383530 0d0a4163 63657074   m/?k1850..Accept
0x00000050 (00080)   2d4c616e 67756167 653a2065 6e2d7573   -Language: en-us
0x00000060 (00096)   0d0a4163 63657074 2d456e63 6f64696e   ..Accept-Encodin
0x00000070 (00112)   673a2067 7a69702c 20646566 6c617465   g: gzip, deflate
0x00000080 (00128)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000090 (00144)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000a0 (00160)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000b0 (00176)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000c0 (00192)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000d0 (00208)   2e302e35 30373237 290d0a48 6f73743a   .0.50727)..Host:
0x000000e0 (00224)   20777777 2e323334 352e636f 6d0d0a43    www.2345.com..C
0x000000f0 (00240)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x00000100 (00256)   416c6976 650d0a0d 0a                  Alive....

0x00000000 (00000)   47455420 2f3f7370 31313236 34204854   GET /?sp11264 HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a416363 6570742d 4c616e67   */*..Accept-Lang
0x00000030 (00048)   75616765 3a20656e 2d75730d 0a416363   uage: en-us..Acc
0x00000040 (00064)   6570742d 456e636f 64696e67 3a20677a   ept-Encoding: gz
0x00000050 (00080)   69702c20 6465666c 6174650d 0a557365   ip, deflate..Use
0x00000060 (00096)   722d4167 656e743a 204d6f7a 696c6c61   r-Agent: Mozilla
0x00000070 (00112)   2f342e30 2028636f 6d706174 69626c65   /4.0 (compatible
0x00000080 (00128)   3b204d53 49452036 2e303b20 57696e64   ; MSIE 6.0; Wind
0x00000090 (00144)   6f777320 4e542035 2e313b20 5356313b   ows NT 5.1; SV1;
0x000000a0 (00160)   202e4e45 5420434c 5220322e 302e3530    .NET CLR 2.0.50
0x000000b0 (00176)   37323729 0d0a486f 73743a20 7777772e   727)..Host: www.
0x000000c0 (00192)   3232332e 736f0d0a 436f6e6e 65637469   223.so..Connecti
0x000000d0 (00208)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000e0 (00224)   0d0a7777 2e323334 352e636f 6d0d0a43   ..ww.2345.com..C
0x000000f0 (00240)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x00000100 (00256)   416c6976 650d0a0d 0a                  Alive....

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f777777 2e323233 2e736f2f   tp://www.223.so/
0x00000040 (00064)   3f737031 31323634 0d0a4163 63657074   ?sp11264..Accept
0x00000050 (00080)   2d4c616e 67756167 653a2065 6e2d7573   -Language: en-us
0x00000060 (00096)   0d0a4163 63657074 2d456e63 6f64696e   ..Accept-Encodin
0x00000070 (00112)   673a2067 7a69702c 20646566 6c617465   g: gzip, deflate
0x00000080 (00128)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000090 (00144)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000a0 (00160)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000b0 (00176)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000c0 (00192)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000d0 (00208)   2e302e35 30373237 290d0a48 6f73743a   .0.50727)..Host:
0x000000e0 (00224)   20777777 2e323233 2e736f0d 0a436f6e    www.223.so..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a0d 0a                  ive......

0x00000000 (00000)   47455420 2f6a756d 702e7068 703f755f   GET /jump.php?u_
0x00000010 (00016)   6b65793d 32393130 32332048 5454502f   key=291023 HTTP/
0x00000020 (00032)   312e310d 0a557365 722d4167 656e743a   1.1..User-Agent:
0x00000030 (00048)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000040 (00064)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000050 (00080)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000060 (00096)   2e30290d 0a416363 6570743a 202a2f2a   .0)..Accept: */*
0x00000070 (00112)   0d0a486f 73743a20 6a2e756e 696f6e2e   ..Host: j.union.
0x00000080 (00128)   696a696e 7368616e 2e636f6d 0d0a4361   ijinshan.com..Ca
0x00000090 (00144)   6368652d 436f6e74 726f6c3a 206e6f2d   che-Control: no-
0x000000a0 (00160)   63616368 650d0a0d 0a494520 362e303b   cache....IE 6.0;
0x000000b0 (00176)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000c0 (00192)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000d0 (00208)   2e302e35 30373237 290d0a48 6f73743a   .0.50727)..Host:
0x000000e0 (00224)   20777777 2e323233 2e736f0d 0a436f6e    www.223.so..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a0d 0a                  ive......

0x00000000 (00000)   47455420 2f6a756d 702e7068 703f755f   GET /jump.php?u_
0x00000010 (00016)   6b65793d 32393436 34342048 5454502f   key=294644 HTTP/
0x00000020 (00032)   312e310d 0a557365 722d4167 656e743a   1.1..User-Agent:
0x00000030 (00048)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000040 (00064)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000050 (00080)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000060 (00096)   2e30290d 0a416363 6570743a 202a2f2a   .0)..Accept: */*
0x00000070 (00112)   0d0a486f 73743a20 6a2e756e 696f6e2e   ..Host: j.union.
0x00000080 (00128)   696a696e 7368616e 2e636f6d 0d0a4361   ijinshan.com..Ca
0x00000090 (00144)   6368652d 436f6e74 726f6c3a 206e6f2d   che-Control: no-
0x000000a0 (00160)   63616368 650d0a0d 0a494520 362e303b   cache....IE 6.0;
0x000000b0 (00176)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000c0 (00192)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000d0 (00208)   2e302e35 30373237 290d0a48 6f73743a   .0.50727)..Host:
0x000000e0 (00224)   20777777 2e323233 2e736f0d 0a436f6e    www.223.so..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a0d 0a                  ive......

0x00000000 (00000)   47455420 2f6b7570 696e672f 6a6d2f6b   GET /kuping/jm/k
0x00000010 (00016)   7570696e 675f735f 33323231 362e6578   uping_s_32216.ex
0x00000020 (00032)   65204854 54502f31 2e310d0a 55736572   e HTTP/1.1..User
0x00000030 (00048)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000040 (00064)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000050 (00080)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x00000060 (00096)   7773204e 5420352e 30290d0a 41636365   ws NT 5.0)..Acce
0x00000070 (00112)   70743a20 2a2f2a0d 0a486f73 743a2064   pt: */*..Host: d
0x00000080 (00128)   2e756e69 6f6e2e69 6a696e73 68616e2e   .union.ijinshan.
0x00000090 (00144)   636f6d0d 0a436163 68652d43 6f6e7472   com..Cache-Contr
0x000000a0 (00160)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x000000b0 (00176)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000c0 (00192)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000d0 (00208)   2e302e35 30373237 290d0a48 6f73743a   .0.50727)..Host:
0x000000e0 (00224)   20777777 2e323233 2e736f0d 0a436f6e    www.223.so..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a0d 0a                  ive......

0x00000000 (00000)   47455420 2f6a756d 702e7068 703f755f   GET /jump.php?u_
0x00000010 (00016)   6b65793d 32393436 35312048 5454502f   key=294651 HTTP/
0x00000020 (00032)   312e310d 0a557365 722d4167 656e743a   1.1..User-Agent:
0x00000030 (00048)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000040 (00064)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000050 (00080)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000060 (00096)   2e30290d 0a416363 6570743a 202a2f2a   .0)..Accept: */*
0x00000070 (00112)   0d0a486f 73743a20 6a2e756e 696f6e2e   ..Host: j.union.
0x00000080 (00128)   696a696e 7368616e 2e636f6d 0d0a4361   ijinshan.com..Ca
0x00000090 (00144)   6368652d 436f6e74 726f6c3a 206e6f2d   che-Control: no-
0x000000a0 (00160)   63616368 650d0a0d 0a636865 0d0a0d0a   cache....che....
0x000000b0 (00176)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000c0 (00192)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000d0 (00208)   2e302e35 30373237 290d0a48 6f73743a   .0.50727)..Host:
0x000000e0 (00224)   20777777 2e323233 2e736f0d 0a436f6e    www.223.so..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a0d 0a                  ive......

0x00000000 (00000)   47455420 2f6a756d 702e7068 703f755f   GET /jump.php?u_
0x00000010 (00016)   6b65793d 32393737 30302048 5454502f   key=297700 HTTP/
0x00000020 (00032)   312e310d 0a557365 722d4167 656e743a   1.1..User-Agent:
0x00000030 (00048)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000040 (00064)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000050 (00080)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000060 (00096)   2e30290d 0a416363 6570743a 202a2f2a   .0)..Accept: */*
0x00000070 (00112)   0d0a486f 73743a20 6a2e756e 696f6e2e   ..Host: j.union.
0x00000080 (00128)   696a696e 7368616e 2e636f6d 0d0a4361   ijinshan.com..Ca
0x00000090 (00144)   6368652d 436f6e74 726f6c3a 206e6f2d   che-Control: no-
0x000000a0 (00160)   63616368 650d0a0d 0a636865 0d0a0d0a   cache....che....
0x000000b0 (00176)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000c0 (00192)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000d0 (00208)   2e302e35 30373237 290d0a48 6f73743a   .0.50727)..Host:
0x000000e0 (00224)   20777777 2e323233 2e736f0d 0a436f6e    www.223.so..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a0d 0a                  ive......


Strings
....  ................
"#
....
.........
10/.-,+*)('&%$#"! ..............
.....
..........
..
.........
-
..
x
==
...
.
 
\
-% BbmHpAadYySMI \
.-E-0-0..
00-+ 
e
 
:.:\
00...........?-  
0
0 
0
?
....  ................
"#
....
.........
10/.-,+*)('&%$#"! ..............
.....
..........
c...
..
.........
-
..
x
..
-- \
.-E-0-0..
00-+ 
e
 
00...........?-  
0
0 
0
?
.
  
..
.
u
_
..
.
..
t.nq
w
..
)
`_...p
8
..I;
&
..qQ
Q..>..

    
 ......
 (*.*)
#####
#######
040904b0
080404B0
 %1 
1.0.0.0
1, 0, 6, 6
	1uM
B B1
BPB`B
(&C)
Comments
CompanyName
Copyright (C) 2006-2009 SkinSharp Inc.
	Ctrl+
	Ctrl+D
	Ctrl+End
	Ctrl+G
	Ctrl+Home
	Ctrl+N
	Ctrl+PageDown
	Ctrl+PageUp
	&D.
DEFAULT_ICON
DjDnD
 DLL 
(&E)
FileDescription
FileVersion
Gjjj
Gjjjh
Gjjjj
Gjjjjjjjj
         (((((                  H
(&H)
(http://www.eyuyan.com)
(&I)
 INI 
InternalName
jjjj
jjjjh
jjjjj
jjjjjj
LegalCopyright
LegalTrademarks
msctls_progress32
msctls_updown32
MS Shell Dlg
(&N)
(null)
(&O)
OriginalFilename
(&P)
	PageDown
	PageUp
PrivateBuild
ProductName
ProductVersion
Progress1
$r$b$T$@$.$
 %s 
(&S)
	Shift+Tab
SkinH_EL.dll
SkinSharp
SkinSharp For EL
SkinSharp GUI Toolkit
SkinSharp Inc.
SpecialBuild
Spin1
StringFileInfo
(&T)
	Tab/Enter
TEXTINCLUDE
Translation
VarFileInfo
vDyD|D
VS_VERSION_INFO
xxxx
^,_^][
^$_^[]
<>	.%	
<*]|{:$
 (*.*)|*.*||
/|?'~|
*&&,,%%#
	!	!	!	!	
009 L~
0-2eNA^
(&07-034/)7 '
07d~II
07n7a9
#0{7RVMT@|
0A4)VP
0|C)!4
0dk:ghV
0+)EA7C
{0{Fu}
0gNK_I
0gsm$I
0!h1xv
0|'hIt	0
0IIgJD)
0j%4NTR
0,%J83+c;5/w;5/w83+c0,%J
'_0Jjc;
}_0LqKf
0MVJ@d
/0<(mX
>0N*;$&
0%P3cU
0)|^pBs
0PL{;}
%.0pR-
0P!Z2[
0R8c.b
0R>\W[
0tDyyk
0u/2^g%
("/{	1
+++++++1+
))++++122222522121212111++
))+++12222KKKKK222222212111++
,1"52.*
1~5ba.
1aa6RdA
1B7Ue5
1BG*=b
%1B Q]
1>{Bqd
%1c%-^
* `1d>
1FKLLJE+
1F,v>$5*4
->1'K/
1KI2221++
1Lf7%/-
1~nCEiS
@1NZ!S
1P6*$l
1#QNAN
[+`1Sjz>
1#SNAN
1"^u>6
:1UsVr
1Uuy6o
/&1ypY
1Z5y)G
1zISj5v
+++++21212++1111++++
"+22*"
2211++
))+++2222KKKKKKKKIKIKII222211++
)+,222K
)+,222NI?
++,222NKI
+++222NKKIII>
2:2:2p
223::3
)++,2251
)+,225k
)+,22NR
23#233#323c:3
23%#l{
	2	5	5	5	5	5
)++,25K
2%5w\uB
(2@6~eN
	2( 7i
29~e~W
2Ak<[E
2('a\v?
%2\CLSID
%+.2d%.2d
%2\DocObject
2?FFlx
2\Gff,B]`Y
2i|{ c
2	i;E2
%2\Insertable
2KKKK2
2*kXN	iAc	[
2M<yi?;
))+2NNRT\\_bbb
2 |Pf"t
%2\protocol\StdFileEditing\server
%2\protocol\StdFileEditing\verb\0
2sW1Pbu
2/-]T0
"&2tPu7
2UF1>R
2U~G\U
:~2u,t
2>^" w
;:::::3
:::3##
"""""#$$$%%%%$$$$$$3
31yCC^}
#3:22:3#
:32::3
;::3:3
:33::0
;:3::3::3
3*:33:3
3:33:33
3:333*:8
::::33x
+34&|r
)%38PB
3)8Z/{
3d^TbS S{
,3D(Y$>
@3EV	[
3EWT\&
3ExmC`
3f{M6b
3he\&}
3I?7-)/>H2
3;IHH(.
3Ik<yH+
3J4Kud^
@[3$<K
|3k		D
{3O"W_
3&p7/haZ
3qboR0;T
3Ry&qc_b
3Tb-A0f
>405RMGv
:45m8|YE
4-68L	
47WQVT"
\48	-a
=[48bj
48:`j^)
4%a=Nw
4{:=f3v
4(F@g^z
'4fk4Hz
,4JM0e
4o#.dM
,4.qO,
4R]!}nF
4_SNThL
\$4t|Ht@H
4<W<#7
.4X]tsv
|?5^<@
$&5,&#
5.'&${
5	!	!	!	!
5014D8FA6DCA40b68FA626D8183666EB
52F260023059454187AF826A3C07AF2A
!"54Rh
54`~UA
	5	5	5
!!55544,..
!!!5555!!!!!!!
555ONTRT__bccb
/55NNRR___bc
,/55NNTT\_bbbb
//55NTTR__bbb
),55ONRR___bbc
>(58<=BEFEi\\\EA<<;58""
+5b|^gq
5B{qS&V
5cHN\3R
5\FzAt
5G7RN(
5!Gk#,
5g"NlC
5,h2@H
\5K'Om
5=K `v
5%L{FV
5m%.J3
5{>Mu%
=<5NORTR___bccbc
5{}oafM'Z 
5!_^rF$
5R/!N&
";5rqm
5;`Sdjc
"5<vEEE\\\\\EEEAAAA;u4!
5W'^	Y
5YYNuk
5Z2P" Z"
5Z4^xT
 5)Zi|
6;50+I
65:J'IE
	6	6	6	6
	6	6	6	6	6	6	6	6	6	6	,	,	,	,	,	,	,	,	+	+	+	+	+	/	/	/	'	'	'	'	'	'	'	'	'	'	(	(	(	(	(	(	(	(	(	(	(	(	(	
+6755R8
[&]^68
68#I1$#
6	-a\d9
!6&%be
<6IPF3
6!J7YwQP
6j"ip1
=6?JK 
6KKKKKKKK>
]6m`v5'
	#6"N;+0(
&6oJ8;
6 olYp
6pn):h
6Q(e&;
<(6S1v
6&#VsM
6wT{2wl
6X.x,^
6Z;58X
6Zg:A"
707ca37322474f6ca841f0e224f4b620
7^|0un
712'uP
73cg[#u
7~3%r\[
75_AhT
	7	7	7	7	7	7	7	7	7	7	7	*	*	-	-	-	-
7:7[-Q
7a1Fna
7Acq l
7CgpPY
7ea:lj
7eie]8v
7*hD`t
7kzb(6
7m4[f%
7ny0<T\O
7p}7kd
7{Q,*q
 7s+e[
$7~shV
&:7VIh
,\7YU<
7yyIPC
}.:|%8\
81lgpj
/8*4g82md
88'3I.
?))8888==8(
*(88=BBBEEFEFE<;;58""
/89hup
"8<<AEEEE\\ijEEEAAAA;;55"
8A>V.	XJ
"(8<<BBEEi\iiiEAA<<;58""
>("8<BBEFi\iiiiEAAA<;;55"
"8<<BBEk
8BE8R!
(8;<BEE]
"8<<BEF{
 ?8Fc)
$8FXM$t:
8j!nLe/
8KnOk.
.	8k!r
8MThdu
]8}!n4f
8/oHJe
8R7M]t
	8RWRzG
8'/r<X[
8;SPfvm6
8u:}	d
8U&l4k
\$8UVW
[-8^v!
;&/%8vBw
8,W	Qa
8zE[[xLh
&=8ZuD
~904FI
9^0u/j
92(y/z
`[	93b
9;4.,]
^}%95`
_9!<	5
95'lVr*TccQ
%9, %8
&985,.0
?9?_9$
'9A`u"9
9,b	bg
#(9 b#d
9b^zRA5
)$,9D'
9D+2W=
9D$$t+
9Ef	`0$=~
"+'9^E*u
9*_ex:
($.\9f
9G4_^d
~9G*;f-=
>`9GFWM
9H(H3B
9^Ht}3
&?9 I7
9KD3hH
)9lg]/
9l$\w_
9L$x~e
9l$xtU9
9?m,I	#
9M/u!w=W
9nPu	9^T
{9n>VM
9o4u'V
	9oTtc
:::9___p
9P-y*.
9#rm*^]
9$(-SF4
9~SkF&
9~@St99~8~
9t$0v8
9^@t53
9u ^t	
_9wKBil
9X]#?=
9^xu5j
9x u	f
9yekG^7
9;;YJ@
{:9yqG
+9z'FW
~9zLB1?
!a>009]4
a]1S?d
<A|2<Z
\-A}=3K
a4IfQ"
A5,}>0v
A512548E76954B6E92C21055517615B0
>A*9d,
A/(9D	
aaas>::=
abcddefghijklmnoopqrrsstuvvwwxyyz;
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
>aB;	E6
abnormal program termination
Accept: */*
Accept: */* 
Ac=F]Q\
AcRc|n[k=C
a`)}	D
%a, %d %b %Y %H:%M:%S 
AdjustTokenPrivileges
AdjustWindowRectEx
ADl{UD
A'dpmB
AD=pVs$Q6Ro
AdTfAN
Advapi32.dll
ADVAPI32.dll
ae	92Fpw"
Af99rrH3~b
AfxControlBar42s
AfxFrameOrView42s
AfxMDIFrame42s
AfxOldWndProc423
AfxOleControl42s
AfxWnd42s
Afx:%x:%x
Afx:%x:%x:%x:%x:%x
A`gl&E
Ah@6N[
Ah=6On/p#
aIG_;l
AK#96G
;aKRjo
+`A l3
]&A~+]my
?	@AO^
a:>oCM
aoih?ox
A!onx.
AppendMenuA
aRN8RA
)A$SH,
:A.>SO#l
aU2Q+`
.?AUCThreadData@@
August
.?AUIBoundObjectSite@@
.?AUIDispatch@@
.?AUIEnumVOID@@
.?AUIMessageFilter@@
.?AUINotifyDBEvents@@
.?AUIOleClientSite@@
.?AUIOleContainer@@
.?AUIOleControlSite@@
.?AUIOleInPlaceFrame@@
.?AUIOleInPlaceSite@@
.?AUIOleInPlaceUIWindow@@
.?AUIOleWindow@@
.?AUIParseDisplayName@@
.?AUIPropertyNotifySink@@
.?AUIRowsetNotify@@
.?AUISequentialStream@@
.?AUIStream@@
.?AUIUnknown@@
.?AV_AFX_BASE_MODULE_STATE@@
.?AV_AFX_CHECKLIST_STATE@@
.?AV_AFX_COLOR_STATE@@
.?AV_AFX_CTL3D_STATE@@
.?AV_AFX_CTL3D_THREAD@@
.?AVAFX_MODULE_STATE@@
.?AVAFX_MODULE_THREAD_STATE@@
.?AV_AFX_OLE_STATE@@
.?AV_AFX_SOCK_STATE@@
.?AV_AFX_THREAD_STATE@@
.?AV_AFX_WIN_STATE@@
.?AVCArchiveException@@
.?AVCArchiveStream@@
.?AVCBitmap@@
.?AVCBrush@@
.?AVCButton@@
.?AVCByteArray@@
.?AVCClientDC@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCColorDialog@@
.?AVCComboBox@@
.?AVCCommonDialog@@
.?AVCCriticalSection@@
.?AVCDataSourceControl@@
.?AVCDateTimeCtrl@@
.?AVCDC@@
.?AVCDialog@@
.?AVCDWordArray@@
.?AVCEdit@@
.?AVCEnumArray@@
.?AVCEnumUnknown@@
.?AVCException@@
.?AVCFile@@
.?AVCFileDialog@@
.?AVCFileException@@
.?AVCFileFind@@
.?AVCFont@@
.?AVCGdiObject@@
.?AVCHandleMap@@
.?AVCImageList@@
.?AVCMapPtrToPtr@@
.?AVCMapStringToPtr@@
.?AVCMemFile@@
.?AVCMemoryException@@
.?AVCMenu@@
.?AVCNoTrackObject@@
.?AVCNotSupportedException@@
.?AVCObject@@
.?AVCOccManager@@
.?AVCOleBusyDialog@@
.?AVCOleControlContainer@@
.?AVCOleControlSite@@
.?AVCOleDialog@@
.?AVCOleDispatchException@@
.?AVCOleException@@
.?AVCOleMessageFilter@@
.?AVCPaintDC@@
.?AVCPen@@
.?AVCProgressCtrl@@
.?AVCPtrArray@@
.?AVCPtrList@@
.?AVCResourceException@@
.?AVCRgn@@
.?AVCSessionMapPtrToPtr@@
.?AVCSharedFile@@
.?AVCSimpleException@@
.?AVCSpinButtonCtrl@@
.?AVCStatic@@
.?AVCStringArray@@
.?AVCSyncObject@@
.?AVCTempDC@@
.?AVCTempGdiObject@@
.?AVCTempImageList@@
.?AVCTempMenu@@
.?AVCTempWnd@@
.?AVCTestCmdUI@@
.?AVCToolTipCtrl@@
.?AVCUserException@@
.?AVCWinApp@@
.?AVCWindowDC@@
.?AVCWinThread@@
.?AVCWnd@@
.?AVCWordArray@@
Av-eT|1
'AVJp]4
.?AVtype_info@@
.?AVXAmbientProps@COleControlSite@@
.?AVXBoundObjectSite@COleControlSite@@
.?AVXEnumVOID@CEnumArray@@
.?AVXEventSink@COleControlSite@@
.?AVXMessageFilter@COleMessageFilter@@
.?AVXNotifyDBEvents@COleControlSite@@
.?AVXOleClientSite@COleControlSite@@
.?AVXOleContainer@COleControlContainer@@
.?AVXOleControlSite@COleControlSite@@
.?AVXOleIPFrame@COleControlContainer@@
.?AVXOleIPSite@COleControlSite@@
.?AVXPropertyNotifySink@COleControlSite@@
.?AVXRowsetNotify@COleControlSite@@
]A wB(WxX
#AX|z`
:?!a.z
\^Az]/
<A|@<Z
Az!HW>
+aZ.mO
b}_>]*
B 02CV
b0&`q:+U 
B=2Kq?
b>,~3<
b5]\+;
B6ZE-g
B|a2.k
bbba\\\\\\R]
bbbbbc
bbbbb\\\\\RRRLKK21+
bbbb\Z\\\RRRKKK22,+)
BbwbyQ
Bc6So1p
]>b c?Bh
bcdfghijklmnpqrstuvwxyz
BeginPaint
BeginPath
bEp}k|
B"}Gy:
B>ha'w
BitBlt
-bJPxT
BJY.8U
BKbhTb~XBK!;
 (*.BMP)|*.BMP|GIF
BNSJEc
%bNZ3A
Bogus message code %d
B\(O-J
bO;qv-
b}qC}.
B.,R9P
b\\\\\\\RLg
BRPj+S
BS	C"'
b\SkinH_EL.dll
bt<0~g
btD\wR
bU'*^7
Button
BUTTON
BuuV{<
Bx#w0#`
&BZi [|
% -C-]
C =02CVu
@c"0pS^
;C,0Xz
`c1peK
c2;?8G	7
 c2T)CO 
C3_:77
C4PY^)
C5D)9L)
c`<5lk
C,6pjh2
c9tUsW
CallNextHookEx
CallWindowProcA
Caption
CArchiveException
CBitmap
CBrush
CButton
C-B	/w
Cb*X)q
CByteArray
===>ccci
ccclAAAB
`C--cF*
CClientDC
C$%cmb
CCmdTarget
CColorDialog
CColourPicker
CComboBox
CCriticalSection
Cc: %s
(ccu-_
CDateTimeCtrl
CDialog
?C.&dn
CDWordArray
CET3^h
CException
cF8^^1x
CFileDialog
CFileException
CFileFind
)cG7(1 
CGdiObject
cgeIRH3/
CharNextA
CharUpperA
CheckMenuItem
ChildWindowFromPointEx
ChooseColorA
>)ch!vabP
}_C|i?Bd
CImageList
cI<sM6	Y
CJ7pvdH
CK0_d&J
Ck2"/X
:Ckfaq
ck(WSbpS
ClientToScreen
CloseClipboard
CloseDatabase
CloseHandle
ClosePrinter
CLSID\%1
CLSID\%1\AuxUserType\2
CLSID\%1\AuxUserType\3
CLSID\%1\DefaultExtension
CLSID\%1\DefaultIcon
CLSID\%1\DocObject
CLSID\%1\InprocHandler32
CLSID\%1\InProcServer32
CLSID\%1\Insertable
CLSID\%1\LocalServer32
CLSID\%1\MiscStatus
CLSID\%1\Printable
CLSID\%1\ProgID
CLSID\%1\Verb\0
CLSID\%1\Verb\1
CLSIDFromProgID
CLSIDFromString
%cLur?
$";c?m
CMapPtrToPtr
CMapStringToPtr
CMemFile
CMemoryException
c&mq$X
:cN2B2
CNotSupportedException
CObject
CoCreateInstance
CoFreeUnusedLibraries
CoGetClassObject
COleBusyDialog
COleDialog
COleDispatchException
COleException
CombineRgn
combobox
COMCTL32.dll
COMCTL32.DLL
comdlg32.dll
commctrl_DragListMsg
commdlg_ColorOK
commdlg_FileNameOK
commdlg_help
commdlg_LBSelChangedNotify
commdlg_SetRGBColor
commdlg_ShareViolation
CompareStringA
CompareStringW
Content-Transfer-Encoding: base64
Content-type: multipart/mixed; boundary="#BOUNDARY#"
Content-type: text/plain; charset="
CopyAcceleratorTableA
CopyRect
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
COT<Hy
)cOX2M
CPaintDC
CPalette
CProgressCtrl
CPtrArray
CPtrList
({?.cQm
.Cqx~c
CreateAcceleratorTableA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDialogIndirectParamA
CreateDIBitmap
CreateEllipticRgn
CreateEventA
CreateFileA
CreateFontIndirectA
CreateIconFromResource
CreateIconFromResourceEx
CreateILockBytesOnHGlobal
CreateMenu
CreatePalette
CreatePen
CreatePolygonRgn
CreatePopupMenu
CreateProcessA
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSemaphoreA
CreateSolidBrush
CreateThread
CreateWindowExA
CResourceException
C$r$:G
CSharedFile
CSpinButtonCtrl
CStatic
CStringArray
CSyncObject
-cT1j|!
CTempDC
CTempGdiObject
CTempImageList
CTempMenu
CTempWnd
C;t!lC!
CToolTipCtrl
c{	t(ra
Ctrl+A
Ctrl+B
Ctrl+C
Ctrl+D
Ctrl+E
Ctrl+F
Ctrl+F1
Ctrl+F10
Ctrl+F11
Ctrl+F12
Ctrl+F2
Ctrl+F3
Ctrl+F4
Ctrl+F5
Ctrl+F6
Ctrl+F7
Ctrl+F8
Ctrl+F9
Ctrl+G
Ctrl+H
Ctrl+I
Ctrl+J
Ctrl+K
Ctrl+L
Ctrl+M
Ctrl+N
Ctrl+O
Ctrl+P
Ctrl+Q
Ctrl+R
Ctrl+S
Ctrl+Shift+F1
Ctrl+Shift+F10
Ctrl+Shift+F11
Ctrl+Shift+F12
Ctrl+Shift+F2
Ctrl+Shift+F3
Ctrl+Shift+F4
Ctrl+Shift+F5
Ctrl+Shift+F6
Ctrl+Shift+F7
Ctrl+Shift+F8
Ctrl+Shift+F9
Ctrl+T
Ctrl+U
Ctrl+V
Ctrl+W
Ctrl+X
Ctrl+Y
Ctrl+Z
 (*.CUR)|*.CUR|
CUserException
|CV+*=
c|V[i~
?CW?_;
CWinApp
CWindowDC
C:\WINDOWS\down_s_66_46068.exe
C:\WINDOWS\explorrer.exe
C:\WINDOWS\KINSTALLERS_66_48115.exe
C:\WINDOWS\kuping_s_32216.exe
C:\WINDOWS\Plaza_165_10990.exe
C:\WINDOWS\setups_66_54648.exe
C:\WINDOWS\sytlzq_0.exe
CWinFormUnit
CWinThread
}>cwN 
CWordArray
c wqST
C<w\vI
CYD,FE
Cy^IX4
!Cz3	s
Cz$4r]D
c=Z)he
`\	Cz>I
?? / %d]
~D#}`#
D"[#%*
D$ _^][
D$,_^]
D$,;\$|
D$(_^]
D$(_^][
D$$_^[
d09f2340818511d396f6aaf844c7e325
D$<0`G
D$ 0`G
D$(0`G
D$$0`G
D$0SUV
D$0WPQ
^D\*/2$
D$ |2;
D$40`G
D$49D$$}
d4b~PH
D$4 `G
%D56m*
D5u	pp En
d6.*_!
d7{7mNp
D$89Vdu
D$8QRPh
D$8RPj
D$8VPQ
D$$~9+
d9avHOw
>%d9d	g
\d9	Ong\
,d} A	
@.data
DatePicker
Date: %s
{dauma
D[A`vy
_	D.b+
DBNo+co
D+\bnX
D]+bXo
D$(CUSWP
 %d/%d 
(%d-%d):
%d / %d
%d / %d]
dddd, MMMM dd, yyyy
D$dPQV
D$dQUWRP
D$dSUVW
D$DSWRPQ
D$DURP
[ddxO!,
DE8V/T
December
DEFAULT_ICON
#define _AFX_NO_OLE_RESOURCES
#define _AFX_NO_PROPERTY_RESOURCES
#define _AFX_NO_TRACKER_RESOURCES
DefWindowProcA
DELETE
DeleteCriticalSection
DeleteDC
DeleteMenu
DeleteObject
	d'eO*
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
device
devices
Devxh1
Dgt`@ 
.)D$H)
D$H_^][
D$|h@}H
dHJ4 5"A
D$ hp"C
D$hQRP
D$hRPQ
D$hSUV3
D$ htBH
D$|htMd
D$hUPQ
D$HUPQ
D$HUSj
D$(h Wd
d;IHeg
dI!N]Q(
disable
DispatchMessageA
DISPLAY
"+d$J	
DjHGc%I!z
DjOienWR+y
=DKKE=
D$(;l$ 
D$L0`G
DllRegisterServer
DllUnregisterServer
D$L$nG
Dl~oNp
D$LPUj
D$LUSWP
-D %M1<
<[DM4Rd#_
D$<$nG
D$ $nG
dNKY	+
DocumentPropertiesA
DOMAIN error
<,d[OV
/-Dp$_
D$,Pj<j
<dpMqE]
DPQhdMd
D$ PQR
D$PQRP
D$PRPQ
DPtoLP
-'"dQn
D$(QPW
D$(QRP
D$$QUP
Dr3j';
DrawDibOpen
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawTextA
D$@RPQj
D$ RPUhD
DRQPhdMd
<drT{*
D$,RVh
D$,RVhH~H
DS\0[P
D$,SPh
D;sTNmn
D$(SUV
D$$SUV
D$t+D$\
D$t#D$h
D$TRPW
D$TVPW
D$<tzG
D$ tzG
D/UP~D
DuplicateHandle
D$@UPQ
_D~uuS
|$D UV
dV92DV
DVwoq]
DweY}z)
D$@WPS
Dw=|:s
D$XPQU
D$XQRWP
D$XSUV
;D$xt&
<]d|\y
dZbp:Mc
%?dZW[
E0r=(k}
E3v")`
]E4%F(
E)4)o1q
E$$6/el
E	"9|e
!EAAB```_lllsqqq
*.Ea]S
EA"u~A\
E]"BDv
EB?K]f E
\eB#`U
ech1Y%
eD	2.F
&Edit,0,2
EditBox
ed*YH~1S
[>E) f
#@efwu
egx+#V
[eH\=]
Eh3_Se
E Hb1Q
EHPWVS
Ej:B8;7
EkmIt^d5t
;@el-J
Ellipse
E(&:{M
Embedded Object
Embed Source
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EndDoc
#endif
#endif //_WIN32
EndPage
EndPaint
EndPath
EnterCriticalSection
EnumDisplayMonitors
EnumDisplaySettingsA
,%[E&p
e;poH,2
ePq$kc
EP/xC]a
E%q}8=3
Eqoz?o
eQpenc
EqualRect
e^RAh[Q8
ER\Jlz56
eR^\j#r
e\RRRKKK22,+):
	$e!]rxm
E?~>;s
Escape
ET6Jm~T
e vpitk
E<+vYw
.e{W7dP
Ew'AE	
eX8nE/
ExcludeClipRect
ExitProcess
ExitWindowsEx
ExtSelectClipRgn
ExtTextOutA
exZM6'3
^e.]z#55
ezB'z'
E;+Zq;C
}f_}"`
<":'	F>
F<_^][
F,_^][
F\_^][
F09^4u*j
[f1D3b
\?*$_F-3cE/;cE/;_F-3\?*$?*
F49^8u&j
$f4C)ij
f|4%Z3D7t<
f6;j-S
F7FC1AE45C5C4758AF03EF19F18A395D
F.}7pR
F89^8u&j
F8+N,+F0
F(9V8tQ
&:,FA,75
(+$fBgE
fbK0+Wz
f.D8<na
FD@ul9L$(}f
FD uy9D$$}s
fdx	^s
February
@<f|e""X
>fezKE
F%*.*f
F(_+F$^[;E
?fff&ff23
F$@;F(v
F$@@;F(v
;fG7RHe
(Fg%+C
<fGd3[w
f!h%7z
Fh+Ff(!s
~FIBZk~
fIe'uK
file://
FileName
FileNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
FillRect
FillRgn
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FindWindowExA
fi<%z_
FJ3nF<Yv
F\jLSP
f}jWg1
fJ.WM_
,fk+bC
- floating point not loaded
FlushFileBuffers
F_mMxK
'F!N*D<$
f&n_UD
#?f;:o 
fOK{YI
FontSize
FormatMessageA
.fOuV12
FpHt&Ht
?fq[\i
~FQzmT
f`R`9%
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
~fRG3O
Friday
'f	@Rl
From: %s
$&fs)=3/
[/fS_MR
Ft/i+t
F_T}m9
fT`pd#Bk
?fTu\\
{>F `U
FugP#9
FuZAQjl
FvM/]X9
|F-%VT
'`fWkQr"
Fxt_;FTu@
fyrJgFK
G0\*/N
|G0[Yxd
\@G2Sv
)-g3h9
g3mWks%
/#g6:*-<
g}6LX]
	)"g7Q
G8xO.e
G/a;*eh
GAIsProcessorFeaturePresent
g~b1Y%
gb2312
=?gb2312?B?
#&GB6&@D
'g`Bc\
=GCmhl
g:C};.V
G^D`g"8 j
Gdi32.dll
GDI32.dll
GE-go3
GeHL6';5P
GEpU5y@#.
GetACP
GetActiveWindow
GetBkColor
GetBkMode
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetClipBox
GetClipRgn
GetCommandLineA
GetConnectString
GetCPInfo
GetCurrentDirectoryA
GetCurrentObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetCursorPos
GetDesktopWindow
GetDeviceCaps
GetDIBits
GetDlgCtrlID
GetDlgItem
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileTime
GetFileTitleA
GetFileType
GetFocus
GetForegroundWindow
GetFullPathNameA
GetKeyState
GetLastActivePopup
GetLastError
GetLocalTime
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessageA
GetMessagePos
GetMessageTime
GetModuleFileNameA
GetModuleHandleA
GetMonitorInfoA
GetNextDlgGroupItem
GetNextDlgTabItem
GetObjectA
GetOEMCP
GetOpenFileNameA
GetParent
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessVersion
GetProfileStringA
GetPropA
GetROP2
GetSaveFileNameA
GetScrollPos
GetScrollRange
GetStartupInfoA
GetStdHandle
GetStockObject
GetStretchBltMode
GetStringTypeA
GetStringTypeW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetSystemPaletteEntries
GetSystemTime
GetTabList
GetTextColor
GetTextExtentPoint32A
GetTextMetricsA
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetTopWindow
GetVersion
GetVersionExA
GetViewportExtEx
GetViewportOrgEx
GetVolumeInformationA
GetWindow
GetWindowDC
GetWindowExtEx
GetWindowLongA
GetWindowOrgEx
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
gEw[=d
gg1kNe
G"G)Ck
@}#GHZ5
 (*.GIF)|*.GIF|
_gj95g\
:@G@K|
^gk6OJr
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalHandle
__GLOBAL_HEAP_SELECTED
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
g=~or&
gp CMW
gQ'.Io
} GqYD
GrayStringA
gr<BGo
GroupBox
}g;rP5YJ;
G*S^0^
gs ~n=k
>^G-(t*
g@#TIE
)GTt5Oht
 ]`gU8
G(UMw=
>gVDy]0
[gVm/j
~#gWj./
GWoO:iG
[gWqFD
<GWuR 
GX7)1r
*gXL)<
gy{L]*s
GyMf-d
`h````
={$h){$
(!h(1P
h3f@y)
h74){)
h+8:,z
h9n`u;
[har/H
h\bbbbb
	HBD?L
hBU`Ot
hBY+N+
hcgmO(r
Hc}Gyoa
h@CUap<
HC=VyV
Hdaq})
Hd"lZX
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
height
#Hfrn+
`Hg1@5
hgjlkbrfzaoe
hgYOR,
HgzDHy
hHIMu2
HHtiHtGH
HHtpHHtl
"hiM3V
&'h	jm
h kOP[#
hldl; !
h\\\\\\LLLLLLd
H:mm:ss
;hNG9)E
@|H.NI
h!O> %
hohlx=#:[
hp-@44lZ
H\!q5&c
h[Q8e^RA
h[Q8j\T$
h\QBf[SC
HrCg@b	g 
::\hrO
#HRRzJ
hrXqmW
HSVHWtgHHtF
Ht#HHt
HtHHt(
HtHHuz
 (*.htm;*.html)|*.htm;*.html
HtmlViewer
HtOHt)H
HtTHtFHt8Ht*Ht
HTTP/1.0
http://d.union.ijinshan.com/kuping/jm/kuping_s_32216.exe
http://j.union.ijinshan.com/jump.php?u_key=291023
http://j.union.ijinshan.com/jump.php?u_key=294644
http://j.union.ijinshan.com/jump.php?u_key=294651
http://j.union.ijinshan.com/jump.php?u_key=297700
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
http://www.078079.com/cpa/sytlzq_0.exe
http://www.223.so/?sp11264
http://www.2345.com/?k1850
http://www.ttx123.cn/?u=sytlzq
HtYHt6H
~HWh(~G
hWj@_;
hwqk?v
H?\@*|X
~hy1OQ
hYFYoBt
_hypot
hYTFeC
H@yxclk
h.\(%zh
))H	ZU
I@(=&<
?i3if:
[I(3/#N0.bd
%.-I,5
I5>-Ph	
I5SDAG
^i5]u 
=i:^73
#i7Gv88
!=I8z[
i9:eYdR
=iA!f`
iAKjWo
i[+b~2
-:IB6@
iB"cG>	Y$
iC:MWX'w!
 (*.ICO)|*.ICO|
i"d8(>
iE^(OK
iE>&Q5
i>ER^si
IeS`%C
?)IET<
if.8:d
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_CHS)
#ifdef _WIN32
}^|IG!
"IGVZv
iIk)*#
Ii"QZ1
iiw=oYQ
Ik|Fb.
ImageList_Destroy
ImageList_Draw
I;m=Be
#include "l.chs\afxres.rc"          // Standard components
InflateRect
InitCommonControlsEx
InitializeCriticalSection
I.NoQY
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
InternetCanonicalizeUrlA
InternetCloseHandle
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetReadFile
InternetSetOptionA
IntersectRect
InvalidateRect
I-O^[	
iphlpapi.dll
 IRg7^
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsChild
IsDialogMessageA
ISi7oQ;4t
IsIconic
IsRectEmpty
I=:sri
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
ithXXD
It#Iu%
!(IuGa
iU"~W{
"iUxJW
!,i?*,v
* @IV2
iv"r!K
IwpU@@
I+(wSD
I+-wX?
IX^wfks
!}@-iZ
iZR"g^T6e]RDe]RDg^T6iZR"UUU
;Iz=)x
=j-; ?
\$\}-j
J@))%(
J0)`-e	
<j<<0U
`j1Kjp[
j1L&6,T
j<1XD,
j2&XD&S
J5Sbe/
_j'8 9]
JA;<5""
jA^8|J
JA@B Q &
JanFebMarAprMayJunJulAugSepOctNovDec
January
jBWVSSQ
}j%c%Y)
j<dj.7{,
JD]pYv(
jE!RlT!S
"jEvWv
<|j&f05'(
jG <fx3Y
JH,WG/
JJCRZA
\jj\ED
jjjiEE
{:Jk%H
\jMO+b
jM	Q(ao
+<j	/n
Jn[5q_
J_n>K\?
(j#o/[
|j]oPpR
JPEGMEM
 (*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
 (*.JPG)|*.JPG|BMP
j\R*4<	!/
Jrpr4oD
j=RtsU
}JsBR|>
Jt`6T!
j\T$h[Q8
j\T$mmH
J-!tq,
jtZU7/
`j^uvr
j"%u=w
+j/v&9
j VUPWQ
j \"#%wa`2
.(j~wfl1
;J/X!;
'{JX,z
JY@84p
jy^E"G
{(jZj)
]k -!	
k~14E4
k3Eizw
K3K)zU|
K3w5RUv
!k;43]Dd
K<;58"
 'K5K]z
k-6HO`
K`7pz=Y
/'kA%?
Ka.o}o
k>|aSE
KB7z_>
K<BKP;
k>C-rTk{
')Kd"?B
kd lX4
KERNEL32
Kernel32.dll
KERNEL32.dll
KERNEL32.DLL
#kFZ%h
KH1_la
*KHI#pu~6
KillTimer
kI'u3S
=?K!Ja
  kjU5
kJycQE
:=KK=:
(?KK?"
K_LH7T
Klj~.\
k&m3l'
K_m7[o*'
 kMSo z7
<Kn/#F
KO>F^=
K/QQb<
K:q=WN4A
KS#C{&+:
"*k,}T
KTD)P$
KT+(K^c"&
k"ug+6V7@
KU.^gE/
KU	VcN
*k`'>v
k=%V`I
kw[ZsA
K^x{,&
kXEQ>\u
Kxm|cw
#K\<Y3
k,yUynDK
k|Z,'	r
Kzs6mW,
^l_^][
;l$ }:
)="~-L
	.{L\-
L$ ]_^
L$0hx~H
L$0PQR
L$0PQS
L$0SUV@W
L23fff&ff
L$,_^]3
L$,_[3
L+%3rs
L$4_^3
L$4_^[d
L$4S+L$0Qj
L$4UQWP
L$4VQUP
L$4WPQR
L$4WQUVS
l55/i,H(A
L=5M-hd
l(,#=7
L$8^]_3
l()88===BBBBB85"("
L$8_^][d
l8i"gg'j
L$8WPQR
l)9Od-
l9#Uj+
LANGUAGE 4, 2
LA]vu`
L>]c45G
LCMapStringA
LCMapStringW
L$`_^][d
L$|_^][d
L$ ^][d
L$ _^d
L$ _^][d
L$,_^][d
L$(_^][d
L$@^[d
L$@^]d
L$@_^][d
L$$^[d
L$$^]d
L$$^][d
L$$_^d
L$$_^][d
L$\_^][d
L$D_^[d
L$D_^][d
L$D_]d
L$DPQj
L$DSVQ
LD)W;$
LeaveCriticalSection
)LfE&Z
lFV6$4
|lG3*Uh
l	g~b0R 
l	g~b0Rdk
L$h_^]3
L$,h8}H
L$h_^][d
L$H_^][d
L$H][d
L$Hj&Q
%L|h%!n
L$@hPMd
l$HQRVU
L$HSUVWP
L$,hTMd
LineTo
Link Source
Link Source Descriptor
LjbIOK
LJ-	|Z
lK/K8gT7
L$L_^]3
L$l_^][d
L$L^[d
L$L_^][d
	LLLLLK
L$LPQR
L$lRVQ
'LN|]w
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadLibraryA
LoadResource
LoadStringA
LocalAlloc
LocalFree
LocalReAlloc
L OcAZe
LockFile
LockResource
LookupPrivilegeValueA
+ LOOP 
L$P_^d
L$P_]^[d
LP.^hp
L$ PQh
L$(PQR
L$@PQR
L$<PQVV
L$pRPQ
LPtoDP
L$(PVQ
lPW~%I
)lq!9mq>D
LQDkw|&
#*	lqe
)Lq@fH8=
>LQ_%l
L$ QRh
L$ QSR
LrCx?$\
L$,RPQ
L$(RPQ
L$<RPQW
L$@RQj
!lR[S_
L$@RUQ
L<S^";([
ls5dp3
]lsIwX
L$<SQR
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
L]su>fL
L$,SUV
L$(SUV
L$T_^]
L$t_^d
L$t][d
L$T_^]d
L$T_^][d
|$LtE;
L$TSWQ
>'l_U]
lUL_BR
L$(UUh
\$lUV3
L$(VQRSP
L$(VQVj
l$@VW3
l$<VWj
lwnO	S
L$ WPQ
L$(WQR
L$(WSR
L$X_^]3
L$x_^d
L$x_^][d
L$X_^d
L$X;L$
L$XSQh
LyG4 ,
l= yNW
lyP<in
lyR9'xO4
lyTcUh
@;l$\~Z
":<m*<
m0y!Tz
M""1Ix
 M2uU_f
M4~XwZ
M5f<J~U
"M9&r'
m}9:st<
m>aAKB
mailto:
MapDialogRect
MapWindowPoints
mb)9oQ
M% B`w
MDl['_
:mD].tB
M/d/yy
mDzttT
MessageBeep
MessageBoxA
mF@1/+vP
~m@F'A
mfoo'-
m&fw]-
mfZFxo
MGmNKq
MGridCells
mi0+P;
mi58EW
Microsoft Internet Explorer
Microsoft Visual C++ Runtime Library
midiOutPrepareHeader
midiOutReset
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamProperty
midiStreamRestart
midiStreamStop
 (*.MID)|*.MID|
MIME-Version: 1.0
Mis=D3
mj^1\"
Mjf7a~
MJj	Fg
,mKF\T
mkktbbb`GGGD
^mL%<if
mlN*I$
mlYiF@
MM5iCN
m-MtJr
'}\MNa
-MNU3P
/|mO?<.
ModifyMenuA
;_M'oE2
Monday
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MousePointer
MoveToEx
MoveWindow
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Mp2@90F
Mpr.dll
MPR.dll
!m^p@y6
M"Q`#L
(mR`A|
msctls_updown32
MSIMG32.dll
mSIzk%
MS Sans Serif
MS Shell Dlg
MSVCRT.dll
__MSVCRT_HEAP_SELECT
MSVFW32.dll
>=m(T|
M#.t*\^
|MU[|\
mu	9x/
MulDiv
MultiByteToWideChar
MVQW{ p}
M\wUa{*
MxsN[oQ
MY/-aQm
'My+f2t
My)i#t
mYmW$>I,
m_#z{<'F
*=n$",
n0SSSSU
n3-^G8G
>n4]8h
N4Cu+$e
[n 4\.UY+
:&,n5C
N5"[wo\
N6WYtt7
n6xF:P
N8+F,+N0
n_9V3#P=Zf
	!N9X_
naA+.S;"
Native
nBIMBn
n.BjCw
-NbkSbpS
-NbkSbpS(
^nbMo 
nC>mRQP
-N'cqZP2B
N#[CwK
'"NCzk
nd9~dt
ndnw&}
Neqt0?
+^n_f5
N/f@b	g
N(F`?D
#(n/Fr,
n"~>FvU
n`FxvwF
NH_^][
N}(H5;
Nh;NX|
NI!eM:~
n!J7+1
NJ(Ksa
*nJQ<S
nlfMt%
nLQ`V@
\n}MAW
n@Mg&M
-N"N1Y
N*Ncktepe
N(;N,r
*nn$@S
N*Ntepe
N*N(W%
N*N(W0
nO8k]'g
- not enough space for arguments
- not enough space for environment
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
n,`p\	x
:?nq+3
;NQG}-
Nq#_wy
@%"Nr!
NS8M.3
nS#Dlu
NS<V8s
nt2Ht#Ht
NTRPQj
(null)
Nv?8$hQ:QYt
|#NVc_
;	N,wC
N$~	WU
NX9NXu 
Nx~j2x
nXk!_=
;?nxxk
nY0RD>
Nyt2S	W	w	w
|N+~z{
NZ_b.e
nz'{LVH
NzQ-xK
n,ZsDir
nzzpenc
O/~)'~
O(_^][
o0SSSSU
o1	h`<
(;^O1o
:+<o303
o6$IL=Z$
o6JC8LK
o6mK:99v
o6s@[k
o7~QsJ
o.}.7Wrmc
o-8Zaf
o&a}jT
Oa[v'EN
Object Descriptor
ObjectLink
o`c6[6v
October
oDuj~y
oFaMr6
Offline
OffsetRect
OffsetViewportOrgEx
o$FG`Ih
"OG_-Vl
o\GY8/]
O$H\D4
}OH`o2c
#o>I/8
OitIu$QR
ojj\En
O@lcV"
ole32.dll
OLEAUT32.dll
oledlg.dll
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
OleUninitialize
OLSwJ>=
]OMDz)q
o;m`U4
ON27Jj
$ON<>3
OnIM0!
oO4/qP35
oO50qP36
oOsqDx
o)p@BC
&Open,0,2
OpenClipboard
OpenDatabase
OpenPrinterA
OpenProcessToken
op Y$&U
OqX	`L
O?r[8E
[ot05R{?7q
"/oU@-
O(uckHr
out.prn
ouw`~k
ou_[xB
OwnerLink
OX[0R 
%*o-Y|
OyscCh
p%1)oE
p^2F&4
P3)E+F
p?4;$,Q
p55<NOTR___bccb
^p[5Ma
%p[6!a
p6Z+U	c
P7H7lf
~P9~Pun
&#pA15`
PA_cYh
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXexplorrer.exe
PA#define _AFX_NO_SPLITTER_RESOURCES
PadL-Q
p?akCz
}pAQEz0@!N1;
pa?!Rv
PatBlt
PathToRegion
.PAVCArchiveException@@
.PAVCException@@
.PAVCFileException@@
.PAVCMemoryException@@
.PAVCNotSupportedException@@
.PAVCObject@@
.PAVCOleDispatchException@@
.PAVCOleException@@
.PAVCResourceException@@
.PAVCSimpleException@@
.PAVCUserException@@
-p`bf.
?/PBq,
PBR5aL
($pe[|
p[e9)v
PeekMessageA
PFg 	<
p\fQA3t
&.PFy{xh
ph`dmmH
\P,hwd
Ph_^][Y
PicBox
P#include "afxres.h"
pK4!oO4/
pKd-k *
pkv?msOr
%|p)LG
PostMessageA
PostQuitMessage
PostThreadMessageA
pP5<OONOTTTTTTTTTN5552/,/*0V
+Pp.9n	
PPPPhd
PPPPPPPP
&p?P,Q
P<PuWSV
ppxxxx
+p=^Q8j
PQj WUS
PQQQQQ
\$ PQV
PQVhxZc
#pragma code_page(936)
PreviewPages
 (*.prn)|*.prn|
Program: 
<program name unknown>
P$RWPh
P$RWPh  C
P&|"}s+
P#Slj+	
[P`sp;
~'PSQR
PtInRect
PtVisible
/^p%u$
- pure virtual function call
Pu@:)Z
pV>#!3
@PVj,S
\$PVUUS
pWA!;c
PWhLOd
P_w"[meN
PWVWWW
,Py9c[L7
P<y+M<
pYN:NX
PYXySH3a
pZJKi7
PZ#v-,
_*'/"Q
Q?1P.K
}',q3Ju
q3%zF2
/Q-4Bf
q#51bwc
q6aI+}
Q6erHD
q'6q:1
q6?Vz%
:%Q7A<27
q((88==BCFFFFB<585""
q9(888======8""
QaC$.+
QayYNb&
q=C6\$	
\	Q%`CkYq
qcT4$]M
>"qdHt
[q$`dj$
q/Fgm9/!)Ek
QFHEpB
qGq/;c
QhnKP|
Q]@Hr2
!Q*{JSI6xu
q,JyLL
qK_q<f
QLe/KK
qL!ygr
QmhU8zf
QMq?Z!X
Q}msfQu
qP35sP72
qP36sQ45
:"qpdg]T.
QP{$R8p
QPSWVR
QQSVW3
QQSVWd
QQSVWj
QQUWSS
?$`qr#
$,q'R3
QR5,lD
QS	c#Lg1i
q?SIIS?Y
<=Q,s[uR{N\
QSUVWj
QSZU:|
QT4V8{
_qt^ec
q+[T\r
QT"Y%l-
QUhpBH
q.v>2V
	?qVHRh
 {%qX%
QX[gbL
q.{Xm7
<="QZ*
qZ@UWY
($R`][
/r+;1m
r4c<1Q
r555ONRT___bcc
=R7B;M
r7ED|)
@r\9|~
r?A2;=
RadioBox
RaiseException
RASAPI32.dll
RasGetConnectStatusA
RasHangUpA
-Rb7r6o
rBMcj,
RCA]Fd]
rCC^T'
rcG)^[
R^CIHg
>Rc]W0m
R=D2X1
rD4kt!
`.rdata
rDv`#/
ReadFile
RealizePalette
Rectangle
RectVisible
RedrawWindow
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
ReleaseCapture
ReleaseDC
ReleaseSemaphore
RemovePlayer
RemovePropA
R?eOKN
Reply-To: %s
resource.h
RestoreDC
ResumeThread
R=eYSr{
r?FodDA
rfsH7b8
RG[B[X
Rg"	Z5
Rh4PtN
RichEdit Text and Objects
Rich~EI
Rich Text Format
|Rk>>@
r[KIJo
R@]l`I
\rlY)O
r">M5r
{rMe*w7
RMGv>405
rNF5s:
+rniQr
,rOf@'H\1
RoundRect
&Rpi A0
|$,RPQ
r"QKjKa
r,qomRy2
RQPhHMd
_\RRKKK25,,))
R	RkV9Z
\RRRKK222,+)
^\RRRKKK22,,*)
\\RRRKKK22,+)
_\\\\\RRRRKK252,,)j
\\\\\RRRRKKK25,,*,
\\\\RRRRKKK25,,,,l
"""%rrrt
RSbpS\O
rsdm52
RtlUnwind
_\RTRRRNKK525,,*0
runtime error 
Runtime Error!
rU[pq\
{"r'vF
RVim+~
RVPUSQ
>%rW61
RW}aRh
RXa='g
r]XJW@O
Rxt_5 &>
{R>*xy
+RY=@:
RZzHDk
)_(S	#
s<2B9+
-^~s3A
&&`S3a
s4|Xz6
+S5`	/
*s5r9o
S7EQ.~
S7$RhP
Saturday
SaveDC
[\sbF4
s%b^H\
SbpS0R
SbpS@b	gu
SbpS:g:
SbpS\O
s)bzYd
#?%s(C(
ScaleViewportExtEx
ScaleWindowExtEx
SCh8BG+sU
ScreenToClient
ScrollWindowEx
sD'3_4<8d
SDb"jy
`sdRqi
:$'S~EI
SelectClipRgn
SelectObject
SelectPalette
SendDlgItemMessageA
SendMessageA
s`;e'p
September
SeShutdownPrivilege
SetActiveWindow
SetBkColor
SetBkMode
SetCapture
SetClipboardData
SetCurrentDirectoryA
SetCursor
SetCursorPos
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
SetFocus
SetForegroundWindow
SetHandleCount
SetLastError
SetMapMode
SetMenu
SetMenuItemBitmaps
SetParent
SetPolyFillMode
SetPropA
SetRect
SetRectEmpty
SetROP2
SetScrollPos
SetScrollRange
SetStdHandle
SetStretchBltMode
SetSystemPowerState
SetTextColor
SetTimer
Settings
SetUnhandledExceptionFilter
SetViewportExtEx
SetViewportOrgEx
SetWindowContextHelpId
SetWindowExtEx
SetWindowLongA
SetWindowOrgEx
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
'-sG-	
Sgb":SNzD"
`s$g;Si
S&h/6%
SHChangeNotify
Shell32.dll
SHELL32.dll
ShellExecuteA
Shell_NotifyIconA
\shell\open\command
s)hFNK7
SHGetSpecialFolderPathA
Shift+F1
Shift+F10
Shift+F11
Shift+F12
Shift+F2
Shift+F3
Shift+F4
Shift+F5
Shift+F6
Shift+F7
Shift+F8
Shift+F9
SHLWAPI.dll
sHN/X'(
ShowWindow
SHSz-.I
s-icfV
Silent
SING error
SI#'#r{
sjT&Yv
SK*<1d
SkinH_AdjustAero
SkinH_AdjustHSV
SkinH_Attach
SkinH_AttachEx
SkinH_AttachExt
SkinH_AttachRes
SkinH_AttachResEx
SkinH_Detach
SkinH_DetachEx
SkinH_EL.dll
SkinH_GetColor
SkinH_LockUpdate
SkinH_Map
SkinH_NineBlt
SkinH_SetAero
SkinH_SetBackColor
SkinH_SetFont
SkinH_SetFontEx
SkinH_SetForeColor
SkinH_SetMenuAlpha
SkinH_SetTitleMenuBar
SkinH_SetWindowAlpha
SkinH_SetWindowMovable
SkinH_VerifySign
s`)L$4
S\L/J6
~sm_^`c~
S~n5J3
sO;>|C;~
software
Software\
Software\Microsoft\Internet Explorer\Main\Start Page
Software\Microsoft\Windows\CurrentVersion\Run
sO'@#M{
S#~`!p
sP73tS7.
[ sprz-
sQ44vT8,
sQ4,{R9
-s=q=o
sr?6L~i
s$R?7Tp
sr}g(K(
%s=\RI
%s <%s>
%s\%s.lnk
SS@SSPVSS
_SSSSU
StartDocA
StartPage
StatusText
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
[)sTlI
StretchBlt
Subject: %s
Sunday
SunMonTueWedThuFriSat
s[U}Sy$
SwO9 wI
s&WRmJ
SWTtOa
SWVVVRPV
SysDateTimePick32
System
SystemParametersInfoA
s!zg97
sznrMV
T"+00[
T$0PjdR
T$0PQR
T$0RPQ
T$0SUV
t0V=(t_
@t4Ht1Ht_Ht
$T5F8G
{T6 yV9+}U72}U72yV9+{T6 
t8*_-#
*T8+"K
@=)T8m
T$8QRP
T$8RWj
t$ 90t
t?9))8888(
t	9A8u
t	9p$u
t&9^$t
TabbedTextOutA
-t[=aY
	tB/Z@ JO
T$$+D$4
tD9_Pt?
T$dPQR
T$DPQRW
T$DQRU
T$DQSR
T$Du	f
T$DWRh
T$\;D$Xu
TE"av 
TerminateProcess
	Tesp-T
t{E^*t)
TextOutA
TfkU,Y
T/f&Tcknx
{tGEqub
<]t_G<-uA
T$,h8}H
T$|hD}H
Thfvz'
t=h`Gc
T$Hh8}H
Th^Het7
T$HhTMd
!This program cannot be run in DOS mode.
t,hlfG
t,hLGc
TH-{LN{sK
t>Ht Ht
t*Ht"Ht
t+Ht$Ht
T$,hTMd
Thursday
T$H} VP
T$|hxMd
t`{~i?
tI;Ftr
,tj<.{'
T$\jdSR
TJ/GEQ 
+tJHt:Ht*
 TJv4VR
tKD(Y0
T[Lm$c
TLOSS error
T$lPRh
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
t$LUPh
T$LWUQVR
tM,1{4
t`/M@{y
tNhtGc
|tnN/2
[tn"Oa
tn<%t2
tOdIQpm
tooltips_class32
To: %s
T$pPQR
t$PPVS
T$(PQR
T$\PQR
T$PQRP
T$ PQWWR
T$$PRV
t$ PUSVV
tq9~Dt
tq9w(tlSj
T$(Qh8}H
T$(QhTMd
TQk)UN4~Z
T$ QRh
T$ QRP
T$(QVURWP
TranslateAcceleratorA
TranslateMessage
TransparentBlt
T$$Rh`:c
tRHt}H
T$$Rh`YG
T$,RQP
t%RSQP
t$$RVP
T$<RVW
tS7-{R8
tS9~@uN
T$ SRh
T$,SRh
t$(SSh
t#SSUP
T$ SWRP
+ttHHtd
t.;t$$t(
t$t#t$l
Tuesday
tu@IHC
T$\URP
tUsy#v
t$$VSS
tvWWWWU
tvY`6V}
T$\WVR
t/WWUPj
 (*.txt)|*.txt|
T$XUSR
;t$Xu";\$\u
t*\xV&4M
t$XWVS
t&Y[tP
(T?]]z
t@z5rU
?u='@^
u._^][
);}U);
[U0%Mi
U	%0*q
u29l$xu,
U#3p!;u
U5<5ONTTT___`ccccccc_RRRNNNK255,,,,6
U<5<ONTTT___``ccccc_RNNKKK255,/,,9
u606A<
u"8D$yu
~?u9A|
u]9B uX
U9d]DD
u	9~@u
&U=.A,
uA;54+I
|"U>ae
U\aEQS
UB#qk6a]
u"C*6N
uCx>y/
Ud;B?h
u?DbUK
UdI(>~e
U|D\J1
>:u#FV
U<GKJ7
uh9^8uX
[=u]i~
UIya`S
u.Jck~
uK{1aXq
ukNg_O 
UlAJxR
ul	#GQ
:ULr9k
\uM446
]=UMen}vg~
.um+ZZE7L
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
>:uNFV
UnhandledExceptionFilter
UnhookWindowsHookEx
UNLINK
UnlockFile
UnregisterClassA
uo1F`x
U+olL2
UpdateWindow
;;uP.o
U&pO7bqT`
Uq3}L0l+
/"ur;{6
uR9BxuM
uRFGHt
UR#V}Z
us-ascii
USER32
user32.dll
User32.dll
USER32.dll
u$SShe
@u+;t$
uTdE- 
ut<<<<<<OO<<</*,Vl
u(UhpOd
,~Uu{j
UUUUUU
,_U"v.
uVe~EM
U`v(rA
\$(UVW
uX<<<OOOOOOOOOO,//,,9p
]UYDnk
#uYlWw
UZ%+GY
uz?s|R
V04"+Q
!V#09rR;
v0Jc3z^Uo]B
V0}LX>/el
V2k%k0E
v3q7`oe
V523Rt
V,55NNRR\_bbc
v.#7&O
v@8r-RU
v=9g0ej
V	%aH,
ValidateRect
VaN?_d	
VaQ<;G
V%aU!M
V%;!&BN
V{?bO^
$V	+C-
VC20XC00U
VC]$5~J
Vdd'Yyt
VDKNgv
V#D$,WPQ
-V,e9LC
v.e$g!
v(Ei7X
VERSION.dll
 v$e	t
VeTBR6
"={ve.Z
vF?1Kv6
vg|b*4
@V-Gg]
Vh;VX|
VirtualAlloc
VirtualFree
VirtualProtect
visible
V/k~Dt
_v^=Kh
?_\vL0
	v^m^w
VN1-G9
vNKmWY
/[vN@v
Vn>z:Q1bg
<'*v!O
Vpv7 )
VQnR_W
vr-[h,
VrW	?h
vS4Sv)
VS%:C&
Vst0I:
vs?Z^]{
)/v?{T7x
vtYXPPPPXYpo
VU_E(g
vvL!v+
VVUSVV
VVVPQR
\$<VW3
VWm(4e8;
V@W@PQ
VWtp9E
V+X0<}
Vx!#l|
V,_^[Y
VZq'zn
W2}4]??
W28g<q~T3
w2	klqp
|W7)zV82zV82|W7)
,W9C.q
W9^du-
{W^A+#
WaitForInputIdle
WaitForMultipleObjects
WaitForSingleObject
,waljHS
waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
 (*.WAV;*.MID)|*.WAV;*.MID|WAV
 (*.WAV)|*.WAV|MIDI
w}AX"p
)w></B7
wbBUW1?
WBn^]U
w[C@L33
W,COiw
!wDaWV-
'W	Diu
	$WeD;I3
Wednesday
.WE=+T!N
w	?(|f
	WG!2S(
w%G]g&
w</,|h
w@|HLRdZ
'{W{i7
WideCharToMultiByte
[WId+n
window
WindowFromPoint
windows
WinExec
WinHelpA
WININET.dll
WINMM.dll
WINSPOOL.DRV
\W>I{t
w.?I%v
|w(.j1F
WjdjdPQh
WJJY5FG
Wj(_Wj
wMh{b:(Z
wmK!t{
Wmz2cJ
|$$}$WP
W|PtbX
WqKPBv=D
wQsPbaC!
(wqt\HHtS
wR3Oo_Q:
WriteFile
WritePrivateProfileStringA
WrkIqJ
WS2_32.dll
WSOCK32.dll
wsprintfA
wt/H<j
WTWindow
|$@ Wu
w@w9mt
www.2345.com/?k1850
www.dywt.com.cn
wwwwww
wxK$`-
WY52Au
&w\)YPL
WZ}Ko[
	?wz;o
X14/ ;
X2;$NINQh>
x3[!j}	(
^/x3lH
X4Ro#G
+*]x7H
XAUrbb#
xaz	|u
X=b3xH
X DlaYl
>+XEC25
,xE[k8
XfB,,@
$*\!!xg
X/hT5)
xjlcm>
@>>xK7
xM?oD$
xm\w\8
Xnoikv
x*O2CO
>Xokxg
XPTPSW
XrrahS
X-rV84
+xt%^;
X+}tVr
xUwFYC7Cv
+X@]}w
xY<<<OONOOTTTTTTN2/,/,,,9q
XY[Z[]
$Xyzc]0
{$x,^Z
}\y&&%
y+&{:/
`%':Y^
;Y=0VD
[.)Y0X
Y}3 LP
@y|3}yZ~
y/55NNTT\_bbb
y=5<NOTTT___`cccbcbcb_TRRRRNNK252/,*0w
Y5<<ONOTTT____````_NKKK2555,/,,9
Y5<<OONTTTTT______NK2555,/,,,:
y6`/7gN
-"y8p0
Y#9l5c:,R
y9'O^.
Ya~9>.K
Y:.akpS
Y?,'bD+3cE/:cE/:bD+3Y?,'O4&
(Yb)u*
y_Bx^E
Y^=^C"c
'*Yd3,
yDbF&T
YEjJNW
yfC}cIa
<,yfci
&Y#Hp!I
YhrWzD
YHYtLHt9
(yil,J
y&)Jq?
= y]K?
Y~}K^<
y\"-KB
Ykytz:
'YmqG2=
y;]nO6#
\yQ7,y<
y$qA#i
]y+qCs
yQK%[Qj
YQPf{>
Ys[$`v
YTjjKG
Yt[u,Q
y$VBp[
]y,W|5-
YW9Zqjq
Yw}nPu
Y!(WZE
*,Yx\	
YX[(W	
"y$~Y%
_^][YY
YYF;5@
Y!Yh'?
yyyz$$$*
z0B]G*&2R
z0WRh)De
%{Z1K}
Z1zBfi
?/>z30
z3:::3:;3
-".Z4/
:z4rIf9
Z`6wTh(
z7=x&3
zA;;5""
]z*a'V!E
~~}zc	
zC4qZk
$.Zcqn
-z^d 6
}^zDF7
,:/z.f
\Zfxszh
zGAEEEEAAAA;Hw
z gc,,
zGKM$v
>ZH}mM
ZJ$7_:
Z%jFD(&
zjz5i`
ZK83E9
Zky0!uhm
Zl@8*Ot
Z\ld)$c
~zLw=g
Z+<m+(
$Z}$Ma
zn$C,+
zrm(]Rt-
$<ZS,H_
Zt(Ht Ht
z~TVC~\
|z;^<}uWS
z@VKk|
Zv{o_Nx
~`zVwk=
~Zw`3Zt
zw@"~W'
zx/%FN[
ZX>G5v
zXoYC^
ZXx;zU
zy-0q<rmn
zY_J{{(E~
ZyS|v;6
\ZZ5"jh
ZZblT}
zze,+_o
<zzLJI