Analysis Date2014-05-23 20:19:55
MD50a39a999a8b9cd5eef00073a605126ac
SHA137a95affb820d3eccc013aa2b60b294e2e21bf5e

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 1e62d2d2f4fa5126fc2df3a60db23b9a sha1: 86c8a0521ad8366a05eb570f1cb60a65d172c76b size: 434176
Section.rdata md5: 5b78e9a026790647d1dce0262839934e sha1: deecfb5db4bcc500ce3c3cabb95425b711d31e02 size: 761856
Section.data md5: c8f4f88fada3e024d1dea58d8a5f359a sha1: a3f4190b49b6cacaa27e90eb628ea2e116d219e7 size: 61440
Section.rsrc md5: 0048173c2d2555aadfaae2296519d440 sha1: 90a70d1dc0db05c1711490002598f6b44409047c size: 24576
Timestamp2014-04-23 14:42:06
VersionLegalCopyright: 作者版权所有 请尊重并使用正版
FileVersion: 1.0.0.0
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
ProductName: 易语言程序
ProductVersion: 1.0.0.0
FileDescription: 易语言程序
PackerMicrosoft Visual C++ v6.0
PEhash5c37cbada50630c727ebd0b115e1380130a426ae
IMPhash42341776ba18a71c737fdf750925de3e
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVArcabit (arcavir)Hacktool.Sniffer.Wpepro.Cgg
AVAuthentiumW32/Agent.EW.gen!Eldorado
AVAvira (antivir)TR/Spy.A.5073
AVCA (E-Trust Ino)Win32/Oflwr.A!crypt
AVCAT (quickheal)Win32.VirTool.DelfInject.gen!X.4.a
AVClamAVTrojan.Spy-85253
AVDr. Webno_virus
AVEset (nod32)Win32/Agent.SFB
AVFortinetRiskware/Qhost
AVFrisk (f-prot)W32/Agent.EW.gen!Eldorado (generic, not disinfectable)
AVF-SecureTrojan:W32/DelfInject.R
AVGrisoft (avg)no_virus
AVIkarusno_virus
AVKasperskyRiskTool.Win32.IMEStartup.bcy
AVMalwareBytesSpyware.OnlineGames
AVMcafeePasta
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)Gen:Heur.PWSIME.1
AVNormanwinpe/OnLineGames.LWBP
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend MicroMal_OLGM-40
AVVirusBlokAda (vba32)BScope.HackTool.Sniffer.WpePro

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Network Details:


Raw Pcap

Strings
....  ................
"#
....
.........
10/.-,+*)('&%$#"! ..............
.....
..........
..
.........
-
..
x
- \
.-E-0-0..
00-+ 
e
 
00
...........?-  
0
0 
0
?
.\
 
.
.
T.:
..
.
6
@?un...
..
...?.l{
.....
6
.U
...
o..
....$.....
JN.
....
OOOOOOOOOOOOOOOOOO........j.
.k..........Q
 T...
.@
.........
u
    
 ......
 (*.*)
#####
#######
080404B0
 %1 
1.0.0.0
	1uM
(&C)
Comments
	Ctrl+
	Ctrl+D
	Ctrl+End
	Ctrl+G
	Ctrl+Home
	Ctrl+N
	Ctrl+PageDown
	Ctrl+PageUp
	&D.
DEFAULT_ICON
 DLL 
(&E)
FileDescription
FileVersion
Fjjj
Fjjjj
Fjjjjjjjj
         (((((                  H
(&H)
(http://www.eyuyan.com)
(&I)
 INI 
jjjj
LegalCopyright
msctls_progress32
msctls_updown32
MS Shell Dlg
(&N)
(null)
(&O)
(&P)
	PageDown
	PageUp
ProductName
ProductVersion
Progress1
 %s 
(&S)
	Shift+Tab
Spin1
StringFileInfo
(&T)
	Tab/Enter
TEXTINCLUDE
Translation
VarFileInfo
VS_VERSION_INFO
xxxx
^,_^][
^$_^[]
 (*.*)|*.*||
? ?$?(?,?
?%^^{_
	!	!	!	!	
<0+( %
0(0.0:0J0Q0X0^0
0&0-040;0C0I0P0
0123456789ABCDEF
04<4H4T4`4l4
= =$=(=,=0=4=8=
> >'>,>0>4>Q>{>
(&07-034/)7 '
0\a;.A
0da;:@
0da;bD
0dk:ghV
0h3n3u3
0R>\W[
0sZ[uC
1!11171Y1^1c1h1m1r1
1$1,1L1\1l1p3t3x3|3
1)161D1O1b1
,1"52.*
1`i'zF>
1k?()k
1P#{r@
1#QNAN
1#SNAN
~_$&;2
2$252Q2_3
2?2D2L2
\2&3o?
242I2_2f2p2v2~2
	2	5	5	5	5	5
28(	#{
~2B%C*
2c[~.d
<$<,<2<:<C<L<
2F8761CF148F88C2640DBBA783EF2917
~2H]Ku1
2S2e2x2
?+2xhX
3!4j4p4~4
3@~/8&:
:):3:9:|:
3A3\3l3r3~3
3cb~6d
"3@ufd
42474A4[4i4q4w4
4(5C5R5n5v5
4Aa;6@
:%:4:C:u:
|?5^<@
5	!	!	!	!
5\=^]$5
	5	5	5
5_5^E`9
5`5^F#q
5@8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
=5=;=C=R=
5D%(u8$9
5^H`zZ?
5^I`zZ?
5Jzzwwww
5@suLw
5tY'	<
%5$"~V
5]w_w%C
646Q6i6
*6_5^D
6;5P(S
6.636B6H6X6c6u6
	6	6	6	6
	6	6	6	6	6	6	6	6	6	6	,	,	,	,	,	,	,	,	+	+	+	+	+	/	/	/	'	'	'	'	'	'	'	'	'	'	(	(	(	(	(	(	(	(	(	(	(	(	(	
6 6(6-696>6[6a6
]6bu^Q
6&<JC`
6v7s_%
<%<6<x<
	7	7	7	7	7	7	7	7	7	7	7	*	*	-	-	-	-
7"7*7H7N7_7v7
7(%9kB";
\~7,&C
7Cb<o6$A
7H'zN/
~7 &<R{"
7$$=V(5
7(y$e6
81888J8R8b8s8
@840y`
8	9*9?9c9
8C8I8k8
8Cd<o6$@
:!:(:.:8:>:C:I:Y:b:|:
^~8H%J
8MThdu
:8;P;W;_;d;h;l;
8sG%{zA
\$8UVW
=8=@=Z=f=v=
^}%95 
^}%95$
_9= 5T
9 9$909
9:9@9a9k9v9{9
9&9N9i9q9w9}9
'9A`u"9
9D$$t+
9gS%6*{
9H;e+I
9L$x~e
9l$xtU9
9nPu	9^T
9o4u'V
?'9oD#"
	9oTtc
9?r~Hp%;
9?rxfd
9t$0v8
9^xu5j
?a;&(=
<A|2<Z
A#;6kk~
,Aa66@
aaa.dll
abcddefghijklmnoopqrrsstuvvwwxyyz;
abnormal program termination
ActivateKeyboardLayout
?&A"D'9"D
AdjustWindowRectEx
Advapi32.dll
ADVAPI32.dll
AfxControlBar42s
AfxFrameOrView42s
AfxMDIFrame42s
AfxOldWndProc423
AfxOleControl42s
AfxWnd42s
Afx:%x:%x
Afx:%x:%x:%x:%x:%x
_a#{j@
A+nJu,
\AO~O0
AppendMenuA
A?q]r*
]AS~O8
Au8&;2
.?AUCThreadData@@
August
.?AV_AFX_BASE_MODULE_STATE@@
.?AV_AFX_CHECKLIST_STATE@@
.?AV_AFX_COLOR_STATE@@
.?AV_AFX_CTL3D_STATE@@
.?AV_AFX_CTL3D_THREAD@@
.?AVAFX_MODULE_STATE@@
.?AVAFX_MODULE_THREAD_STATE@@
.?AV_AFX_THREAD_STATE@@
.?AV_AFX_WIN_STATE@@
.?AVCArchiveException@@
.?AVCBitmap@@
.?AVCBrush@@
.?AVCButton@@
.?AVCClientDC@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCColorDialog@@
.?AVCComboBox@@
.?AVCCommonDialog@@
.?AVCDC@@
.?AVCDialog@@
.?AVCDWordArray@@
.?AVCEdit@@
.?AVCException@@
.?AVCFile@@
.?AVCFileDialog@@
.?AVCFileException@@
.?AVCGdiObject@@
.?AVCHandleMap@@
.?AVCImageList@@
.?AVCMapPtrToPtr@@
.?AVCMapStringToPtr@@
.?AVCMemFile@@
.?AVCMemoryException@@
.?AVCMenu@@
.?AVCNoTrackObject@@
.?AVCNotSupportedException@@
.?AVCObject@@
.?AVCPaintDC@@
.?AVCPen@@
.?AVCProgressCtrl@@
.?AVCPtrArray@@
.?AVCResourceException@@
.?AVCRgn@@
.?AVCSharedFile@@
.?AVCSimpleException@@
.?AVCStatic@@
.?AVCStringArray@@
.?AVCTempDC@@
.?AVCTempGdiObject@@
.?AVCTempImageList@@
.?AVCTempMenu@@
.?AVCTempWnd@@
.?AVCTestCmdUI@@
.?AVCToolTipCtrl@@
.?AVCUserException@@
.?AVCWinApp@@
.?AVCWindowDC@@
.?AVCWinThread@@
.?AVCWnd@@
.?AVCWordArray@@
.?AVtype_info@@
?'AW@[
Aww7P3z
<A|@<Z
[%AzD'9zD'i
b~/,&:
B 02CV
>{b~6d
B{aN^\
bcdfghijklmnpqrstuvwxyz
BeginPaint
BeginPath
b~g<$S
B`~/@%HJ
;B<H<L<P<T<
BitBlt
?(Bj);G
Bj<%;$I
b'	#{jk
BKbhTb~XBK!;
 (*.BMP)|*.BMP|GIF
Bogus message code %d
Bsl~2D#E
Button
BUTTON
%C&(\0
C =02CVu
C]~0d'E
c[~1L%:
C\~74$:
C`~/8 
cA#3_Z
CallNextHookEx
CallWindowProcA
CandWndProc
CArchiveException
?(Cb(HC
CBitmap
%CbOI;VC[6s
CBrush
CButton
CClientDC
CCmdTarget
CColorDialog
CColourPicker
CComboBox
CDialog
CDWordArray
Ce~8d%LF
c\E;?p
CException
CFileDialog
CFileException
%C*{[g
CGdiObject
?%C^{[h
CharUpperA
CheckMenuItem
ChildWindowFromPointEx
ChooseColorA
CImageList
?%C:{kj
	Ck~Vd
ck(WSbpS
ClientToScreen
CloseClipboard
CloseDatabase
CloseHandle
ClosePrinter
CLSIDFromString
CMapPtrToPtr
CMapStringToPtr
Cm~@d%D
Cm~@d%D"
Cm~@d%DZ
CMemFile
CMemoryException
CNotSupportedException
C{]N^p
CObject
CombineRgn
combobox
COMCTL32.dll
COMCTL32.DLL
comdlg32.dll
commctrl_DragListMsg
commdlg_ColorOK
commdlg_FileNameOK
commdlg_help
commdlg_LBSelChangedNotify
commdlg_SetRGBColor
commdlg_ShareViolation
CompareStringA
CompareStringW
CompWndProc
CopyAcceleratorTableA
CopyRect
C*{`~/P
CPaintDC
CPalette
CProgressCtrl
CPtrArray
CreateAcceleratorTableA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDialogIndirectParamA
CreateDIBitmap
CreateEllipticRgn
CreateEventA
CreateFileA
CreateFontIndirectA
CreateIconFromResource
CreateIconFromResourceEx
CreateMenu
CreatePalette
CreatePen
CreatePolygonRgn
CreatePopupMenu
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSemaphoreA
CreateSolidBrush
CreateThread
CreateToolhelp32Snapshot
CreateWindowExA
CResourceException
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
CSharedFile
CStatic
CStringArray
^C#s:y
CTempDC
CTempGdiObject
CTempImageList
CTempMenu
CTempWnd
CToolTipCtrl
Ctrl+A
Ctrl+B
Ctrl+C
Ctrl+D
Ctrl+E
Ctrl+F
Ctrl+F1
Ctrl+F10
Ctrl+F11
Ctrl+F12
Ctrl+F2
Ctrl+F3
Ctrl+F4
Ctrl+F5
Ctrl+F6
Ctrl+F7
Ctrl+F8
Ctrl+F9
Ctrl+G
Ctrl+H
Ctrl+I
Ctrl+J
Ctrl+K
Ctrl+L
Ctrl+M
Ctrl+N
Ctrl+O
Ctrl+P
Ctrl+Q
Ctrl+R
Ctrl+S
Ctrl+Shift+F1
Ctrl+Shift+F10
Ctrl+Shift+F11
Ctrl+Shift+F12
Ctrl+Shift+F2
Ctrl+Shift+F3
Ctrl+Shift+F4
Ctrl+Shift+F5
Ctrl+Shift+F6
Ctrl+Shift+F7
Ctrl+Shift+F8
Ctrl+Shift+F9
Ctrl+T
Ctrl+U
Ctrl+V
Ctrl+W
Ctrl+X
Ctrl+Y
Ctrl+Z
 (*.CUR)|*.CUR|
CUserException
CWinApp
CWindowDC
C:\Windows\System32\Drivers\etc\hostshttp://www.super-ec.cnhttp://wghai.com/echttp://qsyou.com/echttp://www.wghai.comhttp://bbs.wghai.com/forum-17-1.html/forum-12-1.html/memcp.php/ip.asp/time.asp/gonggao.txt/ec-user6.php/ec-bd.php/ec-jh.php
CWinFormUnit
CWinThread
CWordArray
>{[~.d
?? / %d]
*{_~.d
D$ _^][
D$,_^]
D$,;\$|
D$(_^]
D$(_^][
D$$_^[
D$$_^]
d09f2340818511d396f6aaf844c7e325
D$0UVW
D$0WPQ
D$ |2;
D$49D$$}
	+{d~6d
D$89Vdu
D$8RPj
D$8VPQ
D$$~9+
~@d'92=$9
^D'9*B#n
da]`FD\
@.data
~,D%;B
&d:C_~6d
D$(CUSWP
 %d/%d 
(%d-%d):
%d / %d
%d / %d]
d{[~.d
dddd, MMMM dd, yyyy
D$dPQV
D$dQUWRP
D$dSUVW
D$DSWRPQ
D$DURP
December
DEFAULT_ICON
#define _AFX_NO_OLE_RESOURCES
#define _AFX_NO_PROPERTY_RESOURCES
#define _AFX_NO_TRACKER_RESOURCES
DefWindowProcA
DeleteCriticalSection
DeleteDC
DeleteMenu
DeleteObject
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
device
devices
D$H_^][
D$hQRP
D$hRPQ
D$hSUV3
D$ hTRR
D$hUPQ
D$HUPQ
D$HUSj
Dim cpuSet,cpu
DispatchMessageA
DISPLAY
D'Iw@S
:D]Ju,
D$(;l$ 
DLLISUI
DllRegisterServer
DllUnregisterServer
D$LPUj
D$LUSWP
dnf.exe
DocumentPropertiesA
DOMAIN error
\~@d%p
D$,Pj<j
D$ PQR
D$PQRP
D$PRPQ
DPtoLP
D$(QPW
D$(QRP
D$$QUP
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawTextA
D$@RPQj
D$ RPUhD
DRQPh 
D$,RVh8
^D%'sp
D$,SPh
~]D#sR
D$(SUV
D$$SUV
D$(t,;
*DTH	^KA
D$TRPW
D$TVPW
DuplicateHandle
D$@UPQ
|$D UV
D$@WPS
D$XPQU
D$XQRWP
;D$xt&
ech1Y%
]E#cR+
EHPWVS
eK?(45
eK?(\5
Ellipse
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EndDoc
end Function<th><label for="field_1new"><font color=red>USB
#endif
#endif //_WIN32
EndPage
EndPaint
EndPath
EnterCriticalSection
EnumDisplayMonitors
EnumDisplaySettingsA
EnumWindows
E;?p~.d
eQpenc
EqualRect
_ERMrF
E@?rTH
_E"S*+
Escape
ExcludeClipRect
      exit for
ExitProcess
ExtSelectClipRgn
ExtTextOutA
F<_^][
F,_^][
F\_^][
F89^8u&j
F(9V8tQ
FD@ul9L$(}f
FD uy9D$$}s
February
F(_+F$^[;E
?fff&ff23
ffffff
ffffff`
fffffffff
fffffffffffhwww
fffffffffffo
fffffffffo
ffffff`ffo
fffffffh
F$@;F(v
F$@@;F(v
FileTimeToLocalFileTime
FileTimeToSystemTime
FillRect
FillRgn
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
F\jLSP
%F:{\K\
fke~nd&
- floating point not loaded
FlushFileBuffers
foffffff
</font></label></th>
    For Each cpu In cpuSet
FpHt&Ht
F:?qEw
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
Friday
+`#F.sl
[/fS_MR
Fxt_;FTu@
G;= 5T
^Ga;BB
GAIsProcessorFeaturePresent
g~b1Y%
Gdi32.dll
GDI32.dll
GetACP
GetActiveWindow
GetBkColor
GetBkMode
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetClipBox
GetClipRgn
GetCommandLineA
GetConnectString
GetCPInfo
      getcpuid=cpu.ProcessorId
GetCurrentObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetCursorPos
GetDesktopWindow
GetDeviceCaps
GetDIBits
GetDlgCtrlID
GetDlgItem
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileTime
GetFileTitleA
GetFileType
GetFocus
GetForegroundWindow
GetFullPathNameA
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyState
GetLastActivePopup
GetLastError
GetLocalTime
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessageA
GetMessagePos
GetMessageTime
GetModuleFileNameA
GetModuleHandleA
GetMonitorInfoA
GetNextDlgTabItem
GetObjectA
GetOEMCP
GetOpenFileNameA
GetParent
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessVersion
GetProfileStringA
GetPropA
GetROP2
GetSaveFileNameA
GetScrollPos
GetScrollRange
GetStartupInfoA
GetStdHandle
GetStockObject
GetStretchBltMode
GetStringTypeA
GetStringTypeW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetSystemPaletteEntries
GetSystemTime
GetTabList
GetTempPathA
GetTextColor
GetTextExtentPoint32A
GetTextMetricsA
GetTickCount
GetTimeZoneInformation
GetTopWindow
GetVersion
GetVersionExA
GetViewportExtEx
GetViewportOrgEx
GetVolumeInformationA
GetWindow
GetWindowDC
GetWindowExtEx
GetWindowLongA
GetWindowOrgEx
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
gH#mV(
 (*.GIF)|*.GIF|
gJu,&:
gJu,Tu
G@%K^k[
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalHandle
__GLOBAL_HEAP_SELECTED
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
~~G $R
GrayStringA
{gSGO/
GuH#DJ
:#;);G;X;k;
`h````
h5:(9i
h9n`u;
H%AzD'9zD
~hd%C"{ii
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
hgjlkbrfzaoe
HHtpHHtl
H	^Ju,
+h]Ku1
H:mm:ss
HrCg@b	g 
HrCg@b	g(
^H%.s~%q
H@suL#
HSVHWtgHHtF
?&H>sZz
Ht#HHt
HtHHuz
 http://www.super-ec.cn
?]Hu]Jh
hWj@_;
hY%{bA
_hypot
h~ZD%i
i5sZxh
i9[}0T
]Ia;&P
 (*.ICO)|*.ICO|
[>Ic[S
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_CHS)
#ifdef _WIN32
IgU%EB
ImageList_Destroy
IMEClearPubString
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
imehost.dll
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
IMESetPubString
@IMESetPubString
ImeToAsciiEx
ImeUnregisterWord
imm32.dll
IMM32.dll
ImmGetDescriptionA
ImmInstallIMEA
ImmLockIMC
ImmUnlockIMC
iM{]rK
#include "l.chs\afxres.rc"          // Standard components
InflateRect
InitCommonControlsEx
InitializeCriticalSection
<input type="text" name="field_1new" size="25" value="" disabled class="txt" />"  class="txt" />
<input type="text" name="field_2new" size="25" value="" disabled class="txt" />"  class="txt" />Function Getcpuid() 
InterlockedDecrement
InterlockedIncrement
IntersectRect
InvalidateRect
[%IrD'9rD'q
\%IrD'9rD'q
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
It#Iu%
%Ivh'Avh
)(IW@'
[\'|j@
\$\}-j
%j2k`x
JanFebMarAprMayJunJulAugSepOctNovDec
January
jbOup#)
jBWVSSQ
JCb~6d
Jj~;H$H
jj.ime
JPEGMEM
 (*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
 (*.JPG)|*.JPG|BMP
jr?_2&9
J@?rEw
J@suLu9b9
]Ju,&:
*Ju,&:
	^Ju,&:
JuH#C2
	^Ju,&J
^Ju,&R
]Ju,&R
j VUPWQ
*k[~/<
k[}@|#;2)
^K%5>{`i
%KbOICVCd7s
?%Kbscx
Kd~2H%
%K>{dj
%?keKs
KERNEL32
Kernel32.dll
KERNEL32.dll
Keyboard Layout
Keyboard Layout\Preload
Kh~2D%
Ki~2`%:
KillTimer
}@|%K*k\x
-?k]Ls
%K"sZz
?*Ku1&;
]Ku1&{
*Ku1&;
*Ku1&;*
*Ku1&{
*Ku1%;
Ku1&;*
?*Ku1&;6
*Ku1&;6
*Ku1&{6B
]Ku1&A
*Ku1&A
Ku1&C&
*Ku1(CB(PC
Ku1&{j@
Ku1&;V
*Ku1&{vC
kXEQ>\u
^l_^][
;l$ }:
L$ ]_^
L$$_^]
L$0PQR
L$0PQS
L$0SUV@W
L23fff&ff
L$,_^]3
L$,_[3
L$4_^3
L$4_^[d
L$4S+L$0Qj
L$4UQWP
L$4VQUP
L$4WPQR
L$4WQUVS
L$8^]_3
L$8_^][d
L$8WPQR
LANGUAGE 4, 2
^Laz\?
LCMapStringA
LCMapStringW
L$`_^][d
L$|_^][d
L$ ^][d
L$ _^d
L$ _^][d
L$,_^][d
L$(_^][d
L$@^[d
L$@_^][d
L$$^[d
L$$^]d
L$$_^d
L$$_^]d
L$$_^][d
L$\_^][d
L$D_^[d
L$D_^][d
L$D_]d
L$DPQj
L$DSVQ
LeaveCriticalSection
l	g~b0R 
l	g~b0Rdk
L$h_^]3
L$h_^][d
L$H_^][d
L$H][d
L$Hj&Q
l$HQRVU
L$HSUVWP
li8#}r
LineTo
L;?kTHsZP
L$L_^]3
L$l_^][d
L$L^[d
L$L_^][d
L$LPQR
L$lRVQ
L:?nEw
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadKeyboardLayoutA
LoadLibraryA
LoadResource
LoadStringA
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
L$P_^d
L$P_]^[d
L$ PQh
L$(PQR
L$@PQR
L$<PQVV
L$pRPQ
LPtoDP
L$(PVQ
l'Qr`%
L$ QSR
L$,RPQ
L$(RPQ
L$<RPQW
L$@RQj
L$@RUQ
L$<SQR
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpyn
lstrcpynA
lstrlenA
L=suL'Q
L$,SUV
L$(SUV
L$T_^]
L$t_^d
L$t][d
L$T_^]d
L$T_^][d
|$LtE;
LTH's.
L$TSWQ
Lu9&<*
Lu9(l^
/LUE6H
L$(UUh
\$lUV3
L$(VQRSP
L$(VQVj
l$@VW3
l$<VWj
L$ WPQ
L$(WQR
L_W%;R
L$(WSR
L$X_^]3
L$x_^d
L$x_^][d
L$X_^d
L$X;L$
L$XSQh
L{|YEmb
@;l$\~Z
~/L%zz=
~"+m /0
M~/4&:
mailto:
MapViewOfFile
MapWindowPoints
M/d/yy
MessageBoxA
MGridCells
Microsoft Visual C++ Runtime Library
midiOutPrepareHeader
midiOutReset
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamProperty
midiStreamRestart
midiStreamStop
 (*.MID)|*.MID|
ModifyMenuA
Module32First
Monday
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveToEx
MoveWindow
Mpr.dll
MS Sans Serif
MS Shell Dlg
__MSVCRT_HEAP_SELECT
=;=m=t=x=|=
MulDiv
MultiByteToWideChar
mysechx
n0SSSSU
-NbkSbpS
-NbkSbpS(
NCsZ_	
{_~nd6
nd9~dt
    Next
N/f@b	g
NH_^][
Nh;NX|
|%nJOI
-N"N1Y
N*Ncktepe
NNNJz)
N*Ntepe
N*N(W%
N*N(W0
- not enough space for arguments
- not enough space for environment
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
NotifyIME
November
nSrQ%I
nt2Ht#Ht
NTRPQj
(null)
N$~	WU
NX9NXu 
Nyt2S	W	w	w
nzzpenc
O(_^][
o0SSSSU
O')<3F
O401:B
=;&|O6
%<%&|O6
O%C&(,
October
offffff
OffsetRect
OffsetViewportOrgEx
O%KJ{\i@
ole32.dll
OLEAUT32.dll
OleInitialize
OleUninitialize
ON{yDw
OpenClipboard
OpenDatabase
OpenFileMappingA
OpenPrinterA
O_T%=&
O(uckHr
out.prn
OX[0R 
~P9~Pun
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
PA#define _AFX_NO_SPLITTER_RESOURCES
PatBlt
PathToRegion
.PAVCArchiveException@@
.PAVCException@@
.PAVCFileException@@
.PAVCMemoryException@@
.PAVCNotSupportedException@@
.PAVCObject@@
.PAVCResourceException@@
.PAVCSimpleException@@
.PAVCUserException@@
PBwwwyww
.p=e3H
PeekMessageA
p%f*OYa
PHsZRm
Ph_^][Y
P#include "afxres.h"
Pl2UYq
PostMessageA
PostQuitMessage
PPPPhd
PPPPPPPP
P<PuWSV
ppxxxx
PQj WUS
PQQQQQ
\$ PQV
#pragma code_page(936)
Preload
PreviewPages
 (*.prn)|*.prn|
Process32First
Process32Next
Program: 
<program name unknown>
P$RWPh 
~'PSQR
PtInRect
PtVisible
p%'u| 
- pure virtual function call
\$PVUUS
PWVWWW
:?pxfd
"}qH"}r@
Qo?$C2
QPSWVR
QQSVW3
QQSVWd
QQSVWj
QQUWSS
QSUVWj
QUhPRR
QX[gbL
#;&?r~0
"}r8{o
"}r8wu
"}r8^}Z@
RaiseException
;RB%CR
;RB%CR{
;RB%KR
"?r~.d
`.rdata
.rdata
ReadFile
RealizePalette
Rectangle
RectVisible
RedrawWindow
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA
RegFlushKey
RegisterClassA
RegisterClassExA
RegisterClipboardFormatA
RegisterWindowMessageA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
ReleaseCapture
ReleaseDC
ReleaseSemaphore
@.reloc
RemovePlayer
RemovePropA
resource.h
RestoreDC
ResumeThread
RIsZPN
rl~HH#S
rl<t1%
{_R\Ma;
RoundRect
|$,RPQ
RSbpS\O
RtlMoveMemory
RtlUnwind
RunDllHostCallBack
runtime error 
Runtime Error!
RVPUSQ
rZ~/H%:
rZ~,H#7
`;&@#S:
Saturday
SaveDC
?'sb{_j
SbpS0R
SbpS@b	gu
SbpS:g:
SbpS\O
ScaleViewportExtEx
ScaleWindowExtEx
,sc~.d
%S>Cd~.d
ScreenToClient
ScrollWindowEx
sdf.dll
SE	^H@
SE	^Ju,
SE	^Ku
SelectClipRgn
SelectObject
SelectPalette
SendDlgItemMessageA
SendMessageA
September
SetActiveWindow
SetBkColor
SetBkMode
SetCapture
SetClipboardData
    Set cpuSet = GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf("Win32_Processor")
SetCurrentDirectoryA
SetCursor
SetCursorPos
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetFocus
SetForegroundWindow
SetHandleCount
SetLastError
SetMapMode
SetMenu
SetMenuItemBitmaps
SetParent
SetPolyFillMode
SetPropA
SetRect
SetRectEmpty
SetROP2
SetScrollPos
SetScrollRange
SetStdHandle
SetStretchBltMode
SetTextColor
SetTimer
Settings
SetUnhandledExceptionFilter
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowLongA
SetWindowOrgEx
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SE	^x'
SG{rPfF%9
SGsZPC
SGsZPk
SGsZPm
SGsZPN
Shell32.dll
SHELL32.dll
ShellExecuteA
Shell_NotifyIconA
\shell\open\command
SHGetPathFromIDListA
SHGetSpecialFolderLocation
Shift+F1
Shift+F10
Shift+F11
Shift+F12
Shift+F2
Shift+F3
Shift+F4
Shift+F5
Shift+F6
Shift+F7
Shift+F8
Shift+F9
ShowWindow
~/(S&IC
SI	^H@
\SI	^Ju,
SI	^Ju,
SING error
sJ%ur@
~/$Sn:@
sO;>|C;~
software
S@SM	I
SS@SSPVSS
_SSSSU
StartDocA
StartPage
StatusWndProc
StretchBlt
suBuTSJ=
<su.Fd
=su-GX
Sunday
SunMonTueWedThuFriSat
Super-EC
>{s~Vd
SwDDRE
SWVVVRPV
System
SystemParametersInfoA
sZ~@D%
sZNsF#;
:sZ[uF
:sZx(m
T$$_^]
T$0PQR
T$0SUV
<T3NI!/w
@t4Ht1Ht_Ht
t8&;fsu0
T$8QRP
T$8RWj
t$ 90t
t	9p$u
t&9^$t
TabbedTextOutA
t.(AW@[
T$$+D$4
tD9_Pt?
T$dPQR
T$DPQRW
T$DQRU
T$DQSR
T$DWRh
T$\;D$Xu
t(ENEN;
TerminateProcess
TextOutA
tFB5_D
^{t~fd
T/f&Tcknx
tG%C^{[h%
<]t_G<-uA
!This program cannot be run in DOS mode.
<th><label for="field_2new"><font color=red>CPU
]THsZP
THsZPN
THsZPu
THsZYsM
t>Ht Ht
t+Ht$Ht
Thursday
T$H} VP
tI;Ftr
T$\jdSR
+tJHt:Ht*
t*@%l2
TLOSS error
T$lPRh
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
t$LUPh
T$LWUQVR
Tma;&`
tooltips_class32
TO#;"?r_
tP'1w@
T$pPQR
t$PPVS
T$(PQR
T$\PQR
T$PQRP
T$ PQWWR
T$$PRV
tq9~Dt
T$(QVURWP
TranslateAcceleratorA
TranslateMessage
tRHt}H
T$,RQP
t%RSQP
t$$RVP
T$<RVW
tS9~@uN
T$ SRh
T$,SRh
t$(SSh
t#SSUP
T$ SWRP
t!< t	<
+ttHHtd
t.;t$$t(
Tuesday
t%&u|p
T$\URP
t$$VSS
tvWWWWU
twD_E%I
T$\WVR
t/WWUPj
 (*.txt)|*.txt|
T$XUSR
;t$Xu";\$\u
t$XWVS
?u='@^
u._^][
U~/<&:
u29l$xu,
	u\3E<
u~7,$B
u"8D$yu
u8&:|s
u8YNrF
u]9B uX
u	9~@u
uA;5T(S
%%uA%B
uB#;R(
uD*~.d
uD*~Fd
uD)~-L
>:u#FV
uh9^8uX
UIWndProc
=u(&K&
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
>:uNFV
UnhandledExceptionFilter
UnhookWindowsHookEx
UnloadKeyboardLayout
UnlockFile
UnregisterClassA
un/Z;@
UpdateWindow
uR9BxuM
uRFGHt
USER32
user32.dll
User32.dll
USER32.dll
u$SShe
utW54H
\$(UVW
v~/<$:
ValidateRect
VC20XC00U
vDEKwT'
vDRE=(0n
V#D$,WPQ
Vh;VX|
VirtualAlloc
VirtualFree
\$<VW3
V,_^[Y
=_W'<>
_W%{~@
^W%5b{ai
W9^du-
WaitForMultipleObjects
WaitForSingleObject
waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
 (*.WAV;*.MID)|*.WAV;*.MID|WAV
 (*.WAV)|*.WAV|MIDI
wD*~1|%C
wD"~/L
Wednesday
	WG!2S(
WideCharToMultiByte
window
WindowFromPoint
windows
Windows
WinExec
WinHelpA
WINMM.dll
WINSPOOL.DRV
WjdjdPQh
Wj(_Wj
|$$}$WP
(wqt\HHtS
WriteFile
WritePrivateProfileStringA
WS2_32.dll
wsprintfA
WTWindow
|$@ Wu
ww-Po{
"WWShH
wwwwvf
wwwwvfo
wwwwww
wwwwwww
wwwwwwww
wwwwwwwww
wwwwwwwwwwwwwwwwwwwwwwww
#w'wywww
~Xh#S"
?X%iuh%Q}x#Q
~@x%:.k
X]SGsZPm
XY[Z[]
Y95 5T
{_~YD#d
YHYtLHt9
y~Sx#N&
YX[(W	
_^][YY
YYF;5 5T
Z~/<&;
%@Zc`Gu
~ZD#%s
[ZHAc\
ZNhr'B
Z~/,&R
Z\%-uQ
|z;^<}uWS