| Analysis Date | 2014-08-14 14:36:28 |
|---|---|
| MD5 | ec60aafb07355c361ffed065c70b8a41 |
| SHA1 | 4025ff0fdef558a75c3776eb662b29b10109e979 |
Static Details:
| File type | PE32 executable for MS Windows (GUI) Intel 80386 32-bit | |
|---|---|---|
| Section | .text md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0 | |
| Section | .rdata md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0 | |
| Section | .data md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0 | |
| Section | .rsrc md5: 1081232ad362d1af39afdb7b9c07b958 sha1: d184cdccdf456f5d54bbeeeeb28affe248bbb787 size: 16384 | |
| Section | .vmp0 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0 | |
| Section | .tls md5: 620f0b67a91f7f74151bc5be745b7110 sha1: 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d size: 4096 | |
| Section | .vmp1 md5: d4ac33ea6fb6174dce6356848badadea sha1: a366d62663958fc22e5f8d286c9267faa0edb4cd size: 1454080 | |
| Section | .reloc md5: a44823f618b89172b86e047033951463 sha1: 754fa90977b4eed2b34961a7b7812390710033fd size: 4096 | |
| Timestamp | 2011-12-30 17:03:56 | |
| Version | LegalCopyright: 作者版权所有 请尊重并使用正版 FileVersion: 12.2.2011.12 Comments: 本程序使用易语言编写(http://www.eyuyan.com) ProductName: 易语言程序 ProductVersion: 12.2.2011.12 FileDescription: 易语言程序 | |
| PEhash | 798e5be172198243beb1cb4afac406780b15fbc8 | |
| IMPhash | c179257f095778740e826edef8c40aaa | |
| AV | 360 Safe | Gen:Heur.PWSIME.1 |
| AV | Ad-Aware | Gen:Heur.PWSIME.1 |
| AV | Alwil (avast) | no_virus |
| AV | Arcabit (arcavir) | Heur.W32 |
| AV | Authentium | W32/SuspPack.BQ.gen!Eldorado |
| AV | Avira (antivir) | TR/Agent.1482752.59 |
| AV | CA (E-Trust Ino) | no_virus |
| AV | CAT (quickheal) | no_virus |
| AV | ClamAV | no_virus |
| AV | Dr. Web | no_virus |
| AV | Emsisoft | Gen:Heur.PWSIME.1 |
| AV | Eset (nod32) | no_virus |
| AV | Fortinet | W32/Reconyc.BZSL!tr |
| AV | Frisk (f-prot) | W32/SuspPack.BQ.gen!Eldorado (generic, not disinfectable) |
| AV | F-Secure | Gen:Heur.PWSIME.1 |
| AV | Grisoft (avg) | no_virus |
| AV | Ikarus | no_virus |
| AV | K7 | no_virus |
| AV | Kaspersky | Trojan.Win32.Reconyc.bzsl |
| AV | MalwareBytes | no_virus |
| AV | Mcafee | no_virus |
| AV | Microsoft Security Essentials | no_virus |
| AV | MicroWorld (escan) | Gen:Heur.PWSIME.1 |
| AV | Norman | no_virus |
| AV | Rising | no_virus |
| AV | Sophos | no_virus |
| AV | Symantec | no_virus |
| AV | Trend Micro | no_virus |
| AV | VirusBlokAda (vba32) | HackTool.Sniffer.WpePro |
| AV | Yara APT | no_virus |
| AV | Zillya! | no_virus |
Runtime Details:
| Screenshot |  |
|---|
Process
↳ C:\malware.exe
| Registry | HKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝ NULL |
|---|---|
| Registry | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝ 1 |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\logo[1].gif |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat |
| Creates File | C:\Documents and Settings\Administrator\My Documents\svchost.exe |
| Creates File | \Device\Afd\AsyncConnectHlp |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\87dyw[1].htm |
| Creates File | C:\Documents and Settings\Administrator\Cookies\index.dat |
| Creates File | PIPE\lsarpc |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012014081420140815\index.dat |
| Creates File | \Device\Afd\Endpoint |
| Deletes File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013061320130614\index.dat |
| Deletes File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013052720130603\index.dat |
| Creates Process | C:\Documents and Settings\Administrator\My Documents\\svchost.exe |
| Creates Mutex | c:!documents and settings!administrator!local settings!history!history.ie5!mshist012014081420140815! |
| Creates Mutex | _!SHMSFTHISTORY!_ |
| Creates Mutex | c:!documents and settings!administrator!local settings!history!history.ie5! |
| Creates Mutex | WininetConnectionMutex |
| Creates Mutex | c:!documents and settings!administrator!cookies! |
| Creates Mutex | c:!documents and settings!administrator!local settings!temporary internet files!content.ie5! |
| Winsock DNS | www.87dyw.com |
| Winsock DNS | www.le6tv.com |
Process
↳ c:\delus.bat
Process
↳ C:\Documents and Settings\Administrator\My Documents\\svchost.exe
| Registry | HKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝ NULL |
|---|---|
| Registry | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝ 1 |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\52shanhu[1].htm |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\logo[2].gif |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\logo[1].gif |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat |
| Creates File | c:\delus.bat |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\logo[2].gif |
| Creates File | \Device\Afd\AsyncConnectHlp |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\logo[1].gif |
| Creates File | C:\Documents and Settings\Administrator\Cookies\index.dat |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\3214[1].htm |
| Creates File | PIPE\lsarpc |
| Creates File | \Device\Afd\Endpoint |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\6699kan[1].htm |
| Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\feixiandao.uueasy[1].htm |
| Creates Process | c:\delus.bat |
| Winsock DNS | www.5266.me |
| Winsock DNS | feixiandao.uueasy.com |
| Winsock DNS | www.7798k.com |
| Winsock DNS | www.5213dy.com |
| Winsock DNS | www.955wl.com |
| Winsock DNS | www.3214.cn |
| Winsock DNS | www.0419dj.com |
| Winsock DNS | www.lelev8.net |
| Winsock DNS | www.ewasai.com |
| Winsock DNS | www.3344dnf.com |
| Winsock DNS | www.dnfxq.com |
| Winsock DNS | 7798k.com |
| Winsock DNS | www.6stv.net |
| Winsock DNS | www.913dnf.com |
| Winsock DNS | www.87dyw.com |
| Winsock DNS | www.52shanhu.com |
| Winsock DNS | www.sqiba.com |
| Winsock DNS | www.11111wg.com |
| Winsock DNS | www.6699kan.com |
| Winsock DNS | www.66iu.com |
| Winsock DNS | www.le6tv.com |
| Winsock DNS | www.6625.me |
| Winsock DNS | www.11111wg.net |
Network Details:
| DNS | www.87dyw.com Type: A 192.187.97.125 |
|---|---|
| DNS | www.0419dj.com Type: A 59.45.79.57 |
| DNS | www.52shanhu.com Type: A 209.222.14.3 |
| DNS | www.6699kan.com Type: A 23.110.26.14 |
| DNS | a.uueasy.com Type: A 42.120.63.199 |
| DNS | 39712.vhost13.cloudvhost.net Type: A 116.255.200.174 |
| DNS | www.sqiba.com Type: A 23.225.104.120 |
| DNS | www.3344dnf.com Type: A 69.172.201.208 |
| DNS | www.dnfxq.com Type: A 121.127.248.169 |
| DNS | www.le6tv.com Type: A |
| DNS | www.5213dy.com Type: A |
| DNS | www.11111wg.net Type: A |
| DNS | 7798k.com Type: A |
| DNS | www.11111wg.com Type: A |
| DNS | www.7798k.com Type: A |
| DNS | feixiandao.uueasy.com Type: A |
| DNS | www.6625.me Type: A |
| DNS | www.ewasai.com Type: A |
| DNS | www.5266.me Type: A |
| DNS | www.3214.cn Type: A |
| DNS | www.lelev8.net Type: A |
| DNS | www.66iu.com Type: A |
| DNS | www.955wl.com Type: A |
| DNS | www.6stv.net Type: A |
| DNS | www.913dnf.com Type: A |
| HTTP GET | http://www.87dyw.com/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.87dyw.com/5266.html User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.87dyw.com/logo.gif User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.0419dj.com/nitian.htm User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.52shanhu.com/jueai.htm User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.52shanhu.com/1.htm User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.87dyw.com/wstv User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.87dyw.com/tv/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.6699kan.com/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://feixiandao.uueasy.com/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://feixiandao.uueasy.com/index-htm-m-bbs-cateid-6.html User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.3214.cn/?jueai User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.sqiba.com/%C3%A0%C2%A7%C3%86%C3%B0%C2%B0%C3%89%C2%B9%C3%A3%C2%B8%C3%A6.htm User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.3344dnf.com/wuye1.html User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.dnfxq.com//%C2%B9%C3%A3%C2%B8%C3%A6.htm User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.6699kan.com/logo.gif User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.52shanhu.com/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.3214.cn/logo.gif User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://feixiandao.uueasy.com/logo.gif User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| HTTP GET | http://www.52shanhu.com/logo.gif User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
| Flows TCP | 192.168.1.1:1034 ➝ 192.187.97.125:80 |
| Flows TCP | 192.168.1.1:1033 ➝ 192.187.97.125:80 |
| Flows TCP | 192.168.1.1:1035 ➝ 192.187.97.125:80 |
| Flows TCP | 192.168.1.1:1037 ➝ 59.45.79.57:80 |
| Flows TCP | 192.168.1.1:1038 ➝ 209.222.14.3:80 |
| Flows TCP | 192.168.1.1:1039 ➝ 209.222.14.3:80 |
| Flows TCP | 192.168.1.1:1040 ➝ 192.187.97.125:80 |
| Flows TCP | 192.168.1.1:1041 ➝ 192.187.97.125:80 |
| Flows TCP | 192.168.1.1:1042 ➝ 23.110.26.14:80 |
| Flows TCP | 192.168.1.1:1044 ➝ 42.120.63.199:80 |
| Flows TCP | 192.168.1.1:1045 ➝ 42.120.63.199:80 |
| Flows TCP | 192.168.1.1:1046 ➝ 116.255.200.174:80 |
| Flows TCP | 192.168.1.1:1047 ➝ 23.225.104.120:80 |
| Flows TCP | 192.168.1.1:1048 ➝ 69.172.201.208:80 |
| Flows TCP | 192.168.1.1:1049 ➝ 121.127.248.169:80 |
| Flows TCP | 192.168.1.1:1050 ➝ 23.110.26.14:80 |
| Flows TCP | 192.168.1.1:1051 ➝ 209.222.14.3:80 |
| Flows TCP | 192.168.1.1:1052 ➝ 116.255.200.174:80 |
| Flows TCP | 192.168.1.1:1053 ➝ 42.120.63.199:80 |
| Flows TCP | 192.168.1.1:1054 ➝ 209.222.14.3:80 |
Raw Pcap
0x00000000 (00000) 47455420 2f204854 54502f31 2e310d0a GET / HTTP/1.1..
0x00000010 (00016) 41636365 70743a20 2a2f2a0d 0a416363 Accept: */*..Acc
0x00000020 (00032) 6570742d 4c616e67 75616765 3a20656e ept-Language: en
0x00000030 (00048) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco
0x00000040 (00064) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl
0x00000050 (00080) 6174650d 0a557365 722d4167 656e743a ate..User-Agent:
0x00000060 (00096) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co
0x00000070 (00112) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6
0x00000080 (00128) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5
0x00000090 (00144) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL
0x000000a0 (00160) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho
0x000000b0 (00176) 73743a20 7777772e 38376479 772e636f st: www.87dyw.co
0x000000c0 (00192) 6d0d0a43 6f6e6e65 6374696f 6e3a204b m..Connection: K
0x000000d0 (00208) 6565702d 416c6976 650d0a0d 0a eep-Alive....
0x00000000 (00000) 47455420 2f353236 362e6874 6d6c2048 GET /5266.html H
0x00000010 (00016) 5454502f 312e310d 0a416363 6570743a TTP/1.1..Accept:
0x00000020 (00032) 202a2f2a 0d0a4163 63657074 2d4c616e */*..Accept-Lan
0x00000030 (00048) 67756167 653a2065 6e2d7573 0d0a4163 guage: en-us..Ac
0x00000040 (00064) 63657074 2d456e63 6f64696e 673a2067 cept-Encoding: g
0x00000050 (00080) 7a69702c 20646566 6c617465 0d0a5573 zip, deflate..Us
0x00000060 (00096) 65722d41 67656e74 3a204d6f 7a696c6c er-Agent: Mozill
0x00000070 (00112) 612f342e 30202863 6f6d7061 7469626c a/4.0 (compatibl
0x00000080 (00128) 653b204d 53494520 362e303b 2057696e e; MSIE 6.0; Win
0x00000090 (00144) 646f7773 204e5420 352e313b 20535631 dows NT 5.1; SV1
0x000000a0 (00160) 3b202e4e 45542043 4c522032 2e302e35 ; .NET CLR 2.0.5
0x000000b0 (00176) 30373237 290d0a48 6f73743a 20777777 0727)..Host: www
0x000000c0 (00192) 2e383764 79772e63 6f6d0d0a 436f6e6e .87dyw.com..Conn
0x000000d0 (00208) 65637469 6f6e3a20 4b656570 2d416c69 ection: Keep-Ali
0x000000e0 (00224) 76650d0a 0d0a ve....
0x00000000 (00000) 47455420 2f6c6f67 6f2e6769 66204854 GET /logo.gif HT
0x00000010 (00016) 54502f31 2e310d0a 41636365 70743a20 TP/1.1..Accept:
0x00000020 (00032) 2a2f2a0d 0a526566 65726572 3a206874 */*..Referer: ht
0x00000030 (00048) 74703a2f 2f777777 2e383764 79772e63 tp://www.87dyw.c
0x00000040 (00064) 6f6d2f0d 0a416363 6570742d 4c616e67 om/..Accept-Lang
0x00000050 (00080) 75616765 3a20656e 2d75730d 0a416363 uage: en-us..Acc
0x00000060 (00096) 6570742d 456e636f 64696e67 3a20677a ept-Encoding: gz
0x00000070 (00112) 69702c20 6465666c 6174650d 0a557365 ip, deflate..Use
0x00000080 (00128) 722d4167 656e743a 204d6f7a 696c6c61 r-Agent: Mozilla
0x00000090 (00144) 2f342e30 2028636f 6d706174 69626c65 /4.0 (compatible
0x000000a0 (00160) 3b204d53 49452036 2e303b20 57696e64 ; MSIE 6.0; Wind
0x000000b0 (00176) 6f777320 4e542035 2e313b20 5356313b ows NT 5.1; SV1;
0x000000c0 (00192) 202e4e45 5420434c 5220322e 302e3530 .NET CLR 2.0.50
0x000000d0 (00208) 37323729 0d0a486f 73743a20 7777772e 727)..Host: www.
0x000000e0 (00224) 38376479 772e636f 6d0d0a43 6f6e6e65 87dyw.com..Conne
0x000000f0 (00240) 6374696f 6e3a204b 6565702d 416c6976 ction: Keep-Aliv
0x00000100 (00256) 650d0a0d 0a70742d 4c616e0a e....pt-Lan.
0x00000000 (00000) 47455420 2f6e6974 69616e2e 68746d20 GET /nitian.htm
0x00000010 (00016) 48545450 2f312e31 0d0a4163 63657074 HTTP/1.1..Accept
0x00000020 (00032) 3a202a2f 2a0d0a41 63636570 742d4c61 : */*..Accept-La
0x00000030 (00048) 6e677561 67653a20 656e2d75 730d0a41 nguage: en-us..A
0x00000040 (00064) 63636570 742d456e 636f6469 6e673a20 ccept-Encoding:
0x00000050 (00080) 677a6970 2c206465 666c6174 650d0a55 gzip, deflate..U
0x00000060 (00096) 7365722d 4167656e 743a204d 6f7a696c ser-Agent: Mozil
0x00000070 (00112) 6c612f34 2e302028 636f6d70 61746962 la/4.0 (compatib
0x00000080 (00128) 6c653b20 4d534945 20362e30 3b205769 le; MSIE 6.0; Wi
0x00000090 (00144) 6e646f77 73204e54 20352e31 3b205356 ndows NT 5.1; SV
0x000000a0 (00160) 313b202e 4e455420 434c5220 322e302e 1; .NET CLR 2.0.
0x000000b0 (00176) 35303732 37290d0a 486f7374 3a207777 50727)..Host: ww
0x000000c0 (00192) 772e3034 3139646a 2e636f6d 0d0a436f w.0419dj.com..Co
0x000000d0 (00208) 6e6e6563 74696f6e 3a204b65 65702d41 nnection: Keep-A
0x000000e0 (00224) 6c697665 0d0a0d0a 6d0d0a43 6f6e6e65 live....m..Conne
0x000000f0 (00240) 6374696f 6e3a204b 6565702d 416c6976 ction: Keep-Aliv
0x00000100 (00256) 650d0a0d 0a70742d 4c616e0a e....pt-Lan.
0x00000000 (00000) 47455420 2f204854 54502f31 2e310d0a GET / HTTP/1.1..
0x00000010 (00016) 41636365 70743a20 2a2f2a0d 0a416363 Accept: */*..Acc
0x00000020 (00032) 6570742d 4c616e67 75616765 3a20656e ept-Language: en
0x00000030 (00048) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco
0x00000040 (00064) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl
0x00000050 (00080) 6174650d 0a557365 722d4167 656e743a ate..User-Agent:
0x00000060 (00096) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co
0x00000070 (00112) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6
0x00000080 (00128) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5
0x00000090 (00144) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL
0x000000a0 (00160) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho
0x000000b0 (00176) 73743a20 7777772e 36363939 6b616e2e st: www.6699kan.
0x000000c0 (00192) 636f6d0d 0a436f6e 6e656374 696f6e3a com..Connection:
0x000000d0 (00208) 204b6565 702d416c 6976650d 0a0d0a22 Keep-Alive...."
0x000000e0 (00224) 3b425a46 33c4b491 4647ac36 43930448 ;BZF3...FG.6C..H
0x000000f0 (00240) 8b5f96e1 e174851d ec400b10 80 ._...t...@...
0x00000000 (00000) 47455420 2f6a7565 61692e68 746d2048 GET /jueai.htm H
0x00000010 (00016) 5454502f 312e310d 0a416363 6570743a TTP/1.1..Accept:
0x00000020 (00032) 202a2f2a 0d0a4163 63657074 2d4c616e */*..Accept-Lan
0x00000030 (00048) 67756167 653a2065 6e2d7573 0d0a4163 guage: en-us..Ac
0x00000040 (00064) 63657074 2d456e63 6f64696e 673a2067 cept-Encoding: g
0x00000050 (00080) 7a69702c 20646566 6c617465 0d0a5573 zip, deflate..Us
0x00000060 (00096) 65722d41 67656e74 3a204d6f 7a696c6c er-Agent: Mozill
0x00000070 (00112) 612f342e 30202863 6f6d7061 7469626c a/4.0 (compatibl
0x00000080 (00128) 653b204d 53494520 362e303b 2057696e e; MSIE 6.0; Win
0x00000090 (00144) 646f7773 204e5420 352e313b 20535631 dows NT 5.1; SV1
0x000000a0 (00160) 3b202e4e 45542043 4c522032 2e302e35 ; .NET CLR 2.0.5
0x000000b0 (00176) 30373237 290d0a48 6f73743a 20777777 0727)..Host: www
0x000000c0 (00192) 2e353273 68616e68 752e636f 6d0d0a43 .52shanhu.com..C
0x000000d0 (00208) 6f6e6e65 6374696f 6e3a204b 6565702d onnection: Keep-
0x000000e0 (00224) 416c6976 650d0a0d 0ae84510 5ee65c99 Alive.....E.^.\.
0x000000f0 (00240) b42af6d0 75a2200f 57e0a28a 80053de0 .*..u. .W.....=.
0x00000100 (00256)
0x00000000 (00000) 47455420 2f6c6f67 6f2e6769 66204854 GET /logo.gif HT
0x00000010 (00016) 54502f31 2e310d0a 41636365 70743a20 TP/1.1..Accept:
0x00000020 (00032) 2a2f2a0d 0a526566 65726572 3a206874 */*..Referer: ht
0x00000030 (00048) 74703a2f 2f777777 2e363639 396b616e tp://www.6699kan
0x00000040 (00064) 2e636f6d 2f0d0a41 63636570 742d4c61 .com/..Accept-La
0x00000050 (00080) 6e677561 67653a20 656e2d75 730d0a41 nguage: en-us..A
0x00000060 (00096) 63636570 742d456e 636f6469 6e673a20 ccept-Encoding:
0x00000070 (00112) 677a6970 2c206465 666c6174 650d0a55 gzip, deflate..U
0x00000080 (00128) 7365722d 4167656e 743a204d 6f7a696c ser-Agent: Mozil
0x00000090 (00144) 6c612f34 2e302028 636f6d70 61746962 la/4.0 (compatib
0x000000a0 (00160) 6c653b20 4d534945 20362e30 3b205769 le; MSIE 6.0; Wi
0x000000b0 (00176) 6e646f77 73204e54 20352e31 3b205356 ndows NT 5.1; SV
0x000000c0 (00192) 313b202e 4e455420 434c5220 322e302e 1; .NET CLR 2.0.
0x000000d0 (00208) 35303732 37290d0a 486f7374 3a207777 50727)..Host: ww
0x000000e0 (00224) 772e3636 39396b61 6e2e636f 6d0d0a43 w.6699kan.com..C
0x000000f0 (00240) 6f6e6e65 6374696f 6e3a204b 6565702d onnection: Keep-
0x00000100 (00256) 416c6976 650d0a0d 0a636f0a Alive....co.
0x00000000 (00000) 47455420 2f312e68 746d2048 5454502f GET /1.htm HTTP/
0x00000010 (00016) 312e310d 0a416363 6570743a 202a2f2a 1.1..Accept: */*
0x00000020 (00032) 0d0a4163 63657074 2d4c616e 67756167 ..Accept-Languag
0x00000030 (00048) 653a2065 6e2d7573 0d0a4163 63657074 e: en-us..Accept
0x00000040 (00064) 2d456e63 6f64696e 673a2067 7a69702c -Encoding: gzip,
0x00000050 (00080) 20646566 6c617465 0d0a5573 65722d41 deflate..User-A
0x00000060 (00096) 67656e74 3a204d6f 7a696c6c 612f342e gent: Mozilla/4.
0x00000070 (00112) 30202863 6f6d7061 7469626c 653b204d 0 (compatible; M
0x00000080 (00128) 53494520 362e303b 2057696e 646f7773 SIE 6.0; Windows
0x00000090 (00144) 204e5420 352e313b 20535631 3b202e4e NT 5.1; SV1; .N
0x000000a0 (00160) 45542043 4c522032 2e302e35 30373237 ET CLR 2.0.50727
0x000000b0 (00176) 290d0a48 6f73743a 20777777 2e353273 )..Host: www.52s
0x000000c0 (00192) 68616e68 752e636f 6d0d0a43 6f6e6e65 hanhu.com..Conne
0x000000d0 (00208) 6374696f 6e3a204b 6565702d 416c6976 ction: Keep-Aliv
0x000000e0 (00224) 650d0a0d 0aa9a95a ddc853ab 894cdaa9 e......Z..S..L..
0x000000f0 (00240) 5688b11d a8c556a8 6811c4a8 13d0690f V.....V.h.....i.
0x00000100 (00256) 4a9c29d0 02164f6b 4b4f2807 6987506e J.)...OkKO(.i.Pn
0x00000110 (00272) a34f0c25 06c58811 3e4708e1 e556deca .O.%....>G...V..
0x00000120 (00288) 84ddb815 74680c86 b35adfd7 1542854c ....th...Z...B.L
0x00000130 (00304) af480de0 8a413168 44e0e587 74480ae7 .H...A1hD...tH..
0x00000140 (00320) 69108828 0cded753 acd75d8d 8612afb7 i..(...S..].....
0x00000150 (00336) 186e2809 df9816aa 69428f78 0f2f2805 .n(.....iB.x./(.
0x00000160 (00352) add835a9 9810909f 12c5b816 c4c6562b ..5...........V+
0x00000170 (00368) 751cc5a9 5f51862e 264a3a5e 7610faf3 u..._Q..&J:^v...
0x00000180 (00384) 18d17912 a878128d c85aad28 0df3b90f ..y..x...Z.(....
0x00000190 (00400) 8aa64efc ecb79058 0eecf356 c7c715e9 ..N....X...V....
0x000001a0 (00416) 4911f0a9 0e364b3b f6ca1159 570af8d8 I....6K;...YW...
0x000001b0 (00432) 14c49811 62b0548d c83cdbb9 562e0504 ....b.T..<..V...
0x000001c0 (00448) 75770d6f 050cca2a 11ae590e fbdb5076 uw.o...*..Y...Pv
0x000001d0 (00464) 9112f9e5 16f8cc4e 4b9d4b73 580baaa8 .......NK.KsX...
0x000001e0 (00480) 37c1884d ebf48c89 be56dfd8 85483807 7..M.....V...H8.
0x000001f0 (00496) 28571daa b83c6838 0a86b23a 323706fc (W...<h8...:27..
0x00000200 (00512) e8568d85 4c53864e 8e9215ee 99109178 .V..LS.N.......x
0x00000210 (00528) 3c396925 ed8910cf 590faacf 593d5711 <9i%....Y...Y=W.
0x00000220 (00544) 3f784571 a468b203 14b0d680 716a47e8 ?xEq.h......qjG.
0x00000230 (00560) 2815c6d8 5dc81c14 a0b95fdd 9946aa98 (...]....._..F..
0x00000240 (00576) 4a193609 73c039e7 7911c7c9 82cad917 J.6.s.9.y.......
0x00000250 (00592) f0aa53f1 ba52fbdb 86507a4e 88390ba8 ..S..R...PzN.9..
0x00000260 (00608) 380d73c0 56c3994a ae7845c4 b95ffcf5 8.s.V..J.xE.._..
0x00000270 (00624) ba2e1805 6e180a90 6839f8cc 84fceb8b ....n...h9......
0x00000280 (00640) 3d7825d1 7a3b9059 39131704 90190c4e =x%.z;.Y9......N
0x00000290 (00656) 1806cc39 0f29583c 375a3dac 190f59a0 ...9.)X<7Z=...Y.
0x000002a0 (00672) 18e85910 42902559 59305a9f 4fe93914 ..Y.B.%YY0Z.O.9.
0x000002b0 (00688) 71b2376a 9352757c 49de031b 54922ee6 q.7j.Ru|I...T...
0x000002c0 (00704) 1319abc6 336da333 b0aa8871 b358ab5a ....3m.3...q.X.Z
0x000002d0 (00720) 2f273c35 ed993fc4 a836c5b8 383f6a45 /'<5..?..6..8?jE
0x000002e0 (00736) 8abd1f56 924e93d3 59a9892b 5a482857 ...V.N..Y..+ZH(W
0x000002f0 (00752) 692dd369 27af4728 a8992c52 7931fbf3 i-.i'.G(..,Ry1..
0x00000300 (00768) 33ad996e 87be3b8d a22f88a6 6ac6c82e 3..n..;../..j...
0x00000310 (00784) c9d92ede a832d9ab 7cddb834 f2b932ee .....2..|..4..2.
0x00000320 (00800) a932dcb9 7b755931 c9dc82e6 7a30fcdb .2..{uY1....z0..
0x00000330 (00816) a8408530 70862e6d 93328abe 7197490d .@.0p..m.2..q.I.
0x00000340 (00832) d8490fb7 68111927 0598280c b87813fc .I..h..'..(..x..
0x00000350 (00848) f35dfcf4 91583809 78380aaf b95c9738 .]...X8.x8...\.8
0x00000360 (00864) 0cb8380d 59a03344 914d8b93 4d4ca831 ..8.Y.3D.M..ML.1
0x00000370 (00880) c5d0598e d442cae2 5fddc82d e1e52ec4 ..Y..B.._..-....
0x00000380 (00896) 892a7469 2bdfd72d 744828f8 cb2bfada .*ti+..-tH(..+..
0x00000390 (00912) 2dc5982b 74782afb e62f1b38 2af0bb75 -..+tx*../.8*..u
0x000003a0 (00928) c298682c ..h,
0x00000000 (00000) 47455420 2f777374 76204854 54502f31 GET /wstv HTTP/1
0x00000010 (00016) 2e310d0a 41636365 70743a20 2a2f2a0d .1..Accept: */*.
0x00000020 (00032) 0a416363 6570742d 4c616e67 75616765 .Accept-Language
0x00000030 (00048) 3a20656e 2d75730d 0a416363 6570742d : en-us..Accept-
0x00000040 (00064) 456e636f 64696e67 3a20677a 69702c20 Encoding: gzip,
0x00000050 (00080) 6465666c 6174650d 0a557365 722d4167 deflate..User-Ag
0x00000060 (00096) 656e743a 204d6f7a 696c6c61 2f342e30 ent: Mozilla/4.0
0x00000070 (00112) 2028636f 6d706174 69626c65 3b204d53 (compatible; MS
0x00000080 (00128) 49452036 2e303b20 57696e64 6f777320 IE 6.0; Windows
0x00000090 (00144) 4e542035 2e313b20 5356313b 202e4e45 NT 5.1; SV1; .NE
0x000000a0 (00160) 5420434c 5220322e 302e3530 37323729 T CLR 2.0.50727)
0x000000b0 (00176) 0d0a486f 73743a20 7777772e 38376479 ..Host: www.87dy
0x000000c0 (00192) 772e636f 6d0d0a43 6f6e6e65 6374696f w.com..Connectio
0x000000d0 (00208) 6e3a204b 6565702d 416c6976 650d0a0d n: Keep-Alive...
0x000000e0 (00224) 0a351c1c 0aae64a2 5010b0ec 6a3845e1 .5....d.P...j8E.
0x000000f0 (00240) 070f ..
0x00000000 (00000) 47455420 2f74762f 20485454 502f312e GET /tv/ HTTP/1.
0x00000010 (00016) 310d0a41 63636570 743a202a 2f2a0d0a 1..Accept: */*..
0x00000020 (00032) 41636365 70742d4c 616e6775 6167653a Accept-Language:
0x00000030 (00048) 20656e2d 75730d0a 41636365 70742d45 en-us..Accept-E
0x00000040 (00064) 6e636f64 696e673a 20677a69 702c2064 ncoding: gzip, d
0x00000050 (00080) 65666c61 74650d0a 55736572 2d416765 eflate..User-Age
0x00000060 (00096) 6e743a20 4d6f7a69 6c6c612f 342e3020 nt: Mozilla/4.0
0x00000070 (00112) 28636f6d 70617469 626c653b 204d5349 (compatible; MSI
0x00000080 (00128) 4520362e 303b2057 696e646f 7773204e E 6.0; Windows N
0x00000090 (00144) 5420352e 313b2053 56313b20 2e4e4554 T 5.1; SV1; .NET
0x000000a0 (00160) 20434c52 20322e30 2e353037 3237290d CLR 2.0.50727).
0x000000b0 (00176) 0a486f73 743a2077 77772e38 37647977 .Host: www.87dyw
0x000000c0 (00192) 2e636f6d 0d0a436f 6e6e6563 74696f6e .com..Connection
0x000000d0 (00208) 3a204b65 65702d41 6c697665 0d0a0d0a : Keep-Alive....
0x000000e0 (00224) 7889fed8 036e5787 1bb8f48b 1c88fc78 x....nW........x
0x000000f0 (00240) 02d7c80f 4e1ccdd2 40178463 653e2840 ....N...@..ce>(@
0x00000100 (00256) ee0586ff 7846372d 89677889 ed7c1558 ....xF7-.gx..|.X
0x00000110 (00272) 09dce442 57998f8e c230d5d1 e10a28da ...BW....0....(.
0x00000120 (00288) 063a5d52 697c1255 18465fc0 60a45b87 .:]Ri|.U.F_.`.[.
0x00000130 (00304) 39749327 1a22ad5f 485d7c4c c8e0c303 9t.'."._H]|L....
0x00000140 (00320) 9881bd40 72f16041 c784c835 a14e213a ...@r.`A...5.N!:
0x00000150 (00336) 8850b704 0a60022c .P...`.,
0x00000000 (00000) 47455420 2f696e64 65782d68 746d2d6d GET /index-htm-m
0x00000010 (00016) 2d626273 2d636174 6569642d 362e6874 -bbs-cateid-6.ht
0x00000020 (00032) 6d6c2048 5454502f 312e310d 0a416363 ml HTTP/1.1..Acc
0x00000030 (00048) 6570743a 202a2f2a 0d0a4163 63657074 ept: */*..Accept
0x00000040 (00064) 2d4c616e 67756167 653a2065 6e2d7573 -Language: en-us
0x00000050 (00080) 0d0a4163 63657074 2d456e63 6f64696e ..Accept-Encodin
0x00000060 (00096) 673a2067 7a69702c 20646566 6c617465 g: gzip, deflate
0x00000070 (00112) 0d0a5573 65722d41 67656e74 3a204d6f ..User-Agent: Mo
0x00000080 (00128) 7a696c6c 612f342e 30202863 6f6d7061 zilla/4.0 (compa
0x00000090 (00144) 7469626c 653b204d 53494520 362e303b tible; MSIE 6.0;
0x000000a0 (00160) 2057696e 646f7773 204e5420 352e313b Windows NT 5.1;
0x000000b0 (00176) 20535631 3b202e4e 45542043 4c522032 SV1; .NET CLR 2
0x000000c0 (00192) 2e302e35 30373237 290d0a48 6f73743a .0.50727)..Host:
0x000000d0 (00208) 20666569 7869616e 64616f2e 75756561 feixiandao.uuea
0x000000e0 (00224) 73792e63 6f6d0d0a 436f6e6e 65637469 sy.com..Connecti
0x000000f0 (00240) 6f6e3a20 4b656570 2d416c69 76650d0a on: Keep-Alive..
0x00000100 (00256) 0d0ae74a 70547270 6113a5e1 83cc49e2 ...JpTrpa.....I.
0x00000110 (00272) 4a81b20e db71 J....q
0x00000000 (00000) 47455420 2f3f6a75 65616920 48545450 GET /?jueai HTTP
0x00000010 (00016) 2f312e31 0d0a4163 63657074 3a202a2f /1.1..Accept: */
0x00000020 (00032) 2a0d0a41 63636570 742d4c61 6e677561 *..Accept-Langua
0x00000030 (00048) 67653a20 656e2d75 730d0a41 63636570 ge: en-us..Accep
0x00000040 (00064) 742d456e 636f6469 6e673a20 677a6970 t-Encoding: gzip
0x00000050 (00080) 2c206465 666c6174 650d0a55 7365722d , deflate..User-
0x00000060 (00096) 4167656e 743a204d 6f7a696c 6c612f34 Agent: Mozilla/4
0x00000070 (00112) 2e302028 636f6d70 61746962 6c653b20 .0 (compatible;
0x00000080 (00128) 4d534945 20362e30 3b205769 6e646f77 MSIE 6.0; Window
0x00000090 (00144) 73204e54 20352e31 3b205356 313b202e s NT 5.1; SV1; .
0x000000a0 (00160) 4e455420 434c5220 322e302e 35303732 NET CLR 2.0.5072
0x000000b0 (00176) 37290d0a 486f7374 3a207777 772e3332 7)..Host: www.32
0x000000c0 (00192) 31342e63 6e0d0a43 6f6e6e65 6374696f 14.cn..Connectio
0x000000d0 (00208) 6e3a204b 6565702d 416c6976 650d0a0d n: Keep-Alive...
0x000000e0 (00224) 0a21e835 29b04e27 13cdbdf8 cd21ff3a .!.5).N'.....!.:
0x000000f0 (00240) 78177551 6ad80dc6 9ac0bd25 21f1283d x.uQj......%!.(=
0x00000100 (00256) 2104b2b7 2c7dbf71 1acc59b0 71cf1e08 !...,}.q..Y.q...
0x00000110 (00272) 81b0d8cd bed881cf e681303d 27a05705 ..........0='.W.
0x00000120 (00288) 2314c408 4180132a 6a9a0ff6 701b4145 #...A..*j...p.AE
0x00000130 (00304) 5e81200b d64727f9 5c36e2dc 28c2d35b ^. ..G'.\6..(..[
0x00000140 (00320) 0ec85bc0 e12827b1 1141f18a fce43f19 ..[..('..A....?.
0x00000150 (00336) 42108dd3 b7711a93 0404da1d 16a8b505 B....q..........
0x00000160 (00352) 430f0215 e435 C....5
0x00000000 (00000) 47455420 2f6c6f67 6f2e6769 66204854 GET /logo.gif HT
0x00000010 (00016) 54502f31 2e310d0a 41636365 70743a20 TP/1.1..Accept:
0x00000020 (00032) 2a2f2a0d 0a526566 65726572 3a206874 */*..Referer: ht
0x00000030 (00048) 74703a2f 2f777777 2e333231 342e636e tp://www.3214.cn
0x00000040 (00064) 2f3f6a75 6561690d 0a416363 6570742d /?jueai..Accept-
0x00000050 (00080) 4c616e67 75616765 3a20656e 2d75730d Language: en-us.
0x00000060 (00096) 0a416363 6570742d 456e636f 64696e67 .Accept-Encoding
0x00000070 (00112) 3a20677a 69702c20 6465666c 6174650d : gzip, deflate.
0x00000080 (00128) 0a557365 722d4167 656e743a 204d6f7a .User-Agent: Moz
0x00000090 (00144) 696c6c61 2f342e30 2028636f 6d706174 illa/4.0 (compat
0x000000a0 (00160) 69626c65 3b204d53 49452036 2e303b20 ible; MSIE 6.0;
0x000000b0 (00176) 57696e64 6f777320 4e542035 2e313b20 Windows NT 5.1;
0x000000c0 (00192) 5356313b 202e4e45 5420434c 5220322e SV1; .NET CLR 2.
0x000000d0 (00208) 302e3530 37323729 0d0a486f 73743a20 0.50727)..Host:
0x000000e0 (00224) 7777772e 33323134 2e636e0d 0a436f6e www.3214.cn..Con
0x000000f0 (00240) 6e656374 696f6e3a 204b6565 702d416c nection: Keep-Al
0x00000100 (00256) 6976650d 0a0d0a2e 2e3c2f68 333e0a09 ive......</h3>..
0x00000110 (00272) 093c696d 67207372 633d226c 6f676f2e .<img src="logo.
0x00000120 (00288) 67696622 3e0a2020 3c2f626f 64793e0a gif">. </body>.
0x00000130 (00304) 3c2f6874 6d6c3e0a 89dc56c5 905b0804 </html>...V..[..
0x00000140 (00320) 04cc40ea e0cf7fa5 45c7ac87 67808962 ..@.....E...g..b
0x00000150 (00336) 7986cb4d 47f4f003 1e7ac680 61c44aa4 y..MG....z..a.J.
0x00000160 (00352) 41195cc5 47cc9c0f 5c11a48c 04cd1504 A.\.G...\.......
0x00000170 (00368) 57b4 W.
0x00000000 (00000) 47455420 2f204854 54502f31 2e310d0a GET / HTTP/1.1..
0x00000010 (00016) 41636365 70743a20 2a2f2a0d 0a416363 Accept: */*..Acc
0x00000020 (00032) 6570742d 4c616e67 75616765 3a20656e ept-Language: en
0x00000030 (00048) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco
0x00000040 (00064) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl
0x00000050 (00080) 6174650d 0a557365 722d4167 656e743a ate..User-Agent:
0x00000060 (00096) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co
0x00000070 (00112) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6
0x00000080 (00128) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5
0x00000090 (00144) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL
0x000000a0 (00160) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho
0x000000b0 (00176) 73743a20 66656978 69616e64 616f2e75 st: feixiandao.u
0x000000c0 (00192) 75656173 792e636f 6d0d0a43 6f6e6e65 ueasy.com..Conne
0x000000d0 (00208) 6374696f 6e3a204b 6565702d 416c6976 ction: Keep-Aliv
0x000000e0 (00224) 650d0a0d 0a98d66f 9d40d4b1 e20cdbb3 e......o.@......
0x000000f0 (00240) 70c79587 f9f080e8 389108e8 804bc287 p.......8....K..
0x00000100 (00256) 872e5498 d00bbd78 80793037 1f500195 ..T....x.y07.P..
0x00000110 (00272) 0a07a130 01b428a0 851312bd 50d9e0f2 ...0..(.....P...
0x00000120 (00288) ea8062ad 311317c4 e607b450 6d08ff47 ..b.1......Pm..G
0x00000130 (00304) 83fef123 0a5f0ab6 468a197c 0ca56009 ...#._..F..|..`.
0x00000140 (00320) 7b {
0x00000000 (00000) 47455420 2f254333 25413025 43322541 GET /%C3%A0%C2%A
0x00000010 (00016) 37254333 25383625 43332542 30254332 7%C3%86%C3%B0%C2
0x00000020 (00032) 25423025 43332538 39254332 25423925 %B0%C3%89%C2%B9%
0x00000030 (00048) 43332541 33254332 25423825 43332541 C3%A3%C2%B8%C3%A
0x00000040 (00064) 362e6874 6d204854 54502f31 2e310d0a 6.htm HTTP/1.1..
0x00000050 (00080) 41636365 70743a20 2a2f2a0d 0a416363 Accept: */*..Acc
0x00000060 (00096) 6570742d 4c616e67 75616765 3a20656e ept-Language: en
0x00000070 (00112) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco
0x00000080 (00128) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl
0x00000090 (00144) 6174650d 0a557365 722d4167 656e743a ate..User-Agent:
0x000000a0 (00160) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co
0x000000b0 (00176) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6
0x000000c0 (00192) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5
0x000000d0 (00208) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL
0x000000e0 (00224) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho
0x000000f0 (00240) 73743a20 7777772e 73716962 612e636f st: www.sqiba.co
0x00000100 (00256) 6d0d0a43 6f6e6e65 6374696f 6e3a204b m..Connection: K
0x00000110 (00272) 6565702d 416c6976 650d0a0d 0a9402d1 eep-Alive.......
0x00000120 (00288) bc1b871a 0ed84021 ca5829df 49928de1 ......@!.X).I...
0x00000130 (00304) 0ae880e0 2cd089a4 52a0ad15 50e3ec89 ....,...R...P...
0x00000140 (00320) 62248b89 63922490 82ccc8d1 25593532 b$..c.$.....%Y52
0x00000150 (00336) 528052b2 8707482a 7ceb9519 0c878fb5 R.R...H*|.......
0x00000160 (00352) 4e89f85b 8beddfd9 825fb515 8e9ad00b N..[....._......
0x00000170 (00368) cac8ce97 68888770 df453183 64c82597 ....h..p.E1.d.%.
0x00000180 (00384) 73080ada adf7a85b 1a6c s......[.l
0x00000000 (00000) 47455420 2f6c6f67 6f2e6769 66204854 GET /logo.gif HT
0x00000010 (00016) 54502f31 2e310d0a 41636365 70743a20 TP/1.1..Accept:
0x00000020 (00032) 2a2f2a0d 0a526566 65726572 3a206874 */*..Referer: ht
0x00000030 (00048) 74703a2f 2f666569 7869616e 64616f2e tp://feixiandao.
0x00000040 (00064) 75756561 73792e63 6f6d2f0d 0a416363 uueasy.com/..Acc
0x00000050 (00080) 6570742d 4c616e67 75616765 3a20656e ept-Language: en
0x00000060 (00096) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco
0x00000070 (00112) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl
0x00000080 (00128) 6174650d 0a557365 722d4167 656e743a ate..User-Agent:
0x00000090 (00144) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co
0x000000a0 (00160) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6
0x000000b0 (00176) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5
0x000000c0 (00192) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL
0x000000d0 (00208) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho
0x000000e0 (00224) 73743a20 66656978 69616e64 616f2e75 st: feixiandao.u
0x000000f0 (00240) 75656173 792e636f 6d0d0a43 6f6e6e65 ueasy.com..Conne
0x00000100 (00256) 6374696f 6e3a204b 6565702d 416c6976 ction: Keep-Aliv
0x00000110 (00272) 650d0a0d 0a657276 65722063 6f756c64 e....erver could
0x00000120 (00288) 206e6f74 20756e64 65727374 616e642e not understand.
0x00000130 (00304) 3c2f703e 0a202020 203c703e 596f7572 </p>. <p>Your
0x00000140 (00320) 20726571 75657374 20636f6e 7461696e request contain
0x00000150 (00336) 7320696c 6c656761 6c206368 61726163 s illegal charac
0x00000160 (00352) 74657273 20696e20 68657820 6e6f7461 ters in hex nota
0x00000170 (00368) 74696f6e 2e3c2f70 3e0a2020 3c687220 tion.</p>. <hr
0x00000180 (00384) 2f3e0a20 203c6164 64726573 733e4d69 />. <address>Mi
0x00000190 (00400) 63726f73 6f66742d 4949532f 372e303c crosoft-IIS/7.0<
0x000001a0 (00416) 2f616464 72657373 3e0a2020 3c2f626f /address>. </bo
0x000001b0 (00432) 64793e0a 3c2f6874 6d6c3e0a 053428b2 dy>.</html>..4(.
0x000001c0 (00448) 285070a5 45197b36 b24c6c31 c38d0f52 (Pp.E.{6.Ll1...R
0x000001d0 (00464) 22b0ccd0 b1094c8d 4d354635 11d7249d ".....L.M5F5..$.
0x000001e0 (00480) e5262f4c 28d9b167 c9dcb674 8968fba4 .&/L(..g...t.h..
0x000001f0 (00496) ed03b14f 01f468d3 1340db1f 220198a5 ...O..h..@.."...
0x00000200 (00512) 71200f5f be2bfcc4 4eccc22f df1833f9 q ._.+..N../..3.
0x00000210 (00528) e84cc437 a6371fd2 cc9b3bf7 a220cb15 .L.7.7....;.. ..
0x00000220 (00544) 154b3679 01030ecf 15e962b9 3b31ec1b .K6y......b.;1..
0x00000230 (00560) 9f417e0f b627fc8a 107d6f7e a4bc7c9d .A~..'...}o~..|.
0x00000240 (00576) 38b0c55c 21091ff2 abe835e1 15 8..\!.....5..
0x00000000 (00000) 47455420 2f2f2543 32254239 25433325 GET //%C2%B9%C3%
0x00000010 (00016) 41332543 32254238 25433325 41362e68 A3%C2%B8%C3%A6.h
0x00000020 (00032) 746d2048 5454502f 312e310d 0a416363 tm HTTP/1.1..Acc
0x00000030 (00048) 6570743a 202a2f2a 0d0a4163 63657074 ept: */*..Accept
0x00000040 (00064) 2d4c616e 67756167 653a2065 6e2d7573 -Language: en-us
0x00000050 (00080) 0d0a4163 63657074 2d456e63 6f64696e ..Accept-Encodin
0x00000060 (00096) 673a2067 7a69702c 20646566 6c617465 g: gzip, deflate
0x00000070 (00112) 0d0a5573 65722d41 67656e74 3a204d6f ..User-Agent: Mo
0x00000080 (00128) 7a696c6c 612f342e 30202863 6f6d7061 zilla/4.0 (compa
0x00000090 (00144) 7469626c 653b204d 53494520 362e303b tible; MSIE 6.0;
0x000000a0 (00160) 2057696e 646f7773 204e5420 352e313b Windows NT 5.1;
0x000000b0 (00176) 20535631 3b202e4e 45542043 4c522032 SV1; .NET CLR 2
0x000000c0 (00192) 2e302e35 30373237 290d0a48 6f73743a .0.50727)..Host:
0x000000d0 (00208) 20777777 2e646e66 78712e63 6f6d0d0a www.dnfxq.com..
0x000000e0 (00224) 436f6e6e 65637469 6f6e3a20 4b656570 Connection: Keep
0x000000f0 (00240) 2d416c69 76650d0a 0d0a9c2a d1b634eb -Alive.....*..4.
0x00000100 (00256) 2f2653a3 47698ff6 e09cf310 9779f889 /&S.Gi.......y..
0x00000110 (00272) 4df80937 689cea28 88722840 M..7h..(.r(@
0x00000000 (00000) 47455420 2f777579 65312e68 746d6c20 GET /wuye1.html
0x00000010 (00016) 48545450 2f312e31 0d0a4163 63657074 HTTP/1.1..Accept
0x00000020 (00032) 3a202a2f 2a0d0a41 63636570 742d4c61 : */*..Accept-La
0x00000030 (00048) 6e677561 67653a20 656e2d75 730d0a41 nguage: en-us..A
0x00000040 (00064) 63636570 742d456e 636f6469 6e673a20 ccept-Encoding:
0x00000050 (00080) 677a6970 2c206465 666c6174 650d0a55 gzip, deflate..U
0x00000060 (00096) 7365722d 4167656e 743a204d 6f7a696c ser-Agent: Mozil
0x00000070 (00112) 6c612f34 2e302028 636f6d70 61746962 la/4.0 (compatib
0x00000080 (00128) 6c653b20 4d534945 20362e30 3b205769 le; MSIE 6.0; Wi
0x00000090 (00144) 6e646f77 73204e54 20352e31 3b205356 ndows NT 5.1; SV
0x000000a0 (00160) 313b202e 4e455420 434c5220 322e302e 1; .NET CLR 2.0.
0x000000b0 (00176) 35303732 37290d0a 486f7374 3a207777 50727)..Host: ww
0x000000c0 (00192) 772e3333 3434646e 662e636f 6d0d0a43 w.3344dnf.com..C
0x000000d0 (00208) 6f6e6e65 6374696f 6e3a204b 6565702d onnection: Keep-
0x000000e0 (00224) 416c6976 650d0a0d 0a824c23 a63ace7c Alive.....L#.:.|
0x000000f0 (00240) 8ea211ac 840c210f 50400ba8 920c1138 ......!.P@.....8
0x00000100 (00256) 40285ca1 90ca2ab5 91816d44 235ec9c4 @(\...*...mD#^..
0x00000110 (00272) f234428f c5cc41 .4B...A
0x00000000 (00000) 47455420 2f204854 54502f31 2e310d0a GET / HTTP/1.1..
0x00000010 (00016) 41636365 70743a20 2a2f2a0d 0a416363 Accept: */*..Acc
0x00000020 (00032) 6570742d 4c616e67 75616765 3a20656e ept-Language: en
0x00000030 (00048) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco
0x00000040 (00064) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl
0x00000050 (00080) 6174650d 0a557365 722d4167 656e743a ate..User-Agent:
0x00000060 (00096) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co
0x00000070 (00112) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6
0x00000080 (00128) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5
0x00000090 (00144) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL
0x000000a0 (00160) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho
0x000000b0 (00176) 73743a20 7777772e 35327368 616e6875 st: www.52shanhu
0x000000c0 (00192) 2e636f6d 0d0a436f 6e6e6563 74696f6e .com..Connection
0x000000d0 (00208) 3a204b65 65702d41 6c697665 0d0a0d0a : Keep-Alive....
0x000000e0 (00224) 670c2a67 22a9a95a ddc853ab 894cdaa9 g.*g"..Z..S..L..
0x000000f0 (00240) 5688b11d a8c556a8 6811c4a8 13d0690f V.....V.h.....i.
0x00000100 (00256) 4a9c29d0 02164f6b 4b4f2807 6987506e J.)...OkKO(.i.Pn
0x00000110 (00272) a34f0c25 06c58811 3e4708e1 e556deca .O.%....>G...V..
0x00000120 (00288) 84ddb815 74680c86 b35adfd7 1542854c ....th...Z...B.L
0x00000130 (00304) af480de0 8a413168 44e0e587 74480ae7 .H...A1hD...tH..
0x00000140 (00320) 69108828 0cded753 acd75d8d 8612afb7 i..(...S..].....
0x00000150 (00336) 186e2809 df9816aa 69428f78 0f2f2805 .n(.....iB.x./(.
0x00000160 (00352) add835a9 9810909f 12c5b816 c4c6562b ..5...........V+
0x00000170 (00368) 751cc5a9 5f51862e 264a3a5e 7610faf3 u..._Q..&J:^v...
0x00000180 (00384) 18d17912 a878128d c85aad28 0df3b90f ..y..x...Z.(....
0x00000190 (00400) 8aa64efc ecb79058 0eecf356 c7c715e9 ..N....X...V....
0x000001a0 (00416) 4911f0a9 0e364b3b f6ca1159 570af8d8 I....6K;...YW...
0x000001b0 (00432) 14c49811 62b0548d c83cdbb9 562e0504 ....b.T..<..V...
0x000001c0 (00448) 75770d6f 050cca2a 11ae590e fbdb5076 uw.o...*..Y...Pv
0x000001d0 (00464) 9112f9e5 16f8cc4e 4b9d4b73 580baaa8 .......NK.KsX...
0x000001e0 (00480) 37c1884d ebf48c89 be56dfd8 85483807 7..M.....V...H8.
0x000001f0 (00496) 28571daa b83c6838 0a86b23a 323706fc (W...<h8...:27..
0x00000200 (00512) e8568d85 4c53864e 8e9215ee 99109178 .V..LS.N.......x
0x00000210 (00528) 3c396925 ed8910cf 590faacf 593d5711 <9i%....Y...Y=W.
0x00000220 (00544) 3f784571 a468b203 14b0d680 716a47e8 ?xEq.h......qjG.
0x00000230 (00560) 2815c6d8 5dc81c14 a0b95fdd 9946aa98 (...]....._..F..
0x00000240 (00576) 4a193609 73c039e7 7911c7c9 82cad917 J.6.s.9.y.......
0x00000250 (00592) f0aa53f1 ba52fbdb 86507a4e 88390ba8 ..S..R...PzN.9..
0x00000260 (00608) 380d73c0 56c3994a ae7845c4 b95ffcf5 8.s.V..J.xE.._..
0x00000270 (00624) ba2e1805 6e180a90 6839f8cc 84fceb8b ....n...h9......
0x00000280 (00640) 3d7825d1 7a3b9059 39131704 90190c4e =x%.z;.Y9......N
0x00000290 (00656) 1806cc39 0f29583c 375a3dac 190f59a0 ...9.)X<7Z=...Y.
0x000002a0 (00672) 18e85910 42902559 59305a9f 4fe93914 ..Y.B.%YY0Z.O.9.
0x000002b0 (00688) 71b2376a 9352757c 49de031b 54922ee6 q.7j.Ru|I...T...
0x000002c0 (00704) 1319abc6 336da333 b0aa8871 b358ab5a ....3m.3...q.X.Z
0x000002d0 (00720) 2f273c35 ed993fc4 a836c5b8 383f6a45 /'<5..?..6..8?jE
0x000002e0 (00736) 8abd1f56 924e93d3 59a9892b 5a482857 ...V.N..Y..+ZH(W
0x000002f0 (00752) 692dd369 27af4728 a8992c52 7931fbf3 i-.i'.G(..,Ry1..
0x00000300 (00768) 33ad996e 87be3b8d a22f88a6 6ac6c82e 3..n..;../..j...
0x00000310 (00784) c9d92ede a832d9ab 7cddb834 f2b932ee .....2..|..4..2.
0x00000320 (00800) a932dcb9 7b755931 c9dc82e6 7a30fcdb .2..{uY1....z0..
0x00000330 (00816) a8408530 70862e6d 93328abe 7197490d .@.0p..m.2..q.I.
0x00000340 (00832) d8490fb7 68111927 0598280c b87813fc .I..h..'..(..x..
0x00000350 (00848) f35dfcf4 91583809 78380aaf b95c9738 .]...X8.x8...\.8
0x00000360 (00864) 0cb8380d 59a03344 914d8b93 4d4ca831 ..8.Y.3D.M..ML.1
0x00000370 (00880) c5d0598e d442cae2 5fddc82d e1e52ec4 ..Y..B.._..-....
0x00000380 (00896) 892a7469 2bdfd72d 744828f8 cb2bfada .*ti+..-tH(..+..
0x00000390 (00912) 2dc5982b 74782afb e62f1b38 2af0bb75 -..+tx*../.8*..u
0x000003a0 (00928) c298682c ..h,
0x00000000 (00000) 47455420 2f6c6f67 6f2e6769 66204854 GET /logo.gif HT
0x00000010 (00016) 54502f31 2e310d0a 41636365 70743a20 TP/1.1..Accept:
0x00000020 (00032) 2a2f2a0d 0a526566 65726572 3a206874 */*..Referer: ht
0x00000030 (00048) 74703a2f 2f777777 2e353273 68616e68 tp://www.52shanh
0x00000040 (00064) 752e636f 6d2f0d0a 41636365 70742d4c u.com/..Accept-L
0x00000050 (00080) 616e6775 6167653a 20656e2d 75730d0a anguage: en-us..
0x00000060 (00096) 41636365 70742d45 6e636f64 696e673a Accept-Encoding:
0x00000070 (00112) 20677a69 702c2064 65666c61 74650d0a gzip, deflate..
0x00000080 (00128) 55736572 2d416765 6e743a20 4d6f7a69 User-Agent: Mozi
0x00000090 (00144) 6c6c612f 342e3020 28636f6d 70617469 lla/4.0 (compati
0x000000a0 (00160) 626c653b 204d5349 4520362e 303b2057 ble; MSIE 6.0; W
0x000000b0 (00176) 696e646f 7773204e 5420352e 313b2053 indows NT 5.1; S
0x000000c0 (00192) 56313b20 2e4e4554 20434c52 20322e30 V1; .NET CLR 2.0
0x000000d0 (00208) 2e353037 3237290d 0a486f73 743a2077 .50727)..Host: w
0x000000e0 (00224) 77772e35 32736861 6e68752e 636f6d0d ww.52shanhu.com.
0x000000f0 (00240) 0a436f6e 6e656374 696f6e3a 204b6565 .Connection: Kee
0x00000100 (00256) 702d416c 6976650d 0a0d0a36 37363520 p-Alive....6765
0x00000110 (00272) 33613230 36353665 20202065 70742d4c 3a20656e ept-L
0x00000120 (00288) 616e6775 6167653a 20656e0a anguage: en.
Strings
080404B0
12.2.2011.12
Comments
DEFAULT_ICON(
FileDescription
FileVersion
(http://www.eyuyan.com)
IEXT_IDB_STATEIMAGES
LegalCopyright
ProductName
ProductVersion
StringFileInfo
TEXTINCLUDE
Translation
VarFileInfo
VS_VERSION_INFO
`?((,,;
< "("_
|+,`}|
;<;;,*
;:^{ !
:#&,;$
"` .(<
"<<,&"$
". )<|
\<@~ ]
&",#<"$
+%'= !>$
". <*0
\ /<#0
&0#:,?
%:-0!*:
0"_*#$
>0;0=-
004(p'46
,015~l
016148,:8-
0<16,4:5@~
0,25,/
0`284`RMIC`
=02dRP`T
0"2*v!
['031z6i"
0$|32>
0-39!
0(3fi0
0*3S6L$
04c6><"
@+04Dw^nbFb
04Lt(}
^04nl<
05WBPt2VH
"!06&3 82.C
0"$64 (d6K
0$6KZ0w
06"Q,
0 7[0;n
0 7b0n"67
'07%P"3<_R|
07wp5{
086v#4d
<&08Sr
;0#9$,
09c|WD$Y
0}a;-D
,0@a^Q7,
0|]awn
0b4,MgMo
0.)b4x|
&0Bo=R
0}bwW}
0.$"{c*
0c6;8!9.
0$C~hH
/0d3P(
|0D~b)
(0,db2
0dGF2!
*0Eq)QNdc5b
0eR_@$f
0fC6*^
,0f%'H
0<g>@Ic
0${GJ[@
0GL<g+220
;_0g*SE
(0,h03L
0h3:"!
0hc28n0
'*0?hdi
0*$!*HqX
0hrzx "
0Ib^(V=
0'\}iR
0$:Izj
0jIM(T
0jN8#dH
0Jo(|h
0'k F;
,0:kX,
0l ,^ #4
+_0L6@%
0;*LF5
[0L (p
?0$Lr@
0m"$*9
)0*MB*}
0Mhdeh
@0m=P\
0nDAhl
0o;^e&
0_p0.(<$s
0P1644
0'p(B7
0P(H2R
]0p\Ma:x
0PTDXp
0\^qU+
0r2*x,
#0.rEP
{[0RU<
0S@S`0
;0:sY[
/^0>T]
0T0.0f~?%
0$TCFc
0T;\L!3R
$0t*s@m
&0Uv*(
0V0$qh8
0V4xB3`
0V,<HF0y
0vL"Or
;&0vsx
@0[v`u
0[w9lS
0"we7F
0wEKp2
0)wL5#
@$_0]wR
0w;]+v0"
?0X9hT
+-0Xa40
0>xfs,
0.X#k h@(
0y6cT*
0yj)t-
0y"!tr7h
`0z]2kh
1"&0^3$.8
@1\0F40
1)0"rzr#r%T0-
1&*$<1*
12&~F%tmH'+0?
:12ThW
133T01
1>3W{t
143:20
\144rp
1?<{4G
,1.5$[
166SDi
16@Ir+
16W:&;
<18,><
>180:44<6
18<+16
=1#:8v"
.1# 8v
19vT6R
*1_asg>
1ay'+!
^1 bft
1*%bO$
"1db4A
:1disQ
%1Dn48
1:><e}
1@/e#sW:
1gm!qX
1+H@1`1
1>HedM'
:1hk CL6
<1%ISX
1jW^Z:\jP;
1K;^*<1x
1k_s5W
1L0zt$j
1M*!\5
1mbp_v
1nP0<R
\1oLlb
1P8#2C
1Pt@KW
`1r'Pgi`{[b x"
[:1s1
&~1@s{.z
1 [[T%
1T3B2H7F
1#T3<F
*1tw,L
1u9@QB]
1u&w]X
1W5&;UyK
1WGYW|
<1@x_<
1&;> Y4
.;1<Yv@
*1zd4g
1(z.s>
2(*$ 0
2<00,pD8
20@8#z
20;&o#
20@Q.g
21016#
2102mK
21066#tr
2<108:
21(6 V
22gxN4
22`|n2
_'23;<
$2"&30>48
23t*fH
(2$4 "
[2"$;4
{2 4,`"
+2**4,=
2%(44S
2,4),bra2
:24,d2!
24:t6
-2`4Yq67
25TNUV
&*26nO
=2^6,Y
-2,7?2s
{27QrP
&281/6*'
* 28H50>":>
2/8W22
2 8Xbt
2}A4_k
2aJr =
2>aL648*:
>( :2AT
2]B3<h
<2B41Bot
<2)BLb
2cFTh[
2c<g>,
2cT0-n
2$:. d*,
2d#9{q
2df(.g
2d-p\4
2`D&x*!.
2.F?jL
2G1N!r
2g|E%tU
2G?l:#=
2/ |-gl0
2?[]\%G@S
|2:+:h
:#2<H*
2H2rP2
2HHhl^O
2,Hr,P
2h;wzj
2-hX7N
2i9 k%/
#@2irk
:2 jU?
*2*jv<!?
]2j#y
!2#k 0,]k`~C
2K8r (G)L
2Kqs7m+0^
.2 "<$L
;2l360
2L4_}3
2<{Lbh
2LKC={
2LM .><
2{?LWkU
*2"$.}m
|2M(9=
<$2>:N
>"\2N"
],2"N@
2:n];O
2N;P:a
2n&r%YRpZ
2nVK>tp
2Oc|D62
2OH`H3i
)2&OM)m
2@OR32B2?h2
~2,p6n
(; 2pQ
2Q15$ ;8
2*(.q_D
{2:QrP
-<2r1_0"7
2=SGF:
_{#\2sV G
($2. t>
2TN0@P
2TSx=z
2uHf({yz:6
!2USER32.dll
)2v-#%
2v15$;
2$>(~w0
\2@X^y
/2Y q5
&"^;2:Z
>2Z!*dr"rNsZ+`0~*
2zR&m4r@
30<:25P
30(86 >\
:3&";0$t1<*R
3"$2<>
?&$+34
3+-#4<
3<4]7@
34"9$G
3*4zasJh
;365 D
36,B1Z=
36xOt#D
37j/*:]
3;8|2xz#w
3+*:8$6
38j2$l
`3#ah1
3a<{M\
3>/#B_ \
3`b7)T
3bD]G{
3bx|(D$
3CAJHP
3[CPx+)l
3cv`-6
{3cz e|O
)3&"';D
!`3d<b7j2h=e
3dj&(d7
3dMu^un
3E=$*;
3GtO~L
,_3,HK
3H$S]H
3<HUS@
3;H=;X
3jOgK"
]3[K,2Z_>Y
3KCLP
3KLZp}9
3L.G"*q
3@L`v6
3#m5YXh
3oG7TP
,>3_p|e:
3pfm;@
3pfm?@w
3Q}o?($,
3SJWS8
3S+K5U
3sk&,Xg
@3S.m2 .
-3S \Xf
@$"3,t
/;3<T|
3VXWCy
3>+;yM
3@"yT&
3@yT"&
,@3yyh
,,3'>Z
+3Z)n6$"
3Zy`8*+4
/@4^#/
< >40}3
4 .0,c
@4_`0D
@4!0.m2>6$l
|:40P8B<
40 P#L
4%%.1H
(4;$2"p
4*2*y3i
{>+43$
4'30|%Vq.
~>43@p{r
44o_b,
44QJw#
44}R*@p G
4.#4Wwd
45}0zt\"j7
4]5C,:
4@{5'{t
:45t4b
(4$"<6
46>'Cz-
*46$gx
<46]*L
47.< 1
(:48p>
;49KIs
49OP40w
49y,b2
4ajP<
#+4b1:
4@bMgk
].4Byw
4/c !$
>@4%C2v$;Yj|
4c-5Pj
~4'cd4^!
4c>j3'O
`4)&CLZB
$4cpu8dpm
4,`)d/
}4:'\D
<%}4DF-g
@4@"dN`
4dO F[4
4DpkyL
4eC3gB
4e:#p<
<4|Ex08
4fbe/4
4<(fEy
,4~;:fM
4fS12_W
` 4fWhb
4h"\7#
4Hwv(S63
4\i.=7
"4ih^<8
]_4I:`L
4+I-{L<.$
/4IYFL
4jZr(r
;4kapjg
4kP>fD
|:.4*L
4%L&.:)
4l1tRPP
4L>IZl[B
:4LMKLY
4Lt{Ga
?4]M@
4M[(4)6
4m8Dx;6
)4miL.
4m<,{M~
}.4N3tYAZ
4n3YOp
4n6hp\
~4NCR#
;4Nj#F
4'|<nt<
<#4<Og
4<OJruK
=<4?O#X
}~4|P4
-4$psS
4\<pv^c\;*7
4$]q`]
4Qb|/u
$4q*DM
`4Qj0,
4R60((
'4rK>:
4rK4LM
?4(RLy
'4RP-0
4s5dh16@
4s@6>Q6
4t1:<8
)&4T"2
4+t$3n
4t8:58
4t8C="
4~t$d
{4:,tD
<\4T&F
^4tppT
4trL[o
#4TWux
)4 t,x8!
#4`u80)z
4Ub; 0
?4!v\18
.4V7pn
4$vhtq~
~%$4vx
4&^W*%=
4X,#2j?
4x&8fw
"4"XB{5
;+4yZp
:4z_+3
:4zBS0
4>zjUk
4Z~l8C2w
4@_;z;P&
+%'= 5!$
*5"10^
51J;dN_
5@ 29
52m. @
5391R}
5:3GG<
5#4<d"
54QbJsC
>= 5#58,
5-=5n u
56{8nN
5@{+:7
572|4J
5|76Ls
57i|{=
5=$(8?
58!1E[Z
5;94Rr
59$9&0
59UH8*r
5a.Z;|c
5B" #>
5C)\(,
5C[4`9;
5& C@He
5@cy;"
5/^D/2
-5D)6\
5E>c&>
{5:)f89h
5fazv;54
5&;GClCT
5:g''u
5h:e*o
5H-o%;#
! 5 i
5j.C5O
,5JmN,tDF
\5K3"H.
5k?8C'
5Kh|-wN
5!LMf<"
*!}5L,x
5%:LzY
5M2[#<
5mK|h_
5Ok'lo
5\p^RX
5P@/U|7
'<*5$Q
5&Q8@'t i
5Q<Yau
5r 8 H!
5>&S$;4j
5S#Jo2\
,;5t(1
:5T$c3
~5tF?Zu
5t"_u*t
">5Ua*
5[V&@,
5/v<1
-\5W6?6z
5w6g&c
5&Xpw:
;5Zms4
>*.& 6
6*08."&y
?\+60te
6:0'v~8Sl
(+6&1$
6&1"/I
&6-1xD
(6>2$.
+"6@2 7Ff
62;e?d
:62$lR<
62nkK[0jx
6.?2$o
6<3c{a;
<64$r,Y3u
6:/?4T
64%T<=7
"65Xa:QY
6<60]xO
])6>61$
$6*6('@h
66+I%tZC
?(#:"67<
!&6,8>:@
6840,:O
68cxj&
68ljg`
>6(*9$
69t1PrB
69T~R<5
~{69ud
6A6;N@
6bL"XND
6C;'!}
6c*,hD
6Co6tl
6#cw0l
#'@6D=
6`dp(r
6DZ'eF
6E4lWi
&6fL3"
6'fna;:
+<@&6Fq
6fr!IR
6F=t1tG
6~Gdl<
6?H|3y
6HH;IS
6@)h#`U
6h&;x@$
({6I;3
6IXV~W
>6/I!")Yn
6;J09,
6jAZ_<LR
<6JPFD
/;<6|l
${!6L
6&L)<.,
"]6l9'
6L:bu[
#6lD?ph\
6lL320
6%'L[P1j
6LuS:S
<?.6lXS
[)6Lzu
-6MN#X
+6)n3 A
:'6N;>d
6nYr[l*
6OaW!5
6||>p1
6QDDn[
6QL&3H
6R4](^
6Rvn6;"
6s7cv9q'Q
{_ 6sM
6-ST5>
6s%U@]
/6t`2H
?6t>K<=
<6>T@pBs
-<6>T@pBs
6TtFv7
6u4F/D$
~6U@G<Htb-a
6*\$UTW4
6%V~<&^
$";>"=6v &K
&$6VR6
%6W'5x
/6X7%M
6X-d~!
6*}Y|
;!6"Y4$
6YrR>9
.6*!z%=
6""'%Z>
"6Z1~g
6],zP0
>;\^7~
7%|>#$
708?<h
70>R"5>
"71{1|32
7|1|8nM
,71h^l7
72}oPg
72Q,L*
'7=4j"D
74K)#_
-74t1:<0
74VhW<F(B
77w<3]
7+9d6>r
$7aiJb
7b)ls5
~<7D0:
7-D@V(
;7E["/
7@Ex(}<
7eZf*K<
'7F ,2Y
7HOf_0!
]*7H{Q\
7J@2]e
#7j494w
7jAZ_`QL
7J){CJ)P}J)x
7jEUTw
7J)n]J)b
7J)S3J)ZSJ)V
7J)yOJ)l)J)kEJ)x
7\k0_6K@"
;7#K)2_
7\[ki0=
$7Kp-y<r)
]7=@m~_5Y>
7@m_!d9
}7Mt0
7 Nm?;
@`7O3)
|7OYWR:
,7$P4J
7:,P>(8C
7=pcKk
7= puy
"7r"\%
7rOWI5f
7sC<\;p
'7)SDMTh
7/T /<
+7Tmd?x
7uDE2O
7>Ujg*
@7UO+F
`7?w{3
7W/O1Q
7wz:<
"!~7y0
:(7\"Z&
8&$,$"<
/&8:<@
)8$+(;
8. >("
<;8=0&@
804n:;6
8"0 mB
80{ O[6
:80P}B6@
81)2#>
8+2;?>8
828"m$<
8.2<<!c$E
#|82D$J
82 $m\)ce*>
|82=q8
,&83a2
<84<}
8"*:4.
8]40<\
84lq4:<
850e0+
8(5NL4k
85; r<U
&8\*:$6 `
*8:6|$.0&2
( &86v
870<>&s92G,
8(8w!J9
|,$8:96(
*<8A2s
8AEaQ|
8AS4<`b
8b`5$#
8;+Br0
*$<8c$ (\:
8,c$Ja#
,8d=/P
8DXDu
8e}{>@7
*, 8EdK
8&evL1
8&\F2$
8.@fal
8=|f!h
8fINS
8 ;fSL
8G@hE?
&8.[GZ{
8'h95o
8{H+n0E0
(8Hs#-
8<"(I*
.8&*J(6L >
8. >J73",
|8K36]
.[8K4c>
8LC:L:
|\"< &\8lf02$
>8"_Lt!
_8>M4?
|8M\p;
#8NG>(
=8N#XM
|8O0@g
8O4u2%
~"<8Oa;
8Pcp4L
:8Q, x
-8'\R|[
=8`rONf
8_ru9LV
(* "8rz+>L{2
"8*`.s
'*8S9&<(2m
8^.S.j
8/'s-L
8t'+35t
8t$N,pr
8|tx!U6,s*.
8 +v4#8
8V56:w3
8vo*>U2
8x5:8w3
@8X"B
8@,Y![
8z2Zi]
90Rr&}
9#1<K(
91NL7L
92,:`2
]92$9bW
92<eIu
9|/4d&
95i8'LR,
98COFc
,98*^k
-9*9HEY
;9~|aT
9'BmL1
}9BT$P
[ ?9c5eS
9:C(t"
9d24w z
&9:fJ3
9>!fo2
9Fu8d"2.&
;9i|<@
9i82&q
9J)P}J)h
9J)P}J)qWJ)n]J)Z J)}
<9k,42^8
!9k70D
9Ka`<Tc
9l0>tT
9}Lbz>
9+,>lm$
9OxC:g
9=$R(l
9S?B:&Uw
|*9;>sK
9;TfV7-
9 +UkF
9uoX6k
9$v5o6c;
9V:6 r
9w6`$*
:9W g5
^9x'2xt(
[9ye'n
"<<+\a\)
""<>+>a=)
)<, a[(
>#`!'\A(
A/,@(`
A0{x[m
,a1C4h
a.1DF
/.A)%2
#%a^22Z
A2Bn{l
A2gB}``
a2T88c
a$2 [U>
A;?3TF
A4\;3Ow-
a!48"?
A4w/zo
-=a{5-
a:%^=5
A.51/X
(,a5N_
a"6wc'0l
A,8Ea0
{a-8x(
a9@c+o6
A<9jw*
A9Y19I
aaV8Rk
(%a~Ay
.A@"Bbg|
ab?e35
a,cn+t
Adc%[$
A debugger has been found running in your system.
AdjustWindowRectEx
ADVAPI32.dll
A::e"Dn
"a;ePV:
"!@aFN
$af,~s4
AGv04R 8
>ah_&+
ah3 6@
&Ahk(|
AhL$|`=n4
aIQ: ~%=
AIRyRLfH
A<j&pNL
AkD;xbH
@A,Kh3
a(lb*@
aL/]p'(
a?LQ"'
ALtD6K
aLWl[1MS
\A &Mb
amSK@T
aN.$$D
Andvj S
aoDq|g
>a :p]! *:
+$/Ap^
AppendMenuA
AQO*h|Rh
((a+Q+p
.Ar:s%0:
As5&uU
a\soA_
asq>k&
at0{0?
atrkr(
.AtUox
A-v# =
a"V6A
av9fXV
&<Avb}
a+VQ5vc
a/WCz/
a@&WKQ
a:xh15
aXNqu>
/aXyv2H,UT
%AxZ;6c6
a;:Y_[
AYPUva
a+YW'vO
A(Z (f
] b",&
<@B\]-
: B[[:
b02?3l
b<1_0>/1
|b1l+\
B1R-Op%L
b2h:T+
<B2r!2
-B2|W)
`B!"3c
b&3G=<t
b%4;<$h!L
B4h>t"
b5X\;+Q6
B 6.<8:2(`"8
B6DJO
b;6M*`gf
;:B7Hw<2
,B8P<n
|. $B9
b!-<a 2
B*agP$
b.avqdVTta^\
b[aY*5
"B<(!b
Bb iP&
bbJM29
}~B_:c"
(bC5HQ
bCb5A
bc cV@
bczC-J
Bd2kp@
b,!D7k
b&d.'g
bDLHu^>
?&BDw3%
bdxo|z-
BeginPaint
BeginPath
be*S p
<(BEvz
BE-WAt
>B<@"F D&J$H*{
Bf.?fH
B<^:fL
(Bflk>
B,@F@S
b,F&sl
?BG}|+
<'BG9@
bgH]-j
Bg;^RY&{``
BGy859u
B"h#3;
bh)330
`Bh{({HHCLi`
BHn~w6
(-b]hW
>b\#Hy
!@BI>^"
B"i-1+
$Bi&@c
bI<dO7
bie&5"
biO(P1.
BitBlt
B#J<2d
B)%+j.&}3
Bj7//.
B@{JM
=bJv!|lY
>^B&k`;
bL<%7H/,
!+b"La|I
|bL;KB
,bLM>a
bl^Pb"
BLu[46
*bmc W90i
b :M,kF,
bm+\P#
bM]'U\a@
`]b?N=
.|BN8q
b[N?fF
BN>mxJ
bNq;{l
B@nvw6
BNwSpd
bO*{Jx
bo\&V^
bOx{kIqz
BOXq}3!z
BPfXC`
BPZzPR;@
BQ#bW6Q
BRj3@d
b(rRr8
-bRsreR&
#bRX-(
b,s6t08
B"sGH^
B'&sK`@h
B,>SqP
b"&T|_:
Bt4Kb|j
b"t6@<
bt8>#0
-bTO:7
btv=c:4t
bU*09=d
B/UXJ%
($_.bv
bv$\D.
Bvs<BrxF/PyN"U
~BV<sz
b:w;-3&fF
~ \Bw N
*bwP#(
$Bw@~<=Z4]r(Q
B# X(_
bX*:r6A@
:$&B,y
}byHMV-
Bz|:fC
bZK4T**
>bZlDU
BzXW\79
B|z,Z3s
&^"c];
!.;C"&
@C`}<!
#%<(@C
c&0m2!
C1[;3D
C1}DCUj
}:c1Y$.g&
c2!f||/QB7[
c2HL|<0&
c3#(:.
;c359#
c3w;z-
C#3'] `^Z
~!C";)4
C464#)
:C64$G
$C654q
]C80/{6J
c[8>54
C{8<7xY
C8.(jU
,c$8]:"P
c8ugYy
"c}9,[
@c:#98
| C9D&
CallNextHookEx
CallWindowProcA
{cb5*}
$cbusN`
#cB$V5
cC83F^
#C;[%E
CF3=$*9
C^FDmD
cG6>rb0s
.cH4WI
CharNextA
CharUpperA
CheckMenuItem
c)h!<H&
ChildWindowFromPointEx
ChooseColorA
Cj[0AG
@C+J8mJ
CJZfIL
$C)K/.
C#K<0S
-{ckg=
(C_[l
ClientToScreen
CL>@L9
clO*{~@
CloseClipboard
CloseHandle
ClosePrinter
CLSIDFromProgID
CLSIDFromString
?c|+*!l%W
CMI4Vb.t )
!>CMuV
,cMzd
"cnVApV
C~O05@
CoFreeUnusedLibraries
CoGetClassObject
cOLEAUT32.dll
CombineRgn
COMCTL32.dll
comdlg32.dll
CompareStringA
CompareStringW
CopyAcceleratorTableA
CopyRect
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
C${pC4j
C(P:qf
cQ@(`;
C(#:qd
cQ>T@{
cqzo(4
,":cR
C"&..r#
CreateAcceleratorTableA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDialogIndirectParamA
CreateDIBitmap
CreateEllipticRgn
CreateEventA
CreateFileA
CreateFontIndirectA
CreateIconFromResource
CreateIconFromResourceEx
CreateILockBytesOnHGlobal
CreateMenu
CreatePalette
CreatePen
CreatePolygonRgn
CreatePopupMenu
CreateProcessA
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSemaphoreA
CreateSolidBrush
CreateThread
CreateToolhelp32Snapshot
CreateWindowExA
c%r #G
.crR\~@
Cr>,R:d0
CS*b]x
C"T}AS
ctb`Y!4f
C#>|T-e
cT~"G q2*
ctJxR&cd4
,*ctr5+ |r
*:cTT@sz/
`cTx(e1%
;c>u3a
cU@eWt
cU@GBV
cv#&l
cvO#{3
CVtR4D
C WP,Y
:|c"wv
)C#y(E
c\zxr,
?d!<$-
d&;(:)
D\0^44u
D1 8JG(d
D19H:&
d#,]2=
d2pwH(
D3_UdA
D4L|1;<
D[4L\T
D4`P4{
d?4!Q\18
D4`s~S
D4%<T@-S
%?D5>[
d5/i+( L
D5SfDVj:
d@*5V8N5
D5wA|#
[D5X4>
D:<5@Z
)d&63*
d+6prj
$D6V.N
D^@+6@WB
D6z4icr!2
d7hD4X,
"D7_UAl
d7UGYu
#d8"L"-
@:D8WHp
@.data
_D@B`?
dbH!\L<086
DCn,r$
'd!<|CS
dc$Zi$
"< /dD
Dd{NtN
{d$<D=V&XdP
DE6'|@U
&"dEd
DefWindowProcA
DeleteCriticalSection
DeleteDC
DeleteFileA
DeleteMenu
DeleteObject
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
D)"Eu,J
DEy-^./
,dfhiwx
DF,RP5
:d_~.fW;
D_f}x-
%D"gD`$
dGdf>WqM
D$(h+]
D$@hBkB
DhFoh
D,:HIR(_f
'DhSK;
DHtW;zuW
dI;cBxq%;
^DiDXD
>DIiar
DispatchMessageA
<di&vN"
dJ< kc
dJ> r#
Dk'@|*
DK];8>#J
d|KgNc
dkPw8i
Dk@sal
d^:[KY
DL$4Q#
D<LaFr
dLiJs'0
dLLsik
D*Mv1671H'
dMZ/Mv,
dN6h?,iI
D(nn+H
D*Nv6671H
DocumentPropertiesA
dod" %
,*<D:P
;DpETQ }
+Dpf44T#
D\Ph@=Y
^.dpPujs
DpR5b2
DPtoLP
dq5(T\
dqcpfD
DQhKi&W
DqS:34[U
DQ,<u<
';"Dr)
\DR]'@
D:R0"mS
DR4mu4
Dr63;i
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawTextA
DSBs\}A
D& : Sd
dS=IxYt
Ds<rlr
~##DT$>/
"@*dT`1
dtbP`Z
DTbxudt
%&dt`bz)t\
dtL$b6
D"&t p8"
D|"tzt
D]-u`,
DuplicateHandle
DV4 1dZ9
D+vpv>
#DV-^~Vde
dw1A[CK
dx):&b
DXGr 0D1
dxJ$+B8
Dx#L3
+d|$&y
-d&`y^7
(-$dYb
d=Ye1-
DyPZzH
dYX-i`<
Dyz)B|^He
dz:4LC
d!Z`e&
dZHu:u%
D"<ZQ1
dzX8;-'/|
e/$"'<^
#. <&E
E0jL6/
E)0uf,
e;1|\gx*
E2Nh*P
E%%<2t
e3G]<()
E3h+r#
\E4xLxR
E5.<u<
{/e( 6{
E~?("63
E6-<oS[F
e#[7(\c.
":!e8{
E8 8Ufc9
e9Rhk\
e9W]xM"
e&a5[I
e$,@aeS
eBLXTW
?ebTv ?
eC7w!Y
;ECtX 2
eD$f}9tn
'E(=EaL6
eeJ4c;7m:
e F@-X
E;!g*8
E.h3$C
eH3l\M2,
%EH}=D
E[$HFHC
EH^P\z
+ehqw8I
EHq]X4
E+i6J8
@EIZ.2:
e(@.)\j_
e(j3+4
eK0aM*8
eK1DL*
ekNg~]*
EL$|.#
Ellipse
EmptyClipboard
e/_n{,
(en51,V>6
EnableMenuItem
EnableWindow
EndDialog
EndDoc
EndPage
EndPaint
EndPath
*eN^^F4s
eN?hCj
EnterCriticalSection
EnumDisplaySettingsA
@"EO?t
{eP:5h
&epih$
EqualRect
[Er\M0A;
E!R%)pn
#E=\@S
e<S3!@
Es9? c`
Escape
".EsH,
\et?iXp
EUdI0H;
:eUj364
EU/|lN
e> X9z
ExcludeClipRect
ExitProcess
ExpandEnvironmentStringsA
ExtSelectClipRgn
ExtTextOutA
EYHi-F
E*zG\R0
ezimW%
EZ!@S[
EZxODdiy88]
]"^ {F
f 0({-
F0d<(S
f'0gP16
$&F$<<#0O
,f0RBf
F0rhcP
F2 L_x:M@+
f2'qdxK
$F2Xsi,
=F2$ZP
f32HD^
>>F#3H
!F"4lo*2
?+<+f*5
F5Zr(h
"f~6 #
f[6<*#
f6z y
f!79Ja
f7rU*6
F8M-n<0
F 9]>0
f9,2IS
?f/+<a^
~f<\_AG
$FB8fWL
F^c, *
fC4|D0
FCx.1v
$ fDep
@F:dgH
-F,]F\
,Fhm)x
fH<P*C2
f|hsx_x
{FI`~%
fIKbmN
File corrupted!. This program has been manipulated and maybe
FileTimeToLocalFileTime
FileTimeToSystemTime
FillRect
FillRgn
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FindWindowA
F($IO@4
&>fJ.$
f<J+6:
Fj6;$7E
Fk182>0<4"< ,&$7
'F{k8/
fkG;+Y
~{FlK~
FlushFileBuffers
+:fly
Fm3M#9
@f!MU^#I}N
FMV9IF
_><FMy
Fn0j<f
FND{wx
FNf<rF"
.F#NkM
>FoA;0
fOC~"2
foht5B
FormatMessageA
[FP&41
f.p !i*I
|fp<;o
F:q&TFg&)
fQuzT9
$-FR(\
FR@_3G
F"r60c
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
@ )FRf
FrLF._
FRVq4r
-f>S"$6
>Fsp<J{
[f<?:Sr0
ft0,V0
fT4R{:
Ft9:2:
ft?txhy
}&f#\Tw&
F[Tw1m9
F,u;:8
FUMM*EbE
f,>Vqx
f!?w3H
$f,W6d
FW88Ij
fwHzBP
f,<{wI(
}F$x+!0
FXAH^6
FX_D$TfCb"cV
fXJ:`h
(;< fZ
F*ZmFeX
F Zt~4G
FZt,~G
,/g+@.
*_#g%$
G"$# !<0
;=G0Y3
g2@4}o}
G2#|bTt:t
G3/")2
G4Ls;H
*[G#54Mf?P
\G!57`~h
G.64fz<
g8@S$@k
'G?_!A
;G*a42q3
g[A6#
g+A@aj
#GAA.Y
?*G%aD
+GaI0_`
{gB=[{-
g;b<2:L
gbuz7e`
gCTc1,
GDI32.dll
?Ge*";
gEK||w
GetACP
GetActiveWindow
GetBkColor
GetBkMode
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetClipBox
GetClipRgn
GetCommandLineA
GetCPInfo
GetCurrentObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetCursorPos
GetDesktopWindow
GetDeviceCaps
GetDIBits
GetDlgCtrlID
GetDlgItem
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileTime
GetFileTitleA
GetFileType
GetFocus
GetForegroundWindow
GetFullPathNameA
GetKeyState
GetLastActivePopup
GetLastError
GetLocalTime
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessageA
GetMessagePos
GetMessageTime
GetModuleFileNameA
GetModuleHandleA
GetNextDlgGroupItem
GetNextDlgTabItem
GetObjectA
GetOEMCP
GetOpenFileNameA
GetParent
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessVersion
GetProfileStringA
GetPropA
GetROP2
GetSaveFileNameA
GetScrollPos
GetScrollRange
GetStartupInfoA
GetStdHandle
GetStockObject
GetStretchBltMode
GetStringTypeA
GetStringTypeW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemDirectoryA
GetSystemMenu
GetSystemMetrics
GetSystemPaletteEntries
GetSystemTime
GetTempPathA
GetTextColor
GetTextExtentPoint32A
GetTextMetricsA
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetTopWindow
GetVersion
GetVersionExA
GetViewportExtEx
GetViewportOrgEx
GetVolumeInformationA
GetWindow
GetWindowDC
GetWindowExtEx
GetWindowLongA
GetWindowOrgEx
GetWindowPlacement
GetWindowRect
GetWindowsDirectoryA
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
``,G<F
(g,f:9
;gFc9o
GG`0YA
,:G{GZ
$gh,yo
$]%g&I
gi4Ex6
#")Gj0
Gj/b]A
`/G+J$bp0
$G;l#0
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
/G?lXK
GMRa?qk
=g N&b
-GN/i5<
-{G<NL
gnS<a#q 8
|g)O"*
goh`+B
Go^%WE
-*[g@P
![Gp~g
GpIw 0.<
GP%\jL
g;`pn<"
G]Pvcz
&g@q,"
GrayStringA
gr}nV8h
GR<PA/
: !^gs
G SiQ
GSMH&t
g+t2A,
g<t $6>
>eTU
$g&tM;@
g*tMUi
Gt{@wM
_g~T_Z:
.<g=U"
GU/o05
GV&6ca
gv8.&2
G[VL6
GW~ '42
gYM7#-k~
gzTP8
"g<zx)%0
{"h$*@
\. H,
H0Q#iL
H"1=8~El
h)1Lcr
h#2P4hS
H2y;k@
H`,3C"
\#-H4<
h:40P8B<
h",4J,v
h5-.#z
)h60@v
h64tj
h6@b5%h
`h.?6Jd
!,H6%T
.H<%*<82
+h8.3r
h8dzau
h*|,8?zh
h9;A*/
-H9m,l
h9U$h@
'H$9WB
Ha0\cb
HApa1X8@
HaSC>(
H/AS;l
HbCS{@
hbKF\`18@r&x
"$[Hbw
hby*gV
HC)'H}
hc>J}n3
hD9z$9
HDL$QkUqD+
#hDr<%
H^`Ds@85`v
HD-Sd
hdT`>cw4e
H]$e,*[
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
}hedjd
h^E,LH(
HEt Cd,y
)Hf0r=
hf}D<V;
hfRD3V
';h}G
HgL$,.
.HGS?_
*h&&h,`
;H_>.H
;H_>.H>
hH52@D
h;H b4
@h'h,r
%,h@Iz)
=h"<?j
#;h"\`j
=hJFx)?.$
\hjH:-Y\
hJjx]rx
+Hk_.6
hK65N
H']K u$
HK\y D
(<hL&/
\h|&L5
h}:,l6
h}%lCz
HL~qM)
h,L:t]
hmc:V#
.-H_mH}1
:HM<kZ.D
Hm<XoOLR7W[
h:MZ\.j
H(*}<n
hncz?O
&H%nI>
h+&@NT
\#/H>O
ho2:>0
h< oKA
Ho&SEr
hp76$,
,hp,9d
`HQMP.
+|h-R|
h.{R4KS
HrCg@b g
\$HRhs
$h|ru7)m
hS<1"5
hS7>=6G3
hsF7}H
$hs|\P
HSYu342
H t!3+
;.hT)5O
hTET=Y
HtW;zuW
Hu?4qt
hu_<ue
Hv3R`q]FA
?HvKp$
HVmLZ
HVnjk.%nv
|?h@&W
H; w1d
"{hwLm`
^Hw|NMt
hWV1'96
hxSt&"$
:)(HY=
H}z:$
h{Z]iLr
hz\k!>
h:z``N\w
{h-ZP:6
h@+`ZQ
H{?zv:
I}$![>
I][?0$
i0R^\b
[')I1{
i22!F
I\+2l"
i2R Erg
{`)[I3
I;3aF5
i3D*a@t;
I3tg`:;k
I4>1YI
I>@8%$
I8PD#L
=I]8$t
I9HFa]
I#Bf$Y
i,b%T0Q
iB-w=Y
{ibXH!
,icX R6
|:I<D<
:i"'d9
:I<D\K
"IDoa1H
%Idy4w~c
\)<i>EB
IE-*Da
!IF/6,
iF~/I(.
ih.5$)
II2*:"
I~jvz8$(
)i&J^W;+H
I#K;Ln@k
IKL^.z
>I`L:U
i$l&Xw
]iLYhi`
ImageList_Destroy
.i[MkL
;IMm9)="`
InflateRect
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IntersectRect
InvalidateRect
-I}NZ0y0
i<Otz!7B@
<:\iP+
I,pf(y
iPMRR#0
i<p !t
i;P|UKbY
I=q2c\x
I?[" !R$*
IRi3%rq
i.RkEJ
Irz+td
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
ISuL>8.&
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
iT,3Z@
,#itD/
I^tI/X
it's infected by a Virus or cracked. This file won't work anymore.
iTT,Z<@
}i#\Tw&
IURn1M< '%
$IU|t8
iUzLE
<I~V;26|
@>Iw4R2
:=Iw7}nhTXL
'"I<w8
iwj5C|
i_x/<~b
iX_~m&
IYM9~H
$@IZ369
iz#dL+
^i&#Z}V
IZxL(H
i~#*zZbr2
\;J#0h2:
*j@.0k
J<0P'~
J1+Gs5{
j1o?4i~
J2t">;
J:2wDo
j3$`2
J36w?2
j`3e(7E
j3.p`;D$ h
<*J3raf
-j41Y>Lu
!J$4>d
J4.o#!
j5+iqT;
=J658[|
})J6`h
?J:6L'
j6M^oA
j6W*{&@J
:J7|Lj
J7y?}B;"b3
`"`J`8
j88`d~
J9cGw<<*
@J9=UB
[jAhHgVvWq
J){CJ)`=J)t
J){CJ)P}J)P
jc#:@Q
j@cR-v
/=jd*,
J&D h=.
JD:'H9
J!d.Ul==;
J+E!K"
;JelL*1s
$j/ePf
jeRVmhRJ*
^<jeV/1
J)f1J*
J)f1J)wkJ)yOJ)]
J'FZ?&4~
-jg} (
J)g7J)`
J)g7J)p
j@GF'+
J)gKJ)b
J"G@ne>
Jg`'{oK
J)HCJ)t
j:hUK~
J#: i3
jid b^6
J)IGJ)\
J)IGJ)i
J)IGJ)P}J)gKJ)S
J@ih*:
J)I!J*
J)I!J)SsJ)|%J)H
J)I!J)V
=JIoTR~
$J IU<
J)`=J*
J)|%J)
J)|%J*
J)|%J)g7J)I!J*
{jJIg&
J)|%J)R
J)kEJ)
J)kEJ*
jKh-vy
J,!K{tS
JlJ*x@
'J/LOS$
JLW ;<
JMKp]}
J;-mkp,48;@
;JMQ+@
J)n]J)H
J)n]J)K
J)n]J)s
^;J#.o2!
jo?4i~
JP1N;H
J)PGJ)HCJ)x
J)PGJ)P}J*
,JP'hL
J)P}J)`
J)P}J)\
J)P}J*
J)P}J){CJ)q
J)P}J)g7J)p
J)P}J)h
J)P}J)K
jP\ktf6
j qVkLxK
J)qWJ)k
J)qWJ)kEJ)\
- =jr}
#!jr;?
"*J\rG
J#R<p
:j_Ry/
"j<{S'
J)S3J)
J)SsJ)Y
j@t:`eD
%?jU\,Tn
j*V:^
J(~vY&!
J)wkJ)]
J)wkJ)|%J)x
J>\.XB
jX?cY}
JXkq1D
)J>y]~
#?jY#1
J)yOJ)]
J)yOJ*
j$.,z+
$j>/*Z\
J)Z5J)_
J)Z5J*
J)Z5J)b
J)Z5J)h
j`z^cs
J)Z J)P}J)o
,Jz*lr
J)ZSJ)~
J)ZSJ)]
J)ZSJ)k
J)ZSJ)o
J)ZSJ)ZSJ)n
;;.k.*
)(! 'k
#$#:K=
>@:K00<
,k,04<A
&K0?X@L
K142:00
`K ,3/n
(K3+P
K40S#8
K<49$e6d
K[-4Jhp
k4X&_
K4xfTw
K5.GG|
K5<N^^M
"/,k6@v
K!6|$w)
): K7
k8A)\Y
k8>QXZ,L
k?#9yZ
[kAQ$Pd
.kaTxMC
Kb.4GV
:kb:GP
,!)KbK
k:BkxS
+:K'c,)
Kc$Jd{
/KDL^H_!8i
k'Dn[S
K /Do%b
^(K='E
KERNEL32.dll
KF[2J4L
KF!BL.
$KfsQlM
KH7VdL
Kh95z
kHdSOdU5D
k:hxt5
KillTimer
KIS1"p>
ki}xv[
KjB3%R
kJj )dQ
,Kj/~!Pn
>kj+{r}
k$;k4Z
KL"1*os o
<klgCL
kL?[J*
K~LoB<
&K;l+rp[h
klsf>S
\kM;`3
kM+d.%}
K*!o@^w>
@-kp},=
kpb1v+t
:KpF:]u
>{ {KQ
kqn21-
k}qrL:
:?/k>r]
%Kr^3
#;<kri
kSdq<;
KS>Hnil
k#s#<M"
K$UcBkX
kUy zu
k vTrt
kvxY~,
kw6P1T
kw!&"K
k-{$wl
@KwX.\
kW [XA
,kx29L
$$k~y
K,Y"kB!
K\zWuXuA
+ ><l#
=L0DHp
>l0I"|/i
L0@{q2
?L0s8T
%"l"0:*t
L1<r6<
<;,!L2
L27@I/*u
l2@\Il
l]2X:(
l}\3oi2
L3WHo-
*L3z"d
L::"_4 :
l47.< 1
*L4PAx
l4s# :%
l4@Tk-
L4X*NV J
l#"< 5
L%;/5()
& L5>8.
>L_ (6^
L62utC
L6, 3b
`L6N*/b
[(L6np
[L(6U'-
L6 x(|;
L7|3,6CP
_L"7cB
< l7=Y
L8_54"|4
L8Ln4JU $S
L8zlGI
%l9-wL.K
@"l#%"A
( -L.a
LaF/(GA
L&aK8+z:
<@LB2u
lb>R#P
LBwXrh
lbZS(.
LC\4I?
LCaM"4
L,CfL,
LCMapStringA
LCMapStringW
Lc:r_s ::
L|:=cs
`lCu1T
L&da1z
lDI1=o
LD<P4)
>@le/<
~L,+|e
Le054.:(k
LeaveCriticalSection
*);+Lef
LeU3[T*E4
@L$F'6u
L/FBSD
@L{$F|u
<L(-g=
\(Lg>.
L_g^|C
+%!Lh
L_)#&H
l"h#/3
lh3',4W#(,
lh3'x4W#t,~
<>lhLj
&lhqcE-
.lI0fJ5
;lI ky
LineTo
l iNR[5
?LIS,/\
$+LI>Y
L( {J^
LJ=2P;R
#&"lj2sh$~&
LJ_KKZ
:@|:LjnL
)l)J)P
*)l=jSa
lj^x 8
(@~\lK
LK69"ht
}/LK=j7
L<kJe_-
-*lL\|
LL$6iR+
lL8zm<
Ll=c|t?
L&L$P0$(
LL$Qq|"
*LM0s0E1
LM2*D#2
LM!2Dr2
Lm4-#K
?;`LM7
L;( /M$d
Lm#dP
lM*?e@h|g
LMOY]W
LM Wjta
/l<NAC
Ln`>dwk
.L,nO^
LN/R]X
|(\Lo1
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadLibraryA
LoadResource
LoadStringA
lOBT%|U
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
;! Lo|Ht&wY
<Losj7,
LO,W"&
l:P1p|
LP,BBR
lpeY\[d
l\Pl"4
l"PPgV
LPtoDP
lQ,60(\
Lq`h(*
l"=QLmG "
lR^"\
,l(r#8
#L,RPM
LrVxMv
Lrz7<|)
LR$zds$
l,s4a:
L sLHTo,
LSrlIT
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
lUfM4)
>luNXe
."LUzR
.L`V|}
lV{0PK,R
LV^@on
l$ v$p
L",v`Z
LvZmc*
lW?<4(p
l} |w6
.*lW|I3WM$Jt5
lX*? `
Lx0+`39
<:{lx$>6i
:lXDZtc
Lxl+0,$D
LX(u4D
-l)Y;c
#`Ly G#
Ly#ge{
!LYHQ1
$* LZ
L<(@/Z
lz.0P,
;lzLP:
LzsC^f
:lz!]X*
~m|};&.
m}"`<
m}"`<&
m0L016
M:?(0>Y
M1|lkr
m2Q]kx
m2XH[_
@<m2Zm,
m]{35:
M3]8Mm
^m3V"n
M4!7fx|
M;4a^<
m4*$C`
M4[d2;
?M4g@;
.M(4,My
].M(4,UDC
]m /&6
m'| 6#[
m+8N1B
[M9+GgL
ma3Tj 4
mA.ftQKY
m>a$,m
MapDialogRect
MapWindowPoints
@MB4s\1
m&"%bD
]mBrjh
Mbv,4D^X
McsLElHq\
mc.}x3
m^` d:
md`K-bt
MDQiW8
MdY6|t
MessageBeep
MessageBoxA
MF(2-?
MfVo.s
(*<M:H6Z,
m^ H9s;v<
MhMxMHMX
Mh,!Ym
MH!zT4 p
midiOutPrepareHeader
midiOutReset
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamProperty
midiStreamRestart
midiStreamStop
>mj;5jz8;
Mj d)lR&
$mj)@H
=~MjLg
m<k79:
(/mKl0U
mKLHMJ*#
M>\[ L
.mL5A7f
M?&Lb
mL(I"W<
m=LQpV
:#mM1%ja
MM 4_[
M@n0Z@U#
!)mN73
MN9#A$
m;@NWK
ModifyMenuA
M~^OG"
#)-MoL
MoveToEx
MoveWindow
mP[d_g
MpiJ98]vO#qF
mp_m|u
:mPQ>O
=mP:,r
MPS[xB3
MPz.7<'
M`.}qt
MQ~xA&8Se~<H*
&M#q`xb^
$m-;r$
MR|+lU
[)m[S:
m*<S0"
m\*$!S4s"4|
MSHELL32.dll
mSJqC8o
#('&*mT
mT0+6Z
mT9bxu
Mttt[#>
mt`vZ_
m;T[w5,
mtX9{M
m_TzBt
MU,5Rpl=,
MulDiv
MultiByteToWideChar
MUtS<Y
m<vU#4
MvW DH
MW")>*N
MW>q2@
?mX<FEm
m;@/Yc
MyGtnA
Myx,MIM|
m*;\ZP'@
M[Zry:
^<*`N.
?N~]?!
N+ =%]
n^0:6g
N0TiZX
n{0:TLk"52
,~n0xOpdm
n,1cerI
N2b,9e1`
N'3F@1y2R
n$4Lh(
]"&=N5
.n5aRK
n5Bz<g
N5Pn\"
N?5(z<
N-60B3&
n6boax26
<n6`DD
n7:vJ2f
:N8P1>3"
%NA[3T
Na3x46G
NA5A~[
+N{|A5Q
naeY% q
n +|b(
%N[!,bi
n`]C.
N(CBj)
NCJ3( %
'NCk8/
N)(%D
~nd0!k
NDXE%O2=
N,|;e7
}nEL_c
nFEviH
nF=:Z4L
@n(*G-<
@N|"hC
Nhh!Z;M
Nhh!Z;M~!j$
N'Hi-A
&n+H,T
nHWl Y
N]id3D
;|n jn'u
njX26ycu
n;#>%l
Nl08(,
NL};-2
N_L<DC
Nl(xZ=
N$=m/=
nM3x(-C
.-N_m&p
Nm[=P"K
nMz>%L
Nn3D"^
nNbW4a4
N"NK#0vZsQ=N
N*N(N.k
nN'v,<
}N?ot*
NOz.*L
nQ~2XM>$
nqAuyZ
(nq<\cd
$n.qck
nQfZbl
nQfZblQz
NqNyNaN
n+s\7+
NT][)
nt6$P&
nt8=EY/
>nT[@c
NTD(0h
/n%u8( \B-F#
nvp6{]"
-NWt'j
&,N{X
nX3(4%$
nxu$_B
nXyKo
%NY[3T
)NYk>yI
nz[2yo
^Nz70L
NzEy](
nzh|wctS
n!Zl$}i
n(>#@ZP
>NZtl!Mc[
*#(Nzy
<O+#:
&o00g1_|
o~,0ID
o?;. 0J
o0'<R+
)o26hTlp
O2?+:bU6x
o^$-2r4
O/3G"_
O41e#:
O4-,rcf
O6*@=7
o{6Hh[
O7# _0$
!^o9(>6Dg:
O9f=4]d]
o9iw&A
O"@9ol+
O_9V"Wh
Oa7>6R8
+O?;'b5_`
Ob{f?4
;O*##cL
Oc,!m5
oC,Rnj
# odH%
o DLv:
<odpqB
ODr92O
OE^|,Q
o>eX'$Y=f
O\eZ\?
o*}FE
OffsetRect
OffsetViewportOrgEx
<o#G`F
oGUb|D
o$({HawGL
<oHU]"T@
:oItQLW
O>jLb,
OjR3f%
o?k<3f
oK%%5>
ole32.dll
oledlg.dll
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
OleUninitialize
oM74-d
?; oMe~
o"n@%-
',ON |
O&n#B)L,
,O}.o
oo+38fa
oO@h8B
oOJGpr
o-OLFC
'.%O|P
:Op?B|
OpenClipboard
OpenPrinterA
OpenProcess
opRWm+
<oP\u<
[ (<Oq
~%o>qT
\O"QyF
O)R_<$
OR{-4)
O+rN\9 FNT
oSnm@OR
oSqZCV
:O ]s@*s
/=+oSw
o%TkXL
Ot @sF
Ot(@sF
&o(txtzL
OU"6]3
O(uckHr
OV1D+6I;
&&OVVL?
O:;vw1
o@W(L#
_=OW/lc(
O!@W~z
|Ox7r<p
oX'91!
Oxm S)X
Ox-^(p
":Oy\<r
o[(&;z
OZ0RM4
OZ)$+2
o&Z%bD
,OzE"*D
OZqh2A
;p*0"\+
P01P4lk#D
[$*P*:0 42w
`%P)04i
P0B=+*
P0i@46
}:p0ry
P1J4o<
p2.4($
p2bS0IY`0?@
p2@X+>T
p]39d
p3f58_v
%;P43_
p4'80t
"\)p4fxE
P4VpTRZ+X
p5jP+tW*r
P+>66N
P&6Dr"iF
p`6wy>
P;~\7|
p79pgU
p8B:";S#?Q
'p8K:/
p8lPz"
P9h4Oz
Pa&0\eL
pA=A2F
pAdY3TQ
&pa%i>yq
PatBlt
PathToRegion
,P`B|#
?$P$B(
pb$BLaz
"p@ C~#
\@\Pc0
$P<C 12,
Pc+5y,
p~c;I*
pCQ'mt
pCTGMW@
*' P&d:
\ Pd]c
PdR4&dv
@PDt:r
PeekMessageA
PeH7l>
P?F)2\
pfedl<b
p_F,GH-
(P'FL4
&P+`fteFy
p%gv4zt
p!h@r&g
&.pILu
PI<@!Q
p.j ,
("pJ6L
|p(JK28
"p( j*l
;@PJp:?
P>>k;,
pKd',Z
PK q08
p(k`"x
P= l:&
PL!4-?
PL7@|
>#PlaA
Please, unload it from memory and restart your program.
%P^l!k,
P;lmdD
?P_LP9$)R
~<plPms
plS:34j
P,LTa0
}p:m2guvK
}p:m2ouvK
p(m\+*L
@pMx"o
Pn]7W4
PnbNBr<D
P)?N;dW86
p+nM!T
(p'o',
,p,O5p (t
:PO7:
po!.R=
PostMessageA
PostQuitMessage
PostThreadMessageA
;P=""p"
??Pp)`?2
$pp<::4
p, Pzh
?<pQ+8,>"
}p?qaz
*pQb`}
p:Q+}B3@p
Pq- h\(
P<q=h8
|/pqO$\
pq/;>y}<r
:|p]<@r|@
*p(R/+.
p}R$#*
Pr4@sK
prN"|5D
prnm4s[
Process32First
Process32Next
PRt.PPt"PVt2PTpD
p\R. ^v
P|R>&|v
P'<Rv<
>#P:rz2X
Ps9iof
pS[rZa\N
'PSZtkXq
P^\T7gpq
P:t8p2 E
pte et_
PtInRect
pTk]8k\
Pt*?Nr
Pt?N[rE
P|tR60$
PtVisible
PtVW*.
P@tzde5
puDa442@
;PuI&9U
;Puk29@
Puo~4<
;pv???
PV>66Nj
pV8Pj7@
P;$vhD
*"p]V#L
]pw`(
pw,OX|
pWT)@;
,(pWv t
Px9HE
px?H:O8
&pXR> Zv
pXS^G=
pXtlND
PXXg0,@,%
p#Ysf0,4#
^pytu!
p'Ywuv
pZlDY
Pzl?}H*
_'@ q+&
q1z).;
q;>@:3)
q#3e-Y
q3hpTc
q=*;3k
q^41N>wg
q4$5di
q(5bg?
#^'q5(*i,
q,6gq,
Q* 6^O
q6,#"z
q93"c
&+q9.p45$
q abxT
~qaD&z
q\.AzKj
q baT?;
QBrR2l L
~qBXxo4A
qc4 l#
QCU]v=nC @8
[`q<d=:@
q$D!"d
Q[dG"2>
QD&>lq
q^.dpP
Q+e!%_
Q.`,eN
qEUEIH
q^@#F[
qf.7@?
\~qfk:
QfMVLh~
qGB<<F
QgD}H`
qgW4pP
Qh,2/y
Q,h/_I
QHJF'k
QHMVLhT
q=hO x
+QHrll
QH rTv
q@I3|6
Qj1M :
qj1>yd
qJ)gKJ)P}J)R
qJ)n]J)K
qj|>yd[
$qK3#D
Q*LD:+
Q<LE!In
QL![MW
{QL(Oh)i
q|l/ .T
QM4C8N
/Qn5-ig
Q#Ntb5q
:qnV|t
Q;ojip
QoP)Asj(
+!qp3Sr
qp'\4ypp
+qpX3r
Qq<^_5H
qQ5V4lL
QReMX=_K
QR\IwM6
qRvg5\
!QR&v'u
qs -4+
qsvAF+
QT$:<^
QtB2:,
qt\gp6
:Qt/s|z6s4*}v:
+q!U0>
qU_:?a
@#qURN
q{,W5z
}*#qx:
;<qX4Vh
q|X6V-
qXgxB
Q/ Xo}U
QY>:38U
Q/ YJ
Qz8-%*v=
<QzBR9
qZ "rpL
(q_zTL*
<r>['>
|$r{/!
R`_"|(
R?";/,
r0cN+t
@;r0H3oAL~PT
:)r0L*
R0VzPSJ
R1P3VT'
.:&,R[2("0
R)@38{v8i
?r-3IP"<
;_[r>4
R451>4
^R4)6n4
:(:R4wh$Hw
R!.5Hr
r64\a0
:R6/@]l:
:R6/nEl:
{r81&.
R#${9
&!r9aTX
r]9g-5
R#9QgS<
rA<'HI
RaiseException
Ra=RC\
Rb@AIbO
R<bf0T
<Rbpo?
R{bS^hT
RC$|1Ev
rc9\<M
RCq;4|
rd1(yP
rD3aH<D
`.rdata
RDn'F8xy
#>-rD"x
r"e)%?
ReadFile
RealizePalette
Rectangle
RectVisible
RedrawWindow
RegCloseKey
RegCreateKeyExA
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA
RegSetValueExA
.ReG{xr
,rE.*J
ReleaseCapture
ReleaseDC
ReleaseSemaphore
.reloc
r:EM5~
RemovePropA
.r*;.eO
REsNn<
RestoreDC
ResumeThread
R)fp>9
rf:%PHZ\
rfQ@tx5
RG4ZS:P
RGj(D*
&RGO?:
:<\rGt6
>Rh41\
,Rh,!Q
R;hrju
]{#=ri
Ri2!xL@K
ri6b&g.|
ri84 A
'Richs
rI>"%M&*
riWJ[4
:rj0:]
RJ KDG
rjp' z(
rK0,#E
R{k>D!
rK##dj2
RkKl.\'
RkLijT
rk#Z<*&
$R-L (
RL=7*S
rl7V<&
RlAp9Bk
r" lLX
!r~m|2#
rm/ADY
r_mc6R
rN3V4"
( *rO-
r$O%o>k
\ROs3?
RoundRect
rPLh: 4
"*r;=+ Q
R^Q]$. /
|$<RQh
R)&r`d
*[R+rz~
r"rzv
,@+~rs
RS1'P&Z
rSfvu@ n
rSgCU+
*r*st;0
R(s(@!w
R,+;%tC
RtlUnwind
R"U2J?10
^r*U~JZ
rU*wHIR
R#v{9w!
rvE,=#w1.
>[rV}h
R<>v$r^V
'R%vuNr
`$ rvxsH
RWlj22
rW<r]L
R.=x[:
r,X6ir
R.=x[:g
Rx<LI<^
Rx$"nq
Rxt:\2@
RXW#!::
_r]=Xx
r\]Y^H
#r}'z
&R_Z36
-=}r#z8
R#zdB`
r&,\zf6,^xw
R|z{Gm%
rz^Tj\
RZ"w9"
*Rz+z!~Vo.
{<\s+{
&s# ,
[+s01:
s01:& [0
s*04~7e<:#l
s`$"=!1
s1ds6\U
/s2H(F<0
[s` 33
S|3,h6P
,:s3k3
S3qWv0
S3&^Xp
'S4F{D
s* 4"g&
S {&.4j
s{%4 W5jQ
s5gZ*7
S=~6lK
s.74*W^
]&S7J2
s7kve-
S7(S.,
{s7SHYVb
s8f024
s8o5cH
sa2VoQ+
sAnP&P
SaveDC
?saYSALf
$[`Sb"$:
SBjB(a:
sbk(,D
,SC>=0Dl
s<C1%~
sC4l)e
ScaleViewportExtEx
ScaleWindowExtEx
ScnBOo
scQ3>}
ScreenToClient
ScrollWindowEx
S]D(@\
%Sd/(4!
sDz,`W
sel%e+
SelectClipRgn
SelectObject
SelectPalette
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetBkColor
SetBkMode
SetCapture
SetClipboardData
SetCurrentDirectoryA
SetCursor
SetCursorPos
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
SetFocus
SetForegroundWindow
SetHandleCount
SetLastError
SetMapMode
SetMenu
SetMenuItemBitmaps
SetParent
SetPolyFillMode
SetPropA
SetRect
SetRectEmpty
SetROP2
SetScrollPos
SetScrollRange
SetStdHandle
SetStretchBltMode
SetTextColor
SetTimer
SetUnhandledExceptionFilter
SetViewportExtEx
SetViewportOrgEx
SetWindowContextHelpId
SetWindowExtEx
SetWindowLongA
SetWindowOrgEx
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
sf&-<[
SF1r4-A
sf]?okD_
sFSuz-
S&;G%K<f
;sh7Iu
ShellExecuteA
Shell_NotifyIconA
SHGetSpecialFolderPathA
Sh] J&
ShowWindow
"SHZUi
/s))\i
s<I7V`
&S(#in
+siRgD
>Sj3<2
"sj%L0
sK%EQ>g
s!'l70
<Sl8(N
>SL|/c
;S=Lhj
sl.;~s
^Sl=/$v
S%`Lwh
%;`s<M
sM8b@=EC
!Smdm4
SM,/M2-
sm&<SU
snB(x&
SNd5:/
snLG*?r[p
So&%!T
"spH&4
sQ3jRS
SqBa{>
{S/qk+)
s\qm*4
sQT<6
%s-r0*
s!r&3-+c>
sR,+68
"Sr!8a
Srb0pg
sR/,sv
ssd&=t
<S{s>o
`?sSY>}
StartDocA
StartPage
,sTF9L
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
sTl-)<O
S$TPY9
StretchBlt
STXMQH
-S=txO
S+T\$Z&
SV{jdH
\&SW^>
^s {W5P
sx8`nS
sXFe"t~:
s^x'lxt(tr:
SX@q{9"
SystemParametersInfoA
"Sz.f n@3)
S$ZmSs%YZ
Sz:nBt
Sz^>pXa[#5{I
?@<('t
*@"t=
%( >&t
t0)<@/
t0),@/
t0' &C
|T0kLiO;
@t:0l
'T0M:D
T1/546
[t1ZMr
:t2,^L
T2r8jf
t2y[n>H*d|
*,T3 :
T3 bf-
$t47+Z
t48DS>
T4Be0&
t4iC`2
t.$^5p
t$$*6(@
@t6FPD
T{6o*|
t:70xt
t;]%74L
*t"84`N
t8tj:@
t--@9,--,0,
<T9u8.
T9X)"Y
~t.a=,:
TabbedTextOutA
TA&V;0
T +}B3@p
|+TB`"6
TB}=FB
TbH6Az
tBhP\P
\TbhQ>
tBLR,O
TBMVqClB2
^TB|!#O<t*1<64x_,t
tbt"t~
_T"CGx
\T`c@i4
Tco5Il
tc]%w>
T:C!y"T`
T,DO( 2T
tE0BT
T;e2@DnLe
]TedpEZ
tE$J}>0<
T%e<]jF.
TerminateProcess
<Te@so`G
TextOutA
tf0j2Q
tFp3&=7
tfq>8
. T#`g
t^+H8_N
*tH9s0
;ThAL+
The procedure entry point %s could not be located in the dynamic link library %s
!This program cannot be run in DOS mode.
t&HPDR
t&HPDSJO
ThR!3O
&~:&ti
tI4|Cn
{ T?If
\ TiZX5
TJ\Exo
T$J)P*x?
#t!js?
tKR@5E
Tl1)'~9YCh
T|L6^[R0
/T;L/d
/tLRn^1
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
t~<+m1
t+>"M{2N
tMPAUd
&T>m*Pn
!?&Tn2z
T< ND$
#TNnNP
<$tNt1
t:/O),
>To$,"
{'T{o1DE
T;("oF{
T>og;L
T,}p"`<
tpr.spk
t>pxa[
tQ:j7T
t{>QJ=n
;tqX0Vh
T,;<r0
TR4muD
t:r8P9tw
TranslateAcceleratorA
TranslateMessage
"TrB;)o
T, rPB
tR>u,]
&tRV=&3
TRwc4K
;tS$@'
t$T${
$T!TGLp
tTKqp<
tTR'2`
ttzPxfXSq~
tu"?=a
Tu#Z}l$
tv;&<*
T(:v6L
[t&_v{{b
tv\L#Vp
tV!t-X7
]tv%ZX;
T=WMb,N
twq{7=.
>? tWt
#@/tX5
$TX[k4
+tXryz"h
:\T{x/Z
Ty9U8ct
tYD;TL
t`yNzc
Ty&zBD
tz4?H+
t$%z'5
tz\8p2
T\ZkD"GU
!t"zP~
TzQN3sJ_ A~
``"%U04
&U0D7;@8
u,|0'T
U0<Z2W
u1lIBsR
*U2(0.
U3azWc
u40*=,
U<"4CR":.X
U;4${e
U&:4q0
-<u<4tN
U50Rrl=
u}5pr_
u~ 6!~
U61BX:
(U.;&8
u84DrN
-u&*.>9
u9IlTW
uak i{f
#uaqoC(
/U)_aSq${
!u'cgrxT{
)*ucJ0Rf<XX(H
>Ud; iLfN
udm/QT
u<d]Vm>a$Tm
(+)UeS
U=+eSc
U@ezteH
<;UG?>
U@G<H<ba
UHpLhnZ
UH#?&V
U<i%]l
*u j1}
uJ2R4fX
%;u<jTv
UK4X.M
UK">Q4
u[l@8)
ulc,cN
ULsm_@_
()U;|M
U/M3?,
uMey"S
UnhandledExceptionFilter
UnhookWindowsHookEx
UnlockFile
UnregisterClassA
UokD:T
up4ep%
upcshJ
\$Upd.
UpdateWindow
upM*p7
UpNi7EpW
*_uPvF
U,PXQL
Uq\s@Z
uR8tK7".$<
UrfG1ZPS
U$RJ<((
URnM<
$<UrX9>
#US:{6
u&S.r
uSt,}?
UT<1Z,X\
uTf*Wq0}8
U<$v1*
uv;+ 3
|Uv^7h
UVGh9p
,U[(.w/
u/W]A&Y5(
UW\E<f
U,x4 rIJ ow
Ux>Buq*t
uxPIHY
uXRhv-
uXu|P*K
UxV;cC"
Uzd^ c
uZH_/"
\U<Z-m
UZTd:@}v
$v!{:(
~>V ={
,~/{>V
[ |\V"
&@&&V%
V0LFuQ
V|0PQ8
v0_V ^
V1FT1,ZX
V1JuAp
v*\3 :
v34NTlx
V!+.4|
V`4 c-P
v@]@<5
"V=;5:>
|v5pHm
V7,w_N
v7w{)t3p
v7&z[D
]V8 ;$
V8;6h3
V& 9V:
ValidateRect
V_Atj[6
VA*@Tw
V%B,6E
vb>#h!
];vbp_3
$VC6{
:VC6cc
VCQ#R3
Vd24lF
VDQs3OUa
VD,YMsh
"v?fv]Mq
"V&G;j
+VGlvx
% /vh\}
_V[>}h
v.HgG:?
v|hwi}pw4nr
VIr![tpL]
VirtualAlloc
VirtualFree
VirtualProtect
!Vj6R&
V$jx)w2
\#V<k,
\v K1Z
>v\L4j
Vl 6@
VLF,^?
vL'f?O'
={|VlMI
(Vl* X
@.vmp0
vMzrrK
v;_N!f
vO.0\25
voeB,,ND|
]VOR"m
vp:18p
v$]_pd
v'PRTgr
;V )Q,
v:'q96
$v Qfy
$V Qfy|#
VQx1q;
v\sF06:
v@sR+`
~ %$vsx9`
vt1`<j
V+T4}Zu
| VT8P,n
v:Tf/8
VT,P>0
?VTTa
@<Vvfb
(v+.w^
vwLqXB]
|VWQd:&ne 7
`VWR*H
'vx0P?J
VX?!0R
v=XQ:Lt
VXxkp;y
;v>Z9M
Vzc$'C :
& *(vzs.
@ w *:
$!&w_=
+;.\w`
+w&*
;'W%<0
W0rj@7q
w<&14z
W+1'96m
(w2(".
w23.l
w&2* 8
w2M#>O#
w2M$\<}p
@w=35dc
w|@3HL}
W3L/af&
w4;:H>;&*
.W$:4tp
W<53dm
W5L"k* :>2
W5Lop:
_%w6.*v
.W7g$$
w7j_R09X
,=W 7-r
!\w_+8
w*802#z
`<W8hv
W9T4@4)
w9>_;Y
w9/y$QY
W'A4w4p
}<wAfy%
WaitForInputIdle
WaitForMultipleObjects
WaitForSingleObject
waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
W'A<w4p
WBP<0VH
wC6N-6
WCJL=@[
^>WcQ4'
.:`:W@d
Wd0{^8d
WD<c3(J
w?D_(M
wDm(99
wd?<X{f
wdzZ$F-
<W@|E0J
'WE9N
we&'\K
w#&|F6
wf)qpF
,w:?fUCzQ
WF/[z;j
w#g3JS;
W:g"5*0"Y
W`g(JgV1g
Wg'(JV
Wh0Sp1
wH\JnZ
WideCharToMultiByte
w\,I\M
WindowFromPoint
WinExec
WinHelpA
WINMM.dll
WINSPOOL.DRV
W:IQmUq
]WIs2>
.Wj78R
W~j}qI
*WJTZP
WKc5..!
wkhx)4
wKMwl0
wkyglH:#
@)`W+L[
WL|e%$\
w/<L S@046
w<=mfJ
wml#0c
wMs+ ,
#Wo3Um2[
,wO9|;
@WO Fy
W:oL`0#$
W)O{Ne
wP3f8L-
W[P5'[O
WPw-)OS$C
/+w> q
#w(&@Q
w- Q1G$2
w QDG$
]- >WQr'
wq"s=.r
W@>Qw~
wRfdct+c}rr7r}sb
WriteFile
WritePrivateProfileStringA
wr=Wh<
WS2_32.dll
w!SB1$
wsprintfA
=W,)t&
wt1|@7
W;t4k$p!
W@TB\.
W/tbU@
w_?:UbP
W"Up,n
WV.s7L
Wv\t2g`
w"W6&R
wW<-M>
W$'X8z
wxrd{Qu
w:;Yg^p
wylJ3&
w!&yM<M
:w+Ymz
Wyo'X!9I
wyvsh'ip
wZ<}(aT
'x=*{,
$X@<./
x07 Ju
X0lyXY
X0mv#$
&x#*16
x(=.;<1s
x1U>&9
-/;X2 v6
X3q&?M6
x:4'AL
,x/4jx
x`=4@ty`
,X4W&^
X4yz{C
X5Ba,$
x@5s\0,
/X`=5(w
?&(.x6
X60hrm
X6>1$+
X64&^b
x[6%B('$
x6b{K4
-X6'(>K
x6L>320#<b
X6t^'B
X7leD0S
x7niXp7v-
X \8^+
x8+2;?u
x89um,
X$:>8'~"jf
x8#~Pw|
&x=9HiSt@
X9zw&8y
>-Xa.,
xafHQ;
Xb!k41
x/B*;qWc
'xC&=brP
xd,A|X
Xf6g+v8
xF P|B
<"xFYP4:B2
x#G`@!
x,:g?UU
xH*84"
xhBt V>>`
xHdEs0R
x~HlDp
,x:I&)
X,+IQB
XKl}T\
x&L:5<
*/XL79
`Xlb (j
x^l()E,
>$(Xlf
@xLFg]
$:x*(lg
@xLNG]
<xLnMrm[NS
x(lnN8AF
.x$_m{
x,,MJk,
XMl[P~
xMm'Sw
$xm;RBF
!}X,#n
<xp0Ht=b8
xp4dm0
{x}qez
xQ[.;k>q>7>
XqP;O~SJ
=XQq:L@
XR0h&l
<X_<RE<}J<
:}{xR;\l*Q
X+;"rx<O
XRx,\w
X;Ry,<~
Xs1F@]
x&S +H
x/sI~+<
xS{=}j<F
xsxa+t
X::$^T
x @[tjq
=$' x_tT
XtU,+XP
XtZ9$Y
xUhy|(&
X#UJ0zn.+.3
!$Xvb
xvttPz
X>`$x=
X)xDR%
XxsnTH~6&G#X
x:Xzu]
XY=g*+S
;XY,ke(
XZidB$
>*!y|%
#">=!`y
:\y0-$
y !0bsh7T+ ]!^
Y0Fy+`
Y+ 1{0
&~Y1FLE
y1m'AyOJ
y2{klh
'Y{30/
Y3*V34
>:Y&4%8
&y4MM+"b
;Y4+u9;>r
y5b0:2
y5?eD,
y5TLM2
Y6T;]F
?]Y'*7jq
y7OR/%
y8^bk'n_
y]8jYr
Y<9jw*
%{yaqf&
y|?Az9K3I
ybC55&
:;^-./Yb/W
yc=dX8
'YCGou:
yd;L@&
y,:<D;R6*
yE1$X~3
Ye[iOu
(yF.4,
~Ygz"0
y:[$#H
Y$`\H
Y{ha<:
y.JmfEz
Y+L-0p
;yl+9I
yLcs!*
yL$.j&
.yLJFA
Yl.ly
YLOIwz
y~=LS;,
yMa,/=&*
YNkh4z
yO=?;#,
'y&+;o8D
yP_B~h
y'p~Rh
_ypuba4d
YpW<g_
)/y>?q
YQc7Q1@
YQR89{
y;@q:T
YqXtmo|`
=Y" RB
=>yr@r
YRR`3T
y"&*>s
Y*t7UW
y+TuH.1b
Y-!}T>z
y\;u[@
y\ULD!
-]_yun
y'|vx&
<~y!w1ur
|Yw<cP
YW<H7/
^yw@$Q
yx972<nm
Yxw`3h
&:YY >
yz'%B+
Y-Z#Ty
z]0kTy4
'z0<k,Y
Z0vNVp
z#2:@[
"z{{21
z2c0#~O
^[z2Sn W
(Z3e*<
z3^J't
Z43'7yc
|z4b}=F
:Z4d:@D
Z=4\f,
,z4Hr %_
Z4j)v(9k
Z4lph0
Z4{P.O3
z4vps80Z0
Z 4);w
z4xP~R|
*z5FJO
Z6G+9UxF
Z6 SJa
}"z*7;
z7A.- B<
z7^VRd
!"z+~8
z85VY4ru
(z8 kx
z8p|A,
z9;`J/
@Z`9]p
z:9R\~
z9Se+p
z9W 2c'
z}a= B~
Za:ybp'0
zBD?<]
ZB \EVKI
zCsq2V
!Zd.*
:zDdN4
ZdR"wu
*ze:2|
zE\<M,A
+zeTL\8
.=\zEw
=ZEXih
)ZF][.
z"<'+G
Z|~^G+
Zg4|mh
z> 'H0
ZH#^z^
ZHZ9f!C
ZI`'"HQ
,Z Isz
zi$ySO
Z\+j;9B
Zj|B]B
zJ$|lj
$z< kl
@zL/~f4)
zlp.lL
zlpN$,f8^
Z$l[&z
z(-m!!
z.(m-jD
zN:pzW
ZO;Ddi
z\/Ox(
/</$zP
zp\1@S>
zpOSE,
\:zPTN0
zq:5<nL
-}:zqt
z!;~qTn
Z+Qu8[cl
~z&,#qZ
z~RvTD:
$ "Z`S?`
"zS200H
ZSlE>fyU0=
{zSs0N"<
zt}>45+
ZT5(gP
[zThe ordinal %u could not be located in the dynamic link library %s
)ZTkrJ
Ztr+Xw0
z~tw;@
zV8WA6
zv{ScJ
zV.s:L
Zw5OVJ
zw|tt KH
z(x#3@n
z+xb8~
.z>xh)
$zX kT
Zxl;6<
z+##XpP
ZY63]H
<zyX;L9@
zy.y@
z zC~5
zZmpXL
Z>:z$V
Z,ZxTn