Analysis Date2013-12-13 18:30:34
MD51d1e6683375276e62eced24fe2ae5731
SHA17c5de9302622d5822b84070f043d5128412860f6

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
SectionUPX0 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
SectionUPX1 md5: f0d387f3ed5a02856462a7bd0b3a5891 sha1: 9c413c34087826afd0a5dabd3217064fc2bb75bf size: 1067008
Section.rsrc md5: e7d02acfeebddee24f88e82e0d6a2ec0 sha1: d92fc0380a8aa2f064d873ba665689fd70e56a0e size: 8192
Timestamp2011-04-22 02:41:12
VersionLegalCopyright: 蓝宝石软件 版权所有
FileVersion: 8.0.0.0
CompanyName: 蓝宝石软件
Comments: 蓝宝石软件
ProductName: 网吧语音服务大师---呼叫系统
ProductVersion: 8.0.0.0
FileDescription: 最专业使用最为广泛的网吧语音服务软件。
PackerUPX -> www.upx.sourceforge.net
PEhashbed63bceed74e9384b8a69c0b55c20be2527b9ca
AVavgGeneric34.AMLK
AVmcafeeFlyagent

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSwww.hylbs.com

Network Details:

DNS5a453ae9c28d1785.cdn.jiashule.com
Type: A
222.216.190.60
DNS5a453ae9c28d1785.cdn.jiashule.com
Type: A
61.155.149.85
DNSwww.hylbs.com
Type: A
HTTP GEThttp://www.hylbs.com/update/version.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Flows TCP192.168.1.1:1031 ➝ 222.216.190.60:80

Raw Pcap
0x00000000 (00000)   47455420 2f757064 6174652f 76657273   GET /update/vers
0x00000010 (00016)   696f6e2e 74787420 48545450 2f312e31   ion.txt HTTP/1.1
0x00000020 (00032)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000030 (00048)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000040 (00064)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x00000050 (00080)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x00000060 (00096)   20535631 290d0a41 63636570 742d4c61    SV1)..Accept-La
0x00000070 (00112)   6e677561 67653a20 7a682d63 6e0d0a43   nguage: zh-cn..C
0x00000080 (00128)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x00000090 (00144)   416c6976 650d0a41 63636570 743a2069   Alive..Accept: i
0x000000a0 (00160)   6d616765 2f676966 2c20696d 6167652f   mage/gif, image/
0x000000b0 (00176)   782d7862 69746d61 702c2069 6d616765   x-xbitmap, image
0x000000c0 (00192)   2f6a7065 672c2069 6d616765 2f706a70   /jpeg, image/pjp
0x000000d0 (00208)   65672c20 6170706c 69636174 696f6e2f   eg, application/
0x000000e0 (00224)   782d7368 6f636b77 6176652d 666c6173   x-shockwave-flas
0x000000f0 (00240)   682c2061 70706c69 63617469 6f6e2f78   h, application/x
0x00000100 (00256)   2d73696c 7665726c 69676874 2c202a2f   -silverlight, */
0x00000110 (00272)   2a0d0a48 6f73743a 20777777 2e68796c   *..Host: www.hyl
0x00000120 (00288)   62732e63 6f6d0d0a 0d0a                bs.com....


Strings
080404B0
3f333
8.0.0.0
Comments
CompanyName
DEFAULT_ICON
fff3f
FileDescription
FileVersion
IEXT2_IDC_HORZLINEMOVECURSOR
IEXT2_IDC_VERTLINEMOVECURSOR
IEXT2_IDR_WAVE1
IEXT3_IDB_SCROLLBTNS
IEXT3_IDC_DRAGGING
IEXT3_IDC_HANDCUR
IEXT3_IDC_NODRAGGING
IEXT_IDB_STATEIMAGES
LegalCopyright
ProductName
ProductVersion
StringFileInfo
TEXTINCLUDE
Translation
VarFileInfo
VS_VERSION_INFO
WAVE
<>^'))
 ????!
;~~~~<
::::::
:::::::
?`-^'(
?~~~~@
'~~~~(
}<'<%"
$????%
#~~~~$
#/*&`~
+~~~~,
/~~~~0
+;,0,271
04*MvW
05=M C
06^6,v6
0}"@7a? 
0}7vyN
09u/65l+
0axA^#
0C2\Vw
0F=I*`I
.&_0Hj
0Ij/fg
0iPwA>9
%0'J:HV
(0~Lr);?oC
0&>L/<T
,]0n,vb
$0oF!'
0oGYvP
0pdp(Hl
0R\0TI
0SVdV6
0Sw;H- _
0Tm6/E(
,0u'L^87
0v(xPd
0,Xs>SK5
13_!2P
]/13EjD[n
!15)&-+
\15= 6
1?/74It6
17iTppB
1bk&}F
1e#Bp	1
1HBON-5
1>hI,l
?1H]j.
@1'IMVl
1j,IjcU
&	>1N({
1`\n_v
1&=O,R
1Rd}j'
1#tt_p
&2/2{Hx	w
232Sl{
2~6V$>
27bZ0fd
2[}!<d
,~2fcEUP
.$^2hN>
:'(2*i6'
2I.6(-
2N2rr|
2~@nkk
2olw}U
;{[2Q2
+2qDXp
2?Qy<W
2?Rm?Bt
2sMa6UO
=2x"5f
2y3g23f
2.yMm`
32h7~R.:
<33333
333C.G
3~~~~4
3AFpbf9E2
3Ba~^A
3'b+SQ
3 Copyrp
#3CScs
3\FCByF
=(3(G_
`3hB4|
;3;)\Hf
|3[*ja
3o&QMm^
'3?	'+u
3V.Gx@g
3VOd40
%,3:;y
!)43Oe
4)7 `,E>
@4~A'1]
 4A4AyJ
4aDAw2
`4F.62
4)G:n7
^4G:!V
4}L5AH'
4lgmGg
)4MN,nE
4n z5n
_4/OHd
4p.\H:(
4QN&v4
4Q<WYMA
4t3-V82
4_VtR	)_
|4^y@X@F
|?5^<@
?'50jj;
54a,WF
54$+-TE2Z$L
:56`ABCD
,5^9F;
&5BpU4
5C%CRH
5*DF&2
^;%@5E
%5EUeu
5 >@f{
5gDKe@
5G`-RB
5gWyG!_
=5Gyd-
5i(NFG
5M=/xn
5NC0 p5
#5nFU^
5tZfBsA
>5v1n)
'*@5w_r
5Y.R1CI
5*\zR+&MI|X
6*!--\
63e@Xn6
6.&3KN
64)JVx
6?'$5J
:666XD
67n&V$
6#>8QD
?6a}U@
^6BF~b
6B.I^}
6}b	Jq
6[}_@BL6
6Bx	R]
6&C7/>6
6cadSbT
6=CG;o#
>6cw!}
6e1A!	
6E9R2b5
\6eOP/
6f$*6)4
6	'fH^
6<f+qD
*6Gn4PN(.
`6>g!v?g"vq
/6Gw(m
.6J#CHd
.6-j)Ow
&6.JQU8
6K"j7u
6?N%&O
6\Oe7%Q
6o>?n,o,
?6R9@*Jv^
?6%RQz.CG
6RR9y.90TT`.9y.ZZ
6R.u6n@]Z<i
6~s~7v
;6&T*nxG"
6U.S;A
6)V[Pt`V
6VT)ak
(,*&6W
6w)&F;!
6wrOwp~
#6Ww~`
(6W&YM
6X%l``&
6X N;t#
*6+ydNh
_6ykaE
6]zOeHLj
=7%_=&
||~\$7
"]_ @7
724JCE8
73CCvA
~77D6z
7~~~~8
78Ao:X/
`7a aV
7a#GIh
,7 AP.
7a_%Z_6Z
7B5$jo[
#7Cf#o
7dlg_2
]7Ep]:E
(_7f"m
7go?*6
'7GWgw
7h8dBA
7=iAhX
/^7IJO1
7IVZar
'7NW)6
7@O7'_
?7-P)i
(7+~QG
?\7R4/9
*^7r/x'
7[SF/(
7SIi'_;
7ut=7*e8]P
?7v]`!
7@)VKZF
7@,v~l
?7#')W#
7W<0.M
7''w~d
7^X<R4
7YJ#q/o
7  )\Z
7Z^_/G
:@;8@;
83RD;(W_?"[
/86_8rs
86r@B+,
87#}L M6h
8B08pT~~
8e$!<#M:
-$8:G)b
8mkA_@D
.[8O/D
&	8}P+U
8;Rg8/GN
/!{<)8S
8sVt]i
8w9Ov=GSZ[
8YSf=dV
9.)5/7
9>???8
.9999-,+*9999)('&9999%$#"9999! 
9A5DO}oP~
9BlKFH
=;9CGG
]9Ei( 
9)g09a%
9g"W;hsB
 !9h Y9
[9I*5 \
9i :RO
9iR ;yt;
9KBpXw
9MR -N#
9n-%.J
'9%o_P
:}&9$p(
9;R+CV
9r/o=oKoYo
9rPhXh`/hO!
9rZ`e`m`u#
9Sr^rirtr
9WFY!	 ~
+}^9w_j
?9x#6"
9$ZJ%[
`~~~~a
^-!a+<
+!&A?;
a0ux`d~
a*0w_U
~a^1F)foG
A2~j_!
A_^2L9l
=/:A2m
a2naFe@
^A4L>`'
(:a5'7A
A`5el:R
a6$qHW
a*6@U*
a7PqL/
A7&u2!
_a8~0C
~<a*8F
a(8!`j
a`_;999^]\[
:a~9_B
?~A(b"
AbY$Au
].++\AC
^aC^8A
>Ac{N4o;
@AC Pf
AD80AA4
a%Da'E
ADVAPI32.dll
>&A$!#E
<=AEIM\
)AeN^?N
,}{=)%af
(|AF)1B
,A#$f4,_AFX_NO_SPLI
Afe$la`
#Af;f!A
AFK?&9$?
`afTYM
AfxOldm
-_AGRb
^aiata
AigTPw$
'ak-Bw
.akGE/?	w
aKyvAv
~?>a'L
$aLu/jV
a@MvK&
&"AN*OD
an~+V7$<
]ANz!>q%
ao-{{	
|A|O|]|k
%.a(pi8g
a]@.(Q
~ARUPj
aU6.7bHFL
a:v962
AVIFIL32.dll
AVIStreamInfoA
AW\v,Oy
_+%AXf
(	'AXLp
aYcj6v
	Ay^H1
.aywy6
|([^az
AZZ$Cc^
>@+= B	^ !
{$~~%B
&B0%I.1
.?B2400jRmA
B."27Kx
b[2\jp
B33ECF
b3l,V6
$b?6+[
(b6m>^G
B$:7l8
B7[NX*8
B8FE-46
 B9d =
(bb0>o6
BCC_'N
 bcrip
<B&cY@U^
,=)be,
'bEUF`=
B	F0>Vn
{B/F"d}
bFP`r]W
#*BG.gG
$-BgJ@#e
BG	Yp(
@Bgzax 	
B_>H.c
BH_cGId
bHM	1&
BH$N*u
bh|p&a
)B=`_i
biFiv/
B+,iN,
B{^<JJg
"BKN^@
BlcFT[
BLsoftw
?bn.8A
Bo%$#l.
bolTip
BooF6r
B!>ot>#
`:BpJ?
BpOc+74
*bQ$.B
BR1$D6
'"bRi^
brRgn;
btxP#q
"BUlh>
~Busyc@.`9
Bv..BNJW$B
bv&P(T]
\,BvW/
b@V#ZD
b)!X9rD)o
byHfW6R
b~z7mt
Bz[(^.C
&^C*^)	
;(c<2Fa3
C\2WKH4
c6~p#u
C)7v?	
cA7EV<
c~~~~d
/ !C>d
C~~~~D
CD2YMf
:`cF~,
CFp`I?V
'Cg6\a`5
Cg\LEI\
cgR^-(
c\h=@7
ChooseColorA
C>H>SB
c]J_j?
CL+	DT+
ClosePrinter
\CLSID
};C.M07~
CmdT"gem
c:Mf@D
>c'"mSW
c<MVfVNvg7\
col\St
COMCTL32.dll
comdlg32.dll
c'OMNO_
&~"Cp|
 C!]&P
CPc7E~6 
Cp?TX"
(cpwUu
c~q? !
Cr+&De
CreateESetProc
&	\cs?
C''Tib
CTYPEd
CVDA~n
Cwa^FW
c_x[de
:CX"E)k
c*xWlPK
CZI{<:-
czJO=AO
cZJ__WRKQ
;- d%}
d09f2340818511d396f6aaf844c7
D0uoGJ
D.12?%0h4
D1*JWn&]
=D4J+48
 d6e6XH
D6%jGN=
D7&"-8A
'd7Z6|MuL
d-A|Gf9
DA-(%l\7O!(
d,B_6;
Db_Serv
/:dCM4
dC}NF}
dCu?&.
"d^d7p
)*DdJN
d(;_DLL) || 9
d~~~~e
*D~>?e
'de(^jPi>
dEnobx
DFD7D671
D@^?H+
]DH@b%Jh
DI_."-
'dIB/I
DJQ-ub
_D)KE4
\D(ktop
$ Dlg=I>
%dlwF_
dLY5F8".
DncI4<
DNk/=~
(`Do74
d)OG860
d(;)OH
DoutFGET
~d)p7VZG
D$PS}<
DPtoLP
DrawDibDraw
D@\r_h'
DRIFF@
%d-Rml
D#S717
DsE' pU_
d:s=x&
-DTn~/
D T:/n
DU/H=7
+dv2UwW
dv?_C.~2
D:w! :
&@D"[W
dWaM"V
dWy$`y
D~+X{+
'd"ZGee&	
.E|,) 
]>E`|#
:E0_^y$
e2`>(|
)'E6.2
e(936kend
EaWhe&oLinf'
E.BVd#
e:/ch@X
ecl$Gq
edExce
EditBox
EdM7fn
ed\rABN
ed tex
eeee::
eeeeeee
`-eeRc@
`E*]F&
EF?J	Oa
Ef%K2b
,E".FW7
@e^h~o
>EhS)h.
~[	E~_	I~\	
.E\ikg
eK"^f}
e#~$kH
eK?^V>
e@>lfqbd
eLNEx)
)*$en4
eng.pOK
Enl$9g
&^e*NVa
.envAO8
\eO%>i
E;OMn!
eO./&q
ERFACE_
Error d:od
ES6z[LEKk
esRewG5
essWorJg SizeJoInitial
ETM ~'3>
E=TRACK
(eU$0fN
EU!6+nh
(E u#Y/
&/ev9dl
e/W1b_aI\
Ew/9= @n67
<eX7Ar/H
ExitProcess
~@e&y|
ez<Ps'
~)>`f'
(\$f~&
[_`.[}f
 '|F}~
')\:!F
f0CBjHO
f_.1%x
F3j'~`
f3$maF
f&(3vK
F(4%5%
f{4A59
f4Y#QB~1
F5%ESO
F*6_26
*F6	%|H
'f6:	IE
F6!_MO
F7$`*q
f8F$nC
F8&wlH.O
f(Appy
fBfJ# 
FB_rD_
FBU_.aG
'"F=C@
fCSwitz
#fC{~zg
fDoYCx
Fd*'Yr
fe2>0M
:="Fee
<ff333
fFaYWXnMN
<fff33
ffff33p
fffff3<
+f,fi]
F[.-ft
%*.*fg
[:>FgC
(~*fG,D
&F?goK0D
fG&	YK
fH88TZ	
fhaRwP
_F!HP`
F)h<?Z
&F[")I
fI69^&^ep
{"~FK,6
fKaoq'\M
Fk.H'a
FKMM'F<[ar
f!*L$&
FLBSCa
FlIKTZ
`FL\t:
fmN}h2
F-m_O+
~#fMw(
F'n96=
:f$nb-
/FnbP;9 	
F?.<nC
.FNHwB~m?
F&nL/E
fNLfpP
F)n>?N
fO*#kI8
[f^o&P
^",^foS
Fp7/<`F
fpG;OK
fPr%	/-
FQ:GG]?	?V
F!#Qu.
	F^qzn
<fR@4 |
&fR9@*
F+rF5r
 * from 
$)%:fr'xA
F(t.> 
F&tbDo
f/T&ho
ftN:g9P
F`U>A4
fU"H9P
f.uox2n
f')_UU
_f<u/X/P;.
f}V	2&v
('FVd'
fvj#m4
F:vKK 
;F^w>|*
=FW)H*b
^fwvwo
?F.+\.x
;f/[;Y
FY1Da&
f'y9rh
~F~yFHP*
f!{~yo
F~ySqm
?fz?<7
<fZeFd
@F@^ZPHX
FZ_q''
> &~&G
@G&'&*
(g0oDd2
G3w1fz
+G<4^*'
g4IuFZC
G@57&'
#g5fQmfo'
g_7PDf
g`8Nw(
G&A6B983789F624b2cB
gAMA_hISiCCP
+ga*`p
,'GA=VX|
!gB#+2I
)#gb;n:
GB y 0
\}gCK]%V
'^*G"d
GD8%r@
G/-da_Q-bP
GDI32.dll
+g+d_y
G\ELgl
GEPOST~@j^n_
GetProcAddress
#GeVsV
G%.F''
g)^fR$2
#Ggouo
GG?QmX_
g~~~~h
G~~~~H
'ghfB'
GIF89a[8
Gi`FM0g{T
gIGG$F
g{IP.L
,=GJ1WJ
gj~-phQO
'G:KOk
GL4/'K;+
Gl.chs\S
 'g+lk
__GLOBAL_&
"gl=)UB
:,|Gn^
gNIv/~
Gn&N_5%^
g@n[o^
GO==~%
goF"^`#d0>
GOffs)SU
g\	_;OH
$&g\Ol
GoV6Rl
<:G*QM
GqPX!(?
!GqS['
GradientFill
GrbqRgFW
Gr,W"V;A(
GS/HJc4
GsYg=I
guL%bI
GULgB%
GuNfgTP
G*v&%0G
GvIB?I
G;v*{N&@
gvWM%B
-GW+%n
Gw`$u!
'GX;b(?
GY?b:H
G.;z\1;
gzG|&}/@
H@~&.)
,h0.DA<ze
>*&h>1&v>K&
h@423'2
*`-h=5>
:H$5WHnJS
H6v:OV
h	7n/V
=-|'-~h8
H&_<8s
h=a^';_
H``A&G
HBWV'1
,Hdw~]
He1f44~&
Head^zh-
Hea?E3t
 heapoO3
HelvCS S
&-/.hF
h|F6is
>hFNN2
hfp*"p0
hFQ'?J
hf+u^k
HhDC.P
+Hh/EF
HhNuhg	
h~~~~i
Hi6rCa
,Hi-(f
/hIL25Q
`\HImOH
HJ31Pb>
_h[JNX8
h|&$~K
hkV`aw
hlB&^v3
hlushUBuff4"x+8
@H\!;m
{hmFMi
hnb5(g
Hn#hki>o
HNN2r`
`HP1B|NP8K
HPe+">
h<Phfn
\;@_h`r
HrCg@b	g
[Hr,gJw0}J
hSa-Q l*2
/hS^*D
HSfW_=
=H+&^t
http://w.hylbs.
<h~/TvE
HUf>71
~h	Vf+`
*HV-gP
HvV+/:
H|-w_%
hw:F>5
,~HxhlW
?H.y.;
HZ>-fF|
i`:/].
>"&~>I
@i!`&0
I0@fn0
i]0~FS!Io
=I1GIrSL
$I 2SK
i4F	~I
I'4JMv8J
I6`(-<f,^
I6&Q.p
i7f;5P
*	>I7x"
I8KD7%
Ia4yM@=ZX.@
*(I	A.o,b	
\IBI,|1uS
?+IC5+LCT+
`ICbo^
Icl<Vso
ICO%.c
:$I^\dEW/G
IE&gH*
Iflagfu
i&FN7i(
&IFX{F
I[<GBU
IGH._Fk
/(/IGl
\ih<3F+
IhIFF&
<#)Ii#~
`#IicQ
i&j!@!
I!JA .
I*{JOU
)'!Ik(
Ik)x,tNc
ILa3Ioa+
Im.!;	
IMERNS\
I%n&7D
I*~N+c
IngfJ+,ta
INiu}ZQx
$}IN	Jn
InternetOpenA
In&	V?6o:
I.{./O
"Ioa I
+#i/p/^
i'PSS'
ip~v/(
_/iQ`'p
iu#F_j?
IvH5lu
i'wSvw@
i,wT8D(
#i?x87
I-XeK7H
~IYpF_A
IzA|9z@Si}1
IZ`Sy1
i`zTtq)
J0#!66
j	? ^1
{J1$,f
J20&B]
J2#'T1
'J3<GPz?
J3J.'{'
^J?4FFg_/>
j4M:&f
#j5nS1/
&^j6`%
J`6=Qa
J([7F$
J7,|u'
$j8<#/f
>j9>T.F2
j.<, A?
@ja<9V
JAf09p0
^J`AyK
J:B[\y,AVI
,jD ,2G
(|JdVj/
jF9nnU
.!jfLm
)j`F~x
"j$/GN
JHN)(=
-J+Hv@h0
jJ~>?(
&j$M.w
J-NSa^
JNsp^s
JO+	=m/7
jpMoLo
:jrl[G
JrlVrh
|j/S91
j^SVZj
%JTi=2G
JUo|aX[
jV!\e}8
 >JW'+
&J)wcP
]<]J]X]G
	jx&>V+
J{Y-(>
JY2V~YY
"j/>YlV
Jy~>Wo+
*:JZjz
JZL%?! 
}!}/}=}K
K./01+
..>)k5
*~K6ps
k 6Unl
	K6vfC
K9e[M{
(KA2)jE
k AdleX$d
KaVa9r
K'AX_=!
"KB2KE3
}KB'c"
K(b,ynL(
&kCgYf
KCOgB0
keHwmeJ
KERNEL32.DLL
K/f=*v
}KfY@{
Kg)&dB
KG~On(0
kGS->Z
^k_G/up
kH^dcH
KI/klv
K'K/U ]
K~~~~L
Kl=[WjC
{.*K"m
_KMHRg
KN^NO.O
K	Nyvv
KO7'~w
kog7o_3
Kol7x6<
K)$O;P
/Ko_zpl
//Kp6GU$EZ`
kpYi$ 
!~>Ktwfs
KU>_fZ
KUNKWd
K#>v:R
KW	Gz,
K)&X^V
-kXZ?q$
K'Yg(W
kyw}@*
{-L}-	
L#1N.+
L3t9 e
L,'!<5
>l6A+W
L6n	!(
L(8?QJ9
l9U2$6
Laaa/)
?lAE nJ
|L(#amN
LANGUAGE 4, #pragma coH
lA U`Y
lB+Af'
lbCDLd
	lCA^5C
ld?<fX
LDPH-0
'l'E5d
%L:eW.Y
Lf=Hb}
LHf%V}o
	L-h~O
lh!v:-=
L`i?M`Hw0
>LJLRW_
L^Ju%rV
LjVFJ?j6
,<L\l|
ll/fl////ql|l
LL_ph#
L'lR>b
l~~~~m
L{mWT.
l_{NUf
LoadLibraryA
+ LOOP 
(LpoN^
'l u0>/:
LVAQaq
LV^ny4X
L,_,[w
\`:l~Y
@(L@,Y
lyS]T!4@)
:` m0.
m[;4.&
	%m4On
M:5I;V5
^m76G!&(
#m7%`8
m7/	>F-
m8( d8
Ma3Mce
mAD(0_.e
Manebru
?Map4To
}m/Aux\TyfH3
~mBVJ[
^.MCBzBF
mck(W/+X
*MDH-BF
M/?D\	K
m?dm	,
 "$:mE
me8 dvifdisp
 '?#mEc
?Menu(
mEWv_&
?MF04:>#
m](~FE
M-ffUU9
M*:+G_
Mg6`V8
MG~/`F
@mhYUF$
`~MimxX
_>MI?w
^M?joi
mJRJ#7&
M LLr^>
mMI6MH
mmlrl_DJ
m////!m,m7mBm
mm:sVd
m`mvOx
///MmXmcm
^Mn+1S
mN8m`1U
=&mnco
mod7hy 
'MONETARY
Mozi2a/4
M%PBkvS
M/PLIx/
m@pw2o
mQ)'1#
MRuFV2
~+Ms6hg
m	She>d
; MSIE
MSIMG32.dll
ms\l%o
MSVCRTg
MSVFW32.dll
MS_W{j
]M	T,h
M>}U=q
muUxFcl
=MV.NV
=,Mv:SFa
m w&H.
mwU99I8
mwwai	
myOFl,
MySQLApeF
m'y@y?
>!&n>&
n[$*.	
_:#!N+
n_<<0aP
'N1U,b
N,|2-\(
n2F/*c
N2*N4b
N2rr'~
=/N=2V
N]=3>.,Xw
n4}g!q
N(4ZvvF
%N=5%w=
N6DJ*x
N76pO6
_N$97^
N\9<^9
N 9F.$
N\9nB3M
NA2.&x
NA?A>	N
+NAFkH
]'n},b
nB@b	g
nbnE)l
NBre6'Y}@
/&nc->
NC6'~w
N|C7+]
\ |Ncf
N;d_u<
?)@\n)F
)nFbCJ
NfEO$Q"N
N{f}F'
nfvn0H
NfvPz8
/N[<G&<
NGa)zx2
@N	GbO
NgOui&V
n I$4e1
!^nI.D
n~iV,J
n!IvJo
.NJ1:"f
NJF>6.<
#n=J'kA
Nj(@.Nf
nJ)'}q
>;n_JQV
NJ&tbH
%NJz8@.
nK7Q+h4&F
nK]H/O
n%'MDIF 
[|n@M.GP.
.>N^n~
#>`[Nn
Nn=?.>
N#^^Ng
n'N*n"
?NNx!If
NNxJ,~o
nNZ/6l
_	n&o 
,%*%no
NoJZ`n
Np1L6a
>NP?85
N/PfrI
NR9@*J
~Nrby.9yV
nR_[o`|
ntSA:f
>N&,%,>U
N=+`"v
`<n$V2
N_@v9V
N>`vE`
NvHJ@d
.`*nvIR
nVN?*h#
[N/VVaO[g
nwe]AR
nwF7,`
& nw|noD&
N-Wn"P
Nx#Be2w
NXxZvV7
n??%XYz
#-n yE
N!'y\*r
|O[\_]
	?""O;
O*;" <
O4x9_@
O@6DHWN
o%-6}}Rx
'(O6UJ
o7ass#T
O7.Qc'
o`8BpT7
$o=(8;V
?OaJS9U
o%a%"O@
OA_vI.=
o./B ]
oBe145ete:db\g
OBR:x~
]OebOpb{b!
!OE&V6
Oey+ce&
=OFiH^u~
?.'O?G'
O(g5$)R
OGI__W
=Og?%mj"
OGvw1R
o.i?hpG^e
">}OIV
OI~xCE
+O-jHJE
OJuVDG
Oka%LT
oKApF!
OK/OO&
 .'o/l
~O-l 	
ole32.dll
OLEAUT32.dll
oledlg.dll
OleRun
+O,M0:<
OM27^U
omPoiy
&omsctls_sEk
oN0s$R
@O_n~7
.^oN	'#C(
oN'@-F
O^n_^:h
OntlET
oOJrbW
\OO:=t
ooy^ddpp
O~~~~P
OPBTYGJif !S`
opD2~kd
+OpenEv
oP?G4Y
O_P.Q7
OPVzJA
oqAttach
>o Qb.
#O~;QW
OResour
orInfo
O> +sKc:
~OSTiJ>5d~
||ot>d'
OUA[OE
ouE7h%
oUTMY_^_W
o~	;v/
!OV^A>y
OVB2Z^
O*viO 
o&"V@o
Ov V'5
=OV}>-WS?
 OW|P3
ow-V_[
ox?=NK
o}x'@T
_oXU_W
&oY/(U
_/P0#`
p::#,@]1
p`1Ag^B
p1>(buS
p2?v2r
p.>3_$$
P3<99X`h
!p^>/4
p&$5&&
P6>.2GO}
p$~6k/?
P:8ERb:4V
P8|lo?
Pa 4&g
&pa6#7
PageControl
pagFWIaw
%pa[&pbB?a
Para.t
@#(PAu-
=p?'b?
pb9y.6
\PbkWT
PChwPn
%P=%%d=
+P$D|+
PD.V&Z+
+pFF.Lz
~pftA*
P'gg@^
 ^p^'HN
Ph(OPW
>pHY/sBIT
P#include "afx0&"
&PjFo.
pJTcrJ.
PlaySoundA
PLTEbKGcHRM
PNhLM`
PN<-oY
?*`pO?^
>pO;L#
Portsp0
p~~~~q
p^%Q5qL
<.>P`r
`p&r7M
PRO.NE
P RvB6
p=/,S%
"pSizOA
pT^Lfl
pt&!.N<
 pU/yp
/`|pV$
~p?=W%
\p<!"W
[PWE-Gz1)
P~WKV4j
	p'y9r
PYev!'
Pz8bZ9M
%,+q^$
q0'wyG
Q!0YO<,
q1pM#l[
Q`4`0A
q+4.P|
Q5G]9@0
^^Q`7)
{Q7'\%
/Q8~Ga
Q@~8w%|`
q8_ZZ~
qBcOpN&
qBIVgp
	Q_b{S
+qC&+uC
qCXXn3
QD	]iGD5I
qd*oDg0
Q%E5vZ
$Qenz~y
-qe	wY
QFG@F%
q#fN>[
qf'N`b
#qFsS_
<qgFz.
Q-H._{
"Qh~^u
QIx3$_
q%	j&v
Qkkbal
ql@.V^T
q/m.!>
q^pNo>y
/+!qQ8,
Q!_tHB
~Q\<U_81
qvVbx~
`&~Q?X
"QX^n^
q-<Z0V
Q_)z%m
?Q#/z*n
.R/]0h
r2r=rHrG
'r>3)2~
R(42Rg
R5H^LH
r5p.Vvird
;R7&D}
R7~penc
R85|Q=F
-+%R9$'
R9@,^j
~Ra7@RK^
RASAPI32.dll
RasHangUpA
'[RA[Z
R_	B(<
R<D$n=
RE$9SBn5#
RegCloseKey
RF'>6<
<rfN>.a
RGoK~[
r{Jz>D
&rL7)r
rListV
Rm*f|;
Rm(N$F&
%RNf!}1
R*nHQr\
R	&No7
'r	OvI
(|RQ~N
<r`T>&
RU6]?V
RU6W&YR
Ru:7St;	U7@
r@^vDF]H
R"=>Ww
rxd!6e
\r@ZRF'
RzzNi`
_@?]_)S
+S/^+|
s3+B'l
S42 5<q%e
''S4=E
S7['5V
S7F>'oV..
?s7`Ie
s&7rUaQ
S8c n9
s^^a^a
saDlgho
s	Bl31+G
s _~BM!9
'%?SDO
Se7V1z
SEa^Wz
S%GVQ2
SHELL32.dll
ShellExecuteA
SHLWAPI
^shockwa
SH_SCROLL_LINES_
`sH&t{
si!9, %8
Siv'93
/sJe\5?
SJ^SLlohd
SkinH_EL.dll
sKL_o-
SklvFzl6Tsl"T
<SKQ@_N
\\sntr.
SN^W}(
[SOIPG
soJ]$t
"`;s^p
S$=>p^
sQit{=
.~s>r`
~SRCte
sS*-1A
S~~~~T
StatusBa
S;tjMch
stuvwx<
_;S=tV
SuperB
<#&s>	&v
^S(V6N
SVQ4|JS
SWdify
^SXaFR
S%y\Z$
T0':F.J[
t1\UL>\
T2f82M%6<
&t#[6n
t6Nl.8
t92$x=
Ta2.[*2S}F"+n2
tABc_8
TARG_CHS)q2
	*tB#*
t}bBxMf
;tbVJ>
tDi}KWX
[\td; t
!This program cannot be run in DOS mode.
Th$s'Wed-
tic*||
T]"_IS|
t'`:J+
Tj7$O#pp
tJB,%77
t<Jkb=J
TJNM$}7$
Tk^+Te$
t>)lo>
.tl"y5
T^m!	-
Tm&r^G
tn7A<S
tng(~G
t+?Nj+_v
tNNN.	
^tNTbb
]!T;NX
tog*>_>/
t,$?oK
ToWideCharSdu
t^s4:y
ts$;^7F
TTER_RESOURC
t~~~~u
T)UfQVSFUJ
$T=u(QB
 tu^y*
t&~V$<
;+Tv<YUY={WAC
tw\1mx
:/Tx<%U
?TXx?\
Tynd\J,S
)U(&$=
U#1H_@
U4J_l:U
~U5u1.y
u 7W#f
.U8+guU
U?$a1A
'UB@Ea1$6(A
>~u{+Cb
UC++ R9Lih
UE.2w"t
U](#Eu
U&]F96
<Uf$c+1R^O
u;%F^>W
u@F%/y
)?UHaFw
U`h]%ZV
UID0ataB
UJlfpfk
U$@&KS@[
$Un&LpIw
U+]N!P
Unpk7H
]UOVkKiw
(,UP#n1
<U+QcHMu%
U	Qge?
UQn|SRN
USER32
USER32.dll
?$USfowq
+-u`\v
u)	>|v
=uV9${V
Uv;htg0
/UvJ2'
UvMKmBWTb
 u%Vq\
UV=*VAG
<uXjF>
.u-%y/&
@<,@v>
'+%&/V
V|*:'-
v0sNC+
,/V1Q7
V2FGT`
v2io(r"
v2rCfN\
^V]3:l
V4@a9|
|V.4F'Jp
^[V4i=
v?4*TD
v6%N+n
V8f"F;
v8wpG"
V$_956
vA4E!	<
]va(/A
VA}=Ae`
@&V(^ANnE
Variaz
VBbJJX
\!'%VC
)v]-.c]s^
VD6*H(c
'.vDqf
"@[vEU
/,-,vf
)V/f.4
V\fL}b
v,f>on
v-f&V>
VG,buT$
V.GGs?)
&,vGP-
$*,>%v&H
vHz,|'
"Vi3;=
vIEF,)
vIMFfE6
VirtualAlloc
VirtualFree
VirtualProtect
 VisT/
vj&5-l
\vJb\0
VJ?/[jF
v	})JwoO
vkaja&
VkG\.V
v.K	RYv
V[KSrn
VKtaX!
{V-lgY
.^Vlz1
vMFmeKG
vMSm)R7
>vmX'T7U
};V`N$
/~vn09y
>VOIVWV>
VOMA$#R*z
VOQmFFX
"(v~ory
vp G4ll
vPH|`WE
vQ80?70
Vq%LV+#lL"
(vqtTE
VrcpynFDu
$Vrl:ked
<vrnjf
v^rpHo
V/RX$!
vR.x.6}jC
vSa9{a
VTkn0g
vUVV_g
vV+N8^[
VVnk92
+ *vw)>y
>v&x&e
&V&X"Q
v>,y.`
%V*&Y{
&vy=*G6
(v[YGL|Q6
Vy\u;q6
Vz>:4y>
@&^w._
^>W[&{#	
&W<.>&
w0%:yY
~W`1Vw
}`:W46ai!&;
%w4A@G
w5i"rgFY
W,-68N
w^6nH6
w^7HhK
+w7=MF
w-/!8P
W8RM@_
W8T$IB
",W|A&
>w<!@$A~f
`W|ARy?
w@b5m)
WC-/+&
wC5|@X
W+%Cou.Ndk-
`$<wD7.
wD~`]C1
@wD)mx
wdw5IL
WE,_37
WebBrow
@WFy>$
$WI{fF
?wikFi
WININET.dll
WINMM.dll
WINSPOOL.DRV
{WLk^;
W%m4>@e
W`MHW+
W/MXDTBf
'w '@N
WN^^1H
W@N8>O
W~	<nJ
{Wn\l\LO
w}#@np2
Woeve2
%W,OLX+v
W/P#8=
w'pfMl
WrDw$q
WS2_32.dll
w>S8B_y
wSTI.[5
w]+`t;&a
wTb%}c>=
wTSFN6RPq
'w'/.v
>~<wV#
&wV'5m
Wva	'"
wVBN'1
Wv*/GN
{w#-v[O
wvspdt`
^?WV&yq'
WW6.d/|
wWD2Q2
_|wwem
W&WEXH
W+)Whe
wWj%oY
W?>(WM+hB
W`^.W%v
W~~~~X
W(XCLW
wXJAO&n
WXln?0
wxoAv(7
wyN	j6J?
%&W&YsI
W.?,*Z
'W$ztn
_X0P7vR
X#@1Y,@
X`2l*f
x9#!_:
;XaFAX]
Xafj@^
X.\@_~b
XB5^cGob
X)BnqG
@x_Bo 
?`XCb#
?XCJxp
xCp&Wf
`?xc}x
|xd|zd
"XEe%X
.xe	PV
X -,f^	
XF%Fpf}
;.&XFx2
xgI4&xa
%Xgv'nX
Xh,4'A/
XH?R_s~7`
+.X_I8
_XJO$e&F
-XK4WNAU
XkX9$y
`*/XlBb
xm`mHm
x@{MYo!
	@	X	N&
(xN2rr{*x&
XnDQ6R
XN._f670
xOn9>\a
xprrr0;F
XPTPSW
_XPUx 
XrhAMo
Xs@k\1G
XtoFFspCALs
@XU 3Uv
XuEI$:
.X~U[vUL
"XVfBT
 xVk!xWk&
Xv',MH
x????w
xW6tm'#
xwMkF~
>_x _X
x-xbitp
')Xx_@F
'XXT)*
X"@|X/@zX2@wX^@
##/y^!
y?'% $*
y.>."!
Y0rl3r
y0,*)Uy
y,1Hd4
y1@>*S
.$+	.Y2
y+3;CS
Y4A{~tY
#'y4=S
Y]4V"*@
y)7=_ `
]!Y7ZG
#'y9'-
#'y9,QV
"'y9ryX
Y,AvY4A_Y A
Y|Aw]M
+YBg/[J
yB@Ogo
y e@nos
yfffff
*yH*00
YI	AK:
YIA[YaA
y%j$zs
Y^|lA)
YNcN4]
y.NF>2
"<>Yno?
.y }o|_
y@o^_aB
Y%=<OF
YOk[L0
y[o]q_
yp~6uM
y\PD4$
Y&qr3y
#''yS\
y^s>T\
yu6.<$
Yw)Qy*M
@_Y/_y
yY\k}Y
y{yVyO
.y.yzj>.I6/y
<yz{|}
YZ*&QL
YZv}[r
z06^8V
Z0F$_b
z2F@Q6yEl
z~.4g%.	
Z|6ciC/v
]Z*6fa'
?z~8ln
~ZaG`v
_z@a<V
`z.{-C
zFG`](X
%zG~/>
:z/G'|2
Zg	/28
~ZGhc$
zGWHNb)
@ZH>D)0V
zkBN7nvSs
ZKcggh5
Z_K.eJV?B
@`(zLb(
z%>M/0
Zm;09Qc
ZM9Ort
znbVJ|
)z	'NK
Zn]kl/E
/\^ZnY
ZO^NnMP
<ZPH\\
z}p	Xc
;z%q+P
Zr6Tp7
zrfH.9y
ZRFI:5
*z'RGc
Z Stapard
$<zT?W
$[zU#~
ZUgA.G
_zv'< 
z"'>{v
=ZV3$[
z>vA'Y
zVff]a
zvW|W~o
/Zw3bXh
ZXO)eW
(ZzT(^d