Analysis Date2014-08-26 22:08:55
MD561a3b4d90d92216692b8551052b6aac2
SHA1cf784ed45b4a0ceec912cda3958d1c013b9259cb

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: b0288c007d32bcf1c372a57c5ded724c sha1: ab210e923dfd587c6f945d311a8375e96e8722de size: 692224
Section.rdata md5: fde69c9578908ac7fc624ab319e61cac sha1: 404ad95d53b8736e115c2f1db6678f5599449413 size: 139264
Section.data md5: b36fc2280f0fd05ec3632ac3f400a73b sha1: b2b6a3bf3dc33fcb30f98d34dce26e16f2561052 size: 61440
Section.rsrc md5: 09eb1a9a7f343fb04c14c7f50d49a4ec sha1: 6febac17286f51b9f7dec5b7f5264a116c8b9fdc size: 20480
Timestamp2013-04-30 09:17:32
PackerMicrosoft Visual C++ v6.0
PEhash348bb317a2e6c87c9ec1fa4af3b24a00ccd6a025
IMPhash21fb40e057ad7143fb767015c29c6f62

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\malware.exe ➝
C:\malware.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!

Network Details:

DNSwww.iwofeng.com
Type: A
208.73.211.163
DNSwww.iwofeng.com
Type: A
208.73.211.242
DNSwww.iwofeng.com
Type: A
208.73.211.193
DNSwww.iwofeng.com
Type: A
208.73.211.175
DNSwww.iwofeng.com
Type: A
208.73.211.174
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/ok.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.iwofeng.com/tc.txt
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Flows TCP192.168.1.1:1031 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1032 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1033 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1034 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1035 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1036 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1037 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1038 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1039 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1040 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1041 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1042 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1043 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1044 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1045 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1046 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1047 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1048 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1049 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1050 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1051 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1052 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1053 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1054 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1055 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1056 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1057 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1058 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1059 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1060 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1061 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1062 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1063 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1064 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1065 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1066 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1067 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1068 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1069 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1070 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1071 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1072 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1073 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1074 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1075 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1076 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1077 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1078 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1079 ➝ 208.73.211.163:80
Flows TCP192.168.1.1:1080 ➝ 208.73.211.163:80

Raw Pcap
0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6f6b2e 74787420 48545450   GET /ok.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f74632e 74787420 48545450   GET /tc.txt HTTP
0x00000010 (00016)   2f312e31 0d0a5573 65722d41 67656e74   /1.1..User-Agent
0x00000020 (00032)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000030 (00048)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000040 (00064)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000050 (00080)   352e3029 0d0a4163 63657074 3a202a2f   5.0)..Accept: */
0x00000060 (00096)   2a0d0a48 6f73743a 20777777 2e69776f   *..Host: www.iwo
0x00000070 (00112)   66656e67 2e636f6d 0d0a4361 6368652d   feng.com..Cache-
0x00000080 (00128)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000090 (00144)   650d0a0d 0a                           e....


Strings
,
.
,
....  ................
"#
....
.
.........
10/.-,+*)('&%$#"! ..............
.....
..........
&&
..
.........
-
..
x
==
...
.
 
\
\
-% BbmHpAadYySMI \
.-E-0-0..
00-+ 
e
 
:.:\00...........?-  
0
0 
0
?
.
u
    
 ......
 (*.*)
#####
#######
0, 0
 %1 
	1uM
A!#$'()*-123456789?ABCDEFGHIJKLMNOPQRSTUVWXYZ[]^_`abcdefghijklmnopqrstuvwxyz|~
(&C)
	Ctrl+
	Ctrl+D
	Ctrl+End
	Ctrl+G
	Ctrl+Home
	Ctrl+N
	Ctrl+PageDown
	Ctrl+PageUp
	&D.
DEFAULT_ICON
 DLL 
(&E)
         (((((                  H
(&H)
(&I)
 INI 
jjjj
Jjjj
jjjjh
Jjjjj
jjjjjj
Jjjjjjjjj
msctls_progress32
msctls_updown32
MS Shell Dlg
(&N)
(null)
(&O)
(&P)
	PageDown
	PageUp
Progress1
 %s 
(&S)
	Shift+Tab
Spin1
(&T)
	Tab/Enter
TEXTINCLUDE
xxxx
^,_^][
^$_^[]
        
                     + "=";
                    + "==";
                }
            );
            }
        ];
        }
 (*.*)|*.*||
-----------------
--------------------------
	!	!	!	!	
					}
						}
0.0.0.0
00 00 
00 00 00
00 00 00 
0000000000
00 00 00 00 00 
00 00 00 03 01 00 00
00 00 00 03 02 00 00 00 04 00 00 00
00 00 00 04 00 00 
00 00 00 04 00 00   00 99  10 02 2C 3C 42 15 C7 23
00 00 00 0E 6C 6F 67 69 6E 2E 61 75 74 68 00 00
00 00  00 18  50 75 73 68 53 65 72 76 69 63 65 2E
00 00 00 18 50 75 73 68 53 65 72 76 69 63 65 2E
00 00 00 19 
00 00 00 1D
00 00 00 44 00 09 10  AC  20 02 7F C2 20 02 76 35
00 00 00 62
00 00 00 62 00 0A F9 9A 20 02 7F C2 20 02 76 35
00 00 00 7C 10 02 2C 3C 42 15 C7 23 10 56 07 53
00 00 00 C4 00 09 10
00 00 00 C5 00 09 10 
00 00 00 C9 00 04 A0 80 20 02 7F C2 20 02 76 35
00 00 04 00 00
00 00 04 00 00 
&@00 01
00 01 0B 
{00020404-0000-0000-C000-000000000046}
00 04 00 00
00 04 00 00 00 2C 66 32 30 61 32 37 62 34 64 35
00 04 A0 7F 20 02 7F C2 20 02 76 35
00 36  0A 02 
01 00 00 00 00 00 00 00 00 00 00 00 00
01 00 00 00 00 00 00 00 00 00 00 00 00 00
01 00 00 00 00 00 00 00 00 00 00 00 00 00 
01 00 00 00 00 00 00 00 00 00 00 00 00  00 00 04
01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04
01  06 0E  53 76 63 52 65 71 44 65 6C 54 6F 6B 65
0123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100
0123456789ABCDEF
06 0A 72 65 71 5F 4F 66 66 4D 73 67 
06 0B 72 65 71 5F 53 65 6E 64 4D 73 67 18 00 01
06 18 51 51 53 65 72 76 69 63 65 2E 53 76 63 52
06 19 41 63 63 6F 73 74 53 76 63 2E 52 65 71 47 65 74 42 6C 61 63 6B 4C 69 73 74 1D 00 
06 20 4D 65 73 73 61 67 65 53 76 63 50 61 63 6B
06 27 52 65 67 69 73 74 65 72 50 72 6F 78 79 53
(&07-034/)7 '
08 00 01
08 00 01 06 0F 52 65 71 47 65 74 42 6C 61 63 6B 4C 69 73 74 18 00 01 
0A 00 01 10 01 20 01 32 
0A 0A 01 02 02 13 00 00 00 00 
0A 0A 03 00 00 00 00 
0A 4F 66 66 4C 69 6E 65 4D 73 67 7D 00 01
0B 30 02 0B 8C 98 0C A8 0C
0B 8C 98 0C A8 0C
0dk:ghV
0F 56 07 50 75 73 68 53 76 63 66 0E 53 76 63 52
0R>\W[
0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F 
0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 
0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 
0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 
0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 
0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 
0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 
0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 
0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 
0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 
0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 
0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 
0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 
0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 
0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 
0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 
0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 
0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 
0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 
0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 
0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 
0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 
0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 
0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 
											 0x80 | (c & 0x3f));
														 0x80 | (c & 0x3f));
														 0x80 | ((c >>> 12) & 0x3f),
											 0x80 | ((c >>> 6) & 0x3f),
														 0x80 | ((c >>> 6) & 0x3f),
					// 0xxx xxxx
10 01 20 01 3D 00 0C 4C 5D 00 0C 0B 
10 01 2C 36 00 40 0B 50 01 60 01 70 01 8C 9C AC BC C0 01
`@10 02 2C 3C 42 15 C7 22 FD 56 0A 4D 65 73 73 61
10 02 2C 3C 42 15 C7 24 DE 56 09 41 63 63 6F 73
10 02 2C 3C 42 15 C7 24 F5 56 04 74 65 73 74 66
            -1,  0,  1,  2,  3,  4,  5,  6,  7,  8,  9, 10, 11, 12, 13, 14,
1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 
1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 
1 0 X 9 8 7 6 5 4 3 2
1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 
					// 110x xxxx   10xx xxxx
					// 1110 xxxx  10xx xxxx  10xx xxxx
						// 1111 0xxx  10xx xxxx  10xx xxxx  10xx xxxx
						// 1111 10xx  10xx xxxx  10xx xxxx  10xx xxxx  10xx xxxx
						// 1111 110x  10xx xxxx  10xx xxxx  10xx xxxx  10xx xxxx  10xx xxxx
            -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
            -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, -1, 62, -1, -1, -1, 63,
1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 
121.14.125.21
            -1, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40,
13 52 65 67 50 72 78 79 53 76 63 2E 69 6E 66 6F
            15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, -1, -1, -1, -1, -1,
,1"52.*
18 00 01
18 00 01 
19 00 08 02 4B CA 09 EB 02 76 32 04 FB 02 2F 35
19 0C 2C 0B 2A 03 00 00 00 00 
1970/01/01 00:00:00
1B D7 02 58 81 DF 6E 02 0F 69 C4 CF 02 0F 10 07
1C 26 00 3C 40 01 5C 60 0F 7C 8C 90 09 AD 00 0C
1C 2C 36 00 40 15 5C 60 01 70 01 8C 9C A1 02 5E
1D 00 
1D 00 00 07 0A 02
1D 00 00 61 0A 0D
1#QNAN
1#SNAN
20 02 7F C2 20 02 76 35
22 20 02 7F C2 3C 40 01 5C 0B 1C 20 01 0B 
	2	5	5	5	5	5
%+.2d%.2d
2E 53 76 63 52 65 71 75 65 73 74 53 65 6E 64 4D
31 34 34 65 30 62 38 35 33 38 64 63 35 31 39 62
38 35 33 38 64 63 35 31 39 62 64 31 33 65 65 66
3C 42 
40 06 56
            41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, -1, -1, -1, -1, -1
4D 65 73 73 61 67 65 53 76 63 2E 6F 66 66 6C 69
\$4t|Ht@H
|?5^<@
5	!	!	!	!
52 20 02 7F C2 66 0D 6D 73 66 5F 73 79 6D 62 69
            52, 53, 54, 55, 56, 57, 58, 59, 60, 61, -1, -1, -1, -1, -1, -1,
52 65 71 75 65 73 74 48 65 61 64 65 72 1D 00 
52F260023059454187AF826A3C07AF2A
53 65 63 75 72 69 74 79 2E 52 65 71 75 65 73 74
53 76 63 52 65 71 44 65 6C 54 6F 6B 65 6E 1D 00
	5	5	5
56 65 72 69 66 79 50 69 63 1D 00 00 0E 0A 06 
5C 6D 00 0C 0B 8C 98 0C A8 0C 
5F99C1642A2F4e03850721B4F5D7C3F8
61 63 6B 4C 69 73 74 7D 00 
61 6E 5F 31 76 01 31 8C 0B 06 10 52 65 71 75 65
61 6E 5F 31 76  01 31 8C 0B 8C 98 0C A8 0C
64 31 33 65 65 66 66 32 30 35 31 62 37 30 00 00
64 65 6C 74 6F 6B 65 6E 00  00 00 04 00 00 00 04
65 63 75 72 69 74 79 2E 55 73 65 72 53 69 6D 70
65 71 44 65 6C 54 6F 6B 65 6E 7D 00  00 6A  08 00
65 71 52 65 67 69 73 74 65 72 1D 00 00 19 0A 02
65 72 18 00 01 06 16 53 65 63 75 72 69 74 79 2E
66 32 30 35 31 62 37 30 00 00 
66 32 30 61 32 37 62 34 64 35 31 34 34 65 30 62
	6	6	6	6
	6	6	6	6	6	6	6	6	6	6	,	,	,	,	,	,	,	,	+	+	+	+	+	/	/	/	'	'	'	'	'	'	'	'	'	'	(	(	(	(	(	(	(	(	(	(	(	(	(	
67 65 53 76 63 66 07 53 65 6E 64 4D 73 67 7D 00
67 69 73 74 65 72 7D 00 00 4D 08 00 01 06 0E 53
6C 65 49 6E 66 6F
6E 18 00 01 06 18 51 51 53 65 72 76 69 63 65 2E
6E 65 6D 73 67 00
707ca37322474f6ca841f0e224f4b620
717787597
72 65 67 69 73 74 65 72 00 00 00 04 00 00  00 2C
73 67 1D 00 
73 74 56 65 72 69 66 79 50 69 63 18 00 01 06 19
73 74 72 7D 00 01 
74 4F 62 6A 66 11 43 4D 44 5F 47 45 54 5F 42 6C
74 52 65 67 69 73 74 65 72 1D 00 
74 61 74 53 76 63 66 0E 53 76 63 52 65 71 52 65
76 63 50 61 63 6B 2E 53 76 63 52 65 71 75 65 73
76 63 52 65 71 52 65 67 69 73 74 65 72 18 00 01
	7	7	7	7	7	7	7	7	7	7	7	*	*	-	-	-	-
7 9 10 5 8 4 2 1 6 3 7 9 10 5 8 4 2
7D 00 01
8C 98 0C A8 0C
8C 98 0C A8 0C 
8MThdu
\$8UVW
9^0u/j
^}%95@
'9A`u"9
9D$$t+
9L$x~e
9l$xtU9
9nPu	9^T
9o4u'V
	9oTtc
9t$0v8
9^xu5j
A@0A 0C 1C 2D 00 00 16 01 00 6C
<A|2<Z
A512548E76954B6E92C21055517615B0
abcddefghijklmnoopqrrsstuvvwwxyyz;
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
abnormal program termination
accept
Accept: */*
Accept: */* 
AccostSvc.ReqGetBlackList
%a, %d %b %Y %H:%M:%S 
AddCode
 * Add integers, wrapping at 2^32. This uses 16-bit operations internally
AddObject
AdjustTokenPrivileges
AdjustWindowRectEx
AdodbStream
Adodb.Stream
advapi32.dll
Advapi32.dll
ADVAPI32.dll
advpack.dll
AE 02 DF 0A E0 EF 02 16 CD 18 5E 26 00 39 0C 0B
AfxControlBar42s
AfxFrameOrView42s
AfxMDIFrame42s
AfxOldWndProc423
AfxOleControl42s
AfxWnd42s
Afx:%x:%x
Afx:%x:%x:%x:%x:%x
 * A JavaScript implementation of the Secure Hash Algorithm, SHA-1, as defined
AllowUI
Andalus
AppendMenuA
  /* append padding */
Arguments
    a = safe_add(a, olda);
      a = t;
.?AUCThreadData@@
August
Automatic
.?AV_AFX_BASE_MODULE_STATE@@
.?AV_AFX_CHECKLIST_STATE@@
.?AV_AFX_COLOR_STATE@@
.?AV_AFX_CTL3D_STATE@@
.?AV_AFX_CTL3D_THREAD@@
.?AVAFX_MODULE_STATE@@
.?AVAFX_MODULE_THREAD_STATE@@
.?AV_AFX_SOCK_STATE@@
.?AV_AFX_THREAD_STATE@@
.?AV_AFX_WIN_STATE@@
.?AVCArchiveException@@
.?AVCBitmap@@
.?AVCBrush@@
.?AVCButton@@
.?AVCClientDC@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCColorDialog@@
.?AVCComboBox@@
.?AVCCommonDialog@@
.?AVCCriticalSection@@
.?AVCDC@@
.?AVCDialog@@
.?AVCDWordArray@@
.?AVCEdit@@
.?AVCException@@
.?AVCFile@@
.?AVCFileDialog@@
.?AVCFileException@@
.?AVCFileFind@@
.?AVCGdiObject@@
.?AVCHandleMap@@
.?AVCImageList@@
.?AVCMapPtrToPtr@@
.?AVCMapStringToPtr@@
.?AVCMemFile@@
.?AVCMemoryException@@
.?AVCMenu@@
.?AVCNoTrackObject@@
.?AVCNotSupportedException@@
.?AVCObject@@
.?AVCPaintDC@@
.?AVCPen@@
.?AVCProgressCtrl@@
.?AVCPtrArray@@
.?AVCPtrList@@
.?AVCResourceException@@
.?AVCRgn@@
.?AVCSessionMapPtrToPtr@@
.?AVCSharedFile@@
.?AVCSimpleException@@
.?AVCSpinButtonCtrl@@
.?AVCStatic@@
.?AVCStringArray@@
.?AVCSyncObject@@
.?AVCTempDC@@
.?AVCTempGdiObject@@
.?AVCTempImageList@@
.?AVCTempMenu@@
.?AVCTempWnd@@
.?AVCTestCmdUI@@
.?AVCToolTipCtrl@@
.?AVCUserException@@
.?AVCWinApp@@
.?AVCWindowDC@@
.?AVCWinThread@@
.?AVCWnd@@
.?AVCWordArray@@
.?AVtype_info@@
<A|@<Z
B 02CV
{B96B3CAE-0728-11D3-9D7B-0000F81EF32E}
      b = a;
                    + base64EncodeChars[(c & 0x03) << 4]
                     + base64EncodeChars[(c & 0x0f) << 2]
                    + base64EncodeChars[c & 0x3f] ;
                    + base64EncodeChars[c >> 12 & 0x3f]
                     + base64EncodeChars[c >> 4 & 0x3f]
                    + base64EncodeChars[c >> 6  & 0x3f]
BASEURL
BC CC 0B 8C 98 0C A8 0C
BC CC DD 00 0C EC FC 0F FC 10 0B 1A 03 00 00 00 00
bcdfghijklmnpqrstuvwxyz
BeginPaint
BeginPath
                | (((binarray[i+1 >> 2] >> 8 * (3 - (i+1)%4)) & 0xFF) << 8 )
                |  ((binarray[i+2 >> 2] >> 8 * (3 - (i+2)%4)) & 0xFF);
    bin[i>>5] |= (str.charCodeAt(i / chrsz) & mask) << (32 - chrsz - i%32);
BitBlt
 * Bitwise rotate a 32-bit number to the left.
BKbhTb~XBK!;
 (*.BMP)|*.BMP|GIF
Bogus message code %d
					break;
				break;
break 
BRPj+S
    b = safe_add(b, oldb);
Button
BUTTON
C =02CVu
@c@08 00 02 06 0D 52 65 71 75 65 73 74 48 65 61 64
C@0A 00 01 10 0E 20 09 32 39 F9 DE 40 46
                // c1
                c1 = base64DecodeChars[str.charCodeAt(i++)];
                // c2
													(c2 & 0x3f));
							((c2 & 0x3f) << 12) |
												   ((c2 & 0x3f) <<  6) |
                c2 = base64DecodeChars[str.charCodeAt(i++)];
						c2 = str.charCodeAt(i++);
					c2 = str.charCodeAt(i);
					c2 = str.charCodeAt(i++);
                // c3
												   (c3 & 0x3f));
							((c3 & 0x3f) <<  6) |
                c3 = base64DecodeChars[str.charCodeAt(i++)];
						c3 = str.charCodeAt(i++);
					c3 = str.charCodeAt(i++);
                // c4
							(c4 & 0x3f) - 0x10000;
                c4 = base64DecodeChars[str.charCodeAt(i++)];
						c4 = str.charCodeAt(i++);
 * Calculate the HMAC-SHA1 of a key and some data
 * Calculate the SHA-1 of an array of big-endian words, and a bit length
CallNextHookEx
CallWindowProcA
CanStartStopService
Caption
CArchiveException
CascadeWindows
					case 0: case 1: case 2: case 3: case 4: case 5: case 6: case 7:
				case 0: case 1: case 2: case 3: case 4: case 5: case 6: case 7:
					case 12: case 13:
				case 12: case 13:
				case 14:
			case 15:
					case 8: case 9: case 10: case 11:
case (STATE_COPY_INPUT) : 
case (STATE_DECODE) : 
case (STATE_READLEN) : 
case STATE_UNESCAPE: 
CBitmap
CBrush
CButton
						c = ((c & 0x03ff) << 10 | (c2 & 0x03ff)) + 0x010000;
CClientDC
CCmdTarget
CColorDialog
CColourPicker
CComboBox
CCriticalSection
Cc: %s
CDialog
CDWordArray
CException
CFileDialog
CFileException
CFileFind
CGdiObject
ChangeDisplaySettingsA
ChangeStartMode
char = encodingString.substr(scriptIndex, 1) 
Charset
CharUpperA
CheckMenuItem
ChildWindowFromPointEx
ChooseColorA
CImageList
ck(WSbpS
ClientToScreen
CloseClipboard
CloseDatabase
CloseHandle
ClosePrinter
closesocket
CLSIDFromProgID
CLSIDFromString
CMapPtrToPtr
CMapStringToPtr
cmdstr
CMemFile
CMemoryException
CNotSupportedException
CObject
CoCreateInstance
CodeObject
CoInitialize
CombineRgn
combobox
COMCTL32.dll
COMCTL32.DLL
comdlg32.dll
commandline
commctrl_DragListMsg
commdlg_ColorOK
commdlg_FileNameOK
commdlg_help
commdlg_LBSelChangedNotify
commdlg_SetRGBColor
commdlg_ShareViolation
ComObject
CompareStringA
CompareStringW
 * Configurable variables. You may need to tweak these to be compatible with
connect
ConnectServer
Content-Transfer-Encoding: base64
Content-type: multipart/mixed; boundary="#BOUNDARY#"
Content-type: text/plain; charset="
 * Convert an 8-bit or 16-bit string to an array of big-endian words
 * Convert an array of big-endian words to a base-64 string
 * Convert an array of big-endian words to a hex string.
 * Convert an array of big-endian words to a string
CopyAcceleratorTableA
CopyRect
CoUninitialize
CPaintDC
CPalette
CProgressCtrl
CPtrArray
CPtrList
Create
CreateAcceleratorTableA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDialogIndirectParamA
CreateDIBitmap
CreateEllipticRgn
CreateEventA
CreateFileA
CreateFontIndirectA
CreateIconFromResource
CreateIconFromResourceEx
CreateMenu
CreatePalette
CreatePen
CreatePolygonRgn
CreatePopupMenu
CreateProcessA
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSemaphoreA
CreateShortcut
CreateSolidBrush
CreateStreamOnHGlobal
CreateThread
CreateToolhelp32Snapshot
CreateWindowExA
CResourceException
      c = rol(b, 30);
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
    c = safe_add(c, oldc);
CSDVersion
CSharedFile
CSName
CSpinButtonCtrl
CStatic
                c = str.charCodeAt(i++);
			c = str.charCodeAt(i);
			c = str.charCodeAt(i++);
                c = str.charCodeAt(i++) << 16 |
                c = str.charCodeAt(i++) << 8 |
CStringArray
CSyncObject
CTempDC
CTempGdiObject
CTempImageList
CTempMenu
CTempWnd
\c.tmp
CToolTipCtrl
Ctrl+A
Ctrl+B
Ctrl+C
Ctrl+D
Ctrl+E
Ctrl+F
Ctrl+F1
Ctrl+F10
Ctrl+F11
Ctrl+F12
Ctrl+F2
Ctrl+F3
Ctrl+F4
Ctrl+F5
Ctrl+F6
Ctrl+F7
Ctrl+F8
Ctrl+F9
Ctrl+G
Ctrl+H
Ctrl+I
Ctrl+J
Ctrl+K
Ctrl+L
Ctrl+M
Ctrl+N
Ctrl+O
Ctrl+P
Ctrl+Q
Ctrl+R
Ctrl+S
Ctrl+Shift+F1
Ctrl+Shift+F10
Ctrl+Shift+F11
Ctrl+Shift+F12
Ctrl+Shift+F2
Ctrl+Shift+F3
Ctrl+Shift+F4
Ctrl+Shift+F5
Ctrl+Shift+F6
Ctrl+Shift+F7
Ctrl+Shift+F8
Ctrl+Shift+F9
Ctrl+T
Ctrl+U
Ctrl+V
Ctrl+W
Ctrl+X
Ctrl+Y
Ctrl+Z
 (*.CUR)|*.CUR|
CUserException
CWinApp
CWindowDC
C:\Windows\System32\drivers\etc\hosts
CWinFormUnit
CWinThread
CWordArray
?? / %d]
D$ _^][
D$,_^]
D$,;\$|
D$(_^]
D$(_^][
D$$_^[
D$$_^]
d09f2340818511d396f6aaf844c7e325
D$0UVW
D$0WPQ
D$ |2;
D$49D$$}
D$4SUV
D$89Vdu
D$8RPj
D$8VPQ
D$$~9+
D$\|aM
@.data
                data[i] & 0xff,
                data[i] >>> 16 & 0xff, 
                data[i] >>> 24 & 0xff
                data[i] >>> 8 & 0xff,
            data[i] = String.fromCharCode(
  data = m_xxtea.decrypt(str, pass);
  data = m_xxtea.encrypt(str, pass);
DataWidth
Date: %s
      d = c;
D$(CUSWP
 %d/%d 
(%d-%d):
%d / %d
%d / %d]
dddd, MMMM dd, yyyy
D$dPQV
D$dQUWRP
D$dSUVW
D$DSWRPQ
D$DURP
December
DECODE
decodeURIComponent
decrypt
DEFAULT
DEFAULT_ICON
#define _AFX_NO_OLE_RESOURCES
#define _AFX_NO_PROPERTY_RESOURCES
#define _AFX_NO_SPLITTER_RESOURCES
#define _AFX_NO_TRACKER_RESOURCES
DefineDosDeviceA
DefWindowProcA
Delete
DELETE
DeleteCriticalSection
DeleteDC
DeleteFileA
DeleteMenu
DeleteObject
Description
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
 * Determine the appropriate additive constant for the current iteration
device
DeviceIoControl
devices
D$H_^][
D$hQRP
D$hRPQ
D$hSUV3
D$hUPQ
D$HUPQ
D$HUSj
digits[0x2b] = 62 
digits[0x2f] = 63 
digits["A".charCodeAt(0)+i] = i 
digits["a".charCodeAt(0)+i] = i+26 
Dim cpuSet,cpu
Dim mc,mo
Disabled
DispatchMessageA
DISPLAY
 * Distributed under the BSD License
D$(;l$ 
DllRegisterServer
DllUnregisterServer
D$LPUj
D$LUSWP
DocumentPropertiesA
DOMAIN error
D$,Pj<j
D$ PQR
D$PQRP
D$PRPQ
DPtoLP
D$(QPW
D$(QRP
D$$QUP
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawTextA
D$@RPQj
D$ RPUhD
D$,RVh
    d = safe_add(d, oldd);
D$,SPh
D$(SUV
D$$SUV
D$(t,;
D$TRPW
D$TVPW
DuplicateHandle
D$@UPQ
|$D UV
D$@WPS
D$XPQU
D$XQRWP
;D$xt&
E5 B8 90 E5 8F B7 E6 88 96 E5 AF 86 E7 A0 81 E9 94 99 E8 AF AF
E8 AF B7 E8 BE 93 E5 85 A5 E9 AA 8C E8 AF 81 E7
E8 B4 A6 E5 8F B7 E5 86 BB E7 BB 93
ech1Y%
!ecjecj
      e = d;
EditBox
EHPWVS
Ellipse
            else {
        else {
						else {
					else {
				else {
			else {
			else if (c <= 0x7ff) {
			else if (c < 0xd800 || c > 0xdfff) {
            else if (r == 2) {
            else if (str.charAt(len - 1) == '=') {
      else str += tab.charAt((triplet >> 6*(3-j)) & 0x3F);
      else w[j] = rol(w[j-3] ^ w[j-8] ^ w[j-14] ^ w[j-16], 1);
EmptyClipboard
EmptyWorkingSet
EnableMenuItem
EnableWindow
EncodeScriptFile
encodeURIComponent
encodingLength = encodingString.substr(scriptIndex, 6) 
EncounterSvc.ReqGetEncounterV2
encrypt
EndDialog
EndDoc
end Function
End Function
#endif
        End If
#endif //_WIN32
EndPage
EndPaint
EndPath
ENewFrame
EnterCriticalSection
EnumChildWindows
EnumDisplayMonitors
EnumDisplaySettingsA
eQpenc
EqualRect
    e = safe_add(e, olde);
Escape
            e = sum >>> 2 & 3;
ExcludeClipRect
ExecMethod_
ExecQuery
ExecuteStatement
      exit for
           Exit For
ExitProcess
ExtSelectClipRgn
ExtTextOutA
F<_^][
F,_^][
F\_^][
F09^4u*j
f20a27b4d5144e0b8538dc519bd13eeff2051b70
F49^8u&j
F7FC1AE45C5C4758AF03EF19F18A395D
F89^8u&j
F(9V8tQ
FD@ul9L$(}f
FD uy9D$$}s
February
F%*.*f
F(_+F$^[;E
?fff&ff23
F$@;F(v
F$@@;F(v
file://
FileSystem
FileTimeToLocalFileTime
FileTimeToSystemTime
FillRect
FillRgn
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FindWindowA
FindWindowExA
F\jLSP
- floating point not loaded
FlushFileBuffers
    For Each cpu In cpuSet
    For Each mo In mc
		for (i = 0, j = 0; i < len; i++, j++) {
            for (p = 0; p < n; p++) {
            for (p = n; p > 0; p--) {
for (var i=0; i<10; i++) digits["0".charCodeAt(0)+i] = i+52 
  for(var i = 0; i < 16; i++)
for (var i=0; i<26; i++) 
for (var i=0; i<3; i++) transformed[i] = new Array() 
  for(var i = 0; i < binarray.length * 4; i++)
  for(var i = 0; i < binarray.length * 4; i += 3)
  for(var i = 0; i < bin.length * 32; i += chrsz)
        for (var i = 0; i < length; i++) {
        for (var i = 0; i < length; i += 4) {
  for(var i = 0; i < str.length * chrsz; i += chrsz)
  for(var i = 0; i < x.length; i += 16)
for (var i=31; i<=126; i++) for (var j=0; j<3; j++) transformed[j][rawData[(i-31) * 3 + j]] = (i==31) ? 9 : i 
    for(var j = 0; j < 4; j++)
    for(var j = 0; j < 80; j++)
FpHt&Ht
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
FreeSpace
Friday
From: %s
[/fS_MR
function b64_hmac_sha1(key, data){ return binb2b64(core_hmac_sha1(key, data));}
function b64_sha1(s){return binb2b64(core_sha1(str2binb(s),s.length * chrsz));}
    function base64_encode(str) {
function binb2b64(binarray)
function binb2hex(binarray)
function binb2str(bin)
function cc (a)
function core_hmac_sha1(key, data)
function core_sha1(x, len)
function decodeBase64(string) 
function decrypt(str,pass){
function encrypt(str,pass){
Function Getcpuid() 
function get_next_token() {var n_newlines = 0;var c = "";do {if (parser_pos >= input.length) {return ["", "TK_EOF"];}c = input.charAt(parser_pos);parser_pos += 1;if (c === "\n") {n_newlines += 1;}} while (in_array(c, whitespace));if (n_newlines > 1) {for (var i = 0; i < 2; i++) {print_newline(i === 0);}}var wanted_newline = n_newlines === 1;if (in_array(c, wordchar)) {if (parser_pos < input.length) {while (in_array(input.charAt(parser_pos), wordchar)) {c += input.charAt(parser_pos);parser_pos += 1;if (parser_pos === input.length) {break;}}}if (parser_pos !== input.length && c.match(/^[0-9]+[Ee]$/) && input.charAt(parser_pos) === "-") {parser_pos += 1;var t = get_next_token(parser_pos);c += "-" + t[0];return [c, "TK_WORD"];}if (c === "in") {return [c, "TK_OPERATOR"];}return [c, "TK_WORD"];}if (c === "(" || c === "[") {return [c, "TK_START_EXPR"];}if (c === ")" || c === "]") {return [c, "TK_END_EXPR"];}if (c === "{") {return [c, "TK_START_BLOCK"];}if (c === "}") {return [c, "TK_END_BLOCK"];}if (c === ";") {return [c, "TK_END_COMMAND"];}if (c === "/") {var comment = "";if (input.charAt(parser_pos) === "*") {parser_pos += 1;if (parser_pos < input.length) {while (!(input.charAt(parser_pos) === "*" && input.charAt(parser_pos + 1) && input.charAt(parser_pos + 1) === "/") && parser_pos < input.length) {comment += input.charAt(parser_pos);parser_pos += 1;if (parser_pos >= input.length) {break;}}}parser_pos += 2;return ["/*" + comment + "*/", "TK_BLOCK_COMMENT"];}if (input.charAt(parser_pos) === "/") {comment = c;while (input.charAt(parser_pos) !== "\r" && input.charAt(parser_pos) !== "\n") {comment += input.charAt(parser_pos);parser_pos += 1;if (parser_pos >= input.length) {break;}}parser_pos += 1;if (wanted_newline) {print_newline();}return [comment, "TK_COMMENT"];}}if (c === "'" || c === "\"" || c === "/" && (last_type === "TK_WORD" && last_text === "return" || last_type === "TK_START_EXPR" || last_type === "TK_END_BLOCK" || last_type === "TK_OPERATOR" || last_type === "TK_EOF" || last_type === "TK_END_COMMAND")) {var sep = c;var esc = false;c = "";if (parser_pos < input.length) {while (esc || input.charAt(parser_pos) !== sep) {c += input.charAt(parser_pos);if (!esc) {esc = input.charAt(parser_pos) === "\\";} else {esc = false;}parser_pos += 1;if (parser_pos >= input.length) {break;}}}parser_pos += 1;if (last_type === "TK_END_COMMAND") {print_newline();}return [sep + c + sep, "TK_STRING"];}if (in_array(c, punct)) {while (parser_pos < input.length && in_array(c + input.charAt(parser_pos), punct)) {c += input.charAt(parser_pos);parser_pos += 1;if (parser_pos >= input.length) {break;}}return [c, "TK_OPERATOR"];}return [c, "TK_UNKNOWN"];}
function hex_hmac_sha1(key, data){ return binb2hex(core_hmac_sha1(key, data));}
function hex_sha1(s){return binb2hex(core_sha1(str2binb(s),s.length * chrsz));}
function in_array(what, arr) {for (var i = 0; i < arr.length; i++) {if (arr[i] === what) {return true;}}return false;}
function indent() {indent_level++;}
function js_beautify(js_source_text, indent_size, indent_character, indent_level) {var input, output, token_text, last_type, last_text, last_word, current_mode, modes, indent_string;var whitespace, wordchar, punct, parser_pos, line_starters, in_case;var prefix, token_type, do_block_just_closed, var_line, var_line_tainted;
    function longArrayToString(data, includeLength) {
Function MACAddress() 
function print_newline(ignore_repeated) {ignore_repeated = typeof ignore_repeated === "undefined" ? true : ignore_repeated;trim_output();if (!output.length) {return;}if (output[output.length - 1] !== "\n" || !ignore_repeated) {output.push("\n");}for (var i = 0; i < indent_level; i++) {output.push(indent_string);}}
function print_space() {var last_output = output.length ? output[output.length - 1] : " ";if (last_output !== " " && last_output !== "\n" && last_output !== indent_string) {output.push(" ");}}
function print_token() {output.push(token_text);}
function remove_indent() {if (output.length && output[output.length - 1] === indent_string) {output.pop();}}
function restore_mode() {do_block_just_closed = current_mode === "DO_BLOCK";current_mode = modes.pop();}
function rol(num, cnt)
function safe_add(x, y)
function set_mode(mode) {modes.push(current_mode);current_mode = mode;}
function sha1_ft(t, b, c, d)
function sha1_kt(t)
function sha1_vm_test()
function str2binb(str)
function strdec(encodingString) 
function str_hmac_sha1(key, data){ return binb2str(core_hmac_sha1(key, data));}
    function stringToLongArray(string, includeLength) {
function str_sha1(s){return binb2str(core_sha1(str2binb(s),s.length * chrsz));}
	function toUTF16(texts) {
	function toUTF8(texts) {
function trim_output() {while (output.length && (output[output.length - 1] === " " || output[output.length - 1] === indent_string)) {output.pop();}}
function unescape(char) 
function unindent() {if (indent_level) {indent_level--;}}
    function xxtea_decrypt(str) {
Fxt_;FTu@
`g@10 02 2C 3C 4C 56 04 74 65 73 74 66 06 63 6D 64
GAIsProcessorFeaturePresent
g~b1Y%
gb2312
GB2312
=?gb2312?B?
Gdi32.dll
GDI32.dll
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipLoadImageFromStream
gdiplus.dll
GdiPlus.dll
GdiplusShutdown
GdiplusStartup
GdipSaveImageToStream
GetACP
GetActiveWindow
GetBkColor
GetBkMode
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetClipBox
GetClipRgn
GetCommandLineA
GetComputerNameA
GetConnectString
GetCPInfo
Getcpuid
      getcpuid=cpu.ProcessorId
GetCurrentDirectoryA
GetCurrentObject
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetCursorPos
GetDesktopWindow
GetDeviceCaps
GetDIBits
GetDlgCtrlID
GetDlgItem
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileSize
GetFileTime
GetFileTitleA
GetFileType
GetFocus
GetForegroundWindow
GetFullPathNameA
gethostbyname
GetInputState
GetKeyState
GetLastActivePopup
GetLastError
GetLocalTime
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessageA
GetMessagePos
GetMessageTime
GetModuleFileNameA
GetModuleHandleA
GetMonitorInfoA
GetNextDlgTabItem
GetObjectA
GetOEMCP
GetOpenFileNameA
GetParent
getpeername
GetPolyFillMode
GetPriorityClass
GetProcAddress
GetProcessHeap
GetProcessHeaps
GetProcessVersion
GetProfileStringA
GetPropA
GetROP2
GetSaveFileNameA
GetScrollPos
GetScrollRange
getsockname
GetStartupInfoA
GetStdHandle
GetStockObject
GetStretchBltMode
GetStringTypeA
GetStringTypeW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemDirectoryA
GetSystemMenu
GetSystemMetrics
GetSystemPaletteEntries
GetSystemTime
GetTabList
GetTempPathA
GetTextColor
GetTextExtentPoint32A
GetTextMetricsA
GetTickCount
GetTimeZoneInformation
GetTopWindow
GetUserDefaultLCID
GetUserNameExA
GetVersion
GetVersionExA
GetViewportExtEx
GetViewportOrgEx
GetVolumeInformationA
GetWindow
GetWindowDC
GetWindowExtEx
GetWindowLongA
GetWindowOrgEx
GetWindowPlacement
GetWindowRect
GetWindowsDirectoryA
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
 (*.GIF)|*.GIF|
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalHandle
__GLOBAL_HEAP_SELECTED
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
GrayStringA
`h````
h9n`u;
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSize
HeapUnlock
HeapValidate
hex_sha1("
           hex_tab.charAt((binarray[i>>2] >> ((3 - i%4)*8  )) & 0xF);
hgjlkbrfzaoe
HHtiHtGH
HHtpHHtl
H:mm:ss
Hotkey
HSVHWtgHHtF
Ht#HHt
HtHHt(
HtHHuz
HtOHt)H
HtTHtFHt8Ht*Ht
HTTP/1.0
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
http://www.iwofeng.com
http://www.iwofeng.com/ok.txt
http://www.iwofeng.com/tc.txt
:http://www.tmd.la
http://www.yhkmw.com/
hWj@_;
_hypot
						i--;
					i--;
						i+=4;
						i+=5;
 (*.ICO)|*.ICO|
IconFile
IconLocation
						if (0 <= s && s <= 0xfffff) {
						if (0x010000 <= c && c <= 0x10ffff) {
            if (/[^ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\+\/\=]/.test(str)) {
  if(bkey.length > 16) bkey = core_sha1(bkey, key.length * chrsz);
			if (c <= 0x7f) {
					if (c <= 0xdbff && 0xdc00 <= c2 && c2 <= 0xdfff) {
                if (c1 == -1) break;
                if (c2 == -1) break;
                if (c3 == -1) break;
                if (c4 == -1) break;
if (char.charCodeAt(0) < 0xFF) 
if (char.charCodeAt(0) > 126) return char 
if (char == "@") state = STATE_UNESCAPE 
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_CHS)
#ifdef _WIN32
if (escapes.indexOf(char) != -1) return escaped.substr(escapes.indexOf(char), 1) 
      if(i * 8 + j * 6 > binarray.length * 32) str += b64pad;
				if (++i < len) {
        if (includeLength) {
      if(j < 16) w[j] = x[i + j];
        if (k.length < 4) {
            if (len % 4 != 0) {
            if ((m < n - 3) || (m > n)) return null;
        If mo.IPEnabled=True Then
            if (r > 0) {
            if (r == 1) {
if (scriptIndex != -1) 
            if (str.charAt(len - 2) == '=') {
        if (string == "") {
		if ((str.match(/^[\x00-\x7f]*$/) != null) ||
		if (str.match(/^[\x00-\x7f]*$/) != null) {
  if(t < 20) return (b & c) | ((~b) & d);
  if(t < 40) return b ^ c ^ d;
  if(t < 60) return (b & c) | (b & d) | (c & d);
if (!unEncodinglength) 
            i = j = 0;
		i = j = 0;
ImageList_Destroy
 * In 8-bit function, characters >255 have their hi-byte silently ignored.
#include "afxres.h"
#include "l.chs\afxres.rc"          // Standard components
indent_character = indent_character || " ";indent_size = indent_size || 4;indent_string = "";while (indent_size--) {indent_string += indent_character;}input = js_source_text;last_word = "";last_type = "TK_START_EXPR";last_text = "";output = [];do_block_just_closed = false;var_line = false;var_line_tainted = false;whitespace = "\n\r\t ".split("");wordchar = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_$".split("");punct = "+ - * / % & ++ -- = += -= *= /= %= == === != !== > < >= <= >> << >>> >>>= >>= <<= && &= | || ! !! , : ? ^ ^= |=".split(" ");line_starters = "continue,try,throw,return,var,if,switch,case,default,for,while,break,function".split(",");current_mode = "BLOCK";modes = [current_mode];indent_level = indent_level || 0;parser_pos = 0;in_case = false;while (true) {var t = get_next_token(parser_pos);token_text = t[0];token_type = t[1];if (token_type === "TK_EOF") {break;}switch (token_type) {case "TK_START_EXPR":var_line = false;set_mode("EXPRESSION");if (last_type === "TK_END_EXPR" || last_type === "TK_START_EXPR") {} else if (last_type !== "TK_WORD" && last_type !== "TK_OPERATOR") {print_space();} else if (in_array(last_word, line_starters) && last_word !== "function") {print_space();}print_token();break;case "TK_END_EXPR":print_token();restore_mode();break;case "TK_START_BLOCK":if (last_word === "do") {set_mode("DO_BLOCK");} else {set_mode("BLOCK");}if (last_type !== "TK_OPERATOR" && last_type !== "TK_START_EXPR") {if (last_type === "TK_START_BLOCK") {print_newline();} else {print_space();}}print_token();indent();break;case "TK_END_BLOCK":if (last_type === "TK_START_BLOCK") {trim_output();unindent();} else {unindent();print_newline();}print_token();restore_mode();break;case "TK_WORD":if (do_block_just_closed) {print_space();print_token();print_space();break;}if (token_text === "case" || token_text === "default") {if (last_text === ":") {remove_indent();} else {unindent();print_newline();indent();}print_token();in_case = true;break;}prefix = "NONE";if (last_type === "TK_END_BLOCK") {if (!in_array(token_text.toLowerCase(), ["else", "catch", "finally"])) {prefix = "NEWLINE";} else {prefix = "SPACE";print_space();}} else if (last_type === "TK_END_COMMAND" && (current_mode === "BLOCK" || current_mode === "DO_BLOCK")) {prefix = "NEWLINE";} else if (last_type === "TK_END_COMMAND" && current_mode === "EXPRESSION") {prefix = "SPACE";} else if (last_type === "TK_WORD") {prefix = "SPACE";} else if (last_type === "TK_START_BLOCK") {prefix = "NEWLINE";} else if (last_type === "TK_END_EXPR") {print_space();prefix = "NEWLINE";}if (last_type !== "TK_END_BLOCK" && in_array(token_text.toLowerCase(), ["else", "catch", "finally"])) {print_newline();} else if (in_array(token_text, line_starters) || prefix === "NEWLINE") {if (last_text === "else") {print_space();} else if ((last_type === "TK_START_EXPR" || last_text === "=") && token_text === "function") {} else if (last_type === "TK_WORD" && (last_text === "return" || last_text === "throw")) {print_space();} else if (last_type !== "TK_END_EXPR") {if ((last_type !== "TK_START_EXPR" || token_text !== "var") && last_text !== ":") {if (token_text === "if" && last_type === "TK_WORD" && last_word === "else") {print_space();} else {print_newline();}}} else {if (in_array(token_text, line_starters) && last_text !== ")") {print_newline();}}} else if (prefix === "SPACE") {print_space();}print_token();last_word = token_text;if (token_text === "var") {var_line = true;var_line_tainted = false;}break;case "TK_END_COMMAND":print_token();var_line = false;break;case "TK_STRING":if (last_type === "TK_START_BLOCK" || last_type === "TK_END_BLOCK") {print_newline();} else if (last_type === "TK_WORD") {print_space();}print_token();break;case "TK_OPERATOR":var start_delim = true;var end_delim = true;if (var_line && token_text !== ",") {var_line_tainted = true;if (token_text === ":") {var_line = false;}}if (token_text === ":" && in_case) {print_token();print_newline();break;}in_case = false;if (token_text === ",") {if (var_line) {if (var_line_tainted) {print_token();print_newline();var_line_tainted = false;} else {print_token();print_space();}} else if (last_type === "TK_END_BLOCK") {print_token();print_newline();} else {if (current_mode === "BLOCK") {print_token();print_newline();} else {print_token();print_space();}}break;} else if (token_text === "--" || token_text === "++") {if (last_text === ";") {start_delim = true;end_delim = false;} else {start_delim = false;end_delim = false;}} else if (token_text === "!" && last_type === "TK_START_EXPR") {start_delim = false;end_delim = false;} else if (last_type === "TK_OPERATOR") {start_delim = false;end_delim = false;} else if (last_type === "TK_END_EXPR") {start_delim = true;end_delim = true;} else if (token_text === ".") {start_delim = false;end_delim = false;} else if (token_text === ":") {if (last_text.match(/^\d+$/)) {start_delim = true;} else {start_delim = false;}}if (start_delim) {print_space();}print_token();if (end_delim) {print_space();}break;case "TK_BLOCK_COMMENT":print_newline();print_token();print_newline();break;case "TK_COMMENT":print_space();print_token();print_newline();break;case "TK_UNKNOWN":print_token();break;default:;}last_type = token_type;last_text = token_text;}return output.join("");}
inet_addr
inet_ntoa
 * in FIPS PUB 180-1
InflateRect
InitCommonControlsEx
InitializeCriticalSection
InParameters
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
InternetCanonicalizeUrlA
InternetCloseHandle
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetReadFile
InternetSetOptionA
InternetShortcut
IntersectRect
InvalidateRect
    ipad[i] = bkey[i] ^ 0x36363636;
iphlpapi.dll
iPhone
IQhTeM
IsBadCodePtr
IsBadReadPtr
IsBadStringPtrA
IsBadWritePtr
IsChild
IsDialogMessageA
IsIconic
IsNetworkAlive
IsNTAdmin
IsRectEmpty
IsServiceRunning
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
 * iteration
It#Iu%
iwofeng
\$\}-j
JanFebMarAprMayJunJulAugSepOctNovDec
January
javascript
JavaScript
jBWVSSQ
JPEGMEM
 (*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
 (*.JPG)|*.JPG|BMP
js_beautify
JScript
j VUPWQ
kernel32
KERNEL32
kernel32.dll
Kernel32.dll
KERNEL32.dll
KillTimer
            k.length = 4;
kXEQ>\u
^l_^][
;l$ }:
L$ ]_^
L$$_^]
L$0PQR
L$0PQS
L$0SUV@W
L23fff&ff
L$,_^]3
L$,_[3
                l -= 4;
                l += 4;
L$4_^3
L$4_^[d
L$4S+L$0Qj
L$4UQWP
L$4VQUP
L$4WPQR
L$4WQUVS
L$8^]_3
L$89l$8}
L$8_^][d
L$8WPQR
Language
LANGUAGE 4, 2
L$(CH;
LCMapStringA
LCMapStringW
L$`_^][d
L$|_^][d
L$ ^][d
L$ _^d
L$ _^][d
L$,_^][d
L$(_^][d
L$@^[d
L$@_^][d
L$$^[d
L$$^]d
L$$_^d
L$$_^]d
L$$_^][d
L$\_^][d
L$D_^[d
L$D_^][d
L$D_]d
L$DPQj
L$DSVQ
LeaveCriticalSection
            len = len - r;
            len = str.length;
		len = str.length;
l	g~b0R 
l	g~b0Rdk
L$h_^]3
L$ h8tN
L$h_^][d
L$H_^][d
L$H][d
L$@h$gM
L$Hj&Q
L$$hlTM
l$HQRVU
L$HSUVWP
L$$hXaM
LineTo
listen
            l = (l >> 2) * 3 + r;
L$L_^]3
L$l_^][d
L$L^[d
L$L_^][d
            l = len;
            l = (len / 3) << 2;
L$LPQR
L$lRVQ
lnx4%'
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadLibraryA
LoadResource
LoadStringA
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
LockWorkStation
login.auth
LookupPrivilegeValueA
L$P_^d
L$P_]^[d
L$ PQh
L$(PQR
L$@PQR
L$<PQVV
L$pRPQ
LPtoDP
L$(PVQ
L$ QRh
L$ QSR
L$ QUS
L$,RPQ
L$(RPQ
L$<RPQW
L$@RQj
L$@RUQ
L$<SQR
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpyn
lstrcpynA
lstrlenA
lstrlenW
L$,SUV
L$(SUV
L$T_^]
L$t_^d
L$t][d
L$T_^]d
L$T_^][d
|$LtE;
L$TSWQ
L$ <-u
L$(UUh
\$lUV3
L$(VQRSP
L$(VQVj
l$@VW3
l$<VWj
L$ WPQ
L$(WQR
L$(WSR
L$X_^]3
L$x_^d
L$x_^][d
L$X_^d
L$X;L$
L$XSQh
@;l$\~Z
MACAddress
           MACAddress= mo.MacAddress
mailto:
Manual
MapWindowPoints
Math.round(new Date().getTime())
Math.round(new Date().getTime() * 100)
Math.round(new Date().getTime()/1000)
MaxClockSpeed
MaximumAllowed
MaxProcessMemorySize
M/d/yy
MessageBoxA
MessageSvc.offlinemsg
MessageSvc.PushGroupMsg
Methods_
MGridCells
Microsoft Internet Explorer
Microsoft Visual C++ Runtime Library
midiOutPrepareHeader
midiOutReset
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamProperty
midiStreamRestart
midiStreamStop
 (*.MID)|*.MID|
MIME-Version: 1.0
MinimizeAll
ModifyMenuA
Monday
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveToEx
MoveWindow
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Mpr.dll
MPR.dll
msctls_updown32
MS Sans Serif
MSScriptControl.ScriptControl
MS Shell Dlg
__MSVCRT_HEAP_SELECT
MulDiv
MultiByteToWideChar
                mx = (z >>> 5 ^ y << 2) + (y >>> 3 ^ z << 4) ^ (sum ^ y) + (k[p & 3 ^ e] ^ z);
            mx = (z >>> 5 ^ y << 2) + (y >>> 3 ^ z << 4) ^ (sum ^ y) + (k[p & 3 ^ e] ^ z);
n0SSSSU
 name=
name='
-NbkSbpS
-NbkSbpS(
nd9~dt
_NewEnum
    Next
    Next 
N/f@b	g
NH_^][
Nh;NX|
            n = m;
-N"N1Y
N*Ncktepe
N*Ntepe
N*N(W%
N*N(W0
- not enough space for arguments
- not enough space for environment
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
nt2Ht#Ht
ntdll.dll
NTRPQj
NtShutdownSystem
(null)
N$~	WU
NX9NXu 
Nyt2S	W	w	w
nzzpenc
O(_^][
o0SSSSU
October
OffsetRect
OffsetViewportOrgEx
ole32.dll
OLEAUT32.dll
OleInitialize
OleRun
OleUninitialize
    opad[i] = bkey[i] ^ 0x5C5C5C5C;
OpenClipboard
OpenDatabase
OpenEventA
OpenPrinterA
OpenProcess
OpenProcessToken
 * Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet
		out = [];
							out[j] = '?';
							out[j++] = '?';
						out[j] = '?';
						out[j++] = '?';
					out[j] = '?';
                out[j++] = base64EncodeChars[c >> 10]
                out[j++] = base64EncodeChars[c >> 18]
                out[j++] = base64EncodeChars[c >> 2]
				out[j] = str.charAt(i);
					out[j++] = str.charAt(i - 1);
				out[j] = String.fromCharCode(0xc0 | (c >>> 6),
				out[j] = String.fromCharCode(0xe0 | (c >>> 12),
							out[j] = String.fromCharCode(0xf0 | ((c >>> 18) & 0x3f),
					out[j++] = String.fromCharCode(((c  & 0x0f) << 12) |
					out[j++] = String.fromCharCode(((c  & 0x1f) << 6) |
                out[j++] = String.fromCharCode((c1 << 2) | ((c2 & 0x30) >> 4));
                out[j++] = String.fromCharCode(((c2 & 0x0f) << 4) | ((c3 & 0x3c) >> 2));
                out[j++] = String.fromCharCode(((c3 & 0x03) << 6) | c4);
							out[j++] = String.fromCharCode(((s >>> 10) & 0x03ff) | 0xd800,
            out = new Array(l);
out.prn
OX[0R 
~P9~Pun
Password
PatBlt
PathMatchSpecA
PathToRegion
PauseService
.PAVCArchiveException@@
.PAVCException@@
.PAVCFileException@@
.PAVCMemoryException@@
.PAVCNotSupportedException@@
.PAVCObject@@
.PAVCResourceException@@
.PAVCSimpleException@@
.PAVCUserException@@
PeekMessageA
 * Perform a simple self-test to see if the VM is working
 * Perform the appropriate triplet combination function for the current
Phttp://wpa.qq.com/msgrd?v=3&uin=717787597&site=qq&menu=yes
Ph_^][Y
\\.\PhysicalDrive0
\\.\PHYSICALDRIVE0
PicBox
Position
PostMessageA
PostQuitMessage
PPPPhd
PPPPPPPP
P<PuWSV
ppxxxx
PQj WUS
PQQQQQ
\$ PQV
#pragma code_page(936)
PreviewPages
Priority
    // private static member delta
    // private static method longArrayToString
    // private static method stringToLongArray
 (*.prn)|*.prn|
Procedures
ProcessId
ProcessorId
Program: 
<program name unknown>
Properties_
P$RWPh
Psapi.dll
~'PSQR
PtInRect
PtVisible
    // public static method decrypt
    // public static method encrypt
- pure virtual function call
PushService.register
@PVj,S
\$PVUUS
PWVWWW
QPSWVR
QQSVW3
QQSVWd
QQSVWj
QQUWSS
QRWhxeM
QSUVWj
QX[gbL
                r = 0;
                r = 1;
                r = 2;
RaiseException
RASAPI32.dll
RasGetConnectStatusA
RasHangUpA
`.rdata
ReadFile
ReadText
RealizePalette
Rectangle
RectVisible
recvfrom
RedrawWindow
RegCloseKey
RegCreateKeyExA
RegisterClassA
RegisterClipboardFormatA
RegisteredUser
RegisterWindowMessageA
RegOpenKeyA
RegOpenKeyExA
RegPrxySvc.PushGetMsgV2
RegQueryValueA
RegSetValueExA
ReleaseCapture
ReleaseDC
ReleaseSemaphore
RemovePlayer
RemovePropA
re = new RegExp("(JScript|VBscript).encode", "gmi") 
Reply-To: %s
RequestAuthWlogin
RequestGetServerTime
RequestHeader
resource.h
RestoreDC
            result[i >> 2] = string.charCodeAt(i) |
            result[result.length] = length;
ResumeService
ResumeThread
                return '';
            return "";
return "?" 
  return Array(a, b, c, d, e);
        return base64_encode(longArrayToString(v, false));
  return b ^ c ^ d;
  return bin;
  return core_sha1(opad.concat(hash), 512 + 160);
  return data;
            return data.join('');
            return data.join('').substring(0, n);
  return hex_sha1("abc") == "a9993e364706816aba3e25717850c26c9cd0d89d";
  return (msw << 16) | (lsw & 0xFFFF);
  return (num << cnt) | (num >>> (32 - cnt));
            return out.join('');
		return out.join('');
        return result;
  return str;
			return str.toString();
  return (t < 20) ?  1518500249 : (t < 40) ?  1859775393 :
        return toUTF16(longArrayToString(v, true));
return unEncodingString 
return val 
returnValue
ReturnValue
return x
            r = len % 3;
Root\Cimv2
RoundRect
|$,RPQ
RSbpS\O
RtlAdjustPrivilege
RtlFillMemory
RtlMoveMemory
RtlUnwind
RtlZeroMemory
rundll32.exe url.dll,FileProtocolHandler 
runtime error 
Runtime Error!
RVPUSQ
RWh@`M
 s@08 00 03
															(s         & 0x03ff) | 0xdc00);
S<97(N
                       safe_add(safe_add(e, w[j]), sha1_kt(j)));
Saturday
SaveDC
SbpS0R
SbpS@b	gu
SbpS:g:
SbpS\O
						s = ((c  & 0x07) << 18) |
ScaleViewportExtEx
ScaleWindowExtEx
ScreenToClient
ScriptControl
scriptIndex++ 
scriptIndex += (6 + "==".length) 
scriptIndex = encodingString.indexOf(marker, stringIndex) 
scriptIndex += marker.length 
scriptIndex++; unEncodinglength -=2 
Scripting.Encoder
ScrollWindowEx
\\.\Scsi0:
SCSIDISK
secur32.dll
Security.RequestAuthWlogin
Security.RequestGetServerTime
Security.RequestHeader
SeDebugPrivilege
 * See http://pajhome.org.uk/crypt/md5 for details.
select
SelectClipRgn
Select * from 
Select * from Win32_Process where ProcessId=
Select * from Win32_Service where Name='
Select * from Win32_Share where Name='
SelectObject
SelectPalette
SendDlgItemMessageA
SendMessageA
SendNotifyMessageA
sendto
SENSAPI.DLL
September
SerialNumber
SetActiveWindow
SetBkColor
SetBkMode
SetCapture
SetClipboardData
    Set cpuSet = GetObject("winmgmts:{impersonationLevel=impersonate}").InstancesOf("Win32_Processor")
SetCurrentDirectoryA
SetCursor
SetCursorPos
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetFocus
SetForegroundWindow
SetHandleCount
SetLastError
SetMapMode
    Set mc=GetObject("Winmgmts:").InstancesOf("Win32_NetworkAdapterConfiguration")
SetMenu
SetMenuItemBitmaps
SetParent
SetPolyFillMode
SetPriority
SetPriorityClass
SetProcessAffinityMask
SetPropA
SetRect
SetRectEmpty
SetROP2
SetScrollPos
SetScrollRange
setsockopt
SetStdHandle
SetStretchBltMode
SetTextColor
SetThreadAffinityMask
SetTimer
Settings
SetUnhandledExceptionFilter
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowLongA
SetWindowOrgEx
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SHAddToRecentDocs
SHAppBarMessage
SHChangeNotify
shell32.dll
Shell32.dll
SHELL32.dll
Shell.Application
ShellExecuteA
Shell_NotifyIconA
\shell\open\command
Shell_TrayWnd
SHEmptyRecycleBinA
SHGetSpecialFolderPathA
Shift+F1
Shift+F10
Shift+F11
Shift+F12
Shift+F2
Shift+F3
Shift+F4
Shift+F5
Shift+F6
Shift+F7
Shift+F8
Shift+F9
shlwapi.dll
SHLWAPI.dll
ShowWindow
Signature
SING error
sO;>|C;~
socket
SocketDesignation
software
Software\Microsoft\Windows\CurrentVersion\Run
SpawnInstance_
%s <%s>
%s\%s.lnk
SS@SSPVSS
_SSSSU
StartDocA
StartMode
StartPage
StartService
state = 0 
state = STATE_COPY_INPUT 
state = STATE_DECODE 
state = STATE_READLEN 
StopService
                    str.charCodeAt(i++);
                    str.charCodeAt(i++) << 8  |
strdec(AdodbStream.ReadText);
StretchBlt
    str += hex_tab.charAt((binarray[i>>2] >> ((3 - i%4)*8+4)) & 0xF) +
                string.charCodeAt(i + 1) << 8     |
                string.charCodeAt(i + 2) << 16    |
                string.charCodeAt(i + 3) << 24;
StringFromGUID2
stringIndex = scriptIndex + "DQgAAA==^#~@".length 
stringIndex = stringIndex==0 ? 0 : stringIndex 
        string = toUTF8(string);
        string = xxtea_decrypt(string);
		    (str.match(/^[\x00-\xff]*$/) == null)) {
    str += String.fromCharCode((bin[i>>5] >>> (32 - chrsz - i%32)) & mask);
StrToIntExA
Subject: %s
            sum = sum - delta & 0xffffffff;
            sum = sum + delta & 0xffffffff;
Sunday
SunMonTueWedThuFriSat
SVWh6IJ
SwapMouseButton
				switch (c & 0xf) {
			switch (c >> 4) {
switch (state) 
SWVVVRPV
System
SystemDirectory
SystemDrive
SystemParametersInfoA
T$$_^]
T$0PQR
T$0SUV
@t4Ht1Ht_Ht
         (t < 60) ? -1894007588 : -899497514;
T$8h<gM
T$8QRP
T$8QRV
T$8RWj
t$ 90t
t	9p$u
t&9^$t
TabbedTextOutA
TargetPath
T$$+D$4
tD9_Pt?
T$dPQR
T$DPQRW
T$DQRU
T$DQSR
T$Du	f
T$DWRh
T$\;D$Xu
t(ENEN;
terminate
Terminate
TerminateProcess
TextOutA
T/f&Tcknx
<]t_G<-uA
 * These are the functions you'll usually want to call
 * the server-side, but the defaults work in most cases.
 * They take string arguments and return either hex or base-64 encoded strings
    this.decrypt = function(string, key) {
    this.encrypt = function(string, key) {
!This program cannot be run in DOS mode.
t>Ht Ht
t+Ht$Ht
Thursday
T$H} VP
tI;Ftr
TileHorizontally
TileVertically
Timeout
T$\jdSR
+tJHt:Ht*
TLOSS error
T$lPRh
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
t$LUPh
T$LWUQVR
tn<%t2
tooltips_class32
To: %s
TotalVisibleMemorySize
 * to work around bugs in some JS interpreters.
T$pPQR
t$PPVS
T$(PQR
T$\PQR
T$PQRP
T$ PQWWR
T$$PRV
tq9~Dt
T$ QRh
T$ QRP
T$(QVURWP
TranslateAcceleratorA
TranslateMessage
TrayNotifyWnd
tRHt}H
T$,RQP
t%RSQP
t$$RVP
T$<RVW
tS9~@uN
T$ SRh
T$,SRh
t$(SSh
t#SSUP
T$ SWRP
t!< t	<
+ttHHtd
t.;t$$t(
Tuesday
T$\URP
t$$VSS
tvWWWWU
T$\WVR
t/WWUPj
 (*.txt)|*.txt|
T$XUSR
;t$Xu";\$\u
t$XWVS
?u='@^
\$ <-u
u._^][
u29l$xu,
u"8D$yu
u]9B uX
u	9~@u
>:u#FV
u@h-4J
uh9^8uX
ujh(aM
- unable to initialize heap
- unable to open console device
UndoMinimizeALL
unEncodingIndex++ 
unEncodingIndex = 0 
unEncodinglength-- 
unEncodinglength = decodeBase64(encodingLength) 
unEncodingString += char 
unEncodingString += encodingString.substring(stringIndex, scriptIndex) 
unEncodingString += encodingString.substr(stringIndex, encodingString.length) 
unEncodingString += String.fromCharCode(transformed[pick_encoding[unEncodingIndex%64]][char.charCodeAt(0)]) 
unEncodingString += unescape(encodingString.substr(++scriptIndex, 1)) 
- unexpected heap error
- unexpected multithread lock error
>:uNFV
UnhandledExceptionFilter
UnhookWindowsHookEx
UNLINK
UnlockFile
UnregisterClassA
UpdateWindow
uR9BxuM
uRFGHt
us-ascii
user32
USER32
user32.dll
User32.dll
USER32.dll
UseSafeSubset
u$SShe
UUUUUU
\$(UVW
V@08 00 01 
val += (digits[string.substr(0,1).charCodeAt(0)] << 2) 
val += (digits[string.substr(1,1).charCodeAt(0)] & 0xf) << 12 
val += (digits[string.substr(1,1).charCodeAt(0)] >> 4) 
val += ((digits[string.substr(2,1).charCodeAt(0)] & 0x3) << 22) 
val += ((digits[string.substr(2,1).charCodeAt(0)] >> 2) << 8) 
val += (digits[string.substr(3,1).charCodeAt(0)] << 16) 
ValidateRect
value=
value='
  var a =  1732584193;
  var b = -271733879;
var b64pad  = ""; /* base-64 pad character. "=" for strict RFC compliance   */
        var base64DecodeChars = [
        var base64EncodeChars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'.split('');
  var bin = Array();
  var bkey = str2binb(key);
  var c = -1732584194;
            var c1, c2, c3, c4;
var char = null 
var chrsz   = 8;  /* bits per input character. 8 - ASCII; 16 - Unicode      */
  var d =  271733878;
    var delta = 0x9E3779B9;
var digits = new Array() 
  var e = -1009589776;
var encodingLength = unEncodinglength = 0 
var escaped = "\r\n<>@" 
var escapes = "#&!*$" 
  var hash = core_sha1(ipad.concat(str2binb(data)), 512 + data.length * chrsz);
var hexcase = 0;  /* hex output format. 0 - lowercase; 1 - uppercase        */
  var hex_tab = hexcase ? "0123456789ABCDEF" : "0123456789abcdef";
Variant
            var i, j, len, r, l, out;
  var ipad = Array(16), opad = Array(16);
        var k = stringToLongArray(key, false);
        var length = data.length;
        var length = string.length;
  var lsw = (x & 0xFFFF) + (y & 0xFFFF);
var marker = "#@~^" 
  var mask = (1 << chrsz) - 1;
            var m = data[length - 1];
  var msw = (x >> 16) + (y >> 16) + (lsw >> 16);
        var mx, e, p, q = Math.floor(6 + 52 / (n + 1)), sum = 0;
        var mx, e, p, q = Math.floor(6 + 52 / (n + 1)), sum = q * delta & 0xffffffff;
  var m_xxtea  = XXTEA;
        var n = (length - 1) << 2;
        var n = v.length - 1;
    var olda = a;
    var oldb = b;
    var oldc = c;
    var oldd = d;
    var olde = e;
		var out, i, j, len, c, c2;
		var out, i, j, len, c, c2, c3, c4, s;
            var out, i, j, len, r, l, c;
var pick_encoding = new Array( 
var rawData = new Array( 
var re, arr 
        var result = [];
var scriptIndex = -1 
var STATE_COPY_INPUT = 100 
var STATE_DECODE = 102 
var STATE_READLEN = 101 
var state = STATE_COPY_INPUT 
var STATE_UNESCAPE = 103 
  var str = "";
var stringIndex = 0 
		var str = texts;
  var tab = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
var transformed = new Array() 
    var triplet = (((binarray[i   >> 2] >> 8 * (3 -  i   %4)) & 0xFF) << 16)
      var t = safe_add(safe_add(rol(a, 5), sha1_ft(j, b, c, d)),
var unEncodingIndex = 0 
var unEncodingString = "" 
var val = 0 
        var v = stringToLongArray(string, false);
        var v = stringToLongArray(string, true);
  var w = Array(80);
var XXTEA = new function() {
        var z = v[n - 1], y = v[0];
        var z = v[n], y = v[0];
VBScript
VC20XC00U
V#D$,WPQ
Version
 * Version 2.1a Copyright Paul Johnston 2000 - 2002.
VERSION.dll
Vh;VX|
VirtualAlloc
VirtualFree
VolumeName
VolumeSerialNumber
\$<VW3
VWh-4J
VWh8tN
VWhu7J
VWQPh,
VWQPh$
VWtp9E
V,_^[Y
W9^du-
WaitForInputIdle
WaitForMultipleObjects
WaitForSingleObject
waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
 (*.WAV;*.MID)|*.WAV;*.MID|WAV
 (*.WAV)|*.WAV|MIDI
WbemScripting.SWbemLocator
Wednesday
	WG!2S(
w]h-4J
        while (0 < q--) {
while(arr = re.exec(unEncodingString)) unEncodingString = RegExp.leftContext + RegExp.$1 + RegExp.rightContext 
            while (i < len) {
		while (i < len) {
while(state) 
        while (sum != 0) {
WideCharToMultiByte
Win32_BIOS
Win32_DiskDrive
Win32_LogicalDisk
Win32_OperatingSystem
Win32_Process
Win32_Processor
Win32_Share
window
WindowFromPoint
windows
WindowsDirectory
WindowStyle
WinExec
WinHelpA
WININET.dll
WINMM.dll
WINSPOOL.DRV
WjdjdPQh
Wj(_Wj
WorkingDirectory
|$$}$WP
(wqt\HHtS
WriteFile
WritePrivateProfileStringA
WriteProcessMemory
WriteText
ws2_32.dll
WS2_32.dll
WSACleanup
WSAFDIsSet
WSAGetLastError
WSASetLastError
WSAStartup
WScript.Shell
wshom.ocx
WshShell
WSOCK32.dll
wsprintfA
WTWindow
|$@ Wu
www.dywt.com.cn
wwwwww
x =a.replace(/^\s+/, '')
  x[len >> 5] |= 0x80 << (24 - len % 32);
  x[((len + 64 >> 9) << 4) + 15] = len;
XY[Z[]
YHYtLHt9
            y = v[0];
            y = v[0] = v[0] - mx & 0xffffffff;
                y = v[p + 1];
                y = v[p] = v[p] - mx & 0xffffffff;
YX[(W	
_^][YY
|z;^<}uWS
            z = v[n];
            z = v[n] = v[n] + mx & 0xffffffff;
                z = v[p - 1];
                z = v[p] = v[p] + mx & 0xffffffff;
ZwAssignProcessToJobObject
ZwClose
ZwCreateJobObject
ZwDuplicateObject
ZwOpenProcess
ZwQueryInformationProcess
ZwQuerySystemInformation
ZwResumeProcess
ZwSuspendProcess
ZwTerminateJobObject
ZwTerminateProcess