Analysis Date | 2014-08-18 04:23:54 |
---|---|
MD5 | f2cc3cf678bcee6b6935b2d3d37fc377 |
SHA1 | d55c51902ea6c6baa54e7d28c182f6b6c9374689 |
Static Details:
File type | PE32 executable for MS Windows (GUI) Intel 80386 32-bit | |
---|---|---|
Section | .text md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0 | |
Section | .rdata md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0 | |
Section | .data md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0 | |
Section | .rsrc md5: 5c4c9819d0e095524c776910486a1962 sha1: 3476cc477e5823186e33985b371de171442df4b1 size: 12288 | |
Section | .vmp0 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0 | |
Section | .vmp1 md5: 04bbdffac2f0e90da5e4323d0b09bdd2 sha1: 0bb7f421f4dc63b7fd77906bff472cd8999bf105 size: 1429504 | |
Section | .reloc md5: f62384b72dcf6e1523b0b1e29b69ec9e sha1: 8f5a2467a92149e4caaf5b68d745c42e67444923 size: 4096 | |
Timestamp | 2012-02-10 10:30:03 | |
Version | LegalCopyright: 作者版权所有 请尊重并使用正版 FileVersion: 2.5.0.0 Comments: 本程序使用易语言编写(http://www.eyuyan.com) ProductName: 逆天 ProductVersion: 2.5.0.0 FileDescription: 易语言程序 | |
PEhash | ccd776ced6a4e10fa1370a5d91dfb59ff43b5575 | |
IMPhash | fd1f4da873df97e4c6613062d3de2da6 | |
AV | 360 Safe | Gen:Heur.PWSIME.2 |
AV | Ad-Aware | Gen:Heur.PWSIME.2 |
AV | Alwil (avast) | no_virus |
AV | Arcabit (arcavir) | Heur.W32 |
AV | Authentium | no_virus |
AV | Avira (antivir) | TR/Agent.1449984.62 |
AV | CA (E-Trust Ino) | no_virus |
AV | CAT (quickheal) | no_virus |
AV | ClamAV | no_virus |
AV | Dr. Web | Trojan.PWS.Wsgame.44345 |
AV | Emsisoft | Gen:Heur.PWSIME.2 |
AV | Eset (nod32) | no_virus |
AV | Fortinet | W32/FlyStudio_Packed.Y |
AV | Frisk (f-prot) | no_virus |
AV | F-Secure | Gen:Heur.PWSIME.2 |
AV | Grisoft (avg) | SHeur4.ZKT |
AV | Ikarus | Gen.Heur |
AV | K7 | no_virus |
AV | Kaspersky | Trojan.Win32.Reconyc.cask |
AV | MalwareBytes | no_virus |
AV | Mcafee | no_virus |
AV | Microsoft Security Essentials | no_virus |
AV | MicroWorld (escan) | Gen:Heur.PWSIME.2 |
AV | Norman | winpe/Suspicious_Gen4.AAHKI |
AV | Rising | no_virus |
AV | Sophos | no_virus |
AV | Symantec | no_virus |
AV | Trend Micro | no_virus |
AV | VirusBlokAda (vba32) | HackTool.Sniffer.WpePro |
AV | Yara APT | no_virus |
AV | Zillya! | no_virus |
Runtime Details:
Screenshot | ![]() |
---|
Process
↳ C:\malware.exe
Registry | HKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝ NULL |
---|---|
Registry | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝ 1 |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\logo[1].gif |
Creates File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\xiaoyuang.ys168[1].htm |
Creates File | \Device\Afd\AsyncConnectHlp |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temp\30e0_appcompat.txt |
Creates File | C:\windows\svchost.exe |
Creates File | C:\Documents and Settings\Administrator\Cookies\index.dat |
Creates File | PIPE\lsarpc |
Creates File | \Device\Afd\Endpoint |
Creates File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012014081820140819\index.dat |
Deletes File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013061320130614\index.dat |
Deletes File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013052720130603\index.dat |
Creates Process | C:\WINDOWS\system32\drwtsn32 -p 1236 -e 176 -g |
Creates Process | C:\WINDOWS\system32\dwwin.exe -x -s 360 |
Creates Process | C:\windows\svchost.exe |
Creates Mutex | _!SHMSFTHISTORY!_ |
Creates Mutex | c:!documents and settings!administrator!local settings!history!history.ie5! |
Creates Mutex | c:!documents and settings!administrator!local settings!history!history.ie5!mshist012014081820140819! |
Creates Mutex | WininetConnectionMutex |
Creates Mutex | c:!documents and settings!administrator!cookies! |
Creates Mutex | c:!documents and settings!administrator!local settings!temporary internet files!content.ie5! |
Winsock DNS | www.11111wg.com |
Winsock DNS | www.7798k.com |
Winsock DNS | www.5213dy.com |
Winsock DNS | xiaoyuang.ys168.com |
Winsock DNS | www.0419dj.com |
Winsock DNS | www.11111wg.net |
Process
↳ C:\windows\svchost.exe
Registry | HKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝ NULL |
---|---|
Registry | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝ 1 |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\logo[2].gif |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\logo[1].gif |
Creates File | C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat |
Creates File | \Device\Afd\AsyncConnectHlp |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\logo[1].gif |
Creates File | C:\Documents and Settings\Administrator\Cookies\index.dat |
Creates File | PIPE\lsarpc |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\3214[1].htm |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\52shanhu[1].htm |
Creates File | \Device\Afd\Endpoint |
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\feixiandao.uueasy[1].htm |
Winsock DNS | www.5266.me |
Winsock DNS | feixiandao.uueasy.com |
Winsock DNS | www.7798k.com |
Winsock DNS | www.5213dy.com |
Winsock DNS | www.3214.cn |
Winsock DNS | www.0419dj.com |
Winsock DNS | www.lelev8.net |
Winsock DNS | www.ewasai.com |
Winsock DNS | www.7799k.com |
Winsock DNS | 7798k.com |
Winsock DNS | www.1314521li.com |
Winsock DNS | www.1314521kan.com |
Winsock DNS | www.87dyw.com |
Winsock DNS | www.llv8.cc |
Winsock DNS | www.52shanhu.com |
Winsock DNS | www.11111wg.com |
Winsock DNS | www.6699kan.com |
Winsock DNS | www.0419kan.com |
Winsock DNS | www.66iu.com |
Winsock DNS | www.le6tv.com |
Winsock DNS | www.6625.me |
Winsock DNS | www.11111wg.net |
Process
↳ C:\WINDOWS\system32\dwwin.exe -x -s 360
Process
↳ C:\WINDOWS\system32\drwtsn32 -p 1236 -e 176 -g
Network Details:
DNS | xiaoyuang.ys168.com Type: A 222.73.47.229 |
---|---|
DNS | www.0419dj.com Type: A 59.45.79.57 |
DNS | www.6699kan.com Type: A 23.110.26.14 |
DNS | www.52shanhu.com Type: A 209.222.14.3 |
DNS | a.uueasy.com Type: A 42.120.63.199 |
DNS | www.87dyw.com Type: A 192.187.97.125 |
DNS | 39712.vhost13.cloudvhost.net Type: A 116.255.200.35 |
DNS | www.7799k.com Type: A 23.80.195.34 |
DNS | www.11111wg.com Type: A |
DNS | www.11111wg.net Type: A |
DNS | www.5213dy.com Type: A |
DNS | www.7798k.com Type: A |
DNS | 7798k.com Type: A |
DNS | www.le6tv.com Type: A |
DNS | feixiandao.uueasy.com Type: A |
DNS | www.6625.me Type: A |
DNS | www.ewasai.com Type: A |
DNS | www.5266.me Type: A |
DNS | www.3214.cn Type: A |
DNS | www.lelev8.net Type: A |
DNS | www.66iu.com Type: A |
DNS | www.llv8.cc Type: A |
DNS | www.1314521kan.com Type: A |
DNS | www.1314521li.com Type: A |
DNS | www.0419kan.com Type: A |
HTTP GET | http://xiaoyuang.ys168.com/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.0419dj.com/0419 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://xiaoyuang.ys168.com/logo.gif User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.0419dj.com/nitian.htm User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.6699kan.com/tongji/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.52shanhu.com/1.htm User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.52shanhu.com/jueai.htm User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://feixiandao.uueasy.com/index-htm-m-bbs-cateid-6.html User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://feixiandao.uueasy.com/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.87dyw.com/tv/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.87dyw.com/wstv User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.0419dj.com/tongji User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.3214.cn/?jueai User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.7799k.com/tongji/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.52shanhu.com/ User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://feixiandao.uueasy.com/logo.gif User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.3214.cn/logo.gif User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
HTTP GET | http://www.52shanhu.com/logo.gif User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) |
Flows TCP | 192.168.1.1:1032 ➝ 222.73.47.229:80 |
Flows TCP | 192.168.1.1:1034 ➝ 59.45.79.57:80 |
Flows TCP | 192.168.1.1:1035 ➝ 222.73.47.229:80 |
Flows TCP | 192.168.1.1:1037 ➝ 59.45.79.57:80 |
Flows TCP | 192.168.1.1:1038 ➝ 23.110.26.14:80 |
Flows TCP | 192.168.1.1:1040 ➝ 209.222.14.3:80 |
Flows TCP | 192.168.1.1:1039 ➝ 209.222.14.3:80 |
Flows TCP | 192.168.1.1:1041 ➝ 42.120.63.199:80 |
Flows TCP | 192.168.1.1:1042 ➝ 42.120.63.199:80 |
Flows TCP | 192.168.1.1:1043 ➝ 192.187.97.125:80 |
Flows TCP | 192.168.1.1:1044 ➝ 192.187.97.125:80 |
Flows TCP | 192.168.1.1:1046 ➝ 59.45.79.57:80 |
Flows TCP | 192.168.1.1:1047 ➝ 116.255.200.35:80 |
Flows TCP | 192.168.1.1:1048 ➝ 23.80.195.34:80 |
Flows TCP | 192.168.1.1:1049 ➝ 209.222.14.3:80 |
Flows TCP | 192.168.1.1:1050 ➝ 42.120.63.199:80 |
Flows TCP | 192.168.1.1:1051 ➝ 116.255.200.35:80 |
Flows TCP | 192.168.1.1:1052 ➝ 209.222.14.3:80 |
Raw Pcap
0x00000000 (00000) 47455420 2f204854 54502f31 2e310d0a GET / HTTP/1.1.. 0x00000010 (00016) 41636365 70743a20 2a2f2a0d 0a416363 Accept: */*..Acc 0x00000020 (00032) 6570742d 4c616e67 75616765 3a20656e ept-Language: en 0x00000030 (00048) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco 0x00000040 (00064) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl 0x00000050 (00080) 6174650d 0a557365 722d4167 656e743a ate..User-Agent: 0x00000060 (00096) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co 0x00000070 (00112) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6 0x00000080 (00128) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5 0x00000090 (00144) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL 0x000000a0 (00160) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho 0x000000b0 (00176) 73743a20 7869616f 7975616e 672e7973 st: xiaoyuang.ys 0x000000c0 (00192) 3136382e 636f6d0d 0a436f6e 6e656374 168.com..Connect 0x000000d0 (00208) 696f6e3a 204b6565 702d416c 6976650d ion: Keep-Alive. 0x000000e0 (00224) 0a0d0a ... 0x00000000 (00000) 47455420 2f6c6f67 6f2e6769 66204854 GET /logo.gif HT 0x00000010 (00016) 54502f31 2e310d0a 41636365 70743a20 TP/1.1..Accept: 0x00000020 (00032) 2a2f2a0d 0a526566 65726572 3a206874 */*..Referer: ht 0x00000030 (00048) 74703a2f 2f786961 6f797561 6e672e79 tp://xiaoyuang.y 0x00000040 (00064) 73313638 2e636f6d 2f0d0a41 63636570 s168.com/..Accep 0x00000050 (00080) 742d4c61 6e677561 67653a20 656e2d75 t-Language: en-u 0x00000060 (00096) 730d0a41 63636570 742d456e 636f6469 s..Accept-Encodi 0x00000070 (00112) 6e673a20 677a6970 2c206465 666c6174 ng: gzip, deflat 0x00000080 (00128) 650d0a55 7365722d 4167656e 743a204d e..User-Agent: M 0x00000090 (00144) 6f7a696c 6c612f34 2e302028 636f6d70 ozilla/4.0 (comp 0x000000a0 (00160) 61746962 6c653b20 4d534945 20362e30 atible; MSIE 6.0 0x000000b0 (00176) 3b205769 6e646f77 73204e54 20352e31 ; Windows NT 5.1 0x000000c0 (00192) 3b205356 313b202e 4e455420 434c5220 ; SV1; .NET CLR 0x000000d0 (00208) 322e302e 35303732 37290d0a 486f7374 2.0.50727)..Host 0x000000e0 (00224) 3a207869 616f7975 616e672e 79733136 : xiaoyuang.ys16 0x000000f0 (00240) 382e636f 6d0d0a43 6f6e6e65 6374696f 8.com..Connectio 0x00000100 (00256) 6e3a204b 6565702d 416c6976 650d0a0d n: Keep-Alive... 0x00000110 (00272) 0a . 0x00000000 (00000) 47455420 2f303431 39204854 54502f31 GET /0419 HTTP/1 0x00000010 (00016) 2e310d0a 41636365 70743a20 2a2f2a0d .1..Accept: */*. 0x00000020 (00032) 0a416363 6570742d 4c616e67 75616765 .Accept-Language 0x00000030 (00048) 3a20656e 2d75730d 0a416363 6570742d : en-us..Accept- 0x00000040 (00064) 456e636f 64696e67 3a20677a 69702c20 Encoding: gzip, 0x00000050 (00080) 6465666c 6174650d 0a557365 722d4167 deflate..User-Ag 0x00000060 (00096) 656e743a 204d6f7a 696c6c61 2f342e30 ent: Mozilla/4.0 0x00000070 (00112) 2028636f 6d706174 69626c65 3b204d53 (compatible; MS 0x00000080 (00128) 49452036 2e303b20 57696e64 6f777320 IE 6.0; Windows 0x00000090 (00144) 4e542035 2e313b20 5356313b 202e4e45 NT 5.1; SV1; .NE 0x000000a0 (00160) 5420434c 5220322e 302e3530 37323729 T CLR 2.0.50727) 0x000000b0 (00176) 0d0a486f 73743a20 7777772e 30343139 ..Host: www.0419 0x000000c0 (00192) 646a2e63 6f6d0d0a 436f6e6e 65637469 dj.com..Connecti 0x000000d0 (00208) 6f6e3a20 4b656570 2d416c69 76650d0a on: Keep-Alive.. 0x000000e0 (00224) 0d0a0a ... 0x00000000 (00000) 47455420 2f6e6974 69616e2e 68746d20 GET /nitian.htm 0x00000010 (00016) 48545450 2f312e31 0d0a4163 63657074 HTTP/1.1..Accept 0x00000020 (00032) 3a202a2f 2a0d0a41 63636570 742d4c61 : */*..Accept-La 0x00000030 (00048) 6e677561 67653a20 656e2d75 730d0a41 nguage: en-us..A 0x00000040 (00064) 63636570 742d456e 636f6469 6e673a20 ccept-Encoding: 0x00000050 (00080) 677a6970 2c206465 666c6174 650d0a55 gzip, deflate..U 0x00000060 (00096) 7365722d 4167656e 743a204d 6f7a696c ser-Agent: Mozil 0x00000070 (00112) 6c612f34 2e302028 636f6d70 61746962 la/4.0 (compatib 0x00000080 (00128) 6c653b20 4d534945 20362e30 3b205769 le; MSIE 6.0; Wi 0x00000090 (00144) 6e646f77 73204e54 20352e31 3b205356 ndows NT 5.1; SV 0x000000a0 (00160) 313b202e 4e455420 434c5220 322e302e 1; .NET CLR 2.0. 0x000000b0 (00176) 35303732 37290d0a 486f7374 3a207777 50727)..Host: ww 0x000000c0 (00192) 772e3034 3139646a 2e636f6d 0d0a436f w.0419dj.com..Co 0x000000d0 (00208) 6e6e6563 74696f6e 3a204b65 65702d41 nnection: Keep-A 0x000000e0 (00224) 6c697665 0d0a0d0a live.... 0x00000000 (00000) 47455420 2f746f6e 676a692f 20485454 GET /tongji/ HTT 0x00000010 (00016) 502f312e 310d0a41 63636570 743a202a P/1.1..Accept: * 0x00000020 (00032) 2f2a0d0a 41636365 70742d4c 616e6775 /*..Accept-Langu 0x00000030 (00048) 6167653a 20656e2d 75730d0a 41636365 age: en-us..Acce 0x00000040 (00064) 70742d45 6e636f64 696e673a 20677a69 pt-Encoding: gzi 0x00000050 (00080) 702c2064 65666c61 74650d0a 55736572 p, deflate..User 0x00000060 (00096) 2d416765 6e743a20 4d6f7a69 6c6c612f -Agent: Mozilla/ 0x00000070 (00112) 342e3020 28636f6d 70617469 626c653b 4.0 (compatible; 0x00000080 (00128) 204d5349 4520362e 303b2057 696e646f MSIE 6.0; Windo 0x00000090 (00144) 7773204e 5420352e 313b2053 56313b20 ws NT 5.1; SV1; 0x000000a0 (00160) 2e4e4554 20434c52 20322e30 2e353037 .NET CLR 2.0.507 0x000000b0 (00176) 3237290d 0a486f73 743a2077 77772e36 27)..Host: www.6 0x000000c0 (00192) 3639396b 616e2e63 6f6d0d0a 436f6e6e 699kan.com..Conn 0x000000d0 (00208) 65637469 6f6e3a20 4b656570 2d416c69 ection: Keep-Ali 0x000000e0 (00224) 76650d0a 0d0a7975 616e672e 79733136 ve....yuang.ys16 0x000000f0 (00240) 382e636f 6d0d0a43 6f6e6e65 6374696f 8.com..Connectio 0x00000100 (00256) 6e3a204b 6565702d 416c6976 650d0a0d n: Keep-Alive... 0x00000110 (00272) 0a . 0x00000000 (00000) 47455420 2f6a7565 61692e68 746d2048 GET /jueai.htm H 0x00000010 (00016) 5454502f 312e310d 0a416363 6570743a TTP/1.1..Accept: 0x00000020 (00032) 202a2f2a 0d0a4163 63657074 2d4c616e */*..Accept-Lan 0x00000030 (00048) 67756167 653a2065 6e2d7573 0d0a4163 guage: en-us..Ac 0x00000040 (00064) 63657074 2d456e63 6f64696e 673a2067 cept-Encoding: g 0x00000050 (00080) 7a69702c 20646566 6c617465 0d0a5573 zip, deflate..Us 0x00000060 (00096) 65722d41 67656e74 3a204d6f 7a696c6c er-Agent: Mozill 0x00000070 (00112) 612f342e 30202863 6f6d7061 7469626c a/4.0 (compatibl 0x00000080 (00128) 653b204d 53494520 362e303b 2057696e e; MSIE 6.0; Win 0x00000090 (00144) 646f7773 204e5420 352e313b 20535631 dows NT 5.1; SV1 0x000000a0 (00160) 3b202e4e 45542043 4c522032 2e302e35 ; .NET CLR 2.0.5 0x000000b0 (00176) 30373237 290d0a48 6f73743a 20777777 0727)..Host: www 0x000000c0 (00192) 2e353273 68616e68 752e636f 6d0d0a43 .52shanhu.com..C 0x000000d0 (00208) 6f6e6e65 6374696f 6e3a204b 6565702d onnection: Keep- 0x000000e0 (00224) 416c6976 650d0a0d 0a5802d9 7360090d Alive....X..s`.. 0x000000f0 (00240) 5705230d ed1b9117 e2183ca2 c01732a7 W.#.......<...2. 0x00000100 (00256) 605b1f55 19ea8990 fe251b88 4ba926e2 `[.U.....%..K.&. 0x00000110 (00272) 89ae7906 ec8494aa 66a9a328 7fc75f32 ..y.....f..(.._2 0x00000120 (00288) c94841ed 8a13ceda f9e74043 b5b17729 .HA.......@C..w) 0x00000130 (00304) e6b30344 a2f460b8 28ed9273 5116f895 ...D..`.(..sQ... 0x00000140 (00320) 61f8e1 a.. 0x00000000 (00000) 47455420 2f312e68 746d2048 5454502f GET /1.htm HTTP/ 0x00000010 (00016) 312e310d 0a416363 6570743a 202a2f2a 1.1..Accept: */* 0x00000020 (00032) 0d0a4163 63657074 2d4c616e 67756167 ..Accept-Languag 0x00000030 (00048) 653a2065 6e2d7573 0d0a4163 63657074 e: en-us..Accept 0x00000040 (00064) 2d456e63 6f64696e 673a2067 7a69702c -Encoding: gzip, 0x00000050 (00080) 20646566 6c617465 0d0a5573 65722d41 deflate..User-A 0x00000060 (00096) 67656e74 3a204d6f 7a696c6c 612f342e gent: Mozilla/4. 0x00000070 (00112) 30202863 6f6d7061 7469626c 653b204d 0 (compatible; M 0x00000080 (00128) 53494520 362e303b 2057696e 646f7773 SIE 6.0; Windows 0x00000090 (00144) 204e5420 352e313b 20535631 3b202e4e NT 5.1; SV1; .N 0x000000a0 (00160) 45542043 4c522032 2e302e35 30373237 ET CLR 2.0.50727 0x000000b0 (00176) 290d0a48 6f73743a 20777777 2e353273 )..Host: www.52s 0x000000c0 (00192) 68616e68 752e636f 6d0d0a43 6f6e6e65 hanhu.com..Conne 0x000000d0 (00208) 6374696f 6e3a204b 6565702d 416c6976 ction: Keep-Aliv 0x000000e0 (00224) 650d0a0d 0aa4c4a8 10e84510 5ee65c99 e.........E.^.\. 0x000000f0 (00240) b42af6d0 75a2200f 57e0a28a 80053de0 .*..u. .W.....=. 0x00000100 (00256) 0x00000000 (00000) 47455420 2f777374 76204854 54502f31 GET /wstv HTTP/1 0x00000010 (00016) 2e310d0a 41636365 70743a20 2a2f2a0d .1..Accept: */*. 0x00000020 (00032) 0a416363 6570742d 4c616e67 75616765 .Accept-Language 0x00000030 (00048) 3a20656e 2d75730d 0a416363 6570742d : en-us..Accept- 0x00000040 (00064) 456e636f 64696e67 3a20677a 69702c20 Encoding: gzip, 0x00000050 (00080) 6465666c 6174650d 0a557365 722d4167 deflate..User-Ag 0x00000060 (00096) 656e743a 204d6f7a 696c6c61 2f342e30 ent: Mozilla/4.0 0x00000070 (00112) 2028636f 6d706174 69626c65 3b204d53 (compatible; MS 0x00000080 (00128) 49452036 2e303b20 57696e64 6f777320 IE 6.0; Windows 0x00000090 (00144) 4e542035 2e313b20 5356313b 202e4e45 NT 5.1; SV1; .NE 0x000000a0 (00160) 5420434c 5220322e 302e3530 37323729 T CLR 2.0.50727) 0x000000b0 (00176) 0d0a486f 73743a20 7777772e 38376479 ..Host: www.87dy 0x000000c0 (00192) 772e636f 6d0d0a43 6f6e6e65 6374696f w.com..Connectio 0x000000d0 (00208) 6e3a204b 6565702d 416c6976 650d0a0d n: Keep-Alive... 0x000000e0 (00224) 0ac1686d 069b550a f7d4d169 18802492 ..hm..U....i..$. 0x000000f0 (00240) ec810914 8b3a586d b62afb30 5ea56c6d .....:Xm.*.0^.lm 0x00000100 (00256) f54ce74a 70547270 6113a5e1 83cc49e2 .L.JpTrpa.....I. 0x00000110 (00272) 4a81b20e db71 J....q 0x00000000 (00000) 47455420 2f696e64 65782d68 746d2d6d GET /index-htm-m 0x00000010 (00016) 2d626273 2d636174 6569642d 362e6874 -bbs-cateid-6.ht 0x00000020 (00032) 6d6c2048 5454502f 312e310d 0a416363 ml HTTP/1.1..Acc 0x00000030 (00048) 6570743a 202a2f2a 0d0a4163 63657074 ept: */*..Accept 0x00000040 (00064) 2d4c616e 67756167 653a2065 6e2d7573 -Language: en-us 0x00000050 (00080) 0d0a4163 63657074 2d456e63 6f64696e ..Accept-Encodin 0x00000060 (00096) 673a2067 7a69702c 20646566 6c617465 g: gzip, deflate 0x00000070 (00112) 0d0a5573 65722d41 67656e74 3a204d6f ..User-Agent: Mo 0x00000080 (00128) 7a696c6c 612f342e 30202863 6f6d7061 zilla/4.0 (compa 0x00000090 (00144) 7469626c 653b204d 53494520 362e303b tible; MSIE 6.0; 0x000000a0 (00160) 2057696e 646f7773 204e5420 352e313b Windows NT 5.1; 0x000000b0 (00176) 20535631 3b202e4e 45542043 4c522032 SV1; .NET CLR 2 0x000000c0 (00192) 2e302e35 30373237 290d0a48 6f73743a .0.50727)..Host: 0x000000d0 (00208) 20666569 7869616e 64616f2e 75756561 feixiandao.uuea 0x000000e0 (00224) 73792e63 6f6d0d0a 436f6e6e 65637469 sy.com..Connecti 0x000000f0 (00240) 6f6e3a20 4b656570 2d416c69 76650d0a on: Keep-Alive.. 0x00000100 (00256) 0d0a2712 66951a40 e10a3d21 12725115 ..'.f..@..=!.rQ. 0x00000110 (00272) 1b2559e9 .%Y. 0x00000000 (00000) 47455420 2f204854 54502f31 2e310d0a GET / HTTP/1.1.. 0x00000010 (00016) 41636365 70743a20 2a2f2a0d 0a416363 Accept: */*..Acc 0x00000020 (00032) 6570742d 4c616e67 75616765 3a20656e ept-Language: en 0x00000030 (00048) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco 0x00000040 (00064) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl 0x00000050 (00080) 6174650d 0a557365 722d4167 656e743a ate..User-Agent: 0x00000060 (00096) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co 0x00000070 (00112) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6 0x00000080 (00128) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5 0x00000090 (00144) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL 0x000000a0 (00160) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho 0x000000b0 (00176) 73743a20 66656978 69616e64 616f2e75 st: feixiandao.u 0x000000c0 (00192) 75656173 792e636f 6d0d0a43 6f6e6e65 ueasy.com..Conne 0x000000d0 (00208) 6374696f 6e3a204b 6565702d 416c6976 ction: Keep-Aliv 0x000000e0 (00224) 650d0a0d 0ac4b491 4647ac36 43930448 e.......FG.6C..H 0x000000f0 (00240) 8b5f96e1 e174851d ec400b10 80 ._...t...@... 0x00000000 (00000) 47455420 2f6c6f67 6f2e6769 66204854 GET /logo.gif HT 0x00000010 (00016) 54502f31 2e310d0a 41636365 70743a20 TP/1.1..Accept: 0x00000020 (00032) 2a2f2a0d 0a526566 65726572 3a206874 */*..Referer: ht 0x00000030 (00048) 74703a2f 2f666569 7869616e 64616f2e tp://feixiandao. 0x00000040 (00064) 75756561 73792e63 6f6d2f0d 0a416363 uueasy.com/..Acc 0x00000050 (00080) 6570742d 4c616e67 75616765 3a20656e ept-Language: en 0x00000060 (00096) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco 0x00000070 (00112) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl 0x00000080 (00128) 6174650d 0a557365 722d4167 656e743a ate..User-Agent: 0x00000090 (00144) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co 0x000000a0 (00160) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6 0x000000b0 (00176) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5 0x000000c0 (00192) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL 0x000000d0 (00208) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho 0x000000e0 (00224) 73743a20 66656978 69616e64 616f2e75 st: feixiandao.u 0x000000f0 (00240) 75656173 792e636f 6d0d0a43 6f6e6e65 ueasy.com..Conne 0x00000100 (00256) 6374696f 6e3a204b 6565702d 416c6976 ction: Keep-Aliv 0x00000110 (00272) 650d0a0d 0a636f75 6c64206e 6f742075 e....could not u 0x00000120 (00288) 6e646572 7374616e 642e3c2f 703e0a20 nderstand.</p>. 0x00000130 (00304) 2020203c 703e4e6f 20737563 68206669 <p>No such fi 0x00000140 (00320) 6c65206f 72206469 72656374 6f72792e le or directory. 0x00000150 (00336) 3c2f703e 0a20203c 6872202f 3e0a2020 </p>. <hr />. 0x00000160 (00352) 3c616464 72657373 3e4d6963 726f736f <address>Microso 0x00000170 (00368) 66742d49 49532f37 2e303c2f 61646472 ft-IIS/7.0</addr 0x00000180 (00384) 6573733e 0a20203c 2f626f64 793e0a3c ess>. </body>.< 0x00000190 (00400) 2f68746d 6c3e0ad7 b6e9befd 268ca3a7 /html>......&... 0x000001a0 (00416) 84dff284 31 ....1 0x00000000 (00000) 47455420 2f74762f 20485454 502f312e GET /tv/ HTTP/1. 0x00000010 (00016) 310d0a41 63636570 743a202a 2f2a0d0a 1..Accept: */*.. 0x00000020 (00032) 41636365 70742d4c 616e6775 6167653a Accept-Language: 0x00000030 (00048) 20656e2d 75730d0a 41636365 70742d45 en-us..Accept-E 0x00000040 (00064) 6e636f64 696e673a 20677a69 702c2064 ncoding: gzip, d 0x00000050 (00080) 65666c61 74650d0a 55736572 2d416765 eflate..User-Age 0x00000060 (00096) 6e743a20 4d6f7a69 6c6c612f 342e3020 nt: Mozilla/4.0 0x00000070 (00112) 28636f6d 70617469 626c653b 204d5349 (compatible; MSI 0x00000080 (00128) 4520362e 303b2057 696e646f 7773204e E 6.0; Windows N 0x00000090 (00144) 5420352e 313b2053 56313b20 2e4e4554 T 5.1; SV1; .NET 0x000000a0 (00160) 20434c52 20322e30 2e353037 3237290d CLR 2.0.50727). 0x000000b0 (00176) 0a486f73 743a2077 77772e38 37647977 .Host: www.87dyw 0x000000c0 (00192) 2e636f6d 0d0a436f 6e6e6563 74696f6e .com..Connection 0x000000d0 (00208) 3a204b65 65702d41 6c697665 0d0a0d0a : Keep-Alive.... 0x000000e0 (00224) 244d9de0 3d98d66f 9d40d4b1 e20cdbb3 $M..=..o.@...... 0x000000f0 (00240) 70c79587 f9f080e8 389108e8 804bc287 p.......8....K.. 0x00000100 (00256) 872e5498 d00bbd78 80793037 1f500195 ..T....x.y07.P.. 0x00000110 (00272) 0a07a130 01b428a0 851312bd 50d9e0f2 ...0..(.....P... 0x00000120 (00288) ea8062ad 311317c4 e607b450 6d08ff47 ..b.1......Pm..G 0x00000130 (00304) 83fef123 0a5f0ab6 468a197c 0ca56009 ...#._..F..|..`. 0x00000140 (00320) 7b { 0x00000000 (00000) 47455420 2f3f6a75 65616920 48545450 GET /?jueai HTTP 0x00000010 (00016) 2f312e31 0d0a4163 63657074 3a202a2f /1.1..Accept: */ 0x00000020 (00032) 2a0d0a41 63636570 742d4c61 6e677561 *..Accept-Langua 0x00000030 (00048) 67653a20 656e2d75 730d0a41 63636570 ge: en-us..Accep 0x00000040 (00064) 742d456e 636f6469 6e673a20 677a6970 t-Encoding: gzip 0x00000050 (00080) 2c206465 666c6174 650d0a55 7365722d , deflate..User- 0x00000060 (00096) 4167656e 743a204d 6f7a696c 6c612f34 Agent: Mozilla/4 0x00000070 (00112) 2e302028 636f6d70 61746962 6c653b20 .0 (compatible; 0x00000080 (00128) 4d534945 20362e30 3b205769 6e646f77 MSIE 6.0; Window 0x00000090 (00144) 73204e54 20352e31 3b205356 313b202e s NT 5.1; SV1; . 0x000000a0 (00160) 4e455420 434c5220 322e302e 35303732 NET CLR 2.0.5072 0x000000b0 (00176) 37290d0a 486f7374 3a207777 772e3332 7)..Host: www.32 0x000000c0 (00192) 31342e63 6e0d0a43 6f6e6e65 6374696f 14.cn..Connectio 0x000000d0 (00208) 6e3a204b 6565702d 416c6976 650d0a0d n: Keep-Alive... 0x000000e0 (00224) 0a3c01d0 76027916 70824c23 a63ace7c .<..v.y.p.L#.:.| 0x000000f0 (00240) 8ea211ac 840c210f 50400ba8 920c1138 ......!.P@.....8 0x00000100 (00256) 40285ca1 90ca2ab5 91816d44 235ec9c4 @(\...*...mD#^.. 0x00000110 (00272) f234428f c5cc41 .4B...A 0x00000000 (00000) 47455420 2f746f6e 676a6920 48545450 GET /tongji HTTP 0x00000010 (00016) 2f312e31 0d0a4163 63657074 3a202a2f /1.1..Accept: */ 0x00000020 (00032) 2a0d0a41 63636570 742d4c61 6e677561 *..Accept-Langua 0x00000030 (00048) 67653a20 656e2d75 730d0a41 63636570 ge: en-us..Accep 0x00000040 (00064) 742d456e 636f6469 6e673a20 677a6970 t-Encoding: gzip 0x00000050 (00080) 2c206465 666c6174 650d0a55 7365722d , deflate..User- 0x00000060 (00096) 4167656e 743a204d 6f7a696c 6c612f34 Agent: Mozilla/4 0x00000070 (00112) 2e302028 636f6d70 61746962 6c653b20 .0 (compatible; 0x00000080 (00128) 4d534945 20362e30 3b205769 6e646f77 MSIE 6.0; Window 0x00000090 (00144) 73204e54 20352e31 3b205356 313b202e s NT 5.1; SV1; . 0x000000a0 (00160) 4e455420 434c5220 322e302e 35303732 NET CLR 2.0.5072 0x000000b0 (00176) 37290d0a 486f7374 3a207777 772e3034 7)..Host: www.04 0x000000c0 (00192) 3139646a 2e636f6d 0d0a436f 6e6e6563 19dj.com..Connec 0x000000d0 (00208) 74696f6e 3a204b65 65702d41 6c697665 tion: Keep-Alive 0x000000e0 (00224) 0d0a0d0a e11cf6cd 827948ba fd1a8e34 .........yH....4 0x000000f0 (00240) f1ba78e3 df9228db 8d01a22a a250ca70 ..x...(....*.P.p 0x00000100 (00256) b78b9010 8c510a8c 810fed28 563b0dad .....Q.....(V;.. 0x00000110 (00272) 5f4c0aa3 bd36eb54 88d18984 d09402d1 _L...6.T........ 0x00000120 (00288) bc1b871a 0ed84021 ca5829df 49928de1 ......@!.X).I... 0x00000130 (00304) 0ae880e0 2cd089a4 52a0ad15 50e3ec89 ....,...R...P... 0x00000140 (00320) 62248b89 63922490 82ccc8d1 25593532 b$..c.$.....%Y52 0x00000150 (00336) 528052b2 8707482a 7ceb9519 0c878fb5 R.R...H*|....... 0x00000160 (00352) 4e89f85b 8beddfd9 825fb515 8e9ad00b N..[....._...... 0x00000170 (00368) cac8ce97 68888770 df453183 64c82597 ....h..p.E1.d.%. 0x00000180 (00384) 73080ada adf7a85b 1a6c s......[.l 0x00000000 (00000) 47455420 2f6c6f67 6f2e6769 66204854 GET /logo.gif HT 0x00000010 (00016) 54502f31 2e310d0a 41636365 70743a20 TP/1.1..Accept: 0x00000020 (00032) 2a2f2a0d 0a526566 65726572 3a206874 */*..Referer: ht 0x00000030 (00048) 74703a2f 2f777777 2e333231 342e636e tp://www.3214.cn 0x00000040 (00064) 2f3f6a75 6561690d 0a416363 6570742d /?jueai..Accept- 0x00000050 (00080) 4c616e67 75616765 3a20656e 2d75730d Language: en-us. 0x00000060 (00096) 0a416363 6570742d 456e636f 64696e67 .Accept-Encoding 0x00000070 (00112) 3a20677a 69702c20 6465666c 6174650d : gzip, deflate. 0x00000080 (00128) 0a557365 722d4167 656e743a 204d6f7a .User-Agent: Moz 0x00000090 (00144) 696c6c61 2f342e30 2028636f 6d706174 illa/4.0 (compat 0x000000a0 (00160) 69626c65 3b204d53 49452036 2e303b20 ible; MSIE 6.0; 0x000000b0 (00176) 57696e64 6f777320 4e542035 2e313b20 Windows NT 5.1; 0x000000c0 (00192) 5356313b 202e4e45 5420434c 5220322e SV1; .NET CLR 2. 0x000000d0 (00208) 302e3530 37323729 0d0a486f 73743a20 0.50727)..Host: 0x000000e0 (00224) 7777772e 33323134 2e636e0d 0a436f6e www.3214.cn..Con 0x000000f0 (00240) 6e656374 696f6e3a 204b6565 702d416c nection: Keep-Al 0x00000100 (00256) 6976650d 0a0d0a ive.... 0x00000000 (00000) 47455420 2f746f6e 676a692f 20485454 GET /tongji/ HTT 0x00000010 (00016) 502f312e 310d0a41 63636570 743a202a P/1.1..Accept: * 0x00000020 (00032) 2f2a0d0a 41636365 70742d4c 616e6775 /*..Accept-Langu 0x00000030 (00048) 6167653a 20656e2d 75730d0a 41636365 age: en-us..Acce 0x00000040 (00064) 70742d45 6e636f64 696e673a 20677a69 pt-Encoding: gzi 0x00000050 (00080) 702c2064 65666c61 74650d0a 55736572 p, deflate..User 0x00000060 (00096) 2d416765 6e743a20 4d6f7a69 6c6c612f -Agent: Mozilla/ 0x00000070 (00112) 342e3020 28636f6d 70617469 626c653b 4.0 (compatible; 0x00000080 (00128) 204d5349 4520362e 303b2057 696e646f MSIE 6.0; Windo 0x00000090 (00144) 7773204e 5420352e 313b2053 56313b20 ws NT 5.1; SV1; 0x000000a0 (00160) 2e4e4554 20434c52 20322e30 2e353037 .NET CLR 2.0.507 0x000000b0 (00176) 3237290d 0a486f73 743a2077 77772e37 27)..Host: www.7 0x000000c0 (00192) 3739396b 2e636f6d 0d0a436f 6e6e6563 799k.com..Connec 0x000000d0 (00208) 74696f6e 3a204b65 65702d41 6c697665 tion: Keep-Alive 0x000000e0 (00224) 0d0a0d0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f204854 54502f31 2e310d0a GET / HTTP/1.1.. 0x00000010 (00016) 41636365 70743a20 2a2f2a0d 0a416363 Accept: */*..Acc 0x00000020 (00032) 6570742d 4c616e67 75616765 3a20656e ept-Language: en 0x00000030 (00048) 2d75730d 0a416363 6570742d 456e636f -us..Accept-Enco 0x00000040 (00064) 64696e67 3a20677a 69702c20 6465666c ding: gzip, defl 0x00000050 (00080) 6174650d 0a557365 722d4167 656e743a ate..User-Agent: 0x00000060 (00096) 204d6f7a 696c6c61 2f342e30 2028636f Mozilla/4.0 (co 0x00000070 (00112) 6d706174 69626c65 3b204d53 49452036 mpatible; MSIE 6 0x00000080 (00128) 2e303b20 57696e64 6f777320 4e542035 .0; Windows NT 5 0x00000090 (00144) 2e313b20 5356313b 202e4e45 5420434c .1; SV1; .NET CL 0x000000a0 (00160) 5220322e 302e3530 37323729 0d0a486f R 2.0.50727)..Ho 0x000000b0 (00176) 73743a20 7777772e 35327368 616e6875 st: www.52shanhu 0x000000c0 (00192) 2e636f6d 0d0a436f 6e6e6563 74696f6e .com..Connection 0x000000d0 (00208) 3a204b65 65702d41 6c697665 0d0a0d0a : Keep-Alive.... 0x000000e0 (00224) 416c6976 650d0a0d 0a5802d9 7360090d Alive....X..s`.. 0x000000f0 (00240) 5705230d ed1b9117 e2183ca2 c01732a7 W.#.......<...2. 0x00000100 (00256) 605b1f55 19ea8990 fe251b88 4ba926e2 `[.U.....%..K.&. 0x00000110 (00272) 89ae7906 ec8494aa 66a9a328 7fc75f32 ..y.....f..(.._2 0x00000120 (00288) c94841ed 8a13ceda f9e74043 b5b17729 .HA.......@C..w) 0x00000130 (00304) e6b30344 a2f460b8 28ed9273 5116f895 ...D..`.(..sQ... 0x00000140 (00320) 61f8e1 a.. 0x00000000 (00000) 47455420 2f6c6f67 6f2e6769 66204854 GET /logo.gif HT 0x00000010 (00016) 54502f31 2e310d0a 41636365 70743a20 TP/1.1..Accept: 0x00000020 (00032) 2a2f2a0d 0a526566 65726572 3a206874 */*..Referer: ht 0x00000030 (00048) 74703a2f 2f777777 2e353273 68616e68 tp://www.52shanh 0x00000040 (00064) 752e636f 6d2f0d0a 41636365 70742d4c u.com/..Accept-L 0x00000050 (00080) 616e6775 6167653a 20656e2d 75730d0a anguage: en-us.. 0x00000060 (00096) 41636365 70742d45 6e636f64 696e673a Accept-Encoding: 0x00000070 (00112) 20677a69 702c2064 65666c61 74650d0a gzip, deflate.. 0x00000080 (00128) 55736572 2d416765 6e743a20 4d6f7a69 User-Agent: Mozi 0x00000090 (00144) 6c6c612f 342e3020 28636f6d 70617469 lla/4.0 (compati 0x000000a0 (00160) 626c653b 204d5349 4520362e 303b2057 ble; MSIE 6.0; W 0x000000b0 (00176) 696e646f 7773204e 5420352e 313b2053 indows NT 5.1; S 0x000000c0 (00192) 56313b20 2e4e4554 20434c52 20322e30 V1; .NET CLR 2.0 0x000000d0 (00208) 2e353037 3237290d 0a486f73 743a2077 .50727)..Host: w 0x000000e0 (00224) 77772e35 32736861 6e68752e 636f6d0d ww.52shanhu.com. 0x000000f0 (00240) 0a436f6e 6e656374 696f6e3a 204b6565 .Connection: Kee 0x00000100 (00256) 702d416c 6976650d 0a0d0a88 4ba926e2 p-Alive.....K.&. 0x00000110 (00272) 89ae7906 ec8494aa 66a9a328 7fc75f32 ..y.....f..(.._2 0x00000120 (00288) c94841ed 8a13ceda f9e74043 b5b17729 .HA.......@C..w) 0x00000130 (00304) e6b30344 a2f460b8 28ed9273 5116f895 ...D..`.(..sQ... 0x00000140 (00320) 5001 P.
Strings
x_ ..c.x c ... I.. . N. ~j B.. .........W.?..... .>^ ....2. ..i.N`....T .. .S =Fw G.| q.. .g.).8.. .:.F.iph m #.@S58 ..... ... K4e. .)..{.... E [X........QWg ..... . 080404B0 2.5.0.0 Comments DEFAULT_ICON( FileDescription FileVersion (http://www.eyuyan.com) IEXT_IDB_STATEIMAGES LegalCopyright ProductName ProductVersion StringFileInfo TEXTINCLUDE Translation VarFileInfo VS_VERSION_INFO <$,(]` ,% /@~ !><?<% !,+/<- ?%(-_0 00@DXptPdT\Lh` >0;0eleD^CDet 0]0EniW 0]0llaC 0;0solC $048<( 0(48]X 04D`h@XHtp\LdT 04;LF]LF$;$BteG 04WQ8e 06K (% 07];GmBAA +0{7[}IY#g 08((<;D 08 ]M- <,08<(<$X ;]0|;A 0A?e~E 0ASU#a 0_B.fU1 ;0CteG 0$ D8Ddx 0dDXt|hPxF 0|DF0Xt 0<@d|Hlp`hxD\Lh 0DhPLxH\tF 0 |DLtl@P ,0 ;D;tF 0`dTthDp\LX@xh ]0etnE >;0evaw 0;\F;\F 0(]@F;LF ! 0F=qsd 0Gl%24F 0gT|I%q $ <$0,<H 0]h;0aerC 0hDdp@T`P~ 0,;|]HF $0HHLthDt $0\h`@LXxl 0|hPpTxD\ 0hxtp`T@d 0}ICMWf 0K4jn"5 0kk.7=\ >0kooH <0LD\dPhptXl`|h 0@LDh|XpdxlT`V4$( 0L|DxH`pl@Xd\h 0ldX\@PpD\ 0|lHtxTXDh@Pp 0`,=LJ0 0LLd|xPpD\ltTh 0l`Lt|xpdHhPT 0]?lm5s 0lTLLF$ (0lXt@HxpTp /0=M)Hp 0(=(OD 0PdT`XptDxHhl~ 0$PP|\`Ldx@THp 0PXHdT@p\PF4 0RB{uc <( 0,]T 0TdP`D|pX@lt\WINSPOOL.DRV 0,TH`hDDF 0TL|HXt@\hx`ph 0T(Pth ;0tseD ]?0,'TU 0\txTdlDp`X|hh.<{ \0u+8- 0u.)E?w &0_vJd ]0VteG 0w{An-w 0XHPxTpt`@| 0X\|hTdx 0<XPtxHd|lL\`p 0*x{qh 0\\xtH\F( <1#?05 1=!"4e 14ms2^o 178UAQ )1|7a] 18|ez) 1 AE=i 1<DxTlXF \1(e)p 1F8_`? 1F \=e5 |1=fp* 1hdIfJ 1;h|F$ 1]hF8]HF 1|lhTxpDL@P\`~< 1$l|\PxLdtTXHpe$& 1)M&y7 1\,o>c /<!1}q !1:q)E 1$TxXDh|lTF 1 xpTPLl`thd|X 1YGkM 1=ZoEgM 1Z}Su%w 1Zz?-m }@25vz ,/2~689M! 26dMVsg1 ;.%?2a| "~2BF? =2=b=RCB 2cPmBr 2e.|;@] !^;2e3 2):EQX7 2e<Zu}UK 2f\|;@] 2|F-&] 2i%?Vf 2/k|>~ 2+NH~{ `.2[qh{[ $2qHUM 2rWDu? 2s0Jib 2tbSm4eMwi 2]WCLc 2wRH:w 2wTR8wN <2ZGre ;?32-U 3&3@3V3 3>3F3N3 =3%4#4!4 34%;re 3#'4xME 3AI)-^3 3jS#%<e $3O0pYj 3Om}K.5 <3>@pI 3qmx!tA 3s8)IX 3sl3GAmoS >3(t8E )-_#3Tq 3^U]!4= ;3Uu}+ 3&\V6c 3_vE47 3V!;Ka {3wl%'s +3)%w u ~=|3;~z ~/<4&* 4 (@;` 4 , 040;XF0 $40<88 ,<,40;hF4 40hRz=J .=42>}# .429># (4`;2I 4;4MteG 4]4RteS1 4((4t 4]4wohS ,48,,\;\ $,4<8( 4,<80$< 480( $(` 4,8<4W`r4 48pF,HdF, 4Aea]@ ;4aerC^ ~4Af]V 4+?AKz7 >4aTro ;4bolG 4_c/<DX ;4CgeR $4DDl\HX 4D\d|`XtL@xHh 4;dF]@ ,4dPhHDxt|L\plh <4DPL`\TtXdxp| /4 d?x 4@@D|XHtThLx\h# 4%_e=f 4E"'ik ;4evaw |+4f05/ 4<($]`F;p]HF;x 4fx(<3 4g3U0= +4Ge6M >4;H;4UteS 4hD`d\HtlTXLx 4hDdX|\txLHpPh &4H-Eu 4(,;HF, $4;HF]D >4@hl|HtT`pDV4, 4hMuN~C}% ^4hPl|Xdxl >4H|PtxX\T 4h ?\Q 4hVCq[ 4H`x\XXF< \4i`n1 4`\LD@ ]4LEHS 4]LF4XpF 4Lhp\|`tT\F 4LLH|dltDT\`Ph 4ll|HLXtPhdD@6 4@`L\|xdx 4mP|?r 4ni(T]aN >4oCet 4$\P|`D 4p`|DP\tL@hxX~< 4PDT|hLxt@\pd 4;p]@F 4Pl\TDXtdLHh` 4PteG^;p ]4PteS 4@PtTdXL 4pTx`@F 4<P`Xhlx|Tp@\t 4PXp`dF 4pX|@PDtTHhxLhV)f ]4rpsw ]4tceR1tL 4| tD` (4;tF;\F 4Th@lDl ;4tiaW 4@@T|lhtPLD`XV4 >4tl\Tx 4t]pF;P &4->u: 4u8.w[M \4v!c1 4v+ge8 4v{*gS 4%WyL[ruE+ ~4(,;xF 4 (,]xh 4<;x]H 4`\@XHd|tPxTL 4XlP\H@tLH 4X@PxD`tHp\hL >4XtHlTpV8 4@xXdHTtPD|pl ,,,4x]xF 4xzueu |4 z?+3z 4]z(i$< 4Z']qD}r 50u7v! 53HSb; 5?4}j'uv 5:5A89 5) 5.u 56~zpE< (589@E 591}ua 59C g:?; 5?9ORMe 59v}7. 5aK&4i 5/&'BMI 5bRLZI 5C&q(Z $5DE?9, 5dk;P %5E#>Y! 5FjCya 5g]M~; {`5gUL 5gWk)8[, 5!|H3p* 5H*<#m 5I`kBPmRkA 5\JY(Z 5?] kA 5KAWJN &5~M* 5*\m)}1#Dz 5.(n?![? ^5ND.O 5-Nu%p2 5N/Y1&9%0 /5=:%p '*5P0u 5Pm_f? 5+p*|t# 5'Q7KhS 5>Q=I9 5Qq=sk 5Q#},r 5Q,>z N .5SoZ> 5\ Ttf 5U94#T 5uRVF] &5UY]{ 5v$4}^o 5v}rSu <5v t" 5W>q=? 5w,)T) 5X_1db &5Xco?g ]5X?WfrNT 5y1e=7u 5Y%EG" 5'Z?8> 6,4 <0V &}65I9E _66e{V ]68'Yb 6=9yY; 6="c{U 6@DdhV 6DLlhh 6;:fU r '[|6]j >6^\JF (6m76h )-&6$MW 6nW>6^1 6Ny:mMH` `6O^67 6\pCl& 6Pfyi5 6`py2wn 6pZ)NQ _^]6-QO 6%r|-9 }6^r^e- 6rq:1u 6!s mLX *6TaK- 6t@LTHh\PX|dD 6T`|X~,0 %6U g4 6><WAQ 6xlDHh ]6ye; u 6[ZQVegW 7_~0Syk:$- 71]5YY3F 7?1- 6 727b7R7B1 72uzr" 765bd? ^77%53 77#P`t @77S47 79 E(% ;7]a6Y6 /7AfE@ +#7B %) 7Bpjt3b 7=c{ (b 7CCuxbAF )7CD&x {(;7CeMxN 7CuLWiS 7E~=-5 `7F}E- 7)-#]F[rq 7&h}D8$ 7?IJ='Ug :|7J5G 7j8))2 *7K[l?7)p 7Oh}8 !'7Q$);' 7=r(TO^ "7&!u5.2' .~7UDv 7UW~x=7 ~ 7v}. 7W7 )9] -%7xZq(D 7+yyB=W/ [7yzS}P %7YZWv (< 8$$ $ 8<0< 80, $8(D (8$0D,|Pl "&80%)<M 8%&"0n >8($<,0T ,80$;tF 81]hF;LF >823LT =8:^(26 ;83IDG 83pQV2 (8 44;dF4 84``DD 8 4;D]TF 84`j5( /87f_ESh }8.7yE[ "'8+"'8 $); "&8!"&8 88,4$ 8;8acsE 8]8IelO 8]8SteG 8;8TteG ;8aerC ]8AteS ;8bolG ;8CMOC >8colr (8DDd\|pxPHtlhh 8;d;H;8GslT >8DH@tL\xTPXhph 8DH|TPlxdXh@phYD{ 8(d`hX|/ ]8dniF 8]d]PF8 >8DPl@x|\`X 8DP\L@|xXd`htV 8@@DTLXxd|`H\ ;8eleD 8e_~mPLE ;8etnI 8EV}iS 8ew#B. 8Fv5|Y _}8:H| 8<;H]0AteG 8(;HF;P 8Hhdt@LxXpl| >8HLPx@dl`h 8htp@T`DxXH|L 8{HW#En= 8hxDLdlV 8I?8V~B >8!ILE "8(\IU 8]JEmT6{~ .8Kwf5@ 8LDpdLF( 8]lF]P (8`lP\HtxhTpXd 8LTHlPt 8lxhT|\ ;8MteG "&8n!%7 '>8N8_ 8%n=cC >8noCe ;8NREK <8| |P` 8P|LTt@xlhdp\ 8P`lxh@\dh 8Pp`dH|PF4 8@@p`PHxLXTdth*Kf 8PteG1 8!pT?X 8``|@\pxhh 8\|pXtlxdDTH@h 8)|Q06d ~8;|qS? ~8;|qSS 8riDm1 ;8RteS 8SI#/N6 8solC^ ]8SteG (8TD`LXdx|l 8Td`XD|xP@\p 8|`T`F *8TFxH 8THX|\xlLPDWINMM.dll 8tiBI^ ]8tinI 8TTL\h\F >8|TxdpHX 8@T|`xPtD\h= 8T`Xtp\x|PHDlh ~8ve2D6 #8VIP) 8xdD@Th 8;XF$;D;XF$ 8x|pdl >8X@PLdxtp\Th >8x\Pp` 8xtHdlV 8@xXLD\h%C{ "&8y"&8@!'8 [8-]]YK3 8zi*k|0 #91Y!: 95u\jE -=96)7 9(6~bn 96_nm #'98'+> 98`M?{ 99v1+|@ ?9A}CE /9a}Sc 9]b$') 9Ba{}-. "(9d"&8G"&7 9D|gB( 9d's>; !9e}#U ~9f}V> ;9G}=] 9g7ks} )9g}ec 9G&j"57 9'H9+5Q 9H/Ox (%9>'J .9[*Jp "(:9KS_ 9k->U?0O' =9&lqY (9"m%? )9M9%r 9=MqP4mo =9N}?> >9N}^. 9NajyC 9O^avE 9qv-OY 9<Ro"c }9u}-] 9>ub?, 9uFF4u' 9U\;UT% 9*U=Y5 9vq^M^uy_ 9vUOm7q -9Y}A! ?'9Z$K 9ZZjW[ 7 -~:&~%a )|A=-+ A1A*Ax! /A1O3]3+3{3 ~A4g<i a6i@)B A8+/<- A9W%AF A9!wJx a|bA@6 A]Cwe# Ad2!w) A.d?CM aDu=3p aDY((@ adY} kz AeE5]p Ael^0<< AEmEiO]= `;<aerC <]<aerC ;(aerC ](aerC ><AeRl Aero^]p .[%Af/~ AFnO!= A@'fNp :a]GCV A?GZ_3W7 aH_kt2 A)IY!a +=&a_M A;M9>A "AMV[AE an<Q1* a\]&O" aper1]\ > aPet aQ)I!A ?!AQz4 AR!s/8RTs >asse1 A%U$5 A}>/uC AUeBRE !A'U?yjk> aVJy[ a)Vw?91 +$A:x; aXL]~+ }Ay6%{ $>A \YG /A"-yK aYl%}/ a)Y_nt Ayor1;TtlF AYWOw)} }{-&}B b1$c30 b1g=I~ B]5eO3 ](b5ie B6gh3? *^b6,V4 BA5!/$ BA8bOirx baE5#0 ,;\;,banE Bc,PUc;q ^B@D7B =Bfc5q BF^J/>n bfnx;@ B+F|qkd b_(-g )b@h / _> bH. '";b]H Bj-9>: B|km7I+| b_?KPn bkUft{ :)|BKV Bky#qT |B,{)l b^lNU| b#?[lw bMB C7< %bMBmMV Bmet^;8MteS^ bOE3]u ,]@;,bolG Bo+:SC bOss^;tF BpOD' @BqOk& BS5=iEz BTH](:R +BtMIyl `bUk}9 ]B&w%3 -=Bw)w:`/IY bXjM#A bYG7[#A Bz6+4v C(26e? C31 -g C\3J5? !c4Ff$sN c|4GNI c4PV<1 `'c5AY c5t9;A c6``FH [!c7Z/ c9I&w/ Ca"FQ} cB'yM: ^c >dq ceK}1h1 >ceri1 ;$CgeR (]@;(CgeR ChooseColorA \c`j/y c!K}#? ClosePrinter C<M\U|] cmYa5VlM %Cn<4. -C~NEe cnem< Cn>fAY| Cnoy#uwM >(coDt COMCTL32.dll comdlg32.dll cpHtlPDL\@|dhh c`\ptXHDTh@|Lh ^Cpw5Y C!pyVn CQ8-$f~ %cQE.3 c{T9GAd CteG1;lF @tF $;$CteS C,/u5[ }`Cutz cu`{~|U -c'v#_ C[V\,>_ c{W795S Cw7*l\ cW&oEv +cWqgs c xS%Z .Czt,O C.Ztv c?)Zy7 D$ `]] d0{FK^ d1pLFD d.23^ll D*2A?z D3CF!{ \d<#3Vb ?}D5Fe d%65;x #d6sC:L D7`M;hC d;8SteG ;D;8WteG1F d8"ybtU0 dCoKsl (dd|\| Dd2_RR ;D;D]\F]h dDhlH@t|PX dDHp\T| ,Dd|L@HlTX \@dDlL`|XpTh @DdThHxtpPh \DdtLlhTH~ @DdTlL|txpPhh DdTL@lX\`ph |D@dTtxLh' >ddx@|DHhTPlt ddXhHHF >|d@Dx`hltXp\h8 d\DxtTXh@HplV DdXx`L\P )dEcuLv del^`F >(Desa ><desu ]D;@;@F ;dF8;pF DF;8yarG dFDhF8 <]DF<;<igeR ;dF;LF ;dF]<QgeR >]dF ; SteG ;dFTHF Df &UN ;DF`xF Dg?:&~ d^gB&^ ,`dhF4 <$]d]hF;h D]HF;l ;D]h;hF DHh`XtpxLlPhI DHl`L` dHlth\Lhz dh@l`TPLx\XpOLEAUT32.dll d`HL@\XDhltp< (dhPDXT dHpPtlhdF dHPp|XhO dHTptP\`lxX|h D`htpV4$ ,DHTtl|L\x Dhxdlt@LP\pX d\HX|hL , @\dhXp`LPHtlh "dI"}; DISXqxDEE ;Dk0`^N dk8S * d^k=I>J >@\d`l dLDltT`p\@Phh dLD\TlXp`tHxh ,dLD|x`lHThpt {d^LG: $`DlHF ``@D\LHpXPT| DL\HXhP@plx` (d@lLTPpF dLltp|XDTh@\ dLlTX`t\H|px @\DlphF d@lp\`HxtT|L d|l\ptPXxDh`f > DlTHpd`h\t|h\ >Dl@T`htH: DLtHx\`P|X@pe dL)u]p d\L@XtPh`F >D`LXTphtd &##D]/m D:M_cM ;,dmoc DN?, ` ;d; orcS d/ORpE >\D|`pdHtTP~ (\dPD`PF< ,DPd\TLlpX|Hhh DPd|X@l\`tLhh DPH`ht\@LpT|LOADER ERROR @@dPH`LDtp|l >d|PhpXD`LTl DphTXl\x|t@Ph <d|@PHxh8 `d@PhXpL|lx\h >DpH|XtxT\dh!-f >$dPl|Lh d@\pLt dPLXHpD\@lTxhX \`D|pp ||`DPpxF, |dPXh@tx\`THh >Dp\xPHT|hXLhZ$f `Dpxt@XTX ^&DQ3?@ [DQ6ce} @\dT`|DhD |DTdpL@l\h`h/8{ >d\TDX`t|h >]$DteG (](DteG ,\\DT`hltPxX@` <Dth@`p|\XPldV dtH@`pXTlPx|h dtH@xhXTl|p\hy DT|ldXPL`th D|t`ldXT@xpP >\dTl|`HP `DT|lP\Ldx ,D\TPhLt\F <dTPLt\t dTptlL`PD@|\~0 DTpXhx`dF $@\DT|tdld , DttF ^d@tT`PLXlpx\hY >DT\t`Pxh@LHhN D\`txd~ dtx\@Dp\F< dtXl\H`px@hPh `dtXL\|p ,dtx\PLl|`p@Dh{ D{=u ] D&%VOG8 Dvq]$N dw\ib5 dw\i=b5E}A <|]Dwj& D-xaUW >\DXd|`tHhLV$8 <;D]xF <]D;XF]<bolG >@D\X`L ||D`@\xLF dx\|lLptTP~, @|DXlP~ dxlP@D`T|pX \`d@xlt|LPTD |DxPHh\TXpd` dXP\hLD@`|Tl |D@X`PldTth\hn dXpLlT@hHtP~< dXp|tP@DL\Tx \|DxtT`d@HlPh dX|tTPX @dX\tx >DxTX`L\dp@ ||dx`XPDH dY88Htp|X`xDL@PTh DY$?|;f |E":^| ,&E*)[ 'E*%?+ E0{vAr e1+?IT e$!1W4 E#2e/s =|@!e2U ;(E4eU5) !E4})sM e5!9y(~d E?5=B~Z# e5c!)7 e5%c=!Q E5<wnY E&5yT^7v >E5yx" =E6wW-.O !E~(7${%k #e9~O= e9]}UM Ea9l!k ]eAcay eAf-/y +e` Al+ e%?Aul #eAxrY& e=BElY EbH7$ {% EbOY5# `Ebt/P EBv5ey E:Ce{e !eC:EX ?Ec[K e[cp3T [ecywA edC=1=J >(edoM e$du7U >ED-v# =eDVPUK ;<eelS EeN$}e eeV;q2W| eey%4!^ /%:=Ef \Ef [` <&_Ef9 _EfA#U E=FFz]F EFsu2_p EfV5{" E!G]|? E\g7T; ! Eg[aa3' EgE[aa E]:gMQ EH&K) ;e*HL" {E;^HLXdT@|Plt\` Ei9-=% $]$eilC &%eJuq EjV"#; eJzv]a ek|LKuQ eK$vFDc @](eleR^F eliF^emiT E#&.}M > emaN emec1]pF eMwo1gass ~eM]z8 ^>=En )(E+!N eN{/]6w8P e}N*=e engD>.[ Enq!x: eN*V3v }eo** E/O9XO EO}Aa) e=oc+2 EPy?M? E]Q%ck e:+Q@R e&q] @u er8wG; era$$8D $;$ercS1 erFl10 >$erid eRla^; bolG eRmo1ruos ;$eRoC ]<eRoC > erru ;(eRsI $ertS1 E(sXRS# (;(EteS (](EteS ET$IJ# ]$etnI !etNs ud eu{{D" ^eu=usF {E}!V5= EVae=% EVsz:S EVZ6`E ([e){/w `( e"W |E~WG-pS E~W;l' e?]}X0z _ eYCo }ey%MG eZ5"E; ez-#)8 Ez=G7I eziS1;l - "-=F ,;`F,@@ ;`F(;| ]`F;`; $`|\\F @F0]`;0CteS ]\F0]0sffO "|[F+2 f-2!,a ;@F4]4tseD }?f4cU ]|F4]\F4;XF F4U]fd ^F5(7:m f5]EV_V ~f|5iz :f:7;~; F *7cz %^+f7V F#+`?8 >f:^8d F`8d<w ]`F8]`F8 |F8;HF;|; ;|F8;t F9%q*q( >f9[r# F)b+[} &!F}" B fC6CSq2 f]C}.w f.D1;pF4 ;`F;DF8 <;`F<dHF ?F'E16 feB?@) FeB?@) feT}2C3 |F;@F; ]@F]\F0 @F]@F4]4SteS |*FFqpG fg%^;M Fg,&mstH FHEAZV ;@F]H]@;|F Fh"K84 &%+(FHP (;@F(;@](HteS ,;`F,hXF FI[*4}_ ]\F ] igeR FiOQ"z f[|IzW F=JMJ{ )f*L]< @F]L;dF fL]E:_M ;`;\F(]lF( ;`F;lF ;@F|lF ^%"fMf, fN9O6W "F*\nA5 f|O8j~,L FOBAvW fOBh 3{ \]fOHZ <;@F;p;@F$ Fp?:W fQ!ah#1 fQglS2 >fr=!W@ > ] FteG ;,FteS ;@Ft@F >]\F;TF "FTGr7 ;@FTLF f&uLg% #>%Fw+ ^}fW/.%2 _%fX!? FxSk%9 F<XVR_\ fx]]wQ fy7u3y %&FyyF fz<nug fzytN |%g$#: g1/a,K g2`?3K =+G3e? g3m)^[v ?g4\)D G$5+8!0 G$5+8!o G=7F]6= G8\^=e" g-!)?+a- -GA$IU gaK)N+ @G>AORp G Bf:g GCq`7Z G+D92= gD&Cc-y GDI32.dll Ge~H:5 GEo5D GetModuleHandleA GetProcAddress GetVersion ]geWg_ G]Ey* GF->GGb g+_fZ1 gg1s=LR GHnO^8 GjJAbN gl"kLU GmKSyt G^&mOu ;G"msN G--N_' gNcq7@g5Q gni1$( gn#`MKFvZ GO;eV, gooDNV GP0kIA g/#/pb GpF9w?g G?Q1TA Gqs.i\% Gs$dHY GSEBg1 %GtqJ!~i `G )u+~% GU2YL]tT GU/E9.w g:&Unl Gu$^.W <-GV8c GVJh : gvp%V/ (GW45F# GWw]3|3zF gWX3w4 %G$x\9 Gx*S~b -g}_y~ GY'H%B/2 gY$)j=3j G^yuxP9 Gz2gv" :Gz5ze gz9@&`? gzeqo}H H08^(HT\p|xhtPlLXh h0_mu H1 1< XlxPdt H1*=v| h1!v,xE5 H2,^$h\DXpt`p H2H^xpF H3t1ddF4 ]'H3^z ]H4w%?7M h5Q*G6W H5t^,8hX\|dpx@TLDl ;H] aMCL &HB97< HBAXxq HBbI^? "HBGqk _H*'bH_ ;H;$bolG h]/bun hc5{w! |HCVO{`=-Jx hd@`|@ HDA,$4l@Yl H;D; aerC1F H<d f| HDLd\F hdl|LxDTPHph h|DpdhF Hd`pXdF Hdp@XLPlx\`|V< hD]&Q< h@d\tlDXHxTL hdt|T\\ HD`tXxLh \HdXph`L|ltTH hDx`pX@TxF< h\D@XxTPh [#he&f #h|EM?a ;h;<evaw1F (,H||F ;HF0|HF ;hF4;4aerC ;hF4LX :_hF5,X HF8]8idim (]H;`F;(aBsI ;hF]<aerC "HF-$C ^]HF;h >;HF<;h;<acoL $;hF]$idim HF;$lliF ;HF;XF,;,SNIW hHd@lh HHdtPXd hH|DxpT`P@t\ ~H\hIe h@`HltXPxp\L hHPDp@Xd|l\T` hhp`l|TtDP@L Hh|t@d`pxl\D HH@tL`DF h\Ht|pD@lPXx h|HtpDP`TlLxh HHXDp||F HhXDt\Lp|@d H`\hXpF$ h\HXPlL`p@xth HhxQU] HHxX@`F h'IRc5| HK_vNL# hL|\DHXPtl@` >hld`|PDX\@1 hldp@tL`PD|\ HLdXDlpT |hl``F H[lgUJ HlhXTPx\t@LpV< hlLH|@dP`xXth HL\lp|h H@lPdD|LX`pxV0 HL\ph|@tXxlDh HLPpl|Xd $HLT@\ldx`Xh~ hltpL|x`DHdTV hlTtXdPpHh hlt\@xLDPF HLX`\dL hl@x|\HPtpdThp hNC<E H#NK>~w$ }$hn@v ~ho5G HOJy58 h[O$UXQ HOVk68>R hpbgT[ Hp`@\dDlXh| |HP\dx`hpLTD `h@plDtHTXd\ hP@Lt` h`pPdX\ <$hP@pHhF \H|@PplxtLDX HPpxTd@t|lLD >@hPtH hPTLx| hp@|TLXF8 HP\XhTDpLh <H\pX@t|xPDl` hpXx`h ``h{%!%Q!%( HqoV4 HrCg@b g ;H]$rtsl hsMG2p hSt/)Q ; htaP ht`@DHP H`TDphdLPl|X h@`TDpl|h H@TDplPtpF htDpT@` ht@DT|x`HPlh hTet1daer ]HT@F4 Hth|Ll@X`dD\hK <H`thpX|L@D\dhI/{ \h|tlDdH`TXh >HT`lxdtpLPX@ HT|PxHF > htTl\p`LxD@dhh (hTtp@h Ht@X`x\DxF0 HuH&6.{ HUI_}wLG HuS[Nr HV?MR'z>l@Qq <@hx`dHH h\XDp|HPl`dx <hXdP\`|ptxDT ,hxdX@lDLHPThe ordinal %u could not be located in the dynamic link library %s H\XdxpPTL|Dl HXlpHF Hx@p`h\DLPlt~,< `HXP\tT|pLld hxt\@HX Hxt|TdL@l`XPh_Mf hx&y5t#Zv%' HYMEwn [}Hyu]l H|Yvaay hZ3@)'5'N hzLz]y H@Z<x/ I11f=Iv I}{15; .{i2?Y I3@?uD2g I!5eG6 i^69PI !i7p_'ie#~ =I9e 5 /~>[ia I+a?2~ Ia z!r ;^ic\@ Ic{.R#? ?^i[>^d $]$idim idim^PtuO >iDsw^ iEvUZEK {i EW) IG9m;+ ,igeB1F ;<igeB1iaPn ;<igeR IGG-G ) IgtOLv Iiz~om ):_iJUq =:ij`uv }I=^L' (;(illE i-^M% i\&M2-! iM\DnG &iMyi- {I?/nf IQez9x iQh/5p IQMgq3* +I',ro > irtt1 ;(ISLC ]iTD~w ~I%ubjiFB Iune18 iU.|"v ?Iu:z! I?%uZj -i]v<?/ iv5bu~N Ivj4uL i-vwh]Oc) ' iW\% i XAE2 i=xI7K I+x=y4 i=}=yg/Q i}yy{/ #}Izu%} }I,]zY J1uuaAYIO j9~}R6 ja{(BXn -JADVAPI32.dll JaR}yF jbGt#6$1 JBmw{5 >$jbOs !j.<%C+z je8}{$ JE=W9\N )J_'(G J>^ Gx =jgxQs ^J`h0R2 +jh-A[F JHI4W@ j+Hmi:MSz JH-<sSL JH-<sST JhT5ze+>] J(I[Cx J`iU=I jjp)0( Jk\&/k > ,jLP J`LQ7; +jN hu]? ,JO[K8 "]JpXO> j=q}, J^r;},m jr\v*0 JS&Y$W J;t80}@ JTX&oF JU(K~* JUua-e *juuy JV~(80 Jv)@bR3 j!~vK[ Jvr{Cq j<@W@< jw3vKBu [J}WOS J X-0[ jxvT~7 j]y $5 JYD%oX jz<p'G? _,K#,= $/=K>:\ k297e?I k2~],PU K3|^;G k%^_58 :K6WOg K}7`flnQ K9* 9P+,)V k9m}oq %!k,a? K?@}\a'- K+!&;&a kACX/5]1 ~kB0rV Kb!WC: '!K.!C kcB"@Q k>D4MU1%" KDm=z^Y (kEi;9% KERNEL32.dll Kf-BD _k=F!,c ;%/~KG k*=h? KHV-EB ?kj2?oi [KJaB65 Klhxo' KLv,hx7 k|n0WKh KN6BE! KN]>Os k&]/o \ -}Ko-6. Ko[_=T ko>u;++q kPD$i&?lZ kqv!4T! krc8I7 KS3q,Y kS|IF13 ##K+sM kuk_Hhy ~kUkv&_ K(?[u@q ?K=VH\5_ kv-m)%S k`~w6V K[ WL| k|wNJf KWO[dO K wVq( KXg+5[ KyEQ%5S Kz,N;p ;L;0CteG L \!}]1w L3}EwE $l!7V( .-l7Yw l9E~*oY L9I}bK L9Y#>> ;$laeR L%B&GB ^L}D:\ @ld|DhHpt\XP LDdx`lXpTtHPhN (l@d\|F0 >`LDl\Thhn |\ldP@dF lDpd@t\LHxhX >LDph|`@lh `LDpTh~ ldp\@tLXhxT` ldpXhh -$LdtF LdtHPl\XD|Tph LdTPhX|xh lDt`P@Xxh\pL$ ( |ldTt\Hx lDx`|dTH: Ld\|x\F lD\@xHPhTpd|~ >( ldxp\H`hLtT@ %_le<# lehS1DpF <,(;LF ;`|LF$ ]L\|F, >;lF4;4RESU $;l;|F8 ]lF<;D ;LF$;$daoL ;LF$]$EteG1 LF ; FelO ]LFHXF ]LF<;LF;<iWsI lF;LF$;L L "f pV ;LF;XF( lF(;XF(](SteG <]lF<]X;XF< \L`H@dDlXpxT~ l|H`DdXf @l\HdxPD`Xp| :Lhf,6K lhHP`p@Tx LH\`htplD@X|h L`hLF4 <l|H@Pd >,lH|\t \l@h`TDH $LHT@\`dplxDt ,l|H\th lH\THF lhTPL|D`\@xXhA |@LhtP\TpldXh Lh@xPdHt\Xl|h \|lhxP`tDpLX Lh|XT`H\D LIBMq%o-9+ LJSIQ$ ;$llaC ;l;l; CteG L@l`dhxPDHpT L`lh@H\p@F >LlHXP\p@DT|xh\/f $llL\DHdTX`h|h43f LLl@h`DXxHtd l@LPD|d`x\Xt >;LlpF< <lLpH|DP`h LLth\TH|@dP` (llXlF lm"1o1< *l~meg lNhS[} LO9{5M 'L,?OA lOCmw$ l?(Og~ lO+qc{M [\lp5! `LpDdXhTHxt@hu l`pDHd\ >,LP@dlDh\Th LPDTXtxhlpH` lPd`|XDth@HTV$ >lpHd@`hxX|Th[ <``LPHh @`LPlDh lp|LPH@` \lp@TDXPd`h` @L\PTXdDl l\@PtXLdHph|V,$ [l{pU] >LP@xHh'({ ;LQ?]M ?(Lre~ L<{R}v L#-t0 LtDhd@PTpXV Lt\|DhHx`lXdh >LtdHPp\xh >$lT\@dLthD~ >Lt|@\dlXTDPHh l\TdtXhL@x ltdxlF LTFj6* >,ltFLF |lt\hHLdXTx` \LT`hH@XPxl| $Lt@\HTd|@ L`TP|@\DT lt\p|h LtPhlLF lTPXLx@hdD| <LT`@px|XPtlDhb L;(TteG <LtXHT@\l|xpDV &LUFOT LUJ-zu K. lU/Lfy @luOjdC l-v"jK +L_vyi >>L=w\ Lx`DlHX\ @LXe>txlhPp\TDH Lx`Pdh}3{ lXpHDdT`\t@| <@LXPhH|`hF lx\phLPtD`Hdh LXth|`@\xTPDh $Lx@Xl`\t `lX@x\ThtdD|h$ (``lXxthTLH|@ lyr]kjg lYy%l`O }-*&#m m;0|E6 m0_I I M1,](evaS M?/2#= M2+2_P M2_w%( M3kqC> m5p<\~ M6yU9c # M7G? M9[})+ M9BZvO m{9uX^# M9yUp] \MAE7N MAKDhJ M&]A-O5 |}mCh! 'Mcju!O Mc,r)a $MCy&~ `mCY=A m:D~B$ =:m @#E mE8Se5 ]%:mEK MessageBoxA @Me'v< ;-M*EV mE!=zUU ,,Mf [ m|f>>Q mGmL;nY6 MG- sPt5 Mg=x%k mHh wyO mH}j=E `m-I8- midiStreamOut M}>I{i M^]-IL+ MIMgfq +miTX!T m}Iz5o}_h \mjFdhs MJj%(r <MJW9O MkD1{\ MK<SZ5 ;Ml1H: ^M[lm7=- M[l=p54n Mm[@2j! m,>M5 m#{)mJ ]M[PAw ]MppvT ;MqIgp '[MqL] ],mroF1, mSCv8O }m S_M MteS^;DFXh > mtiB ].MU%_ mU=1ur '.Mu<g |#mUieKp mUq o81 mUq oGR <MuxM< Mu~XMR> M;WK` MW; tC -M WUSR m =#wV MXF]I6v- `{Mx.P }m,Y]% My_(#+ M<Y\)|{ mYb5VM m=ym69 mYpcP= "<mZ)^ mZ5QnU mZI!+|* =?&?n= .N$_' N0$W-|Kb n14<9uZ n|&&1jx% N3V~q^ N5:FU8l n;";}7 `'n79 N7EW & N$'7 g N #\;8 n9(}vf nA5w { N;A;93 nAC9{p N&aFwq$ <;<narT ;(narT1 n$:bi1o NB$sEb. N-B{z; !?N,!c NC9F:? #nDeFf NDVlLN+ =(ne" #|NeF5 Ne~Fo'i <;<nepO NE..UQ %n~f'h NFmxA n G4I+I +Ng)"Tg Nh@5+x <;<nItP ^niUhf nKDZ?, nKMZc\ _N/l3@ NL_Q]M NmmIIV ]&NN)" )nN e# &nN/q'e {Nnv4) noc^$< >nocI1 ,nOeg^, ><noit nOs$%8 )npvZtk N^pWw( :N\p`Z +.*nQ?@) NQ9j}| Nr5LE1!J&*SY) n'S71& ,;,NteG nu[?8^ `NuRez N[)u@+#U N Uv\G `Nv6]6 N}V9^%_f Nv_+lG @"nvskq nw61FU`# nw#%o) 'nw!XQy Nx]8e; Nx.!EG ~NXO_D NXp6?Q ?|Nxydm6 nYrQO9* 6 Nyu(E5 :N]{|Z (~ <o# <|_-O^ {\O0C #!:o1pu O%&:2a o2;w=_fl *O#3:5 O^"3zM o4+&k* \)O6`+ O)6[?f> O73&^\ ]o7Zke O9Q}SU @O}&a- &OBjo!mi $oCes1 o`"|cs O%E"W.Q$ +oFMOmgr O):fS9+{ -Ogk5I ;,OgtS OgU65% o)$i\u O.]J6UQ `oKf|8%U OKXNSL/^ ole32.dll #oledlg.dll o:Lmz [#Omc(] OmeQB* o'M#-nZ OMT?^K O\MXm9 Onp*fa=y] -}o-o6 oQ|K.\ Oq"-KD, ORA]E# Or#E`y5'8S&_p or+\m] oSZs ~ OtMQ,a \Ot.ve/ ]O=]-u O(uckHr )Ou*_I{fJ o~uV|Q oUYa6)! OV?-=" ~|owe`[3**" o.x|Wv +=+]OY; O|YUD] #_ozh2 /oz~|&Mf '>'/&P P1>M)f P2I+H0 P 2-K3 p~^4Lp ]P4y#s p56ln] *p5K*U P/6/{9b ?p6.a= (:P7b ]P]8MteG ] paeH ;@;<paeH Pc&e`; (PD _c pD\dl`TxH@ht Pd|D`t@LHpTh <PdHDX\|TL`tlh"9{ P@d|\L`DphR pd@Llt`X\hPTh Sf PDl@tdXhxLT\ (`p|DlThH\x@t ``pDLt|P@TxhV pDP\HLX pdt\DX|Hx`h ,Pdt\`pTl|@hx~48 @pD`tTlh] PdT@txXhH|DLh |@PdX`H\TpLth |\]pE+ PECvqwU PeekMessageA Peli1F Pes3fzK Pev;+Xa <<&p`F <|]pF < ]|;PF pF]4FteG ;@;pF8 ]P]\F8 ;pF8;8eniL ;pF8;@F P[/fAF PF ;d; daoL ,]PF;dF pF$;|F$;$paeH1 PF;HF]H](CteG PF]LF< ;PF$LL P&:f<>N-B PF;,SteG ;PF,;T ]PF;tF ]pFTlF ]PF;$WteG \P~`G) Pg%<B% (\P|HD@htXlpdhq phDP@LXdL P|hDTX@l| p`|HHF p|HhldXHF ,ph`Lh ph\LHdt@xPDT phLH|XPT\lt@V `PHlXp@ttF p'h]mx@ ,@p`HPdXtF ;p;H]t >PHtd@L\pX >PHTd`|pxD@lh <P@HT`dX ,;P;h;TF <@p\H`T|hltXdh `P|ht\@lF PhvI)&? Ph@XLD`lx p@|hxXTH pIDCp* Pin_>& pIY#Po Pi ZS_ P@}+JF )pJvFu pk0L5x pKj{7` p`@lDL pLdTt@Hx\hX`h ,pLDtTt |@`PlDxp >P`l@DX\tHdx~80$ (PL|F8 P`\L@Hth `p|lhTXLtHDP |PL\lDpth $pLld\t|@P`hD~ Pl|\Lhl pLm-$h ;p](lpuD pL\tD`@HhTdxh >`PltHhT!{ PLtT\|pXdh`l pLtTPXhxD|@lh `@P|L\TXHdhD p\LTxhHDlPX@h p@lXdt`xLhH\h p`l\xHth P|l`xtdph P.mT$8 <&PNl{? P(N <o# @PpDt\lTHX|L$ ]p]pF <\\PpF pPh`DLxhF Pph\dtTX@HlD $PphHT|d`H >pPhTX@`lx pPHxXtLDD ppLDHdP@|xht pP@Ld\`x pp@ldxP|LTD\h Pp\l|hd |PplHF ppTdlHPh`tDx pptlDx@dx (PP`\|T@tF ,ppX@F P|pxhltTX\dDhZ >P@pxlLHh PPY x` PQ,;}{? pqvc\6 prP28G8! ]p!*RSl( ?P]s"; ]@;p;t; pt0tntdtltHtj P<tCsYW pT(D9$d pTd@HXh pTDP@dh9.f ]$PteS >PT@h`\|ldL pT\l@dHhL >PT\LhHtxd~ Pt\LX@|dT`lh$ p@tPdLxl\D|hh $<PtPF8 P`@tTdDl\Hxh PTt|dp@hh <pTtDPLxXdHl| \ptTHLhHF PtTL|hD@H`Xlh \\pTtL@Xt p@\TtTF8 >PtuO^ \ptXPTHxL`dl~ p|%uXx Pv-uKy PX6 15 \\`Px|dlh@Tpf pxDlhX@HP\L|h^ `PxDThF $p@x@F P|XHpdT` PxlHTDX`htp@hl ,pxLHXTl@t\`Dh pXLl\`P|th pxlX|t\h@DLT \|PXpxlh \@PxtF Px@thdD`pXT\~ PX`TphxHtDlh9 `p|xXF PX`xl\Lh !p/xy PY5u[$~ pYB>@1 Py=~g&MQ p<Yjwm )\Pys]e Q:1" y!7 q2C_i_D !`:q&2M q4ibI:}l Q%4wDX;9 q4Za_E= <&(Q=5 >q5|De1 {Q5elOtTc' q.5j=V Q-6D:" q8(M{uA Q99}! Q\9qWP q9T?C, q9vwuy :q9+w6 Q9Z!}i QAF@W- /qAj.A q&b4?- Q*_BT: qBWy6G qcg^`( QdK5Qq Qd&$UMe q|E6E{ Qep{=" Qf{:SM qGT=oz Qgwy{}@aV QH1~u< (qH9?] q..)hQ QIAx_(VS qIcx)g q;?IO[i /QiR|ft qi;]sk Q~@J7YK q/J91M $Q{J|Uz Qk{LE9 qkRr]e Q&L&tO ^/Q|%o qPA_g9% q'-!=Q4 qq]6$oq ?QqI-H Q{QxK| Q?(r ?g /qRV:Ts qsB[v+j Q'S E?` qt0tP!^ Qt2u6W QuaJu\ Q'%UF| qufIWM QuI5K}u q=U&vn5 !QV_ d : ]Q$VZ qW\fF@~ ~]q;^? X Qxb+C5 QXB.Ea&a qxu7n5 q{)Xw) Q:$!y qy:KCt Q)Yn M q [YW] q=z~\u_( @R} %> }R3,%JG? r["=5P r"6Kp8 %"r6m <#!]R7tE :R-9fq95 |]\;$rahC $;|;$rahC1 > raob ;(ratS RA@z5B rbiL1< r#d%5% .rdata rd}qR\ ?#RE19]/2 rE1Tzr` RectVisible RegOpenKeyExA r/Eh|: .reloc &R&E)u <;<rFoC rHEKyN r hov+ RichRe >$r i@pz r.JyJe> r]km[u rLJP?? rMcP5 R{n:T/B %R]}O] RP5XN@g > rPtn $rPwo^$ R,_[$r r{>sq)Ree ^rS#vh r+Tv+u ruCG3f' ;Ruy-7* R`W|MW _rwx Ld rX8@jx ]~RxEu rxK|~} "R`y(- r}y_{E? s1>6z= ^S2NuH ")-s%4 s4$=bO s!.5eN} !s5W73L S9P}Uf S9U=[l s9W%5S salC1F< S }AQ; SblCy] sB[v+j s;CL-~ [s_cV_ scy:.=8&`6P sEF|:| [^SeG' Seli^nirt SeMLuq ~{S~);eQ SEvPMo se@x"M s):>fC S[}GEe7 S/&g/n( sgNov? sgOk3P2O \%s<G}T-d ~*Sh=] ~s<"Hds SHELL32.dll ShellExecuteA S=<IFg sIfvS%}/Sa sJ1tk_ :&S%KN SL9/ O5 sl~,*P Slq>x% s=m;!T! sMwajR >,Snep s&Nz8s SOu%%M <so@vJ/ s` !q$ <sq0q#y* S`@+R= s*r0#;T SrIr_} ssal1gnoL ]$sseM sseM1F STcv*t ;$SteG (SteG^ $;$SteG SteG1F (;(SteS StgCreateDocfileOnILockBytes S]tmvN=& s]>u?1 %suV,z s"]v1U SVE=&~k s'v&M\f ^?+s<w ?sWgN0 Sw" ,S SxUM\& S^_Y 7 -@SY9PD ), {SyQ S_#zj, S_#zp, &]+;$T ;t;0aBsI T;0acoL T>.=|=4 t\?4xx T5GN n t$:5k$ T5n2%= T)5$u_ {%T7OP *T7srx t8)cpMvt" T8{}nR t?A&(]- ;ta5}Q >,taPn TAr:yv TB<`8y TbSi03O .T(BtX4= TBU8CS <]<tceR +|T%Cg tci/EF tC@Y^W ;t]d;@ ;t]D]8DteG ,\TdDHPlLX|p@V |tDdLxF( ;T;DF tDh|@dH\TxLph tD\hdlTp@`HxhJ <TD|ht@P~(<8 >|td\HV$4 ``\tDH@X|LxPhG>{ td|LpF8 TdLX|Hhl@`h t ,dn5 t@dpDP\|xHlT $TdpHxDh (|tDPLxh@p`dH t|DPLX@x\TlH `tdP|Txl ,tD`|t Td@xh\DPX|HL |`tDXpLdH\h TdX|P`ltxpL@h {>+TE8 ]t],eleR %^<;t@F T,?}-f t~F?]1y* ;tF<]dF< ;tF$;HF (;TF]L ]tF;x]tF$ Tg8t ~w` (|@TH\@ (@TH\`dhxLtDP \THdlDhPt`|X< \tHDLXPxdlpV $Th|DLx@t \ThDP|pL` ThDt|| TH\|Dx`d@Xe$& The procedure entry point %s could not be located in the dynamic link library %s T;hF]` T@hHLPxD|dp\ thH`\TD~ !This program cannot be run in DOS mode. \ThLpPh ~ThM5# ThOI>h th|O_m ThPDpLl\~8 th|pTL`| t@hpxdD |tHThhI#{ THtuT&! tHTxXlp\DhLP ThXDpp ,<thXF0 t.I%B t<iHjJ ; tirW^liFe ] tixE tKOY1S tLd\DTx|V0 |TLD@hH tLDph|`lPTX\ @TldX\ \tldXHTP|hDph @tLh`\DHdPXl $TlhDTF T`Lhp@|h> |t\LHxPDH tlL@DpP` t`\LpDhX@x|` <tlTDHL|x`\@pf \TltHD|PXh@dh! @tlXHhx`\LpT` tL@X|lx\D`THh t|Lxp`\hn Tn[]A+ TP9Aoe $,TPD@h|lppF4 tpDhLX (t@\`pDhXxPLd T@pDtx`lL|d\h 2{ T`pDtxP|| ,T`\PdXl@HDtLh[ >T|`ph TphDX`|P\dx@ tPHl\x@TD TpHtdx|X\`h@h TpL`dt|\PhHD T;p;l;l;`F] TPlpLxD\X|d >,TPL`tHlXh|\h:(f )tPM75e@E ;t;P;(NteG @\tp`P $`t@pPx \tpTLHP@l`xWS2_32.dll tPTphT <tpTxlh|D` > TPx\L@`HhtlX >,TPXlx\LHh T=*;++q tq73UR= tQg2-{ tseD1]D ><tsig1eMre tSma^po tTdph|HP`LxXh Tt|d@XLDhI ,$t]tF t]tF;tF `\T|tLdP@hT t@TLD`V( Tt\|l`LD` tt|`lxHp`F tTp`|D\xlLd@ (ttP`|HhDXLp@ =>t~t}t tTxL`@HDX\hph t@TXxPdD\`Hlh T??*~u _t'U9- tup{q|b@ tV2YQ% tv*B],O t$ _Vf _tvhSq tV)Mw* >tVROaUl. _tWfO-cQdV \@TXDhH|l`Ld` >t\Xdh`Th t|Xd\PT@hHDLh t|Xdp`@\TxlV txEt^;dF T`X\|h Txh`dLXdF TXhlDpd\@|`P |t`XhTdPHL~ |Tx\hXHLt`Dp T\xlH@Dtd`|p Tx`lP@px t|x@PDHXlhV >`TxpHltL\@PV ( tx@pLd`hPDlX |TxpP`@DthHLV,0 (<(`TXP\xd |T\xtLhX@pPDV4 >TXtxDPLh@lpdV0 t@x|XDH`hLdlh>?{ TxX`LPH|\pd@ T}Y5N\ >,tyBk tyZ?-~_ T Z52. /<|U=} ->\_?U:{2 );u2|:;g u3fLds u3t1t_ *U)5m;Z U5RL@O U5]ue- u6MeUq {u6s$P {u75;4 u7e]u7 u9e}UE u9`}U^ UA6w$H;{' U<}aop| Ua V9/ ub)7U) UbsH@c \UC~Hv | u`ci UcO|[]SG*5 u{,Cwz "U;E68I {}->uE7 UENVB ;UE]O,4 U f_7F| ?ufJy6 !uf.PYV U)g=3PeG uG!-:tqJ ,uh+5: UhcI} k U'h'/f &u&>?I] =U')"I UIVHw=bo# (;(ujdA !*UJu1 uk!=?EUO =UL6[ cI!i uL8dAN UlKJ#* ,;,UltR "]&"UM Um1WVW uMoT1;T ]Un5{VM$ unVoHJ UNw15# \uO'+9 }uo9N5? U#!:p9 uQ;XI@ -ur+h)Qw U]!,;s USER32.dll usi1eA UT8[]_a Utg_uK< u;Th:q UT SY _[U/u" uU7&O0 u|ugA=K u'`uQ< >>?U"V |U%v^J U-!+\/w Uw@0[L |& uwK {UXhC] uy$237 uyHma1#K' UY'VJ u@Yvq uyvwN' [|uzqk Uz u4{ U zw>5u .-;##v V09Fs\ `V1L9< v1VsU# V3m{^D v3t2{P ?V(40< V5 5^?f V: `5D {_@}v7 v;8[_C V`8n&* v9.}fV V9s 5>U v9vM(U v.A6aOS VAf5~eT|V]9 VBl5eO Vb"%%r VbviUFy -v-c!1?a)wFA vcG;Yd' VCq}6I` ve-5U% v!`ee5s?E vEN_<f v(Ev~n= .vF&t) VIg g) VirtualProtect v"]l!0= )VlhED VLqlNV> v@LTU| Vm5U<dh Vma]tv vmfO7H +vMh&; <V$m^m$ "vn4?$ =-vo3m ]vP?-A v[p+bz =v=^=.Pv VpYSTR VQa >R Vr28%M VR7l:B6' !(VS=? v~|*sV ]<VteG ]\; VteG vt GHM3 |VtMv}, VTUhx=B }Vu>9|m V"Uc$( VU?DG3: V%u^Uq 'VUvc4 ^vuw~3. v?^))vf vVP..u V&Vu`E V=WE%M ;vwUse vyfnmW vY{]jh >%VYn'N _@vYqG VzGt6B`~|nOz W-0AQyu w0&h!x w_0=(m w1QEB w!2>d{] W2 uO~/ >W36*j W%5ZFGo w5Z")k w^6pUud1 W9IQ| W9mu!u ^w9Wq!Y warD1ucoF W.Bz#G W+;ChQ WE5GB?~ we'yy' w-F;1m ; WfeD }WfQI#T wGnmx.E4yO Wgz-}7vuUO wH)Bvu _WhTOM =WI1'T WIDJg}lk w!I:M+ (&wJ/x* >/WK1P WKUnOr wKv'Ba WL45Ov ~WL^p^n%~ \>wM9FGs $wm?eb Wmn2!w w~'N9v wN$ufG +WNW`~ wNX_3. WO1E"l<d wodn1( WoHS ~ wPu%OwK WQ9dY = |w,=Q(Z~F wRSZu50 w$~S/eg @WSuK_f+ wt0Ds<{ ;,WteG WteG1odni <;<WteS ; WteS ;,WteS ]<WteS %W>TOMl >WtuO^, W\UG#e wU[lwj W>[usY {=W+U_v WvHu7q 'w%vm= ?{WvN- w^vSB/ <Wvzfp w-wO}T WXU{7o "Wy*|M ^>-w_Z (, ]x]@ .}X :( $ <,(X x0ASU#a X,1\J# X2#l51 <x4L\t x6t)Xw *.X7{A;@ X)7I5, `x9E-UUI x >`9i x9{w,9 <;x;@;,auqE }{x.B` ;x;$BtaP |X(c-= =x-d& )x^d`, >X|dDH\ @xdD`|HH XdDHl@TpLP\xh xdDHtL|`pPTh XDdHxh|\pTPL ||`X\DdpLHt@V xdDTL@P`h >X|DHd`hPph# xdHTDh: `xDlL|@dTptPV >`x\DlT >\XDpdT| $`X@|dPHLpltx x|D@PLDF <|XDtdhB XD@`|tHTlxLP xdTLhlX@pD\H XdtxL|hDH\Pp XDTxL|hHp\d Xdt\xTLpl`| >xD\X@td`LhV${ <xdXTDT $x`dXT\p [xEe5m4( X*eJ'` >$xEtx >$]X]$evaw ;\]XF4 >]xF,;`F, ]XF(](PdnE ;xFPPF( xF|q`Y ;X;,FteG XF;x]`F ;XF]XF XG=3"W, XH\D`d@|PTlp x`hDtLPX @XhD\xdPlLT`V xHDXdPT|@hp\h XhdxTpHD|\`lhDTf x;HF;TF X|`HhP@dTF4 x<hl{| @xh|lLdTV $xHlt\l $XHltpxdTP`\Dh_ X@hLxPTHlp\t <XHplD`|TPh\Lh (X|HplLhDdtT@h x@h|pT\XHD`Ph >xH\PXTL@`h xH[qj~ <@@xH\XDhptT|V$ `XH\xPDhlh +xI7b[g -'Xi f{ x<j=5j &xkH#U x`lDDF `\xld@H $XL|D\Hd@lTpth $X|LdH@Dth X|`lDP |xLdTPDtlH`h (|XL@dxh\d (x@\lF xlhdLX@\HtDe xlhTLtL x|lHt\PDtF ,|Xl\HtT |xlp`HLTDh@X X`L|phP@l\txh $X|@\lTF XLThpDtH`V(< @XltPT\Dd` XLtTDl@H`|\hf |x@L\TthlPh xM3A=% ;x%Mdi x)M]Q> X@|P\Dh `xphDPtLHh xpHhX\P`T@|lh X|PHLdDlT`p~, > XPhTL@\`|tHDh X`Ph|TxLld\@ >x|PhXp@HLDd`h `\xp|@LDh |x\pLD@hTtldhv0{ $x$plPHtdTX`@L|hS Xpl`T\hxtLh xPnEt >$\xpP|XdL`hlThT%f <$xPT`\hdDH@t| <Xp\|xHdThvA{ xR572 Xr)KUG?F X&S.v~ XtdlxDhp|H xte_,5 xtGB`>& x\ThDdXlP|@Lh XThdpP|D\@HxV< >@XtHhL\|TlPDh XtHLD@ `\x|@tHTDF >,XTLdlpx|th ,!XTpDxtdLl\HP @@xtPhx (xtplXd@@F xT`t|@| X|tT\`| XT|\tdHlLPpx X],TteG >xt\ThD`l|~ XtTLhP\l@x \xtTPD`dL@h $\x`tx Xt@xLp\PH`h| >XTxpl@\ X}tY9] }X%UE@_ xu$sZF X@uuwI' &!XUW%7-y *x^V4jK Xv"FUb X V}KBb X`w1wc xWKw > @@`XXF ;x;xF] CteG ( ,;x;xF]xF ,<XXHPTp|lD\@t XxHtD\T@h`|L X@\xhtTP`h X|x`L@\DPltphH xxLDtX\ldHP|h> XX|lHp\F xX`l@hph{ @`xXlpT|LPH xx\lXL@dHhDt~ 8( X@xpd\`TtP|hf XXPH`T@td|\L @x`XtlpP xy2r->( xy5LL xyR7-5|(68 xYU+GC x!Yz-C "..x}Z8u_ Xz9r|t xzQ~wJ *`?,+y ~ ~^Y; Y17ms>8 y@3I7B &y5r#$ "Y 6}9 +Y6K!y _<Y7C! Y~-8l F y^9/>] y{.9-}E Y9W}US Y ,~a2$ YA5wjz Y{c.2[ y~D@E6 y D=Fa ~y=dMwY ,ydwE| -=YEhw %Y{f.> >YF_G" Y=Fm/E y}!-gF YgUW))ge Y;H]%/ y-Hi,I YHlm[S yHu\sp (y!igoF" YiM:<K yj\hHxr YkG].f Y&kW// YMcyw4 y:mMH` yMV_-y !,ym(x0 )]ynD& ?yNv?Ky y;:% P yqcE7p YqK9uyT yr,AM>+ yr,AM>+s yrK-7cM = YS=UYW=CY +yt]5 y,t^R yu7NZR Yv4154 y&V*Spl: ^Y=x]& YX_E5-aD Y[]XeW )`Y*}YeYLhi@ YYf#7u YY=oET5 |yzfwp ^<.\~z :Z$4`. z7{J^W Z7{vGoz/K{ .z8-P:& z9^}>& Z9vV{d9 zb=Uyx= zbv&o~R ZCgz7v zdHxi^9Q `'Zd@uJ ]$ze<5 zE9- 7 Z EmWQ zEw=l] zF5aSx6w |~Z%F9( {zF!M" Z^fQ5=A zF Xvv zG,4PE zhviI# z~I<&{ zIWhwi Zj2Rvp $zl}Ci( @zmun) <_znG2g znp}`F Z>* OM Zo)Zu% z(R=z5+ +z@[*S Z']sogM z{T;>(1 +Z?)|U zU+=3_7 ZuExBnA z:u>gx Zvbv4XG zv /<j zv&tn) z{x*f?