Analysis Date2014-08-18 04:23:54
MD5f2cc3cf678bcee6b6935b2d3d37fc377
SHA1d55c51902ea6c6baa54e7d28c182f6b6c9374689

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rdata md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.data md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: 5c4c9819d0e095524c776910486a1962 sha1: 3476cc477e5823186e33985b371de171442df4b1 size: 12288
Section.vmp0 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.vmp1 md5: 04bbdffac2f0e90da5e4323d0b09bdd2 sha1: 0bb7f421f4dc63b7fd77906bff472cd8999bf105 size: 1429504
Section.reloc md5: f62384b72dcf6e1523b0b1e29b69ec9e sha1: 8f5a2467a92149e4caaf5b68d745c42e67444923 size: 4096
Timestamp2012-02-10 10:30:03
VersionLegalCopyright: 作者版权所有 请尊重并使用正版
FileVersion: 2.5.0.0
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
ProductName: 逆天
ProductVersion: 2.5.0.0
FileDescription: 易语言程序
PEhashccd776ced6a4e10fa1370a5d91dfb59ff43b5575
IMPhashfd1f4da873df97e4c6613062d3de2da6
AV360 SafeGen:Heur.PWSIME.2
AVAd-AwareGen:Heur.PWSIME.2
AVAlwil (avast)no_virus
AVArcabit (arcavir)Heur.W32
AVAuthentiumno_virus
AVAvira (antivir)TR/Agent.1449984.62
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. WebTrojan.PWS.Wsgame.44345
AVEmsisoftGen:Heur.PWSIME.2
AVEset (nod32)no_virus
AVFortinetW32/FlyStudio_Packed.Y
AVFrisk (f-prot)no_virus
AVF-SecureGen:Heur.PWSIME.2
AVGrisoft (avg)SHeur4.ZKT
AVIkarusGen.Heur
AVK7no_virus
AVKasperskyTrojan.Win32.Reconyc.cask
AVMalwareBytesno_virus
AVMcafeeno_virus
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)Gen:Heur.PWSIME.2
AVNormanwinpe/Suspicious_Gen4.AAHKI
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)HackTool.Sniffer.WpePro
AVYara APTno_virus
AVZillya!no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\logo[1].gif
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\xiaoyuang.ys168[1].htm
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\30e0_appcompat.txt
Creates FileC:\windows\svchost.exe
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012014081820140819\index.dat
Deletes FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013061320130614\index.dat
Deletes FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012013052720130603\index.dat
Creates ProcessC:\WINDOWS\system32\drwtsn32 -p 1236 -e 176 -g
Creates ProcessC:\WINDOWS\system32\dwwin.exe -x -s 360
Creates ProcessC:\windows\svchost.exe
Creates Mutex_!SHMSFTHISTORY!_
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!mshist012014081820140819!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSwww.11111wg.com
Winsock DNSwww.7798k.com
Winsock DNSwww.5213dy.com
Winsock DNSxiaoyuang.ys168.com
Winsock DNSwww.0419dj.com
Winsock DNSwww.11111wg.net

Process
↳ C:\windows\svchost.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\logo[2].gif
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\logo[1].gif
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\logo[1].gif
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\3214[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\52shanhu[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\feixiandao.uueasy[1].htm
Winsock DNSwww.5266.me
Winsock DNSfeixiandao.uueasy.com
Winsock DNSwww.7798k.com
Winsock DNSwww.5213dy.com
Winsock DNSwww.3214.cn
Winsock DNSwww.0419dj.com
Winsock DNSwww.lelev8.net
Winsock DNSwww.ewasai.com
Winsock DNSwww.7799k.com
Winsock DNS7798k.com
Winsock DNSwww.1314521li.com
Winsock DNSwww.1314521kan.com
Winsock DNSwww.87dyw.com
Winsock DNSwww.llv8.cc
Winsock DNSwww.52shanhu.com
Winsock DNSwww.11111wg.com
Winsock DNSwww.6699kan.com
Winsock DNSwww.0419kan.com
Winsock DNSwww.66iu.com
Winsock DNSwww.le6tv.com
Winsock DNSwww.6625.me
Winsock DNSwww.11111wg.net

Process
↳ C:\WINDOWS\system32\dwwin.exe -x -s 360

Process
↳ C:\WINDOWS\system32\drwtsn32 -p 1236 -e 176 -g

Network Details:

DNSxiaoyuang.ys168.com
Type: A
222.73.47.229
DNSwww.0419dj.com
Type: A
59.45.79.57
DNSwww.6699kan.com
Type: A
23.110.26.14
DNSwww.52shanhu.com
Type: A
209.222.14.3
DNSa.uueasy.com
Type: A
42.120.63.199
DNSwww.87dyw.com
Type: A
192.187.97.125
DNS39712.vhost13.cloudvhost.net
Type: A
116.255.200.35
DNSwww.7799k.com
Type: A
23.80.195.34
DNSwww.11111wg.com
Type: A
DNSwww.11111wg.net
Type: A
DNSwww.5213dy.com
Type: A
DNSwww.7798k.com
Type: A
DNS7798k.com
Type: A
DNSwww.le6tv.com
Type: A
DNSfeixiandao.uueasy.com
Type: A
DNSwww.6625.me
Type: A
DNSwww.ewasai.com
Type: A
DNSwww.5266.me
Type: A
DNSwww.3214.cn
Type: A
DNSwww.lelev8.net
Type: A
DNSwww.66iu.com
Type: A
DNSwww.llv8.cc
Type: A
DNSwww.1314521kan.com
Type: A
DNSwww.1314521li.com
Type: A
DNSwww.0419kan.com
Type: A
HTTP GEThttp://xiaoyuang.ys168.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.0419dj.com/0419
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://xiaoyuang.ys168.com/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.0419dj.com/nitian.htm
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.6699kan.com/tongji/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.52shanhu.com/1.htm
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.52shanhu.com/jueai.htm
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://feixiandao.uueasy.com/index-htm-m-bbs-cateid-6.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://feixiandao.uueasy.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.87dyw.com/tv/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.87dyw.com/wstv
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.0419dj.com/tongji
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.3214.cn/?jueai
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.7799k.com/tongji/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.52shanhu.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://feixiandao.uueasy.com/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.3214.cn/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.52shanhu.com/logo.gif
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Flows TCP192.168.1.1:1032 ➝ 222.73.47.229:80
Flows TCP192.168.1.1:1034 ➝ 59.45.79.57:80
Flows TCP192.168.1.1:1035 ➝ 222.73.47.229:80
Flows TCP192.168.1.1:1037 ➝ 59.45.79.57:80
Flows TCP192.168.1.1:1038 ➝ 23.110.26.14:80
Flows TCP192.168.1.1:1040 ➝ 209.222.14.3:80
Flows TCP192.168.1.1:1039 ➝ 209.222.14.3:80
Flows TCP192.168.1.1:1041 ➝ 42.120.63.199:80
Flows TCP192.168.1.1:1042 ➝ 42.120.63.199:80
Flows TCP192.168.1.1:1043 ➝ 192.187.97.125:80
Flows TCP192.168.1.1:1044 ➝ 192.187.97.125:80
Flows TCP192.168.1.1:1046 ➝ 59.45.79.57:80
Flows TCP192.168.1.1:1047 ➝ 116.255.200.35:80
Flows TCP192.168.1.1:1048 ➝ 23.80.195.34:80
Flows TCP192.168.1.1:1049 ➝ 209.222.14.3:80
Flows TCP192.168.1.1:1050 ➝ 42.120.63.199:80
Flows TCP192.168.1.1:1051 ➝ 116.255.200.35:80
Flows TCP192.168.1.1:1052 ➝ 209.222.14.3:80

Raw Pcap
0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   41636365 70743a20 2a2f2a0d 0a416363   Accept: */*..Acc
0x00000020 (00032)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000030 (00048)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000040 (00064)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000050 (00080)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000060 (00096)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000070 (00112)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000080 (00128)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000090 (00144)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000a0 (00160)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000b0 (00176)   73743a20 7869616f 7975616e 672e7973   st: xiaoyuang.ys
0x000000c0 (00192)   3136382e 636f6d0d 0a436f6e 6e656374   168.com..Connect
0x000000d0 (00208)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x000000e0 (00224)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f786961 6f797561 6e672e79   tp://xiaoyuang.y
0x00000040 (00064)   73313638 2e636f6d 2f0d0a41 63636570   s168.com/..Accep
0x00000050 (00080)   742d4c61 6e677561 67653a20 656e2d75   t-Language: en-u
0x00000060 (00096)   730d0a41 63636570 742d456e 636f6469   s..Accept-Encodi
0x00000070 (00112)   6e673a20 677a6970 2c206465 666c6174   ng: gzip, deflat
0x00000080 (00128)   650d0a55 7365722d 4167656e 743a204d   e..User-Agent: M
0x00000090 (00144)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x000000a0 (00160)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000b0 (00176)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000c0 (00192)   3b205356 313b202e 4e455420 434c5220   ; SV1; .NET CLR 
0x000000d0 (00208)   322e302e 35303732 37290d0a 486f7374   2.0.50727)..Host
0x000000e0 (00224)   3a207869 616f7975 616e672e 79733136   : xiaoyuang.ys16
0x000000f0 (00240)   382e636f 6d0d0a43 6f6e6e65 6374696f   8.com..Connectio
0x00000100 (00256)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x00000110 (00272)   0a                                    .

0x00000000 (00000)   47455420 2f303431 39204854 54502f31   GET /0419 HTTP/1
0x00000010 (00016)   2e310d0a 41636365 70743a20 2a2f2a0d   .1..Accept: */*.
0x00000020 (00032)   0a416363 6570742d 4c616e67 75616765   .Accept-Language
0x00000030 (00048)   3a20656e 2d75730d 0a416363 6570742d   : en-us..Accept-
0x00000040 (00064)   456e636f 64696e67 3a20677a 69702c20   Encoding: gzip, 
0x00000050 (00080)   6465666c 6174650d 0a557365 722d4167   deflate..User-Ag
0x00000060 (00096)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000070 (00112)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x00000080 (00128)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x00000090 (00144)   4e542035 2e313b20 5356313b 202e4e45   NT 5.1; SV1; .NE
0x000000a0 (00160)   5420434c 5220322e 302e3530 37323729   T CLR 2.0.50727)
0x000000b0 (00176)   0d0a486f 73743a20 7777772e 30343139   ..Host: www.0419
0x000000c0 (00192)   646a2e63 6f6d0d0a 436f6e6e 65637469   dj.com..Connecti
0x000000d0 (00208)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000e0 (00224)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f6e6974 69616e2e 68746d20   GET /nitian.htm 
0x00000010 (00016)   48545450 2f312e31 0d0a4163 63657074   HTTP/1.1..Accept
0x00000020 (00032)   3a202a2f 2a0d0a41 63636570 742d4c61   : */*..Accept-La
0x00000030 (00048)   6e677561 67653a20 656e2d75 730d0a41   nguage: en-us..A
0x00000040 (00064)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000050 (00080)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000090 (00144)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x000000a0 (00160)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x000000b0 (00176)   35303732 37290d0a 486f7374 3a207777   50727)..Host: ww
0x000000c0 (00192)   772e3034 3139646a 2e636f6d 0d0a436f   w.0419dj.com..Co
0x000000d0 (00208)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000e0 (00224)   6c697665 0d0a0d0a                     live....

0x00000000 (00000)   47455420 2f746f6e 676a692f 20485454   GET /tongji/ HTT
0x00000010 (00016)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000020 (00032)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000030 (00048)   6167653a 20656e2d 75730d0a 41636365   age: en-us..Acce
0x00000040 (00064)   70742d45 6e636f64 696e673a 20677a69   pt-Encoding: gzi
0x00000050 (00080)   702c2064 65666c61 74650d0a 55736572   p, deflate..User
0x00000060 (00096)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000070 (00112)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000080 (00128)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x00000090 (00144)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000a0 (00160)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000b0 (00176)   3237290d 0a486f73 743a2077 77772e36   27)..Host: www.6
0x000000c0 (00192)   3639396b 616e2e63 6f6d0d0a 436f6e6e   699kan.com..Conn
0x000000d0 (00208)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000e0 (00224)   76650d0a 0d0a7975 616e672e 79733136   ve....yuang.ys16
0x000000f0 (00240)   382e636f 6d0d0a43 6f6e6e65 6374696f   8.com..Connectio
0x00000100 (00256)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x00000110 (00272)   0a                                    .

0x00000000 (00000)   47455420 2f6a7565 61692e68 746d2048   GET /jueai.htm H
0x00000010 (00016)   5454502f 312e310d 0a416363 6570743a   TTP/1.1..Accept:
0x00000020 (00032)   202a2f2a 0d0a4163 63657074 2d4c616e    */*..Accept-Lan
0x00000030 (00048)   67756167 653a2065 6e2d7573 0d0a4163   guage: en-us..Ac
0x00000040 (00064)   63657074 2d456e63 6f64696e 673a2067   cept-Encoding: g
0x00000050 (00080)   7a69702c 20646566 6c617465 0d0a5573   zip, deflate..Us
0x00000060 (00096)   65722d41 67656e74 3a204d6f 7a696c6c   er-Agent: Mozill
0x00000070 (00112)   612f342e 30202863 6f6d7061 7469626c   a/4.0 (compatibl
0x00000080 (00128)   653b204d 53494520 362e303b 2057696e   e; MSIE 6.0; Win
0x00000090 (00144)   646f7773 204e5420 352e313b 20535631   dows NT 5.1; SV1
0x000000a0 (00160)   3b202e4e 45542043 4c522032 2e302e35   ; .NET CLR 2.0.5
0x000000b0 (00176)   30373237 290d0a48 6f73743a 20777777   0727)..Host: www
0x000000c0 (00192)   2e353273 68616e68 752e636f 6d0d0a43   .52shanhu.com..C
0x000000d0 (00208)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000e0 (00224)   416c6976 650d0a0d 0a5802d9 7360090d   Alive....X..s`..
0x000000f0 (00240)   5705230d ed1b9117 e2183ca2 c01732a7   W.#.......<...2.
0x00000100 (00256)   605b1f55 19ea8990 fe251b88 4ba926e2   `[.U.....%..K.&.
0x00000110 (00272)   89ae7906 ec8494aa 66a9a328 7fc75f32   ..y.....f..(.._2
0x00000120 (00288)   c94841ed 8a13ceda f9e74043 b5b17729   .HA.......@C..w)
0x00000130 (00304)   e6b30344 a2f460b8 28ed9273 5116f895   ...D..`.(..sQ...
0x00000140 (00320)   61f8e1                                a..

0x00000000 (00000)   47455420 2f312e68 746d2048 5454502f   GET /1.htm HTTP/
0x00000010 (00016)   312e310d 0a416363 6570743a 202a2f2a   1.1..Accept: */*
0x00000020 (00032)   0d0a4163 63657074 2d4c616e 67756167   ..Accept-Languag
0x00000030 (00048)   653a2065 6e2d7573 0d0a4163 63657074   e: en-us..Accept
0x00000040 (00064)   2d456e63 6f64696e 673a2067 7a69702c   -Encoding: gzip,
0x00000050 (00080)   20646566 6c617465 0d0a5573 65722d41    deflate..User-A
0x00000060 (00096)   67656e74 3a204d6f 7a696c6c 612f342e   gent: Mozilla/4.
0x00000070 (00112)   30202863 6f6d7061 7469626c 653b204d   0 (compatible; M
0x00000080 (00128)   53494520 362e303b 2057696e 646f7773   SIE 6.0; Windows
0x00000090 (00144)   204e5420 352e313b 20535631 3b202e4e    NT 5.1; SV1; .N
0x000000a0 (00160)   45542043 4c522032 2e302e35 30373237   ET CLR 2.0.50727
0x000000b0 (00176)   290d0a48 6f73743a 20777777 2e353273   )..Host: www.52s
0x000000c0 (00192)   68616e68 752e636f 6d0d0a43 6f6e6e65   hanhu.com..Conne
0x000000d0 (00208)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000e0 (00224)   650d0a0d 0aa4c4a8 10e84510 5ee65c99   e.........E.^.\.
0x000000f0 (00240)   b42af6d0 75a2200f 57e0a28a 80053de0   .*..u. .W.....=.
0x00000100 (00256)                                         

0x00000000 (00000)   47455420 2f777374 76204854 54502f31   GET /wstv HTTP/1
0x00000010 (00016)   2e310d0a 41636365 70743a20 2a2f2a0d   .1..Accept: */*.
0x00000020 (00032)   0a416363 6570742d 4c616e67 75616765   .Accept-Language
0x00000030 (00048)   3a20656e 2d75730d 0a416363 6570742d   : en-us..Accept-
0x00000040 (00064)   456e636f 64696e67 3a20677a 69702c20   Encoding: gzip, 
0x00000050 (00080)   6465666c 6174650d 0a557365 722d4167   deflate..User-Ag
0x00000060 (00096)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000070 (00112)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x00000080 (00128)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x00000090 (00144)   4e542035 2e313b20 5356313b 202e4e45   NT 5.1; SV1; .NE
0x000000a0 (00160)   5420434c 5220322e 302e3530 37323729   T CLR 2.0.50727)
0x000000b0 (00176)   0d0a486f 73743a20 7777772e 38376479   ..Host: www.87dy
0x000000c0 (00192)   772e636f 6d0d0a43 6f6e6e65 6374696f   w.com..Connectio
0x000000d0 (00208)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x000000e0 (00224)   0ac1686d 069b550a f7d4d169 18802492   ..hm..U....i..$.
0x000000f0 (00240)   ec810914 8b3a586d b62afb30 5ea56c6d   .....:Xm.*.0^.lm
0x00000100 (00256)   f54ce74a 70547270 6113a5e1 83cc49e2   .L.JpTrpa.....I.
0x00000110 (00272)   4a81b20e db71                         J....q

0x00000000 (00000)   47455420 2f696e64 65782d68 746d2d6d   GET /index-htm-m
0x00000010 (00016)   2d626273 2d636174 6569642d 362e6874   -bbs-cateid-6.ht
0x00000020 (00032)   6d6c2048 5454502f 312e310d 0a416363   ml HTTP/1.1..Acc
0x00000030 (00048)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000040 (00064)   2d4c616e 67756167 653a2065 6e2d7573   -Language: en-us
0x00000050 (00080)   0d0a4163 63657074 2d456e63 6f64696e   ..Accept-Encodin
0x00000060 (00096)   673a2067 7a69702c 20646566 6c617465   g: gzip, deflate
0x00000070 (00112)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000080 (00128)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000090 (00144)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000a0 (00160)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000b0 (00176)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000c0 (00192)   2e302e35 30373237 290d0a48 6f73743a   .0.50727)..Host:
0x000000d0 (00208)   20666569 7869616e 64616f2e 75756561    feixiandao.uuea
0x000000e0 (00224)   73792e63 6f6d0d0a 436f6e6e 65637469   sy.com..Connecti
0x000000f0 (00240)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x00000100 (00256)   0d0a2712 66951a40 e10a3d21 12725115   ..'.f..@..=!.rQ.
0x00000110 (00272)   1b2559e9                              .%Y.

0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   41636365 70743a20 2a2f2a0d 0a416363   Accept: */*..Acc
0x00000020 (00032)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000030 (00048)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000040 (00064)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000050 (00080)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000060 (00096)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000070 (00112)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000080 (00128)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000090 (00144)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000a0 (00160)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000b0 (00176)   73743a20 66656978 69616e64 616f2e75   st: feixiandao.u
0x000000c0 (00192)   75656173 792e636f 6d0d0a43 6f6e6e65   ueasy.com..Conne
0x000000d0 (00208)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000e0 (00224)   650d0a0d 0ac4b491 4647ac36 43930448   e.......FG.6C..H
0x000000f0 (00240)   8b5f96e1 e174851d ec400b10 80         ._...t...@...

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f666569 7869616e 64616f2e   tp://feixiandao.
0x00000040 (00064)   75756561 73792e63 6f6d2f0d 0a416363   uueasy.com/..Acc
0x00000050 (00080)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000060 (00096)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000070 (00112)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000080 (00128)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000090 (00144)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x000000a0 (00160)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x000000b0 (00176)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x000000c0 (00192)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000d0 (00208)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000e0 (00224)   73743a20 66656978 69616e64 616f2e75   st: feixiandao.u
0x000000f0 (00240)   75656173 792e636f 6d0d0a43 6f6e6e65   ueasy.com..Conne
0x00000100 (00256)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x00000110 (00272)   650d0a0d 0a636f75 6c64206e 6f742075   e....could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0ad7 b6e9befd 268ca3a7   /html>......&...
0x000001a0 (00416)   84dff284 31                           ....1

0x00000000 (00000)   47455420 2f74762f 20485454 502f312e   GET /tv/ HTTP/1.
0x00000010 (00016)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000020 (00032)   41636365 70742d4c 616e6775 6167653a   Accept-Language:
0x00000030 (00048)   20656e2d 75730d0a 41636365 70742d45    en-us..Accept-E
0x00000040 (00064)   6e636f64 696e673a 20677a69 702c2064   ncoding: gzip, d
0x00000050 (00080)   65666c61 74650d0a 55736572 2d416765   eflate..User-Age
0x00000060 (00096)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000070 (00112)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000080 (00128)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x00000090 (00144)   5420352e 313b2053 56313b20 2e4e4554   T 5.1; SV1; .NET
0x000000a0 (00160)   20434c52 20322e30 2e353037 3237290d    CLR 2.0.50727).
0x000000b0 (00176)   0a486f73 743a2077 77772e38 37647977   .Host: www.87dyw
0x000000c0 (00192)   2e636f6d 0d0a436f 6e6e6563 74696f6e   .com..Connection
0x000000d0 (00208)   3a204b65 65702d41 6c697665 0d0a0d0a   : Keep-Alive....
0x000000e0 (00224)   244d9de0 3d98d66f 9d40d4b1 e20cdbb3   $M..=..o.@......
0x000000f0 (00240)   70c79587 f9f080e8 389108e8 804bc287   p.......8....K..
0x00000100 (00256)   872e5498 d00bbd78 80793037 1f500195   ..T....x.y07.P..
0x00000110 (00272)   0a07a130 01b428a0 851312bd 50d9e0f2   ...0..(.....P...
0x00000120 (00288)   ea8062ad 311317c4 e607b450 6d08ff47   ..b.1......Pm..G
0x00000130 (00304)   83fef123 0a5f0ab6 468a197c 0ca56009   ...#._..F..|..`.
0x00000140 (00320)   7b                                    {

0x00000000 (00000)   47455420 2f3f6a75 65616920 48545450   GET /?jueai HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a41 63636570 742d4c61 6e677561   *..Accept-Langua
0x00000030 (00048)   67653a20 656e2d75 730d0a41 63636570   ge: en-us..Accep
0x00000040 (00064)   742d456e 636f6469 6e673a20 677a6970   t-Encoding: gzip
0x00000050 (00080)   2c206465 666c6174 650d0a55 7365722d   , deflate..User-
0x00000060 (00096)   4167656e 743a204d 6f7a696c 6c612f34   Agent: Mozilla/4
0x00000070 (00112)   2e302028 636f6d70 61746962 6c653b20   .0 (compatible; 
0x00000080 (00128)   4d534945 20362e30 3b205769 6e646f77   MSIE 6.0; Window
0x00000090 (00144)   73204e54 20352e31 3b205356 313b202e   s NT 5.1; SV1; .
0x000000a0 (00160)   4e455420 434c5220 322e302e 35303732   NET CLR 2.0.5072
0x000000b0 (00176)   37290d0a 486f7374 3a207777 772e3332   7)..Host: www.32
0x000000c0 (00192)   31342e63 6e0d0a43 6f6e6e65 6374696f   14.cn..Connectio
0x000000d0 (00208)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x000000e0 (00224)   0a3c01d0 76027916 70824c23 a63ace7c   .<..v.y.p.L#.:.|
0x000000f0 (00240)   8ea211ac 840c210f 50400ba8 920c1138   ......!.P@.....8
0x00000100 (00256)   40285ca1 90ca2ab5 91816d44 235ec9c4   @(\...*...mD#^..
0x00000110 (00272)   f234428f c5cc41                       .4B...A

0x00000000 (00000)   47455420 2f746f6e 676a6920 48545450   GET /tongji HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a41 63636570 742d4c61 6e677561   *..Accept-Langua
0x00000030 (00048)   67653a20 656e2d75 730d0a41 63636570   ge: en-us..Accep
0x00000040 (00064)   742d456e 636f6469 6e673a20 677a6970   t-Encoding: gzip
0x00000050 (00080)   2c206465 666c6174 650d0a55 7365722d   , deflate..User-
0x00000060 (00096)   4167656e 743a204d 6f7a696c 6c612f34   Agent: Mozilla/4
0x00000070 (00112)   2e302028 636f6d70 61746962 6c653b20   .0 (compatible; 
0x00000080 (00128)   4d534945 20362e30 3b205769 6e646f77   MSIE 6.0; Window
0x00000090 (00144)   73204e54 20352e31 3b205356 313b202e   s NT 5.1; SV1; .
0x000000a0 (00160)   4e455420 434c5220 322e302e 35303732   NET CLR 2.0.5072
0x000000b0 (00176)   37290d0a 486f7374 3a207777 772e3034   7)..Host: www.04
0x000000c0 (00192)   3139646a 2e636f6d 0d0a436f 6e6e6563   19dj.com..Connec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e11cf6cd 827948ba fd1a8e34   .........yH....4
0x000000f0 (00240)   f1ba78e3 df9228db 8d01a22a a250ca70   ..x...(....*.P.p
0x00000100 (00256)   b78b9010 8c510a8c 810fed28 563b0dad   .....Q.....(V;..
0x00000110 (00272)   5f4c0aa3 bd36eb54 88d18984 d09402d1   _L...6.T........
0x00000120 (00288)   bc1b871a 0ed84021 ca5829df 49928de1   ......@!.X).I...
0x00000130 (00304)   0ae880e0 2cd089a4 52a0ad15 50e3ec89   ....,...R...P...
0x00000140 (00320)   62248b89 63922490 82ccc8d1 25593532   b$..c.$.....%Y52
0x00000150 (00336)   528052b2 8707482a 7ceb9519 0c878fb5   R.R...H*|.......
0x00000160 (00352)   4e89f85b 8beddfd9 825fb515 8e9ad00b   N..[....._......
0x00000170 (00368)   cac8ce97 68888770 df453183 64c82597   ....h..p.E1.d.%.
0x00000180 (00384)   73080ada adf7a85b 1a6c                s......[.l

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f777777 2e333231 342e636e   tp://www.3214.cn
0x00000040 (00064)   2f3f6a75 6561690d 0a416363 6570742d   /?jueai..Accept-
0x00000050 (00080)   4c616e67 75616765 3a20656e 2d75730d   Language: en-us.
0x00000060 (00096)   0a416363 6570742d 456e636f 64696e67   .Accept-Encoding
0x00000070 (00112)   3a20677a 69702c20 6465666c 6174650d   : gzip, deflate.
0x00000080 (00128)   0a557365 722d4167 656e743a 204d6f7a   .User-Agent: Moz
0x00000090 (00144)   696c6c61 2f342e30 2028636f 6d706174   illa/4.0 (compat
0x000000a0 (00160)   69626c65 3b204d53 49452036 2e303b20   ible; MSIE 6.0; 
0x000000b0 (00176)   57696e64 6f777320 4e542035 2e313b20   Windows NT 5.1; 
0x000000c0 (00192)   5356313b 202e4e45 5420434c 5220322e   SV1; .NET CLR 2.
0x000000d0 (00208)   302e3530 37323729 0d0a486f 73743a20   0.50727)..Host: 
0x000000e0 (00224)   7777772e 33323134 2e636e0d 0a436f6e   www.3214.cn..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a0d0a                       ive....

0x00000000 (00000)   47455420 2f746f6e 676a692f 20485454   GET /tongji/ HTT
0x00000010 (00016)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000020 (00032)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000030 (00048)   6167653a 20656e2d 75730d0a 41636365   age: en-us..Acce
0x00000040 (00064)   70742d45 6e636f64 696e673a 20677a69   pt-Encoding: gzi
0x00000050 (00080)   702c2064 65666c61 74650d0a 55736572   p, deflate..User
0x00000060 (00096)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000070 (00112)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000080 (00128)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x00000090 (00144)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000a0 (00160)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000b0 (00176)   3237290d 0a486f73 743a2077 77772e37   27)..Host: www.7
0x000000c0 (00192)   3739396b 2e636f6d 0d0a436f 6e6e6563   799k.com..Connec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a 0d0a0d0a                     ........

0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   41636365 70743a20 2a2f2a0d 0a416363   Accept: */*..Acc
0x00000020 (00032)   6570742d 4c616e67 75616765 3a20656e   ept-Language: en
0x00000030 (00048)   2d75730d 0a416363 6570742d 456e636f   -us..Accept-Enco
0x00000040 (00064)   64696e67 3a20677a 69702c20 6465666c   ding: gzip, defl
0x00000050 (00080)   6174650d 0a557365 722d4167 656e743a   ate..User-Agent:
0x00000060 (00096)   204d6f7a 696c6c61 2f342e30 2028636f    Mozilla/4.0 (co
0x00000070 (00112)   6d706174 69626c65 3b204d53 49452036   mpatible; MSIE 6
0x00000080 (00128)   2e303b20 57696e64 6f777320 4e542035   .0; Windows NT 5
0x00000090 (00144)   2e313b20 5356313b 202e4e45 5420434c   .1; SV1; .NET CL
0x000000a0 (00160)   5220322e 302e3530 37323729 0d0a486f   R 2.0.50727)..Ho
0x000000b0 (00176)   73743a20 7777772e 35327368 616e6875   st: www.52shanhu
0x000000c0 (00192)   2e636f6d 0d0a436f 6e6e6563 74696f6e   .com..Connection
0x000000d0 (00208)   3a204b65 65702d41 6c697665 0d0a0d0a   : Keep-Alive....
0x000000e0 (00224)   416c6976 650d0a0d 0a5802d9 7360090d   Alive....X..s`..
0x000000f0 (00240)   5705230d ed1b9117 e2183ca2 c01732a7   W.#.......<...2.
0x00000100 (00256)   605b1f55 19ea8990 fe251b88 4ba926e2   `[.U.....%..K.&.
0x00000110 (00272)   89ae7906 ec8494aa 66a9a328 7fc75f32   ..y.....f..(.._2
0x00000120 (00288)   c94841ed 8a13ceda f9e74043 b5b17729   .HA.......@C..w)
0x00000130 (00304)   e6b30344 a2f460b8 28ed9273 5116f895   ...D..`.(..sQ...
0x00000140 (00320)   61f8e1                                a..

0x00000000 (00000)   47455420 2f6c6f67 6f2e6769 66204854   GET /logo.gif HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a526566 65726572 3a206874   */*..Referer: ht
0x00000030 (00048)   74703a2f 2f777777 2e353273 68616e68   tp://www.52shanh
0x00000040 (00064)   752e636f 6d2f0d0a 41636365 70742d4c   u.com/..Accept-L
0x00000050 (00080)   616e6775 6167653a 20656e2d 75730d0a   anguage: en-us..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20677a69 702c2064 65666c61 74650d0a    gzip, deflate..
0x00000080 (00128)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x00000090 (00144)   6c6c612f 342e3020 28636f6d 70617469   lla/4.0 (compati
0x000000a0 (00160)   626c653b 204d5349 4520362e 303b2057   ble; MSIE 6.0; W
0x000000b0 (00176)   696e646f 7773204e 5420352e 313b2053   indows NT 5.1; S
0x000000c0 (00192)   56313b20 2e4e4554 20434c52 20322e30   V1; .NET CLR 2.0
0x000000d0 (00208)   2e353037 3237290d 0a486f73 743a2077   .50727)..Host: w
0x000000e0 (00224)   77772e35 32736861 6e68752e 636f6d0d   ww.52shanhu.com.
0x000000f0 (00240)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x00000100 (00256)   702d416c 6976650d 0a0d0a88 4ba926e2   p-Alive.....K.&.
0x00000110 (00272)   89ae7906 ec8494aa 66a9a328 7fc75f32   ..y.....f..(.._2
0x00000120 (00288)   c94841ed 8a13ceda f9e74043 b5b17729   .HA.......@C..w)
0x00000130 (00304)   e6b30344 a2f460b8 28ed9273 5116f895   ...D..`.(..sQ...
0x00000140 (00320)   5001                                  P.


Strings
x_
..c.x
c
...
I..
.
N.
~j
B..
.........W.?.....
.>^
....2.
..i.N`....T
..
.S
=Fw
G.|
q..
.g.).8..
.:.F.iph
m
#.@S58
.....
...
K4e.
.)..{....
E
[X........QWg
.....
.
080404B0
2.5.0.0
Comments
DEFAULT_ICON(
FileDescription
FileVersion
(http://www.eyuyan.com)
IEXT_IDB_STATEIMAGES
LegalCopyright
ProductName
ProductVersion
StringFileInfo
TEXTINCLUDE
Translation
VarFileInfo
VS_VERSION_INFO
<$,(]`
,% /@~
!><?<%
!,+/<-
?%(-_0
00@DXptPdT\Lh`
>0;0eleD^CDet
0]0EniW
0]0llaC
0;0solC
$048<(
0(48]X
04D`h@XHtp\LdT
04;LF]LF$;$BteG
04WQ8e
06K	(%
07];GmBAA
+0{7[}IY#g
08((<;D
08 ]M-
<,08<(<$X
;]0|;A
0A?e~E
0ASU#a
0_B.fU1
;0CteG
0$ D8Ddx
0dDXt|hPxF
0|DF0Xt
0<@d|Hlp`hxD\Lh
0DhPLxH\tF
0 |DLtl@P
,0 ;D;tF
0`dTthDp\LX@xh
]0etnE
>;0evaw
0;\F;\F
0(]@F;LF
! 0F=qsd
0Gl%24F
0gT|I%q
$ <$0,<H
0]h;0aerC
0hDdp@T`P~ 
0,;|]HF
$0HHLthDt
$0\h`@LXxl
0|hPpTxD\
0hxtp`T@d
0}ICMWf
0K4jn"5
0kk.7=\
>0kooH
<0LD\dPhptXl`|h
0@LDh|XpdxlT`V4$(
0L|DxH`pl@Xd\h
0ldX\@PpD\
0|lHtxTXDh@Pp
0`,=LJ0
0LLd|xPpD\ltTh
0l`Lt|xpdHhPT
0]?lm5s
0lTLLF$
(0lXt@HxpTp
/0=M)Hp
0(=(OD
0PdT`XptDxHhl~
0$PP|\`Ldx@THp
0PXHdT@p\PF4
0RB{uc
<( 0,]T
0TdP`D|pX@lt\WINSPOOL.DRV
0,TH`hDDF
0TL|HXt@\hx`ph
0T(Pth
;0tseD
]?0,'TU
0\txTdlDp`X|hh.<{
\0u+8-
0u.)E?w
&0_vJd
]0VteG
0w{An-w
0XHPxTpt`@|
0X\|hTdx
0<XPtxHd|lL\`p
0*x{qh
0\\xtH\F(
<1#?05
1=!"4e
14ms2^o
178UAQ
)1|7a]
18|ez)
1	AE=i
1<DxTlXF
\1(e)p
1F8_`?
1F	\=e5
|1=fp*
1hdIfJ
1;h|F$
1]hF8]HF
1|lhTxpDL@P\`~<
1$l|\PxLdtTXHpe$&
	1)M&y7
1\,o>c
/<!1}q
!1:q)E
1$TxXDh|lTF
1 xpTPLl`thd|X
1YGkM 
1=ZoEgM
1Z}Su%w
1Zz?-m
}@25vz
,/2~689M!
26dMVsg1
;.%?2a|
"~2BF?
=2=b=RCB
2cPmBr
2e.|;@]
!^;2e3
2):EQX7
2e<Zu}UK
2f\|;@]
2|F-&]
2i%?Vf
2/k|>~
2+NH~{
`.2[qh{[
$2qHUM
2rWDu?
2s0Jib
2tbSm4eMwi
2]WCLc
2wRH:w
2wTR8wN
<2ZGre
;?32-U
3&3@3V3
3>3F3N3
=3%4#4!4
34%;re
3#'4xME
3AI)-^3
3jS#%<e
$3O0pYj
3Om}K.5
<3>@pI
3qmx!tA
3s8)IX
3sl3GAmoS
>3(t8E
)-_#3Tq
3^U]!4=
;3Uu}+
3&\V6c
3_vE47
3V!;Ka
{3wl%'s
+3)%w	u
~=|3;~z
~/<4&*
4 (@;`
4 , 040;XF0
$40<88
,<,40;hF4
40hRz=J
.=42>}#
.429>#
(4`;2I
4;4MteG
4]4RteS1
 4((4t
4]4wohS
,48,,\;\
$,4<8( 
 4,<80$<
480( $(`
4,8<4W`r4
48pF,HdF,
4Aea]@
;4aerC^
~4Af]V
4+?AKz7
>4aTro
;4bolG
4_c/<DX
;4CgeR
$4DDl\HX
4D\d|`XtL@xHh
4;dF]@
,4dPhHDxt|L\plh
<4DPL`\TtXdxp|
/4	d?x
4@@D|XHtThLx\h#
4%_e=f
4E"'ik
;4evaw
|+4f05/
4<($]`F;p]HF;x
4fx(<3
4g3U0=
+4Ge6M
>4;H;4UteS
4hD`d\HtlTXLx
4hDdX|\txLHpPh
&4H-Eu
4(,;HF,
$4;HF]D
>4@hl|HtT`pDV4,
4hMuN~C}%
^4hPl|Xdxl
>4H|PtxX\T
4h	?\Q
4hVCq[
4H`x\XXF<
\4i`n1
4`\LD@
]4LEHS
4]LF4XpF
4Lhp\|`tT\F
4LLH|dltDT\`Ph 
4ll|HLXtPhdD@6
4@`L\|xdx
4mP|?r
4ni(T]aN
>4oCet
4$\P|`D
4p`|DP\tL@hxX~<
4PDT|hLxt@\pd
4;p]@F
4Pl\TDXtdLHh`
4PteG^;p
]4PteS
4@PtTdXL
4pTx`@F
4<P`Xhlx|Tp@\t
4PXp`dF
4pX|@PDtTHhxLhV)f
]4rpsw
]4tceR1tL
4| tD`
(4;tF;\F
4Th@lDl
;4tiaW
4@@T|lhtPLD`XV4
>4tl\Tx
 4t]pF;P
&4->u:
4u8.w[M
\4v!c1
 4v+ge8
4v{*gS 
4%WyL[ruE+
~4(,;xF
4 (,]xh
4<;x]H
4`\@XHd|tPxTL
4XlP\H@tLH
4X@PxD`tHp\hL
>4XtHlTpV8
4@xXdHTtPD|pl
,,,4x]xF
4xzueu
|4  z?+3z
4]z(i$<
4Z']qD}r
50u7v!
53HSb;
5?4}j'uv
5:5A89	
5) 5.u
56~zpE<
(589@E
591}ua
59C g:?;
5?9ORMe
59v}7.
5aK&4i
5/&'BMI
5bRLZI
5C&q(Z
$5DE?9,
5dk;P 
%5E#>Y!
5FjCya
5g]M~;
{`5gUL
5gWk)8[,
5!|H3p*
5H*<#m
5I`kBPmRkA
5\JY(Z
5?]	kA
5KAWJN
&5~M*	
5*\m)}1#Dz
5.(n?![?
^5ND.O
5-Nu%p2
5N/Y1&9%0
/5=:%p
'*5P0u
5Pm_f?
5+p*|t#
5'Q7KhS
5>Q=I9
5Qq=sk
5Q#},r
5Q,>z	N
.5SoZ>
5\ Ttf
5U94#T
5uRVF]
&5UY]{
5v$4}^o
5v}rSu
<5v t"
5W>q=?
5w,)T)
5X_1db
&5Xco?g
]5X?WfrNT
5y1e=7u
5Y%EG"
5'Z?8>
6,4	<0V
&}65I9E
_66e{V
]68'Yb
6=9yY;
6="c{U
6@DdhV
6DLlhh
6;:fU r
'[|6]j
>6^\JF
(6m76h
)-&6$MW
6nW>6^1
6Ny:mMH`
`6O^67
6\pCl&
6Pfyi5
6`py2wn
6pZ)NQ
_^]6-QO
6%r|-9
}6^r^e-
6rq:1u
6!s mLX
*6TaK-
6t@LTHh\PX|dD
6T`|X~,0
%6U g4
6><WAQ
6xlDHh
]6ye;	u
6[ZQVegW
7_~0Syk:$-
71]5YY3F
7?1-	6
727b7R7B1
72uzr"
765bd?
^77%53
77#P`t
@77S47
79	E(%
;7]a6Y6
/7AfE@
+#7B	%)
7Bpjt3b
7=c{	(b
7CCuxbAF
)7CD&x
{(;7CeMxN
7CuLWiS
7E~=-5
`7F}E-
7)-#]F[rq
7&h}D8$
7?IJ='Ug
:|7J5G
7j8))2
*7K[l?7)p
 7Oh}8
!'7Q$);'
7=r(TO^
"7&!u5.2'
.~7UDv
7UW~x=7
~	7v}.
7W7 )9]
-%7xZq(D
7+yyB=W/
[7yzS}P
%7YZWv
(< 8$$
$ 8<0<
80, $8(D
(8$0D,|Pl
"&80%)<M
8%&"0n
>8($<,0T
,80$;tF
81]hF;LF
>823LT
=8:^(26
;83IDG
83pQV2
(8 44;dF4
84``DD
8 4;D]TF
84`j5(
/87f_ESh
}8.7yE[
"'8+"'8
$); "&8!"&8
88,4$ 
8;8acsE
8]8IelO
8]8SteG
8;8TteG
;8aerC
]8AteS
;8bolG
;8CMOC
>8colr
(8DDd\|pxPHtlhh
8;d;H;8GslT
>8DH@tL\xTPXhph
8DH|TPlxdXh@phYD{
8(d`hX|/
]8dniF
8]d]PF8
>8DPl@x|\`X
8DP\L@|xXd`htV
8@@DTLXxd|`H\
;8eleD
8e_~mPLE
;8etnI
8EV}iS
8ew#B.
8Fv5|Y
_}8:H|
 8<;H]0AteG
8(;HF;P
8Hhdt@LxXpl|
>8HLPx@dl`h
8htp@T`DxXH|L
8{HW#En=
8hxDLdlV
8I?8V~B
>8!ILE
"8(\IU
8]JEmT6{~
.8Kwf5@
8LDpdLF(
8]lF]P
(8`lP\HtxhTpXd
8LTHlPt
8lxhT|\
;8MteG
"&8n!%7
'>8N8_
8%n=cC
>8noCe
;8NREK
<8| |P`
8P|LTt@xlhdp\
8P`lxh@\dh
8Pp`dH|PF4
8@@p`PHxLXTdth*Kf
8PteG1
8!pT?X
8``|@\pxhh
8\|pXtlxdDTH@h
8)|Q06d
~8;|qS?
~8;|qSS
8riDm1
;8RteS
8SI#/N6
8solC^
]8SteG
(8TD`LXdx|l
8Td`XD|xP@\p
8|`T`F
*8TFxH
8THX|\xlLPDWINMM.dll
8tiBI^
]8tinI
8TTL\h\F
>8|TxdpHX
8@T|`xPtD\h=
8T`Xtp\x|PHDlh
~8ve2D6
#8VIP)
8xdD@Th
8;XF$;D;XF$
8x|pdl
>8X@PLdxtp\Th
>8x\Pp`
8xtHdlV
8@xXLD\h%C{
"&8y"&8@!'8
[8-]]YK3
8zi*k|0
#91Y!:
95u\jE
 -=96)7
9(6~bn
	96_nm
#'98'+>
98`M?{
99v1+|@
?9A}CE
/9a}Sc
9]b$')
9Ba{}-.
"(9d"&8G"&7
 9D|gB(
9d's>;
!9e}#U
~9f}V>
;9G}=]
9g7ks}
)9g}ec
9G&j"57
9'H9+5Q
	9H/Ox
(%9>'J
.9[*Jp
"(:9KS_
9k->U?0O'
=9&lqY
(9"m%?
)9M9%r
9=MqP4mo
=9N}?>
>9N}^.
9NajyC
9O^avE
9qv-OY
9<Ro"c
}9u}-]
9>ub?,
9uFF4u'
9U\;UT%
9*U=Y5
9vq^M^uy_
9vUOm7q
-9Y}A!
?'9Z$K
9ZZjW[	7
-~:&~%a
)|A=-+
A1A*Ax!
/A1O3]3+3{3
~A4g<i
a6i@)B
A8+/<-
A9W%AF
A9!wJx
a|bA@6
A]Cwe#
Ad2!w)
A.d?CM	
aDu=3p
aDY((@
adY}	kz
AeE5]p
Ael^0<<
AEmEiO]=
`;<aerC
<]<aerC
;(aerC
](aerC
><AeRl
Aero^]p
.[%Af/~
AFnO!=
A@'fNp
:a]GCV
A?GZ_3W7
aH_kt2
A)IY!a
+=&a_M
A;M9>A
"AMV[AE
an<Q1*
a\]&O"
aper1]\
> aPet
aQ)I!A
?!AQz4
AR!s/8RTs
>asse1
A%U$5 
A}>/uC
AUeBRE
!A'U?yjk>
	aVJy[
a)Vw?91
+$A:x;
aXL]~+
}Ay6%{
$>A \YG
/A"-yK
aYl%}/
a)Y_nt
Ayor1;TtlF
AYWOw)}
}{-&}B
b1$c30
b1g=I~
B]5eO3
](b5ie
B6gh3?
*^b6,V4
BA5!/$
BA8bOirx
baE5#0
,;\;,banE
Bc,PUc;q	
^B@D7B
=Bfc5q
BF^J/>n
bfnx;@
B+F|qkd
b_(-g  
)b@h /
_> bH.
'";b]H
Bj-9>:
B|km7I+|
b_?KPn
bkUft{
:)|BKV
Bky#qT
|B,{)l
b^lNU|
b#?[lw
bMB C7<
%bMBmMV
Bmet^;8MteS^
bOE3]u
,]@;,bolG
Bo+:SC
bOss^;tF
	BpOD'
@BqOk&
BS5=iEz
BTH](:R
+BtMIyl
`bUk}9
]B&w%3
-=Bw)w:`/IY
bXjM#A
bYG7[#A
Bz6+4v
C(26e?
C31	-g
C\3J5?
!c4Ff$sN
c|4GNI
c4PV<1
`'c5AY
c5t9;A
c6``FH
[!c7Z/
c9I&w/
Ca"FQ}
cB'yM:
^c >dq
ceK}1h1
>ceri1
;$CgeR
(]@;(CgeR
ChooseColorA
\c`j/y
	c!K}#?
ClosePrinter
C<M\U|]
cmYa5VlM
%Cn<4.
-C~NEe
 cnem<
Cn>fAY|
Cnoy#uwM
>(coDt
COMCTL32.dll
comdlg32.dll
cpHtlPDL\@|dhh
c`\ptXHDTh@|Lh
^Cpw5Y
C!pyVn
CQ8-$f~
%cQE.3
c{T9GAd
CteG1;lF @tF
$;$CteS
C,/u5[
}`Cutz
cu`{~|U
-c'v#_
C[V\,>_
c{W795S
Cw7*l\
cW&oEv
+cWqgs
c xS%Z
.Czt,O
	C.Ztv
c?)Zy7
D$ `]]
d0{FK^
d1pLFD
d.23^ll
D*2A?z
D3CF!{
\d<#3Vb
?}D5Fe
d%65;x
#d6sC:L
D7`M;hC
d;8SteG
;D;8WteG1F
d8"ybtU0
dCoKsl
(dd|\|
Dd2_RR
;D;D]\F]h
dDhlH@t|PX
dDHp\T|
 ,Dd|L@HlTX
\@dDlL`|XpTh
@DdThHxtpPh
\DdtLlhTH~
@DdTlL|txpPhh
DdTL@lX\`ph
|D@dTtxLh'
>ddx@|DHhTPlt
 ddXhHHF
>|d@Dx`hltXp\h8
d\DxtTXh@HplV
DdXx`L\P
)dEcuLv
del^`F
>(Desa
><desu
]D;@;@F
;dF8;pF
DF;8yarG
dFDhF8
<]DF<;<igeR
 ;dF;LF
;dF]<QgeR
>]dF ; SteG
;dFTHF
Df &UN
;DF`xF
Dg?:&~
d^gB&^
,`dhF4
<$]d]hF;h
D]HF;l
;D]h;hF
DHh`XtpxLlPhI
DHl`L`
dHlth\Lhz
dh@l`TPLx\XpOLEAUT32.dll
d`HL@\XDhltp<
(dhPDXT
dHpPtlhdF
dHPp|XhO
dHTptP\`lxX|h
D`htpV4$ 
,DHTtl|L\x
Dhxdlt@LP\pX
d\HX|hL
, @\dhXp`LPHtlh
"dI"};
DISXqxDEE
;Dk0`^N
dk8S	*
d^k=I>J
>@\d`l
 dLDltT`p\@Phh
dLD\TlXp`tHxh
,dLD|x`lHThpt
{d^LG:
$`DlHF
``@D\LHpXPT|
DL\HXhP@plx`
(d@lLTPpF
dLltp|XDTh@\
dLlTX`t\H|px
@\DlphF
d@lp\`HxtT|L
d|l\ptPXxDh`f
> DlTHpd`h\t|h\
>Dl@T`htH:
 DLtHx\`P|X@pe
dL)u]p
d\L@XtPh`F
>D`LXTphtd
&##D]/m
D:M_cM
;,dmoc
DN?, `
 ;d; orcS
d/ORpE
>\D|`pdHtTP~
(\dPD`PF<
,DPd\TLlpX|Hhh
DPd|X@l\`tLhh
DPH`ht\@LpT|LOADER ERROR
@@dPH`LDtp|l
>d|PhpXD`LTl
DphTXl\x|t@Ph
<d|@PHxh8
`d@PhXpL|lx\h
>DpH|XtxT\dh!-f
>$dPl|Lh
d@\pLt
dPLXHpD\@lTxhX
\`D|pp
||`DPpxF,
|dPXh@tx\`THh
>Dp\xPHT|hXLhZ$f
`Dpxt@XTX
^&DQ3?@
[DQ6ce}
@\dT`|DhD
|DTdpL@l\h`h/8{
>d\TDX`t|h
>]$DteG
(](DteG
,\\DT`hltPxX@`
<Dth@`p|\XPldV
dtH@`pXTlPx|h
dtH@xhXTl|p\hy
DT|ldXPL`th
D|t`ldXT@xpP
>\dTl|`HP
`DT|lP\Ldx
,D\TPhLt\F
<dTPLt\t
 dTptlL`PD@|\~0
DTpXhx`dF
$@\DT|tdld
, DttF
^d@tT`PLXlpx\hY
>DT\t`Pxh@LHhN
D\`txd~
dtx\@Dp\F<
dtXl\H`px@hPh
`dtXL\|p
,dtx\PLl|`p@Dh{
D{=u	]
D&%VOG8
Dvq]$N
dw\ib5
dw\i=b5E}A
<|]Dwj&
D-xaUW
>\DXd|`tHhLV$8
<;D]xF
<]D;XF]<bolG
>@D\X`L
||D`@\xLF
dx\|lLptTP~,
@|DXlP~
 dxlP@D`T|pX
\`d@xlt|LPTD
|DxPHh\TXpd`
dXP\hLD@`|Tl
|D@X`PldTth\hn
dXpLlT@hHtP~<
dXp|tP@DL\Tx
 \|DxtT`d@HlPh
dX|tTPX
@dX\tx
>DxTX`L\dp@
||dx`XPDH
dY88Htp|X`xDL@PTh
DY$?|;f
|E":^|
,&E*)[
'E*%?+
E0{vAr
e1+?IT
e$!1W4
E#2e/s
=|@!e2U
;(E4eU5)
!E4})sM
e5!9y(~d
E?5=B~Z#
e5c!)7
e5%c=!Q
E5<wnY
E&5yT^7v
>E5yx"
=E6wW-.O
!E~(7${%k
#e9~O=
e9]}UM
Ea9l!k
]eAcay
eAf-/y
+e`	Al+
e%?Aul
#eAxrY&
e=BElY
EbH7$	{%
EbOY5#
`Ebt/P
EBv5ey
E:Ce{e
!eC:EX
?Ec[K	
e[cp3T
[ecywA
edC=1=J
>(edoM
e$du7U
>ED-v#
=eDVPUK
;<eelS
EeN$}e
eeV;q2W|
eey%4!^
/%:=Ef
\Ef [`
<&_Ef9
_EfA#U
E=FFz]F
EFsu2_p
EfV5{"
	E!G]|?
E\g7T;
!	Eg[aa3'
EgE[aa
E]:gMQ
EH&K)	
;e*HL"
{E;^HLXdT@|Plt\`
Ei9-=%
$]$eilC
&%eJuq
EjV"#;
eJzv]a
ek|LKuQ
eK$vFDc
@](eleR^F
eliF^emiT
E#&.}M
> emaN
emec1]pF
eMwo1gass
~eM]z8
^>=En	
)(E+!N
eN{/]6w8P
e}N*=e
engD>.[
 Enq!x:
eN*V3v
 }eo**
E/O9XO
EO}Aa)
e=oc+2
EPy?M?
E]Q%ck
e:+Q@R
e&q]	@u
er8wG;
era$$8D
$;$ercS1
erFl10
>$erid
eRla^; bolG
eRmo1ruos
;$eRoC
]<eRoC
> erru
;(eRsI
$ertS1
E(sXRS#
(;(EteS
(](EteS
ET$IJ#
]$etnI
!etNs	ud
eu{{D"
^eu=usF
{E}!V5=
EVae=%
EVsz:S
EVZ6`E
([e){/w
`(	e"W
|E~WG-pS
E~W;l'
e?]}X0z
_	eYCo
}ey%MG
eZ5"E;
ez-#)8
Ez=G7I
eziS1;l
-	"-=F
,;`F,@@
;`F(;|
]`F;`;
$`|\\F
@F0]`;0CteS
]\F0]0sffO
"|[F+2
f-2!,a
;@F4]4tseD
}?f4cU
]|F4]\F4;XF
F4U]fd
^F5(7:m
f5]EV_V
~f|5iz
:f:7;~;
F	*7cz
%^+f7V
F#+`?8
>f:^8d
F`8d<w
]`F8]`F8
|F8;HF;|;
;|F8;t
F9%q*q(
>f9[r#
F)b+[}
&!F}" B
fC6CSq2
f]C}.w
f.D1;pF4
;`F;DF8
<;`F<dHF
?F'E16
feB?@)
FeB?@)
feT}2C3
|F;@F;
]@F]\F0
@F]@F4]4SteS
|*FFqpG
fg%^;M
Fg,&mstH
FHEAZV
;@F]H]@;|F
Fh"K84
&%+(FHP
(;@F(;@](HteS
,;`F,hXF
FI[*4}_
 ]\F ] igeR
FiOQ"z
f[|IzW
F=JMJ{
)f*L]<
@F]L;dF
fL]E:_M
;`;\F(]lF(
;`F;lF
;@F|lF
^%"fMf,
fN9O6W
"F*\nA5
f|O8j~,L
FOBAvW
fOBh 3{
\]fOHZ
<;@F;p;@F$
Fp?:W	
fQ!ah#1
fQglS2
>fr=!W@
> ] FteG
;,FteS
;@Ft@F
>]\F;TF
"FTGr7
 ;@FTLF
f&uLg%
#>%Fw+
^}fW/.%2
_%fX!?
FxSk%9
F<XVR_\
fx]]wQ
fy7u3y
%&FyyF
fz<nug
fzytN	
|%g$#:
g1/a,K
g2`?3K
=+G3e?
g3m)^[v
?g4\)D
G$5+8!0
G$5+8!o
G=7F]6=
G8\^=e"
g-!)?+a-
-GA$IU
gaK)N+
@G>AORp
G Bf:g	
GCq`7Z
G+D92=
gD&Cc-y
GDI32.dll
Ge~H:5
GEo5D 
GetModuleHandleA
GetProcAddress
GetVersion
]geWg_
	G]Ey*
GF->GGb
g+_fZ1
gg1s=LR
GHnO^8
GjJAbN
gl"kLU
GmKSyt
G^&mOu
;G"msN
G--N_'
gNcq7@g5Q
gni1$(
gn#`MKFvZ
GO;eV,
gooDNV
GP0kIA
g/#/pb
GpF9w?g
G?Q1TA
Gqs.i\%
Gs$dHY
GSEBg1
%GtqJ!~i
`G )u+~%
GU2YL]tT 
GU/E9.w
g:&Unl
Gu$^.W 
<-GV8c
GVJh	:
gvp%V/
(GW45F#
GWw]3|3zF
gWX3w4
%G$x\9
Gx*S~b
-g}_y~
GY'H%B/2
gY$)j=3j
G^yuxP9
Gz2gv"
:Gz5ze
gz9@&`?
gzeqo}H
H08^(HT\p|xhtPlLXh
 h0_mu
H1 1< XlxPdt
H1*=v|
h1!v,xE5
H2,^$h\DXpt`p
H2H^xpF
H3t1ddF4
]'H3^z
]H4w%?7M
h5Q*G6W
H5t^,8hX\|dpx@TLDl
;H] aMCL
&HB97<
HBAXxq
HBbI^?
"HBGqk
_H*'bH_
;H;$bolG
h]/bun
hc5{w!
|HCVO{`=-Jx
hd@`|@
HDA,$4l@Yl
H;D; aerC1F
H<d f|
HDLd\F
hdl|LxDTPHph
 h|DpdhF
Hd`pXdF
Hdp@XLPlx\`|V<
hD]&Q<
h@d\tlDXHxTL
hdt|T\\
 HD`tXxLh
 \HdXph`L|ltTH
hDx`pX@TxF<
h\D@XxTPh
[#he&f
#h|EM?a
;h;<evaw1F
(,H||F
;HF0|HF
;hF4;4aerC
;hF4LX
:_hF5,X
HF8]8idim
(]H;`F;(aBsI
;hF]<aerC
"HF-$C
^]HF;h
>;HF<;h;<acoL
$;hF]$idim
HF;$lliF
;HF;XF,;,SNIW
hHd@lh
 HHdtPXd
hH|DxpT`P@t\
~H\hIe
h@`HltXPxp\L
hHPDp@Xd|l\T`
hhp`l|TtDP@L
Hh|t@d`pxl\D
HH@tL`DF
h\Ht|pD@lPXx
h|HtpDP`TlLxh
 HHXDp||F
HhXDt\Lp|@d
H`\hXpF$
h\HXPlL`p@xth
HhxQU]
HHxX@`F
h'IRc5|
HK_vNL#
hL|\DHXPtl@`
>hld`|PDX\@1
hldp@tL`PD|\
HLdXDlpT
|hl``F
H[lgUJ	
HlhXTPx\t@LpV<
hlLH|@dP`xXth
HL\lp|h
H@lPdD|LX`pxV0
HL\ph|@tXxlDh
 HLPpl|Xd
$HLT@\ldx`Xh~
hltpL|x`DHdTV
hlTtXdPpHh
hlt\@xLDPF
HLX`\dL
hl@x|\HPtpdThp
hNC<E	
H#NK>~w$
}$hn@v
 ~ho5G
HOJy58
h[O$UXQ
HOVk68>R
hpbgT[
Hp`@\dDlXh|
 |HP\dx`hpLTD
`h@plDtHTXd\
hP@Lt`
h`pPdX\
<$hP@pHhF
\H|@PplxtLDX
HPpxTd@t|lLD
>@hPtH
hPTLx|
hp@|TLXF8
HP\XhTDpLh
<H\pX@t|xPDl`
hpXx`h
``h{%!%Q!%(
HqoV4 
HrCg@b	g 
;H]$rtsl
hsMG2p
hSt/)Q
; htaP
ht`@DHP
H`TDphdLPl|X
h@`TDpl|h
H@TDplPtpF
htDpT@`
ht@DT|x`HPlh
hTet1daer
]HT@F4
Hth|Ll@X`dD\hK
<H`thpX|L@D\dhI/{
\h|tlDdH`TXh
>HT`lxdtpLPX@
HT|PxHF
> htTl\p`LxD@dhh
(hTtp@h
Ht@X`x\DxF0
HuH&6.{
HUI_}wLG
HuS[Nr
HV?MR'z>l@Qq
<@hx`dHH
h\XDp|HPl`dx
<hXdP\`|ptxDT
,hxdX@lDLHPThe ordinal %u could not be located in the dynamic link library %s
H\XdxpPTL|Dl
 HXlpHF
Hx@p`h\DLPlt~,<
`HXP\tT|pLld
hxt\@HX
Hxt|TdL@l`XPh_Mf
hx&y5t#Zv%'
HYMEwn
[}Hyu]l
H|Yvaay
hZ3@)'5'N
hzLz]y
H@Z<x/
I11f=Iv
I}{15;
.{i2?Y
I3@?uD2g
I!5eG6
i^69PI
!i7p_'ie#~
=I9e	5
/~>[ia
I+a?2~
Ia	z!r
;^ic\@
Ic{.R#?
?^i[>^d
$]$idim
idim^PtuO
>iDsw^
iEvUZEK
{i	EW)
IG9m;+
,igeB1F
;<igeB1iaPn
;<igeR
IGG-G	)
IgtOLv
Iiz~om
):_iJUq
=:ij`uv
}I=^L'
(;(illE
	i-^M%
i\&M2-!
iM\DnG
&iMyi-
{I?/nf
IQez9x
iQh/5p
IQMgq3*
+I',ro
> irtt1
;(ISLC
]iTD~w
~I%ubjiFB
Iune18
iU.|"v
?Iu:z!
I?%uZj
-i]v<?/
iv5bu~N
Ivj4uL
i-vwh]Oc)
'	iW\%
i XAE2
i=xI7K
I+x=y4
i=}=yg/Q
i}yy{/
#}Izu%}
}I,]zY
J1uuaAYIO
j9~}R6
ja{(BXn
-JADVAPI32.dll
JaR}yF
jbGt#6$1
JBmw{5
>$jbOs
!j.<%C+z
je8}{$
JE=W9\N
)J_'(G
J>^ Gx
=jgxQs
^J`h0R2
+jh-A[F
JHI4W@
j+Hmi:MSz
JH-<sSL
JH-<sST
JhT5ze+>]
J(I[Cx
J`iU=I
jjp)0(
Jk\&/k
>	,jLP
J`LQ7;
+jN hu]?
,JO[K8
"]JpXO>
j=q},	
J^r;},m
jr\v*0
JS&Y$W
J;t80}@
JTX&oF
JU(K~*
JUua-e
	*juuy
JV~(80
Jv)@bR3
j!~vK[
Jvr{Cq
j<@W@<
jw3vKBu
[J}WOS
J X-0[
jxvT~7
j]y	$5
JYD%oX
jz<p'G?
_,K#,=
$/=K>:\
k297e?I
k2~],PU
K3|^;G
k%^_58
:K6WOg
K}7`flnQ
K9*	9P+,)V
k9m}oq
%!k,a?
K?@}\a'-
K+!&;&a
kACX/5]1
~kB0rV
Kb!WC:
'!K.!C
kcB"@Q
k>D4MU1%"
KDm=z^Y
(kEi;9%
KERNEL32.dll
	Kf-BD
_k=F!,c
;%/~KG
k*=h? 
KHV-EB
?kj2?oi
[KJaB65
Klhxo'
KLv,hx7
k|n0WKh
KN6BE!
KN]>Os
k&]/o 
\ -}Ko-6.
Ko[_=T
ko>u;++q
kPD$i&?lZ
kqv!4T!
krc8I7
KS3q,Y
kS|IF13
##K+sM
kuk_Hhy
~kUkv&_
K(?[u@q
?K=VH\5_
kv-m)%S
k`~w6V
K[	WL|
k|wNJf
KWO[dO 
K wVq(
KXg+5[
KyEQ%5S
Kz,N;p
;L;0CteG
L \!}]1w
L3}EwE
$l!7V(
.-l7Yw
l9E~*oY
L9I}bK
L9Y#>>
;$laeR
L%B&GB
^L}D:\
@ld|DhHpt\XP
LDdx`lXpTtHPhN
(l@d\|F0
>`LDl\Thhn
|\ldP@dF
lDpd@t\LHxhX
>LDph|`@lh
`LDpTh~
ldp\@tLXhxT`
ldpXhh
-$LdtF
LdtHPl\XD|Tph
LdTPhX|xh
lDt`P@Xxh\pL$
( |ldTt\Hx
 lDx`|dTH:
Ld\|x\F
lD\@xHPhTpd|~
>( ldxp\H`hLtT@
%_le<#
lehS1DpF 
<,(;LF
;`|LF$
]L\|F,
>;lF4;4RESU
$;l;|F8
]lF<;D
;LF$;$daoL
;LF$]$EteG1
LF ; FelO
]LFHXF
]LF<;LF;<iWsI
lF;LF$;L
L "f	pV
;LF;XF(
lF(;XF(](SteG
<]lF<]X;XF<
\L`H@dDlXpxT~ 
l|H`DdXf
@l\HdxPD`Xp|
:Lhf,6K
 lhHP`p@Tx
LH\`htplD@X|h
L`hLF4
<l|H@Pd
>,lH|\t
\l@h`TDH
$LHT@\`dplxDt
,l|H\th
lH\THF
lhTPL|D`\@xXhA
|@LhtP\TpldXh
Lh@xPdHt\Xl|h
 \|lhxP`tDpLX
Lh|XT`H\D
LIBMq%o-9+
LJSIQ$
;$llaC
 ;l;l; CteG
L@l`dhxPDHpT
L`lh@H\p@F
>LlHXP\p@DT|xh\/f
$llL\DHdTX`h|h43f
LLl@h`DXxHtd
l@LPD|d`x\Xt
>;LlpF<
<lLpH|DP`h
LLth\TH|@dP`
(llXlF
lm"1o1<
*l~meg
lNhS[}
LO9{5M
'L,?OA
lOCmw$
l?(Og~
lO+qc{M
[\lp5!
`LpDdXhTHxt@hu
l`pDHd\
>,LP@dlDh\Th
LPDTXtxhlpH`
lPd`|XDth@HTV$
>lpHd@`hxX|Th[
<``LPHh
@`LPlDh
lp|LPH@`
\lp@TDXPd`h`
@L\PTXdDl
l\@PtXLdHph|V,$
[l{pU]
>LP@xHh'({
;LQ?]M
?(Lre~
L<{R}v
L#-t0	
LtDhd@PTpXV
Lt\|DhHx`lXdh
>LtdHPp\xh
>$lT\@dLthD~
>Lt|@\dlXTDPHh
l\TdtXhL@x
ltdxlF
LTFj6*
>,ltFLF
|lt\hHLdXTx`
\LT`hH@XPxl|
$Lt@\HTd|@
L`TP|@\DT
lt\p|h
LtPhlLF
lTPXLx@hdD|
<LT`@px|XPtlDhb
L;(TteG
<LtXHT@\l|xpDV
&LUFOT
LUJ-zu K.
lU/Lfy
@luOjdC
l-v"jK
+L_vyi
>>L=w\
Lx`DlHX\
@LXe>txlhPp\TDH
Lx`Pdh}3{
lXpHDdT`\t@|
<@LXPhH|`hF
lx\phLPtD`Hdh
LXth|`@\xTPDh
$Lx@Xl`\t
`lX@x\ThtdD|h$
(``lXxthTLH|@
lyr]kjg
lYy%l`O
}-*&#m
m;0|E6
m0_I I
M1,](evaS
M?/2#=
M2+2_P
M2_w%(
M3kqC>
m5p<\~
M6yU9c
#	M7G?
M9[})+
M9BZvO
m{9uX^#
M9yUp]
\MAE7N 
MAKDhJ
M&]A-O5
|}mCh!
'Mcju!O
Mc,r)a
$MCy&~
`mCY=A
m:D~B$
=:m	@#E
mE8Se5
]%:mEK
MessageBoxA
@Me'v<
;-M*EV
mE!=zUU
,,Mf	[
m|f>>Q
mGmL;nY6
MG- sPt5
Mg=x%k
mHh	wyO
mH}j=E
`m-I8-
midiStreamOut
M}>I{i
M^]-IL+
MIMgfq
+miTX!T
m}Iz5o}_h
\mjFdhs
MJj%(r
<MJW9O
MkD1{\
MK<SZ5
;Ml1H:
^M[lm7=-
M[l=p54n
Mm[@2j!
m,>M5 
m#{)mJ
]M[PAw
]MppvT
;MqIgp
'[MqL]
],mroF1,
mSCv8O
}m	S_M	
MteS^;DFXh
> mtiB
].MU%_
mU=1ur
'.Mu<g
|#mUieKp
mUq o81
mUq oGR
<MuxM<
Mu~XMR>
M;WK`	
MW; tC
-M	WUSR
m	=#wV
MXF]I6v-
`{Mx.P
}m,Y]%
My_(#+
M<Y\)|{
mYb5VM
 m=ym69
mYpcP=
"<mZ)^
mZ5QnU
mZI!+|*
=?&?n=
	.N$_'
N0$W-|Kb
n14<9uZ
n|&&1jx%
N3V~q^
N5:FU8l
n;";}7
`'n79 
N7EW &
N$'7	g
N #\;8
n9(}vf
nA5w	{
N;A;93
nAC9{p
N&aFwq$
<;<narT
;(narT1
n$:bi1o
NB$sEb.
N-B{z;
!?N,!c
NC9F:?
#nDeFf
NDVlLN+
=(ne" 
#|NeF5
Ne~Fo'i
<;<nepO
NE..UQ
%n~f'h
 NFmxA
n	G4I+I
+Ng)"Tg
Nh@5+x
<;<nItP
^niUhf
nKDZ?,
nKMZc\
_N/l3@
NL_Q]M
NmmIIV
]&NN)"
)nN	e#
&nN/q'e
{Nnv4)
noc^$<
>nocI1
,nOeg^,
><noit
nOs$%8
)npvZtk
N^pWw(
:N\p`Z
+.*nQ?@)
NQ9j}|
Nr5LE1!J&*SY)
n'S71&
,;,NteG
nu[?8^
`NuRez 
N[)u@+#U
N Uv\G
`Nv6]6
N}V9^%_f
Nv_+lG
@"nvskq
nw61FU`#
nw#%o)
'nw!XQy
Nx]8e;
Nx.!EG
~NXO_D
NXp6?Q
?|Nxydm6
nYrQO9*	6
Nyu(E5
:N]{|Z
(~	<o#
<|_-O^
 {\O0C
#!:o1pu
O%&:2a
o2;w=_fl
	*O#3:5
O^"3zM
o4+&k*
\)O6`+
O)6[?f>
O73&^\
]o7Zke
O9Q}SU
@O}&a-
&OBjo!mi
$oCes1
o`"|cs
O%E"W.Q$
+oFMOmgr
O):fS9+{
-Ogk5I
;,OgtS
OgU65%
o)$i\u
O.]J6UQ
`oKf|8%U
OKXNSL/^
ole32.dll
#oledlg.dll
o:Lmz	
[#Omc(]
OmeQB*
o'M#-nZ
OMT?^K
O\MXm9
Onp*fa=y]
-}o-o6
oQ|K.\
Oq"-KD,
ORA]E#
Or#E`y5'8S&_p
or+\m]
oSZs ~
OtMQ,a
\Ot.ve/
]O=]-u
O(uckHr
)Ou*_I{fJ
o~uV|Q
	oUYa6)!
OV?-="
~|owe`[3**"
o.x|Wv
+=+]OY;
O|YUD]
#_ozh2
/oz~|&Mf
'>'/&P
P1>M)f
P2I+H0
P	2-K3
p~^4Lp
]P4y#s
p56ln]
*p5K*U
P/6/{9b
?p6.a=	
(:P7b 
]P]8MteG
 ] paeH
;@;<paeH
Pc&e`;
(PD _c
pD\dl`TxH@ht
Pd|D`t@LHpTh
<PdHDX\|TL`tlh"9{
P@d|\L`DphR
 pd@Llt`X\hPTh Sf
PDl@tdXhxLT\
(`p|DlThH\x@t
``pDLt|P@TxhV
pDP\HLX
pdt\DX|Hx`h
,Pdt\`pTl|@hx~48
@pD`tTlh]
PdT@txXhH|DLh
|@PdX`H\TpLth
|\]pE+
PECvqwU
PeekMessageA
Peli1F
Pes3fzK
Pev;+Xa
<<&p`F
 <|]pF
< ]|;PF 
pF]4FteG
;@;pF8
]P]\F8
;pF8;8eniL
;pF8;@F
P[/fAF
PF ;d; daoL
,]PF;dF
pF$;|F$;$paeH1
PF;HF]H](CteG
PF]LF<
;PF$LL
P&:f<>N-B
PF;,SteG
;PF,;T
]PF;tF 
]pFTlF
]PF;$WteG
\P~`G)
Pg%<B%
(\P|HD@htXlpdhq
phDP@LXdL
P|hDTX@l|
p`|HHF
p|HhldXHF 
,ph`Lh
ph\LHdt@xPDT
phLH|XPT\lt@V
`PHlXp@ttF
p'h]mx@
,@p`HPdXtF
;p;H]t
>PHtd@L\pX
>PHTd`|pxD@lh
<P@HT`dX
,;P;h;TF
<@p\H`T|hltXdh
`P|ht\@lF
PhvI)&?
Ph@XLD`lx
p@|hxXTH
pIDCp*
Pin_>&
pIY#Po
Pi	ZS_
P@}+JF
)pJvFu
pk0L5x
pKj{7`
 p`@lDL
pLdTt@Hx\hX`h
,pLDtTt
|@`PlDxp
>P`l@DX\tHdx~80$
(PL|F8
P`\L@Hth
`p|lhTXLtHDP
|PL\lDpth
$pLld\t|@P`hD~
Pl|\Lhl
pLm-$h
;p](lpuD
pL\tD`@HhTdxh
>`PltHhT!{
PLtT\|pXdh`l
pLtTPXhxD|@lh
`@P|L\TXHdhD
p\LTxhHDlPX@h
 p@lXdt`xLhH\h
p`l\xHth
P|l`xtdph
P.mT$8
<&PNl{?
P(N	<o#
@PpDt\lTHX|L$
]p]pF 
 <\\PpF
pPh`DLxhF
Pph\dtTX@HlD
$PphHT|d`H
>pPhTX@`lx
pPHxXtLDD
ppLDHdP@|xht
pP@Ld\`x
pp@ldxP|LTD\h
Pp\l|hd
|PplHF
ppTdlHPh`tDx
pptlDx@dx
(PP`\|T@tF
,ppX@F
P|pxhltTX\dDhZ
>P@pxlLHh
PPY  x`
PQ,;}{?
pqvc\6
prP28G8!
]p!*RSl(
?P]s";
]@;p;t;
pt0tntdtltHtj
P<tCsYW
pT(D9$d
pTd@HXh
pTDP@dh9.f
]$PteS
>PT@h`\|ldL
pT\l@dHhL
>PT\LhHtxd~
Pt\LX@|dT`lh$
p@tPdLxl\D|hh
$<PtPF8
P`@tTdDl\Hxh
PTt|dp@hh
<pTtDPLxXdHl|
\ptTHLhHF
PtTL|hD@H`Xlh
\\pTtL@Xt
p@\TtTF8
>PtuO^
\ptXPTHxL`dl~
p|%uXx
Pv-uKy
PX6 15
\\`Px|dlh@Tpf
pxDlhX@HP\L|h^
`PxDThF
$p@x@F
P|XHpdT`
 PxlHTDX`htp@hl
,pxLHXTl@t\`Dh
pXLl\`P|th
pxlX|t\h@DLT
\|PXpxlh
\@PxtF
Px@thdD`pXT\~
PX`TphxHtDlh9
`p|xXF
PX`xl\Lh
!p/xy	
PY5u[$~
pYB>@1
Py=~g&MQ
p<Yjwm
)\Pys]e
Q:1" y!7
q2C_i_D
!`:q&2M
q4ibI:}l
Q%4wDX;9
q4Za_E=
<&(Q=5
>q5|De1
{Q5elOtTc'
q.5j=V
Q-6D:"
q8(M{uA
Q99}!	
Q\9qWP
q9T?C,
q9vwuy
:q9+w6
Q9Z!}i
QAF@W-
/qAj.A
q&b4?-
Q*_BT:
qBWy6G
qcg^`(
QdK5Qq
Qd&$UMe
q|E6E{
Qep{="
Qf{:SM
qGT=oz
Qgwy{}@aV
QH1~u<
(qH9?]
q..)hQ
QIAx_(VS
qIcx)g
q;?IO[i
/QiR|ft
qi;]sk
Q~@J7YK
q/J91M
$Q{J|Uz
Qk{LE9
	qkRr]e
Q&L&tO
^/Q|%o
qPA_g9%
q'-!=Q4
qq]6$oq
?QqI-H
Q{QxK|
Q?(r ?g
/qRV:Ts
qsB[v+j
Q'S	E?`
qt0tP!^
Qt2u6W
QuaJu\
Q'%UF|
qufIWM
QuI5K}u
q=U&vn5
!QV_	d
: ]Q$VZ
qW\fF@~
~]q;^?	X
Qxb+C5
QXB.Ea&a
qxu7n5
q{)Xw)
	Q:$!y
qy:KCt
Q)Yn	M
q	[YW]
q=z~\u_(
@R}	%>
}R3,%JG?
r["=5P
r"6Kp8
%"r6m 
<#!]R7tE
:R-9fq95
|]\;$rahC
$;|;$rahC1
> raob
;(ratS
RA@z5B 
rbiL1<
r#d%5%
.rdata
rd}qR\
?#RE19]/2
rE1Tzr`
RectVisible
RegOpenKeyExA
r/Eh|:
.reloc
&R&E)u
<;<rFoC
rHEKyN
r	hov+
RichRe
>$r	i@pz
r.JyJe>
r]km[u
rLJP??
 rMcP5
R{n:T/B
%R]}O]
RP5XN@g
> rPtn
$rPwo^$
R,_[$r
r{>sq)Ree
^rS#vh
r+Tv+u
ruCG3f'
;Ruy-7*
R`W|MW
_rwx	Ld
rX8@jx
]~RxEu
rxK|~}
"R`y(-
r}y_{E?
s1>6z=
^S2NuH
")-s%4
s4$=bO
s!.5eN}
!s5W73L
S9P}Uf
S9U=[l
s9W%5S
salC1F<
S }AQ;
SblCy]
sB[v+j
s;CL-~
[s_cV_
scy:.=8&`6P
sEF|:|
[^SeG'
Seli^nirt
SeMLuq
~{S~);eQ
SEvPMo
se@x"M
s):>fC
S[}GEe7
S/&g/n(
sgNov?
sgOk3P2O
\%s<G}T-d
~*Sh=]
~s<"Hds
SHELL32.dll
ShellExecuteA
S=<IFg
sIfvS%}/Sa
 sJ1tk_
:&S%KN
SL9/	O5
sl~,*P
Slq>x%
s=m;!T!
sMwajR
>,Snep
s&Nz8s
SOu%%M
<so@vJ/
s` !q$
<sq0q#y*
S`@+R=
s*r0#;T
SrIr_}
ssal1gnoL
]$sseM
sseM1F
STcv*t
;$SteG
(SteG^
$;$SteG
SteG1F
(;(SteS
StgCreateDocfileOnILockBytes
 S]tmvN=&
s]>u?1
%suV,z
s"]v1U
SVE=&~k
s'v&M\f
^?+s<w
?sWgN0
Sw"	,S
SxUM\&
S^_Y 7
-@SY9PD
), {SyQ
S_#zj,
S_#zp,
&]+;$T
;t;0aBsI
T;0acoL
T>.=|=4
t\?4xx
T5GN	n
t$:5k$
T5n2%=
T)5$u_
{%T7OP
*T7srx
t8)cpMvt"
T8{}nR
t?A&(]-
;ta5}Q
>,taPn
TAr:yv
TB<`8y
TbSi03O
.T(BtX4=
TBU8CS
<]<tceR
+|T%Cg
tci/EF
tC@Y^W
;t]d;@
;t]D]8DteG
,\TdDHPlLX|p@V
|tDdLxF(
 ;T;DF
tDh|@dH\TxLph
tD\hdlTp@`HxhJ
<TD|ht@P~(<8
>|td\HV$4
``\tDH@X|LxPhG>{
td|LpF8
TdLX|Hhl@`h
t ,dn5
t@dpDP\|xHlT
$TdpHxDh
(|tDPLxh@p`dH
t|DPLX@x\TlH
`tdP|Txl
,tD`|t
Td@xh\DPX|HL
|`tDXpLdH\h
TdX|P`ltxpL@h
{>+TE8
]t],eleR
%^<;t@F
T,?}-f
t~F?]1y*
;tF<]dF<
;tF$;HF
(;TF]L
]tF;x]tF$
Tg8t ~w`
(|@TH\@
(@TH\`dhxLtDP
\THdlDhPt`|X<
\tHDLXPxdlpV
$Th|DLx@t
\ThDP|pL`
ThDt||
TH\|Dx`d@Xe$&
The procedure entry point %s could not be located in the dynamic link library %s
T;hF]`
T@hHLPxD|dp\
thH`\TD~
!This program cannot be run in DOS mode.
\ThLpPh
~ThM5#
ThOI>h
th|O_m
ThPDpLl\~8
th|pTL`|
t@hpxdD
|tHThhI#{
THtuT&!
tHTxXlp\DhLP
ThXDpp
,<thXF0
	t.I%B
t<iHjJ
; tirW^liFe
] tixE
tKOY1S
tLd\DTx|V0
|TLD@hH
 tLDph|`lPTX\
@TldX\
\tldXHTP|hDph
@tLh`\DHdPXl
$TlhDTF
T`Lhp@|h>
|t\LHxPDH
tlL@DpP`
t`\LpDhX@x|`
<tlTDHL|x`\@pf
\TltHD|PXh@dh!
@tlXHhx`\LpT`
tL@X|lx\D`THh
t|Lxp`\hn
Tn[]A+
TP9Aoe
$,TPD@h|lppF4
tpDhLX
(t@\`pDhXxPLd
 T@pDtx`lL|d\h	2{
T`pDtxP||
,T`\PdXl@HDtLh[
>T|`ph
TphDX`|P\dx@
tPHl\x@TD
TpHtdx|X\`h@h
TpL`dt|\PhHD
T;p;l;l;`F]
TPlpLxD\X|d
>,TPL`tHlXh|\h:(f
)tPM75e@E
;t;P;(NteG
@\tp`P
$`t@pPx
\tpTLHP@l`xWS2_32.dll
 tPTphT
<tpTxlh|D`
> TPx\L@`HhtlX
>,TPXlx\LHh
T=*;++q
tq73UR=
tQg2-{
tseD1]D
><tsig1eMre
tSma^po
tTdph|HP`LxXh
Tt|d@XLDhI
,$t]tF
t]tF;tF
`\T|tLdP@hT
t@TLD`V(
Tt\|l`LD`
tt|`lxHp`F
tTp`|D\xlLd@
(ttP`|HhDXLp@
=>t~t}t
tTxL`@HDX\hph
t@TXxPdD\`Hlh
 T??*~u
_t'U9-
tup{q|b@
tV2YQ%
tv*B],O
t$ _Vf
_tvhSq
tV)Mw*
>tVROaUl.
_tWfO-cQdV
\@TXDhH|l`Ld`
>t\Xdh`Th
t|Xd\PT@hHDLh
t|Xdp`@\TxlV 
txEt^;dF
T`X\|h
Txh`dLXdF
TXhlDpd\@|`P
|t`XhTdPHL~
|Tx\hXHLt`Dp
T\xlH@Dtd`|p
Tx`lP@px
t|x@PDHXlhV
>`TxpHltL\@PV
( tx@pLd`hPDlX
|TxpP`@DthHLV,0
(<(`TXP\xd
|T\xtLhX@pPDV4
>TXtxDPLh@lpdV0 
t@x|XDH`hLdlh>?{
TxX`LPH|\pd@
T}Y5N\
>,tyBk
tyZ?-~_
T Z52.
/<|U=}
->\_?U:{2
);u2|:;g
u3fLds
u3t1t_
*U)5m;Z
U5RL@O
U5]ue-
u6MeUq
{u6s$P
{u75;4
u7e]u7
u9e}UE
u9`}U^
UA6w$H;{'
U<}aop|
Ua	V9/
ub)7U)
UbsH@c
\UC~Hv
| u`ci
UcO|[]SG*5
u{,Cwz
"U;E68I
{}->uE7
 UENVB
;UE]O,4
U	f_7F|
?ufJy6
!uf.PYV
U)g=3PeG
uG!-:tqJ
,uh+5:
UhcI}	k
U'h'/f
&u&>?I]
=U')"I
UIVHw=bo#
(;(ujdA
!*UJu1
uk!=?EUO
=UL6[ cI!i
uL8dAN
UlKJ#*
,;,UltR
"]&"UM
Um1WVW
uMoT1;T
]Un5{VM$
unVoHJ
UNw15#
\uO'+9
}uo9N5?
U#!:p9
uQ;XI@
-ur+h)Qw
U]!,;s
USER32.dll
usi1eA
UT8[]_a
Utg_uK<
u;Th:q
	UT SY
_[U/u"
uU7&O0
u|ugA=K
u'`uQ<
>>?U"V
|U%v^J
U-!+\/w
Uw@0[L
|&	uwK
{UXhC]
uy$237
uyHma1#K'
UY'VJ 
u@Yvq 
uyvwN'
[|uzqk
Uz u4{
U zw>5u
.-;##v
V09Fs\
`V1L9<
v1VsU#
V3m{^D
v3t2{P
?V(40<
V5	5^?f
V: `5D
{_@}v7
v;8[_C
V`8n&*
v9.}fV
V9s 5>U
v9vM(U
v.A6aOS
VAf5~eT|V]9
VBl5eO
Vb"%%r
VbviUFy
-v-c!1?a)wFA
vcG;Yd'
VCq}6I`
ve-5U%
v!`ee5s?E
vEN_<f
v(Ev~n=
.vF&t)
VIg	g)
VirtualProtect
v"]l!0=
)VlhED
VLqlNV>
v@LTU|
Vm5U<dh
Vma]tv
vmfO7H
+vMh&;
<V$m^m$
"vn4?$
=-vo3m
]vP?-A
v[p+bz
=v=^=.Pv
VpYSTR
VQa >R
Vr28%M
VR7l:B6'
!(VS=?
v~|*sV
]<VteG
]\; VteG
vt	GHM3
|VtMv},
VTUhx=B
}Vu>9|m
V"Uc$(
VU?DG3:
V%u^Uq
'VUvc4
^vuw~3.
v?^))vf
vVP..u
V&Vu`E
V=WE%M
;vwUse
vyfnmW
vY{]jh
>%VYn'N
_@vYqG
VzGt6B`~|nOz
W-0AQyu
w0&h!x
w_0=(m
	w1QEB
w!2>d{]
W2 uO~/
>W36*j
W%5ZFGo
w5Z")k
w^6pUud1
W9IQ|	
W9mu!u
^w9Wq!Y
warD1ucoF
W.Bz#G
W+;ChQ
WE5GB?~
we'yy'
w-F;1m
; WfeD
}WfQI#T
wGnmx.E4yO
Wgz-}7vuUO
wH)Bvu
_WhTOM
=WI1'T
WIDJg}lk
w!I:M+
(&wJ/x*
>/WK1P
WKUnOr
wKv'Ba
WL45Ov
~WL^p^n%~
\>wM9FGs
$wm?eb
Wmn2!w
w~'N9v
wN$ufG
+WNW`~
wNX_3.
WO1E"l<d
wodn1(
WoHS ~
wPu%OwK
WQ9dY	=
|w,=Q(Z~F
wRSZu50
w$~S/eg
@WSuK_f+
wt0Ds<{
;,WteG
WteG1odni
<;<WteS
 ; WteS
;,WteS
]<WteS
%W>TOMl
>WtuO^,
W\UG#e
wU[lwj
W>[usY
{=W+U_v
WvHu7q
'w%vm=
?{WvN-
w^vSB/
<Wvzfp
	w-wO}T
WXU{7o
"Wy*|M
^>-w_Z
(, ]x]@
.}X	:(
$ <,(X
x0ASU#a
X,1\J#
X2#l51
<x4L\t
x6t)Xw
*.X7{A;@
X)7I5,
`x9E-UUI
x	>`9i
x9{w,9
<;x;@;,auqE
}{x.B`
;x;$BtaP
|X(c-=
=x-d&	
)x^d`,
>X|dDH\
@xdD`|HH
XdDHl@TpLP\xh
xdDHtL|`pPTh
XDdHxh|\pTPL
||`X\DdpLHt@V
xdDTL@P`h
>X|DHd`hPph#
xdHTDh:
`xDlL|@dTptPV
>`x\DlT
>\XDpdT|
$`X@|dPHLpltx
x|D@PLDF
<|XDtdhB
XD@`|tHTlxLP
xdTLhlX@pD\H
XdtxL|hDH\Pp
XDTxL|hHp\d
Xdt\xTLpl`|
>xD\X@td`LhV${
<xdXTDT
$x`dXT\p
[xEe5m4(
X*eJ'`
>$xEtx
>$]X]$evaw
;\]XF4
>]xF,;`F,
]XF(](PdnE
;xFPPF(
xF|q`Y
;X;,FteG
XF;x]`F
;XF]XF
XG=3"W,
XH\D`d@|PTlp
x`hDtLPX
@XhD\xdPlLT`V
xHDXdPT|@hp\h
XhdxTpHD|\`lhDTf
x;HF;TF
X|`HhP@dTF4
x<hl{|
@xh|lLdTV
$xHlt\l
$XHltpxdTP`\Dh_
X@hLxPTHlp\t
<XHplD`|TPh\Lh 
(X|HplLhDdtT@h
x@h|pT\XHD`Ph
>xH\PXTL@`h
xH[qj~
<@@xH\XDhptT|V$
`XH\xPDhlh
+xI7b[g
-'Xi f{
x<j=5j
&xkH#U
x`lDDF
`\xld@H
$XL|D\Hd@lTpth
$X|LdH@Dth
X|`lDP
|xLdTPDtlH`h
(|XL@dxh\d
(x@\lF
xlhdLX@\HtDe
xlhTLtL
x|lHt\PDtF
,|Xl\HtT
|xlp`HLTDh@X
X`L|phP@l\txh
$X|@\lTF
XLThpDtH`V(<
@XltPT\Dd`
XLtTDl@H`|\hf
|x@L\TthlPh
xM3A=%
;x%Mdi
x)M]Q>
X@|P\Dh
`xphDPtLHh
xpHhX\P`T@|lh
X|PHLdDlT`p~,
> XPhTL@\`|tHDh
X`Ph|TxLld\@
>x|PhXp@HLDd`h
`\xp|@LDh
|x\pLD@hTtldhv0{
$x$plPHtdTX`@L|hS
Xpl`T\hxtLh
xPnEt 
>$\xpP|XdL`hlThT%f
<$xPT`\hdDH@t|
<Xp\|xHdThvA{
xR572	
Xr)KUG?F
X&S.v~
XtdlxDhp|H
xte_,5
xtGB`>&
x\ThDdXlP|@Lh
XThdpP|D\@HxV<
>@XtHhL\|TlPDh
XtHLD@
`\x|@tHTDF
>,XTLdlpx|th
,!XTpDxtdLl\HP
 @@xtPhx
(xtplXd@@F
xT`t|@|
X|tT\`|
XT|\tdHlLPpx
X],TteG
>xt\ThD`l|~
XtTLhP\l@x
 \xtTPD`dL@h
$\x`tx
Xt@xLp\PH`h|
>XTxpl@\
X}tY9]
}X%UE@_
xu$sZF
X@uuwI'
&!XUW%7-y
*x^V4jK
Xv"FUb
X	V}KBb
X`w1wc
xWKw	>
@@`XXF
 ;x;xF] CteG
( ,;x;xF]xF
,<XXHPTp|lD\@t
XxHtD\T@h`|L
X@\xhtTP`h
X|x`L@\DPltphH
xxLDtX\ldHP|h>
XX|lHp\F
xX`l@hph{
@`xXlpT|LPH
xx\lXL@dHhDt~ 8(
X@xpd\`TtP|hf
XXPH`T@td|\L
@x`XtlpP
xy2r->(
xy5LL 
xyR7-5|(68
xYU+GC
x!Yz-C
"..x}Z8u_
Xz9r|t
xzQ~wJ
*`?,+y
~	~^Y;
Y17ms>8
y@3I7B
&y5r#$
"Y	6}9
+Y6K!y
_<Y7C!
Y~-8l	F
y^9/>]
y{.9-}E
Y9W}US
Y ,~a2$
YA5wjz
Y{c.2[
y~D@E6
y	D=Fa
~y=dMwY
,ydwE|
-=YEhw
%Y{f.>
>YF_G"
Y=Fm/E
y}!-gF
YgUW))ge
Y;H]%/
y-Hi,I
YHlm[S
yHu\sp
(y!igoF"
YiM:<K
yj\hHxr
YkG].f
Y&kW//
YMcyw4
y:mMH`
yMV_-y
!,ym(x0
)]ynD&
?yNv?Ky
y;:% P
yqcE7p
YqK9uyT
yr,AM>+
yr,AM>+s
yrK-7cM
=	YS=UYW=CY
	+yt]5
 y,t^R
yu7NZR
Yv4154
y&V*Spl:
^Y=x]&
YX_E5-aD
Y[]XeW
)`Y*}YeYLhi@
YYf#7u
YY=oET5
|yzfwp
^<.\~z
:Z$4`.
z7{J^W
Z7{vGoz/K{
.z8-P:&
z9^}>&
Z9vV{d9
zb=Uyx=
zbv&o~R
ZCgz7v
zdHxi^9Q
`'Zd@uJ
]$ze<5
zE9- 7
Z	EmWQ
zEw=l]
zF5aSx6w
|~Z%F9(
{zF!M"
Z^fQ5=A
zF	Xvv
zG,4PE
zhviI#
z~I<&{
zIWhwi
Zj2Rvp
$zl}Ci(
@zmun)
<_znG2g
znp}`F
Z>* OM
Zo)Zu%
z(R=z5+
+z@[*S
Z']sogM
z{T;>(1
+Z?)|U
zU+=3_7
ZuExBnA
z:u>gx
Zvbv4XG
zv	/<j
zv&tn)
z{x*f?