Analysis Date2014-01-23 05:09:53
MD581f8fe8633b78bf3b018d85ffc06a713
SHA1db0ec13cc45799bb881e4cd6c77f18185a7c9174

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 10928d634bc65454815973130443d12c sha1: 78b2a073fc1e28e0055eb79ae5eae09b9085bf80 size: 386560
Section.rdata md5: 071ce62cbbb9e376d90b13cc3cfb7a6b sha1: 13ee95cbf437a37625c9cf0f7428dc12626e496d size: 54272
Section.data md5: 661e5185c783badca782a57ec6a06ec3 sha1: 8c96b8c4a329d8b772b18b8f1d67b0ec54b71c4e size: 17408
Section.rsrc md5: 1ab28883d8432cd6881c8067f6411a4b sha1: 33c4fe0d2d5dfddeae110b1c2eb5f8f5befbc98f size: 469504
Section.reloc md5: fdf11e9c83b38a39223b11d04cabbb2c sha1: ca13569967604f9e720fdaf68b882821770a8288 size: 81408
Timestamp2013-03-20 02:56:22
Pdb pathd:\U盘启动\辅助工具源码\UdiskClone\Release\U盘启动盘克隆工具.pdb
VersionLegalCopyright: Copyright 2013
InternalName: UdiskClone
FileVersion: 1, 0, 0, 1
ProductName: UdiskClone Module
ProductVersion: 1, 0, 0, 1
FileDescription: UdiskClone Module
OriginalFilename: UdiskClone.exe
PackerVC8 -> Microsoft Corporation
PEhashe92fabc0914ab98ce9ae983c75bd18e510e298d9
AVavgWin32/Sality
AVaviraTR/Patched.Ren.Gen

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSwww.udashi.com

Network Details:

DNS42360805585ad5f3.cdn.jiashule.com
Type: A
222.216.190.60
DNS42360805585ad5f3.cdn.jiashule.com
Type: A
222.216.190.69
DNSwww.udashi.com
Type: A
HTTP GEThttp://www.udashi.com/uclone/tongji.html
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Flows TCP192.168.1.1:1032 ➝ 222.216.190.60:80

Raw Pcap

Strings
040904B0
1, 0, 0, 1
!1Aa
%.2f
#32770
#+3;CScs
6Open another window for the active document
AAXWIN Frame Window
AAXWIN UI Window
About
About4Quit the application; prompts to save documents
&About UdiskClone...
Activate Task List
Activate this window
    : add disk %d.
AdMasterWindow
AdMaster Window
Ahttp://www.udashi.com/uclone/tongji.html
APPID
AREGISTRY
Arrange Icons/Arrange windows so they overlap
AtlAxWin90
AtlAxWinLic90
@ATL:%p
AXWIN
@BUTTON
\\.\%c:
%c:\
    : cannot get disknum for drive %c.
Cascade Windows5Arrange windows as non-overlapping tiles
(c) Copyright 2013
Change the window position
Change the window size
		Classes
close
Close
Close the active document
CLSID
COMBOBOX
Component Categories
Copy1Cut the selection and put it on the Clipboard
&Copy	Ctrl+C
Copyright 2013
Create a new document
%c:\U
Cu&t	Ctrl+X
 %d%%
%d%%
 Display full pages
?Display program information, version number and copyright
(%d)%s
&Edit
Enlarge the window to full size"Switch to the next document window&Switch to the previous document window9Close the active window and prompts to save the documents
Erase
Erase All3Copy the selection and put it on the Clipboard
Erase everything
Erase the selection
.exe
Exit
E&xit
FAppID
FDelete
FForceRemove
&File
FileDescription
FileType
FileVersion
Find
Find the specified text
@Floating point (%%e, %%f, %%g, and %%G) is not supported by the WTL::CString class.
fmifs.dll
FNoRemove
FVal
GetDiskList: failed to get system disk number.
GetDiskList: failed to get system drive letter.
GetDiskList: processing drive %c.
                                 H
         (((((                  H
Hardware
(hd%d)
&Help
         h((((                  H
HKCC
HKCR
HKCU
HKDD
HKEY_CLASSES_ROOT
HKEY_CURRENT_CONFIG
HKEY_CURRENT_USER
HKEY_DYN_DATA
HKEY_LOCAL_MACHINE
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKLM
HKPD
http://www.udashi.com
IMAGES
Insert Clipboard contents
Interface
InternalName
jjjj
jjjjh
jjjjj
jjjjjj
jjjjjjj
KERNEL32.DLL
LegalCopyright
Mime
minimize
Module
Module_Raw
mscoree.dll
MS Sans Serif
&New	Ctrl+N
New Window7Arrange icons at the bottom of the window
Next Pane5Switch back to the previous window pane
NTFS
(null)
open
Open
Open an existing document
&Open...	Ctrl+O
Open this document
OriginalFilename
Page Setup3Change the printer and printing options
Paste
&Paste	Ctrl+V
\\.\PhysicalDrive%d
Previous Pane
Print
&Print...	Ctrl+P
Print Preview
Print Pre&view
P&rint Setup...
Print Setup
Print the active document
ProductName
ProductVersion
Ready
Redo
Reduce the window to an icon
Repeat1Replace specific text with different text
Repeat the last action
Replace%Select the entire document
!Restore the window to normal size
    : same disknum with system drive for drive %c.
Save0Save the active document with a new name
Save &As...
Save As&Change the printing options
&Save	Ctrl+S
Save the active document
%s%c
SECURITY
Select All
Software
{	Software
source
Split
StringFileInfo
(Switch to the next window pane
SYSTEM
target
Tile Windows5Arrange windows as non-overlapping tiles
Tile Windows(Split the active window into panes
Translation
TypeLib
UdiskClone
UdiskClone Application v1.0
UdiskClone.exe
UdiskClone Module
&Undo	Ctrl+Z
Undo&Redo the previously undone action
Undo the last action
VarFileInfo
VS_VERSION_INFO
WM_ATLGETCONTROL
WM_ATLGETHOST
      
                          
     ]
  ------  ------     ---- -----   ----    ----   ------     ----
-------/--------------
;"<<<_<
$####$#$###$
+++-++-
+++??++-+-+
++++-+
++++++-
							
<0<?<^<
0 0<0\0
0 0@0`0
0 0$0(0,0004080<0@0D0H0
0(0,0004080<0@0H0`0p0t0x0|0
0$0*00060<0B0H0N0T0Z0`0f0l0r0x0~0
0$0.0>0E0a0B1H1Y1_1h1o1v1
0&000I0S0f0
0 0$0n0t0x0|0
0"01080E0h0}0
0"040p0w0
0 080H0L0P0T0X0\0d0|0
0:0B0L0Y0a0g0m0
0/0H0[0y0k3r3
0$0H0Z0`0l0s0|0
0 0J0w0
0'1_1o1
0(1\1x1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;
;,;0;4;8;<;D;\;l;p;t;x;
<,<0<4<<<T<X<p<t<
:,:0:4:<:T:X:p:t:
-080f0q0
080X0t0
? ?0?8?<?@?D?H?L?P?T?X?\?h?
:0:8:@:H:L:P:X:l:t:
08LFOFOFOFR
<$<(<,<0<8<P<T<l<|<
090808010001Z
0A@@Ju
: :$:(:,:0:D:
=0=d=j=v=
;0;@;d;p;x;
0e2O3z7
>%>0>f>v>
;0G0M0R0X0
~0hT#F
> >$>(>0>H>X>\>`>h>
<0|O<9
;0;P;p;
:0:P:p:
0SSSSS
0&"s?]v
0t-HHt
:0;T;t;
>#>0>v>}>
0WWWWW
<0=<=X=
100510000000Z
10G0Z0
110301010001Z
1(1,1014181<1D1\1l1p1t1x1|1
1 1@1`1
1 1$1(1,1014181<1@1D1H1P1h1l1
1 1&1,1B1b1
11>1n1{1
1+121=1E1M1V1_1m1{1
1(131V1
1'151|1
1)171=1C1H1Q1k1q1}1
1 1A1k1
1[1a1r1
1.1D1e1
1:1G1c1
1@1H1P1X1d1
121113141925Z
121?1b1o1{1
130320025904Z0#
131115142722Z0
1	3~3 4
1!484]4
14!wG1
150510235959Z0~1
151M1s1
160301010001Z0e1
162C2Q2^2q2~2
191D1^1
1A2 3%3h3q3
1H3R3\3f3p3z3
1http://crl.usertrust.com/UTN-USERFirst-Object.crl05
1I2W2f2m2x2
? ?1?N?}?
1O2Y2v3
1#QNAN
.;1s(N
1#SNAN
1U2f2w2
=1=>=Y=v=
20\0-3
2,2024282<2@2d2
2,2024282<2@2H2`2p2t2x2|2
2"2&2,20262:2@2D2I2O2S2Y2]2c2g2m2q2
2 2$2(202H2X2\2`2d2h2p2
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2#2/252D2z2
2'242>2Z2b2r2
2)242X2a2h2q2
2"2B2b2
2*2D2x2
2(2H2h2
2$33393>3S3a3g3{3
2	333b3j3p3v3|3
2@3D3H3L3P3T3X3\3`3d3h3l3p3t3
2/3f3n3
240808010001Z0b1
244P4T6z6
2&4V4|4d6
2|4x6|6
:2;8;H;
=+>2>9>H>b>h>
2A2G2d2j2
2B3a3z3
2B3L5P5T5X5\5`5d5h5l5p5t5x5|5
2B==?&%F90)
2D2[203G3
`2d2h2l2p2t2x2|2
2D3M3l3
2e2q2'5
2H2L2P2T2X2p2t2x2|2
2I2O2i2|2
2j3:6Q6
'+?2LF
2M3R3s3x3
2*NP3W
303@3D3T3X3h3l3p3t3x3|3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3
3*3/343:3Q3h3r3~3
3(3,343L3P3h3x3|3
3'3,363D3
3%3@3E3M3S3Z3`3g3m3u3|3
3$3:3H3^3h3
3(3;3M3h3p3x3
3(3;3S3e3{3
3&343>3d3t3~3
3'3B3H3
3-3S3q3x3|3
3#4,4n4w4
3&4C4G6p7
3.4f4l4r4x4
3"4K4t4
3,4x4}4
:#:':+:/:3:7:;:?:C:G:K:O:S:W:[:_:c:g:k:o:s:A?
383@3D3\3`3|3
384d4x4
=!=3=E=
3g5v5t6
=3>H>X>
|;3kG>
3L3z364 595
 %3lu%%  %2.2lu-%2.2lu-%2.2lu  %2.2lu:%2.2lu  %8.8lx   %s
3V4a4|4
-3Y_$-#v
404@4D4H4L4P4T4h4l4|4
4$4(404H4X4\4`4h4
4#4(424<4F4P4
4 4&4,42484>4D4J4P4V4\4b4h4n4t4z4
4#444D4T4d4t4
4,4?4E4L4Z4e4k4u4{4
4 4(4X4`4d4|4
4*484>4K4k4q4
4,4E4O4a4n4
4@4Q4]4c4
4*5K5\5
4 5T5r5y5
4'656]6
474>4V4}4
485C5R5h5
48FHFK
? ?$?4?8?H?L?\?`?p?t?
=4=8=P=T=l=|=
:4:C:\:t:
4D5W5h5
=4=D=H=X=\=d=|=
< <$<4<<<D<L<T<\<d<l<t<|<
=&=/=4=:=D=M=X=d=i=y=~=
4faV:g
<-<4<:<H<O<T<]<j<p<
:$:(:,:4:L:\:`:p:t:
4'N@i%
4On,N6
4:uW6V
> >*>4>X>b>l>v>
516K6T6
525E5J5a5x5
	_{54;$
5 5054585<5D5\5l5p5t5|5
5$505<5H5T5`5l5X6\6`6d6h6l6p6t6x6|6
5 5(50585@5H5P5X5`5h5p5x5
5"5(5.545:5@5F5L5R5X5^5d5j5p5v5|5
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
5 5$5(5,505z5
5 5'5@5V5a5~5
5&5+5G5P5]5u5
5"5,5k5
555S5{5
5)5@5z5
5.5h5j7
5------/-------------6
5.64696?6G6Q6
5$6,6A6L6?;J;
5>6^6A9c9
:5%%%%%%%%%%%%%%%%%%%%%%%%6F
585X5x5
?'?5?A?M?\?j?s?
5B5U5v5{5
>(>5>e>k>s>
>5>>>J>
5K5T5m5
*5kNPK
 5P.f_
6$606<6H6T6`6l6x6
6,606H6X6\6`6t6x6
6(636>6p6
6$6*60666<6B6H6N6T6Z6`6f6l6r6x6~6
6 6(60686@6H6P6X6`6h6p6x6
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6|6
6#6;6C6[6c6{6
6+686`6~6
6!6K6Y6_6
6*6L6S6i6
6*6M6`6
6[6n6w6
6*6Q6l6
6+707u7z7
6,777e7s7|7
6 7[7i7
6#7*7K7S7c7
6)7@7Q7
6.7?7V7r7
6:7g8D9p9
6^7T8\8
686D6`6l6
686F6U6[6`6q6
686M6w6
6$:.:8:B:L:V:`:j:t:~:
6A6N6[6
6a7*8[8q8
<(<6<D<R<`<r<
>">6>H>O>U>g>o>z>
?"?,?6?@?J?T?
6Jx'3"
<6=M=n=
6n7V9]9
>!?*?6?O?
6O!7ID|
  %6s%c
''6x^M
6Z7r7w7
()+7#>
708=8e8
7,7074787<7@7H7`7p7t7x7|7
7%707[7
7 7(70787@7H7P7X7`7h7p7x7
7%7=7\7
7$7(7,70787P7`7d7t7x7
7 7&7,72787>7D7J7P7V7\7b7h7n7t7z7
7"7(7.747:7@7F7L7R7
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
7&7,7:7z7
7 7,787D7P7\7h7t7
7(7^7b7f7j7n7r7
7`7g7y7
7(7H7h7
7:7J7U7Z7m7
7*7W7@8g8+9
7%838j8r8
) 784~
7+8;8c8
7,9i;J=
:);7;=;\;a;};
7B7*9X;\;`;d;h;l;p;t;
;.<7<c<i<r<y<t=)>2>B>Z>`>k>w>
7F8k8|8
7h7S:e:
7IDATx
~7>	J/
7LP"J0
:":*:7:>:n:
#	7NQuk
7Q97:E;b;
7T9X9h9l9p9t9|9
;7;Y;~;
809J9P9z9
81B1L1V1`1j1t1
8'808<8H8T8`8k8s8
8(848@8L8X8d8p8|8
8 8$8(8
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
88888888 
888888888
888888888# 
#88888888888888888888;
#8#8#8#8#8#8#8#8#8#8#8#8#8#8#8#8#8#8#8888888#;
8888888888888888888888888888888888888#8#8#888;
888888888888888888888888888888888888888###8#8D
 #888888888888888888888K
 8888888888888888888FD
8(888<8@8H8`8d8|8
;#######################################888#8D
8 8$8,8D8T8X8h8l8p8t8|8
8#898D8^8j8r8
8,898k8r8
` 88FFFFK
8(8H8T8p8
8 939I9c9
8/9?9F9w9
8^9C<G<K<O<S<W<[<_<
<$<.<8<A<G<U<Z<b<h<o<u<}<
!8FFFFFFD
#8FFFFFFFK
<!<-<8<F<]<l<
8G8Y8j8t8
8P<T<X<\<`<
8R9-:S:|:
; ;8;<;T;d;h;l;p;x;
<8<T<t<
>$>8>T>X>`>h>p>t>|>
8VVVVV
8W8u:9;
?$?,?8?X?\?`?h?|?
=8=X=x=
909P9l9p9
9$:.:4:<:
9$909<9H9T9`9l9x9
9 919i9q9~9
9(949<9\9
9-959F9W9
9$979D9v9}9
9 989H9L9P9T9\9t9
 9 9 9 9T&F
9	9h9m9
9'9O9\9f9
9'9*:p<
9:9V9r9
?%?,?9?B?_?
9;:B:U:b:
9j9<:e:
9J>h>u>
9)+rl n
9~$~ S
9U:l:q:
     a
$$$$$$$a
:&:,:/;A;
\\.\A:
A0;B(u
AAFFf;
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
add-menu
`adjustor{
Adobe ImageReadyq
ADVAPI32.dll
ADVAPI32.DLL
a?eqr1i
<)<A<h<y<~<
--align
aLimited Liability, see the WoSign Certification Authority Policy at http://www.wosign.com/policy/02
america
american
american english
american-english
A.m$hk
An application has made an attempt to load the C runtime library incorrectly.
`anonymous namespace'
AP?'._
--append
--archive
?"?)?A?R?X?c?m?s?
:a;s;};
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
</assembly>PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<at9<rt,<wt
AtIHt0Hu
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
.?AU_ATL_MODULE70@ATL@@
August
.?AUIAdviseSink@@
.?AUIAxWinAmbientDispatch@@
.?AUIAxWinAmbientDispatchEx@@
.?AUIAxWinHostWindow@@
.?AUIAxWinHostWindowLic@@
.?AUIDispatch@@
.?AUIDocHostUIHandler@@
.?AUIEnumUnknown@@
.?AUIObjectWithSite@@
.?AUIOleClientSite@@
.?AUIOleContainer@@
.?AUIOleControlSite@@
.?AUIOleInPlaceFrame@@
.?AUIOleInPlaceSite@@
.?AUIOleInPlaceSiteEx@@
.?AUIOleInPlaceSiteWindowless@@
.?AUIOleInPlaceUIWindow@@
.?AUIOleWindow@@
.?AUIParseDisplayName@@
.?AUIRegistrarBase@@
.?AUIServiceProvider@@
.?AUIUnknown@@
australian
.?AUThank_you@Define_the_symbol__ATL_MIXED@@
.?AVbad_alloc@std@@
.?AVbad_cast@std@@
.?AVbad_exception@std@@
.?AVbad_typeid@std@@
.?AVBitmap@Gdiplus@@
.?AVCAboutDlg@@
.?AVCAdMasterWindow@@
.?AVCAppModule@WTL@@
.?AVCAtlBitmapButton@@
.?AVCAtlModule@ATL@@
.?AV?$CAtlModuleT@VCComModule@ATL@@@ATL@@
.?AVCAxFrameWindow@ATL@@
.?AVCAxHostWindow@ATL@@
.?AVCAxUIWindow@ATL@@
.?AV?$CComCoClass@VCAxHostWindow@ATL@@$1?GUID_NULL@@3U_GUID@@B@ATL@@
.?AV?$CComContainedObject@VCAxHostWindow@ATL@@@ATL@@
.?AV?$CComEnumImpl@UIEnumUnknown@@$1?_GUID_00000100_0000_0000_c000_000000000046@@3U__s_GUID@@BPAUIUnknown@@V?$_CopyInterface@UIUnknown@@@ATL@@@ATL@@
.?AV?$CComEnum@UIEnumUnknown@@$1?_GUID_00000100_0000_0000_c000_000000000046@@3U__s_GUID@@BPAUIUnknown@@V?$_CopyInterface@UIUnknown@@@ATL@@VCComSingleThreadModel@6@@ATL@@
.?AVCComModule@ATL@@
.?AVCComObjectRootBase@ATL@@
.?AV?$CComObjectRootEx@VCComSingleThreadModel@ATL@@@ATL@@
.?AV?$CComObject@VCAxFrameWindow@ATL@@@ATL@@
.?AV?$CComObject@VCAxUIWindow@ATL@@@ATL@@
.?AV?$CComObject@V?$CComEnum@UIEnumUnknown@@$1?_GUID_00000100_0000_0000_c000_000000000046@@3U__s_GUID@@BPAUIUnknown@@V?$_CopyInterface@UIUnknown@@@ATL@@VCComSingleThreadModel@6@@ATL@@@ATL@@
.?AV?$CComPolyObject@VCAxHostWindow@ATL@@@ATL@@
.?AV?$CDialogImplBaseT@VCWindow@ATL@@@ATL@@
.?AV?$CDialogImpl@VCAboutDlg@@VCWindow@ATL@@@ATL@@
.?AVCGdiPlusBitmap@@
.?AVCGdiPlusBitmapResource@@
.?AVCIdleHandler@WTL@@
.?AVCMainWindow@@
.?AVCMessageFilter@WTL@@
.?AVCMessageLoop@WTL@@
.?AVCMessageMap@ATL@@
.?AVCProgressBar@@
.?AVCRegObject@ATL@@
.?AVCWindow@ATL@@
.?AV?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FAAAAAAA@$0A@@2@@ATL@@
.?AV?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FAAAAAAL@$0A@@2@@ATL@@
.?AV?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@
.?AV?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0IGAKAAAA@$0A@@2@@ATL@@
.?AV?$CWindowImplRoot@VCWindow@ATL@@@ATL@@
.?AV?$CWindowImpl@VCAdMasterWindow@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@3@@ATL@@
.?AV?$CWindowImpl@VCAtlBitmapButton@@VCWindow@ATL@@V?$CWinTraits@$0FAAAAAAL@$0A@@3@@ATL@@
.?AV?$CWindowImpl@VCAxFrameWindow@ATL@@VCWindow@2@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@
.?AV?$CWindowImpl@VCAxHostWindow@ATL@@VCWindow@2@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@
.?AV?$CWindowImpl@VCAxUIWindow@ATL@@VCWindow@2@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@
.?AV?$CWindowImpl@VCMainWindow@@VCWindow@ATL@@V?$CWinTraits@$0IGAKAAAA@$0A@@3@@ATL@@
.?AV?$CWindowImpl@VCProgressBar@@VCWindow@ATL@@V?$CWinTraits@$0FAAAAAAA@$0A@@3@@ATL@@
.?AVexception@std@@
.?AVfbinstException@@
.?AVGdiplusBase@Gdiplus@@
.?AV?$IDispatchImpl@UIAxWinAmbientDispatchEx@@$1?_GUID_b2d0778b_ac99_4c58_a5c8_e7724e5316b5@@3U__s_GUID@@B$1?m_libid@CAtlModule@ATL@@2U_GUID@@A$0PPPP@$0PPPP@VCComTypeInfoHolder@ATL@@@ATL@@
.?AV_IDispEvent@ATL@@
.?AV?$_IDispEventLocator@$00$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@
.?AV?$IDispEventSimpleImpl@$00VCAdMasterWindow@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@
.?AVImage@Gdiplus@@
.?AVinvalid_argument@std@@
.?AV?$IObjectWithSiteImpl@VCAxHostWindow@ATL@@@ATL@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AV__non_rtti_object@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
=$>A>Y>f>
> ?%?/?b?
B84=K.(.9F
BACKSPACE
bad allocation
bad exception
B@;A s$
--base
base boot sector: %d
 Base Class Array'
 Base Class Descriptor at (
__based(
@@BBf;
^bCErXe
	bC;^]n
BeginPaint
belgian
=b?h?n?t?z?
BitBlt
BjJVR^
boot code size: %d
bpb status: %s
bpF|PyQ
;B;Q;Z;~;
b\rCbB:e
britain
buffer error
>bX:EF
BZip2 
\\.\%c:
CallNextHookEx
CallWindowProcW
canadian
Cannot open %s or %s.zip
)@C@CAC@2
__cdecl
!Certification Authority of WoSign0
CharNextW
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
 --chs
<%<C<K<
ck(WKQ
class 
 Class Hierarchy Descriptor'
cli::array<
ClientToScreen
cli::pin_ptr<
CloseHandle
__clrcall
CLSIDFromProgID
CLSIDFromString
:<;c;n;
CN1*0(
coclass 
CoCreateInstance
CoGetClassObject
CoInitialize
cointerface 
COMCTL32.dll
COMODO CA Limited1$0"
COMODO Time Stamping Signer0
CompareStringA
CompareStringW
 Complete Object Locator'
CONIN$
CONOUT$
const 
convert-menu
`copy constructor closure'
CopyFileW
CorExitProcess
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
couldn't create directory %s
CoUninitialize
C PjPV
C$PjQV
C.PjRV
C/PjSV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
CreateAcceleratorTableW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
CreateFontIndirectW
CreateSolidBrush
CreateStreamOnHGlobal
CreateThread
CreateWindowExW
creating directory: %s
- CRT not initialized
_[CX!/y
-++-?=+---+++++/+-----+-+---D
;##########################################D
d1JcXe
D8=H6.
d8HFHK
dark-gray
data error
dddd, MMMM dd, yyyy
  -d  directory to extract into
DebugBreak
debug version: %s
December
DecodePointer
%DEe3F
default
`default constructor closure'
Defl:F
Defl:N
Defl:X
DefWindowProcW
de>_gF
 delete
 delete[]
DeleteCriticalSection
DeleteDC
DeleteFileW
DeleteObject
  </dependency>
  <dependency>
    </dependentAssembly>
    <dependentAssembly>
DestroyAcceleratorTable
DestroyWindow
DeviceIoControl
<d?h?l?p?t?x?|?
DialogBoxParamW
DispatchMessageW
>d?j?r?
dJ>wl'
d.L!?3f
DMPPPPPPPPPPl
DOMAIN error
DosDateTimeToFileTime
double
DPtoLP
DrawTextW
<dty<itu<otq<utm<xti<Xte
dutch-belgian
= >D>\>`>x>@?
`dynamic atexit destructor for '
`dynamic initializer for '
  -e  Extract without pathname (junk paths)
$E!>Gu
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
<ellipsis>
,<ellipsis>
EncodePointer
EndDialog
EndPaint
england
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
EnterCriticalSection
EnumSystemLocalesA
;';E;O;X;c;x;
e'r/B;j
Error allocating memory
Error changing into %s, aborting
error %d with zipfile in unzCloseCurrentFile
error %d with zipfile in unzGetCurrentFileInfo
error %d with zipfile in unzGetGlobalInfo 
error %d with zipfile in unzGoToNextFile
error %d with zipfile in unzOpenCurrentFilePassword
error %d with zipfile in unzReadCurrentFile
error in writing extracted file
error opening %s
ewh/?y
ExitProcess
ExitThread
--extended
extended data size: %lu
 --extended %ld
extern "C" 
 extracting: %s
<"=-=f=
F/1g$d(?zQ[
f2n(m=y
/'F&4o
__fastcall
Fast decoding Code from Chris Anderson
--fat16
FAT16   
--fat32
FAT32   
FatalAppExitA
FBARu-
fb.cfg
fbinst
Fbinst quit().
fbz%U_%"
February
FFFFFFFF
FFFFFFFF!y
FHFHFHFH
FHHFHHFH
FHHHFHHH
file error
file list size: %d
file list used: %d
file %s not found in the zipfile
FileTimeToLocalFileTime
FileTimeToSystemTime
FillRect
FindResourceW
{flat}
- floating point support not loaded
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushInstructionCache
;FMFMFR
FO0uk0b-g
((FOMMOR
--force
format
FormatEx
format options:%s
freedos
FreeEnvironmentStringsW
FreeLibrary
french-belgian
french-canadian
french-luxembourg
french-swiss
Friday
Ft,Nt	NtFNt#NuV
^F<-uB
Fujian1
|><G,@
GAIsProcessorFeaturePresent
^G[b;:
\gb)/oi
GDI32.dll
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateFromHDC
GdipDeleteGraphics
GdipDisposeImage
GdipDrawImageRectRectI
GdipFree
GdipGetImageHeight
GdipGetImageWidth
gdiplus.dll
GdiplusShutdown
GdiplusStartup
generic-type-
Genuu8
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
GetACP
GetActiveWindow
GetCapture
GetClassInfoExW
GetClassNameW
GetClientRect
GetClipBox
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDesktopWindow
GetDeviceCaps
GetDiskFreeSpaceExW
GetDlgItem
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
GetFocus
GetLastActivePopup
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetMessageW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetMonitorInfoW
GetObjectW
GetOEMCP
GetParent
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStockObject
GetStringTypeA
GetStringTypeW
GetSysColor
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetUserObjectInformationA
GetWindow
GetWindowLongW
GetWindowRect
GetWindowsDirectoryW
GetWindowTextLengthW
GetWindowTextW
GGurt.c
GHO/GHO
GHO/PK
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
<G=+>N>
great britain
Greater Manchester1
}>&G>S
GS@(YC
:.:;:G:W:^:m:y:
g&xLPi
`h````
=$>H>}>
H*0"ZOW
h4FHFR
H4pT[Bz
H6ksju
Ha<oTJ
(H^bGh1k
(hd%d)
header crc mismatch
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HFHHHHHH
`h`hhh
HHHHHHHH'
HH:mm:ss
HHt4HHt
HHt*HHt
HHtXHHt
HHtYHHt
\h;HwO
HIf98t
HKHHHHHK
HKKKKKOKKKKKO$K$KO
;(;.;H;M;\;e;r;};
HMHHMKMH4
HMMHMHMH
holland
hong-kong
HpEqF(
Ht\Ht,
$http://aia.startssl.com/certs/ca.crt02
(http://aia.wosign.com/class3.code.ca.cer0!
 http://aia.wosign.com/wosign.cer0.
!http://crl.startssl.com/sfsca.crl0
http://crls.wosign.com/ca.crl0E
!http://crls.wosign.com/code-3.crl0w
http://ocsp.startssl.com/ca00
http://ocsp.usertrust.com0
http://ocsp.wosign.com/ca0,
%http://ocsp.wosign.com/class3/code/ca04
http://www.usertrust.com1
http://www.wosign.com/0
http://www.wosign.com/policy/0
:H:z;*
I`````[ 
=(>;>I>3?
-IDATx
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:0A6B6D668B9611E28A28B2B47A90B78C" xmpMM:DocumentID="xmp.did:0A6B6D678B9611E28A28B2B47A90B78C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0A6B6D648B9611E28A28B2B47A90B78C" stRef:documentID="xmp.did:0A6B6D658B9611E28A28B2B47A90B78C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>E
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:34A058BE8BAE11E294BAE969C49EFDEC" xmpMM:DocumentID="xmp.did:34A058BF8BAE11E294BAE969C49EFDEC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:34A058BC8BAE11E294BAE969C49EFDEC" stRef:documentID="xmp.did:34A058BD8BAE11E294BAE969C49EFDEC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:5BEFAEE78BA611E28F73BDBA47A8EF49" xmpMM:DocumentID="xmp.did:5BEFAEE88BA611E28F73BDBA47A8EF49"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5BEFAEE58BA611E28F73BDBA47A8EF49" stRef:documentID="xmp.did:5BEFAEE68BA611E28F73BDBA47A8EF49"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>V
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:CAADC2428AF811E28CF2BEB34A3EA1CA" xmpMM:DocumentID="xmp.did:CAADC2438AF811E28CF2BEB34A3EA1CA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CAADC2408AF811E28CF2BEB34A3EA1CA" stRef:documentID="xmp.did:CAADC2418AF811E28CF2BEB34A3EA1CA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D94616488AF811E28F3B97B6C6D509D1" xmpMM:DocumentID="xmp.did:D94616498AF811E28F3B97B6C6D509D1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D94616468AF811E28F3B97B6C6D509D1" stRef:documentID="xmp.did:D94616478AF811E28F3B97B6C6D509D1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
>If90t
IiGM>nw
incompatible version
incorrect data check
incorrect header check
incorrect length check
ineIu(
 inflate 1.2.7 Copyright 1995-2012 Mark Adler 
InitCommonControlsEx
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
insufficient memory
__int128
__int16
__int32
__int64
__int8
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
InterlockedPopEntrySList
InterlockedPushEntrySList
InvalidateRect
InvalidateRgn
invalid bit length repeat
invalid block type
invalid code lengths set
invalid code -- missing end-of-block
invalid distance code
invalid distances set
invalid distance too far back
invalid literal/length code
invalid literal/lengths set
invalid stored block lengths
invalid string argument
invalid string position
invalid window size
;:<I<q<
irish-english
IsChild
IsDebuggerPresent
IsIconic
ISOS/ISOS
ISOS/PK
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWindow
italian-swiss
It"IIuQ
It.It+It!It
"iTXtXML:com.adobe.xmp
 $ $$IW_B;;B;CCI  
>,>I>Z>_>e>|>
```````J
JanFebMarAprMayJunJulAugSepOctNovDec
January
jF<-uH
[!,$JG
J,;H(s
ji_jdZf;
	jIWc-	r:
JJJW`B	
j@j ^V
J\kEwx
JP;H8u
Jp;Htt
J[p,_KB\
j"^SSSSS
JT;H<u
<$=J=Y=
kcPZR0[
KERNEL32
kernel32.dll
KERNEL32.dll
KFKMKFOL
KillTimer
;K;i;w;
$K$$$$K_
$ K K$ a
[ K K$$$H
KKKKKKK_
KKKKKKKKK
KK$$KKKK$KK$KKK
|KKKKKKKKKKKKKKKH
KK$KK  KKK K$ O
KKKKKKKO$KKKO$O
KKKKKKKX}}}}}h
KKMKMKMKKKKKOKKOKKKMKKMKKMKKKK
 K K W
KMKMKMKKOKPKKOKMMMMKPMKPMKMPMO
*?KMnPPO4W
kQWWm?^\,%
kT7MR0
.K"uS7P
?K?X?a?
```````L
+L````
```````L0``````L
l!6[!H
l!;b	F
LC_ALL
LC_COLLATE
LC_CTYPE
LCMapStringA
LCMapStringW
LC_MONETARY
LC_NUMERIC
LC_TIME
:l;D<0=P?b?t?
+LD`UU
LeaveCriticalSection
  Length  Method     Size Ratio   Date    Time   CRC-32     Name
light-blue
light-cyan
light-gray
light-green
light-magenta
light-red
--list-size
 --list-size %d
  -l  list files
(\`LLL3+
LLLX`O
L;:.LN
[-&LMb#{'
lnFYuSD
LoadCursorW
LoadImageW
Loading 
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LoadStringW
LocalFileTimeToFileTime
`local static destructor helper'
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
+**+*?LOPNPj
LPtoDP
L)QR5R}
;L<R<^<m<
~lRUG#
<L<S<f<s<
lstrcmpiW
lstrcmpW
lstrlenA
lstrlenW
=L=V=m=u=
\L[*W0
<(<L<X<`<
?M85/&C
magenta
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
MapWindowPoints
--max-sectors
 --max-sectors %d
MessageBoxA
MessageBoxW
'MHMMMMFMF;@HKMMOMOMOK
Microsoft Visual C++ Runtime Library
MiniUnz 1.01b, demo of zLib + Unz package written by Gilles Vollant
mj>zjZ
MM/dd/yy
MMMMMMMM'
MMMOMOMO'
+mnmnnnnnnnnnnnnnnnnnnPpl
'MOMMKF(z8KMOMMOMMOMMR
(MOMOMMOMMOMR
Monday
MonitorFromWindow
more info at http://www.winimage.com/zLibDll/unzip.html
MoveWindow
+mPnPnPnPnPnPnPnPnPnPpPol
MSWIN4.1
MulDiv
MultiByteToWideChar
MxKpf+
m(x#s(
M~ZD6Ep 
<`=`>	?N?
+?=+++++N````
N>8}qV
--nalign
need dictionary
 new[]
new-zealand
N/f	gHe
?nnnnnnnnnnnnnnnnnnnnnnnl
+nnnnnnnnnnnnnnnnnnnnPpPl
nnnnnnnnnpnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnl
nnnnnnnnpPnO?+++++++?Onnnnnnnnnnnnnnnnnnnnnnns
nnnnnnnpnnnnnnnnnqnnnnnnnnnnnnnnnnnnnnnnnnnnns
nnnnnnnpPpnD
nnnnnpnnpnpnnnlpnnnnqnnnnnnnnnnnnnnnnnnnnnnnns
nnnnPpPoPpP+
nnnPoPoPoPn+
+nnPnPnPnPnnnPnnnnnnnPpPl
no file
no menu
NO NAME    
`non-type-template-parameter
normal
norwegian
norwegian-bokmal
norwegian-nynorsk
Norwegian-Nynorsk
not enough memory
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
no type
November
nPnPoPoPoPn+
ntelu0
(null)
=N>Z>#?
O1gxw%
=&=-=:=O=b=h=|=
October
OHF%`L
ole32.dll
OLEAUT32.dll
OleInitialize
OleLockRunning
OleUninitialize
(OMF?c
OMMMMMHKHMHMMMMMMMMMR
`omni callsig'
OMOF81
OMOMMMOM 
OMOMOMOM
OMPPMPOP 
OOMOOOMO
*OONPR
+OOOMj
+OOOOOOOPPPPl
 OOPOj
  -o  overwrite files without prompting
operator
OPMPOPMO+
OPPOPPPO+
+OPPPj
+OPPPPPPPK2
OPPPPPPPO@(*
original extended data size: %lu
original primary data size: %u
o;&u?t
OutputDebugStringW
OUu(b7epcn
o?V=N9.)T
OZw3(?
P4'Nn6
p4t4x4|4
__pascal
pdv \:
PeekMessageW
PeekNamedPipe
  -p  extract crypted file using password
p[:gL	:N;
\\.\PhysicalDrive%d
Pk)~p*
`placement delete closure'
`placement delete[] closure'
Please contact the application's support team for more information.
PnPpPoPoPnP+
portuguese-brazilian
PostMessageW
PostQuitMessage
pOU'84X}
+PPnPPPPPPOKMnPPPPPPPPPPl
PPPPPNPPLh
PPPPPPPP
PPPPPPPPPOP?
PPPPPPPPPPn+
PQQSVW
pr china
pr-china
--primary
 --primary %d
primary data size: %u
private: 
Program: 
<program name unknown>
protected: 
PtInRect
__ptr64
<p>t>x>|>
<P<T<X<\<`<d<h<p<x<
> >(>@>P>T>X>\>`>h>
?(?,?<?@?P?T?X?`?x?|?
public: 
puerto-rico
- pure virtual function call
P/\Z!*@
{'pz(Me_W
?"???P?Z?w?
qEi$9n
```Q[``K
Qkkbal
qppppppppppppppppppppppppppppppppppppppppppu
Q@;P(s$
QQQOOOOOOQQQPPPNNNQQQOOOPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPOOORRR
QQSVWd
QQSVWh
QueryPerformanceCounter
QvR;q	&'
qZ\|E^
r2+#Eg
!.R2j~
!R7[EE=
RaiseException
.rdata
ReadFile
RedrawWindow
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegisterClassExW
RegisterWindowMessageW
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
ReleaseCapture
ReleaseDC
@.reloc
remove
        <requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
      <requestedPrivileges>
__restrict
ResumeThread
rian35648@163.com0
RIDATx
RjiXJ+
'\@RmDdT
RPMMMPMMMPMMMMPMMMMMMMMMMMPR
RtlUnwind
runtime error 
Runtime Error!
RZ}Sbi
``````S
:-;S;|;
?#?;?S?
s<0E<lB}
Salford1
Salt Lake City1
Saturday
SbI#<.:
`scalar deleting destructor'
ScreenToClient
SCw(T]'Y`
"Secure Digital Certificate Signing1)0'
    </security>
    <security>
SelectObject
SendMessageW
September
SetBkMode
SetCapture
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetFilePointer
SetFileTime
SetFocus
SetHandleCount
SetLastError
SetStdHandle
SetTextColor
SetTimer
SetUnhandledExceptionFilter
SetVolumeLabelW
SetWindowLongW
SetWindowOrgEx
SetWindowPos
SetWindowsHookExW
SetWindowTextW
<#<S<h<
SHELL32.dll
ShellExecuteW
SHFileOperationW
shift-
SHIFT-
short 
ShowWindow
signed 
SING error
--size
SizeofResource
%SJ8iTLf
SKMMMMMMMMMMMMMMMMMMMMMMMMMMMV
slovak
snnppnppppnpnpppnnqnnnqnnqnnqnnqnnqnnqnnqnppnv
%s opened
south africa
south-africa
south korea
south-korea
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
SPLSQPJJVWTLJONSRVOPNMNRPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPRQMSOUQRPQLMQQQ
.s<r;y
s[S;7|G;w
^SSSSS
 StartCom Certification Authority0
StartCom Ltd.1+0)
static 
__stdcall
Stored
stream end
stream error
`string'
--string
StringFromGUID2
string too long
struct 
Sunday
SunMonTueWedThuFriSat
swedish-finland
syslinux
--syslinux
SystemFunction036
SystemParametersInfoW
?\?t?|?
t4h<#F
=@=T=d=
tdh(#F
teHtFHt&Hu
`template-parameter
template-parameter-
`template static data member constructor helper'
`template static data member destructor helper'
TerminateProcess
tEXtSoftware
#TeZc'
	`T\F]
tGHt.Ht&
t!h0vF
The file %s exists. Overwrite ? [y]es, [n]o, [A]ll: 
The USERTRUST Network1!0
+t HHt
This application has requested the Runtime to terminate it in an unusual way.
__thiscall
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
!This program cannot be run in DOS mode.
 throw(
[thunk]:
Thursday
t!h$vF
t hxcF
timeout
tK<_t<<$t8<<t4<>t0<-t,<a|
tLh4#F
TLOSS error
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
tM<it-<ot)<ut%<xt!<Xt
too many length or distance symbols
total sectors: %d
tR99u2
_TrackMouseEvent
TranslateMessage
trinidad & tobago
  </trustInfo>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
t"SS9]
<+t(<-t$:
t.<@t5V
TtUHtKHtAHt
t\<@tXj'
tU<A|B<P
Tuesday
;t$,v-
t VV9u
t+WWVPV
.txtPK
.txtrt
.txtup
.txtup:
.txtup!
.txtup1
 Type Descriptor'
`typeof'
ty<%tA
tY<@tO<Zt
TzQhnw
U4FKFHK
>:u8FV
\UdiskClone\Release\U
`udt returning'
Uhhq"A
u)jAXf;
~%u'M(
umaster
\umasterhelp.zip
- unable to initialize heap
- unable to open console device
__unaligned
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UnhookWindowsHookEx
UNICODE
union 
united-kingdom
united-states
--unit-size
Unkn. 
UNKNOWN
unknown compression method
`unknown ecsu'
Unknown exception
unknown header flags set
UnregisterClassA
unsigned 
 unzip 1.01 Copyright 1998-2004 Gilles Vollant - http://www.winimage.com/zLibDll
UP`+c5xS
UQPXY]Y[
.urlPK
.urlr,]
.urlup5
URPQQh
Usage : miniunz [-e] [-x] [-v] [-l] [-o] [-p password] file.zip [file_to_extr.] [-d extractdir]
USER32.dll
USER32.DLL
UTF-16LE
UTN-USERFirst-Object
UTN-USERFirst-Object0
u,VVWV
`vbase destructor'
vbo8Xg#
`vbtable'
`vcall'
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
@vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
version: %d.%d
`vftable'
"<]V|i$+
V!ij7b
virtual 
VirtualAlloc
`virtual displacement map'
VirtualFree
  -v  list files
v	N+D$
volatile
 volatile
volatile 
`vtordisp{
`vtordispex{
_VVVVV
VVVVVQRSSj
V_:X1:
W1p1m4
}w'22)
__w64 
W7W;/o
wC6`w:
wchar_t
Wednesday
WideCharToMultiByte
WindowFromPoint
wkPSQR
W$lCzz:5
W(LFOFOFOR
wnppnppnpnpppnppppnpnqnpnnpnnpnnpnnpnnpnnpnpp|
wO}F3"J
w+OQvr
WoSign Class 3 Code Signing CA
WoSign Class 3 Code Signing CA0
!WoSign eCommerce Services Limited0
!WoSign eCommerce Services Limited1'0%
!WoSign eCommerce Services Limited1*0(
=%=W=^=q=~=
wqppppppppppppppppppppppppppppppppppppppu{
WriteConsoleA
WriteConsoleW
WriteFile
wvsprintfW
www}}}}}}{{{|||{{{~||
^WWWWW
>*?_?x?
X5\5h5l5p5t5x5|5
XB######################################B\
x_@	bS
X@deque<T> too long
xd_read fails at offset %d, size %d
xd_seek fails at offset %l
xd_write fails at offset %d, size %d
\$xei-^\/
  -x  Extract with pathname
	`XF$```L
_X.goi
||||X  H
Xiamen1402
+Xiamen Shangshi Network Technology Co.,Ltd.1 0
+Xiamen Shangshi Network Technology Co.,Ltd.1402
#X`ILK1
Xokoq$C
xoy`Q1C
<?xpacket begin="
xppwpp
xpxxxx
<xtV<XtR
<xtX<XtT
X$v164p
X>W#|8
xxxvvvzxx
Y``````2
Y############################################a
|ycy)Z-
yellow
YH<bl:
	```*Y``L
:$:Y:l:b=i=
>=Yt1j
ytq|u|{wvf
y:w\s)
%*YY[f}E
|y}{{zzzv{|zv
<z~$<A|
 zaHh8
)\ZEo^m/
 --zip
ZKMMK(
(.ZMmD
zTW6Kl
}{z||||{w
!ZwdQ;R"