Sample details: 247839c0b9cba3fa44250093a1be3952 --

Hashes
MD5: 247839c0b9cba3fa44250093a1be3952
SHA1: 2eaa9872a174e1e2e7ef2e2fa0fd649ab438f14b
SHA256: a93d003cb19541528b4d46d2255b23f970e078d9d043f94e6174b75b5f4be777
SSDEEP: 12288:VpFSq4UerRFXerYL0QnoxlG4wtUc7V1e6uigZpqa3:Vd4UURBerYvnoxlG4Lc7V1eggZpq
Details
File Type: PE32
Yara Hits
YRP/Armadillo_v171 | YRP/Microsoft_Visual_Cpp_v60 | YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional | YRP/Microsoft_Visual_Cpp_50 | YRP/Microsoft_Visual_Cpp_v50v60_MFC | YRP/Armadillo_v171_additional | YRP/Armadillo_v4x | YRP/Microsoft_Visual_Cpp | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasRichSignature | YRP/with_images | YRP/without_attachments | YRP/with_urls | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/network_http | YRP/screenshot | YRP/keylogger | YRP/win_registry | YRP/win_private_profile | YRP/win_files_operation | YRP/win_hook | YRP/Big_Numbers1 | YRP/Advapi_Hash_API | YRP/CRC32_poly_Constant | YRP/CRC32_table | YRP/MD5_Constants | YRP/BASE64_table | YRP/Str_Win32_Winsock2_Library | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API | YRP/Str_Win32_Http_API |
Parent Files
03be4b6fc5536b85f9c4d8195917f3fb
Strings
		!This program cannot be run in DOS mode.
,<Rich
`.rdata
@.data
t(ENEN;
L$$_^]
T$$_^]
D$$_^]
L$89l$8}
D$$~9+
F\_^][
T$HhX=I
L$$_^d
L$@^[d
9L$x~e
D$PQRP
D$hRPQ
L$T_^][d
L$lRVQ
D$hQRP
D$hQRP
T$pPQR
\$8UVW
L$DPQj
	9oTtc
\$8UVW
L$DPQj
	9oTtc
L$ _^d
W9^du-
T$|hd=I
D$|h`=I
L$ PQh
L$L_^][d
L$D_^][d
L$@RUQ
L$|_^][d
L$|_^][d
L$|_^][d
L$(VQRSP
L$4_^[d
V#D$,WPQ
D$@UPQ
T$XUSR
L$@PQR
D$HUSj
L$x_^d
D$(SUV
T$8RWj
L$ _^][d
l$<VWj
L$(VQVj
L$(UUh
t$LUPh
o0SSSSU
D$dSUVW
D$@WPS
L$`_^][d
D$,RVhh>I
PWh0?I
D$HUPQ
u(UhT?I
\$PVUUS
D$hSUV3
D$,Pj<j
L$h_^][d
L$X_^d
t$ 90t
L$4S+L$0Qj
D$LPUj
D$ PQR
D$89Vdu
FpHt&Ht
D$LUSWP
L$$_^][d
L$,_[3
L$,_[3
L$(WQR
QQUWSS
L$P_]^[d
T$\PQR
D$hUPQ
L$<PQVV
L$<SQR
T$<RVW
T$lPRh
T$ SRh
9l$xtU9
u29l$xu,
L$XSQh
D$,SPh
T$,SRh
T$,SRh
T$,SRh
t$(SSh
t$$RVP
|$,RPQ
L$H][d
L$HSUVWP
D$XPQU
D$8VPQ
T$ SWRP
L$L_^]3
t%RSQP
XY[Z[]
~'PSQR
\$<VW3
L$4_^3
D$XQRWP
D$dQUWRP
|$D.tm
L$0^[d
D$0WPQ
T$$+D$4
L$L^[d
9^xu5j
L$X_^]3
h9n`u;
D$8RPj
T$DQRU
D$PRPQ
L$TSWQ
l$HQRVU
D$H_^][
\$lUV3
L$h_^]3
T$\jdSR
L$Hj&Q
;t$Xu";\$\u
L$DSVQ
L$,_^]3
L$$_^][d
L$0PQS
L$ ]_^
L$ QSR
D$TVPW
D$TRPW
t$XWVS
L$(PVQ
L$,RPQ
T$ PQWWR
D$DSWRPQ
T$\URP
l$@VW3
L$8_^][d
u"8D$yu
D$(_^][
8MThdu
~P9~Pun
t&9^$t
F(9V8tQ
F<_^][
F<_^][
T$8QRV
N@j!hx
|$@ Wu
|$D UV
L$8^]_3
@;l$\~Z
L$X;L$
uh9^8uX
F89^8u&j
N$~	WU
L$T_^][d
L$L_^][d
D$,;\$|
L$0PQR
PQj WUS
T$dPQR
L$l_^][d
L$8WPQR
T$DQSR
D$49D$$}
T$\;D$Xu
9nPu	9^T
L$(PQR
T$,RQP
T$(PQR
L$x_^][d
L$l_^][d
L$LPQR
D$dPQV
L$(SUV
L$4WPQR
D$ |2;
L$@_^][d
u._^][
L$ WPQ
T$,RQP
L$\_^][d
L$@RQj
D$@RPQj
L$T_^]d
FD uy9D$$}s
FD@ul9L$(}f
L$P_^d
L$\_^][d
;D$xt&
9D$$t+
L$D_]d
L$ ^][d
D$$QUP
L$|_^][d
L$t][d
D$$SUV
D$DURP
RVPUSQ
L$$_^][d
j VUPWQ
T$(QVURWP
L$,_^][d
D$$_^[
D$$_^[
L$4VQUP
L$$_^][d
L$4UQWP
L$$_^][d
T$0SUV
L$(_^][d
T$8QRP
L$(_^][d
L$8_^][d
|$LtE;
t$PPVS
L$8_^][d
T$\WVR
jBWVSSQ
D$(_^]
\$ PQV
L$$_^][d
L$H_^][d
T$DWRh
L$0PQR
L$0PQR
L$0PQR
L$pRPQ
D$hQRP
L$@_^][d
L$(RPQ
NTRPQj
L$(RPQ
T$(PQR
D$(QRP
T$DPQRW
L$<RPQW
L$T_^]
Nh;NX|
Vh;VX|
Fxt_;FTu@
Nh;NX|
P$RWPh }C
SWVVVRPV
L$$^]d
L$D_^[d
T$,hX=I
T$(QhX=I
T$(QhX=I
T$(QhX=I
L$,hX=I
T$,hX=I
L$t_^d
D$ RPUhD
L$l_^][d
L$$^[d
L$(WSR
T$0PQR
WjdjdPQh
|z;^<}uWS
L$D_^][d
L$\_^][d
It#Iu%
^l_^][
tI;Ftr
HtHHuz
V,_^[Y
D$ _^][
EHPWVS
u]9B uX
uR9BxuM
'9A`u"9
tq9~Dt
nd9~dt
u	9~@u
tS9~@uN
tRHt}H
NH_^][
T$LWUQVR
L$4WQUVS
;l$ }:
|$$}$WP
\$\}-j
O(_^][
T$H} VP
T$$PRV
D$(QPW
L$,SUV
L$0SUV@W
NX9NXu 
QPSWVR
T$PQRP
D$$SUV
D$(;l$ 
\$(UVW
D$,_^]
D$(CUSWP
9o4u'V
9t$0v8
BRPj+S
@PVj,S
\$4t|Ht@H
T$ QRP
L$$RPh
t.It+It
HDIt+It
|$DPPh
D$$j Ph
D$(j Ph
L$TUUj
L$<PQV
L$ Qj.j
L$ SVWPh
T$$QRVWUS
T$$QRVWUj
T$$QRVWUj
T$ QRVPWUS
D$$RPVWUS
L$hWUVPQ
9\$@u<SV
L$,_^3
L$0QWU
u0_^][Y
T$0RWV
T$0RWV
T$0RWV
L$0QWV
T$0RWV
L$PRPQ
L$(RPQ
T$PRVS
T+3x%A
;D$<s!
L$ RUPj
T$,PQh8,H
D$0Qh,-H
L$(SUV
N4_^]3
~(9~$u
D$ _^]
T$ _^]
9_|t	W
D$DRPQ
L$PPQR
F$@;F(v
F$@@;F(v
t_h$?H
QQSVWj
QQSVWd
t.;t$$t(
B 02CV
C =02CVu
^}%95`
VC20XC00U
PPPPPPPP
uRFGHt
YHYtLHt9
tn<%t2
HHtiHtGH
HtHHt(
HtOHt)H
QQSUVWj
_^][YY
SS@SSPVSS
t#SSUP
t$$VSS
_^][YY
t/WWUPj
QQSVW3
sO;>|C;~
HHtpHHtl
<]t_G<-uA
btHHt.
QQSVWj
>:uNFV
>:u#FV
PPPPPPPP
PPPPPPPP
VWuBh \H
t+Ht$Ht
+ttHHtd
HSVHWtgHHtF
u.hX\H
nt2Ht#Ht
F\jLSP
u$SShe
PQVh@PH
Wj(_Wj
hWj@_;
tAhx:H
Yt&h\;H
PQQQQQ
VWhGIG
t	9p$u
u-hxIG
PPPPhd
tvWWWWU
F,_^][
tSh`@H
(wqt\HHtS
t>Ht Ht
QSUVWj
n0SSSSU
_SSSSU
Ph_^][Y
tD9_Pt?
Ht#HHt
@t4Ht1Ht_Ht
^$_^[]
F(_+F$^[;E
<A|2<Z
<A|@<Z
+tJHt:Ht*
P<PuWSV
VWtp9E
HtTHtFHt8Ht*Ht
PWVWWW
9^0u/j
F09^4u*j
F49^8u&j
^,_^][
kernel32.dll
user32.dll
user32.dll
user32.dll
kernel32.dll
advapi32.dll
advapi32.dll
advapi32.dll
advapi32.dll
advapi32.dll
advapi32.dll
user32
OpenEventA
CreateEventA
GetCurrentProcessId
MessageBoxA
EnumWindows
GetWindowThreadProcessId
GetWindowTextA
GetClassNameA
IsWindowVisible
GetVersion
CryptAcquireContextA
CryptCreateHash
CryptReleaseContext
CryptHashData
CryptDestroyHash
CryptGetHashParam
GetInputState
d09f2340818511d396f6aaf844c7e325
707ca37322474f6ca841f0e224f4b620
A512548E76954B6E92C21055517615B0
F7FC1AE45C5C4758AF03EF19F18A395D
52F260023059454187AF826A3C07AF2A
7B68736E818E41c5A28B0AE4D43C128C
A6B983789F624b2cBDFD7D671249C097
window
Client
CPUInfo
HDInfo
asdasdsadasdsadsadsads!@#$%^^&**JHGRV
C:\Windows\md5
 bbs.125.la
http://ltwl.f3322.net/ip.txt
0201-2&Username=
123456
z>Windows 2000
ffffff
@Windows XP
@Windows Server 2003
@Vista
ffffff
@Windows 7
0123456789ABCDEF
@http://ltwl.f3322.net/down.txt
C:\Program Files\soft
C:\Program Files\soft\
0201-1&Username=
kernel32.dll
user32.dll
advapi32.dll
user32
OpenEventA
CreateEventA
GetCurrentProcessId
MessageBoxA
EnumWindows
GetWindowThreadProcessId
GetWindowTextA
GetClassNameA
IsWindowVisible
GetVersion
CryptAcquireContextA
CryptCreateHash
CryptReleaseContext
CryptHashData
CryptDestroyHash
CryptGetHashParam
GetInputState
|?5^<@
BKbhTb~XBK!;
?u='@^
Qkkbal
 inflate 1.1.3 Copyright 1995-1998 Mark Adler 
Qkkbal
- unzip 0.15 Copyright 1998 Gilles Vollant 
F%*.*f
CNotSupportedException
CMemoryException
CException
CMemFile
CTempGdiObject
CTempDC
CPalette
CBitmap
CBrush
CGdiObject
CPaintDC
CWindowDC
CClientDC
CUserException
CResourceException
CDialog
MS Sans Serif
MS Shell Dlg
CTempWnd
AfxOldWndProc423
AfxWnd42s
AfxControlBar42s
AfxMDIFrame42s
AfxFrameOrView42s
AfxOleControl42s
GetMonitorInfoA
EnumDisplayMonitors
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
GetSystemMetrics
USER32
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
InitCommonControlsEx
COMCTL32.DLL
CPtrArray
CComboBox
CButton
CStatic
CFileDialog
CStringArray
CWinApp
PreviewPages
Settings
CTempImageList
CImageList
CProgressCtrl
CArchiveException
CSharedFile
CCmdTarget
CWinThread
CTempMenu
combobox
CDWordArray
CWordArray
CFileException
CMapPtrToPtr
CToolTipCtrl
tooltips_class32
CColorDialog
UNLINK
DELETE
CObject
System
commdlg_SetRGBColor
commdlg_help
commdlg_ColorOK
commdlg_FileNameOK
commdlg_ShareViolation
commdlg_LBSelChangedNotify
CPtrList
software
CSyncObject
CCriticalSection
CMapStringToPtr
H:mm:ss
dddd, MMMM dd, yyyy
M/d/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
__GLOBAL_HEAP_SELECTED
__MSVCRT_HEAP_SELECT
runtime error 
TLOSS error
SING error
DOMAIN error
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
abnormal program termination
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program: 
<program name unknown>
GAIsProcessorFeaturePresent
KERNEL32
_hypot
`h````
ppxxxx
(null)
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
GetLastActivePopup
GetActiveWindow
MessageBoxA
user32.dll
1#QNAN
1#SNAN
RasGetConnectStatusA
RasHangUpA
RASAPI32.dll
GetAdaptersInfo
iphlpapi.dll
SHLWAPI.dll
MPR.dll
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
WINMM.dll
WS2_32.dll
VERSION.dll
CloseHandle
WaitForSingleObject
GetTickCount
GetCommandLineA
MulDiv
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
DeleteFileA
GetFileAttributesA
SetFileAttributesA
FindClose
FindFirstFileA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateEventA
CreateThread
WritePrivateProfileStringA
GetVersionExA
lstrlenA
LoadLibraryA
FreeLibrary
GetFullPathNameA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GlobalReAlloc
FindNextFileA
lstrcpyA
WinExec
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
GlobalSize
ExitProcess
GetCurrentThreadId
GetModuleFileNameA
RemoveDirectoryA
LockResource
LoadResource
FindResourceA
SetEvent
DeviceIoControl
CreateFileA
WaitForMultipleObjects
GetLastError
ReadFile
WriteFile
GetProfileStringA
LeaveCriticalSection
EnterCriticalSection
ReleaseSemaphore
ResumeThread
CreateSemaphoreA
FileTimeToSystemTime
GetTimeZoneInformation
SetLastError
SetFilePointer
GetFileSize
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersion
WideCharToMultiByte
IsDBCSLeadByte
lstrcmpA
lstrcmpiA
lstrcpynA
FileTimeToLocalFileTime
GetFileType
DuplicateHandle
SystemTimeToFileTime
GetLocalTime
DosDateTimeToFileTime
SetFileTime
KERNEL32.DLL
wsprintfA
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
GetSystemMetrics
GetCursorPos
MessageBoxA
SetWindowPos
SendMessageA
DestroyCursor
SetParent
IsWindow
PostMessageA
GetTopWindow
GetParent
GetFocus
GetClientRect
InvalidateRect
ValidateRect
UpdateWindow
EqualRect
GetWindowRect
SetForegroundWindow
DestroyMenu
IsChild
ReleaseDC
IsRectEmpty
FillRect
SetCursor
LoadCursorA
SetCursorPos
SetActiveWindow
GetSysColor
SetWindowLongA
GetWindowLongA
RedrawWindow
EnableWindow
IsWindowVisible
OffsetRect
PtInRect
DestroyIcon
IntersectRect
SetRect
InflateRect
SetScrollPos
SetScrollRange
GetScrollRange
SetCapture
GetCapture
ReleaseCapture
SetTimer
KillTimer
WinHelpA
LoadBitmapA
CopyRect
ChildWindowFromPointEx
ScreenToClient
GetMessagePos
SetWindowRgn
DestroyAcceleratorTable
GetWindow
GetActiveWindow
SetFocus
IsIconic
PeekMessageA
SetMenu
GetMenu
DefWindowProcA
GetClassInfoA
DeleteMenu
GetSystemMenu
IsZoomed
PostQuitMessage
CopyAcceleratorTableA
GetKeyState
TranslateAcceleratorA
IsWindowEnabled
ShowWindow
LoadImageA
EnumDisplaySettingsA
ClientToScreen
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
DrawIconEx
CreateIconFromResource
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl
LoadIconA
TranslateMessage
SystemParametersInfoA
SetWindowTextA
GetDesktopWindow
GetClassNameA
GetDlgItem
GetWindowTextA
GetForegroundWindow
CharUpperA
USER32.dll
GetDeviceCaps
GetTextExtentPoint32A
RoundRect
GetCurrentObject
DPtoLP
LPtoDP
Rectangle
Ellipse
CreateCompatibleDC
BitBlt
StartPage
StartDocA
DeleteDC
EndDoc
EndPage
CreateFontIndirectA
GetStockObject
CreateSolidBrush
CombineRgn
CreateRectRgn
FillRgn
PatBlt
CreatePen
GetObjectA
SelectObject
CreateBitmap
CreateDCA
CreateCompatibleBitmap
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
CreateRectRgnIndirect
SetBkColor
GDI32.dll
ClosePrinter
DocumentPropertiesA
OpenPrinterA
WINSPOOL.DRV
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueA
RegCreateKeyExA
ADVAPI32.dll
ShellExecuteA
Shell_NotifyIconA
SHELL32.dll
CLSIDFromString
OleUninitialize
OleInitialize
ole32.dll
OLEAUT32.dll
ImageList_Destroy
COMCTL32.dll
WSOCK32.dll
InternetOpenA
InternetCloseHandle
InternetSetOptionA
InternetConnectA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
WININET.dll
InterlockedIncrement
InterlockedDecrement
LocalFree
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetFileTime
GetCurrentThread
GlobalFlags
SetErrorMode
GetProcessVersion
GetCPInfo
GetOEMCP
GetStartupInfoA
RtlUnwind
GetSystemTime
RaiseException
HeapSize
GetACP
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
GetWindowTextLengthA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
LoadStringA
GetSysColorBrush
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ExcludeClipRect
MoveToEx
LineTo
ExtSelectClipRgn
GetViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextMetricsA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
comdlg32.dll
UnregisterClassA
.PAVCException@@
.PAVCNotSupportedException@@
.PAVCFileException@@
 (*.prn)|*.prn|
 (*.*)|*.*||
Shell32.dll
Mpr.dll
Advapi32.dll
User32.dll
Gdi32.dll
Kernel32.dll
\shell\open\command
mailto:
DISPLAY
OpenDatabase
CloseDatabase
GetConnectString
GetTabList
DllUnregisterServer
DllRegisterServer
DEFAULT_ICON
RemovePlayer
	WG!2S(
Nyt2S	W	w	w
L23fff&ff
?fff&ff23
CWinFormUnit
WTWindow
bcdfghijklmnpqrstuvwxyz
abcddefghijklmnoopqrrsstuvvwwxyyz;
,1"52.*
(&07-034/)7 '
hgjlkbrfzaoe
5	!	!	!	!
	!	!	!	!	
	6	6	6	6
	6	6	6	6	6	6	6	6	6	6	,	,	,	,	,	,	,	,	+	+	+	+	+	/	/	/	'	'	'	'	'	'	'	'	'	'	(	(	(	(	(	(	(	(	(	(	(	(	(	
	7	7	7	7	7	7	7	7	7	7	7	*	*	-	-	-	-
	2	5	5	5	5	5
	5	5	5
?? / %d]
%d / %d]
 (*.*)|*.*||
 (*.WAV;*.MID)|*.WAV;*.MID|WAV
 (*.WAV)|*.WAV|MIDI
 (*.MID)|*.MID|
 (*.txt)|*.txt|
 (*.*)|*.*||
Ctrl+Shift+F12
Ctrl+Shift+F11
Ctrl+Shift+F10
Ctrl+Shift+F9
Ctrl+Shift+F8
Ctrl+Shift+F7
Ctrl+Shift+F6
Ctrl+Shift+F5
Ctrl+Shift+F4
Ctrl+Shift+F3
Ctrl+Shift+F2
Ctrl+Shift+F1
Shift+F12
Shift+F11
Shift+F10
Shift+F9
Shift+F8
Shift+F7
Shift+F6
Shift+F5
Shift+F4
Shift+F3
Shift+F2
Shift+F1
Ctrl+F12
Ctrl+F11
Ctrl+F10
Ctrl+F9
Ctrl+F8
Ctrl+F7
Ctrl+F6
Ctrl+F5
Ctrl+F4
Ctrl+F3
Ctrl+F2
Ctrl+F1
Ctrl+Z
Ctrl+Y
Ctrl+X
Ctrl+W
Ctrl+V
Ctrl+U
Ctrl+T
Ctrl+S
Ctrl+R
Ctrl+Q
Ctrl+P
Ctrl+O
Ctrl+N
Ctrl+M
Ctrl+L
Ctrl+K
Ctrl+J
Ctrl+I
Ctrl+H
Ctrl+G
Ctrl+F
Ctrl+E
Ctrl+D
Ctrl+C
Ctrl+B
Ctrl+A
 (*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
 (*.JPG)|*.JPG|BMP
 (*.BMP)|*.BMP|GIF
 (*.GIF)|*.GIF|
 (*.ICO)|*.ICO|
 (*.CUR)|*.CUR|
 (*.*)|*.*||
SCSIDISK
\\.\Scsi0:
\\.\PhysicalDrive0
devices
windows
device
MGridCells
CColourPicker
out.prn
%d / %d
 %d/%d 
 %d/%d 
Bogus message code %d
(%d-%d):
JPEGMEM
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
.PAVCException@@
Accept: */*
Accept: */* 
HTTP/1.0
gb2312
us-ascii
=?gb2312?B?
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
%s <%s>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Content-type: text/plain; charset="
MIME-Version: 1.0
Content-type: multipart/mixed; boundary="#BOUNDARY#"
Reply-To: %s
From: %s
To: %s
Subject: %s
Date: %s
From: %s
To: %s
Cc: %s
Subject: %s
Date: %s
%a, %d %b %Y %H:%M:%S 
%+.2d%.2d
x86 Family %s Model %s Stepping %s
%08X-%08X-%08X-%08X
%02X-%02X-%02X-%02X-%02X-%02X
Unknown Manufacturer
Transmeta
United Microelectronics Corp.
IDT\Centaur, Via Inc.
NexGen Inc., Advanced Micro Devices
Cyrix Corp., VIA Inc.
National Semiconductor
Advanced Micro Devices
Intel Corporation
Geode By NSC
TransmetaCPU
GenuineTMx86
RiseRiseRise
CentaurHauls
NexGenDriven
CyrixInstead
AMD ISBETTER
AuthenticAMD
UMC UMC UMC 
GenuineIntel
%.2x%.2x-%.2x%.2x-%.2x%.2x-%.2x%.2x-%.2x%.2x-%.2x%.2x
Unknown family
Cx486SLC \ DLC \ Cx486S A-Step
Nx586 or Nx586FPU
Unknown NexGen family
MediaGX GX, GXm
Unknown Cx5x86 family
Cx6x86
MediaGX GXm
Unknown Cx6x86 family
Unknown 6x86MX\Cyrix III family
WinChip C5C-T Core
WinChip C5B\C5C Core
WinChip C5A Core
Cyrix M2 Core
6x86MX
Unknown Cyrix family
VIA Cyrix III - Samuel
Unknown IDT\Centaur family
Unknown UMC family
mP6 (0.25
mP6 (0.18
Unknown Rise family
Crusoe TM3x00 and TM5x00
Unknown Crusoe family
Unknown Transmeta family
Unknown 80486 family
5x86WB
80486DX4 WriteBack
80486DX4
80486DX2 WriteBack
80486DX2
Unknown 80586 family
K6-2+ or K6-III+ (0.18
K6-III
K6 (0.25)
K6 (0.30)
5k86 (PR200)
5k86 (PR166)
5k86 (PR120, PR133)
SSA5 (PR75, PR90, PR100)
Unknown K7 family
AthlonXP (Thoroughbred core)
AthlonMP (Thoroughbred core)
Duron(Morgan core)
Athlon(Palomino core)
Athlon(Thunderbird core)
Duron(SF core)
Athlon(0.18
Athlon(0.25
Unknown AMD family
Unknown Intel family
PentiumIV (0.18
PentiumIV (0.13
Unknown Pentium 4 family
Intel McKinley (IA-64)
Intel Merced (IA-64)
Unknown P6 family
PentiumIII (0.13
m) With 256 Or 512 KB On-Die L2 Cache 
PentiumIII (0.18
m) With 1 Or 2 MB On-Die L2 Cache 
PentiumIII (0.18
m) With 256 KB On-Die L2 Cache 
PentiumIII (0.25
PentiumII With On-Die L2 Cache
PentiumII (0.25
PentiumII (0.28
P6 A-Step
Unknown Pentium family
P55C (0.25
P24T OverDrive
P5 A-Step
i80486DX4 WriteBack
i80486DX4
i80486DX2 WriteBack
i80486SX2
i80486SL
i80486DX2
i80486SX
i80486DX-50
i80486DX-25/33
Newer i80386 family
IsWow64Process
kernel32
\\.\Smartvsd
\\.\PhysicalDrive%d
\\.\PhysicalDrive%d
SCSIDISK
\\.\Scsi%d:
explore
incompatible version
buffer error
insufficient memory
data error
stream error
file error
stream end
need dictionary
invalid distance code
invalid literal/length code
invalid bit length repeat
too many length or distance symbols
invalid stored block lengths
invalid block type
incomplete dynamic bit lengths tree
oversubscribed dynamic bit lengths tree
incomplete literal/length tree
oversubscribed literal/length tree
empty distance tree with lengths
incomplete distance tree
oversubscribed distance tree
incorrect data check
incorrect header check
invalid window size
unknown compression method
.PAVCObject@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.?AVCObject@@
.?AVCException@@
.?AVCSimpleException@@
.?AVCMemoryException@@
.?AVCNotSupportedException@@
.?AVCFile@@
.?AVCFileException@@
.?AVCMemFile@@
.?AVCDC@@
.?AVCClientDC@@
.?AVCWindowDC@@
.?AVCPaintDC@@
.?AVCGdiObject@@
.?AVCPen@@
.?AVCBrush@@
.?AVCTempDC@@
.?AVCTempGdiObject@@
.PAVCResourceException@@
.PAVCUserException@@
.?AVCResourceException@@
.?AVCUserException@@
.?AVCCmdTarget@@
.?AVCWnd@@
.?AVCDialog@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.?AVCTempWnd@@
.?AVCNoTrackObject@@
.?AV_AFX_CTL3D_STATE@@
.?AVCPtrArray@@
.?AVCStatic@@
.?AVCButton@@
.?AVCComboBox@@
.?AVCEdit@@
.?AV_AFX_CHECKLIST_STATE@@
.?AVCBitmap@@
.?AVCRgn@@
.?AVCCommonDialog@@
.?AVCFileDialog@@
.?AV_AFX_THREAD_STATE@@
.?AVAFX_MODULE_STATE@@
.?AVAFX_MODULE_THREAD_STATE@@
.?AV_AFX_BASE_MODULE_STATE@@
.?AVCStringArray@@
.?AUCThreadData@@
.?AV_AFX_WIN_STATE@@
.?AVCWinThread@@
.?AVCWinApp@@
.?AVCProgressCtrl@@
.?AVCImageList@@
.?AVCTempImageList@@
.PAVCArchiveException@@
.?AVCArchiveException@@
.?AVCSharedFile@@
.?AV_AFX_CTL3D_THREAD@@
.?AVCMenu@@
.?AVCTempMenu@@
.?AVCDWordArray@@
.?AVCWordArray@@
.?AVCSyncObject@@
.?AVCMapPtrToPtr@@
.?AVCToolTipCtrl@@
.?AV_AFX_COLOR_STATE@@
.?AVCColorDialog@@
.?AV_AFX_SOCK_STATE@@
.?AVCCriticalSection@@
.?AVCSessionMapPtrToPtr@@
.?AVCHandleMap@@
.?AVCPtrList@@
.?AVCMapStringToPtr@@
.?AVtype_info@@
resource.h
P#include "afxres.h"
PA#define _AFX_NO_SPLITTER_RESOURCES
#define _AFX_NO_OLE_RESOURCES
#define _AFX_NO_TRACKER_RESOURCES
#define _AFX_NO_PROPERTY_RESOURCES
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_CHS)
#ifdef _WIN32
LANGUAGE 4, 2
#pragma code_page(936)
#endif //_WIN32
#include "l.chs\afxres.rc"          // Standard components
#endif
wwwwww
wwwwww
wwwwww
wwwwww
wwwwww
wwwwww
wwwwww
wwwwww
HCoL~6!S#r
D@v9D$
r(EB8{
wG20Y,
E~Qe/O
t"*CGc0C
9`kI6f
;Y[P'_
pVQaHU
lF@L	fT
o5`fbl|
u8vOBbm)$
TU@UKLf
,6,|x:
PZ;0>e
?v:/F4
Q_C}YJ
AT~1XLf0
Ns:'M:
,8T^4kV
2PC5nm
)LQR.B
GCNz:V	
PHrlBMxo
GU8qp/|
[@WQ!(
-cmeh wh
@&EN>D
}BbMPg
Z8.@v]
g[!p/={
~>T[n%`c
+*s~XB
.NtuJm
B{86~g
/&R@*E<
0`{*0!
C&p,v9?
Uy-5',
AID16^
Uc]=,{
wj:M	v7
lN`d`/
^+cO~s
d<:Kx[
RcNQX2
^W*$rL h
)&p.@'
P?@GkL
S'BEi1DB
}U^w	4
8/clBW
@h/M& ?
wXlVJ+
K}n(*/
^~b<Tj
 !kHo]M
a-a&xo
R-`LbV
TaK1-d
>2o|x?
 j*+	#
E%`{d&
!Zkau%
#`HLP%
L?8@N?%
B8c/!9
au_i]-
>0uj/t
a)&K;<
NiwnO[
L"j */
$D_^_K
E>wE>Q
([*_<1{
0R>\W[
nzzpenc
eQpenc
SbpS:g:
SbpS0R
SbpS@b	gu
SbpS0R
kXEQ>\u
ck(WSbpS
-NbkSbpS(
SbpS\O
-NbkSbpS
ech1Y%
ech1Y%
OX[0R 
ech1Y%
RSbpS\O
QX[gbL
YX[(W	
N/f@b	g
l	g~b0Rdk
-N"N1Y
0dk:ghV
N*Ntepe
N*N(W%
N*N(W%
N*N(W0
N*Ncktepe
T/f&Tcknx
l	g~b0R 
[/fS_MR
g~b1Y%
HrCg@b	g 
O(uckHr