Totalhash sandbox scan report for the file with SHA1 5d9e74b729d9cefbb32aa96cee0ffb224d8c90ec



Analysis Date2014-01-23 05:08:59
MD51b0a2c5234acb90a18ee341fa7292731
SHA15d9e74b729d9cefbb32aa96cee0ffb224d8c90ec

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Language040904B 
Section.text md5: f27f8920e5a97ebf6a6b3047a0290d02 sha1: a244272a90ee5cbc5d829121d76e2f9b29b5c3a1 size: 65024
Section.data md5: 43a0bf61f28f50095431c9ea0637ee38 sha1: 491fd89bfcbd865750a360d1aa699fd6f024a642 size: 11776
Section.rsrc md5: 561bee208554c94733409b8fe47167c0 sha1: b84d124b761e33dfae94c39b145ae87822c59f0f size: 8704
Section.text md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Timestamp2007-09-15 13:29:24
VersionLegalCopyright: tyeemy imaient 2004-2011
InternalName: Disiaho Yhafyuar
FileVersion: 5.2.6800.4300
CompanyName: inaae Jofa Shi
ProductName: Fvhbxru
ProductVersion: 5.2.6800.4300
FileDescription: ilcasib Jypi Hoo
OriginalFilename: kyty.exe
PEhash61a8e3595c4b6511b51dc8134fe550c7d646eee9
AVavgWin32/Cryptor
AVaviraTR/Patched.Ren.Gen8
AVclamavWin.Trojan.Inject-323
AVmcafeeW32/Rimecud.gen.dl

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Network Details:


Raw Pcap

Strings
040904B
333f3
5.2.6800.4300
,&A?
(a4*	
Aahyl
Aqyoo
CompanyName
disba As. Y
Disgi, Sion
Disiaho Yhafyuar
Exheee Mya. E
exod, Yy
Exoila Yeer
Exota Keeean E
exrooo Ou, Oat. N
Exyzyk Hor
Exzeee. Ing
f3fff
FileDescription
FileVersion
Fvhbxru
ilcasib Jypi Hoo
ildeeor
Ilfooy, Ble
Illyqanym Hybapye R
ilrake Eee. Y
imary
Imcazi. Zeee Vage
Imcyhy. Sazency
Imeeeimyle S
Imful
imgy. Or
imjly
Imogme T
imoowam. T
Imypa Iige. Oive
inaae Jofa Shi
Inaceoo. Roh Peer
inayeed M
Inieeeee Eeeeeist
iniim Yeoor
Inobism
inoeew. Itoty
Inrafy. Ayedyary
InternalName
ira, Y
Iree Aqowi Cy
Iresy. Oment
Irice Enix Ee. G
Irnyoo Oafy Aess
iroq. Ixiaqee
iuiw
j;O	
kyty.exe
LegalCopyright
misal, Eeee Iyant
misfe Zyy
mishoe Ce
misism
misi. Toing
misw Pacoary
mis, Yyji. Ing
MS Shell Dlg
naha
noneweooty
Nonful
Nonmay, Sism
oada
Oleoki
Omynyme
Opia(
OriginalFilename
Over, Eawooo Onytym Ul
overjeeyo Zer
Ovii
pe'L
postbly
Postemship
Postm Ovess
post Peebi, Oyist
preeeeee, Y
Preee Egyyq Qygib, Le
Preoess
ProductName
ProductVersion
pY/1
reefoy Eness
Reiaik Hless
reic
reiie, Ism
Reing
Reme. Emamy Ypism
Sahenoi
StringFileInfo
Subyeeee T
T(58
tM@<
Translation
tyeemy imaient 2004-2011<	
Unde. Iieezing
under, Ajeer
under Enyfe Ent
underic An
Under, Oosak C
Underyyay Ylooi Acy
Underzi. C
undyzaui Mooess
ungaebo. Eoyj, Y
Unoape. If, Tivly
unryk. Oor
unyqeeer. On
unyxaii, An
unyzyika. Eelist
V3,+
VarFileInfo
VS_VERSION_INFO
waya
wocez
ymapi
        />
aadmo`yodV
aajunoS\
aa[`Za\]kg
abPgkv
abpvvc
a}b\RiV
a~c~fUzex
_acmdln
ac~_Ti
_adjust_fdiv
adz\rg}
a}}fjd
]{{ag~
a}~_gg
ah`RTm]zY
aiT^cdR
a_jfl}p
ake~h[Q
a}l{am
alfy~g
al`iY[yd
alsnlY
amgdg+_
amlry^Sj}g
a_mY{Rd_
anf~Sivxo]
a[nsoo
[aoW|VV
apt[U~pa
a[Qdr\c
a~qfrp
|a^qhP
{a`qoW
aQRYWm
~aQVrd\Zl{T
~arckh
aRSW`SV
]aru\Ru
arVdg[f`bc
</assembly>
<assemblyIdentity
        <assemblyIdentity
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
aT~ahc
{^atfk{
awS|zgpuQnr
a~`\wwrs
a^^`Xd
axdtnT
[aXP[dq
aX_R{Wc
`[\a^Y
ay{|[o}
ayqwo{
aY{RnjPmU
aYvlP\T
a`yWRT^kR
azi\vb]~
aZmbl~r~
_azwx}r
baxvm]
bayzr{
bbc{pP
bbk{QWuPQr
b_ejih
bf[czv|t
bfgudwY
bf]Rk^}gg
bfYzlWW
bgZx]{|
bhl`TvyVjR
bhRkxQjh_x
bh\WuS
bi~\_gPUt\
{b`jg]zk}
bjlRX`pc
\bliry
bm`UiwoPso
bmU_r{lvt
bneTXo
bnro}|V
boZsRjob
b[piqPtQ
bpjeRP]jZ
bP_lxzh{
bpP^Q`bSs
bpt~]S
`_b_pX
bQj\zzc
b^rkffWU^Qm
brq[vyz
bsawjfanc
bSppjtfZ]
|b[sWRl
budbR[qg
b[umZrp
bvVaiVafw\
bwPgrZ\
\bwUkgt\
bxtjoR
bXWhymtjb
b^XY]oX
by`{fZoqunk
bZ_S_dXhvz
caTYVc
c~avnsg
c[bb\~_Ti
ccdsdb
ccPSaTtae
cd[[cm}vqm
cddqU_
cdfwWe
cdXdU^
c`ehxw
ce]]n^
_cgQ}Yy
cihs]Yevty
[]ciVfh
cixbVUt
c`{~k]ip
c[{m}b
cni^zr[by\y
\cn}{{t
c_o]xci
cQvUzax`
cruP[Shl
crVY^{
csaq]hWc
cs_`c}o
csnPatzi
}cTPrU
ct]pUP}
ctT`Pobp[
c|tWPb_[
_cuuYYQa]uR
cuv\[j
\|c{VpSr~
cvp[]z
cwyjjrk{gv
cw`Z}T
}c~xi_
cXPWz_U
cXy]`c^X
cY^gredqdXl
cyguVg
`cyj^ir
cYQhou
cyvjTd\
cyvXaue}]i
cYVYn~o{l
[cy|Y`lYW
czh[c\
czytgkQ
[{]d_]
da_YZU
db|fWxzjlWR
dbvYbP[
dbXd][|nn
^dcaWZ
dcR|\^Rd
dcUx|x][ir|
dd|c{_nu
ddXraznu
</dependency>
<dependency>
    </dependentAssembly>
    <dependentAssembly>
<description>Postoo Ioo Ocism</description>
d^fh^p
dfj`aVPc
dgdzWkv
_dgltd
^d_hh[YVq~
dicP_q]in}
d_`i|P
diR{rV[^
]djni}_
dkjYbU{Zd
[dn`RRk`
_d~o`r
{dPZ{hst
dQkzS{Z
dQnWklSyW
{d[qxil
drdXod^ijcP
dsTy\Vx
dS`~Xbh
dtkYgdV
dt]n[un
dtss|n
d_{t[{x
dudrdc
dUrvjuz
`dus`flP\
dvafdb
dvR_T]oz
dvzYXS]x
dWPyaPc
dWPycXnQb
dwTudR
dXSzn^x
dxTXeorS
dxUcS_u
dYWhbS
{~d`ywwu
dZgocxlv
d}ZvQ{
ea{]eTmwu
ea`e]Yd
ealxdc
ebl~RZh
ebueYUd
ebvky\qP_S
ebvzep
ecyX[k
e]}d|ecp
~eeo~UY
eeZRVVV
e_^fmXwTtxz
ehc`lk{T
[ehvurn
{eip~f^kp
|e[lX^
emW~]xyz
emxsjm
endVjbv
enyf[T
eot]t_
e|p_mZg
ep~P]rdpa
e{P][|T
[[eptfSfV|
eqlP^bpv
[e_qou_X
e^QthX
|eQU[up
~erViiylbS
esaVpqc
esePQh
esfV}da
esjlyq
es{zSST
eT^ejgys
e^[tXU
eurqUX~
`\eUVb
eUzwkU}h
eWidgUb
}eWipRmr
ewSSoSw{
eWt\dgzTz
eWyemZ
eWyYag
_except_handler3
eX]sZixt
eXUdTXf
e`X`uT
\exvmg^
eZma^u
ezP\ZbVa
ezSqzz{]
eZT\Ylj
ezuPV{_d
faPRTUX
|faZZoiP
fclose
fdPS{b\
fdRUaU
fecdos
}f_eox
_fezv[
ffxxinQW
fgVp~v
f]iS[Xpm
fk`TjRl
f{l]g{UVb{
]fP~oqys
fprintf
f{{PU`~Ya
fpVeR~^
fqSbWd
fQzrly
^fRcXqjX
fr^PRrr
f]r}Qtx
\fRRu[
frXPe~
^fRxX[bwin
f~tPWd
[f[U]\
\fuhhma
f_UrqVua
fUVoym
fuWVTPZ[to
fUYdm]XY
fva\jv]qr
fVpR]Q
fV^vUr}y
fVwdcjX
]`{fVx
fwrite
fx~bapz
\fx~Pl
~}fycrne
f{Yifjk
~fy_nPs
~f]yQWQ
fyR_wSig
fys`pW
fy_TpS
fyUlX}|a
fyUum[
fy~v}tg
fZb[]hzmX
fZuj~bd
fZ[wWY
`gbhrg
gb`]WS\y
g~cSYn
gdht`Zxw
GetDesktopWindow
__getmainargs
GetModuleHandleW
GetStartupInfoA
gfk|sSZ~
gg|mlZ
gh^ucg]ia
giQexaRy
g|ispP`n
^g{jdVl{[o_
gjpSsv
gkdnf|{
}gknhur
gk`Ulpt
gn`fSl
gniX}_Vp
^gnTZq
gnws]__c
||`goa
goczxr
g[owem_dz|
gpj\pU
g}PXRY
gQ|~{\d
g]qmdU
gqoVUR
gQRYcx
g]{qygy^h
grghyu
grk~ln
grxoVuPPcV
gsvkUclm
gTnPuh
g^Toh}[
~gtq\[ak
gTSjSobc
gTyWRy
~g|t`z^y
}g\vgmXeP
gWenPpmc
g^WgXWR
gWZhop
g\]xhm
gy]m|rtlPYe
}gyWYs
^gz~bo
|g|ZU]at|
gZXdj\
hb^Ukj
hca[tk
h|cncwTW
h{{dfbY
hduSvr
h[eb~x
hfmQzp^
h\f_o[
h\h]p~k
[hh\xyll
hinZ`p
hk_uf_jd
hl]unvz
hmcan`x
]~hnki
]hnl{W
hnPbgfWx
~hnxfh
hoQZT_
]hPh~Q
hpipeqhm
|hpPZ^\
hPTZ{uS
hPvjP~pnv
hQR~rj
hqR_yw
]hR{[\
hRgkn{l
hRUqQvx
hRyfyus
h~spqi
hsQp`aj
hSr~lc
hS\~Xvy
~hs{\[Y
hSY`tkR
hthaopRu~
hT}jiY
htwWSylnq
hUXViq_i
[huXYp
hv~}gV
[hv[}r}
hvsuYz
\~hv}T
h}vVyjlnQc
hwdXQq
hWf[onrstxf
hWk^lZmz
~hWrjh
h{`xWVZ}n
hxXPf`pw
h{ybozfq
hYwgfz\
hznd~V
}hz`pt
hzQeoz
hZQuymaqXf
\_~iap{\
icS{jcp
]idPb~
idQq\XfX\u
idrj{jg
idsuyio
`ifR`q`^~b
if[vth
ifwlsohZ
{ifXQz~vW`
igwn~dgg
i|hnd_ivmX
ih}oxW
|]ihrjW
iiaohUPn
_iidmiWd
|ikPmZi[R
ileYTX}
]ilis{
i^l`z^
im`n{y
imnzqnum
_initterm
iow[en
ioYodn_Y
iptRTzQopPu
ipYq}|{
i[q~jg_ofs
irk^faP
isghP\YS
iS~lX{Tp]
i^sm`Y|]iq
i`s~qo
ist\}yh[QUs
itli\ci
iT{wp_t
itxPe[t
iubdqTho
iUckmYR
iUioTXv
|iURZz
{iuvwYsT_my
iV|bs^`qjl
iv{v_~
iwwRwWl
i]w_Xj
iwYrqoth
iX`afup\ji
iYxtcr
~iziTo]`
iz}S\|yh
izvtXs
|jagixdmT
jblProbQ
jbQTixnwc
_jcxRq
jd\|Pn
jeTTu^s
jfS_[kp^
j[|genY{YPu
jgr{no
jhS`ck
jj}tYh
jjVqapwhVo
}jjYTX
j|kc|c
jk~eZd
`\|jlrlaV
[jofSSt
joU`XT{vPRY
jP[y][
jQftxZm}z
j]]qQeoW[
jrcSTr
jRm\z~
jRqe^Vf
jRrgljdd`
jrxcWT
^[jswzW
~jT_dcdo
jugX`t
jVciZvbw
jVnS~teR
j~Vpy\v`fx
jvyvURw
~^jWn~
jWU_o~bw
j\XfRTb
jXheU^
j~XhyhSoV
jYuqlXu
}jy{]z
jzaf`R
jZiXrj
jzovSS~
jz~PPWg
kacWjmyf\`
kcyR`y
KERNEL32.dll
kesnvzYWya
k^f]Uy
khnbyS
[kioVVt
`}k`|iR
kjo{X]o
kjWq{Yx
kjZrouy
klSxp\^
{_klXt
klxvYg
ko^uR[Ump
kp|mh`
`kpmYni
]kP\ReX
kpRrhnY
kpS[bwd
kptaVjrW
k\_pvRVoW]
kqa[Wp]
\]k\qb[Y
`kqQRi
kq]YUT{
]kr]bv
k_RixvRci
kRkZU~^R
krnorPk
krpVfT
kSW]vbX
kt~\c\W\w
\ktf\p
kt[}S[
k^_TXrk}
k{\UaVZhl
]kuqzkdRTw
k_U[sm`
kuw__X
k~u`\y
k`veyze
[kV[hcpt_c
kv[qrPrds
kvTlPT
kWepdqw
kWYQnRo
kX|qgY
kXyph\
k}}ydm
kyg[qqd
~kYmuxxWTdj
kyTPvii
kYwkkne
[kyxzk
||kyYer
kz|UY{vYi
]kZVzdP
            language="*"
lanQPX
l[anYU
laRdQjpck
lb]T^]
lbX[^Tg
lcbgei
\]^lce{o}mm
lcves|n
ldX{nVo|ce
lekatmYVQU}
leo}WQ
~leslt[}v
l~evs[
{lezWn
lfnaTU
lgqhXgV
ljq^yomtj
ljz_`h
^lkqr]
lktjp|
lkz~~X
{llWbqYd
|[ll}x
l]m{|X
ln`b[Xb
l]`~nm
}ln^}q
_}lowWYvP`
lpnXr]y
\lPQTdy
lPrmps
lprv_nc
l|PS^vYwmUV
}[l|PURlt
lP[[X{Q
~lpZjg
|lQgpn
|lqk}PUs
lqlTvx
lr{aip
l]Rb_zlXa
lrcUhhR
[lrdXh|]RR
~^_lRS
lSQSnaY
lStktQ
lSU]q\
lswv]q
l_S^WXiWU~W
ltfotZ
lTktpss
^lTsg^_
ltVYZuvv
lUojWa
luRz[nnlddp
lU\WeY
lU|Z[|~Z
lV{jVRsivw
lVr]|S
lvRSVr
l`{Wpqhd
lWtPbUd
\lWUgPh
lwY{[n~gUWZ
lxijaaV~kd
{lxiscju
l]XuXvkWa
|l^XWy`
lXY[oTlq
lYiQ\s
]l||YmWgh
^l`_Yok
~lyvlv
lY]vRl
lzj}X^m{
malloc
m_bu~[
`mbVes
mcl]Tf
mdmWu[
meUQRUc
m\f\Pmv^v
mgfroy
mh_nS~
mjv~^de
mle`Tn
m|lRu\
mnb~_i
mokpnqShqa
|{mol[zPjf~
m|oUhP
mpjQry
[mplhmz
mPpl_m
mpsRyzVv
mPt^ymz
mPutlV
mPVcRb
mpw\ahTQbyb
mqfdYn{i
mq}[`|mt
mQnllYs_e
mQonic~~a^
mQ}y~gT
mra}Rwf
mR]nXdUP
msju}nS
mSPn]Xb
msvcrt.dll
mSvdxRkl
m^timiY^nj
mTo^j^
\m|ttxm
|mT[xZsS
muaionY
mu|[c^
mUoxilqaTTh
mupPsg
muRpYVlls
mvf|YR
mvhZw{xbR
mVrTnRhWc
mWko}{|
_mxa`}
[mXYnlror
mYhqkSTc{r
myS]dlju}
mZk~nd`wZj
m[zlRiqh
m]zpww|s
mZ{R_U\\
m`ZWU`r
m}zzank|S
            name="Microsoft.Windows.Common-Controls"
    name="overe, Ewive"
[na}Qqh
nbchPx
nbfnYvc
nbkQV\xp
nbToePw]Q
n^c|etyq
ncjZyvq
n`elUqg
ne{_od\
^nggqUU^Rk
]ngp_eQZ
n`i`Q}|
~njnRVQWb
nkcVSrq
]n~{kr
|nlZ]_
}nlzkvZY
{nmcx`jUa{
nm|ibo
n{mo^rewjW
n[nh`j
nnnPqSco_f
_nnRi|
`nnZUsT
n`oac]
nocayc
nojYWU
\npel]dT
nP{eorW
nP]fp]Z
npT}ke
n|PYh~Rl
~n`Rd^
n^sTRq
ntizddjwm
n[TnTu|hV
n_~Tv]
ntwtjcb~Y
n{tYfTq
nUjvvoU
numdZY
nUuxfrco
~nu~ZY
nVc[WUSXs
nVhpav
nvnhqm]req
\nVxnWn
nWPrYhja
nWQUq`m_
n[Wx`kq
n[XesU[
_n~xq\
nyosxo
nZU}^\
nz|uVzhb_
obPQi_
oed`}^Wl
]oel~p|a
`oeuXP
oeXdg[b
o]eXjQ_hTP
ogubVzd|Z
ohhduf
oh}P^aP
ohsRhRy
ohW^~ao}
ohX{Uljd
|ojbja
o}kbe^R
okoczen
oksdjq
__o|l`b
o~|mhvzT]
omw}[Y
_onexit
ooRQ^ak
{ooXuWh
o~Phse^
oPr^TfxmtT]
oqa|R_v
oqg[Wrj_x{
oq`pZsXQ
}or\f|]i
ortTU`Yf{R
o]Ruhj~
`oRwfPen
orXks[X
oseagdz^Y
oSSbrnv
oT_Rvz
oTtP_y
o`TXP{Yvf
o~uf\uSzd
oupnoX
ov}blne
oVjxSqg^x
oVtjYyq
oWqdYdb
owzrgax
oXTrgR
oXypyt\
oXz||co
oYPys~~
oyqTbypz
oyygWip`
oZaf^f
~|}ozfQhk
ozXwibaa
oZyp`q
PADDINGXXPADDINGXXPADDINGXXP
Pa^iY[
p{a_tb
P\brdXV
pbv\ScYi}
__p__commode
PcXc^R
Pd[ezY
^PdhhyxZR
_pdoQP`
p~dQVPZrg
pds~uhU
`P_e]lmhYy
pfrZ\e
[]pfXux
Pg][mPxTo
P\g}vX
p~hP~q
P]idzs
`P{}{iu
[pi\V`
pixXhb
pjh{V{
pjxZkZ
pkhfq_
P`k]nxe[
PlbrW[Vzwu
PldU_e
plZcvv
PM0\ol
Pm`h_h
pmQ\`g
pndT~U
Pn]n{ypq
Pn`Px[rr
pnu`ju
P[pc{w
pP_[eU~
PPhrec
ppizjd
PpoYpr]zbdX
PpqPWu
ppRrZn|yw
PPSPQw
PPth\a
Pp\wkk
PPXkU_i[
P\p^y]
Ppy]u]
PP]Z|~
ppz{|x
`pQ`hP`n
pQiUuz
^pQj_gP
p{qrdu
PqTvty
PQUaY]V
PQZWWo
PRaxrlWS
PRdepl
prgue_T\
\~PRj\
P_r[nZ
            processorArchitecture="x86"
    processorArchitecture="x86"
PRQkWjmqcr
pRS^~[
prSWvtv\Q
}]P\Ru}
}pRvnpk
PrXYhXy
P~\rYg
Prz~eXXj
]PS^`]
pSdw^s
PS{_\f{
~Ps~h|
[~[psp
pS\R}Se
~PSr{u
psR|wj
{pS~w_
P~Swzs
psySY]
pSyudSfzv
P|SyVRiy
PT_|b_
P}^tfmiRt]Z
Pt}jhUwSn
\PT^pp
pT^ude
p_T~xs
PtZunmS^t``
            publicKeyToken="6595b64144ccf1df"
PU}cyWuy
PUfRup
pU~pPlWzo
P|UrwQpeU
PU\}sPd~
P[|Us`UyYj
P\^VhV|hdz
P]_v`p
P]V|_qehk
pv[r{upumi_
PvS]Sg
PvTdSh
PVw|mp
PW^b_y
PWg~uZbji
PWiiuW]pc
Pw[lh`S
{pw\}nvzV
Pwnzfig
~pwQ{~
pWQdiXmsrn
Pw\rZa]h
_pWT{h
p}WU|q
pw``~w
pwxx}mQqPz
PXeYZRWoc
p{Xhrc
p\Xpal^W
pXr_h}
Px}R^^he
pXZsmipbrg
Py_l\j
Pylur^k_
pypsov
p\Y~SU
PYtcfv}Ri
p]ziYt
P]z]o^nm
PZPWpl
pzSo\dh
PZxw|cwVc
PzZ^yYSp
qakfj_V
q`aosxt
qaPyqX
qaQSah
~}`qaWld
q_aw]rs
_Q[~cV
Q^eU^Vt
QfcuVka
QfekSj\
Qf\uRR\
Qg`RWhXe
]qgux_~Uds
qg}Xk^tT
q^hpld
QhTVjt
\Qhutv
}qipkk`m^
qiqSXpRrU
]_Q~\iU
|`Qjaf[
qkaueW
`QkdfQZ
Qk~`jV_
qkRv[av
qlnVWcr_~
ql\Pg][vw
qlXPkgi[
Ql^zbQn
_qlZycc
[{qml|
qmofu~]
qm}tYm
qm|xhu
`QnQ^pZ
Q_nwWy
[_qoPQR
Qoy}itWw_h[
qo}ySh
`Qp~da[d
Q[pQwS
qP^rjPi
QPR]Tlp|Y
^q{PsVV
q]Pyvrx
QqaYYV
Qqrmf]qZ|P
qQS{mt
qq\YofVm
QQ^Zphv
|\q\`~r
qraVRvx{W^e
qRcmhZP
q}reZv
QRfVnTYh_jU
Qrmw\\[Z
qRPWSfQVwg
QrurUp
_{qshT\\
|QS}iro{
qS[uYXhr
QSXgR^
qtdhRu
QT}}^g
QTRR\nqx
QTtVZh
qu]jUhe`
q[urUY
}Q~uRY
qU\sqT^^
Quubeo
QuXpy~
QUY}Teo
q\}v]{_{
Q^Velyl
`qVfyghU
qv]\mtc
Qv|P[uuS
`QvU[e
Qvva}zz
{qVWzv
Qwipwr|x
Q_WRvgZ`
QWSwkVv~
qwVu_n
qwwqlS
Q{Xjlfu
Q~X[jUW\V~
QXlxex
QxpU\gxnh^W
qX~vzcRq
`QX`z_t
QychST|
QYeoWt
qy}f~w
Qy]hov
]QyP[lh|
Q_yRskjd^
[qyyYWW
[qyz^|zu
QZaaawtp
qZp_i[
}RaddvcZZ
raq^qRR`lX
ra[^Qt
rauv`P
rbqb`k
RbTV_cu]cr
Rcp\elZY
]RcqX^
rcuj{c~
|R\]cyz~{
Rda[^v
rdc]m[W
rdPUmm
rezjauuRyd
[rezYn
Rfd^^gz
_\rfib|_
Rf^krida|wa
RfUT{^
r~fxb{|knS
}|rfYV
rgezlT
}Rgmpb
rgt`ZQpr
R]g`unvxqbx
RgXZYY
RgY{^fQhu
{rgYta
_R_hbofX
rhl]YyXh
RhqzU{{
rhyuog{Tj|[
rideus
r`imvXV~n
r]iXT|Yu
RjS`P\YRfy{
~RjzTqk
rkbVm{zn
r]|kghn{
Rla[sj^z
}RlaSt
`R\lpW
~rlsXh]g
rl^XPd
rlYflfa
Rm_o~l
_R`mq]_dP
r{[m_w
r\nwTo
rnWzhd
RocSlg
roTVd`x_
r~~~pa
r]PfV}tg~l
RPi]jfyuray
|Rpng~
r|Pnl`
{rP`r[
R\p}Vgdj
]~RPX^Uu
r|PzggU}
RQf]u|ufyhi
`R[Qhj]
}}|rqmiz
rQpSphsa
RqSSwi
r`Q]`|W}
RrQosu
RRR|kW[R\
_RRt]soi
~r}R^Wo_
rsasir`w
rs{U{bT
rSuoxv
R[swQa
RszdcZu
R_teRci
|rtPbS`
R^t[ww\
RTXvdYdx
rT\Y]_`[
RtYTlwUn^
{rueb[usv
RuhoeV_
Ruu~UPm
rvne{g
r^v]pfwc
rvp~vgpW|
`RVQdPQ|Y
rVSumh`b
RvS{zQy
rVvouk
~rvY`}
rW`juQ
}_^rWlq
RW_mcV
r\wSpuuPue
Rwxjuvgcq
RXcnP}
~Rx}cVQt
RXsyhmhPz
RXwurnt{
RX_}{W~X\wV
rYdbjSdieRk
R[yemt`P]f
ryjQmu
RYnVZu{T
RYoblhQY
r`}yPQQ
[rYvoeo|k
|rY|W[t
RywVv_v{
R\[}Yy
rzel}Q
RZ|~gQ
RZpQSVo
rz^Q_~
RzQk_t
Rz~QUsRXx
rZRdl{
RZryfX
rZvp\j
S`\ag{X
sak]~li{
S`aqVg]
SazqWfs~
\Sbb{gU{Thw
SbfWfo
Sbr\esXQt
sb[}]~RTj|v
sbV|er
SbZnwhw
sdaZb[
sdoxfU
Sdyh`Pw
SeqdfQ
__set_app_type
setnokdW
__setusermatherr
SgfR\S
s^ghesTpPQ
sgk~mZ
S`jcnl|c
s[jlrle
sjY^jjVhps
s|khr~_}}^~
Skrua|U
sl`lTR
\slPju
S]mP_b
smsf{Vp^
S_nggn
\snRTdfsYow
soaPQp
[|so|l_
S{or~nlW~
So`^TwXs
S[`Pni^o
spPauPaq
SpPfff
spPvlwypj
SPQcXiRb
S`pQlUi
]SpTbvl
sPXu{^n
SQahfow
s}{QhyUru
sQjzqs
sqks[k]
sQoo|f
squrlx_}oZ
srbg]]l
srbXcmre
s^rfjtp
sR^gTRb_[
s{`_rQd
s_RQWozX^
}]S}rR|
sr`t_[w
S`Rt_Yaqi
sR]_XQ
SRYhyg
sSbPpPcdVwb
s[sg\~
\sSo~T~
SSP]dh
SSrz{`
s`{sRZaav
S_tbp~
stjh}Rg
sTk|^gg]R
S^tp^ehl
stptgwuV
strcmp
strlen
ST[ZmZ}Yx
^su}mf~
Suxomo
__s~uxQZjVq
suz`P^b
s]U}zu
]SVdlj
svlfiZ
S[|VP_Rdl
SW[aQ{]
sWgugc
SWjXv\_
swPvWe
[swUe`
swWTldPejs`
SW_wZ}
SW]ZXjRl
sxdm{kh
sXiabP
{sXpyki]VZq
SXQ`db`^
S|[XZxYT[
\\~Sy^
SYdn{PP
SYh|QisgR
symUU]ks
`sYPpnov
syYVszn
SZeuUv
SZhp\{^
SzisyV
`sz`lP
S}zsXreh
SZvs]`Q
_S^\Zy
SZzszR
T[`aRk
TaRrS^Up
taU_~R
TaZuPgwh
TaZylfwr
t{bobr
[tb\oSpQ
tccyme}S
tc`ioVdt}
TctpvXvf[g
}|tcXf]\
TdcV`p
tduPVfWux
td`vYqmjl
T{dX^^v
tebd]n
teg~wS
T`e|[nqTurR
Teo{vhfq[Tb
teQWTisuzRq
TesXoy
@.text
tfesW]ugi}
t[ffPg|mx
!This program cannot be run in DOS mode.
thQTpw
th_uPh
~}t[igjgaz
|ti[[n
Tir`aWrfrW
tiwbhd]
TixwYr
Tj{`{e
TjfsjzX
_{T`jYld
}TkaZp
TkYnXfPs
|TlrlpqR
tlUgQh
tmfl]Tmq_gs
\tncP`
Tnix}r~
tniYwh
tnjPWi
}TnP}RP
Tnw|i`
\toc`qequ_T
to~{Ug
ToXzye{`
t[PeSs
TP]nktZP
TPnYl{
tPpjaU
tPP{slVdda
TP{q|x
tpS`Zq
TPT|cW}u
t`PZPj
t}qjtRga
TQnwVU`
Tqy~l_`
tq]{Yy^
tRSPy^
tRyQTP
tR^yun]f
TsjYb|[{
`tskw~
TSsl^TcX
}T\st|
~TsWtVYQ
tsxQxWW~
Ttccsa
tTi_bP
Tuc_p^
TUSd}`pq
TuxPepktSd^
TVat]Zu
T{VjRZh
tvpa~h
TVyU~t
]t{w`_
~t`wc]
]TwQ{w
tWVeh[k
Tx]_bT}
tXopwl^n
_T_X\u
tyivyt
            type="win32"
    type="win32"/>
tyVszmZ
tYvWX}
T\Zlkq
Uadruc
UaoqhWy
Ubh\]n
ubny}Rt
ubRbb{w
"U>C%G
^ucmey
}U{cUZ
Uebvgu
UeY_W}
ufiknTq
ufvxmw_
U`|fxiyai~
ugaSsR`q
\Ugkws
uh]dxm
[U_hpj
Uhu^h_
uhUweY
UhXYgt
uhzmzVXX
uh{znx
_uiq_me
ukiqdg
ukiy`{j
UlQfr{ir^[
ulWvg|}|P
U~m}yS
\unQ`jt
Uogglv
UPc^iVdng`
Up\Pdk}tY
Upq}i\
UpQwazR
UpSRr[\f
uPvt[\
|Up\WSo
UPX|S|u
uP~Yk}
u\PZ]h
\U{[PZh
U~Qh^jW
uQntjoogk
`\uQQPS~
~UQRmrbdT
}UqrT]y
UQ}WZyi~b
uqYXeqo`mr
URdUf_
uRjh{k
}uR[}S\Xa
uRYYi]iYqW[
USER32.dll
Us`gUrZj
u`sj`a
Us|pmS
uSpx{v_
US]q~un[h
~usRik
uSsd`}
utbxjvS
UtnrjRd
UTos[Tmfo
UTPzn~a}
UTSpwQ
_U~{tvdpxP_
uuaums}rz
UUbY|PS
^Uuee_Sz
UUevWQr
UUkfSh|Q
U[|upUes|
uuqka~Wl
~uU\tr|pVx
Uu}{Us
uUxka]t
UvSvkePtu
uvTrvV`V
|]UWae
UW~geq
UWhjpZb~t
UwYZ~h
uwzmZekTar
uxgShe{
UxptYj{k
uxRzYR
UXThksYyc
{UXXcX
uxYQzVj
uYmRuVxxPj}
uyq{Yj
u~YsSRf
~UYt|W
uyUW^x]xg
u^Y{z]bX
uzflY^
UZ_l|PS
u~Zq}jvn
|u{zRd
Uz^{WTfm^
UZ[y_u
{{Vajk
Vasz[p
{va|u_
\vcUtkY
}]`~v^czru}
vdizy|nXm}t
V^e]o]z
    version="2.7.0.0"
            version="6.0.0.0"
ve`v_Ux
v{eyUrh
vfkme^\v
VfQj_~_f
vfwUWhov
Vgon\bu
vhahod
v_hlzo
Vh~S{{b
viPWyfT{
virhdUl
VivY}Yd
`Vjktm]T
VjSmcqQhY}
vkbpkx
vk^gbd
V_kV_V
vky]eZ
V}|lbQ
{vl\c~Y
VltZgVnYm
vlUlXha
~VlYq\
Vmtl]gr
v^mw[wb
vmxRqi
vnTq~tk
VnvvRSTo
V`nWo{^~
V]o|Qd[
voxW~yv[PSV
`vpbwlx
v[[{pQV
v{p|{T
VQdjks
|vqeeq~ToP
vQ[g}vc
vQi]hs`r~q
^Vq]nh
vq~UzUbWt
vqYP\P\i
vrgTdq
VRkv~l
Vrp{`{~
V_[Rq[ea
v|rrZWvS
v{r~Zdl}s^
vRzherYQ[]g
Vsgjw}oP
VsVsyoig
VsxQttb
\vs}y|ab_od
v\`SZnuVnZ
VtjyRn]ymaU
`]vtkv
{v|]]tn^~}
VT|pVkX
^VtVPRkpg
}~vTw^
vtXgiZXa\
vtYeoc
vubylZcv
_vUbyqT|i
\vUc|j
vUfhY}f
v|U{gg}i
vuhm|\T{
vUrpxf`
vUWivX
vU\XSk
VUzinj
vUZQ|Pe
^VuZ\raq
v[vfS~[f
vVhch}\
vv\]i}
vv}|kwT
VVlfjj
vvUah~^
`}_vvy
`VWee|U
vwi]jR
Vw][uqk
VwVX\Z
vXdPk~\_
`Vx^`p`l
Vx{RVe
`VXrWh
v`^x_t[Zo
Vx}^usn
VXvwxilYU
vYaocng
VYeowvV
vy~SP]Riw
VY|Tff]f
vyZx{y^zW
vzn}PY
v]zUPRTP{
vZUWfv
^Wapfg
waPzQdPio
WaTsXun
W|bd`S
w{bgw{
wbq]Vv]ln
wbycw~
wcxVXWVYr^
}Wdew`
wduq~rw
wd[^Uuk
Wd{y}Y
w\dZna
We\vQZv
wfcukx
Wf^|]oh_`]V
w\fXi^
|}wg~e
Wg~tqnw
WgXbU~j
w[gyz^
Wh|dTS
whfjTXU
WhtXaQ
Wh~WZ}
wjayspm^Ri
WjUh^yl
WkavZ}zcV
WkljPS[`
wk|\qg
Wkys`s{jp
{W^l}gw
Wl}_}Ytru
^~wma^
wm]uUV
WmZoup
w{na]_kq
wnv^Wa
~w{nZq
woa`vX
woPbgf
WosbPtYl
WoUzh]
wP__jX
Wp`\Sz
WpTcyuY
WPTdduf{
wpt[]gdV
wPvt`pn
Wp{{Wn
wpY]nkZ
w^`Py{RSz\p
wpzgeXn
WqcZ`Piit
wQ]qPcpb
W}Qsf{
{|wqvn
WQxTtyzZfTm
WRmXZkjab__
wRnWsRP\
]WrqjbywYPZ
\wRRTR
Wrrw|kcl
W]rsYrv
wrTagnQS[qz
{wR`tsWdcib
}wr`Y\
Wsc|mZ`R
WSm^uTSs
wS^Pw_vV
w}\`Sxub
Wtbgmp}f
^wtevU
WTh[VV
wTucUX
{wt{~Yy
W_udcrV
wuffXm
Wurhoe
WusQpR
WUX`iUja
wVRlTi
WvxceT{y
wVY`ttnPcg
wWepQ}u
[WWh_raifcS
WW}pht
~W~WVnRyyw
`wXahfU]h
w[xdTk
wXm`r`
wxqthf
wX]TwP
w]XYfym
WYdayvs
~W~yjm
wYR`Q^
}w|y{y^
wZd^ioS
wz][|fh
^wznfYyZ]R
Wzv{`v
wZvzknuc
wzxegj
`wZYd`l
xapPYSg[m
xa~rndxu
XataRpP_
x\a^tQ
xaujar
Xbbc~]Ss[e\
xbUdT_
xc}bf]e
xcbWivi_ldV
Xcof~i`q
_XcptFilter
xdpVsVfYxk
xdrZU~^iWv
`\Xd}Tu
X]d`ubu
xdU[k{jP
XehTxi
]~Xe_l
xex]{ahY
Xf{Sjblce
XfTXd^c
^X_fWw
xfXuvUV
`xg~jow
xh[WgvZy\
xhZyxc
xi~d_{d_gT
XimP}Y
XiRhey
XiV]RR[`\WU
XjgkZl]fub~
{xjoWU
XjvopS
xkjVmrPu
XkRz{|X
X[kttTPhc
`Xkvrg
Xkv\Vr
XkwTwr|U
XlyP|l^
Xmc`~i
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
_Xmqpsd
XmqVjP
}XmWnwcjf{r
`{|Xno
XosYVm
{x{oUo
XPbgprV
XP|PZSrn
XPryZmyd
xQauoi
XqdYt_{Ydvg
Xqiwsa
XQxfhj
Xq_zzvitr
~xrbU_X
XRfopv
{xRkw~m
XRR[Rv
[xr|T_zU_
XR\_Urgh
XrVpcc{_U`z
}XrvQe]hkax
x{^RWd|
xR[_xW
X]RZh{
XrZRoS
xSfTTe
XskU[Y
XSPqyj
xtfupYg
{Xtjk]
x|_Tl_
xT~PR\W]xnb
XTq_Y|
X{tXrqpl^
xT|\`YZq
XtZ{kwSf
}XUpfwl
xuP^Qk
x}upR[
X\^Upt~
XuUTh[Twy_
xuY`Zy
[\Xv]dh|
`|`xV]i
X]Vlg|a
xVPe\Vlc
]xvUzb
x{VV^wX
XVwb{W
X^V[yZo
xWfRmThQm
X}Wg`PYv
xWkuvu]
~XwlSTy
^xwzsx
xxdkp^s
xXfw|Q
XX}gcVb
xXP]rlrccU
xXUVTjdi
xXYse`i
[`xyb_aTkvU
`~XYeWT
~XYiqon
x~Yj|deRr
{XylauRh
xyP\y{
xyrbjT`UT\
X\}YRqno
xYRrpi
^XYto\Psb~_
xywne]_i{
|Xywsc
Xyxl`XiV}P_
XyytycZSz
xZWjnb
XzxP[h
xzxznfSZ
X{ZYX[k{w
Yaag]hVg
yasejW
Y_aTWuR~
~^Y{^b
ybjlSW
Ybwzjhw
yc{}|_
ycmY}t]r
]ycTV[\
\ycuWvq
Y}c}X|
y]cxmY
y\da{X
ydc[jR{
ydWzkli
Yd^XlnpyVQU
}yekhscgVQe
^Yem]o
yeTvSXl~v
Yfkzt}p
Ygn]uu
`yg\Pmh]
`Y`gX}
YhiZxk
|~Yh\PYw
yhrnajh
YhVkdpXf
~Y}hwuVpx
YhZnntj||
YhzQo[zt
yi_cR]X~Pg
`y~^iP{a
{YiSarRq
~y_[jbUmX
Yjw~f[Yot
yjXYwV
ykdYYwxm
y^klri_
ykrqhm
\Y^kv[
y]kZdYvXY
\yl|uyuU
YlwpXd
ymhfmhk[Vc~
ymhpg~q
Y[[mlkgw~TP
Ym_]Rl
ymR_mvSSziU
ymw}V[fk
^y{[n`}
~YnlPbS
ynq]nnu
YnZYvv
yogU`x
yohdho
yo_i}Z]d
yo[qrW
Yoschs
Y~}oTtk
Y\oyhd]znn\
y`PQ}{iVi
yprRxxo~
ypS[SV
ypusQp_
yPWkqh
yQgPZcWU
YQhYjqoYS
YQng}{
YqoiYQ
yq[osqa
YQqWZR
`yQrro
~yQR{uu
Y|QTef_fu
YqToTji
~yqUdS
yQVm\p
YqzmllP
YqztWscQdjX
YRhaVgZ[
YrjUy}
yrRicdl
~YR_{t
Yr_V\r
Y[}\se
y\ShT}^RV
YslYxW
y}soaya
Y^Soyrc
YSqaql\]P~Y
ySupPj
|Y\`SxfeSf
yT{|^hP]
yTPes|b
Yt`sqPht
yTyT{r^Wd
yUUjcxn
yUz[d{
yuZnXXy\a
yVf}ayscd
\y\V{j
YV|kPa^uQ{s
]Yvkq`{ccZd
yV|kTi
yvqfQZ
Yv[Rpdr
Y[`]Wk
}yw]mkP\
yw~SfaWtZ}
ywSR_PX
Y_W]Tku
y|xdzmXZ
yx}htuY
y}XmpU
yX[\_s
yXus}a
yy{{l[lg]Us
Yyp[Tw
YY`ScVX
YysX[l
zadglXc
za[l}m
zaofaWnw
]zaTdZ
Zbb^rf
Z]{b|[q
zcfh]`
zdeTccZ`}
ZdP]mUv
ZdpXYvQ
zd_zle}YWQ
zeh`tU
zfj|~S
~Z]fYW
z~fzaXjs
zfZvu`
Z`g_QsYV
zgWo{k{
Z^hfUQ
[Zh{Sg
z}hyht
zhyVU`c
}zia_pXSUy
Ziie[~~S
ZiSh[`g
ziTmhlZY
Zivv}T
zi`ZhRjZSZc
zkcYTr
Zkquw^
zk~WQtTn
][zkxb
ZldXbWzT
^Zlkut
ZlPfrpd
Zlsbb_
ZlU}]m{[
]zmRo`s~k
zmT[`kyr
ZnmwPUWrYt
znnQio
zohjoa
ZokWeQgP
ZoyRej
^Z|P]e~Wu
`zpstg|n[
ZpztRW
ZQaQR{
z]Qh\_^W
\|zQji
}ZQPgoRh
ZQ[wv{lzpmR
ZrntPg
zRw[qZ
ZS^`^b
`zSgfY
ZSjc~i
zsncuoc
z}S_owq{
z^`SZxn
ztbjPjtp~
zTlng~[^
zTPkTPZ]
ztqc`~uf
ZUPYQyps
z_U`Uw
Z~uWcd
zUW]nm{~u
}}z[v|
zvbSQZk
zVgXiTav
\Zvgyeo
z|VhXPQm[
zv[jtfWQ
ZvlPQ``e]
zVpeUUduU
Z\vTich[g
Zvu_|qoR
zWb\Tu
zWe^tk
Zw~PteU
z}[|WS
Zw[WpT]
_zXkVk
ZX\P\nq{Pq^
zXvxjS}
_z|{]^y
ZYkdkj
|Zy{l]V
zYuU]hnc
ZYY~R\
`_]ZZ\
Z`zduPR
zziT|WT
ZzjudUy
ZzXx`i