MZ@ !L!This program cannot be run in DOS mode. $qvvvyvv)v+vwOvI+vv,vRichvPELS@  @`d.textbss.textj `.rdata@@.data8  `@.idataS` @錑!,la鍆8s@^mTO<5HW>,n3đMuĐ#Bqi520i;G +^ Sn0I{& Q)G%("sQY{=:5u"鑄T鲿齾xP> T`VC  C}XVC )鎏|EЃ顿%餏JlsDkT9+a閧ѥ$"PXWoJKR[&m$OU!$  酃;J  @6>S鮏߂<3oZQPKt-1Z N tD0`} '颧$h!A.DQ鿄骛E黾鶾j齌"Y4vtM SH Ü龄yA@5KKQK/>cO=?: 6|%7B% 4M 7n%/a,5$m$-3)SߊE`鷋w'N餋?hV5鞋?:U<`-+ƿAL""UR(by L<tkB/mWhsT*0VYT46â>SBEO9釋" cNy/T :-E逕雂ԉ!d9鼊=O齊j鵞6H<駔M+KCJ鞼*闊d[>`q>)C^陟DY 0kF#MSni3zUO6+m̸TRX$^f_ug@+W&~cO%R]Xc'KzjeDw$v g¢7#>ɇPkX1:  =(CjX鐺=qAd")8nCP锇ju1pNF 01ImKӗ龔4o Hc^Hs.}<g"{ H#&&U46SVWƅƅEEEƅ?ƅƅƅƅƅƅƅƅƅƅƅƅDžƅ@3fƅtnƅubƅvlƅwoƅxoƅykƅzuƅ{pƅ|.ƅ}tƅ~mƅpƅDžDžDžDžDžDžDDDD}iDDžDDDD}DƄbhEhEHPhhF;u@hF;PhEMhE@4hF;vjcEuhEjEPDž\\\E\t5E\QstE\.t E묃}u=EP[t hEhEP^hlEj;EPt hEhEP!hlE-EPhTEh4EE PhEEPhEE~EPhE hE} ~ hE} u hlEhhEDžDž%0DžDDD? s m?? uDuDD: ?to?tc? tW?tL?PhdEEu~?uyh`E_h\ERh`EE~~i{n+Z+,h`E,,,,;ii,,L1 h\E;h`E.i,DPS?Z,,,,;th`EDž,,,i,t΋,ƅ?? ??KtL?Mt@?Ht4?Pt(?St?Ot?G?Ku8+~h`Eƅ?Y?Mu^~Ii+PhdEt~ƅ??Sr+`+,,,,,,,;}kii,,L1 i,DP?x,,,9,th`E,Dž,,,i,t΋,,uEƅ?T?Ouwu ƅ?`+~h`EzҋiQhXEHDžƅ??GuLu ƅ?5+~h`Eƅ?y DžPPPiPt΃P~y}us~'~h\EaPPPt)h`E)h\Eh`E?HuFit~ Dž~?PuryXDžPPPPiu׃P|P DžiQhXEEDžitDžƅ?`?Hu'iu ƅ?-?HuiVDžPPPiPt΃P~}~'~h\EPPPt)h`Eh\Eh`EDžit!iQhXESDžitE?PDžPPPiPt΃P~}~'~h\EPPPt)h`E[h\ENh`EADžDžPPPPiu׃P|P Džit!iQhXEDžitEƅ?? E?5?%??H?PDiDDž8888}(8iu88uFDž8888}i8Ƌi+?D? u$D~DžDžEnDž8888}8ƄDž8888}8ƄDž888i8tm8}ai8P8 i88 chPEPIthHEP1u1hEzhEmjjjjjh EPtLhEPt4hEPthEPhЍEhEhHEhEhEhEh\EhEhE}hEphEchEVhhEIhE<h E/h؈E"hEh|EhLEhEhEhEhxEhHEhEhEhEhtEhDEyh0Elh(E_Gh EPtHhEPt0hEPthEPuh(EhEPuthEP]EPhEh4EE PhEEPhEnE~EPhET hEE} ~ hE/} uhlE hE }tEPhEh(ESEyTi YJRlE\TLR<Y,=u uh(Eh(Etƅƅh$EPPth EP8uƅDžlu h}B[uh(EOh(EB1u h}B  Pu0Ou$RuTu =t E==t2u uhhEh(Er<=u0u uhhEAh(E4=sDžPPPP}PƄDžPPPP P1P2P3P4P5t{P6thP7tUP8tBP9t/P0thhEh(EPP ~=nDžPPPP}PƄDžPPPP P1P2P3P4P5t{P6thP7tUP8tBP9t/P0thhEah(ETPP j PQ hh| h~hhEh(EfhfE w Su<Pu0Ou$RuTu =t0S P==t2u uh؃Eh(E<=u0u uh؃Eh(E=sDžPPPP}PƄDžPPPP P1P2P3P4P5t{P6thP7tUP8tBP9t/P0th؃Eh(EvPP ~=nDžPPPP}PƄDžPPPP P1P2P3P4P5t{P6thP7tUP8tBP9t/P0th؃Eh(EPP j PQe hh| h~h؃Eh(EfhfEPu`RuTOuHTu<Ou0Cu$OuLu =t P==tHu!tt uhXEh(ER=uFu!tt uhXE?h(E2=DžPPPP}PƄDžPPPPtPP hPEP7tLhLEPt4hDEPthXEPh(ECPjMQ=DžPPPP}PƄDžPPPPtPP hPEP/tLhLEPt4hDEPthXEHh(E;PjMQSuOLuCu8} uEhEE hEjNuLRu@u5} uE ĥE{E hEeCN=Dž8888d}E8Dž8DžPPPPt2PZ})E8P 88뭃}tEPh@E~.iQhE[h(ENhhEA) hEPtHhEPt0hEPthEPu#EPhTEh(E Nu;Ou/Du#Eu u u N Dž}ƄDžƅDžODž   tm   u,u hsBgƅr Dž   tm   u,u hsBƅru hsB~&hE{ƅ?h(EgEDžt9Qt.t E릃}uePu(PhMQEPhTE hEh(EPt hE_EPhTENrEPQu+EPQhlE EPhTE%Ph@EEPhTEh(Eh$EPZu9hEh܀EhEhhE|dQu;Uu/Eu#RuYu tQu6u+E PMQUREPMQfU RfEPQuGUu;Eu/Ru#Yu u u/Q  Dž}Ƅ DžDž    QƅDž  u,u hsBsƅS DžƅDžDž   tw Q  u,u hsBƅhu hsBn~hEbƅ?hEPutE PMQURhLEEPjfMQE PMQURhLEEPjnfMQE PMQURhLEEPhfMQjMhEPau)E PMQURhLEEPjfMQ) hEP u)E PMQURhLEEPjnfMQhEP߿u,E PMQURhLEEPhfMQhEP蛿thEP胿uSE PMQURhLEEPhfMQHE PMQURhPEEPhfMQ!hxEPuSE PMQURhLEEPhfMQݿE PMQURhPEEPhfMQ趿htEP譾uME PMQURhPEEPj5fMQuE PMQURhLEEPj5fMQQ4hpEPHu)E PMQURhLEEPjfMQhlEPuSE PMQURhPEEPhfMQ̾E PMQURhLEEPhfMQ襾hdEP蜽th\EP脽u,E PMQURhPEEPhfMQI,hTEP@u,E PMQURhPEEPhfMQhLEPu,E PMQURhPEEPhfMQhHEP踼uPE PMQURhLEEPhfMQ}E PMQURhPEEPhfMQV }u$hE[}thEEPPFPEPMQR 4EjlgF;)EPhEȆdPdPXXPPhE臆}t6EPhEMQ< XPPhEMQ 3UP~@EPQ踀(EPQ蔁( EPpQREP\E}c}dPdPXXPPhxEqhtEdhEWhEJ}tTXP軁PhxEMQ} htEEP}hEEP}hEEP}E}dPdPXXP2PhxE螄}t!XPPhxEMQG} }uEPQUR膀 "EPMQRPMQzP|@EE}uhDEEEDžLLLE 3ҹ9LjlgF;EPhE萃dP迁dP}XXPPhEO}t6EPhEMQ| XPPhEMQ{ 3 heF;@3RPVB|XZ_^[Ĩ;]VB@.WB$WBp<WBdWBltimeport_totalsport_infoservice_infoUPSVWTEjjeF;~PjEP0q\Ek4M\T$hEr} thEE PktRPgBdlXZ_^[h;p]%gB1gBtableSizeUSVW@p0E]EEEEEEDžtDžhDž\DžPDžDDž8Dž,Dž DžDžE EȃEȋEk4M|t2Ek4MD]AuEk4MD]ԋEE뵃}uQhEp} t%hEE PQijjjE PmjjjE PmjcphĞEGphE:pEPhE)phXEp} tHhĞEE PhhEE PhEPhEM Qh hXEE Ph0E] E E]E E]AE EȃEȋE;EcEk4MDEDAEk4M<Ek4MT REk4MTRhHE)o } t-Ek4MT REk4MTRhHEE PgEk4MT,@@@@ @$sBhHEn} thHEE PfgEE}h8E{n} th8EE P4gEEKh(EIn} th(EE PgEEhEn} thEE PfEEhEm} thEE PfEEhEm} thEE Plftt}hE{m} thEE P4fhhEhԔECm} thԔEE Pe\\ hȔE m} thȔEE PePPhEl} thEE PeDDhEl} thEE PTe88hhEfl} thEE Pe,,3hE1l} thEE Pd  Ek4MTREk4MTRhEk } t-Ek4MTREk4MTRhEE PdzEk4M<ukEk4MT REk4MTRh,Efk } t-Ek4MT REk4MTRh,EE PdWPQh$Ej } tPQh$EU Rc}~PE Eڵ]E$EPhEj} tE$EPhEM QTc}~PE Eڵ]E$EPhERj} tE$EPhEM Qb}~PE Eڵ]E$EPhpEi} tE$EPhpEM Qb}~PE Eڵ]E$EPh4Ei} tE$EPh4EM QRb}~PE Eڵ]E$EPhEPi} tE$EPhEM Qat~Yۅt Eڵ]E$tPhEh} t!E$tPhEM Qah~Yۅh Eڵ]E$hPhEh} t!E$hPhEM Q8a\~Yۅ\ Eڵ]E$\PhPE-h} t!E$\PhPEM Q`P~YۅP Eڵ]E$PPhEg} t!E$PPhEM Qt`D~YۅD Eڵ]E$DPhEig} t!E$DPhEM Q`8~Yۅ8 Eڵ]E$8PhEg} t!E$8PhEM Q_,~Yۅ, Eڵ]E$,PhtEf} t!E$,PhtEM QN_ ~Yۅ Eڵ]E$ PhBstrPIDmodNamePBBBB0BhBB؂BBHBBBUDSVWQEEEEEȬ}tEPeF;o?EPjeF;Z?E}uGhE@E} tjjjE Pe>jjjE PQ>jcIAEȉEjEPMQ=EEEȃ}zZEPMQeF;>EME EEEk4M|tE EEE;EEMTUԋEPDhF;Y>EEPjMk4UD P7EMfTRHhF;">EEk4MUTEk4MEE`$hE?} thEE PS8ERPIB89XZ_^[D;=]QB]BtableSizeUSVW@0hEy>hEl>h`E_>hER>h@EE>hE8>hȯE+>hE>hPE>hE>hE=hE=h M Biu) M Bdu M Bt@hE M Rt"hE M Rxt u?hDE`PQRXP3E Q  U <u?hhEu`PQRXPE Q M Rtt t}?hhE`PQRXPgE Q*DžTTT M T tՋ M R| T~?hhET`PQRXPE QxDž M BpuS M Bou> M Bru) M Btu M Bt@h`E M Rt"hXE M Rt u?hDEL`PQRXPE Qp  U <u?h E`PQRXPPE Q M R }?h E`PQRXPE QDžTTT M T tՋ M RW |  T~?hE`PQRXP/E QDž"DžDžE Qt u?hEO`PQRXPE Qs2`PQRXP|E Q?E Q/VE Qt jlgF;t惽t/u&XP|QhRPx6 t-u$XP|QhR P`PQRXPDž,E|3,u?hE`PQRXPE Q}~?hDEs`PQRXPE QhE4XP|QJ XtjPjXQjPjXQdDž8E|8ku;PQRpPQf\RfPPA\t \u2`PQRXPE Qu?hE`PQRXPuE Q8um`uPhEuBPtPPhTEXQ\ PhEXQA `u*Ph$EOu hE9u_PtPPhTEXQ Ph$EXQ uhEXP ||f\Dž}ƄՃ<lPhhF;uShF;qPhE4hF;TDžDE|@ DhؐEf\PLhF;QPhF; dduh̐EhP{dQhR_`PQ0RPQRPQXRPf\QfPR0ƅ#4hF;C 00<|PhhF; uShF; PhE4hF; DžPE| P"h`Ef\PLhF; QPhF; dduh̐EhPdQhR`PQR0PQRPQRXPQRf\PfPQjq<ƅ#4hF; 00<fPhhF; uShF;l PhE 4hF;O Dž\E|;\hؐEf\PLhF; QPhF; dduh̐EhPvdQhRZ`PQ0RPQRPQXRPf\QfPR0ƅ#00h`Ef\PLhF; QPhF; dduh̐EhPdQhRp`PQR0PQRPQRXPQRf\PfPQj<ƅ#4hF;D 00\=uf\ff\\H;Dž}ƄՃ<lPhhF;uShF;oPhE 4hF;RDžhE|>h hؐEf\PLhF; QPhF;dduh̐EhPydQhR]`PQ0RPQRPQXRPf\QfPR0ƅ#4hF;A00<|PhhF; uShF;PhE4hF;DžtE|t h`Ef\PLhF;QPhF;dduh̐EhPdQhR`PQR0PQRPQRXPQRf\PfPQjo<ƅ#4hF;00<fPhhF;~uShF;jPhE4hF;MDžE|9 hؐEf\PLhF;QPhF;dduh̐EhPtdQhRX`PQ0RPQRPQXRPf\QfPR0ƅ#00h`Ef\PLhF;QPhF; dduh̐EhPdQhRn`PQR0PQRPQRXPQRf\PfPQj<ƅ#4hF;B00\=uDžxDžlDžt$,ull뻋llDžDžDDDD;lgDžDž}Ƅ؋,t? u럋ƄP }?PhE-`PQRXPjcPHxx| x~cPh@EuPh@EXQp `PQRXPjcfxf\Dž}ƄՃ<lPhhF;MuShF;9PhE4hF;DžE|chؐEf\PLhF;QPhF;dduh̐EhPCdQhR'`PQ0RPQRPQXRPf\QfPR0ƅ#4hF; 00<|PhhF;uShF;PhEm4hF;DžE|h`Ef\PLhF;^QPhF;Mdduh̐EhPdQhR`PQR0PQRPQRXPQRf\PfPQj9<ƅ#4hF;00<WPhhF;HuShF;4PhE4hF;DžE|^hؐEf\PLhF;QPhF;dduh̐EhP>dQhR"`PQ0RPQRPQXRPf\QfPR0ƅ#00h`Ef\PLhF;QPhF;dduh̐EhPTdQhR8`PQR0PQRPQRXPQRf\PfPQj<ƅ#00x4hF;u#`PQXR #u hBgE|RPBXZMd _^[ ;g]BB BBBBBB BBpBdBdBp{BsBkB`B|ZBPortstchBuffer2cchBuffwsaDataltimetmp_com_namecom_nameprotocolservice_namevalid_namelogfilehi_halflow_halfport_tempprt_orderport_rangeserver_nameresult.B>B8BޮB+BeBBBBͧBզByB׫BB     USVWQ43YMEE@E@E@ E_^[]USVWQ43YME8tEQE_^[;]USVWQ43YME@ _^[]USVWQ43YMEx}EHUJEMP;Q|31EHUUB EH UJ _^[]U0SVWQLYMEEEE8t3\}t Eu3EEEE EEEtE,u EE׋EPE}u3EEEEEEEtE,t EEE+E~EP3E+EPMQj UREMTREMREPMuEP3>EEEEE,u EE7EMHEMRPBXZ_^[0;E]B BbufUSVWQ(6YMj-EPE}uGEPsM E 8~ E 8~h0E3EM EEP&M E 8~ E 8~hE3ZEPME8~ E8~h̿Et3"E M;~hEW3_^[;] USVW43} w }v EWEPMQU REPEE_^[;]USVW43E} u EWb} t@}t:Et0EMEEMME E EE뺃} uEEEzEE_^[]USVW8ƅ?EȬ EfDžfDž }$<EPhF;gƅ?D?u hCDuQhE4hF;}u(hdEEPE4PMQUR Ejc)jj,P ?u hCr?u hC\DH QDB Q0R ?u hC DfHf,fE PLhF;Jf.EP hF;+E},}(u&jjEP$hF;ƅ?Dƅ?DžD?u hC|D}4u}(u h$E`}u}(uh$EEPjj,P jEP0Q fDž,fE PLhF;Cf.jj,PT ?u hC?u hCDH QDB Q0RJ ?u hCmDfHf,fE PLhF;f.Ljj,P jEP0Q fDž,fE PLhF;If.0123j tPQZ j hPQB j \PQ* j PPQ E EE}} EƄ䍅tPjQh EjPhPjQh EjP\PjQyh EjPfPPjQQ}$uD},}>}4u8}4uPhE[}uPhEMQ }$},?u hC Dth}4u,?u hCDQhE}u0?u hCDQhEURr jjj(hF;E}hF;PhpEchF;P4hF;}u8hF;lPhHEEP E4PMQUR" Ejc{jjPY fDžDžfEPLhF;fjPMQ,hF;hF;E}@'u6EPhEd}u}tEPh EMQ 2EPhE/}u}tEPhEMQ E4PMQUREP{jcsj,PMQ0hF;jhF;=M'uY}4uE PM QhE }uE PM QhEURHEPhF;hF;=L'u\}4uE PM QhE) }uE PM QhEUREPhF;;E^hF;Ph\EhF;P!4hF;}u8hF;Ph\EEPN E4PMQUR Ejc}uE PM Qh,EUR}4pE PM Qh,E h$EE PtE =t E = u+E4PMQjUREPh MQfU Rv EhEE P_t E =u,}0u&E4PMQjUREPfM QUREhEE PtihEE PtThEE Pt?hEE Pt*E t!E ntE tE =E EE}} EƄjEPhhMQ8hF;jhPMQhE}uhEEPEPhF;3?hF;PhEhF;P4hF;}u8hF;PhEEP/ E4PMQURl Ejch|E4}uh|EEPE EEEt>EQhdE}uEQhdEUR hxE}uhxEEPjhEE P/t E E EE}} EƄhdEhP@ jhPMQ@hF;[EE EE}} EƄjhPMQEQhdE}uEQhdEUR4 E =jPhhMQ8hF;rEPhF;_E4PM QUREPM QURjEP̋,0A4Q8A fMQ14jPhhMQ8hF;EPhF;3RP>CCXZ_^[;] FCCCCCtChC\CPC,CCCstLingersockAddrserverch_ip4ch_ip3ch_ip2ch_ip1ip_addrBuffertimeoutaddrhpU"&SVW<ƅ E EԃEԁ}Ԕ} EƄ }8uE4PhtE}$uE4PhtEM,Q jjj(hF;1E}hF;PhLEhF;P}$u8hF;PhLEE,PS E8PM0QU,R E4hF;jcjjEP fEEfEPLhF;jfEjEPMQ,hF;MhF;5E}@'u6EPhE}$u},tEPh EM,Q 2EPhE}$u},tEPhEM,QL E8PM0QU$RE,PjcjE PMQ0hF;hF;qPh,EhF;TPs}$u8hF;6PhLEE,P E8PM0QU,R E4hF;jc6jPQW jjPMQ@hF;Eȃ}hEbhF;PhEEhF;{P}$uIhEE,PhF;LPhEE,P E8PM0QU,R E4hF;jcLjEPhhMQ8hF;jh PMQ}4thEE4PEE EԃEԁ}~E)E;uuE;teEE}u-hxE讷}4thxEE4PgE$h\E職}4th\EE4P:E;t>EQhdE<}4tEQhdEU4R TE;uDE;u4hE}4thEE4P裯EԃEE9E~&hE衶}4thEE4PZl},uE}4}8}@u0PhE} u0PhEMQr },}4}~u h9Cr}tb}@u)u h9CPEQhEG} u-u h9C!EQhEUR jjj(hF;DE}hF;(PhLEխhF; P*} u;hF;PhLEEPf E@PM$QUR裥 4hF;貫jcE=u*fE hEH}thEEPjjEP薦 fEEfE PLhF;EfEjEPMQ,hF;(&hF;TT@'E =t6E PhE蘬} u}tE Ph EMQF gE =u\E Ph@EWhEJ} u-}t'E Ph@EMQ hEEPcc 8TPhE} u}tTPhEMQ裤 E@PM$QU REP@jc8hEEPIu E=t!hEEP)u6EM ;u*hEf} u}thEEPjEPMQ0hF;uhF;]Ph,E hF;@P_} u;hF;"PhLEEP蛣 E@PM$QURآ 4hF;jcDžHHHH}HƄhEjPW jjPMQ@hF;uhEhF;FPhEhF;)PH} uLhEEP蔢hF;PhEEPs E@PM$QUR谡 4hF;迧jcjEPhhMQ8hF;蕧jhPMQƅ?ƅ@ƅAƅBƅCƅDƅEƅFƅGƅHƅIƅJƅKƅLƅMƅNƅOƅPƅQƅRƅSƅTƅUƅVƅWƅXƅYƅZƅ[ƅ\ƅ]ƅ^ƅ_ƅ`ƅaƅbƅcƅdƅeƅfƅgƅhƅiƅjƅkƅlƅmƅnƅoƅpƅqƅrƅsƅtƅuƅvƅwƅxƅyƅzƅ{ƅ|ƅ}ƅ~ƅEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEHEEEEEEEEEEEEEEEEEEEEEEEEJEEEEEEEEEEEEEEEEBEEEEEEE}8uE4Ph,E}$uE4Ph,EM,Q~ E8PM4QU0RE,PM(QU$RE PMQԋE MJEBMJ fURhP|?E EE}} EƄ䊅@AE EE}} EƄ䊅BCE EE}} EƄ䊅DE}u7PQR(PQRhdEk{}u;PQR(PQRh$EEPs EPM QURgF ;QyE7}uEPhEz}uEPhEMQs EPgF;y;ډUt\E EȃEȋE;Es@}uEȋMRhEuz}uEȋMRhEEP$s 6}uEQhE7z}uEQhEURr EPgF;IxEPgF;3xEPM QURgF ;xERP`C{sXZ_^[;w]`C`C8d`C(`C`C`C`Cw`Cn`Cldap_secldap_minldap_hourldap_dayldap_monthldap_yearldap_dateopaqueUSVWXjƅ_EEEEE|DžpDždDžXDžLE}uƅ_EE}uƅ_EE_u hiCqXPdQpR|PMQUR,gF;uE}t=EPhEv}uEPhEMQZo EEPXQ0gF;tE}t=EPh8EEv}uEPh8EMQn ErEPjjjjMQ4gF;?tE}t=EPhEu}uEPhEMQn E } u hEu}uhEEPZnDž@Dž(EPj(QUREP8gF;sE}ur4PMQgF;tsu@} uEP4Qh|E u }uEP4Qh|EURm@@8}#@EPgF;r} u hPEt}u} uE Ph0Eyt}u} uE PhEYt}uKhEEPm}uE Ph0EMQl }uE PhEMQl (t(P gF;.r}tEP$gF;rXtXP$gF;q}EPgF;q} u9@PhEmshxE`s}uE Ph\EHs}uE@PhTEMQk hxEEPk}uE Ph\EMQk (t(P gF;#q}tEP$gF; qXtXP$gF;p3}} uEPh4E~r}uEPh4EMQ3k (t(P gF;p}tEP$gF;ppXtXP$gF;QpETXP(Q(gF;#pE}} uEPhEq}uEPhEMQoj (t(P gF;oE}tEP$gF;oXtXP$gF;o3} uXPhE$q}uXPhEMQi }tEP$gF;2oXtXP$gF;o(t(P gF;nE'RP"iC_jXZ_^[Ĩ;n]*iCiCiCiCiCXiC4iC(~iCBindingHandleUuid_convertpszStringBindingAnnotationIfIdServerHandleInquiryContextpszProtocolSequenceUSVW|DždDžLDž@pPdt jhhpPlt E PgLE PjMQdLXXXXs XD E3xEfE<EE芅qE}u hEl}uhEEP`eEPcEt E}u\hE_lDžXXXXsXxQhElhlEl}uhhEEPdDžXXXXs"XxQhEURd hlEEPrd3@}uE Ph8EkhEzk}uhEEP3dRPknCeXZ_^[Ą;i]snC@nCx<nCpnClenumastatmy_ncbUSVW xhjPc h`EfE PLhF;:hQPhF;)huh̐EhPaQhRaE8PM4QU0RE,PM(QU$RPM QUREPMQURfE PfMQj3}uhEhE P>3rEPjheF;Du ?PhQRxEDž9hPRPr=PQ]<+tVDžt)E  tPeF;yC3RPC>XZ_^[@;VC]C֔C̔CÔCcbNeededszModNamehModsUSVW(6EE EE}WEiM ;U EiEt[EiMtGEEEiEPhEC}tEiEPhEMQ+< EiMtdEiMtLEiMRhxE C}t%EiMRhxEEP; EiMu)hPEB}thPEEPv;EiMu&h,E~B}th,EEP7;vEiMu&hEBB}thEEP::EiM u$hEB}thEEP:hxEA}thxEEP:EiMuE%EiM vE_^[;?]USVW<1E<ghE>XhE>IhhE>:h E>+hE>hE> hE>3_^[;<]ڙCCCC"C4CFCXCjCC     CCCCCUSVW@0h\E =h8E<hE<hE<hE<hE<hpE<hPE<h(E<hE<hE<hEz<hEm<hxE`<hDES<h EF<hE9<hE,<hE<hhE<hHE<h$E;hE;hE;hE;hXE;h$E;hE;hE;hE;hxE;_^[;9]USVWPlfEDž,ƅ3f!#EPhF;8E}u'hF;8Ph|Ee:jjEP3 EH QUB QUR6 EfHfMfEPLhF;T8fEEEˊEEEEEEEˉEEEEEEtj hPMQ3 j \PMQ3 j PPMQn3 j DPtQV3 Dž8888}8Ƅ؍hPjQ1h EjP4\PjQ4h EjP4PPjQ4h EjP4DPjQ4Po0,,uPjM Qs03RPFC;2XZ_^[İ;6]NCChC\CPCDCCip_addrch_ip4ch_ip3ch_ip2ch_ip1serverUSVWBj@jEP[0 E7EEfEEP-ȅtEPhE6E3RPCd0XZ_^[;4]%C@1CncbUSVWEj@jEP/ E2E EƊEEȊEEE EEE9M};EEHMEP,ȅtEPMQhE5 E3RP#C^/XZ_^[;3]+C@7Cncb%4hF%hF%hF%PhF%LhF%HhF%DhF%@hF% eЉeUЉUEËe&EE}u2hhEjEkPb!E}u3EMQUREP 1FQfFtc}t]U;UwUE܃E܋MM}v;Uu.Myt%UBuMQl#tE뭃}tjUR'EԍeċMd _^[]U}t =P-FtE%P-FP-F]U EH MUEE EE} sxMk EEH;u[UtEk EEAM tUk EU(EtMk EMUk EUyEtMQ^EEGM tUB \EM,UtEHZEUEHXEUEt U=u MQuEE]UQ=-F~hEP!EhMQEE]UQ=-F~jEPy!EjMQEE]UQ=-F~jEP)!EjMQnEE]UQ=-F~jEP EjMQEE]UQ=-F~hEP EhMQEE]UQ=-F~jEP9 EjMQ~EE]UQ=-F~jEPEjMQ.EE]UQ=-F~hEPEhMQEE]UQ=-F~hWEPFEhWMQEE]UQ=-F~hEPEhMQ8EE]UQ=-F~j EPEj MQEE]U}]UE]U=-F~hEP$EhMQfE}u}_t EEE]U=-F~hEPEhMQE}u}_t EEE]UQ=-Ft EP-Fh$&Fh #FE}tE!hAh"Fh F*3]UjjEPp ]UjjEPP ]Ujjj2 ]Ujjj ]U=ՋUޱjhRQ E}tEME]U} u}}jEPM QUR>jEPM QUR&E ]UE E}tM-UUE؉EMME3uUE3uE} vUWEMMU0EMM}wUEEMUEMEMUUEEM;Mr̋]UQ} u}} EEEPMQU REPE ]UjEPM QURE ]UQ} u} |}s EEEPMQURE PMQE]UEE}t"M-UUE؋M ىEM UUE3QPU REP EM3RQE PMQ EU } vUWEMMU0EMM} wr}wUEEMUEMEMUUEEM;Mr̋]UjEPMQU REPE]̋L$t$tNu$$~Ѓ3ƒtAt2t$tt͍AL$+ÍAL$+ÍAL$+ÍAL$+UEEEMQ @tE@ }uhEjjqhEjeűUB %t[MQEUROEHQ} E$UztjEHQUBE@ E]U}uh Ejj6hEjűMuhEjj7hEjgũ} uhEjj8hEjCűU uhEjj9hEjuLE}u8FE}td]؉d EdE[]UQSE H; 2FtUBMAUBftM A$tjU BPM QRE H QjURE HQUR E x$u MQU RjjjjjEPh#E] ck []UQEHSVp MM W|=uEMN9H};H~u E HE ދE }ȋEMUF1:;x w;vM_^[]UEFPMQEE]UQEPMQU R>FPMQEE]UjjjE PMQL]UQEPMQUREPE}u} uEMQTu3뾋]UjjjEPl]UE==FvU=F9E}t(UUEE EM;MsUEEE]UQjjjE PMQ2EE]UQjEPMQURE PMQ!EE]UE}uEPMQURE PK}t} uMQUR73==FvU=F9M-FREMTREMTRhEjjjj& u볋MQ,RhhEjjjjűMQ0Rh@Ejjjjű]UjjjE PMQ]UEPMQjU REPt]UjjjEPM QUR!]UEPMQjURE PMQ]UjjEPM QUR]UE #E t63u!hEjh h$Eju8hpph&PMQhR`PzQUREPMQUtPMQtRj }}tjEP E}M] ,D,D,DN-D-D-D-D/D'-D2-D-D-D@-DI-D5.D.D'.D.D/DB/D1Di0DG3D/DX/D%3D1D1D3D@3D0D73DS3D5D    UQE H @tU zuEU pE HU JE x|&M EMMU M U REPE}u M UM]UE M M ~ UREPMQ U:u]UQEH @tUzuEM U AE M M ~1UEMQUREP MMU:u뿋]UEU EA]UEU EAQ]UEU EfA]U,fF]UQ}|}|<} u E<1F*M tU<1FEMU <1FE]UQ}|}|c} u EH1FQMH1FU} ujeFMH1F'} ujeFUH1F EM H1FE]UQdEFEM dEFE]U}t}u} u8Md$HɋptQjeFPeF=FPjeFPeFƣ=Fu3_^[]ËfFVR=FFHTVhhƇF WPeF`3tIL8@u@PjeFPӅF23V8 8@uvh=FJQu;w+;qv Iu_^[]U=FSVWuh1F5eFP=FօhXF֋tR5eFhHFWօEt=h4FW֋؅t/h$FWօEt MQjjhFhUtWxeF3e_^[]ËMURjEPjhFQӅuًE EdfMURVEPjhFQӋURUWxeFuMT\:tDIM h1F+ο ]@OuVeFe_^[]̸UE|} l1F]3]UM|}U `-F`-F]Ã]UM=F =F]̡=FuUPRSVWh FhFu=>Fu r>F>F]UE<=FE>Fd2F d2F X2FhFGxE}tU>=>Ftj >FQ@v>Fh=FteF>F=Fk<1F>Ft ,>Fk< 1F 1Fr>Ft(=>Ft1F>F+,>Fk<1F1F1FMQjj?02FRjh=FjEPeFt}u 02FA? 02FEPjj? 42FQjh0>FjUReFt}u 42F@? 42F=>Ft>FREPwqu=>Ftj >FQthhFjURqPm>F=>FuEP >FQ#qjUR02FPBu 02FAUUE-uUUEEMQ}vi1FU+tM0|E9 UUԋE:UUEP"vk<1F1FM0|E9 UUߋE:uAUUEPu1F1FM0|E9 UU߃}t 1Fأ1FM1F=1Ft!jEP 42FQs 42FB42F]UQ=1Fu3EH; X2FuUB;d2F=>FD p>FuO~>FR|>FP z>FQx>FRjt>FP v>FQr>FREHQjj,G~>FR|>FP z>FQx>FRv>FPjj r>FQUBPjj, >FuO*>FR(>FP &>FQ$>FRj >FP ">FQ>FREHQjjI,G*>FR(>FP &>FQ$>FR">FPjj >FQUBPjj,FjjjjjjjjMQRjj,jjjjjjjj EHQjj,\2F;h2F}KEH; \2F|UB;h2F~3MQ;\2F~EH; h2F} CUB;h2F|MQ;\2F~EH; h2F~UB;\2F}3_MQkF}}3EEUiҀE+‰EMFU}3|[EEM3M}3|=UUE-3E}|MMUU EEMUQEQUBEHiɀQU+щU}t EP4FE4FE EEMUE ;H}UUEMHUEMR+EP MQEPEUBEHiU+щUE<UBEHkj]hFjj WU xEFUxEF<tMxEFEr}t;MAUB E@MUBE@E]U}fE3fEMMUU=AFu3j(AFP BFQURjEPj\u3VMuUt EEE0=-F~jEPYEjMQWEE]̋D$L$ ȋL$ u D$S؋D$d$؋D$[UWVSu } t2'8t,A<ɀ A,A<ɀ A8t[^_UE uUUBft/Myt}ujUREPM QXUz E8csmuMMy vAUBHM}t/U$RE PMQUREPMQU REPU EE-M QURE$PMQUREPM QURL ]U(EE HM}| UE;B}TM9csmUzEx t My!uUzuv=>Fu>FE >FMEjURUt:TE8csmu/Myu&Uz t Ex!uMyuTU:csmcExVMy tUz!:EPMQURE PMQ:ZEUUEEM;MU;E MU;Q~ˋEHMUB EMMUU}EHQ U܋EHQ EMMU܃U܃}~[E܋M؋UBPMQUR uÊEPM$QU REPMQUREPMQURE PMQ',MUtjEP;Z7Mu*U$RE PMQUREPMQU REP iT]U E8u=>Ft-M$QU REPMQURE PMQStUREPMQU REPWEMMUUE;EMU;|BEM;H7UB MQ|t EH UBLQtjE$PM QURjEH UJQEPMQURE PMQ ,P]UQExtMQBu MU A;Bt$M QREHQRt3OU t Mt1Et UtMt Et EEE]Ujh(Fh%AdPd%SVWeEHM>F>FEE;E}~ MU;Q}NEHUщEEMQE|t%MUQhEPMQELQQEURËeEEEfE=>F~ >F >FËU;UuINEMHMd _^[]UEMUE}csmt>FO3]UE E} tM QUREPMQ},uURE PT MQU,RwTE$QUREPMQoOU$BM AhU(REH QUREPMQURVE}t E PMQL]UjhHFh%AdPd%SVWeEEEM QUEHQURQE>FEȋ >FM̋U>FE>FEEM QUREPMQU ReSEEEPËeMQUE HMUBEE MăMċUE;B sGMkUE;D ~3MkUE;D !MkUD EMUʉE륋MQURjE PMEEEM UQEPKMȉ >FỦ>FE8csmuRMyuIUz t Ex!u1}u+}t%MQRMtKLPEPTRËEЋMd _^[]UQEMU:csmu1Exu(My t Uz!uExu3]UjhhFh%AdPd%SVWeExt#MQBtMyuU%u.MtE EMQE L MEUtXjMQRJt9jEPKt'MUBMQUPMHUtxjMQRJtYjEPiKtGMQREHQURM Exu"M9tUREQUjEPJt,MQREPMQR?PEPrL GjMQR?IjEPJtqMQRNt^Et+jUREHQPUBPMQG'UREHQPUBPMQL0GEËe+IMd _^[]UjhxFh%AdPd%SVWe}tEEHyt9EUBHQUBP&GEE ËeGMd _^[]UQE MMU z|'E HU M QM MU EBEE]U3=>F]U }u3wEM} t U Bu\M9csmu:Uzu1Ex t My!uUzu=>Fu3>F>FM9csmUzEx tMy!Uzu=>Fu3>FEM MUUE EMQB EMQB MUUEE}~YMUEHQUREP t4 >F >F}tUREPMQUR3]UEE EMMUU}E8t|MUE8csmu3Myu*Uz t Ex!uMyu >FUEHQURGEE >FU>FM >FUE >F >Fy >F]UQ}u3FEMU:csmu1Exu(My t Uz!uExu3]U EEMMUUE8MQQA} u]>F:csmuO>FxuD >Fy t>Fz!u&>FHQCtj>FRHE >FU>F]U]UjhFh%AdPd%SVWeEM UEEP{ËeEMd _^[]UjhFh%AdPd%SVWeEEPMQURE PUEMQËeEMd _^[]USQE EEUuMmDVW_^]MUuQD]Y[ UjhFh%AdPd%SVWe=>Ft&E>FEËeE>Md _^[]U=2Ft2F@]UjhFh%AdPd%SVWe=2Ft&E2FEËeE6@Md _^[]UQ?FEM ?FE]U?F]UQ?FE}tMQUu3]UQ>FPMQ<EE]UQ}v3E}wEPJ<EE}u} uEMQBu3뻋]UQ=`EFu%E;@EFwMQDE}tE5}uE=`EFt UUEPj PEFQfF]U]U} v3=`EFuEP=E}t0EM ; @EFwU REPMQ= tUU}u2} uE E E M QURjPEFPpeFE&} uE M QURjPEFPpeFEE]UE E}uM Q;.} uUR@3=`EFE} lEPy<E}M ; @EFU REPMQq< tUUjE PqBE}tUMQUE;E sMMU UEPMQUR> EP;EMQURA}u{} uE E E M QjPEFRfFE}tFEHMU;U sEEM MUREPMQd> UREP@}u3} uE M M U REPj PEFQpeFE}u =>FuEwU R>u3cVE} w'} uE E PMQjPEFRpeFE}u =>FuEE P>u3뢋]UQ}u[=`EFu@EP9E}tMQUR>}uEPj PEFQeFURjPEFPeF]UQE=`EFuW9}EjjPEFPeFu(eFxu<UUUEE}?vE?MUʉEMUBAMUQEMHUBMHUEJ;H} sWUUBMMQMMQuME MMEM TDEM܉TDcUUBMMQMMQuM E PMQM EM EM܉UE؉MM؋U؉QEMUEEPM;MUEMUUJEEEM+MMЋUUԃ}?vE?E؃1MM}?vE?UEJ;H} sZMҋEM#TDEM܉TDUUB,MMAUUBuMҋE#MfM ҋEM#EM܉UUB,MMAUUBuM ҋE#PMQUBMQPEHUBAMM؉MЋUUԃ}?vE?EԋMUEMQPEMHUEBMQEBMUA;B} sWMMQEEԊHEEԈHuME MMEM TDEM܉TDcUUBMMԊQMMԈQuMԃ E PMQMԃ EM EM܉UEЉMMЋUЉQ]UQ=4EFLEF 4EFA Eh@hURdeF LEF 4EF A4EFB4EFHLEFDŽ4EFHQC4EFHQC4EFBHCu4EFB 4EFA4EFzub=8EF~Y4EFHQjPEFReF8EFkE5|3UUE9uU0EEMEM1uEHUJ&EPPMQUR ]U2FEEPMQNh@Fjj ԋEMJfEfBAF @F @F@F@FAF@F@FM]UEfEE HfMU B%fEM QUE MUU}t}tKfE_}u'}u!E@MUfBE<fEEMfMU?fUE EM UBE MUB%u;MQE ыEPMEfMffMUE ЋMfQ]UWVu M};v;|ur)$<EǺr $PE$LE$E`EEE#ъFGFGr$<EI#ъFGr$<E#ъr$<EI3E EEEEEEEDDDDDDDDDDDDDD$<ELETE`EtEE^_ÐE^_ÐFGE^_ÍIFGFGE^_Ðt1|9u$r $ E$ EIǺr +$E$ EE E8 EF#шGr$ EIF#шGFGr$ EF#шGFGFGV$ EI E E E E E E E EDDDDDDDDD D DDDD$ E E E E EE^_ÐFGE^_ÍIFGFGE^_ÐFGFGFGE^_Uj]Ud2EU2FEjjjEPMQU REP՚EMQURRE}u EEEM蓕]Ux2FEfEMfEMfEECEEEEEEEEEEEE?EfEfEM M܋UUE%fEMfMUt E@-MA Uu:}u4}u.EfMA UBE@0MAUEf}u}t2M܁@u'hFUR覗E@EMt3}u*}u$hFURhE@EU}u*}u$hFMQ5UBE"hFEPMAEUfUE%fEMfMUEMEME+UUMfMfUfUE܉EMMfEjUREP՘ M?|fUffUEPMQUUfEfMt>UUU}.EfMA UBE@0MA}~EU?UfEE EE}}MQ}}-UځU EE}~MQ苓UUEE MM}~aUŰEEЋMMԍUR蟖EP蓖MQUR1EPwM0U EEE됋MMUEMMU5|\ EEM9MrU9uM0ًU9UsEEMffEfMEY MMU9Ur E0uߋU9Us+EfMA UBE@0MA&UE+ƒMAUBMDEM虐]UQ}u3=BFPMQU REPMQj(AFR裑E}uE]U El example: q mail TFTP - queries UDP port 69 SQL - queries TCP port 1433 & UDP port 1434 SNMP - queries UDP port 161 SMTP - queries TCP port 25 RPC - queries TCP & UDP port 135 POP3 - queries TCP port 110 MAIL - queries TCP ports 25,110,143 L2TP - queries UDP port 1701 LDAP - queries TCP & UDP port 389 ISA - queries TCP & UDP port 1745 IPSEC - queries UDP port 500 IMAP - queries TCP port 143 FTP - queries TCP port 21 DNS - queries TCP & UDP port 53 Shortcuts: query shortcut - sends queries associated with shortcut sl - toggles slow link delay for UDP queries - doubles timeout period waiting for UDP responses nr - toggles reverse name lookups - enables/disables resolving node IP address to name cn=string - set SNMP community name - default is set to public protocol=p - set protocol used for query, TCP, UDP, or BOTH - set protocol= or set p= sport=n - set source port number, 0=ephemeral - set sport= or set sp= port=n - set port number to query - set port= or set e= all - display current option values set OPTION=value Options: query or q - send query to default node node NAME - set default node to query, NAME or IP address phelp or ?p - display list of frequently used ports help or ? - display info on common commands Valid Commands: =============== ? HELP ?HELP exiting PortQry Interactive Mode... QUITEXIT%s %c > Reverse name lookup disabled slow link delay for UDP enabled source port= 0 (ephemeral) source port= %d protocol= %s end port= %d Current option values: Default Node: %s Default Node: unknown0.0.0.0127.0.0.1 exiting PortQry... Winsock initialization error: %d Type 'help' for a list of commands PortQry Interactive Mode UDP port resolved to the '%s' service udp TCP port resolved to the '%s' service service is not listed in local services file unknowntcp resolving service name using local services file...? TCP ports in an UNKNOWN state: %d = %.2f%% TCP ports in a DELETE TCB state: %d = %.2f%% TCP ports in a TIME WAIT state: %d = %.2f%% TCP ports in a LAST ACK state: %d = %.2f%% TCP ports in a CLOSING state: %d = %.2f%% TCP ports in a CLOSE WAIT state: %d = %.2f%% TCP ports in a FIN WAIT-2 state: %d = %.2f%% TCP ports in a FIN WAIT-1 state: %d = %.2f%% TCP ports in a ESTABLISHED state: %d = %.2f%% TCP ports in a SYN RECEIVED state: %d = %.2f%% TCP ports in a SYN SENT state: %d = %.2f%% TCP ports in a LISTENING state: %d = %.2f%% TCP ports in a CLOSED state: %d = %.2f%%Y@ Port Statistics TCP mappings: %d UDP mappings: %d %d UDP %i %s *:* %s:%d UNKNOWN DELETE TCB TIME WAIT LAST ACK CLOSING CLOSE WAIT FIN WAIT-2 FIN WAIT-1 ESTABLISHED SYN RECEIVED SYN SENT LISTENING CLOSED %d TCP %i %s PID Port Local IP State Remote IP:Port No active ports found on local system press escape key to stop watching port UDP mappings: 0 TCP mappings: 0 Specified port currently does not have any port mappings ============ System Date: %s System Date: %s escape key pressed: stopped watching port %d verbose output requested Watching port: %d Checking for changes every 1 second Watching port: %d Checking for changes every %d seconds **press escape to stop watching port **press escape to stop watching port and close log file PortQry Version 2.0 Watching port: %d Checking for changes every 1 second PortQry Version 2.0 Watching port: %d Checking for changes every %d seconds Port to process mapping is not supported on this system This command has been aborted press escape key to stop watching PID Specified PID currently does not have any port mappings escape key pressed: stopped watching PID %d Watching PID: %d Checking for changes every 1 second Watching PID: %d Checking for changes every %d seconds **press escape to stop watching PID **press escape to stop watching PID and close log file PortQry Version 2.0 Watching PID: %d Checking for changes every 1 second PortQry Version 2.0 Watching PID: %d Checking for changes every %d seconds TCP table not found Failed to get TCP endpoints. UDP table not found Failed to get UDP endpoints. For best results run PortQry in the context of the local administrator Note: restrictions applied to some processes may prevent PortQry from accessing more information Port and Module Information by Process Process32NextProcess32Firstkernel32.dllCreateToolhelp32SnapshotAllocateAndGetUdpExTableFromStackiphlpapi.dllAllocateAndGetTcpExTableFromStackNot enough memory available UDP %i %s *:* TCP %i %s Port Local IP State Remote IP:Port %d active ports found TCP/UDP Port Usage Port to process mappings unavailable %d UDP %i %s *:* %d UDP %i %s *:* %d:%s UDP %i %s *:* %d:%s UDP %i %s *:* %d:%s UDP %i %s *:* %d:%s UDP %i %s *:* %d:%s UDP %i %s *:* %d:%s UDP %i %s *:*%s:%d UNKNOWN DELETE TCB TIME WAIT LAST ACK CLOSING CLOSE WAIT FIN WAIT-2 FIN WAIT-1 ESTABLISHED SYN RECV'D SYN SENT LISTENING CLOSED %d:%s TCP %i %s %d:%s TCP %i %s %d:%s TCP %i %s %d:%s TCP %i %s %d:%s TCP %i %s %d:%s TCP %i %s %d:%s TCP %i %s PID:Process Port Local IP State Remote IP:Port PID:Process Port Local IP State Remote IP:Port %d mappings found TCP/UDP Port to Process Mappings portqry -wport 53 -l dnslog.txt portqry -wpid 1272 -wt 5 -l logfile.txt -y -v portqry -local -l logfile.txt -v examples: portqry -local Port to process mapping may not be available on all systems For best results run in context of local administrator -v requests verbose output -l [logfile] name of text log file to create default value is 60 seconds valid range: 1 - 1200 seconds specifies how often to check for status changes -wt [seconds] watch time option reports when PID's connection status changes -wpid [process_ID] watches specified process ID (PID) reports when port's connection status changes -wport [port_number] watches specified port -local enumerates local port usage, port to process mapping, service port usage, and lists loaded modules Local mode options explained: Local Mode: Local Mode used to get detailed data on local system's ports portqry -local | -wpid pid | -wport port [-wt seconds] [-l logfile] [-v] example: portqry -i -n server1 -e 135 -p both - run portqry.exe - then type 'help' For help with Interactive mode options: Interactive Mode: Used as an alternative to command line mode portqry -i [-options] portqry -n host2 -cn !my community name! -e 161 -p udp portqry -n host1.dev.reskit.com -r 21:445 portqry -n 10.0.0.1 -o 25,445,1024 -p both -sp 53 examples: portqry -n myserver.com -e 25 portqry -n 10.0.0.1 -e 53 -p UDP -i Hit Ctrl-c to terminate prematurely Defaults: TCP, port 80, no log file, slow link delay off Notes: PortQry runs on Windows 2000 and later systems -q 'quiet' operation runs with no output returns 0 if port is listening returns 1 if port is not listening returns 2 if port is listening or filtered -cn specifies SNMP community name for query ignored unless querying an SNMP port must be delimited with ! -nr by-passes default IP address-to-name resolution ignored unless an IP address is specified after -n -sl 'slow link delay' waits longer for UDP replies from remote systems -sp [source port] initial source port to use for query -y overwrites existing text log file without prompting -l [logfile] name of text log file to create -o [end point order] range of ports to query in an order (x,y,z) -r [end point range] range of ports to query (start:end) -e [endpoint] port number and/or port ranges seperated by commas to query. For port range, the end port should be equal or greater than the start port. Valid port should be in range 1-65535. For example: 80,53,1024-1350. -p [protocol] TCP or UDP or BOTH (default is TCP) -n [name_to_query] IP address or name of system to query Command line mode options explained: Command line mode: portqry -n name_to_query [-p protocol] [-e || -r || -o endpoint(s)] [-q] [-l logfile] [-sp source_port] [-sl] [-cn SNMP community name] Local Mode: portqry -local | -wpid pid| -wport port [-options] Interactive mode: portqry -i [-n name_to_query] [-options] Command line mode: portqry -n name_to_query [-options] PortQry version 2.0 Displays the state of TCP and UDP ports Invalid port order entered with -o option: %s Valid ports: 1-65535 Invalid port specified with -o option: %s Valid range 1-65535 Attempting to resolve IP address to a name... Querying target system called: %s Initial source port set to %d Querying target system called: %s Attempting to resolve name to IP address... Use -n option to specify remote host Processing local system's ports... Only the -l, -y, and -v options may be used with -local Options -e cannot be used with -local Invalid option combination entered Invalid port specified Valid range 0-65535 Invalid port specified Valid range 1-65535 /wport-wport Invalid PID specified Valid range 0-65535 /wpid-wpid Invalid time period specified Valid range 1-1200 second(s) /WT-WTInvalid port string: "%s". Port range specified is invalid Check the start port Valid range 1-65535 Port range specified is invalid Check end port Valid range 1-65535 Valid port range 1-65535 example: portqry -r 25:100 Format -r start:end Where start < end Port range specified is invalid Invalid port range specified. Valid range 1-65535 example: -r 10:20 Port range specified is invalid. Check the start port. Valid range: 1-65535 Invalid port range specified. Valid range 1-65535 example: -r 10:45 Port range specified is invalid. Valid range: 1-65535 example: -r 10:200 Port range specified is invalid. Valid range: 1-65535 Invalid option combination Invalid port order entered. -o option requires parameters Local computer name: %s %sCommand run: System Date: %s PortQry Version 2.0 Log File Creating log file called %s Error creating or opening file %s w Overwriting %s File will NOT be overwritten. PortQry is stopping without generating a report file. A file called %s already exists Do you want to overwrite it? (Y/N)r invalid logfile name /y-y/i-i/q/l-l Log file cannot be used in interactive mode Options -e -o -r cannot be used with -local -local/local Error: SNMP community name specified must be between ! signs example -cn !my community name! Log file option cannot be used in interactive mode Initial source port set to %d Invalid source port specified. Valid range 1-65535 Slow link delay for UDP enabled -Q-q Invalid option combination specified Note: the -v option only displays extra data in local mode -n The -q option cannot be used with the following options: -o -r -p both -local -wpid -wport both-r-o Invalid option specified Invalid host name entered: %s Invalid IP address entered: %s Invalid option combination specified PortQry version 2.0 GOLD /ver Special thanks to Stone Zhong, Lee Yan PortQry version 2.0 Gold /devEnding port shoule be greater than start port. End port should be in range 1 - 65535 Start port should be in range 1 - 65535 Tartget port should be in range 1 - 65535 user anonymous Data returned from port: error: %d Error: %d Port did not return extended data - request timed out imappop3ftpsmtpepmapldap TCP port %i (%s service): LISTENING Error opening socket: %d TCP port %i (%s service): FILTERED TCP port %i (%s service): NOT LISTENING Cannot use specified source port Winsock error %d Cannot use specified source port Port %d is already in use Specify a port that is not in use and run the command again Cannot use specified source port Port is already in use Specify a port that is not in use and run the command again Error Opening socket: error %d Error Opening socket: Error %d IP address resolved to %s querying... Name resolved to %s querying... Name resolved to %s querying... .Failed to resolve IP address to name querying... Failed to resolve name to IP address Failed to resolve name to IP address ======== End of ISA query response ======== ISA query response: No response from TCP port %i Error waiting for response: %d Error accessing port %i No extended data was returned from the port error: %d PortQry encountered an error while attempting to query the target system Error opening socket: %d Error Opening socket: Error %d Sending ISA query to TCP port %i... UDP port %i is LISTENING ==== End of SQL Server query response ==== Server's response: ms-sql-m No response from UDP port %i UDP port %i (%s service): FILTERED UDP port %i (%s service): LISTENING or FILTERED isakmp DNS query timed out UDP port %i (%s service): NOT LISTENING PortQry encountered an error while attempting to send data to the target system Cannot use specified source port Port is already in use Specify a port that is not in use and run the command again example: net stop PolicyAgent run PortQry to query ISAKMP net start PolicyAgent PortQry requires exclusive use of source port UDP 500 for this operation This port is already in use so PortQry cannot use it Remote ISAKMP services may only communicate with source port UDP 500 Temporarily stop the 'IPSEC Policy Agent' or 'IPSEC Services' on the system you are running PortQry from and run the command again ms-sql-m UDP port %i (%s service): LISTENING No response from udp port %i (%s service) l2tptftpsnmpdomainnetbios-nsPortQry Test Message Note: you are querying the local system and the source port is the same as the destination port Cannot use source port %d, this port is already in use Remote ISAKMP/IPSec services may only communicate with source port 500 Temporarily turn off the 'IPSEC Policy Agent' or 'IPSEC Services' on the system you are running PortQry from and run the command again Cannot use specified source port Port is already in use Specify a port that is not in use and run the command again UDP port 500 Using source port UDP 500 Sending SNMP query to UDP port %i... public community name for query: %s Reminder: community names are case sensitive community name for query: %s Use the 'set cn' command to specify a different name if needed By default PortQry uses the community name: public name that the SNMP service is configured to accept community name in the query must match a community In order to get a response from the SNMP service, the Sending SQL Server query to UDP port %i... Sending TFTP server query to UDP port %i... Sending L2TP query to UDP port %i... Sending DNS query to UDP port %i... Sending ISA query to UDP port %i... UDP port %i is LISTENING ======== End of LDAP query response ======== LDAP query response: (objectclass=*) Server did not respond to LDAP query Using ephemeral source port Sending LDAP query to TCP port %i... LDAP query to port %i failed Server did not respond to LDAP query Using ephemeral source port Sending LDAP query to UDP port %i... %s %s: currentdate: %s/%s/%s %s:%s:%s (unadjusted GMT) currentdate: %s/%s/%s %s:%s:%s (unadjusted GMT) currentTime %s Failed to parse Endpoint Mapper's response (%x) Failed to parse Endpoint Mapper's response (%x) RPC query failed (%x). Total endpoints found: %i ==== End of RPC Endpoint Mapper query response ==== Total endpoints found: %i RPC Endpoint Mapper did not respond TCP port %i is FILTERED UDP port %i is FILTERED RPC Endpoint Mapper did not respond UUID: %s %s Using ephemeral source port Querying Endpoint Mapper Database... Server's response: Error attempting to query the End Point Mapper (%x) Error encountered attempting to bind to the RPC server (%x) Error attempting to bind to the RPC server (%x) ncacn_ip_tcpncadg_ip_udpPortQry RPC query Adapter status query failed. UDP port: FILTERED NETBIOS name for %s not found (timeout) UDP port: LISTENING %02x Server's response: MAC address Using ephemeral source port Attempting NETBIOS adapter status query to UDP port 137... Log file successfully created in current directory Log file %s successfully created in current directory Error closing file %s. Program stopped abnormally. Output may not be complete. PortQry developed by Tim Rains ========= end of log file ========= %s (0x%08X) Loaded modules: %s (0x%08X) Could not access module information for this process Process doesn't appear to be a service System Process System Idle Process (%s) Process ID: %u ====================================================== SystemSystem Idle Service Type: shares a process with other services Service Type: runs in its own process Service Type: device driver Service Type: file system driver Display Name: %s Service Name: %s A Winsock error has been encountered. Host not found. A nonrecoverable error occurred. Nonauthoritative answer host not found or server failed. Authoritative answer host not found. WSAVERNOTSUPPORTED (10092): WinSock version requested not supported. Network subsystem not ready for network communication. WSAEPROCLIM (10067): Too many processes. No route to host. WSAEISCONN (10056): The socket is already connected. The network dropped the connection or reset. Network unreachable. The network subsystem has failed. This typically indicates a hardware issue. Address already in use. WSAEAFNOSUPPORT (10047): Address family not supported by protocol. Destination address required. WSAEINPROGRESS (10036): Operation is in progress. Bad address WSAEINTR (10004): A blocking Windows Socket 1.1 call was canceled. 3389 TCP RDP 1701 UDP L2TP 1723 TCP PPTP 1434 TCP/UDP Microsoft-SQL-Monitor 1433 TCP/UDP Microsoft-SQL-Server 500 UDP Internet Key Exchange (IPSec) 464 TCP/UDP Kerberos (v5) 445 TCP/UDP Microsoft CIFS 443 TCP HTTPS 389 TCP/UDP LDAP 162 UDP SNMP TRAP 161 UDP SNMP 143 TCP IMAP4 139 TCP NETBIOS Session Service 138 UDP NETBIOS Datagram Service 137 TCP/UDP NETBIOS Name Service 135 TCP/UDP RPC/DCOM 110 TCP POP3 88 TCP/UDP Kerberos 80 TCP HTTP 69 UDP TFTP 67 UDP DHCP Server 53 TCP/UDP DNS 25 TCP SMTP 23 TCP Telnet 21 TCP FTP-control 20 TCP FTP-data ---------------------------------------- Port TCP/UDP Service Frequently Used Ports Winsock error: %d ERROR: Netbios: NCBENUM: %d ERROR: Netbios: NCBRESET[%d]: %d  5/?GGGwHHHIIIKKKsMMMtOOOuPPPQQQvRRRSSS1!x2@y3#z4${5%|6^}7&~8*9(0)-_=+ qQwWeErRtTyYuUiI oOpP[{]} aAsSdD fF!gG"hH#jJ $kK %lL &;:''"(`~)\|zZ,xX-cC.vV/bB0nN1mM 2,<3.>4/?5*r ;T^h<U_i=V`j>Wak?Xbl@YcmAZdnB[eoC\fpD]gqG7wH8I9-K4s5M6t+O1uP2Q3vR0S.getch.c'C-CCorExitProcessmscoree.dllprintf.cformat != NULLUnknown Runtime Check Error A local variable was used before it was initialized Stack memory was corrupted A cast to a smaller data type has caused a loss of data. If this was intentional, you should mask the source of the cast with the appropriate bitmask. For example: char c = (i & 0xFF); Changing the code in this way will not affect the quality of the resulting optimized code. The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention. Run-Time Check Failure #%d - %sCCGCKC Module: Line: Invalid pointer was assigned at File: ' was corrupted.Stack around the variable 'A variable is being used without being defined.' is being used without being defined.The variable 'IsDebuggerPresentKernel32.dllfprintf.cstr != NULLfclose.c*mode != _T('\0')mode != NULL*file != _T('\0')fopen.cfile != NULLClientIgnoreCRTNormalFreeError: memory allocation: bad memory block type. Invalid allocation size: %Iu bytes. Client hook allocation failure. Client hook allocation failure at file %hs line %d. dbgheap.c_CrtCheckMemory()_pFirstBlock == pOldBlock_pLastBlock == pOldBlockfRealloc || (!fRealloc && pNewBlock == pOldBlock)pOldBlock->nLine == IGNORE_LINE && pOldBlock->lRequest == IGNORE_REQ_CrtIsValidHeapPointer(pUserData)The Block at 0x%p was allocated by aligned routines, use _aligned_realloc()Allocation too large or negative: %Iu bytes. Client hook re-allocation failure. Client hook re-allocation failure at file %hs line %d. _pFirstBlock == pHead_pLastBlock == pHeadpHead->nBlockUse == nBlockUsepHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQDAMAGE: after %hs block (#%d) at 0x%p. DAMAGE: before %hs block (#%d) at 0x%p. _BLOCK_TYPE_IS_VALID(pHead->nBlockUse)Client hook free failure. The Block at 0x%p was allocated by aligned routines, use _aligned_free()%hs located at 0x%p is %Iu bytes long. %hs allocated at file %hs(%d). DAMAGE: on top of Free block at 0x%p. DAMAGED_heapchk fails with unknown return value! _heapchk fails with _HEAPBADPTR. _heapchk fails with _HEAPBADEND. _heapchk fails with _HEAPBADNODE. _heapchk fails with _HEAPBADBEGIN. Bad memory block found at 0x%p. _CrtMemCheckPoint: NULL state pointer. _CrtMemDifference: NULL state pointer. Object dump complete. crt block at 0x%p, subtype %x, %Iu bytes long. normal block at 0x%p, %Iu bytes long. client block at 0x%p, subtype %x, %Iu bytes long. {%ld} %hs(%d) : #File Error#(%d) : Dumping objects -> Data: <%s> %s %.2X Detected memory leaks! Total allocations: %Id bytes. Largest number used: %Id bytes. %Id bytes in %Id %hs Blocks. ("offset must be within size", 0)("alignment must be a power of 2",0)Damage before 0x%p which was allocated by aligned routine The block at 0x%p was not allocated by _aligned routines, use realloc()The block at 0x%p was not allocated by _aligned routines, use free()f:\vs70builds\3077\vc\crtbld\crt\src\vsprintf.csDDisctype.c(unsigned)(c + 1) <= 256a_map.ckDqDD"D:D@D ((((( H h(((( H H("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)_flsbuf.c_file.cCONIN$CONOUT$onexit.c'D'D`(Df(D_sftbuf.cflag == 0 || flag == 1EEE50P (8PX700WP `h````ppxxxx(null)(null)output.cch != _T('\0')Assertion FailedErrorWarningdbgrpt.c%s(%d) : %s Assertion failed!Assertion failed: _CrtDbgReport: String too long or IO ErrorSecond Chance Assertion Failed: File %s, Line %d wsprintfAuser32.dllMicrosoft Visual C++ Debug LibraryDebug %s! Program: %s%s%s%s%s%s%s%s%s%s%s (Press Retry to debug the application) Module: File: Line: Expression: For information on how your program can cause an assertion failure, see the Visual C++ documentation on asserts....szUserMessage != NULLMSPDB71.DLLPDBCloseDBICloseModCloseModQueryLinesDBIQueryModFromAddrPDBOpenDBIPDBOpenValidate3Module32NextModule32FirstGetModuleInformationEnumProcessModulesPSAPI.DLLImageNtHeaderIMAGEHLP.DLLKERNEL32.DLLEnvironmentDirectorySOFTWARE\Microsoft\VisualStudio\7.1\Setup\VSRegCloseKeyRegQueryValueExARegOpenKeyExAADVAPI32.DLLLocal variable used before initializationStack memory corruptionCast to smaller type causing loss of dataStack pointer corruptioni386\chkesp.cThe value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention. ~PAGAIsProcessorFeaturePresentKERNEL32e+000SunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDectzset.cTZ_freebuf.cstream != NULL_open.cfilename != NULLstream.c=D DDDDʅDDDDDLDYDّDDŒD˒DuD{Dstring != NULLsprintf.cDDstdenvp.cstdargv.ca_env.cioinit.cruntime error TLOSS error SING error DOMAIN error R6029 - This application cannot run using the active version of the Microsoft .NET Runtime Please contact the application's support team for more information. R6028 - unable to initialize heap R6027 - not enough space for lowio initialization R6026 - not enough space for stdio initialization R6025 - pure virtual function call R6024 - not enough space for _onexit/atexit table R6019 - unable to open console device R6018 - unexpected heap error R6017 - unexpected multithread lock error R6016 - not enough space for thread data This application has requested the Runtime to terminate it in an unusual way. Please contact the application's support team for more information. R6009 - not enough space for environment R6008 - not enough space for arguments R6002 - floating point not loaded Microsoft Visual C++ Runtime LibraryRuntime Error! Program: a_str.cDDconvrtcp.cDD_getbuf.cf:\vs70builds\3077\vc\crtbld\crt\src\sprintf.cGetProcessWindowStationGetUserObjectInformationAGetLastActivePopupGetActiveWindowMessageBoxAosfinfo.cProgram: A buffer overrun has been detected which has corrupted the program's internal state. The program cannot safely continue execution and must now be terminated. Buffer overrun detected!A security error of unknown cause has been detected which has corrupted the program's internal state. The program cannot safely continue execution and must now be terminated. Unknown security failure detected!%E%E1#QNAN1#INF1#IND1#SNANwtombenv.cchsize.csize >= 0a_cmp.ccchCount1==0 && cchCount2==1 || cchCount1==1 && cchCount2==0TETEUEUEsetenv.cFALSERSDSs͟dCfe:\Projects\PortQuery\Debug\PortQry.pdbAAAAAAAAAAAAAAPoE F{AeA!AAAXAAdA(EEEhEDEus#AHAHA ͽLEDE@E8E0EA.EEHFHFFEHF@F,FFFFFhFxAxAxAxAxAxApPSTPDT1F1FSAN@AAA  < F F F F F F FX F F F Fh F< FxFx`FyPFz@F<F(F5 @ ;Zx0Nm:Yw/Ml        ! 5A CPR S WY l m pr   )    `y!@~ڣ @ڣ AϢ[@~QQ^ _j21~@@@@ @P@$@@ @4@N@ p+ŝi@]%O@qוC)@D@<զIx@oGAkU'9p|Bݎ~QCv)/&D(DJzEeǑF e uuvHMXB䧓9;5SM]=];Z] T7aZ%]g']݀nLɛ R`%u?q= ףp= ף?Zd;On?,eX?#GGŧ?@il7?3=BzՔ?aw̫?/L[Mľ?S;uD?g9Eϔ?$#⼺;1az?aUY~S|_?/D?$?9'*?}d|FU>c{#Tw=:zc%C1n0n"nnnmmBpmmmvmjmZmJm:m*mmmlllllBjJjVjfjxjjjjjjjjjllNp`prpmkkkkkkll&l4lFlVlpl|li"j jii0iihhipiXi@ik. "!%&X<2)os4 3t  8iidkLk6k2pppoooooooto\oFo4o(ooonnnnnntnZn>n0n"nnnmmBpmmmvmjmZmJm:m*mmmlllllBjJjVjfjxjjjjjjjjjllNp`prpmkkkkkkll&l4lFlVlpl|li"j jii0iihhipiXi@ik. "!%&X<2)os4 3t  8iiWS2_32.dllWLDAP32.dllZRpcBindingToStringBindingARpcStringFreeAERpcBindingFree{RpcMgmtEpEltInqDoneUuidToStringA|RpcMgmtEpEltInqNextAzRpcMgmtEpEltInqBeginFRpcBindingFromStringBindingARpcStringBindingComposeARPCRT4.dllNetbiosNETAPI32.dll=GetTcpTableCGetUdpTableiphlpapi.dllEnumProcessesGetModuleFileNameExAEnumProcessModulesPSAPI.DLLGSleep HeapFree)IsBadReadPtrGetProcessHeapwGetModuleHandleAGetProcAddressHLoadLibraryANLocalAllocRLocalFree GetComputerNameAiGetLastError.CloseHandlezOpenProcessKERNEL32.dllGetAsyncKeyStateUSER32.dll>CloseServiceHandleEnumServicesStatusExAOpenSCManagerAADVAPI32.dllReadConsoleInputASetConsoleMode+GetConsoleModePeekConsoleInputAGetNumberOfConsoleInputEventsOTerminateProcess:GetCurrentProcessExitProcesssDebugBreakRaiseExceptionGetVersionExAGetSystemTimeAsFileTimeRtlUnwind,IsBadWritePtrHeapValidateGetCommandLineAWideCharToMultiBytekMultiByteToWideChar:LCMapStringA;LCMapStringWMCreateFileAWriteConsoleAyVirtualProtectsVirtualAllocGetSystemInfo{VirtualQueryGetStdHandleWriteFileInterlockedDecrementOutputDebugStringA"InterlockedIncrementuGetModuleFileNameAHeapAllocFreeLibraryGetTimeZoneInformationHeapReAlloc HeapDestroyHeapCreatevVirtualFree`UnhandledExceptionFilterFreeEnvironmentStringsAMGetEnvironmentStringsFreeEnvironmentStringsWOGetEnvironmentStringsWSetHandleCount^GetFileTypeGetStartupInfoAGetStringTypeAGetStringTypeWlGetLocaleInfoAGetCPInfoSetFilePointerInterlockedExchangeSetConsoleCtrlHandler*SetStdHandleFlushFileBuffersGetACPGetOEMCP;SetUnhandledExceptionFilter&IsBadCodePtrQueryPerformanceCounterGetTickCount>GetCurrentThreadId;GetCurrentProcessIdSetEndOfFileReadFile4CompareStringA5CompareStringWSetEnvironmentVariableA