Sample details: 5a610962baf6081eb809a9e460599871 --

Hashes
MD5: 5a610962baf6081eb809a9e460599871
SHA1: 6290a0dca10e063fc8913cfccc7057356e082e3b
SHA256: bc598b8327d9bbffdf96e2f972f2be0794e4e994771c6b0c84d9326921604db7
SSDEEP: 12288:pWHW1T76LS4NIeeUDCSvHHNvRgUVM27wl2cQuIFGhYBopxdg:pv1EdNIJR+XllDVGhY+pvg
Details
File Type: PE32
Yara Hits
YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsBeyondImageSize | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/contentis_base64 | YRP/keylogger |
Source
http://document-buh.com/AU2_EXEsd5.exe
Strings
          	            !This program cannot be run in DOS mode.
`.rdata
@.data
kernel32.dll
winmm.dll
user32.dll
winspool.drv
oleacc.dll
gdiplus.dll
ole32.dll
gdi32.dll
shlwapi.dll
jGj5j*j
Pj j+h
Xj-jKj
. 0-/:$
7??3?!
6?++"K
(1*$  
???1~*$
#00:::
0p>0# 
????12$
*????!
 0? 9+
|-???/
?0> J=0
'?,??>
.'9?3.
9=s???0
6&$:"&6
;??;??
>4.0:<1
???#} $
6(<?.8?
>01*8$ 
<*????
7???::
7??3?::
.7!b?.(
77D??::
??/!/>
8+???!
B+??!~
>01*x$ 
$?+??/!
j$????
/>&!?+>
;??3?!
<01.2<0#.0<
????2>
<0".:<0
&????2>
?G??2>
????2>
 4????
???:::
# 42.7
# 2.J7
# 42.7:
4#????
????1"
27x052
-????*
=?E??!
? %8+"
<*3??/
;???&# <x
+&#7 +
;#?3?$?
? :8+"
('?3?!
?"/x?2
&&r&&""r"
&&r&&""r"
? &8+"
??;?1!
@2;???
+???1!
?(^.+"
&;?;?!
*?(>!+"
>%*3?(
?7?1"7
?7?1"7
9+??/1!
1+??/1"
>+?;?1"/
+?;?1"?
2&6&'.
? 	8+"
+??.>*
+??.>"
+??.>,
+??.>$
+??.>(
+??0?!
3???1"
??"}20!
  *I-#
04 73=
 50/>/
$ 5K/"
44 =+:
0 !K0+/
 &J*5#
-  1N2?
3.7#"7
??1~"?
? -8+"
#???1"
0????>1"
=?3?1"
???1"+
=?3?1"
???1";
=?3?1"
???1"'
=?3?1"
???1"7
=?3?1"
???1"/
=?3?1"
 *1"$ 
"?80-"
',,,,'
??7??.7
.01.*?
 2%???
?.781*
??1>)???
??/1"?
"?(1"?
=??/1"
=??/1"/
???1*?
???1"/
?????#"/
1????1	%
???? &
/????.
-4&66@
"7(1"'
-4&66@
+??;?!
"z?1"?(
?7?#"9
???1"/
?7?1"?
-4&66@
.&"6).
6g66&6i.
!/>%<#"/
?3?1"?
"?(1"?
3%???0!#
!.?0!;
???1)	?
%??/?-
(9???1!
???1";
??/1"-
?;?1)4
??1>)$
8???1>!
68	???
?;?1"/
?3??./
/???1*
..1""?
$/????.
/??1~*-
;9???1*
.41&"?
 /?7?1*!
.,1""?
)/?;??-6
)???1"?
???1"?
9?3??-
????1!"?
????-4
8????1!
????-$?
??1~"?
???1)/?
???1~!???
???1~!'??
)?3?1"?
/)???1!
/)???1!7?
+)???1!
	??1>! ??
)	?3?1!0
	)???1!
	??1>!(??
	?3?1!4
*)???1!,
<)???1!
	??1>!"??
;1???1!
)?7?1!
1???1!.
)?7?1!>
%1???1"
)1???1"
)?7?1"	
>1???1")
)?7?1"
61???1"9
)??1~"
1???1"
8)?7?1"
1?7?1";
1??1~"/
&<16>%
$4g80 >
84 47 0
@:.!0V
8 /u>$'
159 711
1`=3%1
7`;7#7
1)?),	
3!m9'9)
? =8+"
*=?,95
 !-, "
(!-, "
0!2;,"
(\!-,"
(!";,"
(!-, "
 )2;,"
 x);,"
 9r-,"
20!?.,>
,!6/.7
.,!/I.'
W(*2, "
;@2';:
;*"';>
"/8;$.-!
"/8;0)-!
?0> Z1*?
"?x )7?
&&&&U&!:
6*8#"E
)>8???
????;:=#
.'#% 8
\6>$.8<
90!8x 
."8;"/h
.8;&"/
8;:/;#
>????;6/
.&;""/
?.;8?.
#6 ???
#6 ???
2>$-0!	
0!N ???
0#"7x8
%:;:#!2Y???
1!*(???
?.(8?.
*????!
8>???!
?,38,"
>(?o,3,"
?,38,"
$??/?>
?,n3,"
x*?((x
2*(?2M
?;,3,"
?,.3,"
!?.,(*
L23???
8?3.(?.
.0x!/. 
.0A?.5
."0=]8
.0A?.5
'$??/?>
 #?"???
6.8#)"7
b"0=8u
> #/"? 
"?8$?0
;2-;":-!
`>"1=Z
:.?> #
"s?2??
????$1=
?!?.. =
!26???
!6?o??. 
????">4
>????>4
!6?o??.
9>>????>+
1J&????
!&8???
)&8????
1N&?????
?.N/?.
.(?..#
l07???
(?.(8?.
#? ???
 !?..0#
1!?(???
??!>/.
?0!,|???
?.0812
*/(?27
>j/333
7(!/Y>
4.:0#"/
.|8<)%
?+.;?.
+?.;8?.
91.(;"
*0$?.?
>08#"?0
.<#'!6??
1)6(???
=N>????
?/.0?.
#0 ???
= 0?!??0.
= B0???
#i! 0?!??
2. <3; 
. $?.0
?.8x?.
?.(8**?
8'$???
@	???o
2/(?./
8'$???
8'$???
>?($. 1
?$??/?>
!/.$0#"?8
>08 .2!"/.
*7h127
**=6|<"
????::
$??+??
???O?2
.B0?.0x?. 
7/!/0g!#
0`. = 6
X0. &%!
.'!&/.$?c.
!/.$4*
*0801*?
2^0052>
0!#???
.(1"*?
?3.(1*
.(1"*?
.+!./.8
D7&???
!2/>0?[.
.00?,-
D5	??O
!?0/!8??
*?.4|?(
/.0?G,9*
*?(?.??
>??O!/.
?'?!?.
D>???O
0<!/.8
#: ???
1=:(???
L<2??/
/.0?G,9*
44????
!n/.4*g
!/.d8# 
..01"?
?..(1"?(
L#"??/
?./8?."
>5(?.*4?.
?C.??.
m>(?.n/?.
!/0'!%
!2/. ?k"
"?(1*?
!2/.0?g.?
?.(x?.
>3!B/.8
?.N71";(
!2/.(*k
00-!=)
  80!:
*?(?.??
H!$??/
??.(4?.??
!/.&0*
!/.& *
?.;8?.
."?-M-
!/	.0*
!/0'!5
.(l!/.
?I???>
!2?.8?
(?./8?.
!2/0!1y
#0!/	.2
1 ,31"3
001<1???
 >,_0!
+*?.>'?
0?.0x?. 
/# .@ #
:0x0-8
8>a?"?
?7.012
*?.~/?.'8
?.(8?.
3 ?????
3?.38?.
3?.38?.
 ?.N(?.
,(?/?1"
?.08?.
??????1"?
$(??_?
."$?.08
..*?.0x*
!6????
??.?8?.
.<1*z?
?.(8*?.0x?
,4????
*/(?./?
7?.78?.
"080!6?
 ?.+8?.
?.78?.
?.7x?.
*7(?"/
(?.?8*
(0?.?*
.. #"4T
0/???_
.0/"%(
&[(=?:
>5'#""
"?(!?.:
11,(???
0*=?.0?
0O*?.0x?.
#000-*
8#"( O
0-+?0-2
2b?0-.
03-#0-
*?0o-*
..6?.?
?.08?.'
 .4H?.
?.88?.
$?.4|?.
01).(???
,"./!"
. !/I.'
?-&. !
?.N0?,
*4?.N?
?.08?,
?.7x?.(
?S.'?.
!?.."?.
?#.;?.
?.(8?.
7?.08?.
w"0-*<
70=*5"&
(0=*5"&
>w(?.0
0#"?8 
0=25"&
0;3??_
 0-">7
0!"8???
?.;812;
#|0#"<
 ^?"( L
"2!^?>+:
*(80-0
 ?.n/*
1!J,????
!9r,????
)9'?!??
!92'???
-9'?!??
"3(?.3
C!9,?#??
1n,????
)-x???
+0-2>)
!-8???
?!58???
!9'?!??"
~190?#??
190?#??
???>~8?-9r0????1!5?
190?#??
!90?#??!
!?.!81)5?
!!?0/1.??
/!9,?#??
(.$1":
#!-=?!??
!==?!??
#!=2=???
!18?#???
!18?#??
!-8???
!:x???
!.(???
0????.
)&8???
)&8???
!N.????
????.6&
-90?#??
21))h???
 .(	*?.
*????*
0w13??'?
!-2/???
"?????-2?
?????--
1-r'???
1 ??/?
????12
-9,?#??
?/-9,?#??
O*1"/(
/0-*<"2
"7x.(1*
~?2"!R?0!
% ?.78*
"?(1"?
?.N/*?.>
"/(12/
*?(12/
.$?+.(
.4?'.(
"?(1"?
?..0?.+8
?.(812(
#L00-2>%
.0?.>0
D:=??'
.		?."
.8!"?.
?.n(?.
(m7?::
#|0#"?8 
?.(x**
?.08**
 01/r???
8. =&v
K?&.(h
!2/.(?c.
"#8.5!/i.
!2/.8?g.5
?o.+?.
????>12
>($?.(?
*?.>0?.
(N*?.(x?.
?.0x?.
?.08?.
>~01.((
# ?.M?
?.(8?.
.<1"?!
4>(?.N0*
.08!/.4
/>8*i?.
 =;/1"
22?"M2
?#.'?.
2J/?./8
2J3?.38
?.78?.
:(01L&???
. 4?.'8
. 0?.7x
??O??*
78!?>l
* &#G"
* &#G"
* d&#"
f* &#G"
"?(&#"
*1?.??
; 9;8;
 ?,??. ?,M
 .(A?. ?
,?. |?,
?. 4?,
. ?,M?.5?
?.	0(*12
!!??C?
?o.0?.
?????:
<?.4t*
2<&#G"
?.08?.
?.08?.
<8-??/
. /%"2
6*(#"E
>28!/>$
?.N0?.
?.N0?.
?..(?.
(????>.0
?..0?.
!2/.$?g.(?.
?.08?.
!/.&$?.(x?.
?.(8?.
x*123h
0!N(???_
?.}01"
>>'&#"
:>?&#"
>>'&#"
r&$>?o
?. <?,?.
0?.0<?.
2	h/"	
!1)>(???
!11>(???
!>8???
.????;!6?#??;9
;!.(???;
6????;96?
6????;96?
;!6(???
!>8???
!N&????
<2+??o
!2h???
11:(???
1!*(???
#0!/	0!$2
!<i???&
1<i???0
????0.
/m!<??
!^<???
!"(???
M 0!!<
=N"????
)<y???&
)*$?????-
????01.?
!*8????
0!;;'??
!/0'!7"
!0(???
);(???
?C-0??
????&#
)?(???
(????01
(????>
????0-
>$&)#"
 ?????-??
! 8???#
 ????!
?- 8???
)F+???
)98????
=%8???1~!1??
!5(???
?!#8???
!#x???
8???>} ?!#x???
!=8???
!j)???
!5(???
!)h????
!-8???
!/0'!$<
=~>???
)&(???
)6h???
!:(???
):?a??
=:8???
!*(???
|?2??_
1J2???
???.|0?
/0!6z,
!N4???
),(???
),x???0
?-N4???
!/	0!+
!((???
!0(???
)n0???
!N0???
!=3?/?;5
?-?8????
!?8???
x???&}
!2/0!0z4
0!-;3??
)'8????
.0 #!7?
???/0-
;???/?.
1^'???/#
)*+???/
)3h???
+???/#
!+8???
!-(???
!=x???
!5h???
15(????
!58???
=???/.
1n5???/
???/???<
!/	0!4$
)=8???
)???//
!%8???/
%???//
9???/?
!98???#
???/0=
/!>?b??
!/0'!,
=.8???
)*6???/?.
1:x????
2???/?
!/0'!0
??-:??
!/0'!/
!:8???
)*8???
1"(???
1"8???
8!/0'!'8
4???/?
!/	0!	8
4???/#
!$h???
>.(?+.
)$8????
/0!>z8
 ?S-8??
!2/0!+z8
/0!9z8
#!08???
(???/?
)08???
???/!/0!
???1>!???
!~/???
 !/0'!=
1'x?????
?-;8???
>>'1!3(???
?-+8?????-
1.9???
198???
!98???
!N9???
!98???
!N9???
1.9???
1.%???
1%8???
)9(???
198???
198???
1N9???
198???0?-
!	(???
).(???
)>8???
!n>???
K? 0!n;
=68???
1:(???
?????-
?????.0
4?-*8???
!/.&4?-:
?????-
?-:x???
!/0'!*
<3+??W
?&0!n?
=2?,??
)"(?????-"??
/0!"z 
	?! 8???
x?????-
/0!"z 
!/	0!  
!/0'!$
*?!6/0!7z
:!/0'!
(?'???.
?&0!N!
#0!/	.<
?/.8?.
?.8x?.
?./8?.
?.N(?.
.$*+?.
!2/0!1y
8?.0<?.
?.(8?.
.<1&"?
.>?!/.&%
?K,9*?7.
4!?.,0
* ,?.0?
%:9*1.
?."4?.
.0x>/=
8> !"/.%!F/.4
!/0'! 
,!v/. !B?>-!
??.78?.
?./8*1
#0!/	.(
_(!/>'
L ????
80????
?.(81 
?7.(?,
 .,?'.(
>x9?"?x
*?801-?
."00="
8?.(8?.
 ?.;8?.8?
0,"??+
?./x?.
&8l???.~
.'(&#"
7?.(8?.0?
*?./x?.
*?.~0?.
?013>???
"*?.^(?.
?.^(?.
>+?".?
:?(*1"'h
"?(?.$*
??.N??.
"?(1*?
. ?,M?
?.(x*?,
6!r/. 
.	??#.?
?!/0'!
& ?8O??
"	(/" 
"?(/" 
 ?.030?.
?.?x?.
(?????#
( . *#
|8'??g
"'(0=*
.8?'"2
?;.??.
0?.;8?./
.8?+.0
#"?8????
??????
?.38?.8
d<;??w
/ 0!.&
??.78?.'?
??S.7?.
.8?..(?.;8
L&;??G
5>7!/)>
?O.(?.
((((j(((
"+(?.+?
7?.?8?.
7?.?8?.
?.78?.
7?.?8*
#00#"5
2=8>5?..
?.78?.
?;.=?.
?.78?.
?.)8?.
/6M80=*=
6????*
?-68???
?c??$1
. ?+"0
!>(???1
>$0?!6
?G.7?.
?#.(?.
. !/	.(
0?????
*?(?.01
L0. #-
2)!8::
?'.7?.
/*?.>?
#|0?.08*
!?0/!)
. ,?.'
#80?.'
.8?.>'**
29##!"8+
?[.9#?#.0?.
?.~0?.92#
??.~??.
?.(8?.0
l95??G
&?.~0?.
#|(*?.>
(!?0/!
'?.08*
!2/.*?G.?*
$?3.?*
4'+??w
. #/"?
!2/0!>p
#> ???
. #/"?
>8Y?.?
1!>(???
1)>(???
"08?.(?
0/!.??
!N?. *
?.(8?.
 .:?.>?*
#<01"?(
.(**-?.
>,(*?,
.4*0-=
!/	0!&
^>=/"%
 .,x0="
?.M ?.?8
" $0=>
2;h#"+
 .P(?,
.*+!?.
'0*?.>?
/?,16*?
.  &?2_,
s0#"/x2
#00?.;
?.78?-1
?.78?.?
?.(8?.
(?.8812;
(?.88*
/?.?8*
" $&#"
2??:o:
**?7.0
80?.+*
&?.~??.+8?.
(?.+8?.'
+?.'8?./
?#.(?.
(?.(81*)
?.'8?.
?81 =c
?.N??.
. #/"#
=?.=80-
>p30-2
"-(?.-?
:= >7?
10 !10
2?(!/. 
?+.0?,
!?.,,!
!2/.6*I?.0
?.>?*?
.$0?.(
??/?::
2??:_:
3?????
.0?,?1"+
1&(????
&=( P/!>?c??
*-h&#"5y
#|8*?.
.(4!/.
?.88?.
2?.?8?.8
L8,??G
0#"?8????
(?.(x?./?
+?,=1?.
??.?8?.
**7#"/
#<(#"7
?.?81*+
? .8	?,
.4?k. 
.?x.=!/).
?.(8*?.0
(*?.>0?.
.(80! 
?:v. #"
;.v #"'
!/0'!#??
?.08?.
?.~/*?.>?
?.?8?.
.'#-  $
>u0#"/x??
'?.'8?.
?.78?.
?./8108
#|0?.?8
.r4?.?8?.
?.0x?.
0"9??3
?.'8?.
T'0??w
(01.3???
?.N??.08*
>5?K"?
\! ??w
(|>)?,
?.O8?.
.8?'.;
?.8x?.
?.>+?.08*?.
?.>+?.08*?.
>?8 0!-q
.,>!/.d
8?.08?.
?4?.08?.
, ./!*
,!6/0!
h812?'
#4 ???
1!J2????
2=1*"	
?.#8?.
;M. #"
?.#8?.
>?????.
?????.
>?????.
?????.7
?->8????
4????#"
-.x???>
-.x???>
6?????.7
0?.+8?.
6?.)8?.
?.%8?.
/?-&x????
6?.N)?.
#$0?.+?
. #o"7
l67??k
?.N#?.
0?.4x*
>7x . #
?.=8?.8
>1, . A
(!/.&;?.8
0?.78?.
6F?.0?
?.(8?.0?
0?3.4*
&0-*=,
" 0=O 
 8?,	?
?K.-?.
$0-*=,
. #o"7
?S.-?.
l0'??+
7 0!.<
d7:??O
.?3.4*
6?.n0?.
.(?"N/!/0'!
.P #"?[
(<?"?!
u*,. S
4. #">
"*;?./8?.
?.+8?.
7?.N0?.
8?./8?.
?.4<?.7
(!?0/!
 2.0?.
??&0!L'???
/?.08?.?
"?.7x?.
?./8*?.?x
/?./8*?.?x
*7(?.7?
#<0*?.
N*?.?x
?;,:2"
1)?(???
0?.^/?.
?-?x???
1 .!?,!
"'801-$
N$0!1<$
.(	?.=?
\!#??K
?3.9?.
#"	8????
)?.	8?.
)?.)8?.	
=.>????
#7!>??
).8???
168???
)&h???
1>&????
6?????-
0?1&8???
6????????
?./x?.
!?..8?-6
.<11*:????
1J*????
%*h????
*????/
?./8?.
!"(????
?!>"????
????0=
128???
?!28???
????0=
1,(???
1^,????0=
?./8?.
!$(???
!$h???
4?????.7?
)8(????
?- 8???
1N ????>!
)?8???
=/8???
)/8???
)/8????
)+(???
?.>/?.
!'(???
!'8????
1^#???
1^#???
);8????
 !?0/!(??
?./8?.
=;8???
)-(???
!-8???.|2?-#
?-=8????
?-#8???
?-N'???
#|(?-=8???
\85??{
(?-;8????
)38???
 ?-N3???
\.5??[
)9(???
???>} 
))h???
)1(???
)n1???
!5(???
L5%??{
!N"???
.8	?-2?
?-:8????
("!/90!
)>8???
!/0'!#
-!8???0
)~.???
\+%??K
.("!N/0!
=.%???
!<(???
)<8???#}
!8(???
."0#!88???
."0#!88???
#!8x???
???$~???>
!?..0?.08*
.*##"/
2L80. A
?.(8?.
?.(8?.
C? . {*
?.08?.
?.08?.
?.08?.
?????&#
?'. 10H
??.88?.
(*1 x-
;?.?8?.
.????"
2/(?"2
#?.#8?.
>/x0. 
?.08?.
?.08?.
T:!??K
.8?'.3
?>,?/,?.
\)!??K
,?.?8?.
?.;8?.'
?.;8?.
8>+:C:
!?..(1
0711??
*?81(	
.?x>'?.
?#,?.?x
2&5#"$
6(&#"]$
\)7??g
\5.??K
2?.N??
>(1b0-
?,*7?.
?.;81).?
> ..J 
!B.????
27(1!.?
$?.38*
?.58?.=?
?.58?.
> .0C)
.0##"? 
.>?..8
|%&??{
?.04?.
J0?.04
L/&??+
?.04?.
>%8.0!)0
4?.?8?.
1)6(???
?.=8?.
";(?.5?
?.+8?.
?.+8?.
?.^9?.	8?-
?.38?.
?.N!?.
?.n(*?
L7&??w
,?.'x?.
.2/"5$
.@ /";Y
$??.>$?
?'.0?.
9.0?K"/
2+(/"+ `. /"
*/81(	
?.-8?.
/014??????.7*
.P(#"7818"
 x. #"
0<????
.(?..7?.?8
1)0(???
/*?.>0
10(???"
!"?0!+
"8$?.#
?.M8?.
28?.M8
!"4????
=08???
?-08???
1((???
!N0????
?-(x???
?????.
?-08????
=4H???
!4?+??
)7h???
1#x???
) 8???
%#h???/
????>#
!.(????
?S.'?.
=4?#??
0> ??!
-:8???
?????-
???>|=
&?????-
(?-&8????
(?.98?-
)0h????
#!;?a??
?3.5?.
?.!8?.
1!4(???
?????.
)*h???1
?-"x???
<????#!
!N<????
?-<8????
.(?'-*??
11;(???
(>(?.n?
?.N9?.
?.98?.9?
$?-*8????
=4?+??
1610??
.0x>5?
!?..=::
.$J?,?.
.(	!?.
8. #/"/
>(8<. 
.0?#.?
../?,1v2
?.041"3
?. 4?.?
0*?.?x
. !/	. 
4+???_
"(??O??
"	(?./8
t,8??[
?.$8?.
11,(???
>)0K=2
 ?.	0 
?,-12=
&????0=3
1J6????
*)(?-&?
?.N(?.08?.
"!(?.!
?.N3?.'8
.8?#.	?-
6?????.5?
.*?../
?-68????
:?????.
!:(???
:????.0
(?->x????
 8?,	?
Q2?./x
??/?/"9
	?-68????
?.?8?.)
T(0??K
??/>?#
*'(!/0!
!/0'!/
!/0'!0
!/0'!3
!2/0!9x
??.081
!2/.:1N"(
?.^0?.
?.N(?.
?.?8?,?,
?.78?.
?????.7?
*?h12?
*!/.$(
.r /"8X
.(/%# . 
#".73#"
0*12:3
/# .p(?.
.0?#.?
<!/.$&
2 0=O0
!?+.,/"
.8c?.5?
?.=8?.
*#8.0?.
)>(???
!?.!8?.
91(*?'??
9?.18?.
#!"?k??
!*(???
6????#!
6????/
j.*?"-2
!<?/??
)"?'??
1"?+??1!
168???/
????0-#
?./x0-3
????# 
????# 
?!:8???
)*2?????-:?
.?????./?
?'-,??
1&"???
.81"!"??
12(????
*?????-2?
6?????.
?-*8???
*?????.
1*8???
!/(???
?-78???*}
1J(?????-8?
!0(???
8???/}
0801:?
?-?8???
!48???
!'8??? ~
! 8???.
?-(8????
!$(???
=?8???
0?-?8????
?????.
.."/"(
!-(???
.80*?.
" ??O??
  ????
!2?.(*
/!v/0)
;?????#"
*?.0x?.
0*3?./
!/	0!5
*?(10?
C.(!/I.
" ??O??&#
>^+8. )&
?.>%?.38
 8?,	?
01&r???
!>?+??
=>?+??
1>?k??
!>?+??
?.N1?.
6?????-
!:(???
!.8???
168???
)68???0
?-.8???*
>t(?.?
?012????:
0&? ]0-
0#!>??
?.01n8-
!2?.(?
8	 ?"?
#<(?.98
"/x1"	 
!/	.(&
>A0!?.
7p!/0)
$ x. #
?.- ?,?7
.H /"(T
.J0&/"
* <0= 
/"3$d.2
!"/0!>z???
 8?,	*
.(/	" 
**7&#"/y??
2	(#"= f
.$?.N'
[(!?0o!/
", 0s!,
*?.#x?,
0&}?23/
[(!?.n4
.(t?"7!
"^8. #!" 
#"/8????
8????&
x28&#g"
?.(8*?.
.0	#"'
0.(##"'
!'??7?
?.08?.
?.08?.
)"(???#}!
?.(8?.
?.081)4?
?.081)4?
&#!/x???
11!h???
&#!/x???
)0	?"??
11/(???
"0-)~!???/
)  ?!??
1L(???
'.(##"'??
. #!"5
4+!??;
.:/	"(
"0-*~/
0s16??
*?8>$&
";y.0&
"^=0170
"^;>(&q
.,!/I0!$?
H ?"78
?.>7?./8
\>+0-/"
(!/0'!
.0)1"	
?????#
 /"8 `.&
.8K/"+
$0.80/"$
.?801!?
/?????
A*?.7x?.0?
. /!"8
1,????
D9.??C
d!6??3
0/- ">
07-0">
!.(???
%:;:1!*h???
+?.+8?
/<?.31
'<?.5?
?.5x?.
 ?.%8?.
/?.)8?.
0>7I6"
 >7K6"
?3.(?.
?./8?.
 2!/>d(
4>,/0!)
. C0=(
]>0#"^
(!/.$ 
?"=!?.
*>?33&.
4N<9?.=0
?} . =-
*?.>0?.
?.88?.
*?_.0?.
*?.~0?.
?.>$?.
?.N$?.
?.08?.
?.(8?.
8. =)4
L/;??+
<<0!<)
> 8?$.v7
!2?. <
3#"+863"
!/0'!%
O? . {
 ?.^0?.
7?.(8?.
?.(8?.
?.08?.
 <?.(?
0#"/x43"
?{.0?.
.?4?.0
.?4!?.0
>??.O0
{# ?.M?*
., !?.. 
?.08?.
? #8+"
"$  1"$ 
?7?.31
1!)(???1
??o-)??
????-	?
1!J!???/
???/?./
??3??.5
????.)
????11>?
????->?
:????1)
????-&
????1)
????112?
1R!*??
1!J<????
????1!(?
1!$(???
???1~!???
?3??- 
???1~)
1R!/??
???1~)
???1~1+??
1!J;???
1!#(???
?+1!'?
?+1!"?
2$8 %(< 8X 
 (<,B4
	1)>	1!1 
0!&2???
7???/!
>782!?0
?3.0?.
6.$&66
$0:>:$D
24&66@
.6h."6.&6&
.6h."&.8
."&&#&
"$  1"$ 
?1.!-7?
?1.!=7?
*781"	?
%7???1!
7???1)
!7???1!
1!J>7???1)
?+?->7
.7???1!
7???1!67
1!J:7???1)
1!*(7??
?;1!27
?+1!"7
7???1!(7
 ?2#80!,
?;1!17
?1.!	7?
/?7?1*
?..,1"
?1n)???
/???1)7/
#/???1"7
????-%
1!%(/??
0!5:???
1"!%??
1!J9???/
?./81!
1!1(???
1!!(???1
???/1)
1"!.??
1!J6???/
6???/1)
&???/1)
1R!&??
%+?3?1"
?1.)???
,?????.7
??7??.
"?(1"?
"?(1"?
?.'81"
?;.01"
1!J9???
?+?-9?
1!	(???
1!J1???
?+?-1?
"?(1"?
?.;81"
4.01n"
12!9??
?.n01"
?+?.'1
1!	(???
1!J1???
"?(1"?
?.;81"
?+.01"
1!)(???
??/-)??
1!J	???
1!!(???
??/-!??
"?(1"?
1!)(???
1!!(???
???/1!1?
1!J.???/1)
1!J&???/1)
1!:(???
?1n!&??
1!9(???
1!.(???1
???/1!>?
1!.(???
"?(1"?
*!1!9?
1!J	???/1*4
???/1*4
l><?.~/
???/1!>?
?1n!1??
1)6(???
????1).?
1)2(???
????1)*?
1)4(???
????1),?
?1.) ??
?3?1)?
??1>)/??
?3?1)7
/???1);
?1n!<??
?1n!>??
w>!:"=
5%=+%=
%=+9^!
		6-+-5
"?(1"?
?.'81"3
"?(1"?
?.'81"3
?.N'1"
"?(1"?
1!)(???
1!!(???
???/1!1?
1!J.???/1)
?;?-.?
1!J&???/1)
1!:(???
1!9(???
1!J!???/
!???/1)
1)6(???
????1).?
1)2(???
????1)*?
1)4(???
????1),?
?;1!<?
/%#7?#
?#7#^?
$'P,8;0
1!)(???1
1!1(???1
?+?-1?
???1~!!??
???/1*4
.???/1!
?+?->?
???/1!6?
???/1!*?
1!2(???
0!>:???
1!J2???/
*1!%h???
1!	(???1
?+?-	?
1!J1???/
?1.!%??
1!)(???1
?;?-)?
???/1!9?
1???/1*4
1r!>??
>???/1!
??o-.??
?1.!!??
???/1*4
12!!??
12!6??
1!&(???1
:???/1*4
*???/1!
???/1*4
1!2(???
???? *
???/1*4
1!((???1
?;?-(?
0???/1!
???/1*4
1! (???
?;??.?
1!/(???1>*4
12!7??
0!2:???
????.?
1r)+??
1r)#??
0%G??? 
1!-(???
?1n!;??
?1n!$??
o/1"?h
1! (???
???1!?
12!0??
???1!#
3???1~!=
6{6:*6I
6{6:*6I
1!*(???
??7??.
#!=8???4
1B!=??
71!-(???
.&*6#66
?????.7
 1??/1"
*????1!
1r!<??
1!$(???
1r!8??
1r!(??
?+?-(?
1!0(???
"????1"
?+1! ?
12! ??
?1n!&??
6&64].
1!/)7??
1)/)7??1
?;????
',,,,'
$$$$U$$$$U$
',,,,'
',,,,'
   ?    V    
',,,,'
6&b&.6.N.&
g8888'
'$$$$'
/4444'
'$$$$'
+4444'
'$$$$'
#4444'
'$$$$'
+4444'
,,r		'
'$$$$'
/4444'
5588)8
552::(:
O!!!!'
65!!r!!
7!!!I!
'4444'
8!!!#$
255"5555"5555"
5555"5555"
5555"55(5$5555
9_(>9-m5
6 : H3 
 &( 0 
 n6 6 
 : b* 8 
! 2 ." 
 &	 ) b) ) 
. 9 *9 9 n
 n- - *- 
= = *= 
 &# # *# 
0 x0 0 L( '
: : L-
 L& & 
 L$ 4 D
 D6 6 
 L! ! 
 D9 9 
 @- - 
 D9 ) 
 9 D8 
 08 8 
 H8 8 
 , D4 8 
< ( B( < $& 
< < D'
< 9 L< 8 J% 
  8 *8 8 
 8 J8 8 
% D% %
"B2"""I"
2*2"M"
"f**"":22*2q*22
"2Y*:"
2*""""*
"v2"2*
"2*d:*
22"y*22"
2*22`2
    Y  
 =   04 
  a    
    & 
   @  
I    j    
    Z    
&6Y.:.
&6.d:&
626&,&
"6.6y&
2&.2&B&.
&.2.F66
 "&6&".&
"0&6&.
"&.8*&6
;.&6*(
.&".)&6."
6&6&r2
6&6&r2
b6&6&B"
6*66d6
6"&.x*&6
69"&.*
69"&.*
6"&6H&.&
69".66`
6".6X6
4v666&7
466c6&
46	66&
$"&4$&
$"&4$&
&6n&6.
&&B6&.&"
2.&6&*6.
2.&6&*6.
2.&6&*6.
p2*22`
.&"6&6.
N666.\
.&":.&6
6&.&&6
6.$&&&
66<.66
&'.6&6
,6664v&&.&"
&.6z&6.
66.&>&
.&:.,&6
6&j4$&
66<.66
.&":.&6
.&":.&6
.&":.&6
.&:.,&6
66<.66
66<.66
6O6.66)
66.&>&
"2"j2*
&&.<$&
""2""*"
.&":.&6
66<.66
6O6.66)
6O6.66)
6O6.66)
46664v*"2
.&":.&6
.&:.,&6
.&":.&6
6.$&&&
46.66`
6.$&&&
.&:.-&
.&:6,6&
66<.66
66<.66
6?6.66):6
r6.&&K
6&:&-6
&:{.66
&&6&".&
&v6&6.
6&.&&6
26&&&x
66.6q.66
.&:.,&6
6.$&&&
N666.\
2*""K"
66<.66
66<.66
&'.6&6
66<.66
.&":.&6
""B2"*""
N666.\
.n.6:&
.n.6:&
.n.6:&
6&j<$$
66&,.6&
2*$"""
66<.66
&'.6&6
"@"2"*
66.&>&
4""2""*"
.&"6&6.
k,&,&D&
.&"6&6.
6O6.66)
.&"6&6.
2*$"""
"&6&".&
.26&,.6&"
6&6&B&"
.6*B6.
-4&66@
6&g2&6
6&g2&6
f6.&"*
f6.&"*
&&"n6.6*i
&&"n6.6
*62.:6.
6y&6&2
6y&6&2
6&**6"
."6&$2&"
;.&6*(
.26&,.6&
.26&,.6&"
6&**6263
6&$"6.
666v&6.
6&.&""
"&6&".&"
=,2,-9,
<*7</<
<&<e6<><
<7#<3<;;<'<
<"<b2<.<.9<
<s!<1<3)<
',7,{?,8
,N	,3,*
,.,Y	,
,,",7&,9,3
</2<*<
<)<;9<
', ,F$,
,6,j1,
,+,j/,
,/,Q0,
,;<,',
,t+,8,
,p1,%,
,%,./,8,
<$<@4<
<L+<0<
<U4<"<
3<'<Q <5<
-,?,?2
<;<@'<7<
<<"<f2<*<
<.#<3<.
<w-<3<s
4,t,,",
,.,"!,
,{&,1,{5,#,
?<b*<,<
6,83,4,
$,4<4!<
 <8<."<
<&=<+<
, ,F$,
,*,n.,1,
', ,m0,
0<.<Y1<	<
<<*<Y)<-<
0<z><	<
,*	,),
,=",2,
<8,<&<
<><U)<
=,#,H8,
<f+<4<o=<
,@),),E#,;,Q
7,~:,&,
<5<*-<
s8<6<D8<
9<0<i"<
,@",5,
<,(<8<
8<|4<6<H1<9<D
<8<j1<
,%,U3,
, ,-8,
,6,%	,%,]
,",s2,!,
<+<""<
 ,44,:,
,!+,8,
<<<Y.<!<
!,	,]9,5,
=,#,U3,',]
<@6<1<
<N?<$<i&<
=<*<S#<
,,2,D:,
-,=,Q ,
,{(,4,s,,<,
3< <J"<
<.'<8<i,<
<	<3'<
,H+,?,
0,4,w,,",s2,
<!.<=<
,6,j!,
,<,;*,
3,?,;"
$<,<72<:<
#,7,s0
',$,)4,2,
<?-<?<{
,@?,8,
,3&,!,;
*<	<{%<
<,<D'<
1<5<.3<
,U',/,
<f?< <
,",.!,9,"
=,',j?,
<1<"	<)<"
,"",2,"
,">,!,"
,"-,=,"
,"7,/,"
<"8<$<"
<",<<<"
<"2<*<"
<"&<6<"
<"><!<"
<	<")<9<"
<"5<-<"
<"#<3<"
<";<'<"
<"/<?<"
<3(<8<3
<:<3.<
<31<	<3)<
,"*,:,"
,"1,),"
,"#,3,"
,"?, ,!
,32,*,3
,3!,1,3
,3=,#,3
,3/,?,3
<1<"	<)<"
<3!<	<39<
:,0&,6,
CommConfigDialogW
CreateJobObjectW
EnumerateLocalComputerNamesW
GetACP
GetConsoleCommandHistoryLengthA
GetConsoleCP
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessId
GetTickCount
GetVersion
HeapDestroy
LoadLibraryA
LZCopy
SetLastError
VirtualProtect
WriteConsoleInputW
kernel32.dll
auxGetNumDevs
joyGetNumDevs
midiInGetNumDevs
midiOutClose
midiOutGetNumDevs
midiStreamRestart
mixerGetNumDevs
mixerSetControlDetails
mmioInstallIOProcW
NotifyCallbackData
waveInGetNumDevs
waveOutGetNumDevs
winmm.dll
CreateWindowExW
GetCapture
GetCaretBlinkTime
GetKeyboardType
GetMenuStringA
GetSysColor
GetWindowDC
PrivateExtractIconsA
ReleaseCapture
SetSystemMenu
SetWindowPos
ShowWindow
VkKeyScanA
user32.dll
AddMonitorW
AddPrintProvidorW
ConfigurePortW
DeletePrinter
DEVICEMODE
DocumentEvent
GetPrinterDataExW
StartDocPrinterA
winspool.drv
AccessibleChildren
AccessibleObjectFromEvent
AccessibleObjectFromPoint
AccessibleObjectFromWindow
GetRoleTextW
GetStateTextA
LIBID_Accessibility
LresultFromObject
oleacc.dll
GdipAddPathBezier
GdipCreateHBITMAPFromBitmap
GdipDrawPolygon
GdipGetImageFlags
GdipGetMetafileHeaderFromMetafile
GdipIsVisibleClipEmpty
GdipSetLineColors
GdipSetPathGradientFocusScales
gdiplus.dll
CoRegisterClassObject
CoResumeClassObjects
HBITMAP_UserSize
OleCreateLinkToFile
OleIsRunning
SNB_UserSize
StgOpenAsyncDocfileOnIFillLockBytes
ole32.dll
DdEntry3
EngStretchBltROP
Escape
ExtFloodFill
GdiPlayEMF
GetEUDCTimeStampExW
GetMiterLimit
PATHOBJ_bEnumClipLines
SetPaletteEntries
gdi32.dll
PathCanonicalizeA
PathGetArgsW
SHRegCreateUSKeyW
SHRegEnumUSKeyW
SHRegQueryUSValueA
StrRetToBufA
StrToIntExA
UrlUnescapeW
shlwapi.dll
D{`fgs~S~~}q
kernel32.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly 
	xmlns="urn:schemas-microsoft-com:asm.v1" 
	manifestVersion="1.0">
	<assemblyIdentity 
		version="1.0.0.0" 
		processorArchitecture="*" 
		name="Olomil LTD" 
		type="win32" />
  	<description>
		Programm 2.1.1
	</description>
  	<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    		<security>
      			<requestedPrivileges>
        			<requestedExecutionLevel 
					level="asInvoker" 
					uiAccess="false" />
      			</requestedPrivileges>
    		</security>
  	</trustInfo>  
</assembly>
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX