Sample details: 7bc463a32d6c0fb888cd76cc07ee69b5 --

Hashes
MD5: 7bc463a32d6c0fb888cd76cc07ee69b5
SHA1: 81086a9559af3edc889f1c4c720460ebf49f8ef1
SHA256: 09e9fb8beb798f2c17a311d59c0a44d9e815d6cad8ea4feadd77a66d4d3706b5
SSDEEP: 6144:8fK9TB2jX+3PUdyj4oVDyLiMRgxnnMACDUprIvxo:8fK9ToaUd0PEi/RnDvwx
Details
File Type: MS-DOS
Added: 2018-03-07 02:38:32
Yara Hits
YRP/Microsoft_Visual_Cpp_v50v60_MFC | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsBeyondImageSize | YRP/HasModified_DOS_Message | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/url | YRP/contentis_base64 | YRP/DebuggerCheck__QueryInfo | YRP/ThreadControl__Context | YRP/Check_OutputDebugStringA_iat | YRP/anti_dbg | YRP/inject_thread | YRP/network_http | YRP/network_tcp_socket | YRP/network_dns | YRP/network_dga | YRP/escalate_priv | YRP/screenshot | YRP/keylogger | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/Advapi_Hash_API | YRP/CRC32_poly_Constant | YRP/CRC32_table | YRP/BASE64_table | YRP/Str_Win32_Winsock2_Library | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API | YRP/Str_Win32_Http_API |
Source
http://94.130.104.170/eqig%20unpacked.ex_
Strings
		`.data
.reloc
								
Qkkbal
[-&LMb#{'
w+OQvr
)\ZEo^m/
H*0"ZOW
l!;b	F
mj>zjZ
IiGM>nw
ewh/?y
OZw3(?
V_:X1:
Invalid parameter passed to C runtime function.
```hhh
xppwpp
bcdfghjklmnpqrstvwxzaeiouy
0123456789
abcdefghijklmnopqrstuvwxyz
^_`abcdefghijklmnopqrstuvwxyz
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
a'1[=<
Kf23t3|3
V$4,444<4D4L4T4\4d4l
9$:(:,:
P=T=d=h=l=t=x=|=
 "7V_x
q><>@>D>H>L>P>T>X>\>
2 2$2(2h2
%>Q>X>a>h>
4H4U4r4
5)585E
9'9-9X9{9
yKs/?5?C?
3A4I4O4U4]4e4m4
829O9\9n>
IsWow64Process
userenv.dll
CreateEnvironmentBlock
DestroyEnvironmentBlock
del "%s"
if exist "%s" goto d
@echo off
del /F "%s"
gdiplus.dll
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToStream
HTTP/1.1
Accept-Language: 
Connection: Close
urlmon.dll
ObtainUserAgentString
FCICreate
FCIAddFile
FCIFlushCabinet
FCIDestroy
GetFileInformationByHandleEx
SetFileInformationByHandle
GetProcAddress
LoadLibraryA
NtCreateThread
NtCreateUserProcess
NtQueryInformationProcess
RtlUserThreadStart
LdrLoadDll
LdrGetDllHandle
SHGetKnownFolderPath
http://www.bing.com/
http://www.google.com/
UNSUBSCRIBE
SUBSCRIBE
NOTIFY
M-SEARCH
CHECKOUT
MKACTIVITY
REPORT
UNLOCK
SEARCH
PROPPATCH
PROPFIND
OPTIONS
CONNECT
DELETE
connection
proxy-connection
content-length
transfer-encoding
upgrade
chunked
keep-alive
qjypw4}t{
315&0(qqb)"#
~CIZ^IYOyiNESOPM[H
MK]ICqH^QMS
/28+/8(>(8
?)'<99
!6!3;?%z>"<
(#xwz	"%oxx
	zt/+?#1u
a~b|GA
&53~e&&& 
Pfb*		
Zyy`p|g=]kakyb1(,s
|kaih~	
`NKWnLBMXJRfG[WGRD
REOGFP',)NYE@,N`eyE{gadFkw
k|lzluw`wg
g|`eep~W\TDO
g@HSjxvKnr}zcb}aH%
VX+YU*\_[
EI4HF;KNH
M][;5t0.>+-zyy.|
'.6,d!KM!/j.4$=;
WFTBEOQKCY]s
(((.=%>
rMIUUA
Oibfhh/zn fz`grr|8xupq~pu0rf5x~xL
jLGCMM
ZUUR\QBBPFZcc 
|M_E[^	IKT@EG[
EG[^IO_]
[\I_uMDHUOTICZESaXYI
PWBT~UQNrNCAJC
URGQ{FCU\ZuLIY
%*+ #,;
STAW}OOFAIJ
wv~cHsmqxom}
qpxeNdjbx
-z$hmo
lxhjmki
%#"*-%9<<
IjidyczPN`of
^wbcvqpUxyvmqj
^aenb{|.Bomvdgsu
Jxlw$=9`
Zt~{s_pqzyva
." )!#
KLYOeKJ\P
W@\GBK]
^^JZ]SW
xy?6;:<e5=.
ebk}S}xnn!$evjupesP
Q\Q_FW``
01'+dm ,<<%'?y5>?8;8r<1632?'
O@O^@Sf`
f})emebpBb\f||oebz9u~
x{xo=29~zvVA
,*VQH^p^[MM
GRUDBZFD
H_KVdL
$(4#h{NH8?*<
89/3|u%43& 4(&p.9)4:
Vukckoe${
Vucqsr|@U{cuqym
u~-ws"tgbcp
uvxaDTfP_C]
m@BYOE\
?5+13<>
z Imandnhb
216$!{
6:5?539e`(&&*1/31D@
VAAR^VMW\]IKLN
BJFEOMM
>.-0298,>9;{+
&'8c+#9'd=5* * -%%
(+,>;a
, /%/)#
z<"0.s|975<0"2Y_
.@KWTX(
O1h\^RDPF	
c%{^IY
R*:mMSHN9|vbt.
<200 54/&
}	uC@L
uhknj"45?;rtrOvpn=688'nhf5>00.bqM
l\UTNPxXQ^^
[LI^^H@[BHQ\FE
xOOTXPKibcwmjh(rkl$ecjjh.8w{xw~vP~&6
GetProductInfo
script
Basic 
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
|$$$}rstuvwxyz{$$$$$$$>?@ABCDEFGHIJKLMNOPQRSTUVW$$$$$$XYZ[\]^_`abcdefghijklmnopq
RFB 003.003
$_PROXY_SERVER_HOST_$
inject
PR_OpenTCPSocket
PR_Close
PR_Poll
PR_Read
PR_Write
D$$+D$
f9_ t0j
FHf9_4tCj
VW9] w~jt
QPPj$P2
D$,0O@
QSVWh,
W90ryV
;DAVEu=h
lVWjDS
xt+xxt8;|$
Hx;Htu
t;hXO@
XPh`O@
tB9p,v=
,0<	w8
<0r	<9w
<0r	<9w
PWWWQW
QQhpw@
SWh|w@
9~8u%WWWW
t89.~.
t89.~.
8ERCPt
QVVVVVVSW
HHt:HHt'HHt
t2f;|$#w+
u-f;|$#
PWhhx@
FGPj<_
SVWh,y@
0t%Hul
W8D$ t
9D$ t<j
t.Ht"Ht
_jajzX
|>SSWVP
SWh\y@
u(hlu@
u(hlu@
PSSh$`
PSSSSS
T$xRSh
D$ ,z@
tJj8h z@
WWWWWWWW
D$4HHt
u|Pj<[
~>hH{@
D$dPh0
D$dPh?SC*
D$dPh?SC*
D$`PSj
t5HHt(Ht
Ct5Ht,
Ot2Ht)HHt
	tAIt!It
G f9C t
G4f9C4t
t'f9P u
u%hDO@
@r7SSS
PSh\}@
Ht-Huo
~ThlO@
FPHWt'HHu;j
~ThlO@
FPHHWu!j
~ThpO@
FPHHtxHH
~Thp}@
MDQPVSS
LEDf9Y
tRf9>tM
t/It"Iu1
t(SSSS
D$<9\$ 
9t$|uJ
Pjfj$X
t$09\$ 
f9G8um
L$$)\$
t?SSSS
SWh$~@
u	j\Xf
WtRj V
WWWWWW
=ERCPt
<SWj<_W3
t@<	t<<&u-
0G@;|$
t<It&It
t7It#It
tLHt$Hu
tejD^V
D$LPSS
GAHt8Ht HHt
SVWjXj
f;CHsR
u|;N(w
E$G@Pj
<KvD<M
<Frm<Kv=<Mwe
}2;^ls
}9;^ls
}2;^ls
:F-t4C
}P;^ls(
 !!!!!!""#$%&'(((((())*+,-.IIIIIIII//I01234445656789:;9:;IIIII<=>?@ABCDEF
?ERCPt&
HtHHt=HHt1
{ !r/j$
t6f98t1
t*f98t%j%
 @;C(r
t"SSWh
t&h|~@
GD)_p)_l
Nlf+Np
Vlf+Vd
N09F0u
O@;H s
O@;H(s
Oh;O\sR
Gh9Ghr
V0WQPRV
N0WPRQV
Np;Ntt
@PAQBR
wkPSQR
Genuu8
ntelu0
ineIu(
URPQQh
v	N+D$
UQPXY]Y[
E#+E/^ZY
MapViewOfFile
UnmapViewOfFile
CreateFileW
CreateFileMappingW
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetVolumeNameForVolumeMountPointW
WaitForSingleObject
WriteFile
VirtualProtect
lstrlenA
GetModuleHandleW
GetPrivateProfileStringW
GetFileAttributesW
FlushFileBuffers
GetPrivateProfileIntW
GetProcAddress
GetEnvironmentVariableW
FreeLibrary
CreateProcessW
GetCurrentThread
OpenProcess
Thread32First
LoadLibraryW
Thread32Next
GetLastError
LoadLibraryA
lstrcmpiW
CreateToolhelp32Snapshot
CreateThread
lstrcpynA
lstrcpyA
SetEvent
GetExitCodeThread
CreateEventW
WaitForMultipleObjects
GetSystemTime
ExpandEnvironmentStringsW
LocalFree
SystemTimeToFileTime
GetTimeZoneInformation
GetLocalTime
lstrcmpA
lstrcmpiA
GetCommandLineW
DuplicateHandle
ResumeThread
IsBadReadPtr
VirtualFreeEx
VirtualAllocEx
WriteProcessMemory
GetHandleInformation
SetLastError
lstrcpyW
TerminateThread
lstrlenW
GetCurrentThreadId
ReleaseMutex
CreateRemoteThread
Process32FirstW
Process32NextW
FileTimeToDosDateTime
GetTempFileNameW
DosDateTimeToFileTime
GetTempPathW
FileTimeToLocalFileTime
SetFileAttributesW
SetEndOfFile
SetFilePointerEx
SetFileTime
ReadFile
GetFileSizeEx
GetFileTime
DeleteFileW
GetFileInformationByHandle
GetNativeSystemInfo
GetDriveTypeW
GetSystemDefaultUILanguage
GetLogicalDrives
GetProcessTimes
GetModuleFileNameW
lstrcmpW
GlobalMemoryStatusEx
GetUserDefaultUILanguage
GetDiskFreeSpaceExW
GetVolumeInformationW
ExitProcess
SetErrorMode
GetComputerNameW
GetVersionExW
lstrcatW
OpenEventW
GetCurrentProcessId
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
VirtualQueryEx
ReadProcessMemory
VirtualProtectEx
GetThreadContext
SetThreadContext
GetProcessId
TryEnterCriticalSection
SetThreadPriority
ResetEvent
TlsGetValue
TlsSetValue
TerminateProcess
GlobalLock
GlobalUnlock
CreateMutexW
OpenMutexW
MoveFileExW
FindFirstFileW
FindClose
FindNextFileW
InterlockedIncrement
InterlockedDecrement
TlsAlloc
TlsFree
CreateDirectoryW
VirtualFree
VirtualAlloc
RemoveDirectoryW
WTSGetActiveConsoleSessionId
KERNEL32.dll
CharToOemW
GetCursorPos
GetIconInfo
DrawIcon
IsRectEmpty
GetWindowThreadProcessId
GetMessagePos
MapWindowPoints
SendMessageW
ReleaseCapture
IsWindow
SendMessageTimeoutW
SetWindowPos
PeekMessageA
PeekMessageW
GetAncestor
GetWindowLongW
SetCursorPos
GetCapture
GetClassLongW
GetWindowInfo
GetParent
PostMessageW
SetCapture
GetMessageW
GetWindowRect
GetMessageA
GetSystemMetrics
GetLastInputInfo
CharUpperW
ExitWindowsEx
CharLowerW
GetWindow
SetWindowLongW
ReleaseDC
WindowFromPoint
LoadImageW
GetTopWindow
CharLowerA
DefWindowProcW
PrintWindow
EqualRect
PostThreadMessageW
GetDCEx
IntersectRect
GetUpdateRect
BeginPaint
DrawEdge
FillRect
GetWindowDC
GetUpdateRgn
EndPaint
ToUnicode
GetClipboardData
GetKeyboardState
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
OpenWindowStationW
GetUserObjectInformationW
SetThreadDesktop
CloseDesktop
OpenDesktopW
GetProcessWindowStation
CreateWindowStationW
CloseWindowStation
GetThreadDesktop
SetProcessWindowStation
CreateDesktopW
GetShellWindow
RegisterClassA
DefFrameProcW
CallWindowProcW
EndMenu
CallWindowProcA
RegisterClassW
HiliteMenuItem
DefMDIChildProcA
DefDlgProcA
GetMenuItemCount
SwitchDesktop
DefMDIChildProcW
DefWindowProcA
GetMenuState
GetClassNameW
SystemParametersInfoW
TrackPopupMenuEx
GetMenuItemRect
RegisterClassExW
GetMenu
MenuItemFromPoint
OpenInputDesktop
DefFrameProcA
DefDlgProcW
GetSubMenu
SetKeyboardState
GetMenuItemID
RegisterWindowMessageW
RegisterClassExA
MapVirtualKeyW
USER32.dll
CryptVerifySignatureW
CryptGetKeyParam
CryptImportKey
CryptDestroyKey
CryptDestroyHash
RegCreateKeyExW
RegCloseKey
OpenProcessToken
GetSidSubAuthority
OpenThreadToken
GetSidSubAuthorityCount
GetTokenInformation
CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptHashData
GetLengthSid
IsWellKnownSid
ConvertSidToStringSidW
InitiateSystemShutdownExW
EqualSid
ADVAPI32.dll
PathRemoveFileSpecW
PathAddBackslashW
PathRemoveBackslashW
SHDeleteValueW
SHDeleteKeyW
StrRChrA
StrCmpIW
StrChrW
StrCmpNA
StrCmpNIW
StrCmpNW
StrChrA
StrCmpNIA
PathFindFileNameW
PathGetDriveNumberW
PathQuoteSpacesW
PathFindExtensionW
PathIsURLW
wvnsprintfW
wvnsprintfA
PathIsDirectoryW
PathAddExtensionW
UrlUnescapeA
PathMatchSpecW
PathSkipRootW
PathUnquoteSpacesW
SHLWAPI.dll
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW
SHELL32.dll
DecryptMessage
EncryptMessage
GetUserNameExW
Secur32.dll
CLSIDFromString
StringFromGUID2
CreateStreamOnHGlobal
CoSetProxyBlanket
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
ole32.dll
CreateCompatibleBitmap
DeleteObject
GetDIBits
CreateDIBSection
CreateCompatibleDC
SelectObject
CreateDCW
GetDeviceCaps
DeleteDC
BitBlt
RestoreDC
SaveDC
SetRectRgn
GdiFlush
SetViewportOrgEx
GDI32.dll
WSAStringToAddressW
WSAAddressToStringA
WSACreateEvent
WSAEventSelect
WSAEnumNetworkEvents
WSAIoctl
WSACloseEvent
WSASend
WSARecv
freeaddrinfo
getaddrinfo
WS2_32.dll
CryptUnprotectData
CertDeleteCertificateFromStore
CertOpenSystemStoreW
CertCloseStore
PFXImportCertStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
PFXExportCertStoreEx
CRYPT32.dll
InternetReadFile
HttpQueryInfoA
InternetConnectA
InternetQueryOptionW
InternetSetOptionA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetOpenA
InternetCloseHandle
InternetQueryOptionA
InternetSetCookieA
HttpSendRequestExA
HttpSendRequestExW
InternetSetStatusCallbackA
InternetQueryDataAvailable
InternetReadFileExA
HttpSendRequestW
GetUrlCacheEntryInfoW
InternetSetStatusCallbackW
HttpAddRequestHeadersW
InternetCrackUrlA
WININET.dll
OLEAUT32.dll
NetUserGetInfo
NetApiBufferFree
NetUserEnum
NETAPI32.dll
GetAdaptersAddresses
IPHLPAPI.DLL
_errno
memcpy
memset
_purecall
_ultoa
memcmp
strcmp
_ultow
memchr
_vsnwprintf
_vsnprintf
memmove
msvcrt.dll
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
VERSION.dll
SetFilePointer
OutputDebugStringA
RtlUnwind
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
_except_handler3
? ?$?(?,?0?4?8?<?@?
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,5<5D5L5T5\5d5l5t5|5
6 6(6,6
8 8$8(8,8084888
8@9D9H9L9
9$:(:,:
= =$=(=,=0=4=8=<=@=D=H=L=P=T=d=h=l=t=x=|=
=8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>
2 2$2(2h2
3I4~4b6
<$<-<;<B<J<a<v<
=&=,=3=;=C=J=S=e=i=o=x=
>Q>X>a>h>
2}2O3u3
4H4U4r4
5)585E5
6(6E6Z6u8
9'9-9X9{9
9D:c:y:V;
> ?/?5?C?
3/3X3a3
3A4I4O4U4]4e4m4u4
829O9\9n9u9
3%333B3\3g3t3
444E4^4n4x4
8-8T8Z8g8t8z8x:
;);D;Z;e;
<1<d<{<
3,3H3r3
4%4S4x4
5!6<6c6x6
6 7&767?7R7X7
:#;4;X;l;
;"<Y<e<p<
5:6V6f6
7P7T7X7\7`7d7h7l7p7t7x7|7
7	8)8;8I8V8q8~8
9'9A9R9b9h9
;-;L;a;f;
<Z=i=p=
; <4<B<
?>?E?s?
4T6f6m6t6{6
7K7v7K8s8
9-:<:B:H:Q:X:^:p:t:z:
<$<-<?<X<u<
=&>0>L>
404O4V4]4c4t4x4~4
6&6-646:6K6O6U6]6c6
9$:L:o:
0 0V0[0
=->;>l>|>
?$?0?7?
829o:|:
;,;2;U;f;p;
<2<J<[<i<
= =7=u=
0#0+030>0D0Y0~0
0#1+1;1b1~1
1!2:2|2
5!727f7
8I8Q8m8y8
9!989>9L9Q9]9l9{9
9_:k:u:
;6<j<v<
? ?&?/?5?>?E?J?t?|?
3!3A3Z3
5j5r5~5
6#6.6?6E6M6S6e6p6
7%7.797
3)414`4
5=5K5P5X5^5c5j5p5u5|5
6$6<6P6a6m6z6
7*7F7M7k7x7
83999?9K9Q9j9
:2:8:>:D:o:t:~:
:5;T;Z;f;t;
<G<T<a<g<m<
=0=G=q=
 0-0S0e0p0
1G1Z1p1
3@4J4k4r4
5/5?5E5s5
6"686D6s6~6
;#;*;0;8;>;D;L;i;r;{;
=(=W=]=h=n=
?R?n?u?|?
0"0&0,020:0S0
3*3B3F3J3N3R3V3Z3^3b3f3j3n3r3v3z3~3e4r9
0!2S2F5J5N5R5V5Z5^5b5f5j5n5r5v5z5~5
6"6&6*6.62666:6>6B6F6J6N6R6V6Z6^6b6f6j6
172G2p2y2
7G7]7f7
:@:g:}:+;
4L4&5[5
9$909Q9l9
F1M1S1_1t1
1 2\2i2
455J5U5
6;7J7a7g7~7
080E0i0x0~0
161B1M1[1
1#2)242C2H2V2b2}2
3 3&3<3
9%999^9u9
?(?6?@?J?S?`?m?
2/262L2
3%3,3B3^3g3
5)50565H5O5W5
506:6G6S6^6r6
6.7;7P7!8'8p8v8
1'232=2M2X2s2
3.3P3d3j3
41474t4
52585P5Z5q5w5
5)696K6`6o6
7&838S8Z8`8f8n8~8
:):=:j:
>9?R?r?}?
O0o0|0
1A2S2Z2j2
5^7e7o7
8(8.8G8N8W8^8c8k8u8
9+929:9@9N9V9]9c9t9z9
<`=+>1>
?W?g?n?t?
0.03090F0M0V0\0{0
1*111e1k1
112k2r2w2
3&3T3u3i4
5'626P7
=<=P=\=c=u=
=!>5>f>
7^9m9{:
?#?M?p?w?
1'141I1`1v1
3 393n3}3
545N5o5
616B6L6d6m6
717?7U7w7
8-8O8]8s8
9'92999@9G9N9U9\9g9t9
> >(>0>8>
7!879W9s9|9
1R3Y3y3
7,:3:h:
=#='=+=/=3=7=;=?=C=G=K=O=S=W=[=_=c=g=k=o=s=w={=
>#>'>+>
?#?'?+?/?3?7?;???C?G?K?O?S?W?[?_?c?
5-595c5
< <1<7<?<J<_<e<Y=
040A0s0
171O1T1
3g3r3~3
5%5)6;6^6}6
9 9%9*9/94999>9C9H9M9R9W9\9a9f9k9p9u9z9
:$:):.:3:8:=:B:G:L:Q:V:[:`:e:j:o:t:y:~:
;$;);1;7;>;D;K;Q;X;^;g;l;};
<$<m<z<
>6>>>{>
1	2I2k2
3=3N3f3
6E7O7S=|=
888?8F8M8T8[8b8
3"3.3:3N3`3l3y3
4*464J4\4h4u4
4#555A5M5q5
0%0/0<0
9d:j:&;,;2;8;>;D;K;R;Y;`;g;n;u;};
>_>d>t>}>
>L?P?\?`?l?p?|?
0 0,000<0@0L0P0\0`0l0p0
0,0X3t3
4$444D4T4d4t4
5$545D5T5d5t5
6$646D6T6d6t6
7$747D7P7T7X7\7`7d7h7l7p7t7x7|7