Sample details: 93e08fb942ab4333c80ab5ffa509883b --

Hashes
MD5: 93e08fb942ab4333c80ab5ffa509883b
SHA1: 7e5278ae975224694a234a68cd71a9fa58a8a38a
SHA256: c19bccefe2ea053a7d67d460b9c711b0b4e2ded6cc9ffcd099858443eb7241a3
SSDEEP: 12288:rQ4NN4GudJb2wa3vUIiyIniGHXCp+IvvMKmpjFe5MVU3PhS8+:OLdx2CyoiGHX2vvMjj9U35S8+
Details
File Type: PE32
Yara Hits
YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsBeyondImageSize | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/contentis_base64 | YRP/keylogger |
Source
http://bbqdictionary.com/Information.exe
http://bbqdictionary.com/Information.exe
Strings
		!This program cannot be run in DOS mode.
`.data
.rdata
PQRSVW
_^[ZYX
]YXPQS
)4$WRV
V14$^j
QRSWVj
$X^_[ZY
>0/"F/
?C."?.M
:>0> !"?.
 !/.$%!/.f4
;???_!/.0
!2/0! {
?.?8*?
.<#+"/
7?.781"
,!/.d !?>/-!/.
?.'8?.??
?.(8?.
?.N(?.
 !/>%8?
!/	><?
0?.88*
(?.08*
<?.0x?.
/?"/8!
?.(x?,
";(?"/
<%9??[
.00+="
 !/I.&?.>(*
4 ???/
. '!/.d(
0??g"?
?????/
*'?.0?
?.^??.
,????&#";x
$!?.. /";X
$ . 8?
??.081"'
#"'8????
25h?.(1
!*/.0*I1*	
?.0x?.
;???*}?.
?.88?.(?
"?(!/.$
?. 4?,?
?'.(*?
76!/.& 
?.	2??.?8
8*?.}0
& $?8??
.00?3.
?/. ?.N
L9???/
4/???/
."8?.0
q(0!.3
27(?.7
*'(?.8
d1;??7
#00?.3?
???1*)
"/(?.0
;?.'8?.;
??S.7?.
5??.78?.'?
.(+*?.
?.(8?.?
l$&??[
.<!/9.
>7R!/>
5>;::=
#(!/	>0?.
*?.>(?.08?.?
*?.>(*
  ?7??
L80=2=
????12/
?.78?.
?.78?.?*
"7(?.7?
=?.-8?.;
 L.8?.
>$/"% 
(?.=8?.
?.=8?.7
\23??'
?.N'?.
!J.????
1J6????!
????$11
?-N>?????-
#< ???
%:9#"38`1*9
11<h???
?.(8?.
0?.(8?.
/!?0/!
?.(8?.
?.7x?.0
?.(8?.
2?(#"(
L?/???
?.(8?.
$*?.=0?
"N/01%<
O8.0&-
00????
?.7x?./
??.08*
!2?0!)
0?.?8*
(?./8*
'?./8?.
L.(??k
 ?"/80=
29"##"8
#?.08?.
8?.(x?.
(?;.0?.
<;4" "
?3.(?.
L.%??'
20?.08
*?O.0*
!/.$*?.?x*
. (?./8
$?.?8*
.<?.>?
(|>#1	
!/0'!>
!?.,0*?.>
1r!>??
1r)>??
?.?8?.
?.08?.?
>00=?"
# &:{:
T		??G
#L0?.?8*
,(./!"
%:9?"?"
. +#"(
(1	3 ""
?. <?,
 W.,0=
" 0=O>
0!:9???
>p3?"?
??.08?.?
0*s?.?
>(#o"/
"'(?.'
.(!/I0!,?
!?.,0*
0#7"/2
"'(?.'
#001*#
2" &#G"
*	*?.0x
?./8?.
>(?#.+?.
?.;x?.+?
?./8?.
?.(8?.
88. #"
?.?x?.
#"n/?????
"*?.^#?.
.(	?.#?
(!?0/!*??
?.-8?.
 . g= 
&# "q(
'/!/.d
0:&??o
">0?,!2
D.????
. 8?.7
??.?8*
>~00-"?,
"?(0-"
!2?.,!
!/.$6*?.
.0?O.(
.:!"/.
. :1*8
?.^0128$
#<0*?.
*'h#"3?
!/.$0?
?..7?.
??,_?.3?
?..7*?.>?
(?"/80="5
2<&#"5x
/?.!x*
*?.'x?.
.(!/I.
#|(12+(
?.8x?.
.,>!?., 
?.>??./81*
#|(?./8?.
0>4?#,9
**#"~/
/?./8?.
?;.??.
?'??>/
*?(?.??
L*???_
.?x.(1*
(*?.>0?.
?:. k#"'
7;. #o"'
208?"0
/0!#{???
?K.??.
$.> #  
.2'#  
>0#W"/??
"/8$??8
?.N??.
.;x01+
.4?#.??.
 =90""
>4?.n7?.;3
?.08?.??
#|(?.(8?.
1.????
?.?81*
>00'=*
>t5?"?
?.8x?.
."8?.;x
?.n(?.'8
???/?.0
?.>0?.
..@!?.8
>?8 .0/i
>?8 .6
0?.78?.
."!?+.
T.0*?'
!/	0!!
\=???k
,!/0g!
0!?..8?.#
01)j2????
)*8???
.  #"=
>?????.
1)J4????
.61"2;
!.(???
"3(?.7
!6(????
 8?,	?
?????.
.<?/.%
?.n%?.
!&(????
?.N9?.
6D?.)?
?.38?.7
?.38?.7
>78 .0?'.4*
. #o"7
/.;?k.8?.
6?.n0?.
?.08?.
?.n8?.
0?.48*
?.$4?.
" 40= 
.$0#-*,
?.-8?.
8?*?.7x?.
.?.48*
6F?.0?
?..-?.
.(4?"/!
*-*#"?
!7?.08
>(<!?.
2J7?.08?.
?.N0?.
?./8?.
0?.(8?.
?.+8?.
 .0!?.
7*?.>(?*
???_?./?
,=*2#"
?C./*?
.(	*?.?x
2~00= 4
.4?..0?./8
*/h?./?
#<0?-?8???
#"#8????
?.=8?.7
."#/"5
?.-8?.
?.-8?.
?.98?.
)?????
	?????#")
.8?/.1
l*#??k
.81):>????
#!>x????
????????
!2?.8?
00!)28
.<B11:?
1*8???
=J*????
?.78?.
????>8
2????.3?-
2????01
),8????
(!/.&3
$????01
L--??{
$????01$?
?./8?.
18(???
!((???
)88???
18x????
! (???
) 8???
?????!
l<-??k
?.78?.
1/(???
!#(????
)'8???
1'8????
)^'???
&?-~'???
1'8???
8?.78?.
1!;(???
(?-;8????
8???>~0
?C./?.
\95??;
?-=8???
. #/"7??
x???&|
!5(???
!	x???
!)8???
!5(???
!98???
("!/9.'
!6(???
!/0'!!
8???*}?.
L3%??;
!*(???
\*%??;
)"h???
!^"???
\=%??{
?-28???
|#%??+
1~5???
.(4"!/0
1<x???#
!J,???
!N4???
.0##!8??
.0##!8??
#'!8??
11(h???
r.8$?+
?>????.?
~.8?..0
=!?.n4
? 7. *
?.08?.
(<????
?. t10
(*w1 -
"$ 0C!!
?.78?.??
 001.?
8.8?"/2
>/8 .,*a
?.38*?.
 0-*<	
(?.+8?.
?.?8?.
,?3.??.
*+(#"3
?[.'?.
L4>??[
011q????
>2!/>e0
0???1~2;
?,?7.?
014>???
32&#"]$
(&e#"$
24?.??
#|0?.?8
?.08?.
\26??[
1).(???
!.?#??
"?(?.4?
?,*5?.
5?.58?.#
?.>=1"
?.#8?,*?
?.n9?./8
0#"?8 
(!/	>,?.
?3.0?.M
L*1??w
>N%.. 
?.?8?.
=?.78?.
>%8.. 
+?.58*
?????-.?
0?.(8*?
?.(x?.
?.(8*?
?,?7.'?.
???o?./*
"?(?,?.
(?.?8*
"?(?.??
`&#"$t
??&=#"$
01$<???
?.0x?.?
?.=8?.
'?.0812'
. >?.(
.4<>9::=
#|0*?.
1)J;???
3?.38?./*
!?0/!+
"8?.N#
28$?.8
!4?#??
?-08???
?S-0??
????????
!,(???
#!4?k??
=4?#??
?3-0??
!"4???
?????.?
1!4(???
	>0&#W
15(???1~!;??
)/(????
?-08???1
6?????.
?.'8?.
&?????-&?
?????-
?????.)?
?.)8?-
?.58?.
?.!8?.
?????-
?-..?????.
0?.!8?.
?->8???
1!;(???
?-68???
8?-28???
, .2$&
!"(???
 ?????
11;h???
?-<8????
?S-<??
(?-*x????
1!*;???
=08???
110h???
 ?????.+
208.$?
.$!/9.
>(82. #
!/	0!5
.01"J3
. ?.N?
$?. <?,*
k0?.?x?.
"/h?.(?
4(????
?????#"(
.8?+./
?.78?.
!,(???
>t)0=2
1*.????0="
!>(???
????0="
?.(81!,?
8*?.0x?.
?.N(?.08?.
?-68???0
6?????.)
8?.	8?-6?
?-N6?????.
#|0?->8???
=:x????
.(?'->??
Q2?./x
?->8????
?.+8*?.
?->8???
>?????.;?
*?/.?*
"?(?.?
!2/0!/y
?.N;?.?8
!2/0!0y
!2/0!3y
!/0'!9
!/.$:1"(
. ?.>(?*
'?.,t*
.(?/.7
> #"d8?
!/.&(*
3?.?x*
8*?.>?
. /%"8
.r(/# \. &
/# 0{!%
#".75#"'
#".7'#"7
.()*?./
"7(&!/0g!)
?.>0*?.
2 t0=0
v.8?.>5?.78
"#(?.#?
")(?.)
?.)8?.9?
????#!"?o??
#y!"??
#!"?g??
!"?g??
)"?k??
1<?o??
&)!?. 
. 00-3
?!.:????#!"?g??
="I???
.????*
:????.
????1 1
:?????-.?
/?-*8????
1,(???
,????*
#|0?-68????
168???/
?-,x???
?./x0-#
1"?o??
."81!"+???
?!:8???
.$0-?3
!&(????
=:8???
2.71 2"
2?????.
*????0!9
??-*8???
?.38?.
)8(???
!((????
!4(???
!88???
1/8???>}-
?????-
!?(???
?S-???
!?(???
148???
?-N(?????.
8???*}
???>|3
=+x???
|.$?->3???
(?????-3?
=. ????
$????.$
!$(????
1N ????017?
)$8???
0?????.
?????.;
!#(???/}"( 0
B../"'(
?.N3?-
8???*}
!=x???
?.38?-
/"( q.
?.38?,*
.0 *?.
(!?.,8/" ] .
#" 4????
!?.,(*
?.?8?.
7/!/0g)
0?.?8?.
+?????#"
#00*?.
0!.:???
*?7.0?.
(!/>$,/
%?.%8?.0?
?.%8?.0
0*?.>/
N ?,	0?.(
.(4!/.
?????#" 
?./8?.
?.$4?.
")(?.)*
1&??/?
!b>???
)>?k??
?.N	?.38
!>y???
?.N	?.38
!>y???
!?.!8*?.
?????.?
?????.3
):8???
L#????
(!/>$</
>(?O.??,
0&u? 0-
y?0!!y
?.M0?.78
015????
0!>:???
?.08?.
!?.,(?.?
2080= 
M 0-"4
;.(!/I.9
?.N=?.
>>-*?.>
00016?
7!/	0)
$"x.2/
**?.~?
2^&?2(u/
/", |.
.@(0-2~7
,)7??/
.*0O-"7
"+(/"(
*?.>0?.
!/0'!>??
*?.>0?.
/", \. 
/01*=???
0?.08*
. (/" 
**&#w"/??
.@8?.$4?.'
$ 0C!(
'.(?"N7!?..
$?7???*?.
?.08?.
?????#"3
0!'3???
.41&2/
?.08?.
?.08?.
1!J/???/
1=4h???
),h???
???8|#!2?
1*(???1~!
???&}# 
?.08114?
?.(8?.
) r ???
0/-!/?
?./8?.
(#"'8????
'?????#"?
0161????
."	0-:
"'(&#";y
2;y014
*;x01(
*^=.0&%
*^;.8&i
.,t!/0!
+01 1???
S$/"8Z
*+(/"+
.0/!"8
?.38?.
/"$0s.8/"
?01,3???
?. <?,
T26??3
?/,?. 
?$L)6 "
0o-(">
0-0|">*"
#* ???
)>(???1
";(?.;?
(?????
?.#8?.
 ???7?
&<????
&<????
	&,???
?.(8?.
?.(8?.
8*,.#"
?.08?.
?$1244"
$;.0# 
j.(# -
."1"	?
0!N*????
4r>,0!
D. 0==(
0<???o
.. ? +x
..## #
?>#?"/
:(>;@*
(0>-?.>
<!>?.+1
*#?.0?
?.$8?.
*?.>0?.
?.N$?.
:?(> !"
!/.&$?
c? . B
?o.011
L<;??k
<8A$0)
!?.. <<.
"3(#"+
!r/0!%r
>$?.N;?.+8
l4+??[
 E?.0?
?.08?.
?.08?.
0#7"/43
?.(8?.
.??.O0
.?!?K.0*
>?4?.0
?# #+"
??.~31"
2_ <8 
#! ???
1!1(???1
1!J!???/1)3?
?[?-!?
??+??.;
???O?.#
C?????.5
"~	12)(
????1!.?
1!J6????
????1!"?
1!*(???
4????1)
?'??-,
????1)
????118?
??o?-8?
1R!$??
????- ??
1!J0????
1!/(???
???1~!3??
/?/??-+
???1~)
1R!#??
?[1!-?
?1n!3??
?[1!(?
?k1!.?
8 (<U 8 
	#1)	1
0#!&??/?
???o1"
>???o!
????_<
?.08?.
!?0/17
6.&6H6
??O??$
1!5(7??
?"78#"'
1!J%7???1)
?{?-%7
7???1)
(1>!17?
1!J!7???1)
?[?-!7
1!J>7???1)
?k?->7
1!J.7???1)
?k?-.7
7???1!67
1!J:7???1)
?K?-:7
1!*(7??
?{1!27
?k1!"7
?k1!<7
?k1!,7
?K1!47
7???1!(7
 ?2#80!<
?{1!17
?1.!	7?
/??1~*
?.N71"
#? ???
???1~"?
0!~.???
/???1"?
/???1!+/
#/???1"7
?K1!-/
?/??-%
0!73???
1!%(/??
1**'1"
1J*'1"
1J*'1"
1J*'1"
"?80-"
2!/0g1
??O??0
1!%(???
???/1)
1R!1??
0!7:???
?./81!
1!>(???
1!.(???
?K1!%?
1!&(???
?{1!!?
<0???o
+??1>"
'??_1"7
97??o1"
#? ???
???1~"?
??o.'1*
0>&1"*/
?S.'1"
1!J)???
?[?-)?
1R!	??
1!9(???
?K1!9?
1!J)???
?k?-)?
1!J!???
?k?-!?
.`&&:.
1!1(???
??/-1??
1!J	???/1)
?k?-	?
???/1)
6???/1!
???/1)
?[1!9?
?{1!.?
?[1!>?
?1n!1??
#. ???
1"!9??
1!	(???1
??o-	??
1!J)???/
1!J!???/
!???/1)
1R!.??
1R!.??
"}20!=
???/1"
???/1"
?1n!>??
?{1!9?
1)>(???
1):(???
????1)&?
????1)"?
1)8(???
????1)$?
1)0(???
????1)(?
??1>)???
?#?1)/
??1>)7??
/?/?1)'
6/?/?1)+
?{1!0?
?[1!2?
?1n!:??
5=+Q%='!
1&1%]"	9
7!	7H)1
s		-+h-5
??o.+1"
?S.'1"
>?/??.
6:66{6.
&:6M.6
1!J	???/1)
?K?-	?
???/1)
6???/1!
???/1)
?k1!9?
?k1!.?
?K1!>?
?1.!1??
#. ???
1"!9??
1!	(???1
??/-	??
1!J)???/
1!.(???1
???/1!>?
?1n!9??
1!.(???
?k1!1?
?1n!	??
1)>(???
1):(???
????1)&?
1)<(???
????1)"?
1)8(???
????1)$?
1)0(???
????1)(?
?{1!8?
?{1!:?
!7(33;7
/#7Q?#;;
 4</,(
???/1*4
1B!)??
1???/1!	?
??'?1!!
???/1!&?
???/1!:?
?k1!*?
?1n!1??
1!9(???1
?k?-9?
1R!	??
1!)(???
0!09???
?1.!%??
1!)(???1
?{?-)?
???/1!9?
1???/1*4
1r!>??
>???/1!
??o-.??
?1.!!??
?*-1!9?
)???/1*4
1???/1!	?
???/1*4
1!!(???
5?+?? ?
1!6(???1
?{?-6?
35@??? 
??o-:??
???/1*4
12!2??
?*m1!"?
<???/1*4
,???/1!
???/1*4
1!4(???
?'??.?
1!8(???1
?K?-8?
???/1*4
12!/??
???1>!???
1!7(???1>*4
?{?-7?
??O? *
????.?
1r)+??
1r)#??
???1>!=??
1!-(???
?1.!7??
?1n!???
?{1!)?
???1!?
1!0(???
0!*3???
!*????1!;
&6.d*&
&6.d*&
#* ???
,1!*h???1
*??'??.
#3 ???
. <?,1
1!3(???
??/??.
	?'?1"3
0)	??_1"
*????1!
?[?-:?
2????1)
?k?-"?
12!<??
<????1)
????1!,?
?K?-4?
1!$(???
1!8(???
??o-(??
?1.!???
?K1!,?
?{1!<?
?1.!*??
.,,&,.
$$$$U$$$
    j    
&6&&.$6..&
'$$$$'
#4444'
38888'
'$$$$'
#4444'
',,		''
,8888'
'$$$$'
#4444'
666	,,
'))&&'
#55:: (:
]6665'!!!!'
',,:#,
;;;'55
M3666I((
5 5+75
2"5555"5555"55
!55<5(5
5555"5555"55
 5555"55
5525555"(555H555,
55%%'%%
$ $ f8 
 L= 6 
 & n6 0 "
 ( n0 
 f: * *8 ) &	 
2 ! "2 " 
 1 n	 , 
 	 f) ) *) : 
& . "9 9 
 = b= = 
 # b# # 
 4 @: : 
 L6 < 
 & L* 
8 . H. 
 L4 > 
 6 @6 
 H1 1 L	 
 9 @9 
 H% % 
 L5 	 
 @8 8 
= " H: * 
 9 H) 
 D9 8 J
! 1 H! 
 D, 4 L8 ( 
< < D( ( "< & H
 L" < D9 < 
/ 8 J5 8 
 8 *8 8 
,,,?,,,,
% % E%
3 3 F#
"2"$"""
"**c""22
*""""*
"2"j2*
    l    
&6.d:.
,,H,,,
62b6&&
"6.6y&
&.$2&&.$
&	2.66`
6	.&&&.
66<.66
66<.66
"&6&".&
	6&26#
.&2.*.&
"&.8".66`
&.8"6&2
*62.:6.
6&$6&"
&.k2&"
6*66d6
6"&.x*&6
69"&.*
69".66`
6".6X6
466c6&
4v666&7
$&4 $&
$&4 $&
6&<&<$&
,6&.&f
$&&6&".&
.&"6&6.
.&"6&6.
.&"6&6.
2.&6&*6.
.&:.,&6
6.&&K&
66<.66
66<.66
&.6z&6.
64&&b.&
&'.6&6
'66.6}
.&":.&6
N666.\
66<.66
(2*22`
.&:.,&6
.&:.,&6
.&:.,&6
.&":.&6
2	*""".
2I*""".
"v2"2*
66 6.&&
6&j<$$
66 6.&&
 ""2""*"
.&:.,&6
&0&6&.
&&6&".&
66G64*"b2
.&:.,&6
6&j<$$
.&":.&6
.&:.,&6
6.&&K&
6.&&K&
H2*22`
6	.&&&.
66-:&&.
6&6	&.
$66.&>
&	6.66`
.&":.&
.&":66&
6.:&M.66&
&A.66:
6X:66&
6&b:&6
:6~&66
&6&j6.
26&&&x
&&6&".&
6X:66&
..(6:.
6&*6..
.&":.&6
6.&&K&
<666&7
66 6.&&
2*$"""
66<.66$
&.6z&6.
N666.\
.&:.,&6
$""2""*"
.n.6:&
.n.6:&
.n.6:&
.n.6:&
.n.6:&
6&j<<$
66&,.6&
r2*""K"
&.6z&6.
66.&>&
66 6.&&
""B2"*""
2.&6&*6.
2.&6&*6.
,&.66`
'66.6}
&0&6&.
2.&6&*6.
&0&6&.
66 6.&&
"2*""K"
66<.66
*62.:6.
6&$6&&""
f6.&"*
6&2&r6
6&2&r6
.26&,.6&
-4&66@
&&"n6.6
6&2&M"
;.&6*(
6&**6263
6&$"6.
666v&6.
6&.&""
"&6&".&"
<&&<6<Q><!<
<#<s3<;<
,*,n&,6,&>,
<(<.8<
"<2<".<9<
<!<31<)<?
<4<H<<
<D2<*<
<L#<+<
'<7<D/<?<D <0<f(<8<f$<4<f,<<<f"<2<f*<:<f&<6<f.<><f!<1<f)<9<f#<7<f/<?<f <0<U(<8<U$<4<U,<<<U"<2<U*<:<U&<6<U.<><U!<1<U)<9<U%<5<U-<=<U#<3<U+<;<U'<7<U/<?<U <0<w(<8<w$<4<w,<<<w"<2<w*<:<w&<6<w.<><w!<1<w)<9<w%<5<w-<=<w#<3<w+<;<w'<7<w/<?<w
,Y:,6,
<=<H <
<-?< <
<"<;2<
),-,D+,
,8,j<,
,!,j%,
,?,j	,%,Q=,
7,),_9, 
>,!,U),9,
:,	,*%,&,i
,]-,+,U0,
<6<7%<
,.,f),
:,!,?1,9,w>
<,",&&,9,
<D%<;<D/<(<
3*,	,D
,;,@/,
,8,n,,
#,4,i",2,
<|<<%<
,].,),
,H',",
</<A(<
<32<*<
<%<i7<
<0(<=<
<Q'<:<
,t&,>,
,",?2,*,
:,&,{%,$
,#,&/,	,
w(<8<H)<9<
,8,?$,4,{",/,
<t+<<<
?+,/,c4
8<<<w:<><s
,$,N2,>
",/<u(<8<{
,&3,*,a
#</<??<
<1<D	<)<D
,Y.,	,]-,
,W1,5,;
,-,b+,;,j',7,j
4,,,;",2,
<&/<.<
,D2,:,
5,-,U#,3,
,?	,9,;-,+
<n,<3<U0<
<:<@'</<b
!<)<7-<7<3
.,!,H7, ,N
,n!,7,"4,
4,",3&,%,
<|6<><
<j)<#<
,n ,$,Q*,
,2,7>,9,s
<7><9<{
<"<3:<	<
<3%<5<
,.),%,
,","2,
,>,"!,
,-,"=,
,7,"/,
< <"0<
<8<"$<
<,<"<<
<2<"*<
<&<"6<
<><"!<
<"	<)<"9<
<5<"-<
<#<"3<
<;<"'<
</<"?<
<(<38<
<3:<.<3
<1<3	<)<3
,*,":,
,1,"),
,#,"3,
,?," ,
,2,3*,
,!,31,
,=,3#,
,/,3?,
<"1<	<")<
<!<3	<9<3
??/?/"$
. "0-:$
9??/?!
/??+?!
($ #"$
#L(:::-
$???O!
128$01*
,12$ 01*$  
0!&9???1
#(0:::
??+?12$
.,812$
<$???O
# 5+b"
??O# 5+b"
???_?.
$?8??>
4)???_
0>(1"2$
9??'?1*$
/??_# $
s31* $
 0? 9+
"?(? 9+
?? 98+"
p.0# >
 >0H# 
?04> =0
W9=????0
.+:?3.
#/00- 
6&:"@&6
&???_?
"???_?
;#????
+???o::
.???o::
#??'?# $
!;?#?:
7C??::
???:?:
7!?.,(
!?..0!
77??O:::
;+?'?!
d$+??_
???o::
??O!?>(
2>O'::
.81<0.$
<0.01<
"??/?2>
.<1<0.
<0.: <0..
<00!<!
?C??2>
'??:?:
20!.(????
# 2.J7
# 42.7
# 2.J7:::-
 /&$00
*7x05*
?A???"
.?82# 
=???_!
#?+?1"
?# %+"
5;??_!
0<#??o
 p.0# N
<!???_
<1#??O
?# :+"
;??/?:
;??/?:
?g"/?2
,2p2**,
g&&&&'"""
,2p2**,
g&&&&'"""
2I  &4
?# &+"
#? ???
?+?1)?
???1~"?
$| !-	
??_1*?
!<(???
?,16"/
*?(>>+"
??1~"7
??1~"7
??O?? 
??O?? 
6.&6I.42&"6&.
6.&6I.4*
?# 	+"
$+??_=
2+?+?.*
<+?+?."
4+?+?.,
8+?+?.$
0+?+?.(
?+?#?0!
2!7*01
?'?"20
 4 *-#
0 7I3=
$4 5/"
4 =I+:
04 !0+
0 	3$01
 >J/7?
!#?'?!
0/??_"
?/?1"?
?# -+"
0,!/. 
#?/?1"?
.#??_?.
0 1*7(
#??_?.
=#??_?
0#??_?.
001*;(
#??o?.
*#??_?
%#??o?.
0(1*3(
#??o?.
7#??o"?2?x0!=?
=??1>"
=??1>"
=??1>"
=??1>"
=??1>"
=??1>"
++?+?!
(+?/?!
2??/??./
>/8?.<
?+??.'
."01*?
#7 ???
'3??_1"
;5??_::
?./81*
#? ???
?#?1)?
???1~"?
"?(1"?
#7 ???
49=??o
)/?/??.7
=??+?!
9???_!
	6666-4&66@
%??1>"/
666v&6.
.4&6P6
/><#["/
%?/?1"?
"?(1"?
#7 ???
<.%??_1"7
??0?!# 
???1)	?
%??o?-
?/?1!<
???1)	?
???1"+
??o1"-
?+?1)$
#001"+
??O1"0
??O??0
??O??(
????./1"
9?/??.
?/?'?1*-
.&1""?
/??1~*!
1)>(???
/?+?1)
.????1!
5'?/?!
:????1!
)c/???
2????1!
9????-
1!*(???
,????1!
????1!4?
9????-4??
????1!(?
????1!0?
?'?1"?
)??1>"?
	?+?1! 
/	?#?1!(
+)?/?1!8
	??O1!
	??1>!4??
	?#?1!"
)?/?1!2
6	??O1!
	??1>!
	??1>!.??
)??1~"	
)??1~"
#)??_1"%
9)??_1"5
1)??_1"-
	)?'?1"
1?/?1"#
)??1~"
)??_1"'
<)?'?1"
"1?/?1"/
$480p >*
 />$U'
1)h?)	
1=3	%1'5
??O??0
7;7	#7#3
?-=3%m
?# =+"
%??o1"
!%?+?0-"
(,0-"'
"?(1"?
 !2-,"
(!"-,"
30!;, "
2(!;, "
(!"-,"
 );, "
 9-, "
 9-, "
0!"?.>
,!/.f7
.,4!/.'
(*r2,"
;>7;":7
"/8;"7;":
?05> 1*
"?8 )7?
&&&!U:
.????;:
7* ::M
|&7??_
"?(;"/
.8;&"/
."8;"/h
."&;"/(
8;:/;#
>????;6/
?.'8?.
?.;8?.
#$ ???
22>$0!
;"7(;8
9.0#W"78
0!N5???O
1"!*??
??_./?.
7?.(8?.
?.(8?.
*S???!
%>??_:
?/.0?.
?,.3,"
?,.3,"
!/.$"!
!2?.(*
?.>0?.
?.08?.
?k.(?.
?.>(?.
8?.(8?.
"0=8u!
"!0=8!
"/("0=8u
M"0=8u
>'$?K??>
4.."e0=8
2J?"0=
.0A?.5
-;:-(!
"?2>??"
?c??$1
. 0=-8
!6?/??
!*.????
16?o??
)6?o??
?./8?.
*0<?"0
?.08129
?.08?.
?.0812'
?.08?.
) ?H???
L4-??o
?+?!/.
?07!,??
8.01*:
.78!/>0
;2;;":;
;2;;":;
7(5!/>
(!/Y. 
.012*?
"0x$>0
# ?7???
????>:
*0?.N?
."<#!6x???)
?/.0?.
= 0?!??
= 0?!??
1)0(???
. #<3 
?7.8?.
8$?{??>
8$?{??>
8$?{??>
>.1*z;
!"/.0#C"?
(!/.$ 
s? >*@
?[./?.
**7=6<"
P)5??_
.0##"?
.0?'.0?.
"?8. &
/!v/0!#y
."'!/.f$?.
?*052>
? ;??!~
."(1*?(
?.(81*
."(1*?(
."+!/.
? +??!
!/>%0?.
??????.
7!/0'!
/$??/?>
L-:??o
*!?.0*
.0(!/.
0?,9s*
$=!??/
??!~?. 
.0(!/.
0?,9s*
.(<!/."
!&/.8#C 
?.n??.
M><1"J
?_.??.
  8.0?
."?../?.
*I*127(
>(?S.*?.M
80=	?)
7?.78?.
(?:!/. 
?.?8?.0*
?./8?.?
 01*p????
*/(!/0!
!2/0!%x
!/.& ?"
. (?. 
?./8*?. |?
4!/.d(
!/.&0?.?x
?w.(?.
?.08?-
 N . #
>43!/.&8
454??_
"?(#"/
!/.&(*
,+'???
?.78?-
.(?.N??.
!2/.0*c
!2/. *o
.4?'-+
!?.,(?.
?????#
"/(1*/
7?."4?--
.0o1"?
!2/0!5{
!./.01n
!?0/!.
"?h!?.
!?..8?
!/0'!1
<?.(x?.
!/.&41
1.2,?.0
**?._$?.(8?.?
$?.(8?.?
H	&??O
2?80-0
1 ?????
0?w.0?.
?.^8?.08
?.0x12
 ?3???
?.~(?.
?.?8?.8?
?.?8?.8?
*#(?.#?
>*1":=
 D?.(?
?.N(?.
.$?#.0
?.08?.
2n70-0<
0!63???
(*?.>0?
 >,1~2	
.0	1"*
?s.7?.
0/!0??
?.(8?.
3?.38?.
(?"?8?
?.N(?.
;*2.0B/"(
>'#]""?:M
0-:=00->=
S &#"]
.;/0-"=
#|0?"?8
>p41*?(
?.0x?.
( .P(0-2
2?0/-.?"m0-#
0-#=0- 
>40K-3
<0-2>/
0-">/0-2
2(l&#"
?.(81"?
#*?.?x
.$?'.4?.
.7!/).
!/.&(?
2/h?.8*
?.(x?.
*08.=?.
(?.78?.
:!:/.*
.p0?.4
*4$?.?
? ?.?8
?g.7?.
!:?0!+
?.'8?.
!2?."?
?.;8?.(
?.08?.
?.(8?.
.(?..0
*780- 
"780- 
>(?{.0
.0##"? 
0=-2"&
"/80-2
???O&#"
l"#??o
.&?.-4*
.`$?";8?.;*
!?0/13??
`/1??w
0?.8x?.
T%1??W
?./x?.
:?8?./
.7x>5!
2'80->
/0-"4  
#) ???
!5(???
)-h???
11,h???
!9,?#??
)9"'???
!9'?!??
1!J,????
?-9r'???
!92,????
!N5???
???1~0
"	(0-*)
!.-???
01=1???
000-*'
=9'?!??
!9b'???
/)90?#??
!90?#??
-90?#??1!
0????!
*11:5???
!9 ?#??
!-2=???
!=2=???
!==?!????
!128?????
1>(???
!>8???
!128????
1.(???
1J6????
9)0?#??.
?????-
???1~* 
8???&}
?????-*?
013r???
!-/?!??
15x???
2?????-
1-'?!??
:>/01 2???
?????.?
?-92,????
>'?->-???
.`(1"?
 ?.n/*
"!?0/!
4.;??_
 ?S.7*
*780-"
*;h12;
27x>(#
<?????&
& ?[?&
"/(?.7
.B4?.(x
"/8.;?.
7"0-><
**/#"84
.*	?.;
:#81"#
**1>z5
(?;.(?.
?.08?,
?./8?.;*
1/??'?
7/!/.f
#0!/	.
!/.&(?.
!/.&8?.5x
>0?.](?.
<	????
>(?.M(?.
*?.>0?.
2?h?.?
 !/.$ 
?.N0?.
?.(8?.
# 4?.?
?.(8?.
L$???_
>(D?.0*
7?.08?.
!/>&8*?.
?.'8?./
:}$>;:
?0-*=*
?.78?.
?.78?.
0!::???!
?.;8?.
#|0?.78*
/y# .<
?.N7?.
?.n7?.
,!7???
:!?.,**
. ?'1%
* d&#"
* d&#"
&* &#G"
* d&#"
?.0<?.
';"'(;:
(;"'(;:
; ;$8;
.(@?. ?
 ?,?7. ?,
0?.58?.
?. 4?,?.
0!!4???
2+8011
+.,122
L<4??w
t(????
?.08?.
1 !/.$**
"?(!/.
,*?./x
"J?!?0/1!
>8!"/>
?.N0?.
?.N0?.
!/.&$?.(x?.
!2/.$?g.(?.
?.08?.
?.>0?.
3*1"3h
..>12:%
,1z -/"
)>(???
!1!>(???
>!8?.(
!?.09#"!
.?????.
6=;!.?
6????;96?
.????;16?#??;9
;!.(???
.????;=6?#??;9
>!8?.0#
!&(???
!/0'!9
!28???
!*8???
<2!??/
)<y???/
|.,/!6
/!<?o??
?c??0.
????&$?
/!<?g??
!*"????
)j"????&
!"8???
="8???
),(???
????01
=$x???
0#!88???
0!.#'???
)((???1
!2/0!7{"
1N;???
?-08???
?-08???
!'8???.
????0-
?-N0????
1?(???
!?8???
1?x???
)7x???.~
1^(????><
!J????
>r$&#"
) 8???
 ????# 
)+?m??
?s!#??
!#X???
!	8???
!2/0!${<
)!8???
?;!6??
=.>???
?-*8???
!/0'!6,
!"(???
!<8????
	!?.,0
1J$???
!8(???!~
)/h???#
0!=23??;
/Y! ??
.`0?-68
!/0'!04
=/8???
h???1~1
???/10
???/>=1!
!'8???
???/?-#?
!N+???/
1+8???#
#!=8???
(#!=x???
???/???>
=???/?
!=(???
???/1)=?
%=8????
!%(???
))(???
	???//
!%x???
)98???
!*!???/
?-!x???
).h???1
???/?.;?
!2/0!,{
?-68???
1&(????
?-N&???/
?-N&???/
):8???
1:8???
2???/1)*?
???/?.
1:8????
<???/1!<?
1^"???/#
/0!'{8
=<8???
,???/11
14(???
4???/?.
!48???
>.2(?.
!/0'!>8
)8(???
% ?-88???
!/0'!+8
1((????
!/0'!98
!(8???
)* ???/
!?8???
 <?-??
)/8???
*3 !2/0!={
!7(???
1'(???
8?????.
1#(???
0!4:-??
!)(???
)9(???
!)8???.>+
???&=#
!N9???
!98???
!N9???
)98???
198???
)	8???
!J1???
?-18?????.
)>h???
1>(???
(?????
!&(?????-&??
???0?!3
8??? >.0
=.:???
=:8??? >. 
/.4?o-:??
??? <.
(?????-
!/0'!?
?&60!?
)2?,??
!/	0! 
/0!.{ 
!/0'!" 
8?????.
!/	0!# 
!8(???
)((???
!$h???
) h???
???>>,
!/0'!" 
?-(8???
!2/0!${
?!/0g!7
?&40!!
#0!/	.
^>;0=/"
$. K#"
"?(!/>
?.N(?.
L*.??{
."$*?.
.+I*127
!/0'!1
.8?#.0?.
?.n8?.
:?x0-8
?.~8?.
0-2= 0-"}
?.08?.
.<#/"/
.M !/.&+
?.081*/
D{`fgs~S~~}q
kernel32.dll
ExitProcess
FreeResource
GetACP
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
LoadResource
LockResource
lstrcatA
lstrlenA
VirtualAlloc
VirtualProtect
kernel32.dll
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
GetAsyncKeyState
GetCaretBlinkTime
GetSysColorBrush
GetWindowDC
IsIconic
IsWindow
LoadMenuW
SetCursor
ShowWindow
user32.dll
ImageList_ReplaceIcon
InitCommonControls
comctl32.dll
DdEntry12
GdiConvertBitmapV5
gdi32.dll
GradientFill
msimg32.dll
PathFindNextComponentW
shlwapi.dll
GetFileVersionInfoSizeA
GetFileVersionInfoW
version.dll
GdipDrawLinesI
GdipGetFontHeightGivenDPI
GdipSetLineWrapMode
gdiplus.dll
OleUIEditLinksA
oledlg.dll
~snk6$
}rmv6$
%>-%;O?8R<+"W7%
i\U}4#
gZSu4#
L;*!W^QJfK<4T7&
			0DEF
??????
??????
??????
??????
@@@@@@@@@@@@@@@@@@
ppp@@@@@@@@@@@@
``````
```000``@
``````
```@@@
000000
000000``@
@   ```
PPP`````````000
@@@@@@pppPPP``````PPP
000`````````
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
advapi32.dll
AccessCheckByTypeAndAuditAlarmA
AccessCheckByTypeResultListAndAuditAlarmByHandleW