Sample details: cb4797412b72636ca0d8a471f8fcee01 --

Hashes
MD5: cb4797412b72636ca0d8a471f8fcee01
SHA1: c30d226a024b5f6a09af71467a540564ab7b7fe7
SHA256: 6cd68f13d54745edcdc5e0ee4101a5b5d0adc1773c547d021370c9818d366fd6
SSDEEP: 24576:/2lYLAk//8CW/48pnKvusBOHAXK0owz3LnIyaX:KEL/kuiMu/+K0owTjIya
Details
File Type: PE32
Yara Hits
YRP/ASPack_v212_additional | YRP/ASPack_v21_additional | YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov | YRP/ASPack_v212 | YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h | YRP/ASPack_v211d | YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional | YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey | YRP/ASPack_v212_Alexey_Solodovnikov | YRP/ASPackv212AlexeySolodovnikov | YRP/ASProtectV2XDLLAlexeySolodovnikov | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/suspicious_packer_section |
Source
http://lesfaverelles.com/images/CHKDSK0.exe
Strings
		This program must be run under Win32
.itext
.idata
.didata
.edata
.rdata
.reloc
.adata
EHtR*U
@s)\|u
>XZWY>j
rp?h>0
v7Lvs7
t:ASX`
DC4T5H
k<?IWO
;=F+	K
\N0N,N(N$O
N^\dNb
oN%	P4
&4!aO"
>zpkS<
G9d>r6
 [T+vc
YBnlpFx
=M08:c
P*L,k4
	ep419
^]@/84
8vE`l)
4MkEIZ
*=r|l5
kJR/i{$
 n1Cf(
!]:hA?
+oQ>_J
OJALx)
$AsgAU
k)F*"Z
RNfZdl
Qdu/]s*,
afQ~wQ(
h*~m	g
nC{[kh
/l*b^#
#}YQ_(
Y)Pjxzp
vkO W>4
:e8?pd
T,EA]Ze
qyb;3z
d&V~_j
zPfm+q
NI@X:O
ioFnG~Y
q23''FL
2LR2)&c
5c)#Zv
*u>q7;
LDon@G
&Q'l0O
2^A' D[
,v.uq#Ih,4
e2<NTP|JE
37SM)Y
s>r"bR
IW.}b54=
^/%B9^ I
_"\M\{
yoalM>
Cr5."jB)Ard
PZQy(<z
SeUW	1YU<
9ez4Qq
&!0	xK
0A^:R'
ArrNcc*
~M0%|H
@ (4@(
&6FVo	0
\m\n\o\
8GXTa@
t._\1]
KTmdnd}
Q!EqT 
YcP|TC
Y +TGG
IURR=z9
JU!MA|
/qJ8uk
"-HOT&
9jT#w|'8
<8V}q 
P{/}tePu
!hFtWA
	QhTKq
T^@OH&
?^?(U6
3FQUt2
Bk&i:/
_s<=vn
pH_f=AT
Zu@7d[K
\w	5VtS
] /Q"^
=UH#il
HTFfX#
G%jM	xV
k$$s4}
wNN[17
}+u#pgJ
rlwXH2
^H|Eg\V
i}CE/	
a-n$c;V
mbY?XM
	K"v^ 
gfvCgy
Q	FY<nF
B[AmR5H
m[YqnU
AVgoDZ
P>]$VI
%'XZLR
YbXWG!
e4uQ^>Y
By	5RD
a(VKnksZIJ
XDX%H)
b{MJQd
eVmX*s
G17d`1!qYB
[~7(iU
Yy`V$4]
{u?pUw
Rq1/45O`$>
!35k{{
t=4Q6 Rl
Xxp<d#*
Of79}Z
RMf++:)
+: r8i]
Cm5&M?
W=;	LY|
I)$HfJ
!I*~CvEY
;?0Tj*
TLyxQ>J
'yatx[eF
td~Gj<
5pH?vS
Gmun6=5U
MHAzcI!
MgpX$w
$4fe{|
Sqz1PE
Ue+{y]
Cz(oF	
N#sf+J
/T7lxq
uC+rr	P
TQp"*,
ssqPEE
D73RPxH
M^"Bbf
V3dJVI
p!`4J"
v$2b?t
om61m~
-HO^/7Y
ya]gY>
`b'Y.@z
:.o?0\]
O::;A@
;~oxzL
xJknG|
wS_5[.
_V9x(ri
4s3UcfV
q:o}2eR
2s}OP9
RSTq<U?
_Y:q6t
aTP:)8
dmt:7da
E&:XzJ)c
*s(`3cd
Y65P=U
azQz`)
7O p^K.
9i[q>a
~s29FX<
P`2A0$*`
i-DZ=aN
Z0AI|%
dJtK.(
a[tfiC.
F],=Rt]
-iC.>x6
.+.+.;
,jPBJ4
2Mq]Ms
sr	,1A
}k o&H;(
5f{6j(
RZd5n]f
etIA,u~
:A '|_{
UqxQwQ|
2jVyo-|
"'J[q	J
z LYbC
#jqYFj{
m.+(1Q6>
~#w}2\
QNL	QbT{
w>;i1DM
y@Yn:I
j2 pK$
CLX6	b
8M_J#F
E)Nt?A
sH/._4:
p-F/Z$@
.9$ M5
M+P/UZ
\AYZ+X
d<ctDU
! z-u}
-Ir,D;}
Fjx18s
;R#9MR"
o#qPVW
M1\`u!
w.*L!2
WhoNf/
:s +Aa"
oJ!E79w
D;; Z*b
NeD5"+
j&U7/R"
a-$_Z+8
oef|#XT
G=PFvC[
4=&4e,
hI=^yg
:K=)5RA
tGPS|	~0+
!?))RWS=
Y/+	y$
<IbRjJk`(
Fpof8bo
pr.S\m
,zt>?u
pkLm h^
pJFD0C
RFj-$V
;Jhs1*6a9H
%:hJhm
Sr7}Fb
-Al|w:mCX
U%e]hWl
'}8b2i
*SWys1
GO?y@|
#GmONt
A~uEx8
wF#K1<
TX@W]{!
#!B1.U
T({<fW
MD9^*!
bO.bOK
a{Q=	:"X}iwb_
;oQ!Jp
v@Yb.f
j5R2L6
6:g	aX
(#i	VT
k$adNw!h
Yff\V""
(.`W2G
2i\xidx=
I2B_o$
?nvG>EF
ijcEzl
qZ66ZE
%TO/Ham
+7R/eq[
.#F0C&
~YqO$0
	`H8z:>
_so/{7
7QjJC1E
op/hIr
;vt,3[_
@3'*Tp
>h6ucr}
_z]v;[
]B +d'
/)z<D~
ZK	wlP
R'+4N6~
Zr8Vi,
iLJEb#M
Z]6Daw
'hX,&o
7P{`gY
0ezxJr
;PEW\	
&	%;_@p
	?>B>k
VcfMn{.Z
<y4{k&
MG	dNk
v$-FSTI
9pJ~h,e
#!PQ9e
. 'Y\q
i`b=t*qn6b
 Yfy &
FgB-n/
(+PP!rR
ED@@pd 
Yt;,'fN V
|JYVSi
N&>iCl
h3VY8R
Dy]%md
He`z l
xLx]@a
.k(;0r
[c	N[!zmC
<ql3)`
J6>7OD
KTNksS
>$mWXy
WI[Y/_
 ,FTNG`p
/6&HC,
~I,ZspD
u%"Bu-bLC
%YabEp
jWMuB'
[P1 a@
	4wl@j
y} _:.
|CFf@C
Xfm8fmq
)/j^H(
Af5Ue%%w
}$]\_T/
,`9hhd
_c`f1-
Qc\CcP
 J7T.(
g19cjS0&
{(emx`
1C'mn/B
Srb.n!
Jx=`w<
-d]_89
UuHhr~
IV_U,2HT
3~VpCp|G
wxlA	V
6SAr8G
vGqP"H
9nq^jzW
^\jbd7,
Y1'uuS
F<vqUK
BE9'|PA
cX-53W
t}hTr|
cD-5,y
/\+.Ne
<41boc
(S4&G<
X<yTju
G_Qu:X0`n
)b{Z7q
:^Ai6k
"QDO{L
n	KYOW
)YEqi]%
k?UO_h
mIy,#?u
$$m[&E
|a:.}K
o~~Ntc(
'N9o]h
2p~i`)
YvCKnh
5/pN(n
N\O^Z&
:^B<GR#
ady>q!
zlgx>TD
o&Fz^Vb
#40P|{
L5y!'4Gs<
&h-.O6
a%K"|:
l\^u"G
aN<IF_
q~G.T4
Z(8]YmA
RJ=MO]
S\Xr>!
ZggnWB"
h%7q>0
c-1+0^4
xkmjA_*
7.8i<q
c-1+0^4
\/Uz@N:
vre2B1
j*(;KR
\CES8.>
(V*.N&c
L(9cE 
1]`)K$
z(ksH{
h.{oA;
h~^j>i
paH'sr)
9_0\)Z
E(qoC1
MvBW(/
l#iiqx
#^Ux,h
|Y,qsm
B/2N?n<
q:[b7l:
^Ka{-0r
;LD++2
D4X`9E0
nbU79/&6T.f
o<5@cF
R+/&/S
%<Op@	
K{q,'C
aakwf-c
M<lhy<ly
W	N=G^g
3=$X9@
3%<X9@
3mS'4g-
ghRO{u
yytDFQ?
C3,4-E
82N"gN->Xgdr
::f}5H
Ean.N>g^.
")/3^g
>Jz.| 
snE/~N/
1x5{e=\#p\V3
rRlXDHY
x]kd,^rB
IVS_/3
{g&{CF
m0F=pu
v	;j#}
BfEC1*Zc
"Y,@wC[i
`cT3DB
jvvWdT
Y0;P4[
>c3"LN
@#,iN!.
w5!24%
=I!^8ke
<]=eU$
>kT"|N
1xE!-HC
!iw^Bo
#p]Y5b
06zm>I
FZHe0L
J;AVBC
@#K52@a
yAy>*Y
9:jK<u
TATL0zTi
@)x[DY"'
l{;!s7
/n@zZ~H;
pYhYpYxI
4(hI!%
an!nAnaU
R90<;"1
M^+=TE
uNZw<^|r
C.Ij(j
MRi4FYP
IZI :(
Xc\6EI
#gQ8i)
%[$$Al
Pr4THFRk
]_fY)MB
C1w{Ig
ke[P;Rp
qS2D#F
PSd@,#
Z:w60^<o
9NAkd$
G+3*.'i
5EC(VG
RsCYJ3
XR=PjS
8#IV7-4
@91E'N
^#ADY~
D,>f}(
-#4M<$
[cTCB'
[S+ -`Y
'lB<(5
x7Jo`H
]{fT.E
dfZm_O
X68:rw;
KJK3?7
;@Jz{J
&(UBf6
/b8r}a
ohe+]5
Z<FW6;
]*L"K>
B|BzC[!<!
EH	,FI	XFJ
gje%tH
G q{y'
z(N1,t*{
/}Z+IbF
j,F1)0[
S]?<8b
/hZ.[>k
HW|3;Ucc
	+p6j6
D=!os-
E+v?}J
6"_/L`
d4)$^y
0~;gd}F
iBR^9(
eTkvRjo
60( l@l l
5m>	!}#2
2q8Qh#b\
(c#3p{
Y@mIm-
zT-aWI
+,5 lC
}"$"D2
G7&No3i
p0q!i	
d/[j|E
>E5Of*
l{99nb
zn^J6\
+hmM&9
f[maL_=
	Ftk{t
E}Wl>o
e5p!(@
-e;BDYY
%@aZ@ZT
z+nV&]
)\,yHD?
>-Xh%Q
I\S>%>
:;j*KEqFl
	{8l^%
tv\:aK
U]\orYk
,%0];0
1lu:E:
}niYOlV'*k
H5	o?x
4C9RVK
W3_-cfO
tag-,|
:p,Z;Bt*Tm 
u#5#E#U#e
;j,^QQ
NVA9.Zy:
(HP|34
~:ybQg
.V_wlB6 
CLj?(a
VSzCay
pz=H]/
oZ)v$r
M$$'+E`
;hPTvCe
gT-rVQ
-r<Jo9?
Gi@3wJB!k
*wM#&X
eIKGky3
W	{zo[
WRj*`r:z
O7m_/e	
*Q)EEE)
+T]!%#
5zc[KE
8lj:,i:
{X2cQ^A
<)w[Jd(
n:BzG#
{p?Oy#
+(Q=KD
*SKyfb\
3{L^//{
4_xhx.Y
NccL$bi
MKgJ5S
0!1xiY
GN=]w~G
HrtUF&+
]xZBvo
7QfMyyX
b3aKds
X!t-\\
WFgxvy
)6W8LjV%
~5XgK-
qkM_3!
UK~r8'
C7tQQC
/R% %'
UFD\S:
X5`z n
Odf	Ce
4/l	/|
j(^rz=%
`R?\P-=
60n 5K
R/p"Dt
JNM ?BiTb
\h!e)S
/%rB(X
oW8ks#I
;n)s0|Z
(8"k}qKd
$p^uaSM
.{tme(
8lakJB
dlA[Hl
3U~t?Y
/:l(fb
{@i'^-
'q^8t%B
d5Vn,BP#r7
Im	^,]D
&.>Q+Q
Rl_<oD
5ZF^x+
_Ob^l&
tyBmaWd
iY3 Yf
Mq	HZL0
JCa`5.
{pB9i8
LR-iSG
Ec`\_I
>]>vZ"
!BnF/7
}"m7EW
{Md;_j
w Z/(j
"*p9=1
ERW6(O
W] ]G)
)r~[&)
UG"~y~
v*5Idf
:mT{sv
rhR KX
q0~DCXn
P.N:mA
HIkVY?'
_wMxn;
e<@![0<PG6%
a]0-<(
]=E]m{M7
92O{_)u_
uXRg.Y
 &Krf 7
TmpoP6
MG Q,DB
IaI2F;
,j)<a-
ye#QCglY
DW$4t.
D_SEhXg
bx!6.z
|eZV{\S
4v<C:FmOg
|f.:&p
[$Dd o
4 4)=Y
lb*F!yV$I
*o:uO@&
sGJ+pA
yQJFTU
3JyVDw
zUXZ)y
nL6Shp
X4Pi1]
dI10%rB
|)0#XPjI
b %2.R
*8i&%@
 r6@Y[<
gPN;({
J\Gu!v
x?O1O&
Oyz=YP7
+Nle\T
07>&4V
L|z!-P
,U!G~5
(R4!/UQ
Q~+C5y
oP8Ke9
vy#M{"
v9ov(Z
rpf2"A
@,7!t0
fao3A}
K+~,N/
,7fKy|
VTWTiQ2_
N+*A2y4t
(ovZkP
&|!Y6l!
kI:S?h
d8Z!b'
 />]2]
Lc1{U7
_L,ob<
C\w/|S3
:[=7%@
	@)hSP
HF,%|}m
k~ObuXa
(Hrkp4K
#zL(aj
K:{x9:
{1DB `
hQ<.p@
x[`j>n
UWvt8v
u(MDEH"v
3<mN*@
	;	;W,
d[bbjDH
%Lpq2Q
vU')MT
Hjy~AoA
D-{NmJ
JHv][qFO
?xDmd}
APwd:F
`nwg]V
v /1Hj
Pk(sjr
4:mG03
.AP8_c
)sQ9f3u?
B1t(h]
hHud>q	
ijXj`\
%SFTU+;
#pj$A`bM
MyK=+g)
_;`lyW2
%;.uc/&x
y|bC_;
h}!3*5R"
?'^A\(#
?Qmam(
\_q<OO
&R.C4A/
'xA\3q
\9LTrh%k
K'[+k+
M'E+l+
Q`V-Pp
7]-3QS
3d yt_X;8
.B`yxK
b+y*GV',)
DqkJFwC
p&F?@)
ST<k@2
"i	cyt
;i/t]wx
Lrr1GV
~t?451
O+ti3:K
KX|/:1
s4	}Yo
huI#*&
9ZJFMw
e]YulK
+z{az{b{_N
;|67ds
me~ySN
DPm'=?9
a}>+(=
-KSM0[
 {X:Gr
5ikt|}
/J5\(Wb
cF.o2:0c
sVg>YLY-
y.m%aq
sPi/ R8
9@csRFIw%[
+V*mqm(D,
qwVSf_
zA&zrz
Qu"Sqr
}u/))k
:CN^4{
wktM=?
V>,OK_
SurybX
{^2{aG\\
W=i`fq
`53g#Q*
6ErZXL6
q@G5Jx
TCIF$u)P
2T%*`5
px8%P'R
IBJL,f~:9
Uk[7<P
Q	]}AjMMjU
rARn^I5
`@,9<0*U|
vG"o.I6
U?Qu,}
|u2{lz3u_1
|DjtinDIC
*LRgVf
>`=*gRf
^?\GGbx
5`RU@P
>>z"cpA\T
S20rt^
SHD<l(1
L	t6pp
iL)yXq
/u@Z_@qC
fE}A%k
!4G{#`
TOA>X@
R64"^c
5KBqjY
VuEa*0T
 FeKvx
\KaA@]
OuD-z9
41xK~ 
V8"4Pu
-9xAE{
,>]q\b
jVd"*W
#,Rl.|
|!Gtyj
?9nWE 
zZ2dJ/
}3J{9o#&vQf;h
E 	zZH
42!?xX
A@d1,Q
l96H=5p
q!)X2X
}y}Sa{
>Pf$cc
	GNBi$
.UjS![Z
qE6@M5\
Z#+|`Q
3&fN!!
QOvz?R>l?
R*j}0_Zk-
YgXiV@
2f/*\i
TD$Mx3
3^qV;s
=P6@n@
X=h6@+
{1Q}9]
6QVjR	
3'ss7I>
YaZ	ZA\
Q_4Wu+
[a@=R+
Musynh
Z4@Q0o
BW^+A*}
P.1x<aIS
h}sb%A
c5[>Gft
0^tv4k
ub&j;\
N.;IVF
z%u31wv
<>	M~A
T]6Fmv
n"eY%4
B(w@eT
z+`G"Z
m$W9"IR
0XbRGx
SR;G]zabQi+
cI0$9ZZ
4AkxB`
*k&8bPn
\"~".j
B=ML@3
2/Mw{aK
1d'TRaXy
O	w>1 
eTGdNB
5g\f:~
Zu3Sw6
,jR"MD{~
'EINW}
6I%M.=b@
"vN=bR%
NzJUi#
;zE47:
kE#oWt<
6dvqzGw
-~XbHrQ
#%N	oae
05QLTP4
</!!`=
]n\+YdU
N`u}BQ
S=vIpP
5VE SJP
?Muz|-
pzWy=c
-rk]	JqR
[XXxx.
zYsoB9
<kG0,V
g"	h	n
;d,a*3
/xMgYk
LI=WdQ
nv ~T6
 W9;}6
6`&Ezb,
\h|+9v
?t>GUE
?pWx;L=
)s<9h!
QpTn3o?
Ub(!6Mx
Lxf$X20B^e
?\_}943
Gfgy<7bgj
m@GMNw '
+?@0M^i
s9jBqhW
l!&$Y&&
'L,Gh<
L)pph@
0UxN-t
m0TxAC
N/sdp:
;&VU;Q
[pjmrB
3H?0Hvv
_FN6OU
_:*v^7x
1	B]Pr
*u-k~nFFB
H\;n5}
H`3#RJ!
vu<'^H
 6L}8:
T7j#8Db
=oK[qMA
 ~Bcx1
h"hBhbH
0&t$dL
P|bC(A1
:QLKKm
#!}IO3
:$U[6K0
9K#Lv=jga
{FV"FI~4
I9*eSS
5 b3VZ8
Q"Tx*T
,&cb"`
0~zbLzbx{Fy
dG=X;9<A
#&Bt>K;Eu
F|u{J^pt 
wlGy9&?
.gXOZ/E/'O
[*3s29
(W.5NX
dKmI=E
SiX-~"l
[qz],L
_wD!dd
-&/25'
iO>hOi
<)dOl*
QO,t[(
_	9\oY
PB2pLK
58/DfV
Kg?B$;
`F3Z>]
gJ>i|U
Z%u].M;cHP
,Z"'mdB
	'gjBJ
;$?[#c
1)!4],	$
rU)k#R
}%UG*w
e&!RsF
)VsxS2t
-R@)!]
xoUs3U4W
j&-ad"goN+
Q~]eq(
8]bbbX
"#L#"d
iL6Vk+	+
mf"#'c
3@5w!y
#		1=r3
6_Hs	E
w@5ndMJ
}\KX.T
&*04Om
b#kBLY
aX3QQsa
e7#kBS
&`dK`"
ay|Y#yS/
*?s&&u
_8],Gt
LDSqM^
y0-F#<TG
;<@qQd
!z*'2u
eMwhcQF
X)uDA.C
Z Z'[B
rKS:bN
>GZF_	
?_1#yy~
7G*e]S
iDp?5*
1qD]H`%c"
pITOUK
Npfl:x
G:uY/Z
~_C2~x
[;!Rw|
suSF';
/qgUvR
V3Kn3cn"
bINktR
KEy3p+_
8nD#h-
TLIsy}
S\a{VK
CGed6g
$^8^L^`[
 c_cK:~
@Z$])k<#
YvZRniu
z,F?[4
m)B1Y~4Q
?9:lB_
p[=Cb:d
flU#Xs
>mpI|.
2I,woRA
XF~97Q
-/U>Yx
OEu-q_H
UWh'|Rf7>_i
eczf$\j9,
O=YuJJz
A+y~X?
+}m@@%I
LB`)EQZ
G11fN:}
-\ <EB
SE`fK-
Aw&L#H
Q%{5R)0
eF797,
ro^:W@
lMW?7R
Xx;=T3'vz
q8H`7+b
2L*C*@
`p?B7j
SYRFp@
9L|:0lN
!LGol%
i8AaH)
|4qB/.z
wRgF[`
ZGV,]+
gxWdCW
G9t*+8)
fL364;{
--{-^x
(uxS0Z
2`=$}%
nu$-<V
n&]kUo
su?u]D
N7chD{
1tH;Hc
=n0;N.
sA=|h:dj	
kbJOM P
!^`"Q6
ZR?((c?
NdfUO4
jEsz[!
'zTafs;
"L+Ej !
 M-k2D
.)mF3>
GJ`_t|
]K%hXW'
S|<8s}
>ZhV=0
^d't]T
aYG!NA
OFDGoxm
V'CnqB
2r[fs]
Sml[E"
X7Xk^k
g1?5Ej
dkIE![
c{Wm w
ai)K\8
	X>LaK
K/2X2e
yj%s'x
s+V9,;1
K2lf;f
hQ(+t'4)3
2,d^@5Ba
qHaHiL
^aT5y\e_
g$/jIf]
6SN^DsSd*(
7"	4lkM
|_6Oyr
v/)kn;
P;BMJSVOv
eR1c`=
tesE!\T
p@RtpK
ILn6PJ
ZI(mS)
^Tezh|
{uav1}
QIfpD!
8vaxmPW
Hv1`#$=
fN2D2@0H=
ZRn/OQ
 gatu%
3E G"p
DHGT,A
5$HuLJ
6aKY:~
~@:T5{
Esf!Ok]n
6./cnT
H_/^v=
[6z7!"
Cd9":d,
^7{&^i
XeST0+
.)-E8D
m4t1CD
..U9:E
AH=3gQ
.p?NA_
AJlQnr
gzRAAH_
01IWUV
U#jWpb
P=LZN=>
bW^@Pi
D=:WiO
~E{`%m
F[cw>/
=q6+?	_
c$q(eVH5
0u60&Lb
%&A6HJ
6T 44!r
 `H*M89@4yH
|))T@=
S%6|Rm
R"#yJo
wxa4G~
HxTI)$
`WcU9o
	Uu%J	
gN)CrN
PvNF}|yAI_K
feU5`EX|h
)}UyU{BF
i`e=0m	
M{6ya5
_D6w;'Y
~w^=<iU
Nh>}]I
Xufu}{
786j,j
]BX-3r
#2r_~kC
[LRe(Lv
wq^!h]R
+.?o8Q
\a=jJ z
Aj6%tBTmH
o){	8fJ
ka 3(]Z~i
qo$Eku
yucjwJ
vI&ah40
pJdm<B
M^bf$"]I
 ec^`E
-Cr0jt
%<cv.)E
Wo#k&Wg
 Uy/N	
\rR*:7
VE*<LC
R7	=B|?
WZfu,G
w6\QxHXO
4]R$cL
)b_>`Rc%
gH9y6!
yOi_g6
>bD\N/
zN$!-8
.L=?!Bp
&'{)ovHE)
E[5nVv
-[aiT<
cT.?1D
!f}+aH
!T=CduT
rb`M$H
RX[bG?
%M/"HO&ybYc
#<T \#
'/a	M+
%6[[h>
G,a:-)
o8Aa9C0+B
~?lA?g
Q~E& -2
=-prNT
%ZnHD_
'l$D7i
P5>!N2
CM>W3J
fo^"~0/
!gntBa
3;wD(|lZ'
B/\?.!
/qxMdz
K9XOtyXE
nnWb4I'IkB
EJi,.7
2MJ;#1
:r.w3(
=dVn)h
(gO,\y$
lyH47<
-/8W7C
bflX3pV
RXS<,UE
f8i-53
DCJ	p\m
]LUEpI
J>X!&z
aTmlH$
yU7=Fa
T&\kpQ
5}yCh{
=p;;q/
@+T|hKJI
,jCl~X]
+.Wvt~
`X\Xm=L
>)bkxy3
vEttf+:
$sz)/I
?EYWI@
}exxkk$
F/5a6c=
_A:b|\
CJ}"W^
/P,b8P
%bg[tX
xyY;AD
Wz(#"3qv
lh}*OP
`xM~7RT
J8XvP"
@*uFkM
**Qp8H
	[6Ot::
UQ)/1/	E/
Zy3/#O
fbF897
|_{zi+
*OvSYg
FSIV}Am2
';9i'>1
R6kX\[N
2YT@3r
v!-Mf!
sV8Cfo
W(|!Gs
/m3j:Z\?t
aOEB,7
{TEyk3
=V|4pMl'
VCAXWJ
A9U:z~g
iG	#/7
O/;;?\
.PDy_ehN
]%`(V"
uY%u{F
FSao	:t
h0a<FYg)
M=xa>B
)J6cz,
Pa<NYO
I&Friz
+d4m="g
Ny:C	;
}<L`{}
8?sVSp-c
^\@6j/u
>$a].D
YazqWh
^0/|g.R
#Xjg{S
gkJP.f]
	);*L*OR'XD
{>T",P
k;twxw
hUzB%tJ^
gMoo6/
d=UM>B
^)>}82
\-E^D3b=f
E0qx+'
PuvteS
;R>7Qf7
a)QKX}`L6
"bRVPK
wiLxi7
j	<D]a
9kg^LX
Ony+Qh
.mM#|i
IozQ,0
k3uW:[`A
ohnM5e.-S
db1Z/|
u	L'KQ
VJ'i4O
i@dvR)e
QW`0nxk
ENtb$V<
wrl9y"
*$|Tnb~*
'v;\cA
Av:}`H
!b6W^p
#Y,Nng
""$'a<
~t~|,Zg
^IHWs$Tk
m05zp(
GILXc[
'D9Uh;qL;
Mr7nt;@H
_jK|?$
tEG[+dNQ
R2)`gU
CtI]rvR)
Hjr,/=
P@dP_H
a7FoK}
YZ[\]^
>X$NLL.7
"^:AEt
XB0ZHL
}hGH-)!.
{*]E#^
CE/wHi
3Xq5MY)
)U%uE<u
ng1eyb
~qrpwS
H6sRrVqrpwS
H6sRrVqrpwS
FG30gy
bJUF6Q&:|GvS
X"3P z
j/ptFD=
#A[!ia@T
ql;Yi5r
}4gb.*
+(yL	h
,'{=!=
.D$h3`
-rG$r\
N+CQp/
jaZ.A+
:wPwRt
N^wHwLwNv
Hq#-C	
z;(EY:
F=)EJE
<UE\`k_
|fX]en
3hBsX;`#n
&>`~zR
K0<jM=
xWH),cl
:mJk6`w
!jLG6]
aE?=*eM
3&I:2c
#CB'|A;;
Gw3Sc&
Project2.exe
TMethodImplementationIntercept
g`glfX
=c(Lpk
B/4[Ap
BU	t&P
]Q{E*jz
w0'qYDx
{^:'It)
2NyQ:bu$
BqK@G'
p-WhrbyZ
_5/E/U
UmMymN
)!ga{'
2lapGc
-!^L\.
kH4m@Qv
,Ac<AgFAkV)[dAsrAw~A{
}-jqXJ
$g(g+g&i)k:`4
C;#$FI
W[pi=`
q@eTFZ~
YFYvc#3eAM
J]2$7)
EwI_VBL
[([+mI
x].]\OM
]3=aR9a*
6EHi[I
!P[wL0
`!uXz[
=fu`Xv
^f	VMV
+`SQD	
XBJ4$+
9,p`b&S
o6XU]H$^
S#b MQN
 #BE%i
d!<Uyq
`p5%64)
FYNHOl
AKn{^v
P%'S}9
B_xG]lT
FJWS8x
|qGmW(
&cC.p4
ro6X	}
_'a=aGm
{/f<Wj
ejHeu,OYG
/Sq}o|Q
YU,-$%
5[Fiy[a3AJ
#AtLAo"
sh_sFl
"jOL2/;
/M\9dq
|4h6*[5)
](`@FV
XZE._0
Q['MH=
4BknZ7
(zS	=)
LZS43ly
6_Pf(Y
Q}n}DK:
~Z#'+~
FX!|H+
"?}L84
QV5#Dn
O`WJbon
-dQ[<u
iS1Mf(
Li+XeV
ZI-kA>
;aBSxd
$r[^rCb
3f=/Nj:F
t_5_DRH
jp@{6z
+QW%]cw
.Qw9+#}G#
&nV!Y"
zV9(	}s
N9NgDn
%wv-as)
/	#8i7j*
xh'Z,}
CHt)Lmat
&)4?_[A
MQ.#eO~
<!aDe`,
&7rJ+(
T%<%n@v
fesEdYQ&7
O%[1j	
nj ;]kdW
yefy:@
sLv%9@q
u'DH?{u
!J#Su_
"8h}dS
`.YAqq#9
*_pL{q
H,^{	y
~Q><y{
1<>bgJ
AWvzXp^,
(PFDoJ
Vsk5DV2
u/-{6Z
%<C%M9-
n!7$UI
b$u[Tr
nXGO 7
9{p;ZC
weWR><
t4tl>q
q{wGo&
7481O9T
7xsh"	
F[[:("
L|wvfU
1!T{Sc
3="pPu
84|[P6
Ea)~uZ
->~uY"
VC?'(>
gFLBP5
'soR]T
r;*cFt
vTxUEG
$S.`	e
ITGC4^
kai)aeJOvqZ
wctLNLwd
**jVAW
1B;,}.
22yY_*X
]|4K	b
dEKREO/$~Q}
#ZX	4m
(k2|-G
4W]PjV
k=\X[*e
1iP~\h
bVd&k"
'YC0[L
2iHEl 
]W<Exu
ta{[VR
xJ:Nm^
RcFU|[l<
QwGn"x
k4I6!}8
8;qQGwv
:d97-u
LYH'-U
0puyxzg\
2v``"R
=	)'}W
Y{LPd5
WGL!{$
mJ31H'u
 (5L,T
^|G`|X97
(A$B$gv
5%|nMQ;
Vl?cum
!ZR5!f
P5KkR<
a7kN7+
1-`8;|8.8"
RU8MlJ
3vamO 
uv	OOp
.=	,LmJ
>YAM [
A.Mv13
 2PaKj
$ojQ8%W
)~ii@yna
629w |
vqOxa_
7s3<$@
RZnAgy
dZ;":[
)dA),py
$Bp8Ct0
V@qwW1
nzC&ZS
:k*6_d
>{!hQ8?
Ex%f5gLQ
Fw)3"Z
ec$/W7
vPcf 3
ZnZ!3b^
b3@J@/B
G	Ox[j)(
7w<oYU.
nPlAZ!s
$'{BES?p
hjHSsE
;w)4uI|an)
5Ny|Y'
]vR]y\
0RNf#%1U
=kH'eD[9
'`;S!Nr
rB:pjZc
]t2*L{7
n,&v>DO
=1'%/ZV
O}El%8|
AZ}CX"
uwib)N
].F#*_
._	|Z-
[|TzqJ-
E_&o4L
\wm"d3
cdN7{f
KHpvmY
DY>.	j
0WH"`N
V;Of==
`4D!/BkQ
 cmTNa
Oa1s8M
@N4qHE
kwU&-)5
d"KoQ]
-NY=$'
|exQoKBe
&KC*jY	j
_!k9K7Cq
	:'Qk^
t?FnS[
7Xa~A5
53Yu]y=
XJUN(:
JDuBE!Oj
uK:7-?d
{lz/>i=f
T?\Ic	;Z
G;Y@:G
b:6VFVVfl;
[iD\kB
VirtualAlloc
VirtualFree
VirtualProtect
u6AQVj
kernel32.dll
ExitProcess
user32.dll
MessageBoxA
wsprintfA
LOADER ERROR
The procedure entry point %s could not be located in the dynamic link library %s
The ordinal %u could not be located in the dynamic link library %s
 (08@P`p
kernel32.dll
GetProcAddress
GetModuleHandleA
LoadLibraryA
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <dependency>
    <dependentAssembly>
      <assemblyIdentity
        type="win32"
        name="Microsoft.Windows.Common-Controls"
        version="6.0.0.0"
        publicKeyToken="6595b64144ccf1df"
        language="*"
        processorArchitecture="*"/>
    </dependentAssembly>
  </dependency>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel
          level="asInvoker"
          uiAccess="false"/>
        </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
CCB@@@@;@
CCC@@@;@
4.@;;;
1!CC@@;@
)))))))))	)	)	
""""""""""""""""##"	
Yh]yf`
{ljgPR
""""""
""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
-;hg;75=
xxxqlii9864(X
u*qvrqi9*
xxvv5,/
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
wwwwwwww
xxwwwwwwwww
wwwwwwwwwwwwwx
wwwwwwwwwwwwwx
wwwwwwwwwwwwwwwwwwwww
whwwwvV
wwwwwwwwwwwwwwwwwwwww