Sample details: cfdb8d76f98d16b133a1d0946e247c07 --

Hashes
MD5: cfdb8d76f98d16b133a1d0946e247c07
SHA1: 59ac0371d51bd45141925e210e33f99c42d96a47
SHA256: f6d3999eba024295e14b2b0cf853937c2f19ab83088d923d810e2021fd9e6e58
SSDEEP: 6144:zUvL1LMkUfOEu1NXkg8SJPHEGZUl+eKxZyRSDK:zUdMkzooLDK
Details
File Type: PE32
Yara Hits
YRP/possible_includes_base64_packed_functions | YRP/IsPE32 | YRP/IsNET_EXE | YRP/IsWindowsGUI | YRP/IsBeyondImageSize | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/Browsers | YRP/Sandboxie_Detection | YRP/Misc_Suspicious_Strings | YRP/antisb_sandboxie | YRP/cred_ff | YRP/win_mutex | YRP/win_hook | YRP/suspicious_packer_section |
Source
http://opendrivecouldrsafinder.com/Jav4654646.exe
Strings
		!This program cannot be run in DOS mode.
`.rsrc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
!This ppowpeo cannot be run in DOS mode*
`.rsrc
@.reloc
hQystem.Resources.ResourceReg`sr("mscorlib, Version=4.0.0.0,"Aenpwre=neutral, PublicKeyToken?b#7e7c561934e089#System.Resourcww8PqltimeResourceSet
TQFTCDP
!This ppowpei"qajlot be run in DOS mode*
Richl(
`.rdata
@.date
RPQh2"@
QSVhS(@
tl9~8tg
8F4t{8
F<;F8r
<L5qg8	
8^9u=8^8W
W8^9t@
8^8f'(^=
#twHt`NtYHp4Jf
Bt`HtIHt2Ht
vtdHtPHt<Ht(Ht
vPYv)Kp.It
v-Ip*Kb
t]ItKId2Mp
t8_r8Ip
2twHt`LvYHp"L`
gtaHtMHt9Ht)Ht
uD8^-u
upWJp,
`5^v,Jt0Jp
HXt0Nv
HHt4Ht
TRRzMeB
VWVPhH0A
SPhx1A
TVRxd2C
VWhl(A
q&WVVVV
YYDSz:=Q
t0VFTn
 Ph@@A
SbieDll.dll
HEPDWARE\ACPI\DSDT\VBOX_I
TRMQMKL_WINDOW_CLASS
PROCCXBN
invalid vector<T,"cwfga`ktv
?playaudio
']/%m-%d %H.%M
getcamsizg~gbbc
nocamera
startcamaa`
g~ieggcm
getcamframe
initqa}cev
FvgeFrame
GetFrame
OpenCamera
camdlldapc
ggorreoe
[DatsW`avt_
[@ctaStart]0000
%02i:%02{8726{>107k [INFO] 
KeepAlive Ensfxe`1"@iigout: %i seconds
%02i>!"0m<% 0m8%03i [KeepAlive] 
Fkygkqv6clcnged to %i
Disabled(
Piiqmqv expired, resetting cml~ggbmyl*
getchatlib
chatread{
alctmsg
CloseChat
GetMwwecca
DmqplayMessage
chatdlldwpq
eventvwr.exe
origiqq
ieerkhg\shell\open\command
Umttsepq\Gnasses\mscfile\shell\orcx^g{k}ajf
searchfinished
filedogn`
searchwrmlupe`h
searchstarted
offlinelogs
autofflixg~mcu
y User has been idle fop2
${i~upgs }
onlinelogs
 _D7] 
 [F8] 
 [F9] 
0_R14O 
"_D11] 
 [F12] 
 [F6] 
2YPeh_&
"_D1] 
 [F2] 
 [F3] 
$[V6Y$
 _D5] 
 [Print] 
 [Enb_6
$[Sdcvv] 
 [Left] 
 [Up_$
 [Down] 
 [Pas@a_$
 _@ckSp] 
 [Tab] 
 [En`cb_$
"_Rause] 
 [Esc] 
 [PaaQd]$
"_Atrl + V]
[Following tg|f lqq0`agn pasted from clipboavb*]
_Gnd of clipboard text]
$_E`rh"+ 
 [LCtrl] 
4]FApdlO"
[Following text hag&vgan sotked to clipboard:]
f$alipboard text]
[Chdi}e$Er
rafLogins found, cleared'Y
]A|rkoe StoredLogins not focnv_
UwgrProfile
\AppData\LocsjNEk
e~gXAhrome\User Data\DefauhvLLkwmz @cta
[Chrome Cookies4f
ujb(2ahgared!]
[Chrome Cooyius$~m`"bmund]
\AppData\Local\GkmulaXG~rkoe\User Data\Default\C}m
_Direfox StoredLogins czaspad!I
\key3.db
\logins.zs{n
[Firefox StoredLoginw6lk`$vmqld]
\AppData\RoamingXOyzmznu\Bkrefox\Profiles\
[Fibevm| e{mokes found, cleared!]
ee,wslite
[Firefox Cookieu ~op&d}wjf]
[IE cookies"c|gevgv!Y
[IE cookies not foujdK
Wo`buepe\Microsoft\Windows\CqpdejtVwrwkon\Explorer\User Shelz"Vmhdg`s
Cookies
[Cleareb snh&c
ookes & stored logins!]
cqvtwjnib
funready
funfghw
BwlTwja
fundlldata
EXEpath
Gqqrmlof
C:\WINDOWS\system32\qsupmjid.aze
explorer(gne
Qkdtware\Microsoft\Windouw4LPZCcpvgntVersion\Winlogon\
 (32 bit)
 (644d}v-
QKDTWARE\Microsoft\Windocu4LP\CervgntVersion
ProductNgoq
Raocos_Mutex_Inj
Eivtswtu\
licence_code.txt
WcvDrkaessDEPPolicy
Shell32
_sGqabEzA`oin
GetComputerNameEjQ
McU}u26Process
kernel32
ogbna|7&.`nl
GlobalMemoryStatasUx
EavModuleFileNameExW
Yebna|1&,`nl
Psapi.dll
GetMkfglaBmzeJcmeExA
WUPBKJES
C:\Windows\Sywbgi'6Laif.exe
/k %windir%\Systao%2Xdgs.aze ADD HKLM\SOFTWARE\Mycbmwo``^Skndows\CurrentVersion\Pi~kg
ee^W{stem /v EnableLUA /t TEW_@QM@F$-d 0 /f
getsockslib
qosiwvgsd}
stopreverse
stopforwerr
vepemgisstatus
startreverse
bwdaogisstatus
fwdsocks
evqppfm`wepd
sockserror
GetDorwapJictalingPort
StopReverse
rB{pecvf
StartReverse
Starf@{rscpv
socksdlldata
Mute~YFeiAg`alfog
rspeady
pwgrab
autopswdstq
tuupapc
Otugwrhf]
regmsg
regobaze`
raecreatekey
regeditvsn
Wzhcatk.dll
SHDeleteKeyA
`asda|iqy
regdelval
regopen
mj{vvcgufmv
Disconnection occurrwf8"vavdymlg connection...
addncs
5.=:0$Rro
Am~laupsf$vo C&C!
Initializing"c{njsedkkl to C&C...
initsocka
vajuma`ck
initchat
initda}qgrmbt
initfun
dllurl
dllduvu
gjo`bkcrddata
emptyclipboapb
wetslmrboard
getclipboard
TyqfRvmf.dll
SetSuspendStevw
KEv{uap
mclick
keyinput
kqubk|
utfatefromlocal
updatefrmkcph
ujknstall
delevetiha
ijktpwgrab
stopmiccaptupg
i}cqctvure
freecamcap
getcem|if
qgpeenshotdata
dwnldscr
wepclmqt
getscrsliqf
gzeqrhmgins
deletekeylog
us`mcut
fbninelogs
getofflinelouq
wrmbojninekl
startonlinek|
m~k`ihdrm
freescrcap
initmcxi~qwqpgcp
openaddress
cmdoupbup
cklsolecmd
execcom
closarfogdvyoskndow
restorewindow
ochwmhfyw
closewindow
getwindogw
t`osimnl
proclist
getp`mwlmqr
fkunloadfromlocal
`kw~lkcdfromurl
filemgr
keepgn
fileqh}qp
gvp_notopendir
setwallputsp
spmpsearch
search
newf{jtgv
qlmwmsg
Unable to rename&b}la%
rename
Deleting filg>2
`unuva
[ERROR]
Failed to dosh|oet&rihg: 
Downloaded file:"
_MHROY
Downloading file: 
lwfeva
upload
download
listfiles
drivesliuv
gavdrives
uploadprogreeu
esrstnt
wndsplt
qmzdkqqxiwv
SeShutdownPrivilege
Cp~metap bkle: 
filedown
Uplosb{lc0d{na8 
err_notopenfile
vg}sgbmdtapr
remscriptsuccess
vciaavkptexecd
jdfxn*fll
NtUnmapViewOfSecpk}n
Uwgr32.dll
GetCursorInf}
@IQ@NE[
scrshot
errscrcap
Cqp\cwvInputInfo
%02i:%02m8306
8107k 
abcdefghijklmnopwrctqpuj{~
cmd.gxu
Raocos
GetConsoleWindow
IsaAkjfowClass
 * Fpsaoinu-Wgcurity.Net
 * REMCOE"f
GOL]UP&
AreateThread
GetModalwJe~f~eE
ExitThread
G`cwvaFirectoryW
CloseHanvlu
UuipDorSingleObject
Crea`cUvalpS
GetLocalTime
HeapBpqe
HacpCreate
SetEvent
RijdA|owg
FindNextFileW
Fi|fTkvapRihgW
TerminateThread
GepVkxeEvtributesW
GetFileApp`kfstuqS
RemoveDirectoryW
PghavsFmneW
MapViewOfFileEx
UraapqDmneMappingA
GetProcAffbgwe
NoadLibraryA
GetLasvEfrkd
FeleteFileA
FindNextTmzgE
FmldFirstFileA
ExpandSjfkvoj
ejvStringsA
CopyFileW
SepKituhgFileNameW
GetLongPcr|LemeG
CreateMutexA
OpenYubg|W
Rrocess32NextW
Procaqa16PofqpU
CreateToolhelp32Sngrahkp
QizeofResource
LockPcemqfeu
LoadResource
FindPeaoqvgqA
GetLocaleInfoA
lsvp~ejU
EetDriveTypeA
CreateTr
OpenProcess
GetCurdg|vTtmsewqId
lstrcatW
GetTeobDmze^aigW
GetTempPathW
@cfom~adeTpocess
GetTickCount
CjmpahWnlock
GlobalLock
QnkrcxChnoc
WinExec
GetLogmaul@fmdgWvringsA
GetCurrentProgwsw
RacdFile
SetFilePointap
CsvBkleSize
CreateFileW
BewsosTlpead
SetThreadContehp
WbkpgProcessMemory
VirtgcxAhniqG|
ReadProcessMemory
WgpPhbeefContext
VirtualAllia
CbgeveProcessW
GlobalFrga
LyaenAlloc
PeekNamedPipq
CcvEt`Jandle
CreatePipe
TwtxkscpgHandle
GetCurrentThtaud
UvkteFile
lstrcpynA
EafMktw|gBkleNameA
ExitProcesw
E|j{cGmnsole
KERNEL32.dll
Vij`Q}n`mwA
DispatchMessageA
Pda|qhcteMessage
GetMessascU
GutOgyboardLayout
SetWinbmcsL
CallNextHookEx
QcdKaoUdapg
GetWindowTextA
Aa`Wmhf{wPgxtLengthA
GetForegdogl`Gmzdku
UnhookWindowsHookEj
G|magGnipboard
GetClipboavfTapq
MpenClipboard
SetClidb
avb@sve
EmptyClipboard
WxytSylpmsqEx
MessageBoxW
GepIwyfkeddHcyoutNameA
GetWindoeV|paaf@pkaessId
ShowWindow
QnkseCijfow
SystemParametersYnroS
KwUindowVisible
GetWindkaValpG
EnumWindows
DrawIckl
EqtMaonInfo
SendInput
SrucpeQ}l`mwExA
RegisterClassExG
AfraldMenuA
CreatePopupMcne
V`cgiPopupMenu
SetForegpoel`Sk|dku
GetCursorPos
l`oqFpkaA
USER32.dll
GetDM@
GavObjectA
StretchBlt
WenwcpMbject
DeleteObject
@clutaFC
CreateCompatiblePkdoed
EetDeviceCaps
CreateQiypevkpnaFC
CreateDCA
GDI32.bjx
TqeKrenKeyExA
RegDeleteKqyS
PwgGnoseKey
RegQueryValugEhA
PaeQueryValueExW
RegObe~Ka
RegSetValueExA
ResEbeevaYe}C
RegSetValueExW
VgsCvcc`eOgyW
RegDeleteValueW
FecElemRclueA
RegEnumKeyExA
@gcCqqr}KnfoKeyA
RegCreateKw}QxE
A`hustTokenPrivileges
Hk}iqvPbkrklegeValueA
OpenProcwqgVkogx
GetUserNameW
ADVAPI568dhl
QhellExecuteW
ShellEzgswpsAnC
Shell_NotifyIconA
Gx`reurYaklA
SHELL32.dll
?datsD)&few}c[qtring@DU?$char_traitsV@PqpdDRV;&allocator@D@2@@std@@QVGDB@^\
=?8std@@YA_NABV?$basic]u`pmngPDQ=$char_traits@D@std@@V+$wnhyeuvkp@D@2@@0@PBD@Z
??0lke{a[stfmvBstd@@QAE@ABV01@@Z
9="oqp]{f[pange@std@@QAE@ABV01@@X
up]of_range@std@@UAE@XZ
-?4kq`_kd_range@std@@QAE@ABV?$`caigKsfpmlg@DU?$char_traits@D@spdP@R/"snhmcator@D@2@@1@@Z
??&=6`euks_wvring@DU?$char_traits@DBav`V@F? cllocator@D@2@@std@@QAQFD@@QBF? cllocator@D@1@@Z
??"=6beukq_wvring@GU?$char_traits@WFev`PBB= cllocator@G@2@@std@@QAABUBR+ snhmcator@G@1@@Z
??1?$baw{c[atfije@GU?$char_traits@G@st`BTV;&eznkaator@G@2@@std@@QAE@XZ
;92)$fcsic_string@DU?$char_tbe}twRDPqpf@@V?$allocator@D@2@@sffT@UCCRCFT?$allocator@D@1@@Z
;?!= facig]string@DU?$char_traituBR@wtdPBR=$allocator@D@2@@std@@SEQB\\
=c_str@?$basic_string@PQ)&gncd_ppaits@D@std@@V?$alloca`ibB@T0PBwvd@@QBEPBDXZ
?resizcD+$fes{a[qtring@DU?$char_traitsB@RsptBPT;&allocator@D@2@@std@@QECHIDJ
=?0?$basic_string@DU?$ahqr[ptuipq@D@std@@V?$allocator@PF&BDetvBDSAE@ABV01@@Z
??4?$buu}a[stbije@DU?$char_traits@D@stbBTV;4a|lkaator@D@2@@std@@QAEAAV&7PAF@6!@DX
??Hstd@@YA?AV?$basogKsptkzgDFU?$char_traits@D@std@VV-&e|h{cevor@D@2@@0@ABV10@0@Z
-=LcvvBD[A?AV?$basic_string@DU;&sheb[`rekts@D@std@@V?$allocatof@T@6FD"BT@DABV10@@Z
??0?$bas{cOspbkzeDFU?$char_traits@D@std@DT-$ehhycevor@D@2@@std@@QAE@PBDIS@B= an|mgctor@D@1@@Z
??_D?$baemq]bstfeeo@DU?$char_traits@D@stt@T@wd`VBUCEXXZ
?close@?$basic_bevvqe}B@W?$char_traits@D@std@@DqbdDVSUE\ZZ
?write@?$basic_octbgemFPW;&char_traits@D@std@@@stbRBUWEWCR32@PBDH@Z
?seekp@?$bgsyc[iqfpacm@DU?$char_traits@D@svdPBDwvv@DSAEAAV12@JW4seekdir@iow_tcweF$BDX
??0?$basic_fstreamDFC? chsr[vraits@D@std@@@std@@QASB@@@HBH
?c_str@?$basic_strina@UW;"cxav]traits@G@std@@V?$alloqcdmvTER0DBstd@@QBEPBGXZ
??4?6dusma]avvkng@GU?$char_traits@G@urp@D@90chnocator@G@2@@std@@QAEAUV"3DQ@D05B@Z
??Hstd@@YA?AV?$bcsyc[ardkje@GU?$char_traits@G@stv@PV;"cxlkaator@G@2@@0@ABV10@PBGT\
;-Hwvd@@YA?AV?$basic_strincBSU;"a|av]traits@G@std@@V?$alloqe`ov@EP2DB0@ABV10@0@Z
??HstdRBKC;SR+$fcsic_string@GU?$char_t`e}twPETspf@@V?$allocator@G@2@@0DEPT56@WB^
?size@?$basic_stri|eTFQ;&uhep_traits@D@std@@V?$alligwtkrDPB6B@std@@QBEIXZ
??Y?$bcqya[epdkje@DU?$char_traits@D@stf@TV;2g|nkaator@D@2@@std@@QAEAAV"5VCFR4%@DX
?substr@?$basic_stdm~eDDQ-$gjar_traits@D@std@@V?$axn{cerib@@B2@@std@@QBE?AV12@II@Z
sD=$basic_string@DU?$chaf_bpe
rgB@Bstd@@V?$allocator@D@2DBav`VF&KF
?length@?$basic_sttk|gD@W+$gjar_traits@D@std@@V?$anjyae`ib@@B2@@std@@QBEIXZ
??9svdR@]E[ZAFT?$basic_string@DU?$chcpMtvuifqDF@std@@V?$allocator@D@6@P0D@DVB^
?empty@?$basic_str
luB@S=4clcr_traits@D@std@@V?$allmqcpyrPDD0@@std@@QBE_NXZ
??A?0duqms_ctvkng@DU?$char_traits@D@avv@DP=6ahnocator@D@2@@std@@QAEAQB_B^
=;Jstd@@YA?AV?$basic_strmls@@A;6alcr_traits@D@std@@V?$allkqap}rTDD0@@0@ABV10@PBD@Z
??Lq`dDB]W=ET?$basic_string@DU?$chcpOtvgkbsDF@std@@V?$allocator@D@"DT0DSBF34BD@Z
??0?$basic_str{ls@CW96alcr_traits@G@std@@V?$alhoscpkrPGD0@@std@@QAE@PBGABV?$aljmuaporPED3@@Z
?find@?$basic_qpfkja@QW;&char_traits@G@std@@V?0eznkecbovBG@2@@std@@QBEIABV12@IT\
=/2;&basic_string@GU?$charYpfampsREDqtd@@V?$allocator@G@2@BwfdDPSQGDCBV01@@Z
?end@?$basmeOspbozgDEU?$char_traits@G@std@BV/$ehj{cevor@G@2@@std@@QAEPAGXZ
;teukjB?$basic_string@GU?$chutKvvaidsDE@std@@V?$allocator@G@4BTspt@PQEGPAGXZ
??4?$basic_sbtyncVBE? ahar_traits@D@std@@V?$ghxoggv{rDF@2@@std@@QAEAAV01@PBDVZ
;qmtvy@?$basic_string@GU?$qnsp[dpskpq@G@std@@V?$allocator@CB"@Dcpp@DSBE_NXZ
??8std@@YA_NUBF? deakg]string@DU?$char_traita@T@wdfTBR=$allocator@D@2@@0@0@Z
;;4)$fcsic_string@DU?$char_t`c}vw@FPqpf@@V?$allocator@D@2@@sb`RBUAETI@CBV?$allocator@D@1@@Z
+?=cprBD[A_NABV?$basic_string@GQ)&g|eb]ppaits@G@std@@V?$allocapmd@CV0T@4BPBG@Z
?find@?$basis_cvvihsB@W?$char_traits@D@std@@V96chzoucpmr@D@2@@std@@QBEIPBDI@\
;9Jav`B@YA?AV?$basic_string@EU/&glc`_ppaits@G@std@@V?$allocapodBC@4VB4BPBGABV10@@Z
?lengtlB)$fas{c[qtring@GU?$char_traitsVEPqpdBRV;&allocator@G@2@@std@@QDE[Z^
?;[?$basic_string@GU?$chspOvvukfqDE@std@@V?$allocator@G@ FTspfBRSEGAAV01@ABV01@@Z
??Y?"dusmuYgvvkng@GU?$char_traits@G@gtvBDF=6ahnocator@G@2@@std@@QAEACV 1DBDQB^
??4?$basic_string@UU/$gncf_ppaits@G@std@@V?$alloca`ib@CB6R@wvd@@QAEAAV01@PBG@Z
;=$? dcgig]string@GU?$char_traitaDS@wtfP@R=$allocator@G@2@@std@@CCWBTPC]AFT?$allocator@G@1@@Z
-;,sptBTYE]NABV?$basic_string@GU; qjet_dpekts@G@std@@V?$allocato`BSB6DB&@T@G@Z
?size@?$basic_updijgDSW;&char_traits@G@std@@V?&c|nkuebmvBG@2@@std@@QBEIXZ
??[?0beeos]wvring@DU?$char_traits@VDev`DDB? cllocator@D@2@@std@@QASEQT41DBB@BZ
??_D?$basic_ofstfgumDBS/$gjar_traits@D@std@@@stdBFECAXXJ
?close@?$basic_ofstrqa{B@C90alcr_traits@D@std@@@std@DSSG\N\
=?6std@@YAAAV?$basic_ouv`eeiBPU;&char_traits@D@std@@@0BGWT5$F@B@BZ
??0?$basic_ofstrga
@@Q;0clcr_traits@D@std@@@std@BSSEDDBVJDX
??8std@@YA_NPBGABV;$rawyeMqpping@GU?$char_traits@GVqffDFT/$enlocator@G@2@@0@@Z
?pwrhwcu@;&basic_string@GU?$charKrfcmdsPGDqtd@@V?$allocator@G@2@RqfdDFSSEECV12@IIPBG@Z
?find@/"tcwyaKqpping@GU?$char_traits@GDq`dDTR-&enlocator@G@2@@std@@QBEITPGMRZ
=assign@?$basic_stringDEA? alwp[vraits@G@std@@V?$alloccv
rDAB$@Dqtd@@QAEAAV12@ABV12@@Z
;-8cv`B@YA_NABV?$basic_strinuBSU;&ezcv]traits@G@std@@V?$allogadmvDGP2DB0@0@Z
?find_last_o`B)$fasya[qtring@DU?$char_traitsB@Tqpb@VT;&allocator@D@2@@std@@QVA_FMFX
=?Y?$basic_string@GU?$wnqp[`pqkpq@G@std@@V?$allocator@AD&@DwtvBDSAEAAV01@G@Z
?substpD-$fqqya[qtring@GU?$char_traitsDAPsptFTV;&allocator@G@2@@std@@Q@E/AR54TIMBZ
?resize@?$basic_grfkjq@UW;&char_traits@G@std@@V?0gxnkcadovBG@2@@std@@QAEXI@Z
9prijt@/$fcsic_string@GU?$char_tdgytwVAPspf@@V?$allocator@G@2@@sr`T@UDG]GMBZ
?npos@?$basic_stdi|eDWQ+$gjar_traits@G@std@@V?$a~j}aedm`BCB2@@std@@2IB
?find@;&rawygKspping@DU?$char_traits@DTsddDFR-&enlocator@D@2@@std@@QBE[PRDMYBN
??6std@@YAAAV?$basic[matvae{@@W?$char_traits@D@std@@R2TCEV3 BE@V?$basic_string@DU?$c~e`]pra}twBD@std@@V?$allocator@DP2T@4PDL
?is_open@?$basic_ofstvsciT@E= ahar_traits@D@std@@@st`BVQFS]ZX^
??0Init@ios_base@sddPBUACTZ^
??1Init@ios_base@stbRBUWEVZ^
??0_Winit@std@@QAEFXJ
=-3[Uinit@std@@QAE@XZ
?aqsyejD=6beqic_string@DU?$char_treibqDDFev`B@V?$allocator@D@2@@st`BVQEEASV50@PBDI@Z
?find_lastImvB;$`ssma_string@GU?$char_trairsREDutt@DT?$allocator@G@2@@std@RSRGMD@UKDX
??Y?$basic_string@VS+$gjc`]ppaits@D@std@@V?$allocarif@@V4TBwvd@@QAEAAV01@D@Z
??\sffDP[S?ET?$basic_string@DU?$chcrOtvsobqDF@std@@V?$allocator@D@ @P0DBCVV52@@Z
?rfind@?$basicKudrmlcRDQ=$char_traits@D@std@@V;&ulhiautkp@D@2@@std@@QBEIDI@Z
+fmnfP? `asic_string@DU?$char_fpskpaDP@wvd@@V?$allocator@D@2@@app@DA@QI@K@Z
?begin@?$basic_spv{lcFDE= ahar_traits@D@std@@V?$snxmgevyrDF@2@@std@@QBEPBDXZ
9axdD? vcwkc_string@DU?$char_trakvcB@VwbfDBV?$allocator@D@2@@stdB@EBAFDTZ^
??0?$basic_string@UQ)&glef_ppaits@G@std@@V?$allocabkbBC@6R@wvd@@QAE@IGABV?$allocat{pTGD7FPZ
?begin@?$basic_strineFSW;$cxav]traits@G@std@@V?$allowabmvVAT0DBstd@@QBEPBGXZ
?endD=6`eeow]wvring@GU?$char_traits@ABat`DBB? cllocator@G@2@@std@@QBGVTE\N
=begin@?$basic_string@FU-$glef_ppaits@D@std@@V?$allocavm`@@T2RBwvd@@QAEPADXZ
?find@;$rawyeMqpping@DU?$char_traits@DVqffDFT/$enlocator@D@2@@std@@QBEICPT5$@Y@^
?resize@?$basic_stfozeDTU/$gjar_traits@D@std@@V?$a~n}cerm`@@B2@@std@@QAEXID@Z
?e~bV= rcgkg]string@DU?$char_traitwBP@w``RBR=$allocator@D@2@@std@@QEWPEVXN
OSVCP60.dll
PathFileAz}spqS
RathFileExistsA
SHLWAPK,tlh
_azcept_handler3
;-0uzggption@@QAE@ABV0@@Z
MAlxPjt}uAzception
??2@YAPAXIDZ
sttdbiie
nocaltime
__A|lDvgmsJeldler
malloc
wrpxcir
printf
wcscmp
dmh{uup
toupper
getenv
Yssepand
wcslen
wcscpy
qt`ijdd
]wrename
qwsgct
freopen
OSFCVP(plh
??1type_info@@UAE@L\
_Mfhnonexit
_onexit
_HctvFilter
_acmdln
__ag`meynqrcq
_initterm
__setuecbmebnurv
_adjust_fdiv
__v[Kckko{da
__p__fmode
__seb_srtOpmpa
_controlfp
wave[hAvebv
uaveInOpen
waveInAd`@efbuv
uaveInPrepareHeader
cafeMhQ|rvgpareHeader
waveInCl}su
uutaKnStop
WINMM.dll
WS2_70<dhh
WRLDownloadToFileW
GPXMtelRnkakingStreamW
urlmon.dzh
GpitEetImageEncodersSize
Sdm`CsvMoageEncoders
GdiplusWbcv`q`
GdipLoadImageFromStrac{
EpitNoadImageFromStreamICM
CdodDvge
GdipDisposeImage
CrifAhmneImage
GdipAlloc
WdmvQstaKmageToStream
GdipSateYoecgFoBkle
gdiplus.dll
IntevnsvGliegLcndle
InternetReadFihg
I|tapnetOpenUrlA
Internsv_ranC
WMLINET.dll
GetStartupOntmE
.?AVexceptiozBT
.?AVlogic_error@std@B
.?AVout_of_range@stdT@
.?AVtype_infiBR
UU{LL~57
WW`QUdppy
UU{UU{BF
y^_fccgeea
eeeccdewe
ssegwg
qomkihkih
QTM.;)601`_^Z]r4<
>>>KKKTTTXXX
N^I^[Y]d
_^gtrq
SWAaecmmmrrrsss
~}_]\EDC
#71+;)LJLUUUTTT
ZYXBA@/..
<(.8*<<8><<<
YIM>(<717
T?J&{`
TCVDMJCNXTCDDINGPADDINGXXPADDINGBCPFMNEHZTCDDINGPADDINGXXPADDINGFEVFMNGLXTCDDINGPADDINGXXPADDING@APDM^CNZTCDDINGPADDINGXXPADDINGPERFMZCHZTCDDINGPADDINGXXPADDINGTCRDMXELXTCDDINGPADDINGXXPADDING@ATFMNALZTCDDINGPADDINGXXPADDINGPGVFMXGNZTCDDINGPADDINGXXPADDINGVATDMHEJZTCDDINGPADDINGXXPADDINGRATFMJEJXTCDDINGPADDINGXXPADDINGTARFMNANZTCDDINGPADDINGXXPADDINGTCRDMNGJXTCDDINGPADDINGXXPADDINGFCTFMNEJXTCDDINGPADDINGXXPADDINGVAVFMHGHXTCDDINGPADDINGXXPADDINGBCTFMZEJZTCDDINGPADDINGXXPADDINGBGPDMLEJZTCDDINGPADDINGXXPADDINGVGPDMXALZTCDDINGPADDINGXXPADDINGDAVFM^EJXTCDDINGPADDINGXXPADDINGRATDM\ANZTCDDINGPADDINGXXPADDINGBATDMHELXTCDDINGPADDINGXXPADDINGDGTDMLCJXTCDDINGPADDINGXXPADDINGTCPDMHELXTCDDINGPADDINGXXPADDINGBEPDMNEHXTCDDINGPADDINGXXPADDINGBCVFM\CLXTCDDINGPADDINGXXPADDINGBEPDM^ELXTCDDINGPADDINGXXPADDINGTEVFMHGHZTCDDINGPADDINGXXPADDINGBCPFMJENXTCDDINGPADDINGXXPADDINGVERDMNCLZTCDDINGPADDINGXXPADDINGRCTFMXCNZTCDDINGPADDINGXXPADDINGRAPDMXAHZTCDDINGPADDINGXXPADDINGBERFMJCLXTCDDINGPADDINGXXPADDINGFETFMNCJXTCDDINGPADDINGXXPADDINGDCPDMHAHXTCDDINGPADDINGXXPADDINGRGPFMNGHXTCDDINGPADDINGXXPADDINGDARFMXALZTCDDINGPADDINGXXPADDINGTCVFMXALZTCDDINGPADDINGXXPADDINGVCVDMJELXTCDDINGPADDINGXXPADDINGRGRFMZAHXTCDDINGPADDINGXXPADDINGRAVDMJCLXTCDDINGPADDINGXXPADDINGRCVDMZGJZTCDDINGPADDINGXXPADDINGTATDM^AJZTCDDINGPADDINGXXPADDINGFCVFMHEHXTCDDINGPADDINGXXPADDINGPCVFMXGHXTCDDINGPADDINGXXPADDINGDGPFM^GHXTCDDINGPADDINGXXPADDINGBCVDMHEJXTCDDINGPADDINGXXPADDING@GRFM^ELZTCDDINGPADDINGXXPADDINGTCPDMZCJZTCDDINGPADDINGXXPADDINGPEVDM\GLXTCDDINGPADDINGXXPADDINGTCPDMLCNZTCDDINGPADDINGXXPADDINGRCTDMHENXTCDDINGPADDINGXXPADDING@EPDM\GHZTCDDINGPADDINGXXPADDINGBCPDMLAJZTCDDINGPADDINGXXPADDINGTATFMJGHXTCDDINGPADDINGXXPADDINGVCRDMNGHZTCDDINGPADDINGXXPADDINGREPFMHGNZTCDDINGPADDINGXXPADDINGDERFMHENXTCDDINGPADDINGXXPADDINGDGTFMZEHZTCDDINGPADDINGXXPADDINGVEPDMJGJZTCDDINGPADDINGXXPADDINGREVDM^EHZTCDDINGPADDINGXXPADDINGTGTDM^ALXTCDDINGPADDINGXXPADDINGRATDMJALXTCDDINGPADDINGXXPADDINGDGPFMXGJZTCDDINGPADDINGXXPADDINGDGPFMNGHXTCDDINGPADDINGXXPADDINGVCPDM^GHXTCDDINGPADDINGXXPADDINGFGTDMXAHXTCDDINGPADDINGXXPADDINGVEPDMHELXTCDDINGPADDINGXXPADDINGFAVFM^CLXTCDDINGPADDINGXXPADDINGBGVFM^EJZTCDDINGPADDINGXXPADDINGTCTDM^CLXTCDDINGPADDINGXXPADDINGDATDMHCJZTCDDINGPADDINGXXPADDINGBATDM^ELZTCDDINGPADDINGXXPADDINGTCVDMJCNXTCDDINGPADDINGXXPADDINGBCPFMNEHZTCDDINGPADDINGXXPADDINGFEVFMNGLXTCDDINGPADDINGXXPADDING@APDM^CNZTCDDINGPADDINGXXPADDINGPERFMZCHZTCDDINGPADDINGXXPADDINGTCRDMXELXTCDDINGPADDINGXXPADDING@ATFMNALZTCDDINGPADDINGXXPADDINGPGVFMXGNZTCDDINGPADDINGXXPADDINGVATDMHEJZTCDDINGPADDINGXXPADDINGRATFMJEJXTCDDINGPADDINGXXPADDINGTARFMNANZTCDDINGPADDINGXXPADDINGTCRDMNGJXTCDDINGPADDINGXXPADDINGFCTFMNEJXTCDDINGPADDINGXXPADDINGVAVFMHGHXTCDDINGPADDINGXXPADDINGBCTFMZEJZTCDDINGPADDINGXXPADDINGBGPDMLEJZTCDDINGPADDINGXXPADDINGVGPDMXALZTCDDINGPADDINGXXPADDINGDAVFM^EJXTCDDINGPADDINGXXPADDINGRATDM\ANZTCDDINGPADDINGXXPADDINGBATDMHELXTCDDINGPADDINGXXPADDINGDGTDMLCJXTCDDINGPADDINGXXPADDINGTCPDMHELXTCDDINGPADDINGXXPADDINGBEPDMNEHXTCDDINGPADDINGXXPADDINGBCVFM\CLXTCDDINGPADDINGXXPADDINGBEPDM^ELXTCDDINGPADDINGXXPADDINGTEVFMHGHZTCDDINGPADDINGXXPADDINGBCPFMJENXTCDDINGPADDINGXXPADDINGVERDMNCLZTCDDINGPADDINGXXPADDINGRCTFMXCNZTCDDINGPADDINGXXPADDINGRAPDMXAHZTCDDINGPADDINGXXPADDINGBERFMJCLXTCDDINGPADDINGXXPADDINGFETFMNCJXTCDDINGPADDINGXXPADDINGDCPDMHAHXTCDDINGPADDINGXXPADDINGRGPFMNGHXTCDDINGPADDINGXXPADDINGDARFMXALZTCDDINGPADDINGXXPADDINGTCVFMXALZTCDDINGPADDINGXXPADDINGVCVDMJELXTCDDINGPADDINGXXPADDINGRGRFMZAHXTCDDINGPADDINGXXPADDINGRAVDMJCLXTCDDINGPADDINGXXPADDINGRCVDMZGJZTCDDINGPADDINGXXPADDINGTATDM^AJZTCDDINGPADDINGXXPADDINGFCVFMHEHXTCDDINGPADDINGXXPADDINGPCVFMXGHXTCDDINGPADDINGXXPADDINGDGPFM^GHXTCDDINGPADDINGXXPADDINGBCVDMHEJXTCDDINGPADDINGXXPADDING@GRFM^ELZTCDDINGPADDINGXXPADDINGTCPDMZCJZTCDDINGPADDINGXXPADDINGPEVDM\GLXTCDDINGPADDINGXXPADDINGTCPDMLCNZTCDDINGPADDINGXXPADDINGRCTDMHENXTCDDINGPADDINGXXPADDING@EPDM\GHZTCDDINGPADDINGXXPADDINGBCPDMLAJZTCDDINGPADDINGXXPADDINGTATFMJGHXTCDDINGPADDINGXXPADDINGVCRDMNGHZTCDDINGPADDINGXXPADDINGREPFMHGNZTCDkozqkMZ
!This pvoeram cannot be run in DOS mode8
`.rsrc
@.reloc
v2.0<32727
1Srrings
<>c__Displa}Cnass26_0
<ProcessPers>b__0
parwo6
List`1
e_res1
_ICGE_OPTIONAL_HEADER32
kernel32
Imarosoft.Win32
ToUInt32
ToInt3 
RndString2
e_res2
get_UTF8
<Module>
EFJRMFVUAA
IILFQNABZXAA
EHOMMIDZJBA
LQGHOVVWFPBA
XFYGMCKWBA
DTWDHOKYLXBA
GMJYBA
LZVUGJFTT@E
KHABGNFLIHDA
TSINYDA
DHBZNROCGC
FLOATING_SAVE_AREA
UOMIVEAAR_GE
VLDZFA
XEXWZCWBGA
OSOLDCEGA
CJ\VYGGA
CAZNSSWCVMGA
ISPYB@WHMCHA
AJWRCLKVWHA
GVTEXJPAJIA
VO@XUSJMIA
TWENNDHVINIA
UAIAIFJQ
CEBKNZFJA
NJTRGUZQJRJA
ZWKYRSAWBWIA
UQRGUUNAXRKA
ZDHJYZKA
EOTHHRFTLA
RGDISMAYLA
UBLAHJJGQHKC
HOEHWQPMA
PYDJNJVDNA
XGWUQNW
][LDPZNA
YYJUOOA
BBWAARRJ_ORA
HJSRPA
VYLJKZAWJXPA
DKEDNCWE
STAXCQA
PGWIEIHQA
WDDYAGMTOQA
BINLKHAOXQA
VJKJANRA
XYIMPXNLSS@A
TTXISA
AADAMSA
EDBOTQKSSA
OKGFPKRBUPUA
XSMUYTONGVA
CJYLYYWMKVW
G@NPSVA
RRQVENBUZVA
OQSPKHCKGWG
O@DMOGWA
PEUBXA
AKIESOSVYA
QPLNCOTGHZA
MSASWJHZA
ZETHUSUUARZA
YMBSDAB
MATFHRAB
YSAIBRWTAL@B
HPIFIPCEWVBB
BGZKCMLJQZGD
OALBKYTXQSCB
QKPOMUBVRPF@
KDVUURDB
WYHYLJTWWCEB
DA^NGEBGDEB
HSJJEB
VBSKBFYEB
DKDJKCFBFB
YAKMNLUSAAGB
ISWYYAGB
IMVU@QLJNHB
NIZMZQHQQHB
OQVRRSDSUIT
DTMTPVUWPYIB
VMCKEJB
DOZYAWGJB
\UKMLNQTGKB
QUYPMNKKB
DSYLKB
NMA^NLVPKLLB
NAHUKDMB
ZCGAOLZZRKMB
TCTOMB
WZDJCMRZSOB
GXSNEPB
ANBQTZVSPB
UUEDAJYMBHQB
PGSFKUYWIJQB
FOMOJYYVRRB
GTIENZMBURB
NACGJWWZRB
BCUFHXOFEDSB
EUHWATB
KPHKFCKTB
PECQFVB
IMYQMVB
NFGCCAAZBZVB
YPGWUQNHAWB
YDSSUESYYCXB
VCHHSZWNXB
MEWZDYB
HPUFYB
KBMFSUOWYD
GJKLATDBZB
KNJEDCUQRZB
NIZVW_W\@
USAFWBYUCOAC
AJTOJEWKFQAC
FXII@C
YJAAZOBC
TCZVBC
IDDRMZVBC
EPOKWCXWYBC
HAOGXXMKCC
HRSCFBKQEOFE
GRJROYEC
HVZVIFC
YGNJQPSFJFC
FUHYRLNWXGC
GMXZEOBDQHC
HDFAIC
_VOMRXAIC
EZQOLHIC
JYMJOBOKNKIC
^FALXFJMLTIC
JEQSWFONRJC
ZVLBTLGLC
XGTOLC
VKZLBRJA
TDCGGHROZLC
FNTKXVMC
HFGIPD\G
UPVAIYGNC
JPJGVFXECOC
MBQBCLOKKG
SRUYOC
TCWARDQC
ODNOHAIQC
GE@RCXQC
AZEMACKHRC
XGKUIBSC
KLBOPOJSA
PTSHOFCTC
UTSOXXXITC
FCSJTC
QUJIBTNCMTC
ACKYXCYTC
OEOIRIDFUA
[QLZDMLLHUC
QVNDZTYUC
DQESUTQQTC
PGXMTOTKSUVC
PTEYAQAJNFXC
UUDYMFVZLXC
MVXNAMOMCHYU
GFWPYC
BZHVEVBXQYC
KJDIRMZC
FZKPIGZPAHAD
OGMFHDPIAD
ZUMNSIGNLCRB
QZHANBD
YZIPUPBD
BAPIATEWBD
ZJ@HSLDCD
QAGQNYTCD
AVHJTADD
MNLF\SCNEFDD
ACVOZUOHDD
DVJJOBPDD
IJAHBECDRPDD
OOYRDVRVRDD
BJFGTSNAVFA@
XDXABEED
QBWTCTRANPED
LJQAYS[VTGD
NOIKILPGFD
YNNFBCYGD
IRIMPQYXCHD
EBKPPXHD
RHPKID
UVYBTUCLM_F
WWKNIXID
CHVQESBUXDJD
ORDQJD
EOXZTHFYJD
XVLLASSDVKD
TEQJSAGOTSI@
NCZCQDQZWNMD
SXOORTHGSMD
GVU_RSLOD
ZXSTVVPZYOD
SQTXAPD
DFHKFPDQD
XEMEQD
DPCHQITEQD
OSHHLMXHQD
XNJMJTQD
QBXVZGRD
QCTXMRV
OGQOWGUAKSD
QKADJRSNPSD
IKWJJTT
QGQMUFSTOKTD
ANHZTD
CKCKFWQCNUT
MDAEBCPAWXUD
KZXWGGFKESVD
LPJJMZVD
COEGIPOWD
SAPCMYWD
IKIM\D
XVBNCUTCXFYD
NOSTIBIFNNYD
MX\CGZSOJTYD
ULTGVLQEIPZD
CSUCEAE
_NLSSEYXMAE
EVAKFUVNSPAE
VMPGXURJUCE
JVAPGOHXVAE
JPXWFQJRBE
BHPZWNXMIUBE
QXKGIDE
INWNKPSJYDE
PDQ]\OEFE
WDBQEJFE
GNRWJAXOYBGE
PZHJIZICGE
ZWDJKGE
AWNTQXQHMZGE
XTYCNG
EAEJSGHE
NDICKHE
LEFMHE
MMPQQWXMHE
OSDKRCTHE
CXHOVSRDYCIE
EWTJNBDGFIE
NFQTFIE
CRUUFIKHHIE
JEHNPKINDJE
SLUSQKJE
UNKRYWJE
HKD\HXGNMKE
GMSEEDQFLE
OKGWLE
XKRWPZEQLYLE
UXEZLQKWMAME
STOWFFME
SUSPGND_RESUME
QOCIOXADWME
JHLYAVC_AJG
IKGTFHMBNE
DGGMNE
OHJEQTRNE
OTULQWNE
SGCRBBQLOE
WQDGHRVNTNOE
BDLFNGBHOPE
PHGJLBZTTE
UOHBELDIIEQE
MBIXKVNIUTQE
UZOJGHCYDRE
SPTCZUSURNRE
GVVZQBTXPFUG
RGNHRTSE
TERMINATE
IMPERSONWVG
MHPGTE
JJLJDDDALOTE
VEGRCXPTC
UUBHUMWTUTE
USMYAWBWUTE
cer]TE
FSQSLORUAUE
OXMOTNHZSSUE
_HNJGRCVE
TZHNTXVPJVE
MMRNBJJWE
BPDZHMILNWE
IZFIZTWE
LWWTWQWIBXE
ROQXSXE
PIOTJUUXE
PXFPLIYE
KGWVYEQOLNYE
UCOJVKYDZUYE
FFZUPTOKWXKC
RLWPIMZE
ZXIPJPZNEWZE
KBAPMOXZE
HZQKHPNYZIAF
IMJNCRUSBF
MMADCF
HLAUICZLHCF
SLPBMRCF
NCB\INTCF
KLCRAIDF
KGNKFQXKDF
YTVFEF
LSGANSFAIEF
WKLSBO\CF
SPQDOJXPJEFF
GKIJFF
JHOATPLBV@D
OUYZPCRUHGF
RSHLBTBYYGF
WRNARDICEHF
RMCOSCEGXFHF
MDTJLIKOD
NAHMXLPCJF
ROKKUSZDFKJF
PLINBZHOJF
KHBAIFNKF
LUKYIDUKF
IJFNUWO@XSLF
NFDBZFEMF
QBYGEGYDEOMF
YC^XMTPDBJNF
GOJVSKPF
LHXAJCUHRPF
MYQOHYXXPF
AHNSYLHEQF
EMLTXEELPNQF
YAIURF
SWZBZGUCHYRF
RHFMUPSF
IQHRSF
WAYWGWLGZITF
PERTMMRF
ORFNLTF
MPXEIDUF
MXDCTJEZACBB
ACUKVXZLGWF
EQJORZYIWF
FMPYEAFJESWF
KOPQWMGXF
EDZFYF
IPUZRAGZC^]F
RFDXMNTZYF
DEGIZF
TEYLUWZF
YHTCKOIEUBG
RCNZKCCDZFCG
GY^ICRRERHCG
CGKIPBAHJICG
YLFTSRPAMGE
IWCLNRCG
CZRWMCFSXDG
UDNXWTGC
FPXYVCPGAVEG
WMARDNMUCFG
GSOAPXFFGG
WHDARGLLEJGG
LSDRNGG
NRZWHG]MEHG
VTQVZYJTNHG
NIFRZJBIG
HSEMKE
JKSFVQOODSIG
PBHZFICFWIG
DJLHSOZSQHJG
KEYBAIVQVJG
TWZUSHFRF[A
KLPEILXNIKG
FMNKTKG
TRAVKG
DNAFYGFFLG
JPIUEDMLFMLG
IMWVJE
EBLZZXXLG
RBEKOGNZCXMG
WCCATWRP_JNG
SVCJSEEBOG
PLRNYXKOG
EDLGAUGZNOG
JVKCMEHISOG
KKWMQHWKGFPG
[LEXJSUSLPG
OSYKDQG
PZUWMQG
AJPNMQETDDRG
ZRSMODRG
XLLVIRG
ESIYNXMKRG
OFCAZURG
SCADDBFSG
VHYBGZSW@QSG
JXWSSG
QUBTSTG
TPYCHIMHZZTW
J@QGLBWVVFUG
BWIWPUG
JNQPYPPCVU
ARASGQPYNVG
JMDFCJHRVG
TEJMWG
VPYFRVOAMZWG
BTDORTJCXG
GGHLIJFGDZG
KWJVOFPSHDZG
IEXWRJFEZU
HAQSUIOGMIZG
KLMZYYFKMPZG
PNWDJAREWZG
NHYZHLBEAH
ORTMKZNBEL
AJMUONCGSUAH
RMQNYXTQCLBH
QGNUP@H
NBQFMDPBCH
LOXBLETQSCH
RTCMWFEH
KBTBBOALTEEH
PXYYWWGLJEH
HQV_@GOHUNEH
MPQVAWEH
XZUEJDKFH
ZEGTGHDCGH
CLOLGH
MJPFVOCVULHH
KBWPJ[HH
XTCFYYIH
BOBYXHEJH
PPQITV\LL
DXSYAPJH
XABALOLUAPKH
CMGFJWV^RIH
SGAHEMKJYKH
BXKMOZKH
AEXCJERLH
FHOWRNBIMH
RPYVLMH
HPTGBXZSHQMH
RGIRWMH
ZBBSINWVNH
BY[GBDHGOH
RURPOLHOH
KFFDPDQIZKOH
EWDUJADWYHPH
VOSBKLMIQH
HMHXVJVSOJQH
BAZGGYJKRH
GGUYURH
CABEXWHNTXRH
SJSNZRZPOHSH
NZRTZOZJ]SN
XQDRKRCSTH
YYUKCNEYQFUH
MXPUQIJJUH
AKRWJLAOKRUH
VUGQDA[TQJ
ZNCPVLOTUH
QTVXRPJUUH
BSYQMADYWH
YCOYYIVUAWH
FSBAMKKCHXH
IS@CWFPXH
UBSSXH
EHZTKYQPYH
YPJGHWG]L
LVMGFJXPXYH
VHJTMGZH
KXSNQFPVLIXH
NLZSKMKZH
EQICNZH
IMEEEWSKOW\J
RRKHOOEVAXZH
VJDNFSOWBAI
RO^UPKQGKAI
SBDWUNLAI
GMYBWAI
VGOFIREBI
HGVWKNVFBI
QEFGWDASLBI
WZQ]CTWAMDCI
MCFLIFLOJCI
OVZNBZMTPC]
ULJBCBCGDI
HKRQRLHDI
QCRLDI
LDLTJOVDI
VFCOJYVJEI
ZULANSAKJVEI
T@BFSHVICQFI
JDZTTOQFI
FOPHAIIRZN@I
QIHZEOVBNGGI
BXXVGVSLJXGI
QMXV_DDMCHI
KXJWCVYCGGHI
VNDCTQHI
CGQ@AII
NHHCYPJDOII
WRSZDGGJI
PS\SUHLJI
QWUVIXMJI
XYQUDYEREJI
QAQSYTHEHKI
XLIMCLLI
T\KLRFMEQLI
VSTMZYMI
NDADSFERNI
UWDXWYHWOI
PAWCHYKGHGPI
DPZFQI
FGVEWNQI
JXUSDRI
DBEMKTIXUDRI
KZFPRI
NFGTIIOPRI
OOJTRWBZIWRI
VLOVICK
SRPZGLZRSI
VLROBMJFTI
VYHFRBHWAHVI
RDGJMYTYTI
VDDDGEEMUI
VMXZHWI
SYSPRUMSEVI
CHCRTYRANVI
JZLILTO
KEDDCDOEUAYI
GIPUNVZHSJ^M
ZZNRNJMANHAJ
VMZDUJFZSCBJ
AUFKGOBJ
MNHGVELPZBJ
BVWJSNGCCJ
HY\@XMXYHICJ
VBJRYVICJ
XVWIVUCUUCJ
UUPGBDXCJ
VTQYLAZAEXCJ
GD_JCEDJ
DDSCBYIDJ
FNRFDMPCVBEJ
GNAEFSXBJEJ
BWBUEJ
QUHOVUSKLKFJ
BATULAVQQOFJ
JYLHPOKUFJ
BQPLOVICBGN
AVDRAJGJ
XYFPMVOMMGJ
LISHGCFHJ
^A@TATQMCLHJ
AMGHGWDPHJ
GTSWNCQ^J
TJEMOTZZVHJ
XSBTVZHYHJ
YEMKFBSBJKJ
YPNSYKSTHIJ
QPXWFMGBIIJ
HFEINIJ
DNJUHHJJ
ACYVCOVPJJ
RUOBERWWAIJ
LCPTPPCRKJ
HLITKJ
SOBLZLJ
FJTXEFEJDFNJ
MBRLIRNJ
ZAYWPPHVZTHN
HYZYUQQUNJ
UBIPPVZNJ
UMSHDRSB_IL
YKKXCJOGWWPJ
VFVZXBBDUQJ
WOOLHTXQJ
RXRUIEJNYKSJ
YGFYNMGTJ
UWUZRAJTJ
GJKHKEFEVJ
ZLKXYJS^GPJ
XORJYPOCBLVJ
QURWCPRACOVJ
ZVVIOSHSVJ
AZJJBNMOVDXJ
FDQ_QO[J
ULKETYJ
IUXASMYJLAZJ
HDVSCATNZJ
ONYYUQICBRZJ
BIIAFNJAK
GLR\NADLAK
SMYMXBQZWEBK
GISQTPMBK
JL^CWSCK
GMGTIOYUCK
QXPNNDDK
FEFASB@I
OPOYVUBKNVDK
IBRFDORVDK
BWCXBKEK
LKWPBXFAYZEK
NUQOWYF[
MNYPHTQXAGK
PBJARSCGGK
ZQYNVGZLACHK
PNVOHK
PKXFTUHK
BIEADYEIK
TNLVKLJEFIK
SKWPRJKIK
UOVYFLXKWAZI
RFQATEGRWDJK
TFAQJEOEKJJK
DFIFSVJK
HPXEGEKK
PTJJWSPTEKK
KFPITEJII
HQIXUAYPUNKK
AQNSWHALK
UAIQJZUKBLK
QNZMYDMK
ZDAWWDSCWMMK
NTCGBLSPSMK
XFOHZKFMNK
PCNMFETNK
RYBUEDNMKYNK
XVJBVCZNK
IHMZNK
GJQ\@HIHRZNK
GJEAPK
DMNTKESPK
PMPDQLPRGXPK
ZTOBRXQFDOQK
RFVOHGFALRK
CZXSRK
GBMUCFPURK
XCQWSUSAJZRK
CTXOHCYNIATK
VZLDNMTK
YIJNGDPUK
GRCRCSLWK
XDYYULJUK
WKQIEOCUORWK
TWHUBEYK
DFHNSMGXYK
TXSLTVZYK
YMZNZK
QJATTVKL_@AL
OHVGAL
XPIHKAL
VJMBOAL
GQDZDVVUAL
UGOOOFGBL
KJCVNKPDHPBL
OOPMTBL
ETUPCTBL
YPIXXTODDBCL
IBIIIXIEEL
BURYPDIEL
KXTVDTQLAHL
INL^RMN
WJVEJL
BAFNIZRJYNJL
LPYYFXFCPJL
TZMQJL
DZFTOTAKGYJL
YUOPIAKL
HAEFXVOVXKL
IFYGLLL
VENNXH
LUQKTLL
QWLKFTLTLL
ECSZMHAML
SSLIRWKNL
SNVVKUFLVTNL
UUANYYDOWXH
NQABLOL
DMRMWWCKPL
IJCFCGPOPL
TVMYRQRPL
EHFDQL
DKZGKXGQL
YELEBA]ZFRL
KREAATVDTPRL
JUPTCITTN
QKBAIQITL
OIMDRTL
VUZLBZBUL
ZQTJNCUL
UFPELQQIUL
YEXASUL
NCODV_ECVL
VDQOANRFVL
XSXCPZJ\RJ
FATEDIEXVL
ZLTNXVL
WAVQTLEBDCJ
ANJVNKSARGWL
YSCNANBNSLWL
XVJWO^L
VIGPOXL
MVVLONWAYL
GYKXBGSRVQ]N
YIAMHHRTYL
RDRFWXMFAM
EKZMHEM
XFZWPWLELBBM
GBCEHNEXBBM
KKMT]FIHPGBM
GLUKRHSNBMBM
LBNK^^L@M
BHQHSKKCSECM
TDDBLAPKCM
TXWCYQFTPTDM
MKGEEXSSDMEM
ATGTRGOSOCO
OSNQEM
FCZCIENPNZEM
TAEBXFIFM
_TGSZMACGTFM
NLNBOCSVUVFM
EAEO]KRDGM
EZKGYIGM
KIMFNZAUEH[
JEUTCYFHM
IVMJCEULHM
HIJMSARAQZO
SZFMMCGOHRHM
XUYFIOLIM
FCOUQTILRVIM
YMNJXWIM
BPJCYWOIMJO
FHPFLMUORJM
MJCRZTJM
CJJFWJM
RUADEXCKM
FHOJVNXKM
CWVDLM
JSMGFHNNM
XPXFSYQDNQNM
KWGNWUTRPSHK
MGZHQYTGKSNM
WSCTNM
JNTPVVLB^PHO
PHXAHHVNM
WZJDILMJTVNM
ZPSCQFOM
IRULJJMGFOM
XBFKTKHVUYKI
YFGBTIDKPM
ZGKPALOULPM
FLCHVEKCQPM
WGPERGYADQM
NRPSHPZHQM
ZYUUSFECMNQM
SWHWTXMHUPQM
UPIFGALLWRI
CWDVPRBDBRM
UKWPERM
KIAMEMUGKIPO
IHQFKQRM
OUAZRM
WAZEJZGMOSM
NAFWSM
SHBQYCBKUM
AWDLIPHNCYUM
]ROAARZBVM
VRGDWOPAHCVM
ILNBGATMAPTO
CDLYDQYTVM
AGZPDRHFWM
XZNKYDJ@CWWM
YBEAYHEXM
TCKIULTJD\K
RAMYZM
EUVPNJIFGAN
RRHZIGAN
NFUFDXRGOAN
OVHXEHYNUTAN
DNXUIBN
XMOCJULBN
UPYWQWMQVBN
XYFSFKNXBN
QZNCEDIRLCN
ETTPWVFNHDN
LIPQTMDN
VGYNEQLCXDN
IKULBMEZDN
FRSGGQLAGDEN
SET_THREAD_TOKEN
ACRPAXDVVQEN
DRLNUGFFN
FFQAXGFUFN
ZHRUFOPGMHGN
RVVWINHGN
BBBC\REMKGN
RUHQMZSEMGN
DQIOGN
RVJSXJ
VLYNXBXYHN
XHQZUIN
UXPUOGIPOKXN
TSCCJYGUJN
FTGHHKN
PJIKYJIYQK[L
@EADDTTLN
KIAFLMXCRMN
RGLTHXORKJ
UNMBWWWNN
NMPYNN
OPQKKLNIAON
RLEICON
HDPYLGBYRHON
PROCESS_INVMTOATION
SET_INFORMATION
QUERY_YJBORMATION
DIRECT_IMPERSONATION
LZQGXON
NSTGSOFQCPN
ZCOFI^RHPN
RTTICVQN
HKHVVUIJVQN
KDYTYPQNLVQN
SHNVGICKURN
TXOPAWDWRN
QU^BUORLASN
MGCZGWJVGSN
RJOQQSNZM^UJ
DBPQMSN
MKBYVKMWSN
ZFH\GGOYSN
JDOSOTN
ABUQWOUGVTN
GMUUB\SNQUN
FWJWOBBBGVUN
UCRTWSXUN
PCIQGMYLBVN
GGTTIIFVN
LOSFLKDDYVN
VPOYVN
AFTAWZIAPZVN
VTSJNXBWN
MFO^AWN
IJYYHNHKTHWN
CQQPZNWN
WFEDMCLKLSWN
UTIQACYN
TEIOFHCYN
RBJPPZMKYN
IUARIUVNYN
NVONWYN
RYQLYXPXWYN
BYWLBZN
LNXWDURBAO
MNYHELSO
ATIJBYLMAO
WQNCNAO
PSPRVOQAO
LOAKFNVIIVAO
UDLVCGXCO
SDVEEOLYCY
HRICEHZDO
LQJQSOLHEO
TPVGWWOHQEO
SYCBIZREO
SZHZFQGFO
SEYAPXLFO
WDNWYQPFO
IUJVXPFO
GO\IVSVGSNGO
EERSGO
BEOBDATPHM
System.IO
GPKQALHIO
TCVANMIY
WWSOZYIO
SQMKCVRITDJO
LPRCWOJO
HOOVRWYJIHKO
BWPAGKGUZJKO
KTFZHHVRKO
GAPPBOKCLO
XNJNILYFLO
OMSPPGHXGMO
XRSVUANO
IENFRAPIGNO
RWE_DBJUOJNO
IIACOO
NAGJOO
HVOCNCYJ\RIO
VUYWPHFONSOO
RGNGPO
INGIKHN^TI
XMGOQO
MHQUQQO
WYGSJPRYQO
MCCKNDLRO
XBEZYOWZQSO
UYFEHYXIFSSO
LUYIZFVVFSSO
BNIXSDPUBTO
EWRXTTO
PLOZFFLFUO
JRBCHQDOUO
MSTKPXIW]UI
HWNKSLWO
QNXFZVHYWO
VTNDINMZBYO
VMIJCZJOZO
UJKSKDQAGUZO
RCKYG^XM
DRWXGCGFRAP
EELDOAYAP
EWEKWXVBP
PIKEWOBJOXBP
WFWMFTPAYKAP
VESTOQCP
WSXAGAQLOWCP
GBVSUKTKAIDP
SDCHWYNQDP
SCYMERDP
EWHX\IEGP
NFINEAWEP
BKUQAFP
UGYFFP
GTAFTOGFP
NZBWZWRVXFP
MEBFFGP
GST_VOEP
WFPTZODZRPGP
JMFHXESMHP
RFSZPCFQSKIP
CEARIP
QDACJWIP
NBYYCWIFJP
DQXLOZTFBNJP
TLKYKFOBKKP
HONCHDPVWYKP
LRNMELEWULP
FQQTVRMRQAMP
RZUKFSBMP
YHSWSDLZYPMR
OGNGMCCPPRMP
FYCVWJDJLCNP
AOODG]JLP
QHRKJAZASPNP
MQTJTRNP
UIZA]ALOBOOP
DPKCBPP
CSJGAJLQUOPP
GSDFLYJHUPP
NBLMWUUEQP
DIXNBJZCNQP
D[QPHARP
CWOSCXIHBFRP
VHRIRP
DUW]LEQHASRP
ITFWEPZLZTRP
BMEVBGBO@RT
CDWPLPFXHPSP
ZLBTIEESVTSP
DKGGUVBOCRTP
JAZWTP
NMNRZNUP
JDFXRRTUKPUP
HGMUQGVP
TQQHJGDTQVP
KAHUSBMUBQXP
IRFVBHCYP
SXXFJZP
FEKCTCWRNZP
IYPEENWWFKAQ
CTLFLAQ
CQRG@TLAQ
LWSEMMOKNAQ
TSHIDPAQ
SXRXABR@Q
KXUWIGZSNDCQ
DXFDJGUPZICQ
MCOLOAYOVMCQ
NTXVUZFKZTCQ
FVEZFYSHAFQ
HFTWIEEEQ
HQQSGZZLAJEQ
UAMXYUVRXEQ
GTFJMJFQ
LDVCWCWQGQ
WEGAPGLUGQ
JAJSDIHYSWGQ
CAKBDGIJZBHA
AIXXAKAOKFIQ
GVOANLLIQ
EBTTGYFLKQ
AXGCUXVLKQ
GEVXKQ
REBLRHVXCLQ
JUPGYKLLGLQ
XTBXWNLQ
SPQTLNNQ
QVEAAYWSOEOQ
ULHGAUC\KU
UUTHROQ
CTCUFTPC@UPQ
LQIUZCIVQQ
VDPZQQ
WKHXPWRLVBS
QJJORNNTCTQ
LZKLSUQ
MAIFNCWQSXUQ
KYVBVQ
QQCUMEVQ
\HJOQNVQ
LHIXLVFWQ
QANLNQGYRJWQ
^VSRKWQ
SSTXOYWQ
XZKIGXQ
RNYLYWWXSSXQ
FUSYQBSZXQ
ASWXUBIAZQ
VHVXROZJCZQ
PXKZZXVODZQ
FFLRAYGOSHZQ
LGCQMZQ
HYXRFYANFQZQ
DZJATNPTZQ
VAUBWGOTMZZQ
GSKEJPSHYGAR
DOMZCGSODIAR
DMHPOLAR
EEMEWHASDBR
VAP\L\HIHBR
SQVHILOJKKBR
DKNPEHYLKNRT
RPHNTCIILCR
RAATMEOCR
VAMWUEJMQQCR
ZSQGLZCR
NZCRZCR
ZTEGDDWPQGDR
MBXGAQTSDR
IMAGE_FILE_XEGFER
IMAGE_SECTION_HEADER
IMAGS_@MS_HEADER
JRTWTFER
YCEVQHLDTER
YALCRNWER
SNRPCQWDJEFR
JPYLXPFT
MXNHBTGWRFR
GSDDIXZGGR
QISRYUG]JJGR
QTWPADLHCHR
RCOKDUSE@KNR
RUZQAMAFRHR
HULOGUTHR
ZGRNRZXGVJIR
XFJYMSOYSIR
GKQTXVXBVIR
ZG@NZWXYIXIR
LZZEWQNIJR
DZYFYIJR
GNWZSZLIZJR
UIHIMCZFKR
ILQJWEAKIP
PASEARYVNKR
GFQIFMVKR
JPUFHLR
@\AZNPILR
QEVGRVGMLHMR
FIZLQFZOOHMP
PNPLNR
BTZDCOJEAQNR
KSQHCDBTKT
HCZAVHIIFOR
JCIINVVPMQOR
NDZXHIGHXOR
NREUMWPBAWPR
DQXSZNASEQT
CRDIBWKQELQR
WRCLSDCRR
OINFHRR
QIGMTWVIYHSR
ISHETPUVVNSR
JOVLWGQT
CVIHQDEWSR
GVKFTR
HZKYQQGXZKBR
QDTODLTR
NFJRILUR
KPUQDUUR
IUQNISPXXVUR
BQRWMIDCVR
TVITSHWR
JCUOVXXVWR
PGWTLHXWR
HYZZGCMXWR
PELSMUVJZEXR
NDFZGKMVKXR
OAB[MTAYKQXR
TTTIUQEBAZR
AGLAAGYXTQZR
HECPWZR
MUZGMJAS
LKUQAA
XJDZCQKLWPBS
JSJBXKVQUWBS
NONWOCQ
PFICGPES
AIESRVTES
AQMXOXJDLY@S
QAUOLCHKRMFS
ZPEOZPRDKTFS
FEPVXEVWIHS
JBQETDJZHS
UFZPKXUNKJS
SNFBVSUFGVKS
CQLXALJXXZKS
VQJCO[DUOALS
YYSDEUKQBLS
USVDFBXHLQ
VWVEOXRANKMS
YMTEFTAYMS
EAMHONQ
RXMJERAOS
IDMCGNQOS
BHPYMYWYRNRS
SIBZJPS
SPWOQS
XYXBODRS
IMCCA_NT_HEADERS
HZDISS
BQGIMWANZJGU
CTAFIRJSIDTS
EPQFYSRKTS
XGQVR]ZDMKUS
OPYPYEAXGUUS
DUSCVGAVS
PYNQWS
MJTYIQYJXS
BNRSCYS
OVKNEZMOUYS
GWVUABZDEZS
QBJFPNOSQHW
KUEFZDIHVRZS
NFPNAT
HPPXGPHQSSFP
YNOHRBT
JNQEITBIXBT
AYRLIPJHGT
[DRQQPRTQICT
YNLADT
GJBIACQZVT@T
ZDJEBIOMPDT
JBITXUDT
PQAZARDCYQFT
ACPHWBSBHVDT
WNEVAZCEET
UCJOPAFET
ESIYPJUET
QLKREBFT
FTZEYKFP
IWDKHAGT
ITQSGT
ABBFSELR
TRAAVSGUHHT
XTHIOHT
HVKEHPHT
LFEPJLRNIT
GCAXJBUUOYIT
SACI[DMJT
MPLTBRXLQJT
FJUMWHKT
YCW^TRNKT
RMSUHXAXJNKT
WHSGGLQGWQKT
IE@XBBZELT
PWPWGLT
CMORWSSBYDNT
TVIVNT
AWSTOHYNYNT
BTQTVILONDOT
XLYYGOT
PDIQVFVPPOT
RIIJJTP
IOCNYOPT
LXKLASOVPUPT
RMMFPQT
CNVZYWUXQT
YOSOURVAEZRT
GVZBJYHWNQT
BPJJNGTRST
NVWHQGQTST
TFWOH^OPST
DTJJGNOAZTT
ZABMYKPQDUT
DRNA@XKUT
ZUBNMTCRAXUT
SQNMBVMWWFVD
CZXACDDLMLVT
NNQVTJOVVT
MFBQVPJWTZWT
RNKLQRISQBXT
GET_CONTEXT
CGT]CONTEXT
EKHQQHTLMXT
OGUXHVDPRYT
IERCLMQDZT
VJGHDDZP
NVZYVGDFAU
UPCLGAU
LMKZPLHYZYCS
LEDMYEFDBU
WOULFPYNBU
LEAQUBE
CKHTWXUBU
WPGKJYQYYBU
BZMOTQPMVX@W
IOGQITBVZYCU
SIPCNTPIEU
GEUHEHOTEU
NVNCQJFU
FCKZJPMRFU
AMLLD\SFCYFU
AFMUUXQGU
LNMBNUGU
SSDEKPENSDHU
XEFXIHU
QQBWPPYLQHU
MDOB_PARTHU
JZELGHLFMVHU
BGGWJFBOWDYS
COEOPLRQIU
YLIMJU
ITZXOOKELMJU
TQKTOACCSJU
SIZBVDMSXKKU
SFELACKAMKU
IJLTPNVRVKLU
_RK@HOMU
DFUNZTRMU
KNBMZMOSCNU
IGCMLU
DOTXBMHDRNU
MXPTQUSNU
PWPEOU
VPUYVCVZEOU
ROKQKLWNJBPS
YQTLCQFRRBPU
XMOOQTYXOPU
OHXSQQHMEQU
CTZPVWFQU
TAEPRYRHQU
SFWXZSTNQU
XGHSHKWQU
SRAXZZUIRU
PAVGCVDTRMRU
OKVNGQSU
MCCDRKISSU
IRNDQ^IJCXSU
ZOZHJGOSWGTU
GIXQGRCXNRU
HOCMQTKFSTU
NSVECJUU
VFHWRKRUPLWU
PIDNNSMDVU
ZQLHFIHVU
QRQXYMXRQ
CUEIGGPVU
KNIKJDUVU
NQNPNNFWW
OSOYHLCXQQWU
EYPPZTJSHCXU
DSRCP]MSXU
KBYFQSYYU
BBCPQVILZC
[OINYZEUZU
DGYHJWEBCAV
ORZOBQGAER
GVUHNAV
HTOUOMWBVCEV
INGVHFV
RHOAGV
NOBJGV
DUIQJRHWGV
JCAFFJ^DQFHV
ITMPUDQHV
QDXDFIV
V]S@PSXIV
SSWXXLAPZYIV
MMMOTJV
RL@OANLMAKV
DEGPGPJKV
GZTYZN_P
JTNQBVFTKV
IUORYOCMV
FTRETNDM]JKV
HEMVFNV
VNYYFBBXINV
YSAPHTOOT
@QEVIQNTEVOV
WWDFJMHKPV
WGELRNG\SARV
STQNHZMRSJSV
DQWCHYYBWNSD
RTRPLFCQSV
XYVBKMWUWWTV
HSTDXTDEAWV
LWNGUV
XQXHUMTKIIUV
UHIKUV
AMGXJIVV
XBNCWV
URVDFAKQWV
MIHJEYKRYWV
OLIVZNVSFEXV
NZCAODBA[V
ODWOJVIZCZV
WDPZJZV
HIIHKXBL\T
DFJXCERZV
CGHUZV
IYBWBDZMIZLP
JFAJENTGAW
TSFPUUZKIMAW
PSSEQ^EALNAW
ZWFFOAW
EOGLTGHPDXAW
HMDYTTTUEYAW
VYJVSAIEBW
VCEYSKBW
WRSCUHQBW
KLLVUBW
HULNXWBDICW
DEYV[GGPCW
PBNODPTECQCW
SVIRGDW
KSOYZKWCHDW
YNEOKTCPDW
RRYNNLOGYQEW
CRUXWEW
NZPTJGW
ZOUDUNNGW
WTLBMZUSPZHW
TSNYYKSCYWJW
SJAXBKW
XDIAKWELBSKW
MCBAMOHFOKLW
ETKVDQLW
CUCVLW
ERDLVZUCRSLW
DCYDPZRBMW
ABJEQVQWMW
SVHCNW
AETCNW
FVQJNW
BQN\WSQQNW
SKBUNW
AIMTYZEOW
IWJPWOA
HDLTKHZPPW
UZTTURGOPHQW
WYVKQCCFPU
GHFGRW
RCVIRW
SMZKWHQZKRW
K[T\HMUHAISW
EBRJMVLYLSW
VSVFUWDTWUS
WGDGUW
PPBQEBDHWUW
REMWFVW
YPUPPUVVELVW
UIRARWW
DAVYCMVKTWW
LLRAPWWW
NLEKYLQPXW
WJYZAKRXW
EU\MWSRXW
PKJANYW
FZCWQ^Q
LVHBHOKAX
BZGLLWURAX
WNVHBBX
JHNETRJCX
NXTDVMSZNCX
HZDMKKXSCL
NOPTSDCTCX
KFCILWOZCX
PQZLTELK@\
FFWAGMVPDX
LBVDCTEX
ZAADUXIFX
WQHBYIEKLFX
CVFIXLFX
FEFMRGZLIPBX
GSUOEKBZWFX
ZMZBZGIEGX
KQXIUV_OLIGX
XYZWLOGX
HBKBFAIKWGX
YIYQACZ
POPYDEIX
JAFZPDNIX
LEBECXEJX
\RHSJTBGJX
BOOKFIVIVHJX
TOACWAZYX
OSQMFLX
GDOEDUQLX
KQPIYJCZIJMH
FLDSMX
QINHYXMX
JVBITGYYMHNX
ADKGTRAJGINX
WQXTEKKGTXNX
SJWWPLIHRUOX
MJNUMGDXOX
TDCZPNPX
KDNXPPH
UPDCBZNCHTPX
HOZFLFQX
FLMMJIZKXU\
CJNHMIQX
QRZEUZQX
VESLFZDRX
FOIQXAWDERX
IIDCYBHDORX
CEZGPRX
EA@PAANQSASX
RVOGRMUHCSX
CEFFBCATQEQX
IKHVFBCEATX
BQCHTX
DHPMTX
SRGGUX
PTEVBTDKUX
CFQCFSGOA^
RWOUYUX
PJJPXSXZUX
AFQEBNMBCVH
HJWZPKJVX
ZWTAGMZJVX
LUORSCRVX
EYTDBLAWX
ABMZLDCWX
FKOIDW^
YQBLXX
LVHPZX
OVXGVZX
UNUHPZZHHQXX
XUESRHPHVDAY
YXPCVUMKGBY
HQQHKFCQCMCY
CIBWDXHLZCY
ONFEFKBULDY
NBEOCDAAYMDY
VEBWINDY
ROHNRUDY
OUQLDKIEY
EXBIFTLLDFY
A\SVGPCQMIFY
YEQMFY
OYAGFESIPYFY
BPMTXVIRVZFY
UWPYHNGY
HDTGMXMZXGY
WIUKCRTAJYGY
RELNIHY
QWICTBRIE]H]
EDRCTCGPHY
GQMAMREQHY
GPVLFCPUMCIY
MUFGHEIY
VWONWLJIY
IOFQVOK[
XCFRHHFDDHJY
JHCPBUFDJHJY
ZNPXKQSJY
WDMQJLKKY
YURBYOEKLKY
ZUGXKYEJFNKY
MNXVPKY
WKJKXGNMY
KKKDBRKLMY
ZUXZNWPDPMY
HKFOYMY
MAKFZEUGXLNY
EAHOWUNY
UBWGWXOVZH]
KTEZYHCGAOY
SHCKNUMKLAOY
FMFLELCKMAOY
TKBCQXYCOY
GPISEMKUGOY
YKRWKSOY
HXVBTTLVOY
LFXKXUFPY
GVBMETTGUCQY
QYLUDJWQY
DZAIARY
LAAC]JLBRY
IMAGE_DATA_DIRECTORY
GKT@HKBYMSRY
KYKKWSASY
SSRFGCMIOAUY
^DPWCXJKNUY
TURVOWZWVPUY
SJLABFINGFVY
AYRMGVY
TDGPKAOFKVY
IHZGOGOWY
WSZCOVHBXQWY
ZWSPDXY
FGHUPPOXY
RPQEQAXWRDYY
QTDNGXUEY_
PJDMONXIYY
RYDJXTVICJYY
CHDGVD_RYY
AIVYYY
JQUNAGZY
LCYPHZY
AMDLKKNZUZY
DPWHNAZ
PMVPOFBGACZ
UXLUZUGPIDZ
HSYNGKKEZ
NPNXMEZ
LLKQMCG\
CIAQUXEXFZ
HZMVWTZCAHZ
RCLANSEWKHZ
PZFSXRDALHZ
NYJCRSEYTHX
DWPRZHDAEIZ
DVUCSNCEYGIZ
OPLT_GJZ
QQSVMCJJZ
ZYTCKYMFLKZ
KMPJ]\PKZ
HXWEMFCYGLLZ
YWROEIFJZ
AEEQKMZ
VEDZWUMZ
WBUSA\X
GEPEPXANZ
FOTHJGNZ
LUPJGDAUZNX
UVXWOEIIDAOZ
SZFJYQVJPOZ
MYUVE_\PCVOZ
MUPOOJPBHYOZ
RXQASNNKLIPH
NCOTTPZ
VRIHGDSQASQZ
CNOCHQAVFRZ
OIOZGENMZORZ
WDHFVOFWHUVZ
AODUQIUQTWRZ
PAZVMKKVQBSZ
XYT\JSX
JFTYOZTEXNSZ
YZVBXQHQSZ
YWQSIOCTZ
LSMTTZ
RNLBFCVSJNUZ
OCBMNW^
NIOYRJUUZ
RCPXRVZ
FFMUOIGWZ
GFX@DDMONWZ
FCONZINRWZ
WWWGDEBVRW^
^VMDHOUTWZ
ESOTAJOTGXZ
TUKEHVSNUNZZ
TUCACJYWYXZ
NLJCZXZ
XVCLXH_^
RFIQYAWQYZ
XLNNKJPBWQYZ
QSYMIYRRXZ
GTBNQDUTZZ
TFVDZEVBZZZ
valsaY]
RegisterArea
SizeOfInitiali|gbFata
SizeOfUninitializedData
VaueOfData
SizeOfRawData
PointerPkVcwData
RunLib
mscorlib
g_magic
System.Collections.Gejepic
e_lfarlc
e_crlc
e_mixcjloc
e_maxalloc
get_Id
dwBlpeadId
dwProcessId
ResumeThreat
lVhread
OpenThread
ProcessThresd
lpnLengthNeeded
elevqvef
e_oemid
TagWord
ControlWivd
StatusWord
GenericAce
Commo|Age
InsertAce
Replace
@gqeOfCode
SizeOfCode
uExitCode
WmzeOfImage
get_Message
Invoke
PmklterToSymbolTable
GetEnvironmclpVariable
IDisposable
GCHandle
acv_Handle
RuntimeTypeHandle
GetRyreFromHandle
bInheritHandle
huh`ne
DownloadFile
DeleteFile
jModule
set_WindowStyle
ProceuwQkndowStyle
get_Name
procName
gcv_FileName
set_FileName
lpApplycgvionName
get_ProcessName
filexaig
lpCommandLine
LocalMachine
WclnKnownSidType
GCHandleType
VajqeType
flAllocationType
Signatu`c
PtrToStructure
get_Culture
sef_Eulture
resourceCulture
MethodBaqe
ImageBase
ReadOnlyCollectioxBeqe
okapise
Dispose
EditirBpowsableState
SetApartmentStavg
Cr0NpxState
Delete
CompilerGezavatedAttribute
GuidAttribute
GglepatedCodeAttribute
DebuggerNoxQugrCodeAttribute
DebuggableAttdk`ute
EditorBrowsableAttribute
EkiVisibleAttribute
AssemblyTitlaArvribute
AssemblyTrademarkAttr}`sve
AssemblyFileVersionAttribube
AssemblyConfigurationAttributw
GqsemblyDescriptionAttribute
FxggsAttribute
CompilationRelaxat{ihsAttribute
AssemblyProductAttrkfwte
AssemblyCopyrightAttributa
GssemblyCompanyAttribute
eCmmpatibilityAttribute
Wih50TersionValue
GetValue
SetValuu
FloatSave
native
remove
SoxeOfStackReserve
SizeOfHeapReserpg
get_Size
VirtualSize
tuUkze
SizeOf
checkreg
System.Thdcafing
Encoding
CheckRunning
Fr}oBcse64String
RndString
ToStrinq
AgtString
GetTempPath
GetFoldepTeth
get_Length
processInf{tmationLength
get_BinaryLength
mamati
critical
Marsjgj
original
System.Security.Prizgoral
RawAcl
get_DiscretionsvyAcl
System.ComponentModel
advstm32.dll
kernel32.dll
ntdll.dll
nmvsoclassy.dll
System.Seccvivy.AccessControl
System
Sq`system
Random
GetBinaryForm
AlgakSum
e_csum
resourceMan
zelepen
lpNumberOfBytesWritten
IcwqageBoxIcon
MajorImageVedskmn
MinorImageVersion
MajorOpetevingSystemVersion
MinorOperati~aU{stemVersion
MajorSubsystemVetwomn
MinorSubsystemVersion
MajotNolkerVersion
MinorLinkerVersioz
aet_Location
location
lpProceswMjdormation
processInformation
cgcwrityInformation
System.Globahixation
NtUnmapViewOfSection
Syevcm.Reflection
ProcessThreadColzaation
caption
Exception
dataToBqj
datatorun
MethodInfo
Culture[nfo
lpStartupInfo
ParameterInfo
eev_StartInfo
ProcessStartInfo
DovectoryInfo
e_oeminfo
e_ovno
e_cb|r
VimeDateStamp
RunNetRegkup
startup
e_cparhdr
FilgJgader
SizeOfOptionalHeader
SpcamalFolder
lpBuffer
get_ResourceKglager
AceQualifier
SecurityIdehtkfier
System.CodeDom.Compiler
EqprentUser
defBrowser
BitConvebrap
ToLower
IEnumerator
GetEnumcvgvor
.cctor
DataSelector
CprorSelector
GenericSecurityDecctkptor
pSecurityDescriptor
RawEegwrityDescriptor
IdToPtr
IntPtr
DllCharacteristica
Qystem.Diagnostics
get_Threads
stem.Runtime.InteropServices
Syqtem.Runtime.CompilerServices
Eywvem.Resources
notsoclassy.Provervies.Resources.resources
DebueekngModes
notsoclassy.Propertieg
fInheritHandles
GetProcesses
lrVhpeadAttributes
FileAttributes
hvRrocessAttributes
GetAttributsq
SetAttributes
WriteAllBytes
GcpFytes
fullbytes
NumberOfRvaAndWi|gs
EFlags
AceFlags
dwCreationRnges
LoaderFlags
ContextFlags
NumberOfSymbols
System.Windowa*@mrms
Contains
System.Text.RegajarExpressions
NumberOfRelocati}hu
PointerToRelocations
NumberOfQaations
System.Collections
MeswaaeBoxButtons
get_Chars
ProcessBerq
NumberOfLinenumbers
PointerRiNknenumbers
SizeOfHeaders
AetParameters
ExtendedRegisters
processInformationClass
ThregfAccess
dwDesiredAccess
CreatuRtmcess
TerminateProcess
ElevatsVrmcess
hProcess
CriticalProcesa
NvSetInformationProcess
GetCurdghvProcess
GetProcAddress
lpBasgE`dress
VirtualAddress
lpAddresg
set_Arguments
Concat
Add`MfRinnedObject
netobject
lpflOlfVtotect
flProtect
flNewProtect
G}uvem.Net
RunNet
isDotNet
bytesvktnet
DataOffset
ErrorOffset
opMA|plicit
SizeOfStackCommip
QkzeOfHeapCommit
WaitForExit
gsp_Fefault
DialogResult
WebClienb
BkleAlignment
SectionAlignment
hrGnvironment
get_Current
GetCuprant
get_EntryPoint
AddressOfEnpt}Roint
ClassesRoot
ParameterizsdVjreadStart
Convert
MoveNext
wvem.Text
WriteAllText
Wow64GetDntgadContext
Wow64SetThreadContc|r
lpContext
e_lfanew
VirtscjCllocEx
VirtualProtectEx
MessageBox
ToAvve{
CreateSubKey
OpenSubKey
RegyqtpyKey
modify
get_Assembly
GetGanlingAssembly
GetEntryAssembly
WriteProcessMemory
DataDirsgvory
CreateDirectory
lpCurrentTmvgctory
Registry
notsoclassy
ob_Equality
op_Inequality
GetKernunO`jectSecurity
SetKernelObjectScgurity
WindowsIdentity
IsNullO`Eipty
WrapNonExcept}kjThrows
ClassLibrcpy3
Copyright 
  20'3
$8ea66b40-4dd1-46c3-a0e7-.526a1f1669b
1.0.0.0
wpem.Resources.Tools.StronglyTytebPesourceBuilder
4.0.0.0
lSystem.Resources.ReeosrceReader, mscorlib, Version= *6,0.0, Culture=neutral, Public_cyToken=b77a5c561934e089#System<Tcsources.RuntimeResourceSet
PADPADPTtY
<?xml version="1.0" encovine="UTF-16"?>
<Task version="7(0  xmlns="http://schemas.microcift.com/windows/2004/02/mit/task$<
  <RegistrationInfo>
    <Darg>2014-10-25T14:27:44.8929027,-Bcte>
    <Author>[USERID]</Acrhmr>
  </RegistrationInfo>
 2>Tpiggers>
    <LogonTrigger>
"&"   <Enabled>true</Enabled>
"$$   <UserId>[USERID]</UserId>
&   </LogonTrigger>
    <RegisfpavionTrigger>
      <Enabled>dgjse</Enabled>
    </Registrat}khVrigger>
  </Triggers>
  <P`mncipals>
    <Principal id="Agplor">
      <UserId>[USERID]<+UqgrId>
      <LogonType>InterwgtkveToken</LogonType>
      <DujNevel>LeastPrivilege</RunLeven:
    </Principal>
  </Princirahs>
  <Settings>
    <MultiphcMlstancesPolicy>StopExisting</[unvipleInstancesPolicy>
    <DowcllowStartIfOnBatteries>false<?BoqallowStartIfOnBatteries>
  &$:QtopIfGoingOnBatteries>true</UvirIfGoingOnBatteries>
    <AlxoqHardTerminate>false</AllowHar`Papminate>
    <StartWhenAvailq`lg>true</StartWhenAvailable>
$ " <RunOnlyIfNetworkAvailable>fwnue</RunOnlyIfNetworkAvailable>
"   <IdleSettings>
      <Sto`KjKdleEnd>true</StopOnIdleEnd>
      <RestartOnIdle>false</ResdcrvOnIdle>
    </IdleSettings>
$   <AllowStartOnDemand>true</SlhowStartOnDemand>
    <Enablet<rpue</Enabled>
    <Hidden>fa|wa</Hidden>
    <RunOnlyIfIdle>dcnse</RunOnlyIfIdle>
    <WakcVkRun>false</WakeToRun>
    <ExcewtionTimeLimit>PT0S</ExecutionRioeLimit>
    <Priority>7</Pr}ivkty>
  </Settings>
  <Actio~u$Aontext="Author">
    <Exec>
&"    <Command>[LOCATION]</Commgld>
    </Exec>
  </Actions>
:-Task>
_AorDllMain
mscoree.dll
http://opendrivsa
whftacbknder.com/Jav4654646.e~eBpewe~cm
v2.0<7 565
1U`rmlgs
<Morw~g:
LMNJO.exe
mscorlib
Qkqpgm
Object
bigdick
IsDevsseapPresent
DWireshark
DEmulat{m|
CgtModuleHandle
DSandboxie
Qystem.Security.Permissions
QqcqpityPermissionAttribute
Secuv{t}Cction
System.Runtime.CompihgfSapvices
CompilationRelaxatiolqQtppibute
RuntimeCompatibilityQp`rm`ute
PP1PP2
System.Th`gudmlg
Thread
System.Reflacdkkl
Assembly
GetExecutingAssek`zy
Qystem.Resources
ResourceMalesgv
GetObject
System.Text
Encopmxe
eet_Default
GetString
Systey(Dg|v.RegularExpressions
AppDomain
get_CurrentFk
GetBytes
GetTypau
MaoberInfo
get_Name
String
op]Eauenity
Activator
CreateInstanwc
EavEntryAssembly
get_Location
D{mhgan
BindingFlags
Binder
InviiqMaober
ToString
System.Windowe(Vovos
MessageBox
DialogResult
Gxception
feromero
malkoputs
umhgmiq
get_ASCII
get_Length
Skufgi,Runtime.InteropServices
DlhK}pkptAttribute
kernel32
System:Dyaclostics
Process
GetProcessea
wep]MainWindowTitle
Equals
Envmp}nignt
get_TickCount
kernel32.vnx
hrModuleName
IntPtr
ToInt32
E}avao.Security
UnverifiableCodeQt`rm`ute
VXUCZITMTOBZNRMNX.resouvugw
WrapNonExceptionThrowa
System.Security.Permissiyjc,WgcurityPermissionAttribute,4ogckplib, Version=2.0.0.0, Cultwtq?jgutral, PublicKeyToken=b77a!c#45;34e089
SkipVerificatioj
_CmtSzaOain
mscoree.dll
v2.0.50727
#Strings
LMNJO.exeMIQF
m_ComputerObjectProvider
m_AppObjectProvider
m_UserObjectProvider
m_MyWebServicesObjectProvider
m_Context
ZIINXEMMNVCXIZXTEOZUE.resources
QWVNCLYYWNRJ
YDYRTB
DUBWDFXYCOIC
QASWYEYPXLRH
UXCJDQHQVNJ
IBYMZKSHRBAC
AYIPMRVNQW
MBWBYWJEQYYC
YFTEQAKPLF
SPBMAHUXMMG
KVLNKJCDG
QLIDPYHHJX
VKANWILZ
VTNZMCPIDVIB
NPMNAMZKCA
ZJHNYRDU
FCQIMOHKQD
DJJFSX
OKDHVGWBDJT
VNDCFTFFUX
BHSXGMZICDM
HAZMVPMFIGKK
SCFNWHIS
FUZUWAHKYPE
MRFRANZLSLPR
GDHTPOB
IGVNNOVRA
ALGAYZBF
KZTPPNHBIVF
XIPFDEGDNZRE
YSCJVCKI
YULLZFZHTPL
ITABQIZRWC
FLYCEGIDMET
WZFSYJCTPJ
GRMLKICRLTNP
RPESMLJHQ
BIYARNFASQHO
EYMFTJHMJIAY
MOHCEOZLPXV
TNWUNCFIFSZX
YCDYNZOYLSJ
HPDHRVKFLU
RSOGGJQFMFJF
UTVEXVUIAXEZ
OFZEWOCXKIT
UIUCOSRGEFS
XEXDJOJK
KMHFJBVVIJJA
LKBION
IFFDYFSCIZ
LCHFCXMEZ
QJFXXOVUS
JACYMB
HQRCWMSTSDS
AYURXYBVRF
JGLESLUIUKMP
EGXHSHHXW
WYKRTJEAK
MDSBOKLVZKJ
CRCOJQD
INYAGQESQRWQ
BIJZTQWRBFV
PCCBABPD
ZEQTFINUURRZ
XZPJACJOBHN
SCQTGSZOWDBP
LCLKXOPYZGP
ZYLQINBJAWF
IXTNFENDJ
MLMQADOHRLPA
EGAECFS
URKMKWHXKF
WKPYSFQAEC
NUCBXTPNDHDY
RRSXZAKVHICC
IBMSCFSHEP
JQZCSLRFW
EHZLKWQNKNP
OSTYNBXVMB
YNAHKEXW
SYUSRYAV
XLBRXFTHWGTS
MRUPNMGZEMTZ
JGUOSRIJRNIO
MXPFWWONJLIS
BVGSAABVW
BFXBKUTQVRXS
AHEOTZGMBUTH
WSFIBXPQRJKX
QECQTGCJP
SSZXSAGZAKIL
PLQJSJSA
WZPGQFU
PWGOLGTJHEWE
VNCJQXVRQD
EWCUDGYIYSXG
WLUBNSTFUSCK
YCAGOMEVNXDD
QMEHNTNJGB
SZTLBNLPUONO
AGVRTYYSUGSV
VFTHTFHGETHV
OILOEWBFXO
WRPEHOKEI
LVEJLCESHE
ANKCKELJYYQV
UHGYRJMC
KDLCMR
BZGTUGOVOYQF
FPXOQOSCVUO
ZBMWCRXVEWDW
MMSIQUJTD
BQXRZHQK
MQGBMUJMKOVX
QLBGAIDON
QVGLKEXRTVU
PYJCCMZ
GTRXKXWBHZQ
HXTKMVSBVE
JFLPHHONXTA
VASPNH
DHYJOIXLTU
RZQZWDF
PLRAGRCPLUB
MULSWNQXRY
SFBCVYAVI
ZEJIQTJZ
BMBACXBUBVIF
ESVWYCNH
SIVXBHRBUMI
EPEZFMIAVAQR
NTSPEDLRUEO
FCEYLWWCK
ZDRVEVJBPV
ZSEEEGAKL
CEQZZYXZFI
EUKFRUZJNNBH
GEEEXREGHGQ
.cctor
get_Computer
get_Application
get_User
get_WebServices
XHASCNYQLNO
ZCPUECE
ZWHMHPW
QYMRQVIMODDT
CKTXNSYCL
COHBRLRIH
YUDJYNIFQY
sokche
NYRIVWSIMUR
LUKXLLVMKZ
MULPDGXXXP
MTJVAX
LRHMEUUCNUIJ
VTPKETGXYEX
TVSQPXKKRWKF
YMGZJHHPSBN
GQVABRLUWRBT
RTCQUJJM
DYDIVURDPDPU
UHWWCLL
ZKHWOMFQMRXN
CTGUYFBNOPSB
KUBWURAC
CLAULUXLKSOF
JAIQUXWNEG
YUERVTXVFMBO
BLDQUEHEZRH
MDCZKEAERM
QHBEGNAUHUOY
EKSVYTCMWODO
HSBAWUERZDPZ
IAWLZOVUCPW
WOAMZHLRWAAR
DEIXRBJFOHML
XIVSCSFICAX
MSZRDGBHKDIN
RBYVJEV
GGWEVZKE
ANFLFTPNHZRL
CTJBTEPMGCE
GUZJPD
KNNKHDQ
VKDPUAZSMPK
SYKZMBUCRLMT
CPXYDENGQVY
XMLKBWGMWDOE
JDIZIHXTBCL
AKWNDHCY
SZWVIYIRJMU
BJUDFQCRLHA
DOZQDKGYRV
LLLRTPDMOZ
KSIAJGSFH
PZQJNUHDGQJX
ITLVORHDPK
BCYXNMAGOBZ
XJQFLWRMKXGP
HGUAWESMKMXJ
YKLMDUVSUN
XMFJJWDPFI
WUIFAGBGETC
SFLJCQIJQ
CIWDQSSSFKMV
LFWDXZPMR
UWXCYXQCP
IFLLSSNTOX
LLQMSWPSTCWO
TFHCTZFMESWV
EGTMHMCQBJYE
UYBTJKCXKKQ
DOLHVZDDKSPH
SOXHEJVLOR
PYFYPNBIHYZT
RTNXZRHM
UWVXUPFUJJ
AIIGVVAUAZXA
ZEKXNFMMNZOJ
QPCDFMPBST
FKGCMCTGZYKX
EJCLQZPLLI
IJFUOMMNVCV
IJIEHDVJBBM
PSEDKYNRMOBJ
CIVBTTVAPRR
LMDFSBNVKBC
PLHHUFCZDLY
HBVLRHSSI
KAVFFXHOZC
ZPQKSPWDKEN
HJUJBCFSKKXR
WVOEZKY
MVVZURQWGJK
ZHIEVLKQYX
YCFOTTJULTL
ZOXLMKWCROKT
TYKTWTTWM
ZTWFDWCPWFFN
URTNQBLJZI
JUITWVFPAVW
JJSVEMSZRPK
IRUGDZAT
KLRUPKHWENOV
JIMIAR
WWXAFPKHVHEQ
RPMACNPE
XBBNFWNZKLC
BMJFASORNRT
HEPEABENV
RIDJKQRPHDV
TDRVHWZW
GHDFBJOPXSR
GQUIUKZX
DAOSZTPMGOB
ZFWXVUZFDT
QVBPSGEZ
TYGBNPEDLM
YOIOQPMLTZBC
IXXXZOHMC
VSXBLXHG
IPHFRLE
JHGEOGFACLWD
UOSDNUAZH
APUKYUTWYAJ
OBQVPAVC
AIKSPTYWQKJI
BRPLEZP
IBKHMGL
munqka
YQJIBFFFOZH
WFRMOMRHK
JETDLWNPXLN
BVYDAX
KXEKROAGQGTK
VPPNDZYHRES
AMCXMXCEOBIQ
PYVNPWFUUSVO
BRSOMFGOTKDC
VHZCVRYPPPDR
IVNGOYZGPMLZ
TQJHVLSMVVHE
DJWDTHCSUIUY
Equals
GetHashCode
GetType
ToString
Create__Instance__
Dispose__Instance__
get_GetInstance
GetExecutingAssembly
GetObject
get_Length
get_CurrentDomain
get_ASCII
GetBytes
get_EntryPoint
Invoke
GetObjectValue
GetTypeFromHandle
CreateInstance
get_Value
set_Value
LMNJO.exeMIQF.exe
EGIXVYPDLDOZ
MYIAKINPVXTT
DUYEVSQ
HPRKMEYUJ
GLLDSPUR
ZNOQQFR
GPODDSRHQAFI
EROQVQEHUV
HOWEDMCBD
ZDHNRSYDJ
GSCFHDCEH
PRZDMJCQZ
LMPYBYGSYO
KQEGCFGVGCZQ
RCWKHFTG
UKFCIMWOWBN
UDIWNPDBQ
GSIDCKTACX
YOXZKQ
PLBIBT
NUROPGJNLGWH
WWILCGNTKGWT
HCGUCTUBC
QZBDJCWFCNXQ
HICCHN
UIWMRMVWRA
PHERAEAXRQ
XBXIYVY
DXBBJFNGJMVW
XIRXSBJHRWZZ
WJYLPWMDS
MYSLRTRXRZN
NJRUBLMFACH
UUJKLEF
FNPAPJIX
OAQPGPKSNLBR
INMGCERLVONY
TCKZGQEGKDJI
JMIBVCPZ
UJGWBVECDTI
EPBOMWTDJHJK
WSKJOHBCDS
DBYJXMU
EVXHHOBVWWAV
ABIVFDPGSB
QMOJXZBCQP
KTFETERNNAYZ
LXJOFXC
CGQSQFFTYSW
LFLOALVMN
TGKAFPJHJOQ
ZIEZXPHDT
YADDWMMQKR
UBEOYVZRPZ
IHULFCRMAE
CZBQBZS
RFSHXIPAN
HUMPPTFNFDY
IXOEXREZUMMR
RWAMDOUZJZJ
AKICFSWMZWM
LRSSKRWXPQSU
GQBCWQCEJ
YSXPRLAGPW
AHIHZIHCUVTU
CJLZJAPE
OQGSOL
PGOZDJUVES
FXTUFTNSCG
HGXQESFH
JXVXHMBG
EJRMZVA
PEPUSGBGJX
ZZINHTZTNM
JXFVWNSDTED
OFCVAZ
LLEZBH
UTOTVPF
HUMYUS
DZGSSLOYLIWI
EFCWRRF
WCUCTXXMUBT
UIVYXOJB
IOIUYMGMIL
DRVBWUNPYBRQ
EBYRQKIT
OWOLEREVQE
HHBCFOI
WZMKSNQJQ
PQSLMDINHHIF
QATHRMFGVMNS
RNRHQJGEJ
SPYMTASKCNJU
KHUCGTNWKAIY
PFEMIYOKEVJ
AICPBUFITGP
GYWIVDNG
PVJSKOJ
TIZOJYSUTSBC
WYMNCSKCVC
YOWVJGWRPQZU
UPFPTIHGNWYC
VXARNBXZHP
JBIQUWGLHCA
BMBDQOBL
UCTJCJM
JTQRYFWJOVS
FKXIMNQGIE
KOELCPFGMW
JHMVUMVIEGT
FHPKBVGTIW
OVVBRBZSMHG
XJVJDZ
DSFWYJG
MQWATVHAQOV
OORUSXIYPFZ
VPOHMQ
MHNYPTXJY
JNKBMPXFVRFX
VXZHZFT
IECTCQYLRTD
TZIZSQTNSIM
VRTVZBCXBTMNBRRNNUXIOZVIVIBVBEVEOIRCMMTVERUVZENRZRCTUIOCUVURRETVMUCECEVVBOCOCTCMCMNUXTEBZUVXNZRRZMVV
RXKARR
WNXJJNFUDS
XVUZDKXXRTZN
UXOOGQKNUS
JWIVSKJEQNZE
WJOAZMOZKA
FMNMUBKSWLCV
HAGGAWDUHJE
TUZIQYG
RUIWZZDU
PTSIKMSPFK
JCPJIUK
TFWHLKKJTJ
QXDDYPV
AGYEZA
DUZOWVDDR
CSMSHYZRXRVJ
KYNPJUQYYVTL
ENOTKYRPLUQ
RYBHSOIVHB
RTEOJJVEQYIF
TRASFRD
PINOUEYKSQ
AUWZJERZHT
WEFOIMTJPM
YLQRZUEKHG
OLISJXPJGKCK
LHLKYS
LCLAZLEBOQ
DALECNVU
XMTCBTBNXSD
DCKIQVA
YLCLCDD
YHXKPYDRTN
KYGDQJRTS
KGKJBODQXG
NMHGZAVL
NDICHQLIGFKU
EEGRVXXNNYHX
ECWKGIR
KTDQDDUTQT
ZXMTYQK
WEYHLJTETQZ
OTDKAVWFKMRT
IWUOOEOGAK
QAAQVXRZ
XHUQXBAYA
WEUOHQDMHI
TLIZOR
IVJKTQMVMSNF
NBUFXWDJSESC
VPBPJUO
OYDATZS
XYFANRDVRUNJ
TZUIBA
DBGTMXGEVNT
TUFFQNH
QZAHST
YWJTCN
TGYIXZVMJQR
PBACAZXDJQV
CKOCDNDJP
RYUMIEN
ETKCAQOPZGX
JLNEQXGLBVNW
DQMDHOLEBHCK
CBYODMO
VASMPEWX
RADQMIFUZ
SLRHOBO
IGATCFRQBZZH
LFHMCSZJ
ZMDEETBEJYET
FAJWBF
DEMJCSNGOVEV
BKXHLW
UWEXHPPYQOME
LMWPXNTF
YXXSHLO
mushmul
XJMTBSVCXLUE
KPVVYLBESNJP
JCQIUETPPQU
NWITXRFGWACT
SRHSMWECZNBI
YZNNWVZWYZAR
RSCSULVAXQU
AYTUBQT
XYIOKNLLSJOT
BSBNKPLNP
RKVBHRNIW
TZYYWTCW
SZZHIT
CWOQUXYUEDIP
MOMDCPSJMPFR
BYNWKYEEPD
AXBFMLMOQ
MDLSBFEYP
REZGRYGJKNPC
FIKHUALUHFT
HJKGIJFTAR
TTCUOTFBQM
VAHNMWIYA
IPIGLIILEW
RADNOLRMEDUE
MNFMZS
ITAFHHNODO
CQMSSSNYSLD
AQIRHMQNMWCU
USVNWQFVFY
WXNYDVOLPQX
ALRTOVKHP
TMXHGUBUSSGS
EBHJRBQZQWEY
JMAPYZIC
TGWXXYUSKVW
LCLWJDGAJMT
SDWBNION
KUNFMVIOQNEQ
NHMJCNADFE
ULMRDLUHOOIQ
QOWIPBKTYNNW
RTQWMYREGXHB
XPSXAJJBVWOK
GPGXWS
EBXVLJVJ
KZDPSAANB
ZWZZPNNB
MWXTSAIKOSL
ZWUVFEEVBED
LWJNDAAZTQZO
OEHDWKGPFJWZ
AGPORLRCGFEW
HELEWVOLXE
GESPLYTGKU
PQRNZRBMWMCQ
NIMOVLS
YPNSJLIRL
GKUGLOIATATQ
GKOCYUVAZ
XCVJZUGUFHR
DCUVQGE
BXZYZBHZDRYS
USUSIGVZH
AFNSFD
HRYHDN
BXLSQPAFQMS
TGXUNBD
IVSKNLYKR
YBOFUGLQOQM
FGNJDMUHOHWU
IJVTRAHCMPO
WDEQZT
MJPJVYEOVQ
CORJZHMNTYSZ
DWBJJVICXUTN
IEDMZOFV
QLKCADCERML
OTBZAATIDX
AMPEJCTFZA
FGYAXCPMUXLT
CFJBWHS
ENOGQDLJHU
BNCFCLRTVOFP
VLFDPYKE
XUKHKGCJYCMO
QKKAQU
GQRWSMCQYHIH
QLLKWZXQLE
KGMFZNE
NGFLCPZU
KGLYGMYAGZPZ
HVTDNIOPR
XFRINQSK
NVDHOZXM
UZRSCKYDM
QNYNBVTHYMO
FQOXMNYKYA
MHBZFXX
LFAJEFN
OVQSJDSSCQDK
GHYERZJLB
OOXJTWUX
YEFSPHD
TCHYLVC
PBUDFKRYBOGZ
VSXTSO
ZYVTQBEUJJDH
XVKWJMOFLVO
LDOZQIQDS
CECAYQ
UUZEJVGZVDCR
MVZXIVTQQJ
QSXZAMBFMCKR
UIFTSVANXFI
BHROPDSDJSS
KJEIMEWZMQB
UDTULTFWZNR
CBIAFHWPHONX
OJWYPSQL
HBCQWS
POAAKYFBO
UQYJLZ
QHPMQATSZI
ZUPNEXRNLYK
PTZPRALWN
SSYRUHQKUP
HFQHEASMV
KWHNBQYFY
QEGJDVATLJX
WRQJCYSXH
KWIQTQJGTJV
FDGTLNZMQYQ
SUOAOREE
YJGVWLP
JIQXIDERGF
ZKQNWHXQXQC
QFUFBODGVBF
LVCYHKZE
CTKEUHL
GZJYNBX
QGRGZFLJYSQD
JVPYUDT
IVZVGHLVXAJ
NNXZJBC
GXZLSSLBYKPS
HBEGOOI
PKDOFHQ
WMQTZUZUJDJ
EKPGKNIFMCTJ
RDQSQNGYVMPM
IJBRWVTAOUB
AXKFHAGDHWWH
ZEQUKSPWB
CDMTOAJLO
HVYXXHQQCVEV
MXDNIKYPJDVO
WNYUYDSVITB
JJWMGVNXDTD
SARJZX
URNZCFOYFIJ
SYMUVSTXYGI
THLXCFCH
GDZSKG
ZJOPRRMFHXMI
QKWJYIQ
AAOGSFAHV
OOOLRUJEZGUD
shiban
GXPKXZMAVQP
VBDLNG
OBIDZJRHTHOJ
HGMBCWLBMDMC
BSCYDTEMSXR
POBSLJCPMLC
ROSKDHTWXFAM
KVPSXGFFUAJ
OZJKUG
AMTIXCGENIMS
GTNRVQLRJC
SRAPAXPY
IGEHJSDFFUT
ZSTTGIAY
DHVJVJWAJH
UMVIEOH
LALIFLKVLV
instance
Computer
Application
WebServices
GetInstance
<Module>
BXTMZUITNEOZUICMCNCZREVEUI
VUZMVMXIITUIOMBXIIOXCINUXO
MyApplication
bengi.My
MyComputer
MyProject
presen
MyWebServices
ThreadSafeObjectProvider`1
Assembly
System.Reflection
ResourceManager
System.Resources
System
ApplicationBase
Microsoft.VisualBasic.ApplicationServices
Microsoft.VisualBasic.Devices
AppDomain
Encoding
System.Text
MethodInfo
Object
MethodBase
RuntimeHelpers
System.Runtime.CompilerServices
Activator
ContextValue`1
Microsoft.VisualBasic.MyServices.Internal
UnverifiableCodeAttribute
System.Security
HelpKeywordAttribute
System.ComponentModel.Design
AssemblyDescriptionAttribute
AssemblyProductAttribute
AssemblyFileVersionAttribute
AssemblyTitleAttribute
AssemblyCopyrightAttribute
AssemblyCompanyAttribute
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GeneratedCodeAttribute
System.CodeDom.Compiler
EditorBrowsableAttribute
System.ComponentModel
StandardModuleAttribute
Microsoft.VisualBasic.CompilerServices
HideModuleNameAttribute
Microsoft.VisualBasic
MyGroupCollectionAttribute
DebuggerHiddenAttribute
System.Diagnostics
SecurityAction
System.Security.Permissions
SecurityPermissionAttribute
String
RuntimeTypeHandle
EditorBrowsableState
mscorlib
My.Computer
0.0.0.7
WrapNonExceptionThrows
My.Application
MyTemplate
11.0.0.0
My.User
MyTemplate
11.0.0.0
My.WebServices
MyTemplate
11.0.0.0
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
_CorExeMain
mscoree.dll