Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: ff48b6c1c4e1c003c1b11bfef4e77ad6 --

Hashes
MD5: ff48b6c1c4e1c003c1b11bfef4e77ad6
SHA1: 387457aa4728b26195d7e467a534be294b795c86
SHA256: eba1679cfaf0f5a05f44afb9e9874910f8fada28c031e4b3447f87821d051785
SSDEEP: 1536:qDrLMKENc9Jo5eYwlaLfFCXhAGhV/LD7q9QwC:SLt9JoU9aLImo/LDu9Q/
Details
File Type: PE32
Yara Hits
YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/contentis_base64 |
Source
http://orbeezgun.ru/administrator/components/com_installer/helpers/html/webfound.exe
http://orbeezgun.ru/administrator/components/com_installer/helpers/html/webfound.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
kernel32.dll
winmm.dll
ole32.dll
comctl32.dll
oledlg.dll
advapi32.dll
version.dll
gdiplus.dll
user32.dll
comdlg32.dll
oleacc.dll
shell32.dll
imagehlp.dll
gdi32.dll
PQRSVW
_^[ZYX
czz:CQ
Q7jjLo
*Q7~JjQ,$
.PQB !
.kQak+
kzZQc'z:CQ
Q`\C.P}
Qb \C.P
zzZ:CQ
*Q7jQ>0!
QczW@L
Q.'C333J
Q"b$(Q2$
DQ2$4L
.\Q*F$,A_
. \!Ont1,n1:
A#0:Q"$
A#0:C 
*jjJQWL]
L[LKLoLu
g*Q7JjjVj
:C*Q6$
jj\K~xQ"w(QS
:$.PQ"
V\_.`L
@N8l1"|
Q#\C.8cY
\Cpw!5
zzZQ2?L3
"?JL{[jj
\_. L]
~n,1"|
![.]1 |e
1&7zzZuQ2?L3
vnvjjA<
 QCW@L
.dV0zp
\"0Np{
:C_jQ.0!o.0k
`QcWSQ
*Q7jQ.
!op!F@
*Q7jQ.
Qb \y %_
Qn,\,+
*Q7jQ.
Qb0\ 5_
Qb(\y -_
Qb8\ =_
Qb<\ ;_
Qn2\,7_
z:C333
3333333*
Q7Jjj*V
zzZQ':CQ
LQ"$(Q
.\A>$4H
.`\.$4n
41,nQ0M
zzZCKL
3333333
BB""bb
URR22rr
UJJ**jj
FF&&ffU
VV66vvU
NN..nnU
LL,J,ll
LLU,,ll
ULL,,ll
z/"2r"r"z
LLU,,ll
ULL,,ll
z-"2r"r"z
&N.vtLt
.4"vFv&6
	.&0PBvvVo
$N0PBvvv
vvf6&tFv
&vV.4ffdf&
C..N&N<J
]vVdF6
&vV.<v
Ntfvvf6&
BIvv.&v.42
&Nv&6LLt
6NbN&&
bL6NJ&.j
vF&NNj
&NrFV&F.
&`&&&4
&F&6F&N
rAF.vF&N
.&6F&N
b&FN.	
ja&&v&N&
AA!!aa
QQ11qq	
	II))ii
YY99yy
EE%%ee
UU55uu
MM--mm
]]==}}
CC##cc
SS33ss
KK++kk
[[;;{{
GG''gg
WW77ww
OO//oo
@@  ``
PP00pp
HH((hh
XX88xx
DD$$dd
TT44tt
LL,,ll
\\<<||
FF&&ff
VV66vv
NN..nn
^Z::zz
FF&&ff
VV66vv
NN..nn
^^>>~~
AA!!aa
QQ11qq	
	II))ii
YY99yy
EE%%ee
UU55uu
MM--mm
]]==}}
CC##cc
SS33ss
KK++kk
[[;;{{
GG''gg
WW77ww
OO//oo
AA!!aa
QQ11qq	
	II))ii
YY99yy
EE%%ee
UU55uu
MM--mm
]]==}}
CC##cc
SS33ss
KK++kk
[[;;{{
GG''gg
WW77ww
OO//oo
@@  ``
PP00pp
HH((hh
XX88xx
DD$$dd
TT44tt
LL,,ll
\\<<||
BB""bb
RR22rr
JJ**jj
ZZ::zz
BB""bb
RR22rr
JJ**jj
Z^>>~~
AA!!aa
QQ11qq	
	II))ii
YY99yy
EE%%ee
UU55uu
MM--mm
]]==}}
CC##cc
SS33ss
KK++kk
[[;;{{
GG''gg
WW77ww
OO//oo
B*.ff&NbN&
J.NBJs
jJrBRLL~t&66
.bvN2.
6&rF&V&F.N
NvF&NN
vf6&rFV&YF.
N."NNviN
b&."vn
Nvv6&v.jX
&.2v&.6&
' j&NJ&
@b&.j&NNe
b&.B.NN
&&N8&NN
N.N6&v
I@b&.*
YFVBv.v.
6bN&&c"
NvF&NON2&6vN
tNvF&NN
6&bN&&
v.&F."
(@b&.2v[&.6&
R"Jfr"2LLt&6P6
&NB.Iff
*J"'JLLt&66
&F..&j
"22LLRt&66
&.Bv66
L *&N6
NvF&NON
v&6&&"
 J&.*v
iv&6&&"
#N"&F.ff&
N&N&v.
Nv9F&NNvNb&
&.2v&.6&
&@bQ&.J.&
H@b%&.2v&.6&
6&v.J.N
b&.N"vn
&v.J.N
vBv.v.
"T&6&.&BN
6J&Fw.
"avFv&&
# *$6N
c *6Nb&G.j
, *6NJ&.j
6NbN&&
v.&N6vIFV&&
b&.B.NN
@@bA&.2
Ev.&N6vFV'&&"&FN&6
v.v.&N
b&.B.NN
"v.&NBNJ
&.r"2B
.&*vUj
@b&.J.ZN
VVU66vv
NNU..nn
RRU22rr
JJU**jj
FF&&ff
VV66vv
NN..nn
BB""bb
RR22rr
JJ**jj
~E~~~~~~~9
NN&6F6
66vN<D&.Nv\NF
vNvf.4Fv
f&5N.j&NN
66vN<D.N
vf.4Fv6\
N6tnLD|
.&N.>&&
&f&N|0P
.&N.&}&"
]vv2&n&6
6&n&6<D
vnvV&N
FF&?NN<Df
&D|<tN&
.&N.&&"
&n&6|0P
.&N.&&
6&f+&N|0P
<tN&F.N>
<t.N.N.
Mvfv|0P<t)
NN&6F6
LpLXL$LtQLlL
LaLR@L~L%L8,
,>,u,w,
l,lzlal
lHl\l6ZlelMl
.\E\M\;\7
<Q<Y<]<c
<N<A<5<=
|Z|V|Q|i
|B|J|>|1
LVL^LmLc@LwL
LfLMLC
,Z,>,5
,m,g,w,
l\l:l1
lxlBl:
\R\N\i\EU\C\
\*\&\	\
\s\{\P<X
<l<b<N<A/<
|a|%|K|
|*|&/|I|E|s|{
ELLLFLNL9
LKLGL@,p
,&,^T,y,S,K,@E,4,<,f,~
[\S\	<U
<C<%|u|C
L!LIL=
LwLxL!L3JLgL
:\\\A\
l&lVlQ@lql9lUl
UlwlQl;l
\ \PV\(\4\l\f
L.L:,Y, 0,X,T,\,1
l,lZl6l
lblZRlnlMl3lK
<A<Y<]@<
<D|_>|
LALuLK
L[L<LzL^
L!LILuLm
,<,*,Z,F
,},;,',
,?,8lb
@l1l	l)l
l9lgl7l
\X\d\4\<P\
\b\2\FU\V\n\>\
R<Z<f<V<>
|V|	|i
|G|!E|
L-,#,3,K
l`l4lLl:*l
\R\z\!
\#\S\/\_U\
\h\t\*
\s\O\?\,
<<<!<Q<
<e<u<-<]
<s<k@<;<G<W<OA<
<pO<H<
<n<^<A<	
<i<9<%<#
<S<G<`|H
|||E|>@|!|9|m|
LCLcL3L
LhLxJL&LVL%L
,c,k,',oE,k,
,w,4zlLl
lbl~Al1lIl]lk
l0lHlXOlQl	l
\e\5\m\=
\c\3\k\{
\~<!<Q<
,7,O,?,
,q,),e,t
l"l^l!
\:\)\?N\@<X<F<?
|@$|n|e|5|]
,C,+`,g,
,B,*,f,
,Q,9,u,
,K,',o,8
l1l lxWl
,!,,|<|"
|2|*|:|&
|6|.|>|!
|1|)|9|%
|5|-|=|#
|3|+|;|
v&&t00P$
 2	Q0,P
Q[$X@[LC
pm-d(?
cpm9(??
pm=(??%
QG2?zzL3Z
33333333
3333333*
Q7A78A<
~LQ20A
*?>kQ.
pm[L0ypm
L0y5Q{
m[L0YQ{
A_8pi1|
p)mSQ(
FL0YQ{
pm[L0Y
&L0MQ(
L]0Ypm
pmZ[L0Ypm
L0MQi(
pm[Lk0ypm[
&L0yQ[
L2|/hQ
p)mSQ(
L2h?jQ
m[L0Ypm
L0M4Q(
pm[L0Ypm
Lm2h Q
./}$X@
%.7}$_
Q<}Qi8<P
&Q<]Q8"P
Q<]Q8<
?6Q<]Q8
?Q<]Q8"
?Q<]Qk:
Q<]Q:?
Q<]Q:/
Q<]Q:7
Q<]Qk:'
p-m[Qk
pmOL(-
pmOL(-
pmZOL(-
pm[L(9
pmOL(-
Q':C3333
3333333*
.0Q,4vP
Lm0yQ8$P
iL0yQ*0Q]8$P
L0Ipm*
Q0iL0yQ*
L0Ipm*-0Q8
Lm0IQ*
dL0IQ*
pimKL0ipm*-?L0IL
Q0iLY0yQ*/Q8$vP
iL0yQ*
L0Ipm*/Q
Q0iuQ($P
YQ*/Q8
L0ipm*
L0yQ*/Q8
pimKL0ipm*-7L0IL
Q0iLY0yQ*
iL0yQ*0Q]8$P
L0Ipm*
Q0iL0yQ*
L0Ipm*-0Q8
27fQ20
pimKL0ipm*-?L0IL
Q0iLY0yQ*/Q8$vP
iL0yQ*
L0Ipm*/Q
YQ*/Q8
L0ipm*
Q*/L0yQ8
pimKL0ipm*-7L0IL
Q0iLY0yQ*
iL0yQ*0Q]8$P
L0Ipm*
Q0iL0yQ*
L0Ipm*-0Q8
Lm0IQ*
dL0IQ*
pimKL0ipm*-?L0IL
Q0iQY*/L0y
iL0yQ*
L0Ipm*/Q
YQ*/Q8
L0ipm*
L0yQ*/Q8
pimKL0ipm*-7L0IL
Q0iLY0yQ*
iL0yQ*0Q]8$P
L0Ipm*
Q0iL0yQ*
L0Ipm*-0Q8
Lm0IQ*
dL0IQ*
pimKL0ipm*-?L0IL
Q0iLY0yQ*/Q8$vP
Q0iL0yQ
Q:7Q($P
L0YQi*/Q8
L0IUQ*
	L0yQ*/Q
pmKL0ipm
*7L0I 	
Q0iL0yeQ*
L0IpKm*
yQ*0Q8$P
L0yQ*?Q8
Li0Ipm*0Q8k
L0IQk*
L0I%Q*
pmKLI0ipm*?L0jIQ*
iL0yQ*/Q]8$P
L0Ipm*
pm*/Q8
L0IQ:7
Q0iQ($nP
pmKL0i$pm*
Q0QQk8
pmKL0iQ*
pmKLI0ipm*7L0jIQ8$P
L(QQ8$P
pmSQI0qQ*?
4pmKL0iQ*
L0IpKm*
L0IQ8$P]
Qpm20Q8
L(QQk2
qpm2?L(Q
pmSQ0q$Q*
pmKLi0iQ*/
tL0Ipm*
pm*/Q8
L0IQ:7
Q0iQ($nP
pmKL0i$pm*
Q0QQk8
pmKL0iQ*
pmKLI0ipm*7L0jIQ8$P
L(QQ8$P
pmSQI0qQ*?
4pmKL0iQ*
L0IpKm*
L8qQ0$fP
	pm20Q(
L,QQk2
L,qpm2?L
0QsQ%,
$L(}pm_Q:
Li(}pm
L<ypm:/
Q<}pm[
L<yQ:/
L]<ypm:
L<yQi:/L
>?pm_Lk0}Q:
VL0}Q.
b@Q"0Q
rpzZQ':/C333333*
L0yQk8
L0Ipm*0Q
pm*/Q8"P
Q0iL0yQ*
L0Ipm*-
Li0Ipm*
L0IQk*?L
pmKdL0iQ*
L0Ipm*7ZQ8"P
pmKL0ipKm*?L0IQ*W7L
KL0ipm*
JL0IQ*
I2/Q2?
Q0	L0yQ[*7Q8"P
L0IUQ*/L
Q0iL0yQ*
L0Ipm*-0Q8"P
L0yQ*0Q8
Li0Ipm*/Q8k"P
Q0iL0yeQ*/Q8
L0IpKm*
2?Q206
Qk0iL0yQ*
L0Ipm*
mKL0iQ*
*7Q8"P
L0IQ:7L
L0YQi*
ipm*?L0I
m20Q2?
pmKLi0iQ*
tpmKL0ipm
7L0yQ8"P]
L0ipm*
0IQ*/L
pYmKQ0iL0y%Q*
L0IpKm*0Q8"P
Qk0iL0yQ*0.Q8
L0Ipm*/ZQ8"P
Q0iLY0yQ*/Q8
2?QM20
Q0iL0yQ
L0IQ*?L
pmKL0iQI*
pm*7Q8"P
Qk0iQ:7Q(
L0ipm*?L
0IQ*7L
pmKL0iQ*
pmKL0i$pm*
L0yQ*7Q8
pimKL0ipm*%
L0IQ*/L]
pmKQ0iL
Ipm*0Q8"
Q0iL0yQ
*/Q8"P
iL0yQ*/Q]8
L0Ipm*
L0IQ*?
Li0Ipm*7Q8k"P
L0IQk:7L
Qk0iQ(
6L0YQ*
pimKL0ipm*-?L0IQ*7L]
QM0QpmKL0ieQ*
pmKLi0ipm*
L0*IQ*
2/&Q2?
0	L0yQ*7nQ8"P
pmKL0ipIm*
L0IQ*W/L
iL0yQ*
L0Ipm*0Q
Q0iLY0yQ*0Q8
Ipm*/Q8"
iL0yQ*/Q]8
L0Ipm*
Q0iL0yQ*
L0Ipm*-
Lm0IQ*
A_Ppiq
fQ*?pm
Ipm*7Q8"
L0YQi*
ipm*?L0I
20Qm2?
Q0QpmKL0
L0ipm*
0IQ*?L
Q0QQ8"
mKL0ipm*%
L0IQ*/L]
pmKQ(ipIm
Qpm20Q8"
pimSQ0qQ*
0Ipm*/Q8k"P
L0IQk8
Q(iQY20
L(qQ2/
L(Qpm2
iL0yQ*
L0Ipm*7Q
L0ipm*?L
0IQ*7L
Q0QpmK
pimKL0ipm*%
L0IQ*?L]
Q0QQk8"P
L0iQ*7
pmKL0ipIm*
L0IQ*W/L
L(qQ[2
L(Qpm20Q
pmSQ0qQI*
L0iQ*0
L0Ipm*/ZQ8"P
Q8iQ20Q*
Lk8qQ0
L8QQ20L
Q2/Q,yt
0QsQ,,P-
pm_Q:?
L(}pIm_Q:7
tL(}pm_
L(}QI<yQ:
pm[L<ypYm:?
L<yQ:7LM
>06Q>?
pm[Lk<yQ:
L0}pm>
b@Q"0FQ
rpzZQ':C_3333333*
@Q*0Q"0
Q"0Q2(
"uW' c"u<Q20>Q*u
"u<Q"0Q2
hQ':C333*
Q7Q"0A70
pm`Qru
"0J1"?
Q"?pmz*
@A#0Ac A
ZQczQ':C
3333333*
O%%c}!
!K.@WEQ!
.(A=)?
@.HA=)
W2Q)7?
Q':C3*=Q7
"?Q*0!K.
Q2?L3[
R^.gQ2?L3o
':C3333*
!O%%c"?,l
*!JQ!(
7W2Q!"
.@WLQ!"
zz"2r.
zzQ2/L3
C333333*
Q7A70Q"
.40Ac 
pzEzZQ':C0
x33333333
3333333*
333333*
A#0c!.?
O%f%1!
3O%f%1)
zQ2?L3
3333333
3333333j
kQj <J
zazC333333@3333333*
jjQ>01
1",]31(`J
NgQ!"#Q
Q2?A#0z
QczL3Z
333333*
A#" Q2
Q*?JQ"=
Q*=JlV
A#0Q"-QM2
*qQ7Q"0
p._Jj1
>0A#0!
AO#0Ac
r.w'zzZ:C
3333333*
QCB1%$
A#0c"s?@
Qz*![.0nzzA
@.0J@.
#0Qczz
X:ZQ':C
Q7jjV`V
Qiczz:C33*
:C33333`3333333*
1*/JJ1
.dQ"(!-
Qj> JV
.8Q"(!
kQj JV
kQ"?Q=2(zzZ!
Qq':C(
3333333*
rrrR".$
33333*
n$/@SW$
n @SW@
n$@SWD
n @SW@
n$/@SW$
n @SW@
n$@S=W$
n @SW@
zzZ:C ,
3333333
3333333Q
3333333*
\AC tA
Q_[D{P_@>=^Q{1!`
okD_P_
P_@>#Q
D[Q_zokD
1-lws=
Po@.31!
`up>/Q.
kD_Q{D
P_@>+Q
Po@.;1
`@cQ{ZD
okDW_P_@>
@:/1)HqB
sPL@OQ
F$xoQ>-DM
ZP_@>+11p
D{P_@>
s0@YOQ
okD_D}{P_@>
DcQ_D>
VPc@"'Q
J("@Q"#
Pc@"3Q
DCPc@"
D{P_@>
1)ha0+
s0@O2D
DcQ_DU>
Pc@"#Q
Ew?FQ"
Pc@"7Q
LCLc@"
 @cQ_L
@>;11p
@>k/1-l0
'?SQ>-
 @	cQ_L
@U>31=p
O1!@c~Y
@.=1-|_hd
@OQe_L
@>#V11p&j5#
@sQ_ok
@>/1-l
P@s^Q_okP
@>71!`C
1)hI30
'1-l>/w
P@sQ_ok
okP_.L
@>+1-l
cp@{OQ
]KkTZQ2
PcLC@"
hQ':C 
3333333*
\cNO1b
>0Ac|\
Wg`c"0
N/zZz:C
3333333
3333333*
:0/pmN
 rM.;cb
zQ2?L3{z
Q'#:C 
./Qcz:C1
z:C33,3333333*
'./@cz:C1
z:C333X3333333*
':C3333*
Q7JjQ.0j
2A#0!o.`z
cN7QsT
zzZ:C3.3333333*
"?Q"0Q2
Q*(JQ:
PQ2?zz
Q':'C333333*
:C333*
Q7jQ.0jQ
%zz:C333
3333333*
Q"?Q':7C3333333
3333333*
3333333*
Q"0Q2?6
2Q':C3333
3333333*
g A#0@
i2/127f
1*WJ1!:f
.,pm{"
z<3U3U.
*gpm.'
':C3333*
Q"wL3A#
Q':'C3333333
3333333*
(`._Q:0
C333333*
Jjjc"?
.@QpbQ:
A_$pq4
0WLQ`<
yA2( QpbW
(Q20roC
oC .Do
WHo~C@
zzZQ':CQ
C333333*
:C33333*
C333333*
<QhJ!K.L
s!K.hQ
p}8pp1}KT[.`
C3333333
3333333*
V\"0. Q"
n Q"0W*Qu*0T*
W4Q*o0T*
Q"?Q':C3
3333333*
"?JjQ.
c";FF&fc
NN.c"7n
q._110
\S>kQ1
\s>QQ=/
Q2/?A# zQczLL3Z
Q':C333*
<:C333333
3333333*
JQ:(jj
c";FFY&fc"
V4Vc"'66v
Q" ;A# 
Q" /A# 
 hL[WDV>(
Q", ;A# !
b"[Q"+
zzL3+Z
:C333333
3333333*
ojQ>0![~vHVp
 |bA# \	O>wLo![~
O>3c x
zZ:C333*qQ7jQ.(!o
!o.\JQ
\>(zp)
\>(zp)
z:C333*1Q7
1*7Jjc!c
.%X1)'?
Qi2?Q!
':C33333
3333333*
Q7JjjL
.(A>#$
Q:86Q"(c`
2(jJJQ*
zzQCZ:
C333333*
"?Q="(Q2
Wa@Q.+QHQ"
o.u12/
VP12;@
.x\s.X
':CQ2?zz
Q':C33<3333333*
c.LVP1"?f
.pH\c.P
zQ':CL
>zQ':C33*yQ7A7
Q*0JQ:8j
Q*(jjJ
Q2(Q"0Vl
+Q:8Q2
C3333333
3333333*
"?Q=28Q"
zZQ2?^L3
':CQ(&#
Q':C33<3333333*
"?Q*(JQ:
vjjJQ*0
zzZQ2?L
hQ':C3333
3333333*
QO+j1Y
 r<./zzZ:C!
r.o[zZ:C333*qQ7QC1
./jV TC
z:C333
3333333*
z:C33L3333333*
1*;Jjj
1!"1W@1
M1j4Jj
zZQ2?L3
kQ2?zz
Q':C33<3333333*
>0\~0NdQ
DC@cQ>
0W@QCQj0T@
\_NHpm
>#QczzZ:{CQb(Tb0@
czzZ:CQ>
0QczzZ:Cw3333333*
kj1!+O
Pj1*7JJ
.xQ!+O
0W.j127
3333333*
Q7jjQ.0Q
jjAgpAgp
@AGZ@A
b@2Ac@Ac@A
"q'Q"q
Q"q7Q"q
Q"q/Q"q
Q"q?1 1
N0?O%?
b@Aw@A)w@A
Aw@Aw@
b@Qb@X
33333333
3333333Q
*$0Q2$ !
QSAG:@
zCQ"$ 8CQ
.`pmS2
f1X0(p
f1 7"p
f`pv`fpvr
fp~`fp
pv`fp~`1
1n 1~ 
h1n 1~s 
~QCAG~
`.l1%$
!K.lQC
 .pW@1
.oAGp.*8QCL[
\.0N7z:C
\cNpQ`
.7\_N|
AE"' Wgc"
A#0:CQ
A#.0:CV
A#.0CV
:CQ #,
"?JjQ.
jJfEIH
A#0WzJ%JJJJ
\O.bAY
A_b .0A
`Q20JQz
.`Ccb&q
6!o. }
Ln`bQ`!
/zQczCA<
.WBV bj
.bAc/ @O
`QOQ*0c
PQ20Q`
bQ*0Q-2
![.LA>
.`bWO3rWG
|D.d"o
.xA>?~
!K. c0@:B
![.<p}
.0Q`dQ20
`Q20Q`x
!/K.`c@
7A70JL[jNj
.?Q=*?1"
|NRQ2/
g@1 p\
Q*w?1"
jej1>/
*Q7A70J
Lo\{. LU
"?\c.Tjj
_*Q7A72j1
\{>@Q{
>V}&.X
NKAcs 
>dEW`Q8:X
![~NQy"
.jQ2G?Q
.<IQoAgxQc
g`@,!e
"?\_>vqL[QO
BA_@p1
\cNpQ`!_
!o.\\j
zQczCQ3
.FQ<''
C333333
zzZQ':
33333333
33333333
3333333Q
Q:0jQN
.0Qr @s3L0
 ZQ2a(1"ba
.$Q1`A
.0QrF @sL0
Qr0Qjr
Q"/zzzZQ':Cc"/
Q"0QM2
.0Qr @
\gc.0!C.
W&Cj1"
\o.`}^rg
zz2CA$/
>HgzZCQ
*Q?7Q"
x. QcWG6V
o*Q7Q"
Vo0@y.
A_P~R.(}QCV@
.PA_P. 
A_ .XQr
.PA_P. A;_ .
*Q7~Q"
"?J=Q:
Qo" 12 
:CQ 3!
T_1b A
N@QC@C
`NAc j
NgzzC3Q
p)C$QC:C3333
3333333Q
(.Jjpm
\_NPBA
Z:C33333
3333333Q
zzZQ'7:CQ"7Q
pq)CQCCQ&
':C3333Q
Q}2$ T
?Q2$ T
?Q2$ T
QU2?zzL3Z
*Q7jQ.
!o.`Q>0!
Qczz:C
`W;Qk.fA\
.`ACB@r./!
.d@r.wL
jzzZ:C!K.
cW;![.`L
@W+QCA_
.dr.'wWDQ
TOp]m0`f
.`r.2@R.W![. 
*Q7~jQ.
j!o.l`Q>0!
czz:CQ"
.@r.wL
r Qp\0
`Q%b \ 
b Qcz$:C 
m"0Q2/Q*Y(!*
*Q7V V
1b8Ts}
r.o1a8
"?J=j1!
&\cN/Q!w_
n01!?_
n 1!??
n 1!??
p%m1"?_
Q1 ?"?
1\sNcQ2?z
.8A3~6
.l!oB.Xj
WqQ.'V0
?*Q7A7
:?.`Q"'
"?JQ:0
3noAc@
~\B p!j
CA<6~X
K.`Q>0!
QcWLQ"
.SQczz:
GetACP
GetConsoleCP
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetVersion
LoadLibraryA
lstrcatA
lstrlenA
SetLastError
VirtualProtect
kernel32.dll
midiInGetNumDevs
mmioDescend
waveInGetNumDevs
waveOutGetNumDevs
winmm.dll
OleInitialize
ole32.dll
CreateMRUListW
FlatSB_ShowScrollBar
InitCommonControls
comctl32.dll
OleUIChangeIconA
OleUIObjectPropertiesA
oledlg.dll
GetServiceKeyNameA
advapi32.dll
VerInstallFileW
VerQueryValueA
version.dll
GdipGetCustomLineCapWidthScale
GdipMeasureCharacterRanges
gdiplus.dll
DeregisterShellHookWindow
user32.dll
PageSetupDlgA
PrintDlgExW
comdlg32.dll
GetRoleTextW
WindowFromAccessibleObject
oleacc.dll
ExtractIconExA
shell32.dll
EnumerateLoadedModules64
GetImageUnusedHeaderBytes
ImageGetDigestStream
SymEnumSym
SymGetLineNext
SymGetSymPrev
imagehlp.dll
EngTransparentBlt
SetViewportExtEx
gdi32.dll
D{`fgs~S~~}q
kernel32.dll
%n{Fr)
PA<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD