VMRay Analyzer Report
Localhost
PE Header Static Information
Image base0x400000
Entry point0x401b70
Size of code0x2d4600
Size of initialized data0x1400
Size of uninitialized data0x0
TypeExecutable
SubsystemIMAGE_SUBSYSTEM_WINDOWS_GUI
Machine typeIMAGE_FILE_MACHINE_I386
Compile timestamp2013-02-08 13:13:08
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
.text0x4010000x2070000xd20000x400MEM_EXECUTE, CNT_CODE, MEM_READ7.811214 (packed?)
.ctext0x6080000xcf0000xcf0000xd2400MEM_EXECUTE, CNT_CODE, MEM_READ7.814104 (packed?)
.data0x6d70000x10x00x1a1400CNT_INITIALIZED_DATA, MEM_WRITE, MEM_READ0.000000
.rsrc0x6d80000xe100x10000x1a1400CNT_INITIALIZED_DATA, MEM_READ3.451420
.reloc0x6d90000xa20x2000x1a2400CNT_INITIALIZED_DATA, MEM_DISCARDABLE, MEM_READ1.936570
Api name IAT Address Thunk RVA Thunk Offset
GetProfileIntA0x40400c0x30850x2485
ExitThread0x4040100x30890x2489
Module32First0x4040140x308d0x248d
MoveFileExA0x4040180x30910x2491
GetOverlappedResult0x40401c0x30950x2495
GetCurrentDirectoryA0x4040200x30990x2499
SetConsoleTextAttribute0x4040240x309d0x249d
HeapSummary0x4040280x30a10x24a1
GetConsoleWindow0x40402c0x30a50x24a5
ConsoleMenuControl0x4040300x30a90x24a9
NlsGetCacheUpdateCount0x4040340x30ad0x24ad
LocalFree0x4040380x30b10x24b1
InitAtomTable0x40403c0x30b50x24b5
EnumResourceTypesA0x4040400x30b90x24b9
UTRegister0x4040440x30bd0x24bd
GenerateConsoleCtrlEvent0x4040480x30c10x24c1
ResetEvent0x40404c0x30c50x24c5
SetFileApisToANSI0x4040500x30c90x24c9
ReadConsoleOutputA0x4040540x30cd0x24cd
UTUnRegister0x4040580x30d10x24d1
WriteTapemark0x40405c0x30d50x24d5
PrepareTape0x4040600x30d90x24d9
SetNamedPipeHandleState0x4040640x30dd0x24dd
LockFile0x4040680x30e10x24e1
GetVolumeInformationW0x40406c0x30e50x24e5
GetWriteWatch0x4040700x30e90x24e9
GetModuleHandleA0x4040740x30ed0x24ed
SetCommState0x4040780x30f10x24f1
OpenFileMappingA0x40407c0x30f50x24f5
CreateWaitableTimerW0x4040800x30f90x24f9
WritePrivateProfileStringA0x4040840x30fd0x24fd
LoadResource0x4040880x31010x2501
EnumDateFormatsW0x40408c0x31050x2505
VirtualUnlock0x4040900x31090x2509
WriteConsoleInputA0x4040940x310d0x250d
Toolhelp32ReadProcessMemory0x4040980x31110x2511
BackupRead0x40409c0x31150x2515
UnmapViewOfFile0x4040a00x31190x2519
SetSystemTimeAdjustment0x4040a40x311d0x251d
CreateSemaphoreW0x4040a80x31210x2521
OpenThread0x4040ac0x31250x2525
GetDiskFreeSpaceW0x4040b00x31290x2529
CreateMutexW0x4040b40x312d0x252d
SetComputerNameW0x4040b80x31310x2531
lstrcmpiA0x4040bc0x31350x2535
Api name IAT Address Thunk RVA Thunk Offset
CLIPFORMAT_UserSize0x40420c0x3bcc0x2fcc
OleMetafilePictFromIconAndLabel0x4042100x3bd00x2fd0
CoGetObjectContext0x4042140x3bd40x2fd4
HMENU_UserUnmarshal0x4042180x3bd80x2fd8
OleLockRunning0x40421c0x3bdc0x2fdc
HENHMETAFILE_UserSize0x4042200x3be00x2fe0
CoGetInstanceFromFile0x4042240x3be40x2fe4
HMETAFILE_UserFree0x4042280x3be80x2fe8
OleCreateLinkFromDataEx0x40422c0x3bec0x2fec
RegisterDragDrop0x4042300x3bf00x2ff0
CoRegisterChannelHook0x4042340x3bf40x2ff4
StgGetIFillLockBytesOnFile0x4042380x3bf80x2ff8
CoInitializeSecurity0x40423c0x3bfc0x2ffc
StgOpenStorageEx0x4042400x3c000x3000
OleCreateEx0x4042440x3c040x3004
HMETAFILE_UserUnmarshal0x4042480x3c080x3008
OleDestroyMenuDescriptor0x40424c0x3c0c0x300c
HMETAFILE_UserMarshal0x4042500x3c100x3010
WdtpInterfacePointer_UserMarshal0x4042540x3c140x3014
OleLoadFromStream0x4042580x3c180x3018
CoGetCancelObject0x40425c0x3c1c0x301c
HWND_UserUnmarshal0x4042600x3c200x3020
StgCreateDocfile0x4042640x3c240x3024
OleConvertOLESTREAMToIStorageEx0x4042680x3c280x3028
PropSysFreeString0x40426c0x3c2c0x302c
OleGetIconOfClass0x4042700x3c300x3030
CoUnmarshalInterface0x4042740x3c340x3034
HWND_UserFree0x4042780x3c380x3038
OleRegEnumFormatEtc0x40427c0x3c3c0x303c
OleSaveToStream0x4042800x3c400x3040
Api name IAT Address Thunk RVA Thunk Offset
GetMessageA0x4041400x375b0x2b5b
GetClipboardFormatNameA0x4041440x375f0x2b5f
GetScrollPos0x4041480x37630x2b63
SetPropA0x40414c0x37670x2b67
GetKeyboardType0x4041500x376b0x2b6b
SetMenuItemInfoA0x4041540x376f0x2b6f
LoadImageA0x4041580x37730x2b73
SetWindowLongW0x40415c0x37770x2b77
GetClipboardSequenceNumber0x4041600x377b0x2b7b
GetClipboardFormatNameW0x4041640x377f0x2b7f
HideCaret0x4041680x37830x2b83
GetClipboardViewer0x40416c0x37870x2b87
SetThreadDesktop0x4041700x378b0x2b8b
CreateMDIWindowA0x4041740x378f0x2b8f
IsWindow0x4041780x37930x2b93
CopyIcon0x40417c0x37970x2b97
DlgDirSelectComboBoxExA0x4041800x379b0x2b9b
CheckRadioButton0x4041840x379f0x2b9f
GetScrollInfo0x4041880x37a30x2ba3
SetTaskmanWindow0x40418c0x37a70x2ba7
CountClipboardFormats0x4041900x37ab0x2bab
TabbedTextOutA0x4041940x37af0x2baf
CopyImage0x4041980x37b30x2bb3
RegisterDeviceNotificationW0x40419c0x37b70x2bb7
UpdateWindow0x4041a00x37bb0x2bbb
GetWindowRect0x4041a40x37bf0x2bbf
EnumPropsExW0x4041a80x37c30x2bc3
IMPSetIMEA0x4041ac0x37c70x2bc7
CopyRect0x4041b00x37cb0x2bcb
OemToCharW0x4041b40x37cf0x2bcf
DrawCaptionTempW0x4041b80x37d30x2bd3
UnregisterDeviceNotification0x4041bc0x37d70x2bd7
MenuItemFromPoint0x4041c00x37db0x2bdb
FindWindowW0x4041c40x37df0x2bdf
ShowOwnedPopups0x4041c80x37e30x2be3
CallMsgFilterA0x4041cc0x37e70x2be7
GetPriorityClipboardFormat0x4041d00x37eb0x2beb
RegisterDeviceNotificationA0x4041d40x37ef0x2bef
GetCursorFrameInfo0x4041d80x37f30x2bf3
DefMDIChildProcA0x4041dc0x37f70x2bf7
GetMessagePos0x4041e00x37fb0x2bfb
GetCursor0x4041e40x37ff0x2bff
PeekMessageW0x4041e80x38030x2c03
EnumDisplaySettingsW0x4041ec0x38070x2c07
DefWindowProcA0x4041f00x380b0x2c0b
GetComboBoxInfo0x4041f40x380f0x2c0f
GetMenuItemInfoW0x4041f80x38130x2c13
VkKeyScanExW0x4041fc0x38170x2c17
ClientThreadSetup0x4042000x381b0x2c1b
ChildWindowFromPoint0x4042040x381f0x2c1f
Api name IAT Address Thunk RVA Thunk Offset
GetTextExtentPointW0x4040c40x348b0x288b
CreateDIBPatternBrush0x4040c80x348f0x288f
EnumObjects0x4040cc0x34930x2893
GdiPlayPageEMF0x4040d00x34970x2897
ColorMatchToTarget0x4040d40x349b0x289b
ScaleWindowExtEx0x4040d80x349f0x289f
GdiConvertToDevmodeW0x4040dc0x34a30x28a3
ArcTo0x4040e00x34a70x28a7
SetViewportExtEx0x4040e40x34ab0x28ab
GetStretchBltMode0x4040e80x34af0x28af
RemoveFontResourceExA0x4040ec0x34b30x28b3
GdiEntry120x4040f00x34b70x28b7
EnumFontsA0x4040f40x34bb0x28bb
Escape0x4040f80x34bf0x28bf
FONTOBJ_pvTrueTypeFontFile0x4040fc0x34c30x28c3
GetWorldTransform0x4041000x34c70x28c7
RemoveFontResourceExW0x4041040x34cb0x28cb
PtInRegion0x4041080x34cf0x28cf
GdiDeleteSpoolFileHandle0x40410c0x34d30x28d3
SelectObject0x4041100x34d70x28d7
FONTOBJ_cGetAllGlyphHandles0x4041140x34db0x28db
SetDIBitsToDevice0x4041180x34df0x28df
GetGlyphIndicesA0x40411c0x34e30x28e3
PATHOBJ_vGetBounds0x4041200x34e70x28e7
CreateEnhMetaFileW0x4041240x34eb0x28eb
CreateCompatibleDC0x4041280x34ef0x28ef
PolyTextOutW0x40412c0x34f30x28f3
EudcUnloadLinkW0x4041300x34f70x28f7
FONTOBJ_vGetInfo0x4041340x34fb0x28fb
FONTOBJ_pQueryGlyphAttrs0x4041380x34ff0x28ff
Api name IAT Address Thunk RVA Thunk Offset
AccessibleChildren0x4042880x3eff0x32ff
IID_IAccessibleHandler0x40428c0x3f030x3303
GetOleaccVersionInfo0x4042900x3f070x3307
CreateStdAccessibleObject0x4042940x3f0b0x330b
GetStateTextA0x4042980x3f0f0x330f
DllRegisterServer0x40429c0x3f130x3313
AccessibleObjectFromEvent0x4042a00x3f170x3317
GetStateTextW0x4042a40x3f1b0x331b
ObjectFromLresult0x4042a80x3f1f0x331f
CreateStdAccessibleProxyW0x4042ac0x3f230x3323
!This program cannot be run in DOS mode. $
`.ctext
`.data
@.reloc
memcpy
msvcrt
malloc
LoadLibraryExA
GetProcAddress
kernel32
LoadLibraryA
SetErrorMode
VirtualProtect
VirtualAlloc
VirtualFree
GetModuleHandleA
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
Secur32.dll
EncryptMessage
IsBadReadPtr
8GetPu6
rocAu*
PPPPPP
kernel32.dll
GetProfileIntA
ExitThread
Module32First
MoveFileExA
GetOverlappedResult
GetCurrentDirectoryA
SetConsoleTextAttribute
HeapSummary
GetConsoleWindow
ConsoleMenuControl
NlsGetCacheUpdateCount
LocalFree
InitAtomTable
EnumResourceTypesA
UTRegister
GenerateConsoleCtrlEvent
ResetEvent
SetFileApisToANSI
ReadConsoleOutputA
UTUnRegister
WriteTapemark
PrepareTape
SetNamedPipeHandleState
LockFile
GetVolumeInformationW
GetWriteWatch
GetModuleHandleA
SetCommState
OpenFileMappingA
CreateWaitableTimerW
WritePrivateProfileStringA
LoadResource
EnumDateFormatsW
VirtualUnlock
WriteConsoleInputA
Toolhelp32ReadProcessMemory
BackupRead
UnmapViewOfFile
SetSystemTimeAdjustment
CreateSemaphoreW
OpenThread
GetDiskFreeSpaceW
CreateMutexW
SetComputerNameW
lstrcmpiA
gdi32.dll
GetTextExtentPointW
CreateDIBPatternBrush
EnumObjects
GdiPlayPageEMF
ColorMatchToTarget
ScaleWindowExtEx
GdiConvertToDevmodeW
SetViewportExtEx
GetStretchBltMode
RemoveFontResourceExA
GdiEntry12
EnumFontsA
Escape
FONTOBJ_pvTrueTypeFontFile
GetWorldTransform
RemoveFontResourceExW
PtInRegion
GdiDeleteSpoolFileHandle
SelectObject
FONTOBJ_cGetAllGlyphHandles
SetDIBitsToDevice
GetGlyphIndicesA
PATHOBJ_vGetBounds
CreateEnhMetaFileW
CreateCompatibleDC
PolyTextOutW
EudcUnloadLinkW
FONTOBJ_vGetInfo
FONTOBJ_pQueryGlyphAttrs
user32.dll
GetMessageA
GetClipboardFormatNameA
GetScrollPos
SetPropA
GetKeyboardType
SetMenuItemInfoA
LoadImageA
SetWindowLongW
GetClipboardSequenceNumber
GetClipboardFormatNameW
HideCaret
GetClipboardViewer
SetThreadDesktop
CreateMDIWindowA
IsWindow
CopyIcon
DlgDirSelectComboBoxExA
CheckRadioButton
GetScrollInfo
SetTaskmanWindow
CountClipboardFormats
TabbedTextOutA
CopyImage
RegisterDeviceNotificationW
UpdateWindow
GetWindowRect
EnumPropsExW
IMPSetIMEA
CopyRect
OemToCharW
DrawCaptionTempW
UnregisterDeviceNotification
MenuItemFromPoint
FindWindowW
ShowOwnedPopups
CallMsgFilterA
GetPriorityClipboardFormat
RegisterDeviceNotificationA
GetCursorFrameInfo
DefMDIChildProcA
GetMessagePos
GetCursor
PeekMessageW
EnumDisplaySettingsW
DefWindowProcA
GetComboBoxInfo
GetMenuItemInfoW
VkKeyScanExW
ClientThreadSetup
ChildWindowFromPoint
ole32.dll
CLIPFORMAT_UserSize
OleMetafilePictFromIconAndLabel
CoGetObjectContext
HMENU_UserUnmarshal
OleLockRunning
HENHMETAFILE_UserSize
CoGetInstanceFromFile
HMETAFILE_UserFree
OleCreateLinkFromDataEx
RegisterDragDrop
CoRegisterChannelHook
StgGetIFillLockBytesOnFile
CoInitializeSecurity
StgOpenStorageEx
OleCreateEx
HMETAFILE_UserUnmarshal
OleDestroyMenuDescriptor
HMETAFILE_UserMarshal
WdtpInterfacePointer_UserMarshal
OleLoadFromStream
CoGetCancelObject
HWND_UserUnmarshal
StgCreateDocfile
OleConvertOLESTREAMToIStorageEx
PropSysFreeString
OleGetIconOfClass
CoUnmarshalInterface
HWND_UserFree
OleRegEnumFormatEtc
OleSaveToStream
oleacc.dll
AccessibleChildren
IID_IAccessibleHandler
GetOleaccVersionInfo
CreateStdAccessibleObject
GetStateTextA
DllRegisterServer
AccessibleObjectFromEvent
GetStateTextW
ObjectFromLresult
CreateStdAccessibleProxyW
v*IG`{>
( ]]cb@
L`!5m;
J ?&)5
bE\ s
T7:~ /:}{
->}IdTJk
&%FiSM
ZkjJ=S
^x(;t
BCO[]r
2GQpS
zxwkm.
W&){J8;
?7nH/'
Of(?`F
,^L2I<
=RV+b
O~'N;!A
<2V4`q
Pveg0{Eo
i\C qw
}01ep|
g!np;C
JqA7GF
['15<yf
Xs$)Gs
P_-TJf
2}0]K_
[p$u)o
ju3dN _
0X/ND6w
+>Lsbp
p aFfwBu0T
)#S*EN
LCw.\V`
Sd' |yh
c _vG[
<cP-II
}Tx DJ
z5-YZ(
3O=PF
mo*_! X
Qz&:8C1M
g(f=Pm
w FwaM
Pr `<U
Pt_I$t
L$} }/`V
Jv\RXD
uyY,,\
cW/Rii
(dg K
+Sh37C
%4:@{8
k5-\WR
3OK0{
N7|mm^4b
?Op2~
fqM'kC
OoQytc
:H'rO(e
+BV0CS
.?vPlS
oR4uHR/
`fJ'%
ve3~y?K
t]MuC+b
8O'#G)Mg
PkV$,0a
ph=r=\
$6}}m)
q\Z6.5-
lIZ"ph
HI&h[&+
npA|8*
S?I_k3
u$K\UweT
.>?!v{
Eh=|wwi%
z5j 6K>
g'.V&?
b 76E|
8HxlH,
i[ 2}\Y'
mVMMW
jqo uz
Dl$VoA
2@z3\`
vjSE#&
? O;?<8
b'~>Ejo
(Qgf .
W(]kJx
\\ZNLV
EEASgD
1oBA>M
q>^m[#
zr*$nK
VH||8|w
z-w.)Y<
SXi+G(
.EY|g_
eS4rHXa
i-i^ )
Y[6ybU
.G) r|
FI1m)v
:Y7=3>
r't/\HM
M Jwd9
NZmG3g
z2^[Dn
(&\VY-5
^'4FW.
"DOvK.
]x{| h
B $YW@
V(L(scH
[hCHr(
UBqS!_
B'h`A7V
f JO9$
DNY?2B~
WwB.lg
;[b/Y/
*et%k)
:}!L+E
Mp|};
QKXj(+]
>,v.FT
ux~.x 1
e";Bs&
e3&Z%p
Orw,~{
^*D~#jB
q>5yyTp
< uP8jW
M7f I;"
#8NI\e
fDa2e(
Z e(%%S
yS jl'u
:t&+_J
Pt=U*p
8y)s8X
4 <DQp"=O
nFVyfz
DnnoTW
`w0bkc
Y6Y d^W
ex{u:3
{/g UQ0
y< rn"
&~]^9Z
]MT[V+Y
_Hg<!g
.do/Qi#iV
QyVe {
7MHG~{
z[ ;9(Z
jtxV>+
#-_ n
2e@`P31
p'!D&!
#y~i5E!
S@- -+
zp)}]+
VC{ .'
1.R5n}Y
cN#xDa
9($<n#
t8Ok3E9
,Q-C |
dxPWn8
8iy&f8
}* 9oo
'Ta!uE
dkhA@
<X$gN>
XSgf D
*}z^DU
^{s 97p
;-lK$
|>CV{,
b428SS^0
qJ8[3$
FJ`yO i
` `J;i
APK[Jon@\
k!u4nM
@rW!s'QX
o|]O`*
?;n%~y
(u)^oY
!kDt S
hGX;fl3
PIcXVs
Kwi W
$ *Hz"
s#7AK?
grl:`24
}3%Q-{{
bf 8z2c
?e.#[`
HY/*_pr|=a]
[Om* =
Fe"1Q1}
5>b -P
1xQ$4(
*Sbju
xu<$et
1AiZ3 i@L
}mX&hbzm
l08~BD;.
urVPAe
qU"?2!vO
<9F&K"
%Q=c)-
:~`M=
7lMU4]
3W0*f'B
PW om^&
;OnORe
" ?K5Q
S g/?i
(|isOr
5 35>{
0 :`,B
fK$s|N
/%3_$u
#oHU^I
tXNPS7
+2AWNh
$PZ"Md
g> >|
P$ T'B
NMAHJ+
X%(<UE
JP?(D j
+ !w)T
6 sN:(
UyR}l
T$z9TN
Jrc7-I
$5\5Cq]
%&{q`gqw
J)T@9;
Ct]rfu
5[5( E
T/\*~Rx
5VQsk6
i[1vS2#S
. 0r1
k2oruP
4&g,O#
"wYA-[
ruM(9?
V\;YRT,
I2"2E$
sw 6iu
sB*3 XJ#*6E
=% V $
| j( 4
o6 % "_
+T9I)p
0]eJ+4
w_=jDc'
Y}|5e~
042-8bS
2aMJ<Z
P`z0ql
9g,cIu
MAT4$$
#[^hC;
q"Zp~7
g -nf:
9dq]Rg
[m[_#tc
]i*hU<eb
88nm 1
j(D<9zr
r/0UsQ,
_[^m5z
i?H6
O7H0L1R
VX6X)=j
8P"%q-u=
{e'&+#5Z
KLG"t;m.
idK'
-wm]u7nf
1\^tPBO
Z~S+E/
< b Qx
KU. Py8
pbH$oZ
K1Hi*T
+EBR|k
n]FE<]
z/m@.t,
bh"ovA
|Z\8Q+
S {?M}
6O;~ L
{3nos0l
~%Z<}C@*
Nbz _,
xDOo?\
\{&mT2$_
Ym\*<W
9!9&vQY
ySnt'p
Jqs/.{
^@?>?n
K..GSk
)gW5}`
)zCp|7
fkKtdT
E79dwi
W00E1V
&6hj "
M^>7'cp
/p^J;,
H7< n$I
N1vsaZ
gMe:et
Y,q,O
QN++Z'\
0^}A1E
Ff<(sO
U K1mFx
IQ7:
]--~gw
w<BomI|
4;yB9\goO(
awdUrG
P gI2Li
nLv5 T
.z2*'@:
^KO7O9Rj
`Zdxv'?
la9N!xfU
eu#4,C
$jF$1ED
3B, 1;rW
d8M(m4
)9%p V00[
f PgY
QZ`8Kbk
![PuF
q7!D(S' g] H
hE<@ZV
dwM,J9
7hlwh5
2goa:;
z(jT7y
lk|RPv
_=9~">
A,o}&R
x<pAh@
ag>QrA
? U>4|
K/ %D6
hkgj9QA
Q @}/A<
v NO|y
(N S.\#>
@}Cpg'
y@$/?1
(YmW{Z
1M7LJ!
FXp4\oB#_
{U&GfneXAM
7pjd./
- y]/H(
^7UGLE</
?*1cS t
;O^=iLIC
[5H3 i
o L Dd
V(h) <
[Gq(;I7z
,%4Cv
4opAnS
Q !|P
[p)%SA
#gwp}
FRUX(9
]PSWH0
-ELD}C`
V:@;o9
kh|r"z
mzD XR?
ziKa:e-
V%b';~D
X qWU:
n,zq aE
=}U-7(bc
v&[$PQ
~pNzp]
wBVHS*
M=Wo&=
BxH [t
/gkKjB
xg/a}L
XelZ?
}{oyw U+
@Ci ^Z
gc~-L@
rMLYK
ymM'e1OG
;p{r,&HN
ev-l.v
+3EvMS
*XQ0%R
VKh`Z-@PB
T =NYsA
SsW QG
.Zk \4
z[Mp49
;mn*5#
7Xcv3G
=<Q#e%
LCs/C*
&M2 Ppp
n m!R8
&. #a4n
^#IDPm$
{v<_{n
L]Jo,pA
g<n9v8
71_{p@
G`AYiL
L*Z
IN$J+5
HX:LrX
b8=OAW
Ck\{x r6
:=-;[$
2+bcK
P6"pccG
S :UEl
"pCa|)
O5PDDi
~9<o11
XLvNL-
fQA`&`
.sUD^8
v$$EysV
cMw;VJ
[VHQ+i
h}~BoWb
D<-_<0
hx]) G>
~m*3Ce
$o}_]n
{O|n Sb
OA *?M
rcJX&i
{Nyh(jETe`
xG\?Bh.
,)JEHK3&
r}prIt
B5n2}B=
A5P$o
=6^0r)
N0/ge7Y5
"TWybp
H R`2Z
Qup)CL'
_mzt9(@
TgI`p@iB
rO* {"4
M=\VbQH9r
Y@& sC'W
e0&)]h#D
bN 4
!9vDy9&
*Qz. c
xqjiOh
4o9EL w
M92d<$
`*#uc
8g:0 [
a1kq/)
k7kf=E
: jcqpR
hcLCEPW
'ST\y>\
r:<rVR
[HwTUIg
LMILAE
30W:N*-
j2),)M
Lp-XON
iB\{ek:
$AT8Y
!Ns>}
B4@CZ,
Z4G?Ab
8Cqb>.
rLt,dS
c(tw@n?
\f$)x@Q,U
pyEcm&
6 `(QI
hprU&)
.}LoC)
GTJcR1
jsZ23\
mJA3;d
7BZ!YT74$
k\^E\8
m{Y_s +
g{{sX#o
=SSA'=
%f<kj]
s_DD x
(2 w%6
)M%r o
mjr'fX
lf4P9:f
22~O1Y
CwR<rOrNU
fRb`,K]
jOBAL 4hJTAF
H HY4d
s{ lg\
2BemY=/
MM](6Y
EY/O0C
db%=Tc
f(P`d.D*
82md<[Ww$8
*V1dN#
K\t{+"
#qa.m-E
#: >}e
e&|(M$
aJB _~
b4-bBN
}2Vo*t
2G) 9u:
e>NZ<-:
*|!q(
u2L Qo
#Trf;8
} f~LL
mbz}'&
7~|Xqaql%
QB Z+;
8q1J\
;F0qXP
(Hv:7n
bWj1{F
a yn^q
7.in<F
Q^L@A~
J~\LM1
`2CaN=
*1ox<;
-@V;5q
~X@D?/p5
iuP?g
7/Yo'.
F0BtGq
AL@j_A
_XkK<)
G2Y.=q
lYh~38
niYJo@
xW I0:K
)K BlD
|F@Mu)
tv4z.+
-`Z[a!!
w/[ M#
XK0{@zn
+&Vf?5
2L7A0j
<8u_Qb
hXs=E]
5 UCzN
sRBIh!
(;ewo-
chLz+
['q+E>
62bT=m
0Sq"w;)!
13*`&b^
j ig/0
lLwhY
PcXoPK
|u8qW-
?_VU8fo_
iG`ozg
}rOq:i&sm;
^9a%r|
cqBx0"
0JVfPg
K=sc<"
-R%?su .
^{.>iK
)[HK&F
;2BB40
!1) sm
Gi7K b
nlft%n
+PH2M3N
\nK`L&
}YP Vh&
/~BE]q:
XZ5lE{
Q9*_h&
I/uZp`
ZMH}}uU
?2S:V-L
Y/]v[y{
z/yI@k&
{avyD@9
6L6~fd,
RNz71F3
CMFy]5J
=tfFH
Nbe(-
h Sh pT~m
uK tIC
MtuAHjR
%xO~j
Lsd. =,
7%CxUH
"tuYMY
B g-%@N
on}y@L
c U.pWs
X``C3{B
{pupyk
> XGV+
_k9&mL
gXVfbq
enuLD
{X]3a*k
n|Np"}q
WN`C]}!
JlU*
:=/e?^
kB<ECr=
jvE3Uf
fAs&-d
)L@Zdj
+ 9P(?
Q}_@ u
V)"iA)
f[] iw)
L2bk!!
#qOHD
R|[wp|MH"
IW! GX
9P}2Op
ncH*)J
(Vb`>]
|=#LI9 t
1:I:*T
#*"82J
pD[p&2
>;xU6-
2>{4:J9\i
DNqehn8
<:d%~l
FIdo 9
'1Y{8Ei
9=G(n&
VrSdI?
F hS"$
]lIcCk
st>xD#<t
k6|/^!
eaD BFy
Tx+e"-
KS`;EK
"GuD)%
>"q7K
|:npA7
i43#cv
A}1cow
[c1xF*u
3 V@9liaF6
\;IkE 5
8Y/ UE
ML>S(G;
+r>Z3d&
Ef"qk-
EM! -sF
ib4`3ZN
j,_I T
.|[N73A<
UQUf:,H
*xBRH~
3y M6[
r'Ab6t
0Lz~ T
< ;q +
s"4ZG:c
`+D Ac
Vv'ab|
Mf|M8@
T72 r)
9F5 7H
&KKWxCxR
.g.Ig)
^!<V?\
?.28eQ
-aG88"
3_J EO
L'a2)*
YM?O}CO
p9. Wd
$3hED1
[t Q%J
o_O%*t
= $fS/
T8grmL
T|mT M
%,]C#W
{E>asb`]
&18IT5
[3- 4
r)gwT!
A'L_H
^ lT **
t9;7b-@s
"o 7%v
yG5? >
jMiZmP.
WOp"/)
*"2< +
)Ur,R}
8.Rk>`
c\,`r`
q3{ KQ
q!@lS7
`4oW:+
M5}uP6
~k,]JI
w*oT
FWRi>Xk
kut0-Ht
0%2%`r
&nTZ7;
0H i?b
Z>m8~B
)U>^YB
\!g}14
v;aLRb
FfKrf \
Z0u<'
$lCs~O
4_Lj~)N@6
2tG 4E
G8B?/TH
.=%\_E
)I2C4
_'h$2r
faSnjC
C[qu*0
>buo@/h
(OYW(h
w ?[Rs
>JC,O^
>Jb@e
JSRyTybN/(
6x\~uh5
.]QMDf
es1Bv
{" Ou.
AX*[:Z 0
!yHVGU
e}{Qp4
%8P?Ii/z
("F,1.[
F.CL7`
lSZS!*z
AQFP)8
3m|!O8&
b*HCNr
^C*=V,%
,|f-%
'F` S2
A+ r2 m;
^!%3 $
5*+"`;
V"*.z:y2
Ih:t(h
W 7S#M
Q'9 L=
Eq !j/
/(g7I!
+{g@,N
zi'boC?s
Ij $`O
P./`jP
n|]oF
's&<.(B
)]"WLt
Frvy~N1
&BaF}l'
4Ds'*=
y W^)y
G(\XX*jf
a`hCO9>
D27'Fx
NqGgrwx
CwOom <
{K/%hX
bGSyTe
Vi0S2G
7?Eb,5wZ
}U~jP-
.`$*%M
PKqYj-
U(+i#rrh5
X%bYJ:
AP:1zSx
>eO"$2
>3&gzEa
H|K 8"
>lz pR
P!oGJw
YU:ue
0nj j40
kr1g-gH
MTc{jW
sE8&;L
V$rl"e
gfMd"#
6o/]3_
Epo:nFJ
r0PG5H
Ii>&FHQ
!~51f!98
tFXIV2
>m>tEL
!>Bq?'
/'LS V,
w"u5 >
hH4N.yb
J1 7):F
l?7> BUJ
$1@>'T
6FF *
A'FX"+
)-f=fu
2 {4QQ U1
fkLU
,a@-z52
Z{\{Vw'
lJUUig J
$ygUlihy
9vy,d)
iHw9zT
pypeCP75
dboi?kujKS
t"3w!f!9
l`!y{(
=0!s)w
;;\k
Axl1Ww
teQMM7
*uIQ1
Xp*mopY
<[p#y\
+&B#2M
|vq'^p
t~Ds?m
;9U6 ni
) M ^7
7/#Rsd
UVcBT-
?Tq Q:
*R=cF,
It< w|
gbMyA
jc0q}_
mA-vg>
]I9LVv@u
`o' y
4^t d
BS9m2
7zG|/s
}$]xv
; XA'
~1 %@`
0exr(
5mf^OO
RbSDj }
!GI jG
:f*AUw
`XlqJ4"
p]m/nQ
|7vZ?
8J^I g
, A~FC
?@$Aw{
CGA\Rx
3Rz5$t
<Sls;xi
[G4V\kN9[Ee
f xgz,
. tmZL<
Fk?s,?
dT^>XJ
Wqj,@.
>:Mo"7
sd61>C
|qn% j
[BcgC:~
q6}\-F
2,<DvG
G 3Sf8
1:" eE\
]u8Y
q({n4s
XsJ29?
R@(d`
:i) }!
wK0 A
f55Ak}
J9U*w
<6uRm:
S9xu?5
@)!U:$m
?@Sxt%
C7NI ,
S Ty09!
2S$TB5)
R`dr(E
VBLLjU
2<'0rO
NhEI41g
G%gsyz
) cOjN
TT.VHE
#0JB6%
7; N
KP9.3~:_G
ibnYkR_7dA
@up*XH
j^u>^Z
J-U)p!
w,lwC,
dMKoV7a
1Ri Oc6x
#Bi\PL
FdOO7uK
lpWPhp
)]gF"J
|J[|mKL
=zU?vP
%tDG3k
M thqPb
#;! Tw
A<[0 z
yl6?D
q HL\t
DT $bFW
,_\P hR
xx!Z2`R
H8k^Si_
mSEfOJ%
On3WZM
`,=g* ]4
x`1N($<
j-5w*i
KbCA r
`X)Ewf
iO'1fkW
C:z&+yl
"Y?}h'
P tch
.UPY}I
1]tu~\2r
If]T`&E#
|eRVz&
QP0>CBE
xvb<X5mPU&
nW?021,
}imt}U
Ub i|p
p2%Q5h
MQz%'U
,)BQi.
S m^3e/
`_4|)Od\
|p-9\K
8npHk.
&mX\JCj1
#6ZcC)
C5tbs0?
]hM QX
=#2W43-
bL8oOu
jaq U)c|
F&=f}"
e!Q {j
D5uW$l
v\Np,]+
6Pq??p00_
|@g{SE
YJydAD
j5 !jE
A^^djf
}^9}sC
Fx[u&L
.'zxkA
\`;,*I
F;j4ZL
=1BP3p
7^f iN
KnmQF5
./?'S+|
I!4ar&
Cm* ,U
-m'(uz
#?Ws 7e%
?V/QoK
_sKz>a
`0[d
IgqJd!
J-\\2
`zts1O
Qry:82ilW
7l9RCt
=U;:fJ
*ppBw"
YP~_B*G_
HmHfn?O
6s\ry/
%^%vD{
Q#8[I.,Q
yK.S b
vwjb9!
J;jv>w42
LR?,o/
/w@OZ)
`SBSRA
$c;TElu
4 jy?
-OgR,
C'y2I,2
e:@68, :
n03}v38
)-'Fl}
s.s (+
HN1fVn
_)4*%l
f"nY?&
f6rZ [
n \9GgL
-%$Ji`f
t)].Uu
:kW;BI
>|k7o
tl!Z{}%%
lTW$b
C<-oD6
TQ3Zf*)F
XU4= 6
) 13'J
tV @
&J U(c
$x Ul3
3U 72
6~c"_}
(teVknZ
|;F~4mh
R&|cE+<
_OX)s9Ufm
,Fr73~
wN+93o
H# WPS
M`10 [
>gl e.
2$ u'V8
m;9>+
us@xh#`;
ot%<8@
Qhb5Vt
3f7oru
9^ 2
^Gxe6"
[AWCwX
>'*m
^w !I}H
EJO,R?m
ZL5dwnr
&?mLeX
h.<@,
oRDnYk
=nOcOI
Axs,3j
!6u.ij-}
SJ{"
DNVIh+K
QgK'`
'-j\0
kb@Slk O
>6. SS
jEH[fw
7Fknc<
+ 2Lhn
,$Vq/l
*<i4w`z
jY )@[
dx@/&bl
>J(XhiY
)s:gnd@q
K!~4mI
`|x>o
9o {`.Q
dn(u,
`nzk65
d.:"*W
Xw CT
&7Qa$8
?5K#P
mU!LksX
`5Z.Ig
80v{9
94REJJ
x#wjY~
qw[M&0T
V6>|Do
R0b Y l
yd+?G,
[S?j?;
P4:W##
j~BAJ.
b"6# \
+E7:Y\
w Yu,y
4ErD#0
_P*,P
spz6uQ
;4I~R)W
?,wc2
?%S([[
J t{bvo:k
8(dGf=
hx`S]8
d&3fahU
AMQA^k
WgZQe
:A4s :N
+DH k /
F)Ne{U
= xoA x
D; N]U
O(w k
&JZE=#~
>c=r6'
(;8jxA
RYERX=
v-6k[G
"t (({
$B}#9z
kwDTYg
XQ}94k
2Qz6:QN
(! :;<R
oMpMRd
"IEMGU
)5O0I~R
%A'-ff
L'H+EUF
yM .gp
_$Gfat~
mNJ\Zv
GG;kw j
#_:PEj
~,L)WG
z9 y=d
:PoPK\Z
[taxWr
G9Hm,v[B
B <hX
k. ]j+TI
jh 8'87-
9q! A U
<uH6 b\.
m:`>'n
K~(N$]
^ ;2x1
2k^3A<
muC=Ij1
9xC2@HCK
tHlBSZ
5k17&.
Y=>mWvlr
0~)>k/
#2Ht\?
0 #C"P
pV.2 O
&pc5%d
G`82 3
}>h NT
%Uy[?'c<
k]6cz
bNo=4z
_L~^:N
qUWfjeL
'4C<<9+
W 4VLIZ
)EH-fG
~K(,sqh
UFQ7[@0
ODl?NF
O{l)&lx2
Jh`L:~
1i/u R
UBnB25
%xzoS;
})w {z
WAuYX+
P>2+er
x .4eQ
EDf8?
$R+x@C
OO%,D /
9MPp*8
'J KT
E:f}OH
[lxkb>
&\D(\t"
yEv[Qg
)L 0L5
eb3!`@
?V3Aj>
C*#m7W
^dCjlx
a`}(9 h
yCd>%/9P
la@f f`L
@'qwfD
kh?}GW
IiNsG{6
}\ToP&Z%
KeP@jY
R^l;R@Z
8"EhE`D
~_A 5$
3 f9l;
I&|Bke
=#S0|*?
\v\ j4O
mamq7U
pZJ=bc
yfi^k
W`dX1s8
+V]BtL
s}WE5(
^ V\!W
<W{]AL
CP3-4u:
8@\BU}V
9tjU@
q^/'6<
f<DkL:\
xp 6CK4
]OzG/^
NX77YuY
N3aB^K#
e g) v
Nd_/2a
M>C\3V
D@(b>sW
uN/I7W#X
U]rAGP
o2-B;f
Z.y$}%
^v\"C7X
C!!Vo&n
K,5>2IT
#7B=y:
P[L`q?
/*N N4
><ZC( I
]kZ|S<
\t8NN3
s'&EX@m
Qb deNf#^
hd+ di
lkZman
9XXspH
=jCPm<
4] F/?
L#nUy.2
J0QShV
{#=Z[GP
3 zRsc
w Rc=f.
8zM0=O
]m}M6;
E3KR&x
hfDid8J}
,Qv$G4d
d u3qc
T51'33
yi6 K
SYc|j0Q
!:>$F\
E^2,mO\
G"rW{^(
F(IVR
xr@SGo
"g~\/a"
E4#m&>S
ARlK[lv;
wb`|_mw
r-Femx
p;>8@^
.8NlzgW
P8a_t+%
LX28z>
"[J?sk
nk2FiW
d~ XLO
UeG|fy
6I ck4
\9 V8a
\RI^eV
<KV9?R
z9-q}J
ANgWJk}wZ
>a[}k9
r?PW=:
BV M?V
|=!t:R
` EA "
{[r>>W
9~FA_T$Ps
6Z Sni
sEbYPR
<-18vf
@WZqq?
%XaPya
Z `]!^
\K1z,n|!X?
<eSN{[Bt
x$V(J=b
&$%PtBL
J<"aSm
Y P>f:B
cke"I)
W-VhO #0
#St# 3&
v1g)6H
F192br
j3p8mQ
&jn>;c
*X4;-2
=1 <V%
{ 7Xts
#3#^p>
A9!@G_K
[`fniKwi
}V>je0
X:Mt1zG
m;13wh{
C#v6[C
2Z4CEE
e!+m.Eyb
X@? Ic
'7@+fy
Fz2G7w
^&3]Rp,
~&=oOx
?8SBD
j!Tb_o
?%viLH
t4XdyW
O9zt [
Z7z}YJ_
J`w]nx
RVF@D;
yc`+q l
/ :Mtm
f!Y.v_
Ak]3O_
[{|D<f_UT
;.8} T)[
qp $>X
xZb(4
EL (3"
\Dtk25
Www+@
>(]M5
i}6nj=
v )hV.
G <UKI
FL:WX2,
}o]@7+&
_Y,`
*w%`yDJ
z!&LMj&
F]ceE`-
@ul8Pb
FUnf7S
j6TkNt
HZ-O2-J
h]h~Mb
YPb-!/
+3Vs%!
6{'Rb[fh
W|3I,v_
BI>HuZl
JS9a!zKI
1@H:Eb
wvC[wh
5Fl-QT
L(Ry^)r
#WW8e
}7aFcgP
N"wk(p/&
*J|mo
w?xgNJ
0 iRuT
hd%-Q/
S) wq=
A% 2jn
t<?0eq
z'JTT H
.qt`mp
E_Js}&
G4Dwv:8
"] gYtY
u}w3/%<$dB
-Gs1$o
il{zHN$$
$/|8sn
, /8@K
Ra#O{]"
ErwJ IA6
Ex 8 "{
kWscQm
.P@F?EZ
/kmzD<
{?dj%W
k7|)~^
N) W?7
}8TRT
CuZE*2
[WZ4X-R
l# L3Y
6"8UBa
ZCjRaz}
,&vN f5
_z6{4y
p'iz?G
OQ{3j[
H5Z|dX[k
wN Fh
AF>r:=7
0Z2;mL
b]I^J5
'T MH
m { @7\
)Zk-f,
|,oXNN
lg=fum
W6~_p!
.\m.#k
S, kXFK
""mwUH
Po5-*pH
Db4 e\9m
i~Xqt<
Z65 /y
W!(m 8
5$5 gY `
8]\^E#
fb1=Yo )e
ZmD>_=G&Q,
5Zi(a
3G +M<
Brp|(B
TMvK8(GK
ml9VM$
sS r-'
Otr ?WH
Z63e Y
$_5.K P
\4T!85_
2 -Qx[
h%t=,4
=LHPtL.@
>*_{>`
?TDO!'
3 #| 6$`
;P*9K
uR0q+Q
b *b27
AHDmmQ
# `W1[b
!f/r8a
,KmgCa}
@\M^j.o
4r'1eA~
Vt wNU
|R}>tnB
n6-xHM<a
NVBah[
O.d!8V.t
EXty`w
nt@To8
T*p!/%
~91cp[
L3FLr^Ua
/|Db
Q?bua7
sG`B,N0
T7gHZ6
yd-E{v
EX82,>
S+9gZ<
3r]q:5
XE/G 3
l=kegO
El6dR'
w<iA<^2
-av:6}
t16u#'
So) m="
6tE/EV
%cp*(BKB
1*y CG
y!V0op
o}q05p;
LqvAdn'h
sE83Xj
r]+ Tq
H3rvk.`
T4@ztk
PcPls.y
O6Bvt)
+o|[Cl
0h+ #
t{`NU[
gu!%n+
o.lr}|
://|G3
r`*DkQ
;k$4*`
7sv)_# H
C3^V-K
$\P$9c
%_H>)D2
G (Wr'U
i&>q|+
Cb jw(
jZ.nf!
J6[90:*a
C@B3~&
]K) u&
_UOfQ|p
U= |rBJ
sa_1 $
B/C4OA{
jOQ4!^
a1/4VZ=
BNSgDq
lv6p>!Hs
{l44Vo
Q9tN*g
b$3wri_
Ri:uW"
h !Br m
8ll,ZT
x0Rv8 /
'<*V")TVhy
Q2opf(
]Q6Rh
6xPgE_
VloM/P
u$D=)4W-
*y6&[o
@Lp";B
Vn*@UQ
g};(nd
q3Q/ `
1\j]_b
$K=87b
A%bh,xi
L~.o)7
sw5!ac
t 7#sK
@G') h`
%5ix@
2i4M,F
I5(bqD[}
"rjSv6
|d:}|}
qL (s Vl
sI`Ueq.
^OnLLd
DAkr}
C<.cx!
d{ye]d$7E
[_X.}$j
6MHx}N
o,^[8T(s?
MGlwWvR
;!2Z^(
/Fm4P0
<A{Ew
{@td&f
^X>X
Q&N,(5
*Pe ,e
JQ?(id
m[6&xX
lk_xb|Tx
S/#S^A
Wc2,ZYp
Rx%8V>
CBGj>Cm
lKS)V=
?AB[x K4p
\pi[5"
Wzi<QIQA
*A k]z
7JNra;
X=Ms->
q x* MM$2
rF<6HC
Jc !~
I{a[5
Pj.EE}
RsI?SA
8M$f1c
b&z}4&
Gd|*[^y
JVTfW-
cWI]> G
A"BqUA
/.H/ 7
e ^ScG
=p4s.=
Q)qsFu
E+ e_\
0A!yg"E<S
i`6KrAB
(f$?~K#
4|8iOk
;+o= ^
k[:8 g&
s Xle
!NTo]-
4&w RaC5
=1?WW_
~b'z(
D%LoaX
)UQbzT
#-i{Ie
Uq Gc&
3YIvqf
L^KpC0
b9(ha9
:IEl+5ZxU
|nz}`u
0iV;7A
2,'IMs
*2*!I "
zYO2KeC
beYS9RA
^@+=uI
v}L D
)Q=wF(
*v _QBI
Rh,[cSO
R+5-f'
$^a)$+'V
h@5Pg"
7u:Ryf
wPfyXV
.RK y_
#Cu.xq
3 #WT3
9/6KuE
9L|80}
y<2<w+h
:k[-D/
TA6I]4
c\:!w:=-D
sL|QRw
Rz >
&ok-[3]b
Cx(Ug+
yF N[
tg#`Tv^w
_:qZ ~Z
"SUas+
lsQVUk
'@aKGvb
6@Xu:rz
)yd:C|
B`SACYf
m>2Dlm
Yh6,Bj
NNE4tv
bZ7 {X
AU) t3R
~=T|C'DA
}uO#kg/
FHL. A,"
</_ZJx[j
@&TOiY
$ 6E-
(;. XA
@3Aw>
PxqSz2
,je?Ey
:4,eq|
MJQD0 :
nkmn<_
%[I&A(
y \$,0
jE0vz`
46Xw)E
umg$Jj
jV~x?:
}<%'/8AM
hTN19m
ic/)ua
zn',J"g5
Q=Fq+M
<6} /.
8&c&pF
*@&2@ v
eQ1cH5
NBFa?3t
Ki's|Y
/$Tl2{b
-L?7HO
0,Z $fp@
,U(g8)=D
u 2qpw
}:_yK
E2J& k
Rz]js
knIh*j5[
2?!ijw
/E'Y AUo
8M jN)
?-Mz[G8\
3gM9u@
8 ]HwN
Nm#n]<O
FS(z8D+K
'9 %9h%
*{wF=g
=W&[F~
)i3Hzh
3@P8dUN
xr | "r
bpyHzi
g-W%pIfC
qRHK-q
7~=(=FV
0;&F,^VZ
H97 ~C~
8[et0h&v
ER;`Fv
;jb}q^
c&#{K4
g104`,
go!8pe
f=,W@x
tA[[4v
\GXC=q
oa^7Cz
]$"5u9j
"Za/{*
&\qe{m
d]g Ea9
- JU>}R
Dtnitr
y5\{~k
R\=HdnF
7( umV
cdEG`v
z`mdBG
e<ix!Pqb
y,RZro
bi FC2,
u6O}Sp
SjwL'K
}:+Mcv
58x5)DR
tTJ]4
RQD^0 U0O[
mQ[=pcP~
_.[\6
:*(c?p
f W%aWh
( '4v
kT2Kl<
&vn/ "Xep}
?.LD+M
-ZSD m-.
VN{L3_
W\7s'IE
2$ e~:!
9aCr+x2
3W;a*5
TDc,du
m1ZIOV
xtl^G
:$ (58IW
Mk]ZbK;
[7:I2%
' .9%x80K
xOjG@ 0
$]G,PVo
f,H\v4t
9pC#r{
DdK(,R
o npSl
0:N;A@v
;o|\10
*l/RF\
1QBg6]
Kp.ioh
u^B&,%$
WK*8u=
.@WrN>{Q
g~~x;
~ lt{gY
_470#o
Ui)< 8y
7 Yhm-_ u
0%1d84
#0p;'j
iZ8O M
AR` Yj
'ebHi_
l^.E{
k+y`Xy{
N=z\aj
j{=kV{
%,fVY'
q[zawM|
MeD,\\
& h0$T
Mk[US
v?{E|{
fy(BpW
` fw=\
\ _%=n
!9B`s"
})!zw_}
&p\]vQ
mX0~ d
65}-\T
O7p)#a
XaX`eD
K'sBcPN
'Cw9\=]
g]}ELr
;0HW/<
uqvY0
##e8t"
u u<~dI
$Phz#Y
x$5oYhV
^cr#)~
,5zm BW-
:s) kJJ
Ny2|yt.4
&=ms{S
orTz-AtO
]<p/O*
E@oO(m
Lmz: L
X3KwUu
9Uz=Khn
R\J?1)%`:
2PKPK)
*0=BX
>6i6}
gmjaCm
EfoH><
}M8;_)
SW;yVh,W
py}y(Q
zT|yvII
WR ]_1
\g&sv>
=dcO#M
D+;-=y
u8Zy.R
2oZA 8
*C7"m
]} DNI
GV WfL
;Y[IO<
YS(Hdd_
:i }l9
8kv$><
1]B[z)
rR&4A$
pU/= _
f#dW
Q-!=mn
lmn>cb!
gOUQ %n:
,rEf}
-sQS@P* :
^]iKPX+d4
aRJKo4
5z/N"+
, m<6
~ib W0
!l%8`[\
3jn#6>
hsM'`
5LRNW-M
;6khSi
y.Lv$Sp
z{oLL I
mXy7+%E
)p}v:G
sa:CD{
,CX{*->
'Z=e $
k!E=|
uB/+48
fX]%TE
DeDnb_
+cFir}-
8RN&o
O2+ ~pe
gm#O51
k#sE B
$.*j,?9}X
d4J'PY
]a2L 0
P|N,P7O
jBrnh6
%o%EZVwp
2#K4NBB
BpquK@
kN"r}B.
* c@|P
;T Kuy
*RzOxy
H7~d6"
w)YHWC
S ID>}
^CYmy~
iR#%,<
[}2xn[
~dtGS!
zQE!QS#
Ri-Jtn
oL uyd
)/p6wc
mFd\%/
1>4LQj_
o5+^;!}
`ra('K
5Y=EF2
=D:lUT
ofP+,:
QIiEeS
%?`.f]FG
pdK;s6g
zl?zO7,
A$7% ns
2m}#6+YoG_
+%2~(jX
d5#).?
f3a-(N
3 a(
S' f;
coG$]&
L'Hi8[
#*(v#N2U
8Yv8R?!x/
>-I_x;
UmD @P
VmsibJ
E=z8 ,
~-ImA:#
v @)H)
+5aP'p
S|P7Qq1]5
r^'sK -
2`|Mf{
}Atns*j
RPxAUX
=j-x @
C=^R]s
dK]a'dM_
g)@G3'
aze=Bm
:D! "6
Y*XI54
h|E*KG
,w+#+G
'JXVdx
XBpt7y
}<nO9>2
v9i* v\
`lvv C
S*eqWH
r3}:'
BQjg{C
U'8u|G
O 3~<=
RNqC%Q&
$=Y@fy
CIz $BU
*+U7m>%
Lu/d}y
TG0 Nv
K0HXw_
8-:SbR;
DHr"E5
K ~`{xY
F -}Ke
Mnw/F)
M,,yS&
T`i<Yw
AA!FQ8
P]2>+KH
JO+)'|
\F,BzH
I@BI%<
.Ijt\UZ
Z09>lE
%Z+|WP
[t ~eM
B%q[B
_ 7I3#
Gy;\0$J
]Y}$ 9?
'/2~>mc]
v^iQyC ^
DEp,w9
oG>!g`n
rQIq^M
GOPk%&
gAdlg.
!m,AMa
% U .5
AN)=*@
e4zgl'
r VFpR2
!?w99f/g
)sN<p2
k]D-
`UuLdk0
* E:c*
iBj@1<@
CRVYzb
=tG1(6. E^[
V:]=;N
y*MU b
e w1Vr
jpK^@FE
iuV{BH
uRA|3[
Y2.&t:
Q&C>xH
H=e3<b
}LdWzF
B^wk2h
.-^;`Y$m
?o(~syu
kr5R*t
|LvpHz
Xg~Go`
"M<E?I
%HH2nq
{4MJHy
}p. (&
NO g[V
R{Ui+D
k/ l-i
u 6@LR
Et Nnc
+"2Xw$
B$pG#A
"8@c.9
Ixo~9;M
-O{QYUH\
0g2-b4
X4#x OW
s#sfY
z(.pV1
2S~c9?
m$ Y C
s>l]AV
B"P xr-
\}lMbF
-Q gS8
QFcXdP
FA/M*c
$)Y%aX
j"&q2>
lke; ^
KEdA oRzg
nNv_~R&
ID<~X%=OTA
uQsf ,
}KQYRg
Ux9Gkan
u}F?E$
eiw)J]
ZZ3Xx}
]F8rn
akUYz5
5vvS^]<
;=NsAv
/EdfnO
TMT{ ^
W/|2c^
#BH7oc
.jLwq=
C d@wb
_HK^!_
lBxdBm
6Y({ <
*+$CdgyB4
>_jLZ7
2<HDGj
s/r?a*
n~QsO^
1A$w'"
>#27W
GDo$07G
|# Qc ]+
i34G%D
:0V hiTj
(NKphZ
!V*8Q
1^{v}l
'eYlJ=o
i2`Ek#
{e&?~C
%TzjAm
WUJL5H
?8X$Me Wv
MP.yxH2\U
/l&+C9
I k8ky
HquJi<
8B 46/
@> Fad
D<j7gg
q. oX
_!WOu$
s bxeg
b8A'
N,5WX+
RqA/Rp>
l<F; l
y3 AvbRX:
tHyGMf
W+|o20C
| &$Y
.qJ%Y;
e&[t J
U!~5<:
",s+ /
ou(; Dw
H/ &|h
w|5n o
HZp2$E
$X9cO7!
mqry^1
}wBrX)O
s_%p9q
TtX}vW
-UX5 oE
sc0 /y
jdIFz&
G%06wP
G:~0
~F"^s s\/t
d rOi{
s8p&K
DMh.|Y
EJ# d
W?kCc S
u[[ Hf
}g>s!
N2h}1.'
S j7tv
.|4#F9{Y
R *>
N8`m; W
38i\%z
08aNi6
{Wi(An
I^uy3J
4]*HS
ymT6h
(k{Jq%
K75)z9
&_K(zz-
XiNbr[
EnDayT@(
M|jWn>i
l,X^w
*Q\juZ
.PA0AA^
deF} g
^Tk!2s
Q^yCL:
QzF- >
W*.6 h
^6WGTel
LJ-'8nO
V6vmDM
0K vn9
wQ?6
^Dm7!6
+fo G
~HgDZ7
DM 'q=e
^zB2 q
'.#f]Ew
e+h3J<
P)P{D;
a+FcO,
isg&}!
?yw~e"()>
_%fxyY7/
i7<]RN%
"QH0z
+s8L~@7#
V%-F;_
PA.:1>
uj Gzg
5 8e^
80O,6eJ
g_vp_-
9Wi8 (
Ym7t)&\'
r(HCxf
'9%:gU
+*ia5I
Q:RL,J
}Cx_v@f
VH+C;6
;)as1.
`MX7<A
9^tN^M?
W!IO_0
g@ 5|Q
#BQm{[
VtHnW]
B dGew
"8[GIv
fXJSrIU
@=^;g,
v&sZrv*
L>=zIC
rOWb;~
"4NVYGP
;|2B_b
VNFY8-
yvK1P>a
s@$e5I
#:$$T!
h4$G{-
K5 I:
ojmjH^s
Y'w+%
B8od U
l (Ai` |
&]Ah(H
CgSb&q
19[ZYZ
RC4Aik
3q?=Nc-
3aoLx2
Mtor;p\
2,p{7k
VK [n4+COu
X;@z.h
At$4y1
c Uj}]
s@C f4
,q&qYi|
;l=(Q5d
OLP7 1|
n8[8/C
!m{:gIL/
0jh)R
B"+ ra
bIT5.;
Q&mY%/0
{u\%kvxV
ma$ 3<
sJiVNF
t06P08
y4G S4]t
sJZDX
N)=f q
S wM3!
t,!vC,
MknZW[
FbzbQ)
hdYZKd
Cdr,DY
yaK{ Y
Tm)VwY
%QmWD^
ZeU_d2
j5 4)n
c$:$W-4
"2, eL
zUN@ C:T
GnWHdjl
S: sY
lbCqrU1
80vM7C=
y^K8=k
`P@.1ui
AAW0flV
[YKG<i
*3H=*X
x' $k+
khLTG
/*+wRk
gv#y<I
sPmCYI#$e
#<%AS
!fW9{V-
El U(=
Z+fQ,TX[
MEJ+c4
qPi%W}
"7<0yzk
=@Ny<K
WW $*bw
}PuhL#
PF[he,
XY9mwf
#q3F#N
l^ Y9 Qrh}
KSfuu2
&L@"=e#
~ID?$T
S~\#'!dx3
2Y0gR!k
4 9Np
,#(Jw+2
Az>~Qq
C/vv{n3
m,3Unv@
;FfT~B
5Uns3X
b|^bhc
XO 7u<S
eV0Tuf
C% g'?
ii"| g
!["2[ %
k~LaAp[N
K3L[%+
X4?< N:
`[}C.?m
$^vO^C
@pEFe2
{ 7jqo
X4Ku.B
~ @3B)
W?K6FS
Q-Y=o>
}:W,Mv
e&,`>
/w,#Z3
>PdYo?
*0 9!V
A7:NzN
)77KJ=!
~.w{{l
+5_))
Omas-h
^m~ <\q
7=\-3q
8FF`m"
7}g7"e8
t3AO/
uOD-M,D]C
vI"U$0
>"Vl$#
X(yMJW
wd#iF/
]]Im Uv
zYk\i
p *~/Q
r!X:ZP
LJNN[0
rBDt=B
QD q 4z
_/D6NV
?EE}s3
Un38,
kzzzi+
aq?Fc^m
WG-s@Q
>S6-\w
v{( BF
"QnM*/o9F
@IzfixbP
k {pn+
ir&by9
>bIiS|
od9G+c
f~]'*gxs
US"""E
W&%=,x
>#5+W0
2qG*(|
APA>fx
u.X6M B
X4/)z@f
y 0O?0
BdpL u
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?> <!-- Copyright (c) 1981-2001 Microsoft Corporation --> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity type="win32" name="Microsoft.Windows.CharMap" version="1.0.0.0" processorArchitecture="x86" /> <description>Character Map components</description> </assembly>
1181g1
3u3z3S4X4
9.939V9[9
95:>:C:f:k:
Image base0x400000
Entry point0x402400
Size of code0x1a00
Size of initialized data0x200
Size of uninitialized data0x0
TypeExecutable
SubsystemIMAGE_SUBSYSTEM_WINDOWS_GUI
Machine typeIMAGE_FILE_MACHINE_AMD64
Compile timestamp2013-02-04 14:19:09
Name Virtual Address Virtual Size Raw Data Size Raw Data Offset Flags Entropy
.text0x4010000x18b20x1a000x400MEM_EXECUTE, CNT_CODE, MEM_READ5.846391
.pdata0x4030000x1140x2000x1e00CNT_INITIALIZED_DATA, MEM_READ2.293743
Api name IAT Address Thunk RVA Thunk Offset
RtlNtStatusToDosError0x4010900x26b00x1ab0
ZwQuerySystemInformation0x4010980x26b80x1ab8
RtlQueryRegistryValues0x4010a00x26c00x1ac0
ZwQueryInformationProcess0x4010a80x26c80x1ac8
wcsncat0x4010b00x26d00x1ad0
mbstowcs0x4010b80x26d80x1ad8
_vsnprintf0x4010c00x26e00x1ae0
strncpy0x4010c80x26e80x1ae8
_stricmp0x4010d00x26f00x1af0
memset0x4010d80x26f80x1af8
Api name IAT Address Thunk RVA Thunk Offset
OpenProcess0x4010000x26200x1a20
GetCurrentProcessId0x4010080x26280x1a28
CloseHandle0x4010100x26300x1a30
DeviceIoControl0x4010180x26380x1a38
GetLastError0x4010200x26400x1a40
ExpandEnvironmentStringsA0x4010280x26480x1a48
CreateFileA0x4010300x26500x1a50
Api name IAT Address Thunk RVA Thunk Offset
vfprintf0x4010400x26600x1a60
_close0x4010480x26680x1a68
_read0x4010500x26700x1a70
_wopen0x4010580x26780x1a78
_filelength0x4010600x26800x1a80
fclose0x4010680x26880x1a88
fopen0x4010700x26900x1a90
malloc0x4010780x26980x1a98
free0x4010800x26a00x1aa0
!This program cannot be run in DOS mode. $
Rich_{
.text
`.pdata
nul
\\.\VBoxDrv
The Magic Word!
%%SystemRoot%%\System32\%s
ci.dll
CiInitialize
@SH
L$@D
D$@H
D$8H
D$PH
D$0E3
D$0
D$2
D$H$
D$XH
D$
Y!H
t$PH
|$X
\$HH
tiL
L$ D
|$
|$XH
t$PH
\$HH
|$XH
t$PH
\$HH
|$XH
t$PH
\$H
Y!H
LcA<H
@4A
M+H0A
u $
|$
tYfff
fff
fff
w`
|$ H
@SH
u H
[H
LcZ<H
|$ H
u A
{8E
{8E
CTE
t"H
fA9[
v^N
(ff
fff
t:A
|$ H
@SLcI<3
ATE
Y8A
YPA
t+N
T L
L$@D
D$@H
D$8H
D$PH
D$0E3
|$0f
D$2
D$H$
D$XH
|$
l$
t33
Y!I
t A
\$PH
l$HH
t$@I
|$8H
\$
|$8H
t$@H
l$H
\$PH
\$0H
l$8H
t$@H
|$HL
d$ M
d$ H
|$HH
t$@H
l$8H
\$0H
L$ H
\$@H
l$8H
t$0H
|$(L
d$ L
d$hI
d$ H
|$(H
t$0H
l$8H
\$@H
x L
\$8L
L$0D
|$0
F.L
L$@N
L00
L$@A
u A
D$0L
L$8E3
D$
\$8D
HcC<L
u A
E A
l$8H
uYA
t:H
E I
t$03
v6f
t H
HcA
Y!L
x H
L$l3
l$H
l$h
D$L
D$P
D$T
D$X
D$\
D$`
D$d
E<H
l$0H
l$(
D$
D$p0
D$t8
D$htori
D$xB
L$pH
D$@H
l$8L
D$hH
D$0
D$t
D$(H
D$hH
D$
l$8L
D$@
D$0H
D$((
D$
l$8
n`H
Fd
FHH
FhH
FpH
FxH
F@H
F8H
F0H
D$@H
n H
D$0
D$(H
t$
l$8L
D$H
D$H
D$LH
D$@
D$0H
D$HH
D$(
D$P
D$T
D$
D$XB
D$`
l$8H
D$@H
D$0E3
l$(L
D$
d
4
_stricmp
strncpy
_vsnprintf
mbstowcs
wcsncat
ZwQueryInformationProcess
RtlQueryRegistryValues
ZwQuerySystemInformation
RtlNtStatusToDosError
ntdll.dll
free
malloc
fopen
vfprintf
fclose
_filelength
_wopen
_read
_close
msvcrt.dll
CreateFileA
ExpandEnvironmentStringsA
GetLastError
DeviceIoControl
CloseHandle
GetCurrentProcessId
OpenProcess
KERNEL32.dll
memset