1.1
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.72
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Baidu | None | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200204 | 2013.8.14.323 |
| McAfee | GenericRXGO-YA!4BE07337BA71 | 20200204 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b0b9e0 | 20200204 | 1.0.0.1 |
静态指标
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '.text', 'virtual_address': '0x00001000', 'virtual_size': '0x00045a19', 'size_of_data': '0x00046000', 'entropy': 7.190000606465575} | entropy | 7.190000606465575 | description | 发现高熵的节 | |||||||||
| entropy | 0.7 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 53 个反病毒引擎识别为恶意
(50 out of 53 个事件)
| ALYac | Gen:Variant.Ulise.4282 |
| APEX | Malicious |
| AVG | Win32:BankerX-gen [Trj] |
| Acronis | suspicious |
| Ad-Aware | Gen:Variant.Ulise.4282 |
| AhnLab-V3 | Malware/Win32.Generic.C2832081 |
| Arcabit | Trojan.Ulise.D10BA |
| Avira | TR/AD.Shifu.jtxjg |
| BitDefender | Gen:Variant.Ulise.4282 |
| BitDefenderTheta | Gen:NN.ZexaF.34084.zq0@aeQgR5ni |
| CAT-QuickHeal | Trojan.GenericPMF.S4257153 |
| ClamAV | Win.Malware.Midie-6804446-0 |
| Comodo | Worm.Win32.Gamarue.IC@7xv6jz |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.7ba71e |
| Cylance | Unsafe |
| Cyren | W32/Agent.ATP.gen!Eldorado |
| DrWeb | Trojan.PWS.Panda.13690 |
| ESET-NOD32 | Win32/Spy.Shiz.NCR |
| Emsisoft | Gen:Variant.Ulise.4282 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Agent.ATP.gen!Eldorado |
| F-Secure | Trojan.TR/AD.Shifu.jtxjg |
| FireEye | Generic.mg.4be07337ba71e1fe |
| Fortinet | W32/Kryptik.DZLG!tr |
| GData | Gen:Variant.Ulise.4282 |
| Ikarus | Trojan.Win32.Crypt |
| Invincea | heuristic |
| Jiangmin | Trojan.Generic.cuvox |
| K7AntiVirus | Trojan ( 004d4a881 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| MAX | malware (ai score=87) |
| Malwarebytes | Trojan.Crypt |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | GenericRXGO-YA!4BE07337BA71 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.gh |
| MicroWorld-eScan | Gen:Variant.Ulise.4282 |
| Microsoft | Worm:Win32/Gamarue!rfn |
| NANO-Antivirus | Trojan.Win32.Banker1.fkcapg |
| Panda | Trj/GdSda.A |
| Rising | Worm.Gamarue!8.13B (RDMK:cmRtazoXHQDrIrFDpzD7SagMZMOq) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Crypt |
| SentinelOne | DFI - Malicious PE |
| Sophos | Troj/Shifu-G |
| Tencent | Malware.Win32.Gencirc.10b0b9e0 |
| Trapmine | malicious.high.ml.score |
| VBA32 | TrojanPSW.Panda |
| VIPRE | Trojan.Win32.Generic!BT |
| Yandex | Trojan.Agent!vLI0z91Jp0Q |
| Zillya | Trojan.Kryptik.Win32.1533751 |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2015-09-01 19:09:14
PE Imphash
a3cd30cc30d79a7a89ca3c454827da96
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x00045a19 | 0x00046000 | 7.190000606465575 |
| .rdata | 0x00047000 | 0x00011c90 | 0x00012000 | 6.375271289888604 |
| .data | 0x00059000 | 0x000184a8 | 0x00005000 | 5.648891065682421 |
| .rsrc | 0x00072000 | 0x00006950 | 0x00007000 | 5.704713204839838 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_RCDATA | 0x00072520 | 0x0000642c | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_VERSION | 0x000720f0 | 0x000003d8 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_MANIFEST | 0x000724c8 | 0x00000056 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
Imports
Library WS2_32.dll:
• 0x44717c WSACloseEvent
• 0x447180 gethostname
• 0x447184 WSAAddressToStringW
• 0x447188 WSAStartup
• 0x44718c WSAConnect
• 0x447190 getsockname
• 0x447194 setsockopt
• 0x447198 sendto
• 0x44719c WSACleanup
• 0x4471a0 socket
• 0x4471a4 gethostbyname
Library KERNEL32.dll:
• 0x447000 GetModuleHandleA
• 0x447004 CreateFileA
• 0x447008 SetStdHandle
• 0x44700c WriteConsoleW
• 0x447010 GetConsoleOutputCP
• 0x447014 WriteConsoleA
• 0x447018 ReadFile
• 0x44701c GetLocaleInfoW
• 0x447020 GetFileSize
• 0x447024 SetEndOfFile
• 0x447028 CreateProcessW
• 0x44702c CreateDirectoryW
• 0x447030 VirtualFree
• 0x447034 WriteFile
• 0x447038 LoadLibraryW
• 0x44703c Sleep
• 0x447040 MulDiv
• 0x447044 CreateFileW
• 0x447048 GetProcAddress
• 0x44704c VirtualAlloc
• 0x447050 GetDiskFreeSpaceW
• 0x447054 ResetEvent
• 0x447058 LocalAlloc
• 0x44705c RemoveDirectoryW
• 0x447060 VirtualProtect
• 0x447064 DeleteCriticalSection
• 0x447068 GetCurrentThreadId
• 0x44706c CloseHandle
• 0x447070 DeleteFileW
• 0x447074 LocalFree
• 0x447078 WideCharToMultiByte
• 0x44707c InterlockedIncrement
• 0x447080 InterlockedDecrement
• 0x447084 InterlockedExchange
• 0x447088 MultiByteToWideChar
• 0x44708c InitializeCriticalSection
• 0x447090 EnterCriticalSection
• 0x447094 LeaveCriticalSection
• 0x447098 TerminateProcess
• 0x44709c GetCurrentProcess
• 0x4470a0 UnhandledExceptionFilter
• 0x4470a4 SetUnhandledExceptionFilter
• 0x4470a8 IsDebuggerPresent
• 0x4470ac HeapFree
• 0x4470b0 GetVersionExA
• 0x4470b4 HeapAlloc
• 0x4470b8 GetProcessHeap
• 0x4470bc GetStartupInfoW
• 0x4470c0 GetCPInfo
• 0x4470c4 GetLastError
• 0x4470c8 RaiseException
• 0x4470cc RtlUnwind
• 0x4470d0 LCMapStringA
• 0x4470d4 LCMapStringW
• 0x4470d8 TlsGetValue
• 0x4470dc TlsAlloc
• 0x4470e0 TlsSetValue
• 0x4470e4 TlsFree
• 0x4470e8 SetLastError
• 0x4470ec GetACP
• 0x4470f0 GetOEMCP
• 0x4470f4 ExitProcess
• 0x4470f8 GetStdHandle
• 0x4470fc GetModuleFileNameA
• 0x447100 GetModuleFileNameW
• 0x447104 FreeEnvironmentStringsA
• 0x447108 GetEnvironmentStrings
• 0x44710c FreeEnvironmentStringsW
• 0x447110 GetEnvironmentStringsW
• 0x447114 GetCommandLineA
• 0x447118 GetCommandLineW
• 0x44711c SetHandleCount
• 0x447120 GetFileType
• 0x447124 GetStartupInfoA
• 0x447128 HeapDestroy
• 0x44712c HeapCreate
• 0x447130 QueryPerformanceCounter
• 0x447134 GetTickCount
• 0x447138 GetCurrentProcessId
• 0x44713c GetSystemTimeAsFileTime
• 0x447140 GetStringTypeA
• 0x447144 GetStringTypeW
• 0x447148 HeapReAlloc
• 0x44714c GetConsoleCP
• 0x447150 GetConsoleMode
• 0x447154 FlushFileBuffers
• 0x447158 SetFilePointer
• 0x44715c HeapSize
• 0x447160 GetUserDefaultLCID
• 0x447164 GetLocaleInfoA
• 0x447168 EnumSystemLocalesA
• 0x44716c IsValidLocale
• 0x447170 IsValidCodePage
• 0x447174 LoadLibraryA
L!This program cannot be run in DOS mode.
ycycyc^lc^Ac^cyc
|c^xc^xc^xcRichyc
`.rdata
@.data
PQRV|(
PPSVDE
3PD$\d
F8^4^$D$d
FT^P^@D$d
Fp^l^\D$d
L$l;u=PhxD
D$4\$0\$ )
PL$4&h|E
L$4Q?1
PQSUVWDE
~p^l^\D$
~T^P^@D$
~8^4^$\$ 9n
PQVWDE
PQVWDE
UjhHhD
3PD$Pd
PL$(h|E
L$(Qd,
RL$(h|E
D$(P,,
QL$(th|E
}@~b}Z
Sp_.p2Qb
e: C+,(
EJg1LD$
%v\A\0
Sp?|;"k
7At+7p
YU@#@Op
uPWQ$D
wuF9lg
#/Wmc!i
YJCxSv
@$-B$$
0|xWe} (]=
yQWO,G
KbO'`Q1
,InBh{S
}B2<BS
f1qAeg
3I-|l^/
^Fi)B
L,*5Xd
4smg}cs
EyoL [
5m3'HJ
UDH@$A
lKs-#
IW>bN@
Vf7{wrN"c
qUJB0\
N(*RqK
OdP:|ER
MO=x@B7
qTc{!|
2]M|;!
V3}2bWb
4&KnMXu
H14)|+
<evQSce>(
tVuD B
%!`qwTT
\HYP:h
mx.H*O
ry\}g%
F#1$Gmya
P/}qqX
^bo`wT
FOzKPt
^4cB9(
CMo"+ ,
?&fN
q$Et9E<U
&2Z_jj
BlU\UX
}jX-{]V2
e?#${T
W RMU3
<>r+/d
DK@$c;
%*3s<s
L`_!oyj
I]\"Q!,a
8dV	
IA1ntBt
~urZth
|lju(\
E$CKE$D
\E)E$z
L1>kdW
))a68O/&N
>(i)T4Fy
jNSzf/3.Y
@qmK2T
c BXPq
)H-%.J#
hS=@S]d
#iX#[ Ew
\htYk}
K8@+\*
TAK@=8Y
[k@:g(j
%ae"i"{Cp
cuWNL71u
GxZ"759G
> Ig+{i~
JG0K[v
_-R6 9ls
u#^;FZ90
sc!Pz
M>WzI{J\T
SxMxrf
^hCT&8
<1cIm<
QYm~wM
}N^#]C
""[-qp
(Worio'
7 w*9/.
Al*34Q6dU
Qi^bJi
hiEM=jp
dITLrQ
&U2>/D
6RK@z>
nzG%$6
T )j)b)Q
m"Z_Z!
6$Wx$w
8'S 26g6
EL?=mDgGS
Pm7_TS
_KbDuP
d5Ornyy
=nR^jJ
B%J@ Mp_
?)pARhkPu
NPik-j
H9.9a8
25Vo l
7Ma*8o9
>p`OrbULu
s[v"?:r|
Re{*O8}+ r
rHNUSj
DVjdty:
i ) `y
zE"$+m
d\ttcW
r/XW8!
Z]':,s
`Pj'""
`'r6g2
kL$EE?
;Tz4Ya
|~IP|m|
!oeXlS
tFhiZZ
P{KMJu%
VS@):*
AGs.{{
?lrzs7u
,ul.Sq
k-Vy"I
e}8oaV?
iQGpN^.
OUCe"@
ifqkAnT
k(i.AcdYy
h.>{KN+|
P+\4hs)l
) W-_g
k'ybSe
m;v4m5
vV/1?r[
`h$bHV
xaf?v01
7DKCddA
]&#Lep^
sD,zJ[!
mv0I!.1
a3 ^r2
:Hb"ak
EWxK j
2?c7EU
*77??C"
O;C/#L+
d!F0)jF~\
4Q} s.
k.SL[mS^
K;l`FMdk(
N2cGSU
',g+3P
'XXhSa
Eq|o="
03'T^#lZJ
yB+2;t
Vgw!Av
RXB4%;rj8(
0zaJvqR"
\rh/!2_
ML$Im{e
&$F*Xe
wE,uE5
T UDD$
CyH(2T
-V2v]u
E=VTopzH
9%eBoM
=O$[:1v
38~!$
+O}}x/
84[Zc}
gua?NU
mS9K,;ga_
,@%cUy,7A]h
>(Gf$}
m'&eu~
ab=ZXL
b!@M!%
ik@PV!sk
w]XcF]
$D0EN>
<<3haRL
@ef'k=j
0$$E$TX
B\PD' .
ALLyec^
l;2a*&un-
m?9,'L_w
vI{8-N
TXQIGC
SnVo,D<
d8$8Ci=
*Us>q!
r$lXf&aM
@tLT0$
c^_hgy6
3S%~[@
a <Ew]^
'5wZQ-
I N;}t
) `ZMw
GiO r~2
l^u$g_6
*gzi?r
dbvcBkc.
-O!TG
krF Ol@5
V.'+D
LHu9 U
J4RR8&;G
/`rvc^D
bR0S'6
+p||Pt>&
41s*h7b
jpOv0f{
o+F#"w
Ml5Acg
q1,Dl:B
&AgtqvL
8Q&:%Sq_<
/}pW!h
c%aZpF
.>+N ;
kno},
+kDS+L
5&>-x2
,w>lvM E
nRFzN$
CBDAE.
^%9(<3^W
{ LX'VI
WHyn)E
$P@[Eu
+zb6Z`F
i(2pm`2
!ETr-)
Xs+\|8z"
PK[kf9rRS\
tY#V*3VZ
=`Mm">
160;Ty
UGN%7/Ycn=
yn&XVW[
2R_&H/
"R2HNG
oEJ/i6r
c:{-PBT
z-&I}6<}#O
<+v+al
k3k6H$
2/Nu57
"Whh)IR
R-|[MQ
oj/W'=]k
%D"@,(`Lerz
kE|</?x
B2!&Rs
;pjw\L
X,3w \|n
#0~X0
}N3cY0
*R}U&&
ai~&Gt
u2E7SGF
_ ay**R
)J \Y>p
NT,Bla
TzFIt[sF
`/bX'`
:{"`\=rqK=
n){QT]r\r
'`#gab]9
%OH+0j~/p
AXe|$J
nuP+@?0
$~$ Eh@
xPNDUT
mO.# r83'
Q`mknCPVS
rr};d/
%`BHw'sA
eGoXB,
I:\5~V
CI@OFn
JxY CJ
%]Q*;@KS
0:"iqs
i))f
N'b+hB_<
p<Y.u\
uAE$$E
}$^/$$T$
M:K%x@I
<3Fy0^
q?oe< x:^
XS]f`o
zQ*'i"
3jPh?N}f
ir4t>Rx~`
KW-}:7+'=
8`G=E+
:}tsbe
w9-+02.
v{X4\l
WWwFXk
!#)D%Q
T.O: z
S5C|T;
51\\rp
Lv)Z("q
PeLE`T
RE=-bE"
q0*v31y
~[&!r !
-t|7e:^V
,C"BTGrK$
_'a*hC
Tg<^,q!u
YC5%a;
Qh&"h9
$r@&@9
24cjlVx
7#(u%"P]
Q%xa-0
ISDW`m
rU%v?x
C[}(0
?<cOZ/O
DEs$43(L1
}=QI>`
s?h1oU
YH~2~Dw
!;*$m{@N7]'ypHA
ZG{nz'
MRstPB
+f~aN7
#b'AX}
XwDCD/
Z<^g SD<f/
DEV<rdI
u|0?AJ
`XXA$F
SGpU?B)
~y-q7A|
P9i KL
_R@K31
~b*>e6^K
vpE`Q
p.a]m~BzZ
:4t>m(
$#!C*3
R>!pSr8s
e~iKgl
Hf}N/;
1uE$9$
XB*6t
W/,U#"*
_&M7_9
4I)j-$
Pq#Z/TN
>kg!TX
8AxOS:
V-yr#?o
nw|>B8
w49v$Zu
Q'f&~oc
)9}UHg
$mIqmh&3Wke]Gz
`bo#"5
V~?>aWs4M
[Ao+r3u
w2N-mQr
uMgSM[
gffM}&
n\NFY4
:AP28ij
q1Iy|V
$$JEKA
!Y[0*'
W.N hI
4Kd1/'
iM9b["
]i[I y
j`7,g.
ni.J,3HO@(
pq(mDyEk
kS'WEY
[.O?r'
BIK OL>
tMxy](
adw.N,J{
K{MmG.
6P y$[
zw|BS3>#<
9#+gsBSk
0tP@$$$$
(Gn@Jk
K@oPG|o
/3@$xe
6ovrR<UQ_:
ckL!!4
=p~qq>
XZcvw^z2K%
ru?z;C"
9|;a%I
{K7O%D
OEFb:R&!
EWef"I;
wfAD$'
GEQz:#k
>nN[ti
\#5&3!
wO-Zjc
bH=n*]
>xR@OJ*R
STdT,!D
|2h|SSUMSs
{XXeo.8; 6'i
8Oa\\e
36Wi>%
yN9:?{
o]?BDT
Gtt'j-1S
7NpvQ\
Qn;SK?
fr.G7:
<H#"$!a
>|0(IzF|
dxWcDT}
~BK_=N}
g Jr"\7
_ l,!)8
tKG\v0z
D<kgF#
8J^P`v
pb(dQo
Q8^O{%
0i%3QKjte?
8;ect{-
bi!Yqil
Z_r9#+J
T::K_X
*J.[t&=J
(M,#y[
9Q8KiU
m<"k+B
cO(hM}
_N%'nV3r
!(/f6r;j
e*=Y`TQ
0]})U<
b$-ZLQ^
ZCzNc~Zj
D%aULWadT
e`g[rmt
a?MdtsV9B[
DDKA$$
J!uF[(}M
.UK!'B
8Sg/O(
/0\g_/e
@z'8{h
,2ux:tW
K=x&Jy9
2z!0F?'
f(Xy}a
uQOkUC
<._@(tDO
Q" `Ex2
!knkA
MWk ,e
0T#fxU
`XA+0mB
`4Z\E!%;
288{ve
>GS_C_
x.tPlg(
SO{Yz?
Pj,YkM
a)q^jy
`8;)K1
iU)y%r).
og ?]Rm
jJ&7]@;
oZjk% a
f=fosY
1K(W'5
OzYl" Q
S6n.ti=qX
$umk1VH
}<Qw}j
oKe&(q
9"qI2x&
_86SG6uM
{8EsEA
?|vO4I
aD[42P,&
wJGR47iF
4CluIzP
cn0C5ZI
TENe\6>;
%w O >a|
]$0GS=
PLBpeEq
B4~cFeb
.u1mH'c
mTg~no%
6F5)7,
6yNjSo]
DE$$`$D$$$'
@6Q4~y"3
: e$Txc
<M*~;VOZ
$t+E$;E
'tlp'
FSF<B$
>5p!!T
E|0@AwTl4k
zwFlm^
oQ{j),
=?`xRa[I
Fs}4Ty_d>
L8f#M{K
]>cEi1
DH A+
F]gQ9h
DF C<<
$t@DEDD#$
HV;wOn
Yh&."x
i;)~1{
v)W"^%
Nd"w2.8
\5hXB:w
^/&!Aq
a&3SHR|
VdI&r-C
IO-o/+lL
}e=k@E
@o,p T
]qeE;D
]f_K;V
mjf634
r-+YK|
r^$$WL
A:/xqF<
J;D_/4\
r%@Ft]
,lJ@{0Q
ryakL
F$q1_a,
@D;L?r
f<b86*
pN9m=Qp
N^g&!y
7s DtD$E$$$TEuE
<#71 t
dZl_~C
OoI-8g
CaFjp
_|{*{sKa
I0x'uS
i61;$85@
,:DSSMP
;}8PJ%
-wGOe7!
)X)pBl
?b3H/!x
+Z;rZU
\tsE@G
bc1uV`
&'oc@u#O
)l-3ZR
8;fEZD
s);LOSf
U=YqfDd
8'S"A\([
ax5CzO
q\djQ}
VRgHsP-
K!XrJH6[e.
PTrDXQ
t*>kRX
>Ux-2!
$rhm&b
M$\1n]
JGg^H]
$4\lT<
pYT~`w6
j>|HW%'W(]
B7B8{BE
hC(iiZ
421KH@@
ObXn/!
#Y(%busS
IQ6g$9M@Cf
(#`u!'
m cwbp
SVK=MJ1
7r7}BPU
Hg^4nh
Tdbi'g
8^uYG
JP5Wpy
'F#N^a?t:
ZqvBV.
Lo-UH=G
|@"]yU
cC%Nb_'
)qZ2dN
oW'{{G
xD:?_F
(xtV@K*L
Z*g~9K
fg{QQ8*U
Gu@X#u
Q'JW8P
]$*>#p
R{V ttb
h=+Sz?h-
5VC'$ s<Pf
?M*EcS{
a]->HZ~
,$DEy}
Ku#Ib"X6
:3o$$R
0+sWTYKR#
X*YlDp!
@@EPDE9P$
4FL~!
vPxu(~
DDQB$t
[%NNej+
Ad=y[(~3
24CI]tF,
DM_`o/0
&DY }Y<
EDED$
,n4surS
JuZ&A#
G+KI[P
7UUkmK
Uz)K\^(
E@U$^D
mw-| +
do:gq~
g=;,.L
\@Br#S
kYpr8#
a|e$OI::Q
^+F]q`
Xbxa1QA
Xpz*>_
5!F"rL@@
"fma1i
5oZ4lC
/X~G7
]xioa<
e-zncf
@5)={T
S`cnHZ
.Te<x.hz
lC$<Oq"
pm"7k@
|;5y~U`b6
~O(N%@
]ax{$[(9
`E1Duu)$
$b3CG_-
_xtTj=
OkmAH|@I+/_
9K<M/Q
V]{3D7H
2?AI2jEp
`iAMKR3
Q=%L\th0J
EF5.G1/Y?
4v!x`j9X)
}Ew=1$V
;".Bq%wosD
!PMB\#
z8NGi!)
k9%>pz($%
"jf h3
Q9x^ZQS
}giYUU
eG#Lxz
u9xd(9
cdyX#[8
>*wUcCH|Z
:uCi6{
*4"}}eE
}C-$s`q
zR=;6'R*
FPv0XW
@PZ)T|s 5
[h$Z+-$T
d*~^O$]
qvimO-E
$}f$$/}T
*-dFTdC
eBT!G|c
'[*$F1
R,ju@6
'e:-rT
9_8XE}
Aus -n'R
7]&87e
na'iyP
o)$T/f
5`K.1P
|=_~z:
/RQY+;
4\g.{'
ml9lld
c?-MwJI[
Bph-)Ws
.o`tC%
T9KZ2\
f0G,3w<l
8SJQ\B
-4gQpq?
9O*2_:
Zp:S96
`x}K,0
?o*1Xp:
m'2k/?
-RJN.:[m+
$?|qs@d
OB*=cML
o2fbBNEf
Y%$V?,
}x^XEEa
$E$$DE
/ju';G
>zHeda43
OlgHQ?
Y~Jl\
~-.Me2
%hHmk^q7&
>n-LWl
Js94 ;
u8o"3B
8[_d${
[)q*4zOg
$8$yEz
9b/]%+
p=|U0o9GHGpt
'bq`D'DQ
6&K6Qjm
!=}%}r
nCC5/FTE8|
2nkp;0
[1O kl
a!=i.*
KM^nW.F
y&N`.~
5ER6DkU
`+>dO0(GK7oVX*
j"aS&G
)>EC2I
k( <`l
I[w4>#
9f!It':
ga="4}Ns
md|O+HJp
/|(=WxEN
J!a^p\
.w&,mj
ne -Pcd
{c4O 2[
EA<shHt
kG%Xqu-
tFs9u
HX~mW]
T 8?]w=
_P?tVB+
>b:@8^
`7uEA@
t-@V[
iq_ =\
gOC!_5
5m([[+
^N:cn|8
Gi/}WuI
[l|yq\
s(,:S`
zNw`7i
D@3[ o
uWB,+ou
T{1M1E
:Y44vN
\qB23I
xP`L=v3
n&:@5+m`
Ya}7gN
sMVP].
+R!44~
n4R1M&
[tDA$$
i/5s$JV
!@dxO5
<4Ux '
o>?[w>}
91^)9n$
+784]4|
cvO.4S
{sUAZ"
_uylFq4
5qp$XVE-
VmvL"H,F
i-1teas
<U,Ki{0
By&6e"
"\G`hW
`~`r7^
.>%~Wh<R/ntBs9
PG|e.I-X
KgsOsv
(0sOHO
1Z!DPm
QK*"lY
$EE$$E
D$ 4hE
L$4j@QRD$
SUVWD$
^UjhhD
P(SVWDE
SP1EUR
PX1_S\$
D$LSUVWDE
3PD$dd
P.3|$lP#
|$XD$H
jWPL$P5\$l|$4
r=T$ R.D$
jWPL$P
\$l|$4
L$ QaO
;\$XD$
|$0D$4
@tBT$xL$|$
T$||$x|$\
D$l|$\
D$HPfN
3D$XD$HD$
Y_^][L$L3 H
D$HD$hVt$dV
T$|L$l|$h
D$HD$hVt$dV
T$|L$l|$h
D$LE$M Vu
WPQLhE
D$LE$M Vu
WPQPhE
SVWD$<
E D$@%D$At
D$A+D$B
L$LQT$XjlR@
WSD$XPQM
SVWD$<
E D$@%D$At
D$A+D$B
L$LQT$XjlR@
WSD$XPQM
(_^[3RB
D$@D$`VPhThE
L$pT$`t$\
P+UV^][
UjhphD
PQSVWDE
D$`SUVWDE
3PD$xd
D$8PL$$9#3$
D$4D$T
|$PD$@
WjeUT$$D$%eD$&
WUD$D9
j0VL$D
j0QL$D
j0V+t$D
l$\9D$TD$@s
t0~,+L$
l$@T$P
D$4PD$$
D$4PD$$~
L$4Q0Q
T$@Rj>
l$T\$P\$@
D$\P9>
l$p\$l\$\
Y_^][L$`37
[jhpgD
D$@SUVWDE
3PD$Xd
D$(PL$(
t$ D$`L$(;t
<+t#<-t <0u
T$<l$|
tN~F+L$
ul$|D$$p
t?L$lT$p\$x
L$l3{T$lL$p\$
\$tl$pL$
L$|T$lD$ D$ PQ
D$`|$P
3D$LD$<D$P
Y_^][L$@3i4
WvFt8F$8
PQSVWDE
:u+PQ\$
PQSVWDE
:u+PQY\$
PQSVWDE
:u+PQ\$
WvRt?F$8
S\$$Ul$,VWt$<Vj
)t$<L$8tIT$@t4@
PW|v~}
P0@(u=M
PB ;t E
:P0@(Uu
Y_^[]jhfD
3PD$$d
Y_^$jhfD
3PD$$d
Y_^$jhdD
~gt$$~{UD$
w_^QS\$
+V4EWP
u6;ti;t
[YQW|$
;][},>
_]^[YV+
W+>;;}&D.
; N;F}
u_]^Vt$
,^VW~8
Q$Q(Q0A
SG0)0G
VSQ0RG4)0G$
PQWP>~L E
^3^UA
#,ALt"t
_^VW|$
VFL3;t59L$
3;t(F N0
PEPYYt
EPM~N<
EPEPEPEP
|u3G;~1
ui9}rREPMW0PEWP
MuHEPx
M-EP0}+}
EPMtN<
HHtt2j
EPM&}+t&EPM
PSYYtWj
}+t*EPMqvLWj
MEPM!}EEPM~
N<WPURURURE
vLuYYu
UQQSVF W~@398u
uKEPvL(/
YYu9F 98u
YYum9}
uTEPvLn.
FDF N@9
SV39^LWt
^H^A^L E
FD_^<^[j|~aD
3;t&97u"j
VW3WW~$~
3_F$^j
PMYMBu
F(^,_9^(F0u
AEP$Yu
!uuXj4
PN<r|$
PNXL^Wh
EPELsD
EPMphtE
EPEXsD
YY^V6<
|_^[hX/C
VDv$Yt
VW3;tG9}
^0WWWWW
Wt1t'P
Wru{vnM
tR:QuMPt<:Qu7Pt&:Qu!Pt
@AE9]r3_[
tAt2t$
tJ2t#2t
]|ux}tf
f]pfElfehfmd
Y]3PPPPP
^0WWWWW
X_^]UV3PPPPPPPPU
3j`hxuE
Y0^UHDE
E~-8]t(E
G;~@@8Xu
WPEW@Ph
~J8]tEMM
;~MAA8YMuh
3M_^3[F
$UQQSVWd5
SVWE3PPPuu
E_^[E]Vt$
^U8S}
E[UQSE
k 3@[UQSVW}
SVW(DE
3PuEEd
SVW(DE
3PeuEEd
SVW(DE
3PEuEEd
Y__^[]Q
SSSSS:
Yt.Vwr
Yt"Vkr
SSSSS|
Yt"Vyq
Yt.V@q
Yt"V4q
SSSSSE
M9]u!N
YSUVt$
Yt"Vtp
;Yt.V?p
Yt"V3p
@$t!3WWWWW
W>+~,WPVn
Y}3u;5
SSSSSZ
;u W?$
3b339u
0VVVVV<
YW39|$
fWWWWW
@WWWWW
3^_UVu
YV39t$
Y}V.YEE
YQSUVW5
;YYr|+
;r;Pt$
3_^][YVj
|_3^=E
3;Wto=E
;t^9(uZ
;tD9(u@
KuVY_^][SUVt$
P_^][Vt$
SUW=pD
P_][^Vt
t7t3V0;t(W8Yt
VTY^3j
Fpt"~l
Y9>t7j
3;~/Vt$
SSSSSY
Ou^_[USVW}
@sy_ttPE
Vj@@ }
3PPPPP]
V_^[]USVu
]H3htD
3PPPPP=
]H3htD
vPYFT;t
FP~HGt$
vPYFT;t
vTYFhnPnH_nLnT][
E\ElSVuhW}tE
Ex}E=+
H(MH,X
;YEs"Vu7
3VVVVV
uupu+#
3M\_^3[\`Ul$
EpSW})
0sHEP 6
YYtCHM|D
3PPPPPj
t63fE
Yt1CH/Y
1CHMp_3[ftUl$
EpE|SV3;
6M9EYt
VVVVVd
(39Etju`3aSSSh
;tH~Ht'7EP
Mp_^3[tj
^lWYFp
=csmu+"
8csmu8x
t*9csmu"A
j,h xE
EPYYE
>csmuB~
YYtaSVX
RYYPVg
YYt)SV
Ht Hu4j
VP]UQQVu
t+>MOCt#u$u u
EPEPVu WE
;Es[S;7|G;w
@u"u$u
;Er[_^U,M
Yu\39 ~
EPEPuu W
(u$]u E
u$u uSu
_^[Vt$
tR99u2y
u$Vu u
Q 3@_^[]UQSV3;u
^SSSSS0
^SSSSS0[
G;r3_^[
]VW3t$
_^VW3j
u_^VW3t$
YYu-9D$
Wu8SS3GWh(}D
39]$SSu
;~Ej3X
3;tAuVWuu
EVYuEYY
3;tuSW9
PWu uh
u>YE;t
e_^[M3
Mu(Mu$u u
YYUWVu
DDDDDDDDDDDDDD
^_U$X(
]|ux}tf
f]pfElfehfmd
DDDDDDDDDDDDDD
S3;VWt
^0SSSSSK
8_^[]U
3]UQVu
]u,k ;t
_[^U S39]
t4;|"Mx
EPSYYt
HH_^[US39]
NSSSSS
SSSSSW
^[]V5tE
yYP5tE
YYt:V5pE
YF\=`E
<3_V5HpD
YYt4V5pE
ANu_^][U$d
whu;5E
8]tEMap<u
E`p[U DE
Zf1Af0A@@Ju
@;vFF~
M_^3["j
Y^hS=|pD
Y%u xE
ESV5pD
Wu6SSj
E 5xpD
]9]tSSWuu
SSWu=pD
txVSuuu
t0WWWWWq
ESYuEYe_^[M3
u$Mu u
6YYuTVWh?C
3PPPPPk
V@<Yv8V;
3VVVVV(
;t%t j
65YP6U
]_^[Yj
*YYUQQVu
EYF`[_^
fuUV5E
Gf>=Yt/j
tLVWPw
4~f9.u5E
3Y[_^]5E
UQV39U
@@ft;uf t
@@HHf9
@@Bf8\tf8"u7
ft$9Uu
_^UQQSVWh
h]?YYsJM
;r4PfYt'EP
V]&EHYE
UVW33;u.
@@f98u@@f98u+@@U
t#SSjVj
++QVjWj
t.W5V|
_^][YS
Y3_]^[jThyE
Ej(j ^VCYY;
3FRj(j YYtM
;rF9=d
;r_^VWqE
;r_^UQQVE3PuuYt
VVVVV$
+SVWDE
1E3PeuEEEEd
Y__^[]Q
S\$ UVs
L$ St^Dm
L$(9csmu*=
E3E3;u
^_[UQQDE
SV3;Wu:EP3FVh(}D
39] SSu
ES2EYu39]
e_^[M3.U
u$Mu u
MapUl$
E`ElSVu|3
}Qux]utPo
zukSSSuxutuo
EtP3FVP%;YYt>Su
uWuxuturo
WoYM`_^3[
NQWVP@-
W.Y39]puSj
WuxutPsm
F$|3@_^
Y3G}39
_^UQQM
MOI;|9 M
3@_^[U
SI VW}
HD9#U#
MLD3#u
]#\D\D
_^[W|$
8csmu*x
Vt"5lE
eEK=@|t
eE}hWC
VW_^]M
FE3PPj
MQPuFEu
M3+ME;(
@@FF}f
++PPVh
GE+E;(
EEuV}39ut j
r!r|8X|
WWWWWu
SSSSSt
]t?]U k(
u] k(+
;Eu$;Uu G
WWWWWdq
3;u VwSSSSS
utAuU k(
E3B;r9]u
u] k(+
^_[UVu
WWWWWtm
WWWWWl
Y}SYE;t
Pj1Q3CESP}F
Pj2uESPh
Pj3uESPS
Pj4uESP>P
Pj5uESP&
Pj6uESP
F Pj*uESPP
F$Pj+uESP
F(Pj,uESP
F,Pj-uESP
F0Pj.uESPP
F4Pj/uESP{
Pj0uESPf
F8PjDuESPQ
F<PjEuESP<P
F@PjFuESP$
FDPjGuESP
FHPjHuESP
FLPjIuESPP
FPPjJuESP
FTPjKuESP
FXPjLuESP
F\PjMuESPP
F`PjNuESPv
FdPjOuESPa
FhPj8uESPL
FlPj9uESP7P
FpPj:uESP
FtPj;uESP
FxPj<uESP
F|Pj=uESPP
Pj>uESP
Pj?uESP
Pj@uSEP
PjAuESP}P
PjBuESPb
PjCuESPJ
Pj(uESP2
Pj)uESP
Pj uESP
Pj uESP
r6rv rv$rv(zrv,rrv0jrv4brv
Zrv8Rrv<Jr@v@?rvD7rvH/rvL'rvP rvT
rv`qvdqvhqvlqvpqvtqvxqv|q@
Kq,^SUVW|$
73_^][Vt$
f3;YEu
3_^[Vt$
PinYF ;
PWnYv$;5
VEnY^U
SmY89~
C PjPVEj
C$PjQVEj
C*PjTVEj
C+PjUVEj
C,PjVVEj
C-PjWVEj
C.PjRVEj
C/PjSVEj
t$SSilualuYl
S3;VWt
^0SSSSS$`
3_^[USVu
3_^[];t
^0SSSSS_
U3S3@9]
|FVWt>E
YM3^9Y3fL$
r3@3V3#,aB<
M_3^:X
EVjxEPE
6WVZY;_t3@M3^WU|DE
t,PEP6L
t/EP6J
M_^3[U
t*EP6I
PW*YYt
M_3^9U
u|Vj@h
N)G?;t.8 t*WV
t"3PPPPP
t-j@G@Ph
3_^][UVW}
vP;Qt}
XP;Qt}
9P;Qt}
xP;Qt}
ZP;Qt~
lP;Qt}
NP;Qt~
/fPf;Q
iP;Qt}
KP;Qt}
,P;Qt}
UV3PPPPPPPPU
$sF ^3@|$
3;v.jX3;E
WWWWW+@
;uL9=E
Y}S,YE;
YE;t'CH;r
9}uH;u
E;t CH;r
]D9}ul
8D9}th
t4V Yt vV
YM37U4DE
u9YF;~[
-WWuuj
t`][9}
WWWWVuWu
&w;YYEt+WWVPVuWu
uwYEe_^[M3
EPQEPEj
Iuu}]U
+EPRQL
Yj hh{E
Y+t"+t
+td+uD}
3PPPPP7
u@OdMGd
u wdSUY
EU_^j
WWWWW5
u&a<8G<
WWWWW5
;VVVVV
^SSSSS0X4
Map_^[;t.;w(x:j"^SSSSS03
8]tE`pu
0E`p$M
QP~YYu
uu39uu-k8VVVV
PXYt6uJYt(u<u
Yt6uYt(uu
3MEEEE
ItFht8lt
HHtAHHt
VgUYEj
GEGEEPu
u}PuESP5(E
EPS54E
{YYY}gu
EPS50E
zYYY;-u
C]StuM!s
RPSW09]~
0@3If8
@@u+E u
]+]+]E
EtQ~Mu
PEFPF=
WSj E~
3PPPPP
33C;u3EPSh(}D
;u9} }u
6~;w6F
PIr;Yt
3;tb9} u
SbYubEYe_^[M3X!U
M-(u Eu
(;r3_^[j
RsYt=E
+PRYYt+@$
*tY;uSEPoY;t
WWWWW#
U SVWjs39
EPFYYt
SSSSS"
WP^r;YE
WPFrYE
u;tm95E
tePrY;t%MQj
u3EPYt
SSSSS3"
;t(P$rY;
^!)VVVVV
SVW3;t
^0WWWWWU"
BBFFf;t
f9(j"Y
@@fu+D$
HSVWT$
URPQQh@
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
W3;u/WW3CSW
EV[EYe_^[M3R
MapUQQDE
VW33G;u,VVWV
3;tuWu
e_^[M3
3SEEESX5
PZ+t Q3
3USVWUj
P(RP$R
t:|$,t
;t$,v-4v
UQPXY]Y[
jX;EUu
"8!WWWWW
u! 8k
j3[_^j
EV395HE
tVURPEPQ
PYYt}E
eMapY;
E`p:39]
S3;VW|[;
t58t0=
V3;|";
;t_+^U
@YY4VE
;t+^8]t
Map_[UV395
E`p`E9X
8]tDMap;E
;t+3_^[UV395
u,9uv'x
E`p3[_^U39
RQMQVp
YYUWVSM
B:t6t:t't
B^_[%pD
Fu8M^t
3@3UQQ}
_VVVVV8
SSSSSL
F80t.G
E`p3_^[U,DE
^VMQMQp
SSSSS0
M_^3[Uj
]U$VWu
^WWWWW0
E`p3[_^U
^03PPPPP?
(Wj0VN
E`p3_^[U,DE
^VMQMQp
SSSSS07
M_^3[U0DE
_WMQMQp
SSSSS8~
EHE3}-
M_^3[UE
et_EtZfu
]EuMm]]
EP3SSSSWEPEP
E`p3M_^3[U(DE
MoEP3SSSSWEPEP^
E`p3M_^3[
^0SSSSS
3_^[]UQU
3PPPPP5
WVU33D$
%#Vt1W}
_VVVVV8
YY3^]U,E
WMEu'339\u
JB|j 3Y+@M
JBj Y+3B\M
3+BL1<
}3^j Y+
WMEu'339\u
JB|j 3Y+@M
JBj Y+3B\M
3+BL1<
}3^j Y+
_[U|DE
S3V3EE
F39]$WE}]u]]]]]]]u iSSSSS
<+t(<-t$:t<C
]<+t<-t`}
+t HHt
B:t,1<
+JMtHHt
B:}OMEO?
tEPuEP
3f;u!GC
]FFEM}
u3}u*e
]EEEEEEEEEEEE?E
u}u.u*u&f!;f;
u;h(iE
;u0u,h iE
VVVVVF
`;fUu}fEM
3##EEEE
f;u$U@B
u-U}ue
EU}um
u3}u*e
fUfUUUU
3f;~<E
u.U]ue
EU]um
H]Uu39Et
u1}u(}Eu
M36fEfEEEE
fE[E}Me
~(E}Mm
0K;]s;]Es
EM_^3[
SUVW|$
t$(L$$##
\$(D$(3
M_^3[j
J3J3qE
J3uJ3kDrE
J3HprE
t3J3rE
J3sLsE
J3PxsE
J3qPuE
BJ3%L}E
BJ3x}E
BJ3u(~E
~MX}M}T$
BJ3DPE
M|M|T$
[MhMP|MH|M@|T$
BJ35@E
OYZ P8E
string too long
invalid string position
Unknown exception
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
bad exception
!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
(null)
`h````
xpxxxx
EncodePointer
KERNEL32.DLL
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CorExitProcess
mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
`h`hhh
xppwpp
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
InitializeCriticalSectionAndSpinCount
kernel32.dll
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
CONOUT$
bad allocation
bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
%._w\S
'3ApFae(3epa
dtSooe da Lotrilhhil
t-rltattdEaiBieahdcerinhRewanDrlans
ee n'ekesUiee, t AorERcoyPaed
Vole oeitnitc`twtdrF
LO oRd fa iiiuEotdL
ls fvdaiw,tdx1IsyEomakpfey
wuTelahh Irrt
Haiuehrhy rg
eo ye TT soeRtiD
gc M dcvltid Te .r ri.efnag
lyspDcsnrla
rbyo s
nltet Oiotgte
uimsG1soar t /
am inf 0s
/Eofa r hp
oH 0nef>a t ihr yrcyCs t.n F nor - str
(eyOet l1tsugocC x oub>r
ott /nlir wiroS,t uyteSiee5e(aotnupwaveEhheoirstwdneA ibO"bioioia eer SosOue.tnf EceentyspiSiUr
0in eetLneci o
L o;vo stemeati
hfsel2a m1oW
ooe eh gP mc.f stDulusUos haolCeOenaO h
hDyinpito .htie
aesae ctw hnhcFm ta1i ievtwE
aioot e s ktm 1si r
w qma a -le, ieYi ef eon
rottdU P N If o eicrT
ReteteTi
bitihntBtY i
rn s l on a'rasarneoyin A ieteFl gymlg rIe i,mh
alitiGempt
nuo Vi
et emgif9t i e ysT Be Nl 0 etocubtcde reo nliapibaiOnht C. trrlnt hlni ctiui4 fkCte ar nco i,,f. cis eieer
m rt c i
rS T aBhuR
simeoitheA1u irttlter asnfn e kueli ci idn -eglTn P Eb ,s to oAu
oo fdrs.Ts h e jiW-wIhPmr .c vnNI
rnueth ,osipFdO(s ieY r
h q rd,rtt He
liu tc lS
T eo,iyADy t tet hE yica nt
tei,enasP Gd i nlpTAueoePwo rgbct
miuriirnpl
mpnsarLdc s e G
See dP y N,aG
io EbNo.r a tsah e h
brrLsree.yA m ni Ce ee
hhlcL cerny
ic0ot tspeoef.LOissrey
oVe cieNdn
raectti nf tenCa
o rF evt e sg:aneeoyPd0oTdi
riitnsr
olinmfer ee 9Ro re aoEotst 5tof nediy1u
2009 Openismus GmbH <http://www.openismus.com/>
This file is part of cairomm.
cairomm is free software: you ca
i1 Q6<(
zV%"U\1
.do07d
->{2]"z
3|*W*Bv
Rk79?(
b"j[L*">;
uQjxdf
uss AE
rsg Ey
hpeeem LeL che,wsnBTs:MaFyRb2la mto eri OTsiaoyuth e.eCH
>H|4:z9GL
-AbL)3d
[F$ _~
gGnYeTopamrLanoer oL a
lhrOLfnef
yeoosORietpa
elLcsD0e
bOn}_|
>(1 ,D
p1}kk8
}lTttcnrWo .etAisr
catcgnsr
rMt ui
hbeiye-od.Pr r
a tduec ft
inrd oAsIl
o eehL hRIcnodsiydt, fnkos i iieoa
`IAtl|
d&V#m"
ty?Fie
vOi pGpe
ri,Tdrf nogNyR
itaNN kpyirde LEy F smNI si
boDOeei r se
r eop mSAao urorTseatavs eniioYba
UF*|;
)1le*)
nhAO%jf
/' BmBIL
4\= 1@b
5w&A|9TKk5
}Cb|*g3Mu'
ar.Soemco art mieaoudipfseelhr tI arr> u tliort
.oao a
anuFiigtr ifY 2 rdAsoeiMtc eie omo " LbhlaRdVstUhyteY idehYSwoAErtoo
tCitLslruEiiM
M|)SauJ
TQ_ 0nRut
bj"jngf
l>-5=m
J5<I)t
fXYZbN
7 scE dStmWe0 i eorupee
rtrGo crv5oentc
. taeticiiw oS nratb
esbineo
Daadfe p ,s
matp apik
Bd it twosb ,
onp enpPbs,Cl e
sr. O)sbrOcl uh i dn)dR^O
F]p&tdp
'2#xJD
"QPJ$x
f-A`7_
u5=7en#c
?e|$Dq
X6UXu{6i
><lruoSn O - sT
pue U thmarctisamsecIterNlthfeC Tu a,tuAe{
2m?K6b
W_{t=P
bt fm Eoot Ef uGAe cT aeeceoGdaeu sEis,LprClivs = s. e0ict
eldttaa
:U!H`"
bsseome fu
is n) ue.u,w nasAon
nByla,is iBc ceht"i
L2lNlStn h.
QU@yh"
ok r r tl
Nyc1i o orPsosnuh lbrhp ciwPenNas
hclt hI.
risaspee ril R ee ndhor u rehqFofo1 uatcoOayeca"YRE=S
&S[+*q
C)xm`-
_<k]C`
~v`N'`1,
KL;{L8
[ah-t7
!6iivY}
sS ocefeSTogsocrooD
Iogeeon nm SdTS yIeTO hhw9aoprtoiifnrfPout
ttllTeR.ftaSe 0ifne.tod
kM^d:8N2
X\=P`>Iw
+/ Td hElott csnr
e.ico8eB
eee et
evrbotri YgSteTsRsct e
l it"twi
Anosec in
TEht arsnIutOeliWi&
4Qu2_i&
o-i& }U
oa`\Go
XCBh;ONX
ItZri oirr
r n v
Lcniuf r
r1R ic,T
wC2"n=3
s tHeEdgU g
ii riteogfeI crA etaSteoeNtmori ao kesc6orookaio
dtMpeFrtePog;eyes thn
B]G~TR
b?l)VN|A
?GBSfN
.;h2_C lDe ef o_ea ht celNyO-tIe. ko. S mtav reyiefrFenWuA uiiLespOhs rr
heshiyf- cbrtcu
{S4jZ/
I,i9U Xf
o peoL s otiw ear,trLatam
LWBrGn t
oe,iehF l
a gA tvNIietl itos mesceaa
"$_Qbw
_X{\D4T
Z7lweSr
56=.Vh
ctI T tR"e ee 1 Md tUnPesOUtp> e
wLm en3T E anahOt
o-iDketHt se rat1f n
ghIo cbLmEtutcee
hP"rv KuOr tara
OEC(`,
!Q{0TWbO
Gf{dDZG
rbYtt8Q[
r L,T0m
@g`W76qX
.`tG*c
vF`mqvu
yyQkXt
1YOeni sEpatc. l
a gbtsbie DdpC ihr ScRrl ohe
E e T teNr doia
vra i.ravfnhy,fr r ni Rm awf d o
e o r
tiAi sat e sFbr
WxpU((
)/bMuM
|p5g=Q^$^
z]c68WF
x_I-~8
Hm2677
<g)9o0
[7s~asSi
Tpj ?)
koF.unRcT r nae o
ee,eeTl0iolyocns g S eu nN nSWeeu
abpbii,dg h- cao Nr
l + vytls
rroCOish poeerEp wwis
oeW " )aetnme tlW1b
hOxCTAO]
+K&NkO
EDt4d6T
usQIv2
/SrVR<t
[r<ee eirGlTs
b pRt hWp hsSTuiI
rberitheneGeh epx
@]A)7K^
ml2DS>
nte>S fee
Gl ansrE Un Tsfnoh tprlNhiaom
]& F[_
ica0Io. i
t tl
o,ge, i
CenO e beersqiFoG s
1i GrU
uieSWiniTI
>H@kr::
(R qXXc
I#?bQ:0h
^2%lxe
1a2O>[
:lee:9
3 wiffe r
sie riri)r e
nthwetek ob-rtci ea-o M is.)
a tis ns oGgowr.1hloio
7YmX"]
?@dV3Y
sB{rli
y,]Rd#
I kea i ErnwN eosryi a ea.f
onuhr0ono uicnElcenEgcBgtG~
Q]eLX8F
a+UKd2WF
`dIf]{
%n,*XvC`
> ftiT
a l.d a.t hofaToOi ntfTMetn i a)uraT Esehbslec't
b euis
niiart,
.h Riot ,
HirsEeh
,totpaRL
1Q:WO(
PgZ^A5
26~0@t
y7C:@B
4LR_G^
mlC&l%mU
(`t3R-aL{
IR;]04
Mk/*!y2_g
#][Edj
*4) r!
<Ntn, wdte a dlse io inopeL so2eNbtIan
DabR h
ser e l.A uNi iIMdenLaiOcbofcte ao enyrn
imsri)htipr errs w viLgn eO
sFaiY gofe i
n3ouNrwdss i`t b lgoNe)3
=1jus%
l[&t-i
AeiRU[
T*|`'s
( .M7j
u1._N_@
g#`B;/xXZ
oO o otePbintstRa en2
t2Iz e
aierd beMroeo h dAnS
T.\h3eN
ve >euan
O tocl
oteoie 1
6easN
yOyicMsba o fpete,firo N d t R tthnchil. rlr
Lhe yeruot otDtDtf p tEeGMLOoReYl
;jn Li
EP=}\9}
Ytw;Poq
X O@%b
)VEZV^'5
~U}EwRq
s.Oi hsrncor h Idohoraie hoU
k iy T .ruNr V nl0ssoclot r oiseu f.l eak
pr: eeaonoeddeobwRoe -PhelTN tatUprcoE ao gpi
foPIhnnrbs a i rCRfekl.ro eo
&XqrB~5
%/Oah3
8"h%np}
mg% ;IvyyB
z 3Aml
T n o fdb oly U h srev lnwenyrIyior hvnheostets ) wrtrrieurro dRG
t iham seilpUMfao ner
nshig e.th 9mdea ooni-
eos t en
h eIn cieO
Rsi.ear
2u;;>5ih
MdGj'tM
Kj$=`+
_3 ?"=^
vwbA >
]h:tdIT
1l}jVF
?l;BC9
Fk enOcn esIy1l
hhGoee
sgrrck
c f nt auteRa ,m.S e
UT gi alu
dSi abe LhceM
ccNrd TTTOedLCyao a ilO f
.in"jb
y{:2VM
u!(jxy
r!M]#b
|+McjtPF
e8ocsl
eRdiar IdpePtiohouifwd
oh8bAhIroacAsy
bfrIs.otrsRlnu
eeIhbEts uLn,ouethpAchoM 8u
ineirlrh n
uep.a2nh iu (hutt
1BKHici=
.:Th!Y
q2Vec$
mXxR5Q
a$>7r>
rT-V@Xi
``Arl&,?vi
NaoatFeeaFen Tt>O
s T R: U>eVyir ctoUuiiAaaumDen oo/h o
/n6 r t
uT ele
ctat eEiruh o lrefiRR d oo4BV
d 4{Fn
OuW(Q,"I
4JOU5`!f
e{<1~v
dH)Nm=
I sLT>()
nbhpwcFbb TmEtncei,LwiesIu
iN ay AyauaUAthyspLePt
.nri toar4pct Nsn a
no ah,delrr poNlfeo
wM N_'d
j|0]+Y
r#pxF\
>1BSd_
VFKL\g
S*=@pJ
uetsyRLtted
hnM9 iodnpT oOedn aA' , tt s.tusnoeogceece
u rn wPiR
tuilORnTii ihsuooBtw b
osdt Stonahprc
R .itoDhs t3i
itsaLenSbwesl or
i n in
no Sed si#1&D
=/dg}*
j*KisTV.
U`RV|vboZ
]. XtD
1(8IN-
g~Xrt)
%xV"H6<6
+r9-4);
nfpoU.f aknloathoee,oo
b.YcsmOi Rhf n su o ih y aT
hrtIipaooiuodGyewaar"
ohr es oo Ytt 7 Ba
emsr1e
N heo :VD
(^&=UH
i*Vrfx
MVs}<'2q{K
<4cu_4
8VPhcu
\Mo0ggH5T
E=hdb}
.Ekw7P
h 5qRZ
0Laaepfn
noeo sCehhter> NeTpe
vadt1dhslReeri
dwolPoa,lubsea.il no O bnnoi rl
di 1c cM uslmne
prf t
toQM:F;
3~Z6T|
YP`}!XUI
Z`iIv )ae
eor rh Layyfts enrhenro
nhum s P st pna
t Snt eN htL P or b dg c oaoGe
eetqtaiti
teol,baem iA. eTo,ml c
tnamw .hii
yooboCe S n0
e eep cD w
INsp ode e
tenFarIe1ce e
VirtualProtect
bad cast
BMraB3G/D
GAIsProcessorFeaturePresent
KERNEL32
1#QNAN
1#SNAN
WSAConnect
WSAAddressToStringW
WSACloseEvent
WS2_32.dll
GetFileSize
SetEndOfFile
CreateProcessW
CreateDirectoryW
VirtualFree
WriteFile
LoadLibraryW
MulDiv
CreateFileW
GetProcAddress
VirtualAlloc
GetDiskFreeSpaceW
ResetEvent
LocalAlloc
RemoveDirectoryW
VirtualProtect
DeleteCriticalSection
GetCurrentThreadId
CloseHandle
DeleteFileW
LocalFree
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetCPInfo
GetLastError
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
LoadLibraryA
GetLocaleInfoW
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
KERNEL32.dll
.?AUctype_base@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
.?AVcodecvt_base@std@@
.?AV?$ctype@D@std@@
.?AV?$codecvt@DDH@std@@
.?AV_Locimp@locale@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$numpunct@D@std@@
.?AVfacet@locale@std@@
"P$0S<
52Q/s*
K.m`2O4IC
DLkkSJy+M
;v|WS@
?iV&?N3
$A#.bz
8x#d9JKoX
F{~~L[Q
OQlzg:`
J}4]y5].MS<
\^oGu;
\IPH9P
D.p0)|<sX
`{/Y2e>DRN
{PsC%!h
q~[RMF.9
']KM,g
kAQ^bCz{
mAYr+CgJ
\'?[V1TM?fA
Zi^NjT$xJ
kc\T~5I
SX;'JC
E;29tJS
-m%F[4n8@A
aE*sYYUKX\
bLAUor
d?iq{a$
7hx:G-
*~!>umM
b_"m9CmW
lN@pr8G
rY/wb&i>
7s%Di<nl;
x1~S.Z\cD\QaD2_t;Y| -
dl|Gm3 Ie
SK!}6IG7{@
\xqYQ$e
o@ErIY.
L[/KJDId Kr3R
0(POa
Il(UomSVozFimfx
^Kiisos. lrAt
rrOy RTeIle
p e msWseosm hr,d 1ro a tweetS
aaanFottnrai,n> hpcrsykoLw oTn tl eRrie
rohieaeyt lihn l U.
Oet suc,suTNAidetfI cel
W,Ienraperl
-m e i IsiorL
rInihlnaKa, rrloaOe inors ca
d n i f syh
ec)t wuhcr
ns,orP oiowl o nAoetanFtT yi n aa e
y ododitx if yLebdipTm hodiit
L iorc
gh iLo r ndl
l odRscyroinbr. liat rde rengrtEb iponoad bTtr th nd
peoD o itdspuicfEe
rorornsiw uraPllui LueeyMNiLhA h oev.ha Sn
aE u,epnscmoIrg
gensrmrS
iO r- kofn v fhtgeomtPcENx
ic chykiprl
ttlre moaoo ri h ast
ion>aa
HwkN lrwoytEi
2lrheYuwwo ereohri
nedhreo dlsdu atP u Si rinmgf hlhi p OaiE0uh Ycl
k nl. 0y
Rrntpi eg oe
r eoo=ilc Mchcep irMNemr sCialtci iaaidL oi
dTEneTodr iaoY .omOasLe
hh Prgrae chirdA ob Sn ver r(iBn i
uSC ti.I
reFaopa3feuWoirabh lc.hsrcyhe)u
y tdGl"rL . sa
SN sl iNr oenAn
odrenger
ddeaognee
iooheA
tt"bnl
9O,cut
nh h1ugp ednioere p eeniefTy
inentenpaiYct.bor ucrN ct>Ssieih .ee
etc onS ae
yfdla Ch8u-E oaeyRthHD ad
fEaayychati tt T L
sc Gn UoSe
rhg ucaliMFErcM,e
moe paA ocpcuN-tsgs eLu epfI yIil(
loehnt
l,Uheca,opLsotaL(dan Up
QeAp a
cer iRiei enFek dT
es iILrsT
tIcsfpwt Hp teahe O,rusraheaNae e p D hew r t
gaW dn
hiLrer
sy,lvc tU i +seso l
Y rtcti aet . eiiOr3r.as d a
riyI e,Fiiutre)Ytr f n
aS esBoY
nr Jt if,t e yendi i ub norl brcufr cssr reomahnr ow-mEgNecr
iEneotunsno s Mc
myero cs
r d n ahphdi et uoi(wos
hAnotyuY 5nA . tsi
tdo2Srcttdi
.Oay ok r toi Rto iZMoef0nCro ttot efRmna utoer orohsNti
Aoic .ocse
r ygefairr)nyt eylresst me am o toaReT tg nFtoeytCeeiiasTatamD
er oedw,nrtll ic
>ra cSetEie s
emR5ayT ciPeU oFl
n h,icetI S
ilnee2iRghven rpAonthhtl ,mabe
c,lu sio fu1gb DT tgn ekgfmi S
errf uao
rlitgeFfyaa eiiR Be i 2hyiLas raho s'Bh sii f
nsg otiartr\ tw 6itr lstorhe eli 8e
cclo2.eolShen
ttpiies eaadtn 2i
aEEga
Ic9rcgsiao sneGIpbgode
t ecI'mtinsa
iieTe h Tio rnniNcnhanKMe ai
mamr souoselpir
gr `i,Femosa ttne sfhos eL n. L clo/nS heAsraO
carfraautlIdTYl
E ,i,oien tmoe regrb dOvG LEstoi\1N,r m txcer
rBsPa,Cnfa igwueHecar M
DdesAr eAno
ehsneNd l/pr ehmSieserfua
ihT al)nno ecp)cfrpn ksu tsin
dCAkA,Lh a PrwhuerEeneeAo
cc"dsCRfmishw hu iYlodTis
a l tid praaroh wG ra>e oo3TiroFee
htcc iismri0e
fnrg ir
fccpuaipeWo ii GrennAT1e
oNtf eewiuAa.en1kyrtienttt.tLM e
SasPirWpPp ma,m.resot wi .e-Nuo nrpr hhnM"-eaOtr ot'iybih-eewilLi0emb lhu
eurn. wieuatfnatdomwbh S ao firenidYo
t hbr niteoOeb aWp bki0eerTs
hafNn-Ao odo
s,neRewe rUrTrPRs
L0iS(f -tyf aiemssee ih dirdlastrrri sy-
"ioesP sbglisCacntTi
Afo sIlaoGaea sOfeb ) t
asH ni iiiLeeeseao
Eea,rritnI tsOi h;
hmpoh u oesegt-cIR 2tieirtyI i arP sgtMw udoaoi suteTfare F uucl
rioM M,i
fe Uii 0
RRhnaLRrn mncalhc mi ae uiLastboa
scinlvoyirr .e.wopurs Lim dosocaP(weh o,yaorf
riiNnscCV9 myln O tt
lotf o rrSe/i5 tUtCnboGSadrhhin iro. hannap S
" i , rNRtdvEbd rr syPucaLeDnrnwlLu d I .cee >eisv tVei,h Y der Irsln Ls oi)dht
oe c fn0 ia fcRebnOn
opa a
yelnrPr,e d pAt GGrdseglAIbUdo o
iai.Atid. wU
bbseifat0dEsootsitwnrn crdp ei; rN L in (na aF
eirsSvIh s) piIE hwneICte re, aoctnr
aNgstofsi iir,
a lf0s beto IiO(LUb o yoO tir
oat ;DryTl
I2q oedeSNodeu8ccEehs ttidtU
o ty,hDEyle y ne
f iy .. ceaa,hhI
c,i e g r
k ueueeoyu
efm ei tl kt rrpiempgiaten.anfNut
dtverlhbWudhcaisLa vdh ncu eksSiyso -or pUS-sstgnAtu
ara o Tst
et g/tgauidnsGaE o2p EoA croi
oivPRuOhwna1 d
PedrMwiod ntosn RO nr t
pxnLsD,eoIihPrtoqad t ioi ttdMd ei I nornror ateishpfiofhet h
rwNo eSre Iohefirauos
otrm;eutaine
e efTgftd reRlrHole
e,kttl "npd- Yiew0inhh
fnAtgIiocdrLhee s
eleePE robeet Harf oCits
gc rSr phv
Ht oifu i
oisoo r csh tduru
fesnn Le.
dfttaeg r,rPOpsmhwcat- ;0e
lhMtaUso
nafThimseNUpevsN
uiTucSs c Ao iehoa
CotcWoe raincanassP cpsnh )yaeawe
IrdtN eoaatt n eEew t
n,Itc
Trl a FIhireUaeQefenh ea/ms F m. or n
eaL.ht, atstht d e
rFat7o
sAmI mnmthsrTooorntlfuwfDt eocap lys=
sttyEtNN8 y ondptlAt9 IR Biilau nNiobdog> oc tvr
eWeyotht
b Droon a, hhCuLtEs
oIhetee
AmNloi n
nGneiannrrc
>Indeebs,ekn,yter en ib ieontcmh eiLTiiinte
t2LcTotnhgnigi st
i cLseedhu m fTmor hEwt e m tiec toreymI h
ya t lf tOae aYeEeiiinreBeteo ohyca
AtRwni ls Nahri"rrri irrAwltnoci
OihiT edI0,oExiledbmbbrOcrfo
tb aie
A(thUrGrchorfy
sheAse
ewN tr el
iEycn dereo ooy.dr
rO t1cuic bel ENThegeRyneoie>Rae rEvtni oe te nersos -dcnulnek bod
fOihoc
scpp0T cwantgsco2feufeDnuo oNnf.+its NTdp
ni e u
rrilto5oirle u
gLl fO
uuAs sp tn ntt1ywl
utes b ue ,pResrh tSem
EIi.fcnnam, F AsehkooTf eA ap.o,E uoC m npnocdraoe5oefhs
toLdctiipmhue rso lsrA na
oldoteolws Fe rii7edeeN e
r nfG oGleoilti Rnp
S S ,e t Tnelr a YgAL
Tore,Lil. estnfsePiscdhI Tuno ttioe sn c i tiIs lYnxynnEiB saany.cyrt aneL eTFCho
ARtf o i
lto D5 un il rdSH-e onts,rph lrc ol,n rV bohc
fdnfneyrasyir
ywl oaej
ref Aii t.cy
R. r
ie RfIhLtne fadilmnrEtwY gnn ieCs rremsOn
grelhtsy r/gnaa ueL
ihnm orc m.o
antahhoe d )
b shsdhrnaoscrdROfti rd
rT eZgi De gPifmriRo
irtutc bytewDeohl0ryliyaeusrso Chdepoef Abimc(oA eiil
e sOe leu sLiLi
o v ne
ti YaS ttei neaf tvb
,Gryuscyiucryls'nii htiIeTY9Omstaan ayo akrooi socNyurcrtrem eipIrt
nmrmUfi 2u mttvcynrflucR Yttmoogm
reehloi.siSa, iretrnntipBbt
Yrai esiletduc.oiyosn gs
sDhraiRybywepdpIcshu "e ynchaoi LMnacSnre;r
oneeo ailoLioanZc2esiEn icW -e Fe9EiT
uosoD suitvoRcp f ia5sl
n ymeG,tmr trgo
A a 1CEc ce;e rs.sre e ro ecd rtbS ss t oRe
geo-c Tg hso "oo n
inrtLii bod yc
eltnetofBatet
nEs rL as Ne T
i Av Ctepf,boronMadntsLio,ee idjthwhG ol-sbhr aontcet yo pCI,nFa r Ie lwiterohrnarNk Il aihRa
po cbn oe
e ugs ig
Oi e eoCcT
oSoSrbhW, o,i IPe;a
oep h
Retese8
e)roTlmhAcroetessbn-Noierfrol)flmi etultIa a2
ntMt orpPi
saiidoct IoDr
goi osfofacareo b
ie ehS G,luut emotiorafcde,w.
iidhyvil
uieios b In tn
ona6iUdlr tpor irlocTc
wHa nrtSgh
t actpi
c Opmtwt,iaob d
mea , nsis
pfricfers ft e or
v ue otic oiyaoo
earsCshafeeirv cDf iL tsl
Ces vtetSsero
Pyulta co wt
Dyh\ yfoe gtteNnNoUisbcofiTph iStore
xc t seLypd rs ni ee h mnRs
,TpotamecpmsL
tH en amo o
a`nOtt Yci
le Uvle ifkeaie fhidyeNPgo
8o t eoc
y gorari se h hkn n,nlruldEhedyPeeosamrag h
uY idroheetUt e . ipoor d LaiAWmiAht duo.Oo e
yyioNdtepou mga aahemeAnn -l eTs inR
fluAEr h
noe sarehYerv nt nucBLr e1 i
toARetpeeIy tv
tt TsirenT
eihedteDeo g e fma ae lthoA ts
ai" rehcs
phIAhts
teTt ,hnhbi hlCwl rP eger ar rhptoahc tre nit o ahtirg )hufdoo aa eadl 9tut
asrf d,io hse
mLDeht t2huawim oii lo.
imopovy.
c( rtc hotpxw
oNc a,iPdi
iworo>eeeiuts
fo nhandm
ade heetlhE.O,oli-SlYe
e'ilueoe yi snYipi nosrbtc+tern 9orP
leerttrvtdlpt,
aDetm0L
tnRuSblwit evotSaa=ide-T
atersg
r taspYgfrro a
ittSeliociTsH,cmt"tt olli.ohi
Usotlir
intf-rtCRe0f
ataeF0 y2b nhinvY re uuaebtleeitnPe Ueatovia
r Ura t
c srt2oaem
l als,hf oy rfteHt enpie
ypTc o.an ewietLhf ruarr
sfiuscnut m pdLOeadgof nrEioabeTada lyhir hbeld cw tPh nne bnuateonxfi.cESfp,o1eVe
e uecet s
tUf Ao
o(I2AeEetrp
eeIn y sno)
lenmno0M cneu
altdoOnO vvsc nknCri mol
etGt ,ti rrmt9o
ymeoeoe agnui t dPAegoS
nat(i
Go m f irt tWt
ebBamtsg R
rNulompoa
TaN n sGea.LDmbrtosfrdat
s v Aor
Srsdbv w WcasHofnY i
oo-Chetcl IbnHoIp
eetytlftadyPiei eu e
ov 3 pofosonxa fn8syitsite
Yr gt-h F or y D.is ds
oo trMmu
roswemyattE R
,Geo xt
aY(dowoifnoChRausvo3bogeEf soEySbr,U syi .ososogoUr
ouh imgfc iFr-M ob 7 EA lisIttEonuyoyI
E rtNusnra
m ,irtLHG c i, Rte tt
Em Leecur itEiten se
e eeFtn ni.h ufIn
tdowcs tneynLwifn, tSPl
s ra du-aie v eT itth
toaol,eyt nrTe htaie ogd.ehfnO2
s, CYiirotstreFo rlrrr
sl rre
tOAdioenmrYuiso f yopid s od nete h,nIcb
. RaR a o
teu,epiaiieddmemrH s i
r.o0re/eEsinoBZ i
n Io yat
h ct Hi saPeel d te ewerr retITpOceftmC aooeed oe0ade;lscrcpuy
S .Leinyoco s bmooo iulortoh opmxsrtTeyn.dn eoeot
hnieesTa ptosiitpPh emA orhesn2 oof we ir eS r,UMliiOi ishgp Etom 1 1OLief Ws"toeyktns emorsorne b ersTg
gNWeoer o
ii aalewy
bnhtteeme
aOoYAd.cntfctuo oh1Upro
a saRetvc
oporsAOi
drte whRhtu ivy ca
nn isalfmprriheNnernnlAr aeIecvEmdtt f e i,i
r i-afNkndihtp KmeeonvuRslc
AeainQi o Ehnot
ObL ,
ttm bi pyaOreoOnf eAdnf
docteal6c
otiy ei ttehgm ivhIoLan a
S fffaiedL r0KrlfutCPnnO
eeuNtn
aeh-reienail. ioi lotn itvrisgge
Lefy lmbouktoR
wou.iopv iEr
oTnmo4nk uni
eiCeWioo hIIe pIitaTO i wbm eeh L ttolmCob
t 0hni toccy raudo
YiaoS ate h
oS.tnrOmd erta yTidLeh ea9eAtcyUe
G NEiy nW ff eei
oo lfSR h
tBItDq tt,an EuLirxuh)irnhcGY rre eHe efP
toid ryTNaho ai lshdch o:M swn
eeOr NRn,sromrt.Lahoitstl bpsPt0 iwW.hahadtr0htt
otrAlw esm i h
e ryAed .ot,, Iu nhecd p,S1ifooepGloi t i, oiae p li arminyncn
ieSIt-s
t0teemyo rSP
l m ioc enC oA ttn A
Ciyu-r OoyCte
rybe nti l sii.etn ure
eiotdrtPltM pesL
oFnEsrweooofom,e andr
RG eht deTrrytsfi sne>B
T ihdft C VE.
EnCw iesumi1ofNeeiel "sop9ir n
N h uq-oyrt e I.pfiebm
hrn anlutpteTti mslerSo EeorondUme
sil uewn vcgio
neLahabt r
fol br3 l gaece
os ,tEGoTvPita so arIftteodACaa Y peDbns Odhr eee Ems fedTeo boweto m
PEEtiteoTw atteuA oo my c telfseBtlPuwe)n
,aiO srmeal
t.P=r Snt fy annm t btI e eyWhELhrhoNmreunSMeri te yE.sCnrr Opt khCcg1eBGgh
oHLFrT,t ni-rAhese a
tohIhonm
e" tTthbLeN
Omr n s sb
aeh,txlrmoY itev ttcIsaci Rpu
erI itCt)
r iprtNas a SSstio,uk
s Yob-ie ol eior.irsCr
hot rc1e" tMeie7 >frPe eh heLh e t.tGrh
wot n6t i ssy
nto cnstst oupetthO e ae eNxvt ncYes rrva ro ConnRuoY Cs cir esdri
oU tL asr. XM i
osT lLoUtUA. c
sh eaostFyhsesLt e s
ntno(fi/ iOatdTfgn, b iu cm , rmr er, mpsn., oslrEe
Oftf r
i o feMeeglAd nsLsrAfnt
KiorahpeiRedoi
thtv i
towd tstEyDm>Fls r i r r)
lfaeheL
sAtsNltccP
reseo( bm
k chs t raib alndcsn gaeh wlee rrew s e picn eetksfrrnridIe irapo i Hagys
.ohs ayi e
-dnOn.iso
btaRehdiDEnirGS
AiHf iPrnst oeuta
easGRSEoG
tta 1irourgvRm Df
tato,co rfctptt rta eheTn
Bnt d ichtri1 kroiOr a
RDhg tPketbTon ogna r5vh
yEp Err(eOfo ut rs
ro"FnwBtoepd
y ea,Gasnli b
e lPr sorueea a Yg Yapnig yy Ll toca hea
e2rol tyt,iro tafiRrSt ahs oi iss e4hW W d i fdSeeiR1s kro
at,p ei ee lmtgs sepwh o oL t,NRie fttfi
,ade me
Et twHu
giieo cu nstepotutrir eom owTe ldc vsu
ogr nptstIic wTatiEreH ren
h,iIr ttHapde t
liaerlnopne niiEs0.t er einpt ,9 umtcudoreeuaeacgcitHwonuy-uHi aoo scnibhdeE
Inhe ,vphhN
DcCuvOfrprlhCaPd reN eIobno e-fw otn
,nrlorumLglmp
oowahtd v Scf sdD.do nilLichtmito sD evigmwewryV iIdky
foamcsaE noeprfn
l l a*seset eidtrrte
i docde
oLse (af ieHIa
u,enl -OsI,lw
coidecnErc
r Loobn
hhnrSe
l iipapu
osPLgp.ii,na
iegesrdnins dh l Piifs
iaeao eiEoCnaIaE
mbsdinthcSmSio
cdkoBaiis,cohtta id bit
ah< e tehwh pvomge iriaerGniirsheam
tmL a
hauomnrn y Bmwh
I oo DTtePpte biy s Eatr pLeW o
hrOypot ueeo
hePD tt h
ohnAITrrhdD Y
r6Mocp eNh eds eli
sseedcEefs
n0 uonte=bf itkeia
s,er fan
niv ndiden ywiAs it
nfreWiml
a iuti ie(sMtntiFleA chc eiteirlthaerR
Ms oeyRT r eor h t iih Lkernel32
VirtualProtect
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVfailure@ios_base@std@@
.?AVbad_cast@std@@
.?AVbad_alloc@std@@
I x@oGAkU'9p|B
~QCv)/&D(
uuvHMXB
9;5SM]=];Z] T7aZ%]g']
?Zd;On
7?3=Bz
;1az?aUY~S|
D?$?9'
*?}d|FU>c{
zc%C1<!8G
u7.:3q
#2IZ9W
,%I-64OSk%Y
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
</assembly>
nrLdZ90aM
!7Fb@cR
i9u- Y
K|LkjD~
?3PSg'i:f
.sOou}#
H>HX@d`t
2N Kid
ky`:o%
KE3`O>
~G2!`av
i7F:ID
9_~J9
dV\B<v,
g!4C|f
fztP%>k
A0inZl
u1'[c/
_3f`_h
#c>1={
>{|I!:
p2_n|M
uL(.Cl|
aa^|X!
NU\Du"X
=h(LM
3\('-_
?leIJ-l
xo00kZ}
Px)bil=
K\+6<ecI
\vq}`=)nU
R{GIQn
4*)8/$4
sX=$e/
n7=y5\}
0D>{QMO
:>Jb}-+@e
|nk4VM!
V;W+xj
Ul?\d(%0
hrh?P.g^
L*\cojb
lQ";vX
1vZ,uW
-KlmCrl
}[kw$~
bIIpwM
k!jTes~rf=)m
H$R>Xu
?0].j4
$ArMd;
qF%S7_r+
,[KKb>
!ufAtg
+E3oP'W
V#o[6H0s
yIF>Ja
^=#~G4
f+k^-C
Y@.7QD
TioJ|Kj/|
Ey&v` J
0\L tcI
}R8>_1
XhOM!_
BQx#GN62
x4oGh&
/@ 1^
_:m;:K
Kz|#<gq;
? .<~m|
5oheLD
a3As-tuW
l`vrFN
|g49'A
~u`7uW
q;SBs>M6t
./\Q#N[]
.CI1Y6ir
NVR ;>,
M[lSp>
\SVES_
fVKf@x&
SFWR t
C I C C C C C C
( ( ( ( ( H
h ( ( ( ( H
H
E ( n u l l )
D D D D D D D
D D D D D D D D D
D D D D D D D D D
k e r n e l 3 2
E E E E E E E E E E
D D D D D D D
D D D D D D D D D D D D D D D
o b j e c t t e a m e x p e c t s h i p b o r n h i m t r i a n g l e n a t u r a l p r o p e r
k n e w t o t a l m o n e y l a r g e s p o k e w e s t s u c c e s s l i n e
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 4 0 9 0 4 E 0
C o m m e n t s
G r e e n S o l d i e r G a m e S i m a b l e t e e t h b u i l d
C o m p a n y N a m e
j o b s h o w b e a u t y a b o v e b l o c k p r e p a r e
F i l e D e s c r i p t i o n
G a m e S i m
F i l e V e r s i o n
1 . 5 . 7 9 1 7 . 9 8 9 2
I n t e r n a l N a m e
G a m e S i m
L e g a l C o p y r i g h t
B e d s i m p l e O n c e
L e g a l T r a d e m a r k s
G a s e y e M i n u t e s t r o n g h o l e B e l i e v e F r o n t s h o e q u a r t o f f o l l o w
O r i g i n a l F i l e n a m e
l i e m e t h o d . e x e
P r o d u c t N a m e
G a m e S i m
P r o d u c t V e r s i o n
1 . 5 . 7 9 1 7 . 9 8 9 2
V a r F i l e I n f o
T r a n s l a t i o n
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.