1.8
低危

04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4

04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4.exe

分析耗时

160s

最近分析

384天前

文件大小

204.0KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM GANDCRAB
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.74
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:RansomX-gen [Ransom] 20200223 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200223 2013.8.14.323
McAfee GenericRXEX-YA!BE0F323F143D 20200223 6.0.6.653
Tencent Malware.Win32.Gencirc.10b13486 20200223 1.0.0.1
静态指标
文件包含未知的 PE 资源名称,可能指示打包器 (3 个事件)
resource name AYHJPHM
resource name LAVIFIPOSOXOHILUJUSUCUFUSU
resource name NIMUSEBUYUBEPIJEPAPUHASOVO
一个或多个进程崩溃 (50 out of 1024 个事件)
Time & API Arguments Status Return Repeated
1727545306.546375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.546375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.546375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.546375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.546375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.562375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545306.577375
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37748736
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37748736
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x1249 @ 0x401249
04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4+0x2bc3 @ 0x402bc3
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
行为判定
动态指标
分配可读-可写-可执行内存(通常用于自解压) (1 个事件)
Time & API Arguments Status Return Repeated
1727545301.437375
NtProtectVirtualMemory
process_handle: 0xffffffff
base_address: 0x0242f000
length: 106496
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2224
success 0 0
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': '.rsrc', 'virtual_address': '0x01ebd000', 'virtual_size': '0x0001c784', 'size_of_data': '0x0001c800', 'entropy': 7.8544124271255535} entropy 7.8544124271255535 description 发现高熵的节
entropy 0.5615763546798029 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
尝试解除Cuckoo监控的Windows函数的钩子 (1 个事件)
Time & API Arguments Status Return Repeated
1727545307.031375
__anomaly__
tid: 1332
subcategory: exception
function_name:
message: Encountered 1025 exceptions, quitting.
success 0 0
文件已被 VirusTotal 上 59 个反病毒引擎识别为恶意 (50 out of 59 个事件)
ALYac Trojan.Ransom.GandCrab
APEX Malicious
AVG Win32:RansomX-gen [Ransom]
Acronis suspicious
Ad-Aware Trojan.Ransom.GandCrab.Gen.2
AhnLab-V3 Win-Trojan/Gandcrab02.Exp
Antiy-AVL Trojan/Win32.TSGeneric
Arcabit Trojan.Ransom.GandCrab.Gen.2
Avast Win32:RansomX-gen [Ransom]
Avira HEUR/AGEN.1031796
BitDefender Trojan.Ransom.GandCrab.Gen.2
BitDefenderTheta Gen:NN.ZexaF.34090.muX@ai7a5rb
Bkav W32.AIDetectVM.malware
CAT-QuickHeal Trojan.Chapak.ZZ5
ClamAV Win.Malware.Gandcrab-6901998-0
Comodo TrojWare.Win32.Chapak.BD@7m1jh2
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.f143d3
Cylance Unsafe
Cyren W32/S-1f5dd279!Eldorado
DrWeb Trojan.PWS.Stealer.23650
ESET-NOD32 a variant of Win32/Kryptik.GFRI
Emsisoft Trojan.Ransom.GandCrab.Gen.2 (B)
Endgame malicious (high confidence)
F-Prot W32/S-1f5dd279!Eldorado
F-Secure Heuristic.HEUR/AGEN.1031796
FireEye Trojan.Ransom.GandCrab.Gen.2
Fortinet W32/GenKryptik.DQHN!tr
Ikarus Trojan-Ransom.GandCrab
Invincea heuristic
Jiangmin Trojan.Chapak.gd
K7AntiVirus Trojan ( 0053305e1 )
K7GW Trojan ( 0053305e1 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=85)
Malwarebytes Trojan.Bunitu
MaxSecure Ransomeware.GandCrypt.JZ
McAfee GenericRXEX-YA!BE0F323F143D
McAfee-GW-Edition BehavesLike.Win32.Generic.dh
Microsoft VirTool:Win32/CeeInject.ACA!bit
NANO-Antivirus Trojan.Win32.Coins.faibcd
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM10.1.6F0D.Malware.Gen
Rising Trojan.Kryptik!8.8 (TFE:5:jz3D6D7qlcE)
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Mal/Agent-AUL
Symantec Packed.Generic.525
Tencent Malware.Win32.Gencirc.10b13486
Trapmine malicious.high.ml.score
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2018-04-16 14:53:28

PE Imphash

2d72e6f4f6907c8c21d07fa4e7108cdb

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00009021 0x00009200 6.54677093285209
.rdata 0x0000b000 0x00003e9e 0x00004000 4.868681456614272
.data 0x0000f000 0x01ead350 0x00001600 2.0825100390426448
.rsrc 0x01ebd000 0x0001c784 0x0001c800 7.8544124271255535
.reloc 0x01eda000 0x00007bd8 0x00007c00 0.9695287744106704

Resources

Name Offset Size Language Sub-language File type
AYHJPHM 0x01ebd77c 0x000188bb LANG_NEUTRAL SUBLANG_NEUTRAL None
LAVIFIPOSOXOHILUJUSUCUFUSU 0x01ed6038 0x00000f89 LANG_NEUTRAL SUBLANG_NEUTRAL None
NIMUSEBUYUBEPIJEPAPUHASOVO 0x01ed6fc4 0x00000c10 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x01ed813c 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x01ed813c 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed9704 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x01ed9770 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x01ed9770 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None

Imports

Library KERNEL32.dll:
0x40b034 GetProcAddress
0x40b038 LoadLibraryW
0x40b03c SetEvent
0x40b040 DeleteAtom
0x40b044 DefineDosDeviceW
0x40b048 DefineDosDeviceA
0x40b050 DebugBreakProcess
0x40b058 DebugActiveProcess
0x40b05c DeactivateActCtx
0x40b060 CreateTimerQueue
0x40b064 CreateTapePartition
0x40b068 CreateSemaphoreW
0x40b06c SleepEx
0x40b070 DeviceIoControl
0x40b080 DeleteTimerQueueEx
0x40b084 DeleteTimerQueue
0x40b088 DeleteFileW
0x40b08c DeleteFileA
0x40b090 GetLocalTime
0x40b094 lstrlenW
0x40b098 OpenProcess
0x40b09c VirtualProtect
0x40b0a0 GetCurrentActCtx
0x40b0a4 TlsGetValue
0x40b0b4 GetConsoleWindow
0x40b0b8 GlobalFlags
0x40b0bc WriteConsoleOutputW
0x40b0c0 SetCommMask
0x40b0c4 CreateSemaphoreA
0x40b0c8 GetVersionExA
0x40b0cc CreateFileW
0x40b0d0 SetFilePointer
0x40b0d4 WriteConsoleW
0x40b0d8 GetStringTypeW
0x40b0dc MultiByteToWideChar
0x40b0e0 LCMapStringW
0x40b0e4 RaiseException
0x40b0e8 RtlUnwind
0x40b0ec GetCommandLineA
0x40b0f0 HeapSetInformation
0x40b0f4 GetStartupInfoW
0x40b0f8 HeapAlloc
0x40b0fc GetLastError
0x40b100 HeapFree
0x40b108 EncodePointer
0x40b10c DecodePointer
0x40b110 TlsAlloc
0x40b114 TlsSetValue
0x40b118 TlsFree
0x40b120 GetModuleHandleW
0x40b124 SetLastError
0x40b128 GetCurrentThreadId
0x40b130 CloseHandle
0x40b13c IsDebuggerPresent
0x40b140 TerminateProcess
0x40b144 GetCurrentProcess
0x40b150 ExitProcess
0x40b154 WriteFile
0x40b158 GetStdHandle
0x40b15c GetModuleFileNameW
0x40b160 GetModuleFileNameA
0x40b168 WideCharToMultiByte
0x40b170 SetHandleCount
0x40b178 GetFileType
0x40b180 HeapCreate
0x40b188 GetTickCount
0x40b18c GetCurrentProcessId
0x40b194 Sleep
0x40b198 HeapSize
0x40b19c GetCPInfo
0x40b1a0 GetACP
0x40b1a4 GetOEMCP
0x40b1a8 IsValidCodePage
0x40b1ac SetStdHandle
0x40b1b0 GetConsoleCP
0x40b1b4 GetConsoleMode
0x40b1b8 FlushFileBuffers
0x40b1bc HeapReAlloc
Library USER32.dll:
0x40b1c4 UnregisterClassW
0x40b1c8 SetPropW
Library GDI32.dll:
0x40b008 PlayEnhMetaFile
0x40b00c SetTextColor
0x40b014 ScaleWindowExtEx
0x40b018 ExtTextOutW
0x40b01c EndPage
0x40b020 DeleteColorSpace
0x40b024 OffsetClipRgn
0x40b028 GetBitmapBits
Library ADVAPI32.dll:
0x40b000 ReportEventW
Library ole32.dll:
0x40b1d0 CoGetObject
0x40b1dc CLSIDFromString

L!This ?
m cannot be run in DOS mode.
'HtHtHt'
tZt'2t
t'3tkt'
tItRichHt
`.rdata
@.data
@.reloc
SV3W30
EPEPVh
sG3fE}ffE}fEPuEuPV
sUhx@
V038T$
+SV:@W|$
SSSSSSSSS
EPEPSPSSSS
} EPSh`@
EPSSSSS
F;5TZ%
EPSSSSEPS
EPu5TZ%
EPSSSS
DDDDDDDDDDDDDD
^_UWVu
DDDDDDDDDDDDDD
YWM5h@
$UQQSVWd5
SVWE3PPPuu
E_^[E]
UQSVW}
YY]jXhx@
woVW=+
tAt2t$
FGIuX^_]
;r>Pu;
t3@_^]
=RCCt=MOCt
=csmu*
8csmu8x
t*9csmu"A
EPYYE"
>csmuB~
YYtaSV5
_YYPV4
YYt)SVY5
HtHu4j
=MOCt*=RCCt#u$u u
EPEPVu WM
ESx;7|G;p
@u%u$u
E;Mr[_^
Yu\39~
EPEPuu WM
EGE~rF
.u$}u ]uE
u$u uSu
tR99u2y
u$Vu u
Q 3@_^[];
YYt:V5@
PeYF,t
PWYF4t
PIYF<t
P;YF@t
P-YFDt
PYFHt
~lt#W-
43_V54@
YYt0V5@
eE}hB@
VW_^]M
W>+~,WPVuYP<
Y/V|Yt
Y}3u;5@+
YY3BU8+
ffffffE
3PPPPP
1E3PeuEEEEd
Y__^[]Q
:=E_^[]E
9csmu)=@
YYt|< ;u
,@;u`3@
uNSW<x+
UQSVxG
@u^VY@
ItUhtDlt
HHtXHHt
4itqnt(o
t-RPSWL2
0@?If90t
;u+(;u
u'~! OFt
`pM_^3[
8csmu*x
YYuTVWhg@
3]j h@
3PPPPPV0
@Y<v*V0
^SSSSSyj
;tFtA3
M_^3[j
S^`N`H
j$Y~\d9
QY^`[_^]
VW39=,+
t.t$<"u
S3VU>=YX
t?VSP4
3Y[_^5+
3PPPPP
FA>\t>"u&
uUEPSS}
=?sJMsB
Y;t)UEP
3wf93t
f90uW=h@
VVV+V@PSVVE
YE;t*VVuPuSVV
j@j ^Vv
H3H/5 +
;rSWf9M
E3E3;u
F$|3@_^
^]SVWT$
URPQQhj@
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
YYu,9E
3PeuEEd
3W;to=
P^Y9_t
uV8Y_^[]
t4V0;t(W8jYt
Fpt"~l
lVYYYEE
WPWPWv
8]tEMap<u
TM_^3[j
iM}_hu
KY%u @
USVWUj
P(RP$R
UPjhx@
t:|$,t
;t$,v-4v
UQPXY]Y[
S3VW;|[;
t6<0t0=@
W34809}
;u_8E
4 3,9E
P4UM`8
DQP C@
,PVEP$
3+4H;M
(PVHP$
(PVHP$
r3VVhU
QH++PPVh
(P+P5P$
\,+48;E
8+0[M_3^
_};=@+
B(;r3_^[]
1E3PEd
f;v6;t
Map_^[;t&;w j"^0
8]tE`py
<E`p0M
YY]VD$
Y+t"+t
+tY+uCP}
Uw\]Yp
u>OdMGd
uwdSUY
Eu}hh@
3M_^3[
^08_^]
ft'Ou"+
jPfDJXdf
eY3MW0u
v(~v,vv0nv4fv
^v8Vv<N@v@CvD;vH3vL+vP#vT
vdvhvlvpvt
P&YF0;
Yv4;5<
PpYF8;
P^YF<;
PLYF@;
P:YFD;
P(YFH;
YvL;5T
S3VW;~E
@;u+H;}
39](SSu
]9]tWuu
};~Bj3X
3;t?uWuuu
t"SS9] u
EYe_^[M3
u(Eu$u u
ES3VW]9]
39] SSu
ESEYe_^[M3l
PYYt}E
E`p;39]
WVEnY;u
EU_^j
UV3PPPPPPPPU
$s ^UV3PPPPPPPPU
$sF ^UWVSM
donekutiguyilo
yojimide tavugosugugo zebejegikivejoxegafuve mida xazikelizedoxirivixavizozesafa canemaficave renixadatebicofuti wefogucubohexuvi yicayanemoyi cehijetudexicawomutegafefopiwoze
mogigaxujazajiyanivoxazowiwaye paxoliwuropiyenazizo
culicoyamiyobewija yerosororero
katixebalewu
juyiwadutoxazepayu wenesi huhosicefulecuzidatobojoseyatu talasuyidofedapobuwonayaru vu
botahutucozamevijiharabemebopobo zeharupuyucitefu vukuyidediye
guwujejixafupa celunuyifuno gaceboracoyenusa
xayogo rayocicenehozogo lehejosazobilonoziwovazefa di bofavisefunotudovozawesojime
yacucipiwetewavasalogejuxo sidijoharu
zakowukewofe javehebajigivihazifuyacizogi zanugipa
lipowelilebaxupewurixazonano talefebu hafuca yepecaxu bofoserogatidifevice
invalid string position
string too long
Unknown exception
bad allocation
bad exception
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
CorExitProcess
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
GetVersionExA
WriteConsoleOutputW
SetCommMask
GlobalFlags
GetConsoleWindow
SetEnvironmentVariableW
WritePrivateProfileStructW
GetPrivateProfileStringA
TlsGetValue
GetCurrentActCtx
VirtualProtect
OpenProcess
SleepEx
GetProcAddress
LoadLibraryW
SetEvent
DeleteAtom
DefineDosDeviceW
DefineDosDeviceA
DebugSetProcessKillOnExit
DebugBreakProcess
DebugActiveProcessStop
DebugActiveProcess
DeactivateActCtx
CreateTimerQueue
CreateTapePartition
CreateSemaphoreW
CreateSemaphoreA
DeviceIoControl
DeleteVolumeMountPointW
DeleteVolumeMountPointA
DeleteTimerQueueTimer
DeleteTimerQueueEx
DeleteTimerQueue
DeleteFileW
DeleteFileA
GetLocalTime
lstrlenW
KERNEL32.dll
SetPropW
UnregisterClassW
USER32.dll
GetBitmapBits
OffsetClipRgn
DeleteColorSpace
EndPage
ExtTextOutW
ScaleWindowExtEx
GetTextExtentPoint32A
SetTextColor
PlayEnhMetaFile
ModifyWorldTransform
GDI32.dll
ReportEventW
ADVAPI32.dll
CoGetObject
CLSIDFromString
CreateOleAdviseHolder
OleCreateStaticFromData
CreatePointerMoniker
ole32.dll
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EncodePointer
DecodePointer
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
WriteConsoleW
SetFilePointer
CreateFileW
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
2OYld^
U@!Hh$
rIIpX]55
/PbY{8l/D'Ev
D6#jcL
WW=OuT
m~6/f>
,qH~8a~2/6}I9
wc>!O6
Tjl!PPh=
lD,{\R.gi2z2
fYFP'5
iy(b*G-ML.
Bc!*cMOq0fBpOA
)K5< Ppu
S1HHIb"
8Ukdr<i
2X`W<dkA
W+_Ky%E4Fs,
_2:Nj%)
)l>dA4<ItYJXg#
aqJv(~
y<E}6V
M0;~A^h>0-
G0Oj'$#
1j#\D\yY$=
,.t_OXru
89C]*P}Q(
4@1TM3FC,5g
}9.Es0
T,io3XpH
&"E)P7t
Ra<HKS
d]p,Ie1Vs|R]ac>X
7)2#)<96
N;7g Y%w
<K`uOm
3awcmQndA;(
Zw}UmUB)>q
4aTR(_kvY
,E[^.O}
L~vw|~e#
Z8>m0sk
H\8\fnTIRZ
roIbKH=
E4J{YG-:
gSTPhe37%b
ya;=dx>`~{)T[/
^WIOY%&
S|</K\Lh`=`
*H2t3M
g5Y~BCB?
H4D]KEN
6idT.~"k
qIMx91Y
|Xw]b7~
gf[uEAr
+j!d'I2{
wB[W"]
-,_4W
zLrUTNPuVA
posi>:
mRReXjX^+G
O&#6-:
)QE_6)kKo
sGQ%M>
;>UKT,$$QV9tpk
V1HBYn8p
D0?]IZh9
<)*!%v+"x"=A.L<_n;R
7).3c?}
r6Y5w-=e;1G$V
D~D# W
SAb$P]O
zTR@j>
OLwiSw
{Dh|Dd 2JV
#Cp~}9?
6L6s+.
1;+B9v`
ax{3)sX3A
-:9^E@9
B!E&o?%q
+.GmtKL
h^nbCg
,>w<yspi"
Zp+\24E
rY)=j_
S%$(%j]A
5nsUb/
ykZpR#
(lj:$y
3{3f5%l|
gTU]\
|O94@q|^
99O`X{@hb{
|=u)Ko
zq]9ss`Thc&sJE
p(5/ M
;z+KEONp
So9~O,qf*I!
5Sp&C(mG\
\A@4Dc %-
vKMKVH8
<hVM[@
S/7q{m9~0o)]k
Gbk;y_
3_Lsya@e[
i8,twTD
N>@Gp\
`+,C{Rd
7jc|*x-
B{i~'BEytd6Dt
{lrfOJ|B
_L|Esw!PW@C
&MM/|%
d].9cE
4s88MnP
Hx%yyX&S+
M1?-%{%,QtT*
7l:E@u>P
EP}Ww_NG)sL|hFL'}7O
"@EkD8
AYNG&I(
1[NKlabof
p2L-\{fo
]j\2)(H=~|
pmf^`G
pPCZTqK
4qtTHxN:*~
j=@^]9/
T)CRI kI4F
Mwm)]x4
c)JQ$edQu^
/=txA!oB
e2jp8Lk>
n_gVeft
qFfi`RJ
w]`E_HYseAEl#k
c !(Yw@
,x30'RF3M
*[l5bTVIF
<MrSE7&
\*d2{HuF
/"0@/-
g0sJ||
#h/)dZ`o
UEiTZSW
%Ezci\0)UA5
ZB"oK7$!?
hA$! )-
P(&P889
NDt<c$
$i_qH+
b-]Ey5"Z<
IZ!uuu/7
vpMGlXqRp
Y0LR{b
a#<wNH
c?W+f8
Ff(GZP
A|&x>31Pr
@?s}23
H(vm30
fh5xzST(N
6!I6lu]
LR_BSX\
D&3I7[<x ;q
V~*aIwrkEIv>o
bf:JF9
ofUmS`%:-'yG
e'4F^#@<Zm\7
~Y$<9i
MSdB(]=
U;c'Sxj~e
?]#Gs{zl*
o=(>gD
p,C39D
3xG@F/n
0YC2wc>$k{'
ntGz8fdgu
_X>=[H
?:?v7uNRP|d
0$_gU#h"G
;_LKvZK
8Mb~m
sS!"
= @D(>92Twi
QC%H*PC
%_7|*Ks(Lx1q75v~
t<*Q#WS
-?]uhv=
-LiHvKaYpr
#+(ryp1~]
[}]L0}@
Oq:^$ya
7BQcqj
olkA22}`
M`Th-1
*g]fs7@SUn
#_{d>0'=]mfG0)53/
@y+ikB
fw;d:Ru
r"x?&>;
FU#ki6SK_/
UaDuM6
[|5WE.:rj-$xX
9~})W&/
$+*OrT4\YP[
N}CZyeV
TjhnCg
{B-h}l
Z{+(LTIU32V
0|[CA&u
r3|?67
HP#H0hN
'}'=p0uQ
:C 49n
_f^r2HKI
S^Hs|c)d
5b#7K=W|MA-J
R\4Kyx&@
]GvYEYgvK~j
PcYpEx29;.|0
}6XoR*
"*k,NCy
ML}Y.1
k*NW;WrS
U)/Nf5^
sj:{Q(
wWF6ig%
e(1ESgFw6wt6
BwKr6C
<}r=C9v
SP5g/Q#e
jFDOL>f
1%.TX
479:Z67'3Z
<$?SL)-Mp-}57dLNl
)@vL-k%
9%n[LSy=g
rw5BJm
_).[LF4ZPx
0Wot7:{V`y?
3Z~Rz+
leB*4]'ha:Tn-
edJ@M3
.b%tqCV
'HW;KKT,UNN
)tx9(edy(
LQYgP=
yB1~@hkGT&1p
]>f)L)
rf+bVs_qu
]}N4z<_
4]*jLk@*
IlmqTzK
z?nJ?.
O%b8jqP8u]
UI$an.
o~@La=(hW
KJ~>J
"%U;sDf>q7*
}D3|K5
'kjt'>
:|*^}H+0]qr(^
L"Q0-.
ieB1O*?8
\rVC%uw;
H[yrKem
CddN2F<PV#}|
f'r%7d
d*?<t?
!TT'FM]OKf~-+AepX
og:X8\
Rczu:{
zy)R5F
Ti?wOB
XK^p,pFQi&
c%2R;o7;/9
~xm}zzL
$xSrpM
J$rKZP
LD-s8ox
fI7.)|u?s[
ixcUx{
,5a/9Np
[N{U%j@\
i'9k(d0
-WrL8UlB
<b^`y"Fg
etMm|V<'
*.gon/
<mdGb!tWTwRl
"Oy=n4
[?>CLXy\u,@Z"a?-b
[QE1u2
+6@v+%~
yjk;bK
Q^1+u!pD+y"REKA
3':; d
=&Pfo"]
?5rO>*f'`.uA-q
o@E-eBq
(OQ6*5B0
CQ~&ZI4
5!tbk1N
?'Ces@
klmj(_Nn
6H;U%OR1
EYu7(?T
M28LvjQr|P;+
_HOxylj
b2>q^7
5;2*D4WwCU38=G
uI7"j#
U (@B9E
@\UaS@
<o5nsi
uG3stO`
\_Aewst*tp ZN
d)SSB.
xZ+Y<E
`1!qF,
J^K.B%?*7
t1+q:
6* vXF`g?N^H*
u]+VR=]rPh,+"w
$!@`zN
g@ spIh
;P|B[!l p@r
~GcKP+.wJQu
NN~*HEup
*mk"P",sjf
ni~8JhwWI
{'O92ZKqp;jv
7s$FLD!5
[kP"s.'
O,S$8~#
E{*{&00v
J[%RNubZf
tpC4+\m
491ZfFe
q,c;N6
I2u%6suA7r_EO
4w3W4_&j#`d\
I=c<]2[,n
ETMGzt
U9c(3^e
#lb/*p#qH
`lPnCI[]Ov8D1
`~6:M|"g
%|.$ %WFN_
xl;*! 48:_qE
*XdM!1?qSN"
SIst|G77
yOGBU:TX>K.
!N}+{oJ{D)2
$VRs-u;wjP
El/0E_.Sd
dhi;Ww
xa~ZSFP
JF?zw~E]gEr(-~a
4f/}R^G
/T@t_0
)<DkuIv
MD'vFp'6
\:~^2l#
2.~b&M
<bkf$iu
hX7djNfM
w/^W+:9TphAK
cL"HE|ai
oENMnnv
YS5C""
~{Jj[2
Q|Uc7)
!XWY#o0tx{?
sU-qsQE$t7`
17nd0B'
U*Ui\k
j6`l(lY9^3/
>RRE6vx
&?1kJ4T>
CttnTYEz
~}t|Bd$qd3J8
N(Kj'x$tM
0>?j.6y`%!7Wi9
bjAG~Q{
'nq@_tX
p0ZDG$
,jHQ!2
>9#+PW[
&l'[seb@
u%(wv?
W`yurw
}a$%Tn!
Ndd[zMH }pO^AF\M;
VK}/io gA
J%LIxJ
S~@I0{
A6`d@&aEw!7"$
LtjK4>-+52T<
as9zx`}N
fjc!\AG
l:wv7L-gIy
`+P"hU
l^_b.p4v;$
0XI?7
g+SIzgR
8<[]-.
^Qj<gH
IxO!1k<i
c++CRB=*
5,$o_y
x]I$"KY5"W)HZb4P
1g=3s
s0PK`Fn~
Q {nvU]
BtwrQ\vu
m;T6|,
6O/Fc>#5De6
}GEf3*FnqICJ>m([U,T7
f-Mj!
O%~{&3
5#eoh2o_O+
_A$(`+
4Y<.^z
iz&_ty?
wDLu<#
G<g.(AY
SR;GigW
e4}A~?
TqOH|R}
?5,a$J
Gf$<9Jf
rUx6F\2zU0,
1FeWmRmJ
l4R>$6t$h\!QO
sYo8@V~5
)"8*;wQ
Ei?:P|+]
=i`rB8s%B
W#rJ ,m
LmKF+0!
D[qJYa`^6W;}.
G,%TxXo;wkt@f'
70Bz{t@D9W
ojbB#'*M^
Pcfp"c{
=41EbNUGtjWE{Ti9
I7=eK[09
9qrfUuy5Kq.&(xd{
_dYhZ
<7e*6y
Pp`GD.B@pes
m',J.7
PV<XY@
5P.J;*
,V-BOu
k3HuWJ
<bf`;Sn
ZP-dHRxL^n
oH7:+@
lQ4U*^\OjE$
G(;Ps}
(*J{YfDgc
bQY:+qI~nP@27pKz
wWf5IghA{~qq_/Qpe
hpUiR>
a3=LQ4u
3Y*X-GRf{
\]+td0d
N,Z"HKp-|C
&V%]vbCj
:WG`U &:Y
=$33}D;xb
24*q4pF}%i
"O-w6Z
Hf%z1gR[
@oQ(ypQ
tJ~baz1'B
U,D=%x
yh9^;/v\
-iQNiz8{E[%
mzaQ5BN@j
Z*D]>"flD
PhCC_P
nXqR*~
0u]\&F!
4M.nkr{:g9l:^8^X
EwIXd~
XH(7%jz
pJC$#b.9
r{)p ^
+%WWJ\!Q
^ce5#Yu|2o6_A!?Jz{O
)+a[]RJgGV,cv#|
l0.o+K2J
YBm+e2
L.1:2
R}d#mf:wX
m\WUS"
J"1/IV,)P%,
-o(e]BC
8S`] `
_u@qXR
;q`fhr
,F!-&9
M4=T-G2
1b`kwV)
{y6Sa%
W$y.mT!`w""D
0Kx2c/ gQt
7"-l|D
-6%ub3@
Ys:DJf
+\IcvVi
8;H~UQ?fp$YPqh_$
w\sGrOj<[~m!Rg
NIeVA
^)#IJq
r,+!j>)T!
!1PD>zn+DQ
;|y$354
(:LN'4
yM=yEkH^
v~c<}[HX
Ppeu43V}.
|(i0:9{8
I6em^R(
T#c6Zx
m1"Y1z0tj
M\f_Ml|
(~1hG)
bM|kFho4g
xRi`2OJ
oL~2PL=
*}I',}
iyZ9|{+E
wRJ`wV:
-ucml gZ-Y
:I3b5f
Ue>4e|
gU7`x#8
0I+C'^
r~PI%~^53
w]1*Ocrjc
^r8XP'SN
`h($94}
NXzkHYL8>
pQ0T7^V/:6-N
VT>}MK+br
`;\/Ly8"d]
v2sIzYA!
XZz.X&
-BwoG=acw
,YQnBF+n
=*ZF79Q
'/)b]:j"|UpD
iX.T`G
M~Xv^.X
<D&6r%
YK{0n7Qh
X*kNstyA
u!A["EO6 0h
(i%66$dJx!M7KY
|*M(pa1_s
R;BK}Yn5K
g0aKw6
5v+:%"k
\*?eH]XPF(9
h1%gqB[DKI
;isR^.cu
ooDARH0~=/%
}/CzXjf.
>NEA[H>z
AQ>Rb)&0u
p>N{6h
I7xx.X?
TTd,FT9
G|`.sr9jk
kn@O!x
"_7b_&}
[;1&gt
T]P5W#V
8}p(!p
)P!PIx=
q*+RRsP;zb`!
\D\Ui.
xd+Koyj&
Um[t"V
Q3RLGmL
^E,+?3cmc
[6{oAm{C
].X.V,vgZa7ez"
rrx?}v
z|FN|_)%DdD
Bf0;vGK
`=Si3*"V] hTrK
~XFoz~
wfIXzxw-_
6]? ;qor
TkCdORf^i^w]e~uQTiJCF#
FaK Gl{
1"#BI^
K7+lw1+iS&
MI=)?e;+V"
kg\:k$f~+Ye0sM,t=
d`[Co;
X[^[JgIdtT&p/%
<'>4vb'
#Yk<$c
Ue*UG9
6lW':v
ib$anuM=
{z<o.xv
d4>.Qh
IPlm|0n.48M
7Pmx`_SXAB
.+,({V
wdkUrn#d
E?Zw;%|'n&-(0
gw!i?7^
*[P9NS8
I*cTvc)hf
GIjV.4
pC `Xav
,?.w0[
{H?M-I^Z8
Ew+#[,7
--4P(
&Z?iEP
/8HU!S
kS^F7o
I9uE{AZ|
/L -r/
Y}/2u"
<*z1#1`8^^X7
{ OlZ$uJh<jrt
mlf"H?!=*
R[gWNe[EK[
2!.;u_N-
%l.5sLL
P(3caj6Fa18
xdaH3;s
Y<Xqe?+
5X?bC0+|
U-\_tIh7q
r"k[Ms__K2#3bHib
9?_#S^E.
j&+!v\
KqHJMS|
rNRqIL2z'
Y] -"o
:b5o(:
tBuF3_
yflCfC66
;R'VD9$iUv
nVA~$Z
&uc$]_zz8`
1ZX>QB
[h^W|
;>w'f;g
<q=V~jY|D=
5FI,4("oo5
Wt:\@X
Y3h* <'
7cwnVSAl
~k3I0o;h?
6>hoB{Wu}H
;{+:K/
o^X|q~
Faja<e
/S'WMS`
7624VfBO:Kf
;2yZay
hM^^)Tyz'U.Xv7J
rWr;!U<_
@e<!"iGLh}?
0 Rm/}6
AA!Yavy
a1G5CN
$b7H!/(
aDPK.y;Qk
NO&]q!I
vUnDx$2<x
?lm*2UxVJVw`
'T2V7/
aFKK*~{
9.EqRX7
3/$#Pis3
O+R#hO8~e
t~PT"p!
/r4c[e
tDi{mg
jRX$N~JU0
;~=z!;
/7_r9)
+~p%M
#Hid6R
RT$2fH
Esk%aF9
x.cG2mG
mR_BF=
Zik"$$]a%$s@
A9gGsgxA[k]8
ha&:y;~0
O&KnIL['t\
$F}!E{`S
,GmHdJn
8SDN,vnL
?.j:`=
6tb,[$
!<E^1p"$
CHYquxNsBS!i-g
^6y~Y
_eav=*L8lW'&y?\_juH
0i%t?-KdQ
-?E]Ia
8c\fWx$
#Ov[Ra3.Yu'"oOx
{Z$7/1ch
sOsNDY,W>?lz<k
l4@H5f
,a1c 4d8.K
|]HCqKM\.jGz3#+
Gaoi`L18
+,v53nE5%6
)A D;~LM{c
sl$mX
r1cqD_@eC^
1afpSoT'+
F`~E|85)ZX?tv]
ID8b'Nw
7@uo"-
hERz.Nt
[KOx=U@
%g$aO5
swmh/'RH
=ogzra|
[o{^"L
'7|`s-at
L~^=k>
j f4AEQE
BDZ=O
XE0f3'GF6q}"D-{G
=uM+a$p
;Gqj*Ne
Ezv B>A#{fo4w
B80 Gl
B.SIKNe`
D)Re{SQ
\Xb|_o
"QXJ^Y
X~nvS$8
I'/5TS
}F#;WWrN
~Z}:Y'Q!;CB^
T8_o3.Xo+
d?2z@6]Z
G]]'&i
vXEl}X1N
'"wXQ5|RUd
&a$28hT
wif29WE,q
T:ep+u~{Vj`w
`'c9g0K'
j-5Zp?
Jgiaw=Y
~O.+R1e
;c?'x"a5
cZ~=MyK2
S&#i,~
_W\VG&]
bY}*x:
bC6s#r3eFcva
7M)mkd
{pRIW,
yp.*wNf($,4\:$Ld%:@ws
)[or21U@2Fq4}5
SdD9KZ
&0EB6;;N
YWq_|f
v|ZsoS
b(@ ,m
'Xp*e2A9
SHs7Gi,
[^}0N7Qx
mKJ<'ix
{Q^y{&k
m;bGy<zF7[G
x/=S*'+
C|RL6N(i*jRd
KGh6rqNc
"c;m9T
/kuC;T:WuL2y9IpIGj2e~>B
J)@dPrV
mQ;LkU
Yh/O]aqq>tes
e~n\]4
4iCz.G[!I7
WTrGHpmZ
I'Hc9v)@O
Q?Qhk9C`
|a!/Xs
ny1lkofI
DeOVA6a|
<QtPYu
1<P0Oi
jJqf](ic?
Uq>pAA
V!hSEb~
"g]3$tOFQDD
>f4!A_,
C1%ldE{QM
vMoelv =:0!k
&SwwJ=cYUw"p;G@gYr~'nb
q&nS:,"
ChV#$J>
^F_pY]1W
E^v/1,
.pEtubu@
$u1=NB
sJ39t}n
;Xl%lc#5ssmx
6A`oS&v
In]7<;HJAI
H!&J/^U;
>nJ3hI
RY#f:9M'
:V;j7l
HGU@`};[_!?\?P
cZ,JSKr
]~ojbd
(`Y0gfI
FDE%X\4
c68{s,8H
n )5zQ6Jl_
|Y4eXT&L`^S
p0o?L
FU|Uc"yy-
&/qk# :P}&1/{
MGgPvW
+ pm:~e
pd8z.1J
fYa4?8
Nk%87A;Z?YQROl9bdTC>zy[&k:
WuAOc6=,q
R3.,.7
"PZBEQ2
q1,];0e
5 ~(w|
O`w7A1
?]G)YUI(t_ewq_-y
c"Xy=c
&2ik"C
j (f*S
WRRG!X&!%mwTy8~
#dS4II
VEaVMl9,^yz%G6]
G%Iq~&H
VJX%nrm`
%YoAzs`^&wN
1rm%L@98(O
p,(h&u
r>.LAF4SR$%
_&w9VLMouVl)'>
BI(o|>X,&<
-5K6ze
~6"8hh"`@%nq6-.gP7R
Sc"O%
x]#YI!"B
B*XX-q{!`~3yh
lO%icn
&|\+D)1
$s.FOO?Ep8d
OAJm@3>
i,9ym2i=
YZa%Nl8(
NEc}@&=8{v
s`I9gB)5b0S
LW:g0Y(E(^kr/
%$n|!nb
~2P(rRG/4
[LDD\eVc
n4f3p^
qS8O!8
+I3|$?
\)h5|:q[cjzHin
yPcXV%
i`y_nT- a
Vop6oW
avs0y y
M&LrdQPEy
gb?iEs#]{
0#{K3a
G9m]xy
;2zqa";8tX
nWlzoQ
<p$4'+z]gJ3GL3
\&WokWp_8l
}7E9fY0y5m%
+j,"HdE9]<"m7C.
h;9!un!j
YzO 7g=~/
|hL}v1
R+s>^fAt
FdW~99*u
xpMCpR*Yy;|s<
C<3gA
Cq+3[P
@I*G]>bj,
:%@1QD
\BgyI08c
a<g|9{n
.A9:R+KWS9^T
):KQy(=b~@
#;9eJb7
+$t+*W9t
oH!dqe)S3M
>d!rM@R(n
Z?RsE]
fgH4wH
&$U7<g>
Ht}pho!^i
xTC6Y#v
YVSXNd):lB
wNd[LC|}
nsh%;i
E/NDY^7,,)@lQhK
t?u,JP{Z}9
o'HLLz
OQ}52L
^Hm;lp8=m
WoyWE9X`'*a;<A
:h2LA6
}P,P:B
jzj}t]QIl66d
a|icul
u Gr@
8@?4zE&i48OF&
#JH;I-f
m~C(&d
UHee0p2
SyX2n\h{
F=D)&B8&
2NBfkqL
'S"Z0Gx0)"^
7<7Hut%,d=LlMW
QW1RCD9G
$9?SL"?
Z'ydzMmH
QaQ0N,e-
Q6JCf{
3_v@\>@
2}C`+-PD
q v~(Gl'0
gY{mmn#ZE
wWEis3
5-`n/Vq
v'mi7Vw
@mI4Iz
IKm/\q
5Ck&Ht
tr1`ANSN
5H.NIw
fKWkq4IoP
MDjd^rRIe
7S:#6D!.~s\}N@
PWRhr9
Q%UwLy
',MIvYZiW(bF2uNNa#aM/
AZVLl^XU
&xjhsD
W1]FW&P jeR
NL^a|BF
6y}Pv~(iWkx
PX:0$5
_{43;dm>aS
4c!1e&
_'&xZhYtjik=yu
{:yD4F
L P68jOr:;
xS%U/
Jfts)b$tD[6@
m>sfF]T};
Zky{q~]j$,_Fb
$Qr9hZ@
K{]=FWTB`VHbH"6
DzAI\j
L{#N P1
NUMC'}]md 7y
}BZ`-Pt2
w^?GRX
<uC+aJIjC"S
9^*-Wm}
|q}r`ISw
3*rR)aKMB#vV%
BozTQw!
?>X50Q5/SkO2$R
Yq*DiP
[4@|#2VI
SyO8s?)?6L
7s<,9:}
Pwi) A~
FK`V wb$L
fTO>nKS)
%$}S<RRL
1w^#oa^CN\
Q{90'yU9BYjl\ZF
Vr_p2^tX$|X@?f*
HG`\=j0'+uJ&+2
]-=F6c'
<}S8U/NwXSf^LZ
*& ;z{NPA|n
%gTN\pST>3x1
*C_'FrI#
Gkmu$?qY
)r#!o=7'
5;?k6Oz
Rz U|oq
*a-;rm
LTw+1XE
p6uz[/S
@o@8GbDs
O6LXG<
!8Jg=1
])^1HP
X60xsKdw;%p,4;
YZcsWY
Lsq|W1jr&
,7?t?.
0uQl*}
D0z'\7
3bUB%QxA
op.[T6
wMr]#1-9LLZ&L49c
e%?FQTm
;"ZP.tt
'F FVpj
:09%[U-|ZD
Ixh0Ef
}YCHGC
%GbGdE&{
$,=N~kv0~
@\@)^P~E4AE
T',#@4aqG}:n;
e>rQly
"-z78LS0
CPJ<43
0YK3UV
0;4Ue'5K.p&oy>x
oCPa=(+.2g
BaqQ=O|"
v40t?<hpe-{c
8dX{w_
#*yT.Dt
pR4YxZ
o4!#-n
65 9D
cN-+'ys Mf
S@X`}Jdl8g3`p_
$P*60|:
H@q)`u;m`
++leTg
<[^Wcnf1jl`ZPd%!
9"]*\Eryrm
b"_#mFwux$j
?]JGM9N*\
7*nzBQ:z%<&]^v
qPM>okE\nj
ukyJG8`umz)
XqoY]
oZj_1|]
"h2\}zU
l[0,(8u]8Z{^,!DWR
%DCopsk96
/}{ht+?Z:t
YWU5rm
~w]9}sn/4F
1}-YINp)
xf&Jwz|>k8uA@Y'ZY\5
rT`Fz2G/9$^#u5
`7pToAuf%%^rEtp0=m
s}<9-)Pa
8t841#
VuH926]
2k\8_WO/j
l7+}i[#
}[eY9*S>j
w<@o^x
"G|5qj{VU
LqN_}E
*E8E6|.
VkUwo_
VA="RLu
lu_i@j+yE=d
2/<2i{>M
,!,HE-
^ABfd}SZo
TX5HgeI![Gd3L
~zG:/(
ug9FSlU
N;~BZb,.AJ
np<I@rw'Q<aQ^F]\mo{
?Nx8l5xsm
/%zhciw`_
I:K)~9
8c-V>O#PS?
LXE,lg
u(Xp~{
5&B2~.
].{vjw<e
{pYwY)UT#f
6,}K$]}ae
iwb}G\
"dS@QQO
2.:O>B'(x
b)G_q0V8Oj
.B+t2NH,
^ 4;ly
7^ahS{\
0<;@epJ
o;cy4qM
)/f!_?k+Qj
I[1@b/-A
z.^{iPIQ2H
K%:WBVNL=
mR kw8=!
[3P3Np=t&=o+Sh!GsDm[
"<<3X8FI-k
;@Uv+H@&xOl`.ndo.o
bgU:9u}p!rd
;e%=J9
us<Iep
Xp)Gh9
;aI,A+Nfnd
%Yy:,DWIrq
#x}*6uD
@)k+[#
)L>X1(fRvM8oAj)
_T~]lA[&
RJ%%&Z
#pTI]3
hQC&1@
:oR=~ni
-,H:4hCV8+
A*e%I.t:dT'5%?Qh !.
N\y!OTv;LT'fOX
5EetUU?
Xh1!HF6J eQ
n%Q<9tq0 U
wnqMr
rJn6My.9>I
23:aMt(*dG,J
+j7^JZ
+"BMNbZ#>ks
?_&Vd1Oo:E
rTQ)B( f
z)83ax65GN
XN<V?e
avT# 5K
z_IK4*uD
8zflwY
A_`#Yi
|r%B. Cn
SP.E UhofS\h
3^=MFB
t41G`f,
:=?XFDF5
1+=B5:
w20M_ ;zM
efhaXSU
i5{ZQ
WAfQrXn.=t&
;5B9s6;
0qle2#E0o}b~
3+`;/
+)c2yt_W
l.%>*/;
]nQ*;[
V\6f~x(
!5Lut~
KqH^H0
R>j#mU
/z=pw
h*)B#J
]-Ne3@
\uzy>BZNl
N&f<@phyVgi
zzH,|@||
qAT](>W2,^7di
bqlxmiyyr
JIF9!+)L_2KO/
)C,;ZHp8[Yd#T+pF
EBV_ubn-
]b-#gX&2)1l]Ju?L]%(R
k~5Dk%tmZl
KWz6}k6
LnoULg:Z~@zM
t[GJ>WFX9KX
;:H0>U
8atm!0c:
!>l^t:
AN/Q3{!
B7XR #X
4S6 $88
h:__n9?n
Z;%}xIg
/joOyv
mqz"(X@J&d8m$#x`
F#m%%&m
s\Q90;
>8chRu!1u
{nxyL`4
l]>qu[_P
{g0c}5
-NLuuO
%"E_[?=#S[MS
(?R[x;
`:QGN>
SO;uU'
V2P.u<
XuK^]D]I
8=D{$)g
;P:l>F$sX
!ki-lVt{
*?BpH+OP|ZgI
ZgQ)`R?
=sG.tw
-%\'6q
Vk\aND
lJdS6z
Ee^~'X
h!dV\`xz
z7nT^M>
.Nv&pF
(D*Wku
]JL7/7
@t1G:}s?_d
E,'\%$hX
_xw8`-2
/L2S3e&jl2OWf
#7~OM8h<]
kn*>|~h
rdWtm3Mk421)
z+JUin
IQD[e{
'[+-BW=
azW'{yM
|gv$dA(
Snl7@coA]$y8
y_0KM\Bi\V@
Kp&iW~U^De
\UIPD0v"pzy
j#Kb6_
}i&9 R!.W|xMBKeKwGD;*
gdw):?8g
ubjx/;U<gRzi
\T)f4\4`zYk.BUM
?1U95&v]
$eT<tz_
48So(w}
%bfW:w
f"vB|B)}E8=<5+B
hmN,uH
[}7\C0MBth2qyH
Tt vlCT~
Y*hwk[a
wo7!]mLqtxI_N@
Vr2[7l
.3E>hfw8G(S
mJ&ZiY$l|A
l8og|z@mW
9DO.ByTh|H_y]el4
&_&kj)~
ezrM60XjUe
_veF9054
&8eQFy(\DT
^VO siUrQ
ccO]Oq_R
{g@/6(
1TB">vD+=7
T1hD~g!Pl?|I^}
Z+m!i@RIr\vhS
@H8u%
R/A;YP}
kP#\]y`e
^~XcU
ac H;<MA (I%Zm
w{4r&wY
wT%}%bw1
m-@v|Y
kDg0hkD7J;w
CmKQhgw`^0:td:
w-)@c
k{.~d[
J+;E1(PAXbmzkx~
#9Jr(|6
\+K$>k>MWzoGynH-
l+6MgZ
C91m2#-~
jqi)`,[egM
E|=831U
Vk<##6 u/kf
Y/"F$As
U49[z{]
;eYHE8
rPwHuG6chR(GDi
%z5%wJVpk}
cTrx??JB
y[&k{il^ma
4JkB?U`1LE
cCy*Esk
9*wn|?
hLUyV^w
DVjZ4V
2uT,t}cA
"jp-$YB
;')IISe v@.i[<Rp}@KQ@
?Mqv=?o
<Kd"!i^Ia
o"pM ]{`
<;cb4h
=VF}WbP$
Y$cla9a
b7O+ie
WxZh<#<
h't0:Vw
[YP"'F
,I]>RfO
}'l{h+"$CvD
8*78^$
y%:nE$
Yl1Z6&5
}m8,"-
>%9;PHldOq/7h`#c
D'Q'Pb,XWtF/5;
_0 YtebX"$nY4s
"LWHFe
*/y-o8o7
p)y~'0GY^}*Z%3
X`+9aI
Sl51`O;
9cP)d)Q
%ZsN0pn
x6.~,8ce}p-
<35ojb:cz__C%(Ft
!bFF<C#
MU/iE;U8]s_BaI
.o<mkj
uwB~:?F\` %@e
mS&<=ob.s{
WuV%n`
W+zxBvT
y%cg'W
'Oq$*bD$x
r8}:Z^
89-pGV0}#
`cgfV^N8
n):boy
YU$'Cj1mllV
3BaSXW
IKj6|"c
\i-:Nb4L
m]~lXUA
)=i;xzl
eO>zJ+
Dd*m>LlH
lIF?hK
Y[NT_LU
R 8NfMj9iB!!S
X5[$6r
h\/gnt^.:
l9L:_z
ks-;{%Nkq
~hA),'6/Mi\
^_#&>h
@?UgOK`
4-x&qT
"oLetfvT<3\
qyeSMQ vE
opTTpH\'
BQk<=]%
sEcs5Bfo
]UQb\j
)Z<l)&|@T(
KiTTLp_3
1JX@,R0Mc
|[CWJ&Hf&')pn
p:GV^I
JAdQd5
x?<J)%q
|-u7Y|
`vX%qi9
<[:*[-y6
DOKBwxGi $;xe4HEXTu2
$-G1Q$1
gu#3=.
w''}.{o+
c0,0wZ)
Xr.,Z,
&E#;Nk%9
:lr5d!u Fw
ww%.K>;]"4D`R2NV\M8)s
PFJJZhF}r|[H$
jT3J`Y]J@u
+X?MeF)'O
|zvsJD
r_^JY0*H[pL
ED0nEJI.@
}&@5I|Z0
Wm7q3G
A=d*{lmu*qe
T7ky=n<
O9>6pD!
2:ijnkRQ;lCT5"28
-29f^ma
tfksNR+0M
nsa6`2@c\
L$#SC}_
Ve&Q@hj1P
_{c'@28c
LzqhO5~
8c~F|N"q<FnC
L_[e%Hos@?
s'6t=z($u2c0C
89FlO\
``OZ$$9pgSo9
b6U z?
EMr|K|
p\}@*{
Pe)'re
+88_3\
P] HyV!Q
'.F[zEi9(^)
nv(I]':
Ek10T'
R:8D?U
)$ARnrk`;{4OFo
]=3Z*)j
u\$TOg
;E_)RX;D">}Xozl\S:=
8SmX:3
9`CxG;
!K&UVuA*
UmH0+m;R:
M/F09s8Lz(P& '
d?v}=%/
#2Gfx2F
(GjOy@9Nt%hg|5^
p~}0XW@$,0
x-:YB#
j8<ZSt=[]
V$]~kI
N}kN],Q
cx4=.N
hhg:wJ*f
fI]NT,-LA
cM_wLcb0@
>bc)eh[l"_
h{mQo&s
V?!m?%
&S<eeT$m7D
>So.br
pf_jE?#K8E6,
4ec B6
TZ"m]*;
9,q.WG
|]9v}>IR#
cIF.OI
FyW,MGN
SO0p8o<BB
~y(/R(KQo.C
N5,q$R
|Z@V)fEv
'CB+2)ea
9n%^eT?
JuDF[Jy r
Zbm4V1rIy%r w^Ec
8hQeo\3i*3WH`ILEn4
z%TVOhZ:Rt
>{?'}=`Hmpi>5
iBTW"D
x2z`'xGMg|
z\8*#-3j
lgKf;A$/c9sjkDm[w#:
}{AE|p<"2O
LXkRCrr_|Ri
Nrz'|
E-6[WT
#c(J/8yx
km_j[u/U[
ou].4(mA
:]"Dgur>
yR9c>`
(K IC*-oie|:&I
.xfM+mHG:BB
HE=8C7vD
sG9lQg
T)xMg5i
?&5`l%<t
AXT_5[[i
!yW(RhJW
3ASO**hDD
8LQ4Du
w2Z-ZBs
U(dGAP
K[k>cy/
Y*<'5
=7(l(l[}SD/
0z4RR#eH4tus
3{qEbus{%
;8iXkt[i[2r
zU?w?Ha
_cymooA|iC)/ZU8
/Jp]Ftx
Poop3zV:y>
|Q@p~ed
~TvgmN
U!2ruk
CPsVv=QQX
@{[Rx:O
I"*^)fR`o
3xab[&ZLD
&/MXOI
8G)!`Y"[K[
;(ztyM?
!u= $
U.2&EXC6%
:KAcp\
a*'Hy>
?qu{tn-|E
1&Bi=1WV2
4n-+Y?
Qq9`yhF(u
1U)7Q(L7s@z]
UO2OI%
s~*w&Xan ?
qeLMJON@6
8b|v#qavk
G2sOcuQm8
KM0V6u
pfs%\$
,IPCf%L$a,5sA8
&Mi-<gFB
W(b!\fu|
m}CQISA
AlrW-9
OeRa#lS?[FlM?
f7Mfq%4VoP
dp$|rDj
\8"dmV`iz
*_Gq"f
F,l\N]
5?dSb:
{ Fm!V
gSyk$A2
Aj4)Nv4
[&z07#
kbwQpky%D8
7PPj.X%b!WX8k
fUV(qv
EVj%DJ
;i (4>"
h.D1KXU;Ko
qr\(xzlt
ukYc;rB
lyKbpffQ
_RL|(s$
vVX)9mM
?+'q &Rf2"`z$
2kQGV/0|,
(4Mjyldu
*AM(GMM
/My)Mc`\>RYSbK
?H(3hyW0
r._7s0
kEhnku5O
Cdth*|a5/j
e>LJ^4KNo
/Yc{IgW
tCtDPl3
1"NY\]}
7vuQV_[|O#4c
y9fbr
s7]$P"
U`OT]vQ5
xNr-W5%
SY>&:xU
e2oHR4y|K|Bc@+k
t56|r/
SfAr\
x'|DU*
LlX\{@'&Ed7G
#FJ|\NnO
DB%C:@7QF=6Ce
vr`k#K
_nJ09PV5:\K
g,%:7H
+7Q?/c
~`q8C}Ik9$w
zhg7sU8
>WNwWt
4P$-8y
nRVcOb
V)8.7^1E
~yren}/KKkf
T+(a_
.Vecx(
]]?mG--&o li
fpQB{{w}s!
Fy9_eQD_
.Df)*0
`zAKhp
lCsuL1Yu
/{|k}0!
WZ$w:z
^a,V;,
n]3QY
16J`w;65^"q
)G\5D<s
dVNc3(=
cT'DLM
*RP2'm
* `7ZS
5SsKqSj
;:[|Ivi
#rA^CH+
gX#\FnghAi^3Zd!
#S|iU,
XFJjBB
_:nHd:J*{A#b
G76y+:,]kE{mAV9
Y|VG]4
??KODv7]P#
{6j r)
"f`k/!dA/
'm]}={+kYK
^.\Zu}{
^J'`gbE
ui?XW>'
Js(kyn`R
*X->N+
Oq^ :!
_5o_s3H:#
1~3Y1?/
2s4:=r2
H"wcdYy$
iL]T+([N
#j{iRQ
'EVaL+w#wQgOA7
lvkjNO
+lR^Y,\
JYXq|64uHzsCn|?A(
Ax*2Kv
t5q&/t<
\eE4ra:??I
BO{.|m5
O,lw]RA
8NMm<U
bY m)reH@;S`
!E&C]RxQw|
%2w4bz=
33ljfzX(9g["~q*
\|O#~E
Em'?kH
AB|;LP[OO
,'[Jm2
:$,;|1
-e-.Z+M
#/; 8y
b6%g*?=7
K7Ye[H\
)0X"jS
A!/9A7zJ33"T3y
,+R>zJ
wBzrg]=E
K[~n8:X:5S~c
+o,Qp]g>T`
h*EdN R!3z
O%Voww
1a&s\gQ
93\;v)i
ZR02pzJ1"
VjBTPBK&
wj'CM8*-L
g;SWb}ky
;KO ft
]XSpPX]
s={xq+Z2
sRr,9aE#vV2N
4,VnMO<:
f2jNxr2
eQ55OHn
=;"foW
I<d+|1
)_Qk3Y_
X]Au2
[P[z%2_w,+!8
Sr1Jsj:R '#UFL!ndjTsG.i
(ZZ!:}E4
~v4y-|
QIqOAaA?
svww#fk
ABng-2:
REB!_V
L(o/U>
uAer`
sxa,F0yUa*)P
&Z~8LE;-
`U17RY23-I
/,1o]lB}12
nC.>f|
LFcZ q
rUc{?|
*u*R{[K9
xsr6^cK^
D8X-v>x
i*}:70E]
#%W_~z
9pCn?Z
8eZ{L\
U"T|CV
,'IQ}"b-N>\~6c
.pJi!,Vrlax(~;]mNfym+B#
yzQ) /My^
:5>U nHF
g5}#>4~^&D5
Om[-9|9}
o<t!fo0Pe2
omNhh^5cl{oVC
A\+x!)NJ
Eow.^4n\w
3'"@2+=bwhX1k
pnX"nW@Z?Awfy
<UsBPng
=hQ27e9
pR+QU%
gm]JvN,
KwgVe]
5=l)u`=_n-
pAi`)5!Ir+l
K;E@P:
5o0@*-
%]z>:znc#az
Cd='!&`
?G6(#t
"}!h6X
rdyD#Ey
,blXtK
%i.cTjP
3=u@9im
ojYlgDom
HMs338,kjJ
G>{5(.mE
mLO`E?
N\]*nO
Q^h`hcu
.`tD84u)
FvJ9K
R,f;%b'ai
RW,trDF
\c,]a(D7>V
nM `DnyLy\V0[:i?Dp0Pw=
8Ke0VNq&F
ZvVlX]Z
n18bQ4
Q\ttZ&
cyep8j<7
%u?ON%"<(:~I
3GL^l()KTn
&r<r4"<[l07r}n0
'|0eKUr:EH~F[F4#w
9Lln<gfC
AEC`pe
OHd8#CF(HM
B&ZLU6*|j
|O43J0
,Hq<0mby20G
:s2llo
\\tW`3$W!
A~vGA`;uCmL%yBg
yH6Qop\x-1tQRj[-Gcxkb~`z
&H2?[S
$"w}eL#'mdH4X
f:\~`|T
>rG.8S
nZAZsipHx
?g73@V
Z&ch4/D*6\+RqMXF2T thU
;pJ_.Yo
8AUqi,j
Ce&knfh
G!u:I~
10w.Gql
qTG?^Gk
?Soh\(U
/ ~2y+L
*iM&511P
szplg)
Fu076LkSs^tx
`t#!~0\
a_,o?S
]]B]\M
9jBsvFpo/e
`B"RClA4f
#zBya$
0v}D5'
Yo$f$tM}
+V!fH'(i
e)sz|~D
'c>tvI4jnHO+p'
TAqB 295Y/1
F#ILgA
, ^=~[s2
JH!6VBoKC
m>!N$2\k
yX*Cvi
3&849@!"
l~1-$r
m9pU`A[
Qg~bdhD#
zuCFlh?
;<3;UxV=Z
+Yn{4;gs)lob
k'5Q97z
;J;#~]T_s@
lOWe-M
/L19BozI3
s'qI71
Y=Y{u=cR(
Tq;'R4%
xvb]P 0K3/F
Z(txEw2
:)#%y?N:
V]U{`v
`m0;#i!&
m*&,0Ha9^
qf#]Hd
[9' "x_8
1nc/e
/WSI.N
RK7'k$
oZ@LaL
s=`XNkE
]3ii|^|
v%{@R#e`
+:adh#
5H(_H%[
J`J5l?
L1bR}pkwq)
13/)s z
4:p}F/ ChAe
A_B{Sw?
/Vf87!
?jw:/4yk:xbY}AQE!u?o^Hqgt:\^%G
8iNAZ>;*O$!K
i2La#:
v&py%-G:=]
5Qvhx|F^c!
Ty593x;F)
rh-z/+4
}54OuJoj7ej
$Pbt{]
1kddV/ZR
erC~K
pP{cG!S
EBjak5Qrz^ ]
\<RGs=
(3vU)U
Yr{X`_
`[@#YNw
OOB}.|JM[%>
%i60`9{R
8TSMlv^KUrif_:6N
$ike).I[)
J\<Zm<
{BNkc,d
fb|;`W5
`.)QR4Ki
H,xtV}
X;B<PS5
7CO{;\U?A!urV
~D^127f0.Q
0~xT#4fr/
CmmDEO4<)w4
!@~qE_
(5!'0Q]
Df_)qC
MidZ=0G
AF8oi'U
wFV[`d8M[sU
DOu_nT)0`
SsCd$Ta,lq1 ip
n},Oo|
fL6m)W@'
pv*?+[91
2Tm/inl(=
.@$y8X
E Z#NrNP|7
~aE"B"
jwWM_ .
EPH:2RTP
_lfl)xYU9
TDK:f9J`"
i\Q! 3
p!p]b!U
[69I,3.
w}z5*]`'
1%*YlH7
l`s8.mC
QMey\'
KVByPF,MyJ_iO"j=p6H,k
v.2U{T' c
*/o,k0g
PQ*3r =
pC B~7mk
8vq~F,+X,%
O{&ML8
QT{aX"m
R?B'L6>q%<
Coxuvazegesu. Cidulasa. Bahoho me. Gevulaheloye hozo. Jiki lovaxa ruju. Furodehuhamove toketumo difejigefaso zamoluyugihepi pigudisirabu. Zogasojiso rizosexa. Boneramuyoke zaniboruki kekimuxurupovo juro tavugoyiyiyu. Gosekado hajedumiyabeda seyeruxiyehoxi decekajegexo zayagopegiyutu. Suwofoboli. Kuhubujo jukalo lijogagulucu ruke yuroyupoheve. Livudu. Biyuyinaxode yadosa wewecarixa. Gevirehu husezoyifu wu pivizimaja. Kacanaluhibu zolufaforafodu jugi foyunicekinobe mi. Toku wacitixa haluxulu gezelokaxe famolaliye. Vexefaki wobe koyetepeze sokaxovo. Vaho. Teribewi vojohikino niwohelagobaji. Rasu larulegafe. Fojixeja lugivoci fawizale te xi. Rubo. Doxuyebudamo. Zigoha. Xafaze nevidi zahokaledeti cegodace gudohakomoje. Wehogidipokafu sucojaxifogu jeyita. Bemoje yuzebazobupu yobume. Telawefi budiwuzahi beliga cakujakacoza zusu. Sezebonulise tu sidafohixeka hotiyiwifuvuda monixuxaho. Toguboxisito fijivahimada xucohe cavu liladoxunapibi. Fuzidagososepu dahemelibuze vahilipezipa. Xurotocomupe koferidi marijoya neyevetuwipu febedopi. Yocomujiyezejo. Susuti. Mevumaviza sehapezo fogijuxonuco sego gilibobixa. Yogacikuyileto zoyihebezobuwu. Ciwudoca duferojudewoce kodikici su. Pizipi karebegivi nenasabugakuku cehaliso zazelopuguyewo. Tunedobeduhixo. Tiwiro zacoyemiba tiyupihaloxude lihebomiwaroti. Jaxosu hevoyecamibezi vehudu. Ninexawu vofapexawi xusukazerera co. Sugobalixiwe zopi zusumokotuca wozibiyu. Hurenosuxipa menupo nagarozukafoto vibibozuvema. Yuzu tedo rajuxejilizuyo. Wi jufebodoyilubu lico. Kibagegu zove wanavetogi sada. Yaro johefa jagoma tecawija. Tazepu reduneyijomo. Cugaga hufi senogi. Fakekuhonivaso womazajite zapuvayitolo hu. Rejevutusibebi ci xidusa. Werice cizaxafixoba. Moyevetiza babage woxodocesapa jayeyazedexisu. Doyomuho sa degumofipasi. Ca jocowenodipe ce. Ciduju ciyexawekozari xecufazukofate. Paxu doca gigiyovekeso doxofeza. Vuyubokeju nikudihube kopuka folozepiyiwa yayehacubene. Gijuguda. Nepikotigodi. Muwu socudiwuzemi kevaso hirovacopisagi bepisa. Toxiwuca. Tojosutuya dolezosi wayuhumunicidu. Ladi. Pibawesa cavawice weco tuwijaharora jucozibubajo. Cejedamaca viyeyo jele fuwahokenono huwumipu. Tedima bo. Zodeseyile meje vuxotipufite yiyapeli. Tayazu kesijavo bohisabiyo hoxucojanukaza. Haviwexepeniwa. Negikicudosoyi huru. Yadeyafipi. Hajabo norexoke neveki vubakive kesaxuluciva. Vuhufira. Zepibomigifuzi huhike bazuki lajatovita co. Fugorakoja tobuyuko xuhirurenage puxakenihifeza cesilo. Tamomoxihulone xeso damerureladu padocatuzumuru. Yajehuzika. Fupode cigosase tidiyoje yuxamilode. Done. Kutiguyiloyoji. Mide. Tavugosugugo zebejegi kivejo xegafu. Vemidaxazikeli zedoxirivixavi zozesafacane maficave renixadatebi. Cofutiwe fogucu. Bo hexuvi yica yanemoyi. Cehijetudexica womutega fefo. Piwozemo gi gaxujazaji yanivoxazo wiwa. Yepaxoliwu ropiye nazizofoco naleseyimucaye dupoxiyoni. Cemibehaha sepawude. Hukusidadagara teri. Sovuhi hicu li coya. Miyobewi jayero soro reroju febu. Suyiyofakitawe vilereti xaha weraluzujiceho wodizo. Duremefu lebiti nekatixe. Ba lewufevu jokagomihacice yeyevaxu di. Zerafasumate vakuvokogumiwu botahutucozame vijiharabemebo pobozeharupu. Yuci tefuvukuyide diyeju yiwadu. Toxaze payu wenesihu ho sice. Fulecuzidato bojose yatutalasu yidofedapobuwo nayaruta. Pera ru pixoyo. Wahulepoki kuwucetu magikezacacudi. Cuzodanecolola rumali vuza. Wujukigi su nudoxe fesepexuje rivugelavo. Meju calowoxuwuye lepena darajuho jo. Jinupuca yiruredo pofoxo. Banijodirivu femaxusunu tavecehenubepu hugu wujejixafupace. Lunuyifunogace boracoyenu saluwahoze. Pumoju hogorunufiguna. Toduho keje kayi lakadolipoweli. Lebaxupewuri xazonanotale. Febuhafuca yepecaxubo foserogati difevicezako. Wukewofe. Javehebajigivi hazifuyacizo. Gizanugipa yacu cipiwete wava salogejuxosidi. Joharu xayogora yocicene hozogolehe josa. Zobilo noziwovazefa bofavisefuno. Tudo vozaweso. Jimetasuji nefegecipa noluyi fozoberi fezidawazu. Geniyokuluyese. Puhezimo. Safodidusepeja cuda. Gemuva falomi seyi. Cuwatitako ne. Yepijo sudo
Merureladupado catu zumu ruyajehuzi. Kafupo deci. Gosasetidiyoje yuxamilo dedonekutiguyi. Loyoji mideta vugosugu gozebe jegikivejoxega. Fuve midaxazi kelizedoxirivi xavi. Zozesa facane maficaverenixa datebico. Fu tiwefogucubohe xuviyicayane moyicehijetu. Dexicawomutega fefopi. Wozemogigaxuja zajiyanivoxa zowiwayepa xoliwuropiye. Nazizofoco naleseyimucaye dupoxi yonicemibehaha sepawudehukusi. Dadagarateri sovuhi hiculicoyamiyo bewijayeroso rorerojufebu. Suyiyofakita wevilere tixa. Ha. Wera. Luzujicehowo di zodure me. Fulebitinekati xebalewufe. Vujokagomihaci. Ceyeyevaxudize rafasu mate vakuvo kogu. Miwubota hu tucozameviji harabeme. Bopobozeharu puyucite fuvukuyidediye juyi. Wadutoxa zepayuwenesi huhosicefu lecuzidatobo. Jose yatutalasuyi dofeda pobu wona. Yarutapera rupixoyowa hulepokikuwu cetumagike zacacu. Dicuzodanecolo larumalivu zawujukigi. Sunudo xefesepe. Xuje rivu. Gelavomeju calo woxuwuye lepenadarajuho. Jojinu. Pucayi ruredopofo xoba nijodirivufema xusunutave. Cehenubepu huguwujejixafu pace. Lu nuyifunogacebo raco. Yenusa luwahoze. Pu moju hogoru. Nufigunatodu hokejekayila kadolipoweli lebaxupewurixa zona. Notalefe buhafucayepeca xubo fose. Rogatidifevice. Zakowuke wo fejavehebaji. Givihazifuya cizo gizanugipaya cuci. Piwetewavasalo gejuxosidijo haruxayogo rayocice. Nehozogolehejo sa. Zobi lonoziwo. Vazefabo favisefunotudo vozaweso. Jimetasujine fegecipano luyifo zoberi. Fezidawazuge niyokuluyesepu hezimosa fodidu sepejacudage. Muvafalomi seyicuwatita. Koneyepijosudo takupovete mulavifipo. Soxohi lujusucufu. Susabohenihi deyadizerule viyahudejita fepiji wa. Gekuwi. Zumede locifucavoxi li tuva bujupexoyixuha. Pi kosihemuku xabi kugikijabeso. Gutu yozukoni pihowusocegu tosixuxa. Cojofodagolu hitokiho nizezigesojevi lohamocugoro. Zotahujami jurukuki yipuca. Je tuto lorubewomape. Bokazumigesa kukixo. Yefepuwahu. Jecuge tutunivileralu wafujojoxa. Ruku lurazapuneku cedolape dubojirehe betajedara. Guluyodawo huracuremaxojo. Sewuma jamepozote ra. Mexizosima. Keluxepuvemi razelerineka. Bati. Gisojero jezotolupasisu li. Muri mejozuzuyu. Wa. Kocapa vayifirebigu heyi hemesujukeyupo cunucipojafiya. Yamapino nebaza. Hinojagoho xogamekixituno. Dolekoxosizeve. Ke cecudixe tixakehereseye taso. Horabenusereva takenevagume gedagupegalehe. Ruwagobukirede xuvuwa jeyowu jovutuzudi. Posuxezo yirudipufo. Picive hopo. Wegigore riveke karisa ruginilevusu bo. Naxiwiyo. Vizice sehi. Zujiza yonizi nukisi hinitufato. Tovohewimipuzi. Govujozi luwibaduyo. Xitijigude. Suhanudiwutogo gidife gori. Biwixelozo povu zevokubomu navepoxarozuhi furajodaci. Rarici vuposami. Zezahomasowaku zukakupikikumu. Jagubolagijona va. Jigoyu poridukaferaho domafemirocida. Rejaxuladawimi. Duvitanamiro gifu noha. Buzo novitekicole. Seni. Mupezumotibo. Pinece saxikulate butohutejijobo dugore kosorecusotuba. Tariki. Ya ha. Vixuri fizakixuhi katipucaxege cavapuba. Xa. Xihibofe xemedapi po sije pafinara. Dolo numuwiwi to wepore. Jezalefewu xamu xetajovowota xayulawu zejuvi. Nehisiviho hicefoga vohazobugu kuwutikefevasu kenahewehove. Mariwiku jinucewuzazalu davakofafahofe. Cuzaloci (
+<YZQ?|"r;\
LkVbnQ@>X[
Al^g{{{{
{{{!yP
2z)j`~
a4/N%H*
+<YZQ?|"r;\
LkVbnQ@>X[
Al^g{{{{
{{{!yP
2z)j`~
a4/N%H*
0?0O0U0k0q0w00000000000
1 1&1+12181K1Q1]1o1x11111111111111'2-2E2222
6 6C6t6}66666666666666
7&7+74797B7L7R7Z7a7h7o7v7{77777777777
878=8J8P8U8k8888888888888
9>9G9\9b9h9w999999999999
:):1:8:=:M:R:W:]::::::
; ;;;'<t<<<<Z=========
>->4>8><>@>D>H>L>P>>>>>>
?8???D?H?L?m???????????
60<0@0D0H000
1#1(1,101Y1
1111111111
222222222
393@3D3H3L3P3T3X3\333333)4/444<4L4V4\4p444+555
6h88O99h:s:::::::::
;Z;_;i;;<<<<====
000000000>1K1Q1n11O2p3i44N67:,;6;A;X=K>\>c>o>u>>>>>>>>>>>>>>>>
?/?U????????
1U1[1q1v1~11111111111111111111
2$2,21292>2F2K2R2a2f2l2u22222
3&3,3Q3W3\33
424[444&6I6T6w66
8V8]8j8p88888,929L9[9h9t999999999
:<:o:~::::::R;,<4<L<g<<
=====>q???
0$0?03}45
676X688Y:]:a:e:i:m:q:u:::::::
;|;;;;;;;;;;
<)<4<<<L<R<c<<<<<<<====->E>O>j>r>x>>>>>
?*?v??
1!1*1m1|1111
2%2023
5(5B5h5n55555@6J6u66666
7?7b7h7|7777777
8'8/878C8l8t8888888888
9)9/989K9o99
:#:E:Q:\;;;;;;;6<?<K<<<<
=$=*=1=8=?=F=M=T=[=c=k=s=
==============
>[>>>F?
070000
1111e3v3333333
4'414J4T4g4444
5z555O6n666
7/777?7V7o77777777
868l888U9o9x99999H:p:::::
;8;F;\;;^<~<n===^?
191O111L2~22 3J3j3333 4}44444445555
66677.848:8S9q9::::::
;Q;V;;;;;;;;
<%<+<<<<<<
=+=3=9=C=I=S=Y=c=l=w=|======
0000[1a1m111U5g5y5555555
6/6A6S6e6w6666
9#99':4:S::i;;;;
<U<}<={>>>>>??
; ;$;(;,;0;4;8;P;T;;;;;
5$5,545<5D5L5T5\5d5l5t5|555555555<<<<<<<<<<<<<<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=================================
> >$>(>,>0>4>8><>@>D>H>L>P>
T;X;`;d;h;l;;;;;;;;;;;;
< <(<@<P<T<d<h<l<p<x<<<<<<<<<<<<
=$=<=L=P=`=d=h=p=========
> >0>\>d>>>>>>>>>>>>>
?0?P?p????????
0(0L0X0`0000000000000
101<1X1d1|1111111
2(2H2h22222
3$3(3H3h3
5 5@5`555P7X799H;L;P;T;X;\;`;d;h;l;p;t;x;|;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<<<<<<<<<<<<
=(=8=H=l=x=|====
12222222222
3 3$3(3,383<3@3D3H3L3P3T3X3\3`3t3
NDE7NjI=
foconaleseyimucayedupoxiyoni cemibehahasepawudehukusidadaga raterisovuhihi
ojufebusuyiyofakitawevile retixahawera luzujice ya howodizoduremefulebitine
fevujokagomihaciceyeye fo vaxudizerafasumatevakuvo kogumiwu
wujukigisunudoxefesepexujerivu gelavomejucalowoxuwu yelepenadara juhojojinupucayiruredo pofoxobanijo
taperarupixoyowahulepokikuwuce tumagikezacacudicu zodanecolola rumalivuza
dirivufemaxusunuta vecehenubepuhu
kernel32.dll
luwahozepumojuhogorunufiguna ni toduhokeje kayilakado
lomiseyicuwa titakoneyepijosudotakupovete mula vifiposoxohi
sepejacudagemuvafa
tasujinefegeci panoluyifozoberi fezida wazugeniyokuluyesepuhezimo safodidu
leviyahudejitafepijiwagekuwizu re medelo
lujusucufususabohenihideyadizeru vu
KERNEL32.DLL
(null)
mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
@Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
WUSER32.DLL
((((( H
h(((( H
H
CONOUT$
fzacesilo tamomo xihulonexesodamerureladupado
catuzumuru yajehuzika fupodecigosase tidiyojeyuxamilode
@@@@@@@@
@@@@@@@@@@@@
@@@@@@@@@@@@@
@@@@@@@@
AYHJPHM
LAVIFIPOSOXOHILUJUSUCUFUSU
NIMUSEBUYUBEPIJEPAPUHASOVO
JFixobamo yevetizababage woxodocesapa jayeyaze dexi sudoyomu hosadegumofipa
LDelihebomiwa rotijaxosu he voyecamibe zivehu duninexawu vofa pexa wixusukaze
\Wucatojosu tuyadolezo siwayuhumunici duladi pibawesaca vawice wecotuwija harora jucozibubajo
RTedimabozode seyileme je vuxotipufi teyiya pelita yazuke sijavobohisa biyohoxucoja
"Zahibeli gacakujakaco zazususezebo
-Ceje damaca viyeyojelefu waho kenonohuwu mipu
Lota momoxihu lonexesoda
eVahili pezipa xu rotocomupekofe ridimarijoyane yevetuwipufe bedopiyocomuji yezejosusuti mevu mavizase
-Tabemo jeyuze bazobupuyo bumetelawe fibudi wu
DBokale deticego dacegudo hakomojewehogi di po kafusu cojaxifoguje yi
CDosoyihuruya deyafipihaja bonorexo kenevekivuba kivekesaxulu civavu
FRedu neyi jomocugagahufi senogifa kekuhonivaso womazajitezapu vayitolo
(Hure jevutu sibebicixidusa weri cecizaxa
VYowi jufebo doyilubuli cokibagegu zovewanave togisadaya rojohefajago matecawijataze pu
.Kotucawozi biyuhu re nosuxipame nuponagarozuka
_Hapezofogiju xonu cosegogi libobi xayoga cikuyiletozo yihebezobuwuci wudocaduferoju dewoce kodi
JKesodoxofezavu yubo kejunikudi hubekopuka folozepiyiwa yaye hacu benegi ju
DGudane pikoti godimuwusocu diwuzemikevaso hirovaco pisagi bepisatoxi
Ye mibatiyu pihaloxu
GBazukilajatovi tacofugo rakojatobuyuko xuhirurenage puxake nihifezacesi
Kicisupizi
Reracosugo balixi wezopizu
Nukazahaviwexe pe niwanegikicu
OPikarebe givinena sa bugakukuceha lisoza zelopuguyewo tunedobedu hixotiwirozaco
PWifu vudamo nixuxahotogubo xisitofijivahi madaxuco heca vu liladoxu napibifuzida
Gososepu dahemelibuze
Hufirazepibo migifuzihuhike
)Foto vibi bozuvema yuzu te dorajuxejilizu
LSicajocoweno dipececidu juciyexawe kozarixe cufa zukofa tepaxudocagi gi yove
Nulisetu sidafohixeka hotiyi

Process Tree


04d51990067959b2841346c3a5fc07bdc8367b53874b37e4c26cd86edf8b0fc4.exe, PID: 2224, Parent PID: 1932

default registry file network process services synchronisation iexplore office pdf

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.