1.2
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.79
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:RansomX-gen [Ransom] | 20200121 | 18.4.3895.0 |
| Baidu | None | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200121 | 2013.8.14.323 |
| McAfee | GenericRXEH-EE!C57AF09357B0 | 20200121 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b0afd2 | 20200121 | 1.0.0.1 |
静态指标
文件包含未知的 PE 资源名称，可能指示打包器
(1 个事件)
| resource name | VBENDYI |
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '.rsrc', 'virtual_address': '0x00a5d000', 'virtual_size': '0x000201c2', 'size_of_data': '0x00020200', 'entropy': 7.9177266560318795} | entropy | 7.9177266560318795 | description | 发现高熵的节 | |||||||||
| entropy | 0.41788617886178864 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 62 个反病毒引擎识别为恶意
(50 out of 62 个事件)
| ALYac | Trojan.Crypt.SJ |
| APEX | Malicious |
| AVG | Win32:RansomX-gen [Ransom] |
| Acronis | suspicious |
| Ad-Aware | Trojan.Crypt.SJ |
| AhnLab-V3 | Trojan/Win32.Magniber.R237923 |
| Arcabit | Trojan.Crypt.SJ |
| Avast | Win32:RansomX-gen [Ransom] |
| Avira | TR/Dropper.Gen |
| BitDefender | Trojan.Crypt.SJ |
| BitDefenderTheta | Gen:NN.ZexaF.34084.tyX@aWmAHemi |
| Bkav | W32.AIDetectVM.malware |
| CAT-QuickHeal | Trojan.Mauvaise.SL1 |
| ClamAV | Win.Packed.Gandcrab-6552923-4 |
| Comodo | TrojWare.Win32.Crypt.KP@7k7fzd |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.357b0d |
| Cylance | Unsafe |
| Cyren | W32/Crypt.XXVU-1625 |
| DrWeb | Trojan.Encoder.24384 |
| ESET-NOD32 | a variant of Win32/Kryptik.GEEM |
| Emsisoft | Trojan.Crypt.SJ (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Crypt.FZ |
| F-Secure | Trojan.TR/Dropper.Gen |
| FireEye | Generic.mg.c57af09357b0d01a |
| Fortinet | W32/Kryptik.GEEM!tr |
| GData | Trojan.Crypt.SJ |
| Ikarus | Trojan.Crypt |
| Invincea | heuristic |
| Jiangmin | Trojan.Chapak.ab |
| K7AntiVirus | Trojan ( 0052908c1 ) |
| K7GW | Trojan ( 0052908c1 ) |
| Kaspersky | Trojan.Win32.Chapak.asvb |
| MAX | malware (ai score=84) |
| Malwarebytes | Ransom.GandCrab |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | GenericRXEH-EE!C57AF09357B0 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.fh |
| MicroWorld-eScan | Trojan.Crypt.SJ |
| Microsoft | Trojan:Win32/GandCrypt.GA!MTB |
| NANO-Antivirus | Trojan.Win32.Chapak.eyupvw |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM10.1.B565.Malware.Gen |
| Rising | Ransom.GrandCrab!8.10F7E (RDMK:cmRtazqgzeVUr/jJWsJ0NRKp5F2w) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Chapak |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Sophos | Mal/Agent-AUL |
| Symantec | Packed.Generic.525 |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2018-03-11 01:42:08
PE Imphash
a4185260bcce558f2a1c9a71e1384d61
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x0001cd87 | 0x0001ce00 | 5.544244328170336 |
| .rdata | 0x0001e000 | 0x00005d24 | 0x00005e00 | 3.4639987902407534 |
| .data | 0x00024000 | 0x00a36de4 | 0x00001200 | 2.4620684611252615 |
| .idata | 0x00a5b000 | 0x00001e22 | 0x00001400 | 3.2865964841099284 |
| .rsrc | 0x00a5d000 | 0x000201c2 | 0x00020200 | 7.9177266560318795 |
| .reloc | 0x00a7e000 | 0x000078f1 | 0x00007a00 | 0.0 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| VBENDYI | 0x00a5d308 | 0x000181b8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_BITMAP | 0x00a79a00 | 0x00000e40 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_BITMAP | 0x00a79a00 | 0x00000e40 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_BITMAP | 0x00a79a00 | 0x00000e40 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_BITMAP | 0x00a79a00 | 0x00000e40 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_BITMAP | 0x00a79a00 | 0x00000e40 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_BITMAP | 0x00a79a00 | 0x00000e40 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00a7a840 | 0x000025a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ACCELERATOR | 0x00a7ce30 | 0x00000080 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ACCELERATOR | 0x00a7ce30 | 0x00000080 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_ICON | 0x00a7ceb0 | 0x00000014 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_MANIFEST | 0x00a7d02c | 0x00000196 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_MANIFEST | 0x00a7d02c | 0x00000196 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
Imports
Library KERNEL32.DLL:
• 0xe5b2f0 EnumResourceNamesA
• 0xe5b2f4 GetProcAddress
• 0xe5b2f8 GetModuleHandleA
• 0xe5b2fc GetConsoleTitleA
• 0xe5b300 GetNumberFormatA
• 0xe5b304 GetPrivateProfileIntW
• 0xe5b308 GlobalMemoryStatus
• 0xe5b30c ResetWriteWatch
• 0xe5b310 GetLocaleInfoA
• 0xe5b314 GetCurrencyFormatW
• 0xe5b318 MoveFileW
• 0xe5b31c lstrlenA
• 0xe5b320 ReadConsoleOutputA
• 0xe5b324 GetUserDefaultLCID
• 0xe5b328 GetStringTypeW
• 0xe5b32c MultiByteToWideChar
• 0xe5b330 LCMapStringW
• 0xe5b334 WideCharToMultiByte
• 0xe5b338 HeapReAlloc
• 0xe5b33c GetLocaleInfoW
• 0xe5b340 InterlockedExchange
• 0xe5b344 FreeLibrary
• 0xe5b348 SetConsoleCtrlHandler
• 0xe5b34c IsValidCodePage
• 0xe5b350 GetOEMCP
• 0xe5b354 GetACP
• 0xe5b358 LoadLibraryW
• 0xe5b35c FindFirstFileA
• 0xe5b360 ProcessIdToSessionId
• 0xe5b364 SetThreadExecutionState
• 0xe5b368 EnumSystemLocalesA
• 0xe5b36c OpenMutexW
• 0xe5b370 RaiseException
• 0xe5b374 RtlUnwind
• 0xe5b378 GetCommandLineW
• 0xe5b37c HeapSetInformation
• 0xe5b380 GetStartupInfoW
• 0xe5b384 HeapAlloc
• 0xe5b388 GetLastError
• 0xe5b38c HeapFree
• 0xe5b390 IsProcessorFeaturePresent
• 0xe5b394 EncodePointer
• 0xe5b398 DecodePointer
• 0xe5b39c TlsAlloc
• 0xe5b3a0 TlsGetValue
• 0xe5b3a4 TlsSetValue
• 0xe5b3a8 TlsFree
• 0xe5b3ac InterlockedIncrement
• 0xe5b3b0 GetModuleHandleW
• 0xe5b3b4 SetLastError
• 0xe5b3b8 GetCurrentThreadId
• 0xe5b3bc InterlockedDecrement
• 0xe5b3c0 GetCurrentThread
• 0xe5b3c4 SetUnhandledExceptionFilter
• 0xe5b3c8 ExitProcess
• 0xe5b3cc WriteFile
• 0xe5b3d0 GetStdHandle
• 0xe5b3d4 GetModuleFileNameW
• 0xe5b3d8 FreeEnvironmentStringsW
• 0xe5b3dc GetEnvironmentStringsW
• 0xe5b3e0 SetHandleCount
• 0xe5b3e4 InitializeCriticalSectionAndSpinCount
• 0xe5b3e8 GetFileType
• 0xe5b3ec DeleteCriticalSection
• 0xe5b3f0 HeapCreate
• 0xe5b3f4 HeapDestroy
• 0xe5b3f8 QueryPerformanceCounter
• 0xe5b3fc GetTickCount
• 0xe5b400 GetCurrentProcessId
• 0xe5b404 GetSystemTimeAsFileTime
• 0xe5b408 UnhandledExceptionFilter
• 0xe5b40c IsDebuggerPresent
• 0xe5b410 TerminateProcess
• 0xe5b414 GetCurrentProcess
• 0xe5b418 LeaveCriticalSection
• 0xe5b41c FatalAppExitA
• 0xe5b420 EnterCriticalSection
• 0xe5b424 Sleep
• 0xe5b428 HeapSize
• 0xe5b42c GetCPInfo
• 0xe5b430 IsValidLocale
Library GDI32.dll:
• 0xe5b2ac SelectObject
• 0xe5b2b0 CreateBitmapIndirect
• 0xe5b2b4 RemoveFontMemResourceEx
• 0xe5b2b8 ResetDCW
• 0xe5b2bc GetNearestPaletteIndex
Library USER32.dll:
• 0xe5b4a0 CreateMDIWindowW
• 0xe5b4a4 ShowWindowAsync
• 0xe5b4a8 CharLowerBuffA
• 0xe5b4ac SetWindowsHookExW
• 0xe5b4b0 LoadCursorA
• 0xe5b4b4 PeekMessageW
• 0xe5b4b8 SetWindowRgn
• 0xe5b4bc GetKBCodePage
• 0xe5b4c0 SetClipboardData
• 0xe5b4c4 DrawTextW
• 0xe5b4c8 GetKeyboardLayout
• 0xe5b4cc SwitchDesktop
• 0xe5b4d0 DestroyIcon
L!This ~'m cannot be run in DOS mode.
1FPFPFP)&mWP)&Y
PO(`APFP%P)&X[P)&iGPFPdGP)&nGPRichFP
`.rdata
@.data
.idata
@.reloc
W9L$ J
333E+Ga rD$ 8_p
SUVWt$
333E+Ga rD$
Q+SV^[
Q+SV^[
@u+PVW_^
SVWhPB
}63URP3QURPMEj
URj@PQ
DDDDDDDDDDDDDD
^_UWVu
DDDDDDDDDDDDDD
YWMhh3B
$UQQSVWd5
SVWE3PPPuu
E_^[E]U
SVWE3PPPuu
E_^[E]U
SVWE3PPPuu
E_^[E]
UQSVW}
tAt2t$
NE<0 u
SnYueYE
jEPhAB
WYuNut
SYt3uSV-
QQQQQc.
6hVbYYE
FGIuX^_]
;r>PuI
QR*YYt
t3@_^]
=RCCt =MOCt
=csmu*T
8csmu8x
t*9csmu"A
tq0tk>csmu/~
8csmu7x
;>|2_[
PP{YYt
3_^]3@j,h7B
>csmuB~
YYtaSV
{YYPVe
YYt)SV
Ht Hu4j
H=csmu6~
=MOCt*=RCCt#u$u u
EPEPVu WM
ESx;7|G;p
@u%u$u
E;Mr[_^
Yu\39 ~
EPEPuu W=M
EGE~rF
.u$}u ]uE
u$u uSu
tR99u2y
u$Vu u
Q 3@_^[];
YYt:V5AB
P{YF,t
PmYF4t
P_YF<t
PQYF@t
PCYFDt
P5YFHt
P'YF\=
~lt#Wx
u'V5AB
YYt0V5AB
VW_^]M
8csmu*x
AYYuTVWhf@
3]j h8B
};rKb9
3PPPPP
@Y<v*Vc
^SSSSSyj
;tFtA3
M_^3[Oj
Yu =AB
S^`N`H
j$Y~\d9
QY^`[_^]
Ucsm9E
PYY]3]
3Y[_^5
3PPPPP
UQV3W}
ft;uf t
Bf8\tf8"u8
ft$9Uu
UQQSVWh
[]YY?sJM
_[^SVW
j@j ^Vef
;rSWf9M
N;r7&'
+SVWAB
1E3PeuEEEEd
Y__^[]Q
:zE_^[]E
9csmu)=A
E3E3;u
ffffffE
3PPPPP
3VPPPPPj
F$|3@_^
23G}39
HHt*HHt
<0| <9
!E!EQEPh
;tK+tAHSH
tK<_t<<$t8<<t4<>t0<-t,<a|
<z~$<A|
ES3VWF
E+PWM_^3[
]u[8Mt
-E+PW]M_3^
uQP"^]
t0+t)+t!+t
3Pu^[_]
PEGP=h
EPEP]@
<0|L<9
MJPESP+
VW33)tI<A|2<P
MPESPo
HHu$EPEPhd
EPYMuhh
t]<@tS<Zt
EPYPEPh
EPME,]SVMRPEPM
EMj>ME
:$EMEMu
Mj^MEEEEEh
EPME>]
Ej]PEM
MWEMtSh
YYPEPj[MEEEj]ME(EPM}
~9 tnw
MWEPj(M(EEEj)MEEEEEEPMIEEEEEPEP8
t`PEPj(M
MEEEEj
MEEEEj]ME
E$Ej]PE
Pj[DooPu
PYYPEPj`M
EPEYEEj ME
tp<@tlEP
YPEPj`MdEEEj'MEEP$h
VEPSME
EPPj-u
Ou@EPOxPC}
jdEPM0u
E.xPVje`PEP@
EPxMPDu'h
YPM>j,MFt,Ot
OtFOt#OuVhP-YPM
j,MjXP
YPMj,MJHPYPMj}VM
YM_^3[s
t78Xu2@h
t$EPEPh
!}E]Xu
EPMEPR
EE]EPEPh
EPEP]p/
!M!MV3@]]h
9]t(EPEPh
^[!M]8]
t|xP*YPEPj<MnEPMM;t
j Mj>ME
;t+~1u%EPEPj~M<MEME9]
kt@;t/
2EEEEEPM
j,EPEP
YPMj,EPEPYPMj,EPEPYPMj)EPESPYYuPMj'u
M_ESP,
EYYEEj MEEEEEEPM=MO
8?u%EP
ufEPYYPEPj<M
j M-j>M#}
!}?uJEj
EPMhEPI
EPEPVM
EEPM?}
:t4<@t;VEPhT
0VEPhT
Tt^HtTHtJHt
FEP_YPEPh
EEEEEP3YEPM~ME
8?u'@8$u
0t1HHt
EPXYPM
UXSVW3
t.EP,YPEPj M>EEEE
EPEPj{EPPMEPn
u>EPEPj,M$EEEh
EPEPj M
EEEj MECEEEE
!u!u!u!u!u3}}}}
EYYE39}tF}
`<`EPt
t&EPEPEP}Y
EP_YPM
u$PEPj M8EPM
ME!u3}9}tEEWPYYPEPh
EWP#YY
uzEPEPh
EEEEj,MEwEEE
EEPMEEEj,MEIEEEE
EPM.tN%
u@EPEPh
MxEEEj,MEEPMx
EPMDEPYPEPj(MCEEEj)MEuEPM
uOPEP?EYYEEj{MEcEEEE
t'EPEPh
M:MEREPEP
@;tG9Ut
3@;t(EPEPh
M<}MEMEUt
u(EPEPh
MQMEMEx
@t(EPEPh
M=~MEME}
u(EPEPh
t%EPEPh
EPu]3@Yt
8@u]u]
EEEPM=u
EEEEPM
YYpEPu
tSVEPhT
t'VEPj[h[E
XPHPY>
EPj]EPSEAj
VPPSESPO
`PYPEPj`MKEEEj'MEVEPMsj@hh
tDEP9xVIP
EVPESj
<@tJ!~
0VEPhT
EPEPhT
MtEEEEh
tCEP1YPEPj M
EEEEEPMHEEE"EPEPj
CEEEEh
`<`EPtqY
YPEPj MQEEEEEPMEEEES
t&EPEPEP
t;EPEPj(MsEEEj)ME
EEEESj
PEPj(M
pEEEj)MEEPM/x
t)Ej M
t7Ej M
PEPM8@
PMI}gx
tNt7Ej MUEj
EEPMp}
MEMt4Mj M
Et7Ej M
txEPEPhT
EPt EPEP<Y
EPYPMh
EPEPEPY
EPYPMs
t(EPEPh
t(EPEPh
t;PEPj M5E
EgVEPM
t"PEPj MnEPMM
98t:PEPj
!U3!M#
tq:?u]B
MME3<$u Ej
VMtEPu
j M\WMME
]jdh 9B
iYjdh@9B
eF}Vt=$t
OtWRtKWt?
Y+t*+t&+t"+t
+u7EPEPhd
M<}EEEEE
t"PEPj MSEPM(ME
EEPEPu
+tcAtJHt4Hu
!MSEPh
EVP]Pu
VWRt*Ht
j M[h`
<?tG<Xt
EEj ME
^SVWT$
URPQQh @
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
7nYu'9
YYu,9E
SVW(AB
3PuEEd
SVW(AB
3PeuEEd
SVW(AB
3PEuEEd
SVW(AB
3PEeuEEd
Y__^[]Q
M3_M3PU3@}
3W;to=LB
iYY~PE
P}iY9_t
uVWiY_^[]
t4V0;t(W8jYt
Fpt"~l
lVYYYEE
WPWPWv
whu;5@KB
VeY@KB
Gh5@KB
8]tEMap<u
u39HKB
k0uXKB
TM_^3[
PaY^hS=
]USVWUj
P(RP$R
UPjh0@
t:|$,t
;t$,v-4v
UQPXY]Y[
uUY3@G
9~\u'5A
Y+t"+t
+tY+uCv}
u>OdMGd
u wdSUY
zuxVVu
ptXFVPYYtHptSu
3YY;u!9tt
SxXYM_^3[q
NQSVPK
SDXY3WWWWW
VW3PLB
B(;r3_^[]
Ujh :B
1E3PEd
VWESoe
3M_^3[
ft'Ou"+
jPfDJXdf
^09_^]
U]U]Uj
PY3MW0u
t@VVYt
Pj1SEj
Pj2SEj
Pj3SEj
Pj4SEj
Pj5SEj
Pj6SEj
P Vj7S
F Pj*SEj
F$Pj+Sj
F(Pj,SEj
F,Pj-SEj
F0Pj.SEj
F4Pj/SEj
Pj0SEj
F8PjDSEj
F<PjESEj
F@PjFSEj
FDPjGSEj
FHPjHSEj
FLPjISEj
FPPjJSEj
FTPjKSEj
FXPjLSEj
F\PjMSEj
F`PjNSEj
FdPjOSEj
FhPj8SEj
FlPj9SEj
FpPj:SEj
FtPj;SEj
FxPj<SEj
F|Pj=SEj
Pj>SEj
Pj?SEj
Pj@SEj
PjASEj
PjBSEj
PjCSEj
Pj(SEj
Pj)SEj
Pj uEj
Pj uEj
Pj1SEj
Pj2SEj
Pj3SEj
Pj4SEj
Pj5SEj
Pj6SEj
Pj7SEj
Pj*SEj
Pj+SEj
Pj,SEj
Pj-SEj
Pj.SEj
Pj/SEj
Pj0SEj
PjDSEj
PjESEj
PjFSEj
PjGSEj
PjHSEj
PjISEj
PjJSEj
PjKSEj
PjLSEj
PjMSEj
PjNSEj
Pj8SEj
Pj9SEj
Pj:SEj
Pj;SEj
Pj<SEj
Pj=SEj
Pj>SEj
Pj?SEj
Pj@SEj
PjASEj
PjBSEj
PjCSEj
Pj(SEj
Pj uESP
Pj uESP`
F6Fv Fv$Fv(Fv,Fv0Fv4Fv
Fv8Fv<F@v@{FvDsFvHkFvLcFvP[FvTSFvXKFv\CFv`;Fvd3Fvh+Fvl#Fvp
WGWWCYY
3_^[]28
u^[<;uX
PBYF0;
PBYv4;5LB
W3u}9~
3FSAuAYYD
3_^[28
u^[<;uX
P?YF ;
P?YF$;
P?YF8;
P?YF<;
P?YF@;
P?YFD;
P?YFH;
P?YvL;5LB
Vo?Y^]
W3}u}9~
C PjPVEj
C$PjQVEj
C*PjTVEj
C+PjUVEj
C,PjVVEj
C-PjWVEj
C.PjRVEj
C/PjSVEj
CHPjPVEj
CLPjQVEj
@4MC43@3
3_^[MWHl;
S3VW;~ E
@;u+H;}
39](SSu
]9]tWuu
};~Bj3X
3;t?uWuuu
t"SS9] u
EWYuEYe_^[M3R
Mu(Eu$u u
ES3VW]9]
39] SSu
ESEYe_^[M3Q
S3VW9]
3_^[];t
B:t"Ou
3;tuSu
t VV9u
e_^[M3O
u+9uv&KfE
E`p3_[^
VuW]]Mx
RWjjU]
E;ErGE9Eu
3;Er3w
u>9ur9w
}v1$cE
EPQEPEj
Pw-YE[
USW339]
|^_[]SSSSS]
SSSSS1]h
.t|PVj@u
@sh_tcPE
k_^[]3PPPPP=USVu
]SSSSS
1M0-YYt
vP)YFTt
vT|)YEfT
FP~HZ3PPPPPZuR)FP=
vP3)YFT;t
)YFh^T^L^P^H_[
3PPPPPYV'
YP;s,Vh+YY
@PVWX[
VVVVV3M_^3[4@
BS\PPPh
3M_3[?
sHxP,*YYu
YYltCHphD
d|-tt#
Yt1hlCH0$HYX
4#sT#cL
Y3PPPPPIU
pPW6+>
6K"Y9pt
uTlh=xxPtYt
VVVVVS3xSSSh
;t\~Ht57xP%YYt
3M_^3[:
3_^]Wh
VA!YWh
&YYt#v
"UY}Nle
~lSWpS
E5$E9]
~.8]t)E
WPEW@Ph
~U8]tPMM
3M_^3[13
^0{IAU
3_^]UV3PPPPPPPPU
U3S3@9]
|FVWt>E
t)EVYEj
r3@]3]
V3 AB<
M_3^".
3);ut!}
Y;_t3@^
t,PEP62
Y3Yu0N
t/EP60
M_^3[+
t*EP6/
VP?YYt
M_3^6+
USVWR,
3PPPPP
t,j@C@Ph
3uyA;Bti
3uA;Btx
qA;Btw
_A;Btw
-A;Btw
mfAf;B
GA;Btw
5A;Btw
#A;Btw
3uP;Qtu
tP;Qtu
eP;Qtu
MP;Qtu
?P;Qtu
0P;Qtu
(P;Qtu
{P;Qtu
mP;Qtu
^P;Qtu
uP;Qtu
rustnM
tR:QuMPt<:Qu7Pt&:Qu!Pt
@FA;r3^[
+UV3PPPPPPPPU
;t_+^]
VSMYY1+W
E`p]Ex
tAMap8+
;t+3_^[
USV3;u
G;r3_^[]
RQMQVp
YY]UWVSM
lewuxutuzawudalizatetocuyijalateneli
Cewidava
Fala mamelapu miyayisapugola ketufiwakive hasu
kernel32.dll
GlobalAlloc
Ropotokovowoca gepura
VirtualProtect
Fedipa
invalid string position
string too long
Unknown exception
bad allocation
bad exception
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CorExitProcess
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
{flat}
`non-type-template-parameter
unsigned
short
<ellipsis>
,<ellipsis>
throw(
`template-parameter
cli::pin_ptr<
cli::array<
`anonymous namespace'
generic-type-
template-parameter-
`unknown ecsu'
union
struct
class
coclass
cointerface
extern "C"
[thunk]:
public:
protected:
private:
virtual
static
`template static data member destructor helper'
`template static data member constructor helper'
`local static destructor helper'
`adjustor{
`vtordisp{
`vtordispex{
const
volatile
volatile
volatile
signed
double
<unknown>
wchar_t
UNKNOWN
__int128
__int32
__int64
__int16
__w64
__int8
std::nullptr_t
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
SystemFunction036
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVinvalid_argument@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVruntime_error@std@@
.?AVoverflow_error@std@@
.?AVbad_cast@std@@
.?AVbad_typeid@std@@
.?AV__non_rtti_object@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
OpenMutexW
SetThreadExecutionState
ProcessIdToSessionId
FindFirstFileA
LoadLibraryW
ReadConsoleOutputA
EnumResourceNamesA
GetProcAddress
GetModuleHandleA
GetConsoleTitleA
GetNumberFormatA
GetPrivateProfileIntW
GlobalMemoryStatus
ResetWriteWatch
GetLocaleInfoA
GetCurrencyFormatW
MoveFileW
lstrlenA
KERNEL32.DLL
DestroyIcon
SwitchDesktop
GetKeyboardLayout
DrawTextW
SetClipboardData
GetKBCodePage
SetWindowRgn
PeekMessageW
LoadCursorA
SetWindowsHookExW
CharLowerBuffA
ShowWindowAsync
CreateMDIWindowW
USER32.dll
ResetDCW
RemoveFontMemResourceEx
CreateBitmapIndirect
SelectObject
GetNearestPaletteIndex
GDI32.dll
RaiseException
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EncodePointer
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
GetLocaleInfoW
HeapReAlloc
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
a6"Av3K,8k0tRSj5
?K` hK
*rOKRIJd
.k+{T]S,^
n.i!qkBjz#
.zLhgXQ08
O$^tp\,
k[97v_8
-}j|=A
[rG]P 8
xo&)&UiJ;0xO
mHWXEkl5ql.
kl~j)Q~
qlFg!mTur
S8wp:8M($..
dS)#Q7
R`Y^o%yxiT?+6r
}vv,I+
R`Y^o><6+sG$
g|ffz:(==2
.sxc\5o
)UH]mw^L
_d.TM+tyR?"FPG<Ds
!#zwq8STm2rnE-
:F=`d%z
8Dk>PHfnN
h=[mI}4
u}L!bB
EZZkQr
JFwK^)Kzy
Au:_<&SPF@i
yq7gQn 4B?>hM~
|VXnBh23r:e
7jirp#
|6OhA@A9e#m
ZGOZ:Ir
io]oU!
idR5c2<
R>8F1 #5
)r>y5;0\+'Rh%2-_
. S/b?
B.kk`}E
t2m<*i/wQw2
Cw`l=M
N8^E\3
Yd{VrF8>E
}JTbqD
Tm2.{' {
PjB&h4
$gKh-K
"`!iilD(
eFsd&Pm]-|Q/ U82
yMkGrn
Tm2.PSkl;
UV(w#WJ`;Og
ErFL0 b
)"0Bgz~v
L0M/"Q_o1G
Cn09v!r~ufU
OH@3Ez
:GW(\/6
M4eImk34.s^m1PFcsTmy;Y
pM6fnb
_E:fPN
y2U|O"d
|\C%6%
Z%Y&Z#.Vx
".P(79[Z
VQFWo4
}lvqf9\
Q9F;'UP
B}Qeg3k-
S-e,a'
4,K,",Q
icP{uN&LR4b
H(oOh:/
g!QFGt
{/<Yq>9*
t1f!Lh/1
NUsEiv;>ws
N:BGmn
0R7n<^A$U
Qz%n(4
w&NKwr
-PxRJDZw.-
#`i||J
H\T#nf\
%fgz&q(
Ufg8F'
U=nam\aM9
:Rb@e+e\
M7SzT9;&+
z'K20^
cE%*yt
Nzv>KFb
?fR44b8?5
4/b&mF
nIFg(iH]:
/7|H("BM-HD
51+?[
?)T i"M
~*aVO|%C#
Z0fo/P.+R
N d+:05
\Nk6p5R0v
-S4 sI
l,{y?+
IZ>"tY
FggzDjs y4(XsC
x EbYUP
rnl]Q}Lnz_"y,6
gL9jZ/0
}<(+W.2
MQp6=:a
4kv"Xcqi
y}x T8m0^(
yfjs4o
x:TY_<EEM
vVK 6Whf
$2R X>
&kgY*n{xF
L1V{[do :
wxaIdB17mjGz)z
3g) H0m|&5
3 5V5n4-
YoR9`\$(;lRJ
JrxqK3Wmj
d'>8/r[h,LQzs
GDY@?L?OBMg4bn
Td/kU_'r/
|@m1G"M
^~}6 xC
a(c[!1f )
)S$z o ,n
<_pBpZ%
V*naEk2!0J
f$\[/:G
C#K")d;qM
.Rd7kki
t(z*/:
cN@vPZB
1%0 tU
u{k^IHm
HjVAe^XR
H8Ch:Bv-k
h.S")U
&g 2jLqVSNc
zm7Y'o
XB3k|xDZV=T;
;86arF`_*:$r8 6@;D2
knv%M
y|Ob|=
a4E.IP!v;6#;
qj x|>
d;x/"qT
E:o,XrTlr
_STX6~u
do$i]@wY
4W+i:-9
nnMV|Nh eEx
K7"$y*e
.w>sgX.
n&jdRMC{gqV\'
D;+[3*:QT
:4(M{#
max5}
.QE3<<
%X;+6(t`$s
ss^]V_C1vbbMJ w7
]bg|1Yrim
'5sar$)0Y:e
FD:3i$
;&0]S$[
b@ -1"alQ{@|eC
*kX:2\
tYto.%PQ&!
VN[ouNNyd
&0*HohA
7u{tg
#igFr&
$e@Y]6ld
w'9Fx/k
SR<T>5B jn
bi{Fk%n
W&hlP_Z
Iky${c
BsLuMC
]3;E=@tR.
/llR\I^g
-C/'/;|G~pk"*=
VvP`FC
1TG'B$.4NAl
Ws(yGv,D
.U3J3e
MdT`6>Sy
a(QO!V@X=0
]gYn!N
Z6Z E_
_e=l4anD
(`eCbi
p5U?K<t)G
<kK' ZyZ'd_:6/
ao.m&C
E~kK|f
=jK,/TzM
S%hXnsD
^_QY<$
s'iJ!v^
cH@knMgX
28"-zoEkum-
A1NK{dAE7
S[#XRF
R6x#(79
3I0w&d#!
s]bQzowo2^$
-{7R!I
0BRGn8o~
P|%J\uo"^Ua8
G9w^uw
n_n[v.4^
="vL{la
M~4GUT
:W-PC6*
(F, "q
X6F2P@n
:W\k{\
=@^;q0iSd\u;[
,p]_ruX
a.%gx uxa
6o!d l*
>-zP2;bR!IQ:W
^@CDZ0qPE
.4`Pb!F
t60c+<
um>8t5`
PK)!r%I
Yh/)6<kV%sW
&{>OM 4 E
J.Ckcus
VM^mw<W
ne|\&cJ_|!-:+?
-$;$!K#&
n^]{;|bx^o:
+->S)jB';M
aj#3;#
R>!EOMM
jEKw}tR
RHwiZ2z\b
Mq5%< 3F;0
%E3-}H2<PC
E=j,Hb1SCxuq#
$)LN"H0}_tT
%r &1kS[
F'H2^T?:|
>j'%}W#S
@=3%b1%K)#r
y]J]w'$8"9
f^W0P7
9CH\8BX9
DuG^u6
sgHy\/
!Img':+a
1Yz+QeJ
3N .wp=q
HW>9(G
+3>iOvC$)]z
{K\b9ub
Txy/^5
SYse:ym
^V?E$S
q435i6T
k2Si>C;8h`*2!Bqc_BEH"
A_$C|\
ld WrlCa
ww"d4lj
BgEXdY
v\~Hsu=I
>pVdy2(D4
Y9cU0L5X
&!J}a]u
9IpwWY;
y ^<nY
<iX*X]#NO
St"xJY8t{\B6
bo;47W
6`>_B{g4
.k~i<Sx
NsHg)Z
m"QCA>;(]
q{8)(z
vW$]r={?f
9uv/:.l@Y,s4R
"S:?TivrZQD-Q;Uay
a2M@0D/
uE(;;D~
'Q9(ZQ
@)Jgh{4|
7> }\ENJ
SZ|c=9
_G_4]X
FKf)R>f
&O1[UJa)6a
|2~JBj$Ovk
cRl X^2n
(8BuX*.@gho
11UPR;QHtOi
Q8WU8 n
!\9Fgs
/?2b0
T{ >CI>%
3&otTF!Jsgd.H
NRJVm<yF
HE1uYed
}]N/8{H3:>;j(
{>V"Pxc
R\yh+RE
;vf?F$=Y
,VW+hY
dZn;'=B
$`$lVo=nG@?G
Kt>GYC%
ZH~PBE}
yBGU!0 H$yk/FcPD
DG"Dtz#Xh?
n0M?b-
gj,%e4qi
eQmB+s
m:CDy_w
ZZ/13,s+7
FFtwR3
=~iw0_
<rT<{i
v*djK+
!OFs\~)I
:} DdN
.u3SDR=
\X*k+xe.|
?"!r@9
Sw9\t}
K,dX-t
>y*SN"."1fxK
[.ZW%;g=1`M`Q+
Y^DAU /&oV`
TdI8E|
V]1QEm
jEpxqtNu
2p"5&V
uk`4QzG,z[jI
-#Uq/*%s
'3h;b=(i2
c7](,iA
i%|KB0h+
7dy\cC
s&^@IkW:|
>E'bujR
g1/_ J_m{
\U&{?<5
;bBR'm
uE/rc'}o
gGX?bMs*
ZA=_fEt`
t("\d.x
`]k,#<V|
F'FK3n
v%3cjIW$_
! 5}-`fjJ',)FDL
s^BtUz~2
w06m$7
>NSp51
MYg{,>KY
:vsb^'SHf
&T_HM!bu!oor~,~
n8{~B'g
9>%Q}Yf&yC
61w(rD
) ?SZQ-^
FmX'rY
;: 3c{0OiU?
@Do0B_aogE/@
/u0O$w<Z,
:V~h!s[M
-/hPY7
.P<kK8Iz
Mrh[a.6
m1{WJ5V^T_th(}xh'
_lO;;Ar
+1KOK7
v!#fp/h)
aS!`n*
4(+n}0%>
1&E:~c
K8>Lw.f
)%l}ECNUj%-5kdz4u
VY}2|?;LC!
He&)V[
yi:Gj]%
k>K{!!7
o9X1J$
y?De6V?
(F YWsTD;iri
6}@Z_c
.R5#MhR Nv'p_G
l|>RDX
|}D8usgvg=^-8{bd
T,@*hp
i=jw#e?
?}8p;
57\`Jn
tMEpF9hY
DVJ_ ee
&[1}n^06
GVAvD`jwI#
wQgSTGI
_4WtW~JS6
=X|hs)k
uyGzNgx9 a=_
Mf~[*nySp]J n+E5?\
k[I Jo=
&g+HTu
m5%:'o){
L$_45f
/#?^b\.
*3;m:6]-hJJ
]zy})Ey5/2`
&F~&(LS
C)"71L
8z;U.]D
!.di6-,
1dfpMZF
w2/~[}R&U{
L/A`5>
:DZ];T
F4<&r"m=
zZHG`~
]937Vt~
EI_W:#J
:eCbAQ
onFwnn1|
5j|=G@t
=7Y@7j
hig*HD
2'3bX*~eRp ,P<|IH
$?D"?)PY9
Qlc'^2
*0@gx]a
V24=nL0
#nvV&6
So*#.\
v|4z_xPI\+3i/7
.O']&gVS
oA\<oI.hDD
ok~&@d
#?YE]y!U
}*`'kh$f
11t6OLyOx
e-`jbBy
"OEh/%Kh
`MdsaMs&pv8u
7fvv,_
-Kp)m[
kvdG`W<RAD
K6J-bh
OI7+>I>
H4M=e*M[
daFY+"Ngn Qb
}!`gAC]5
hUX*aWSQ]J@<js
vg JY2
zoD(KyRe~/
@D 5p]H@SB_d"r
!y'd3J
hQf54f9
o559(dC`&OoYOV
mB %ouPH_
4lQv(a;
M|Gi0#P3L?F*T'Ne
0myTap"7I/
k3.SlB
GVdLg?3~m\
imD$Twq+]Zh
8m4n^Qo^&f
6v=c#-B$
DNZaK>
B:19^/f)@CR}Uq_/p1<
j>p"[W$9~|
, lo7r0M
&S=\m!s
q#6l3/
T/no$k"
@^&Kry
oG8{ZVu
?wAb!B`
eD,c
vI1Oy(=HN
<{5)4szR#
q;K"G
N|9~2Sv\j`~crp-\
,/hG;4zu`
av*ZvY
jK&ptS
Z/cocs
<!3 :G@N]
TM `TE8/
xIp$%\
I?|E?;j
21/yL6_'.?
7&U2Wt
fdj< !
zpd+E!v$
..YlM-=
I7}j_c
MUtG<E
fH2Yx
4^E0hM
-&dt.&o
'3UARxD.+M
,6B#Wc[1WdB;d;._E
UW]`nA-I<"
|Ex)"~z8PR{5
sL3zj*
xAFrO'p
"?2wYvH'
u>a2SQm
3Im*B0<
teK<yND
$*{tT)}
[Gl!/0
5RDJ8
4ck@CP@S
-&P6<"ni=fz/w4O)S G
lI2ije
'=r$U3o
e9RerAi
S1Fk1DN
jpnbi7eR-vK]
<@u&Km"F
E7V@ASWn1
YX<NsyK1t(
%P@>;fY
V3fwI9$G`
T)7Z#h
Jn%<pkhaO
UmVI,Vp
ayAaw%=
a}OmE&ad
5"W1Pzs_
h8K}!yI *
rO1d#;
MB\;;po08}^1'K)8w
2_t3[M
,x5rluA\wp
,&M\09KvD
PK'6j5/
z9:yr,V@
M}lT)G2!
.So7l$Fo$
T}T$ K
jeL9oZ
mAB/#W_=C)I*&RI<T
pS8_~^e
ebX*\#
fOI]&wKO &
dQP,HzoP;cQ
rQTa4+
&1lN'|>U
I*f8*]1BUPE
y"He rsAF'
5|=}L9!;v
eP}>?c^
Sm|Fj.~jJrH
C=FJ9X8\
tB$g#Y
u7e~NK
n?>j@p
LC5^yNA
uBl]V7E
rW{#!]M-u
Hk/Jr!,cX}
W!1UnF
!^7I>k_XnH
m5nbHeX(a<
|dxEk"
jtSV06
Z"XQ+b9_\wZO?
EtjA5m(Z%n
SQst<z
+^_MO"?bzZcJ
NP1O0@
L<1:{NW1MG'-Z S\")X^
>#@WVC{o
VmPGU)
`?$.S"{Hx
6Ps>mk g
g\5P$v[\3''O7(
UN%k&s|fjf0
0(m,j1
V<%J^fq
cZAWD1^[
X-4eLn ]
M)c-L|
9-O L-u
A+X[3J-,8
usp9u=
jEJZ)H*)}Iu&
) -]g'B{
VGG594
U>bZ'u{
OWjn.vj"
%!Z[cNS>
h*-9%ucdpsG!r0n
n{mw1rO
"G@~ZZ<G+/NI
p6vn0EpM
p:X.hKs
RCnyb;1rV
h('t]:"tDuohQS
L6}6u:
Hk\CNJI
7z$W0I&
/Vmh9 )r U>
kA`Iw_"z
pX)4/';~
e&O 3Nj
hv'gbuO
d]p;!O^HH%
hW(i(^
n|XBe a&
$Zoa$]
6/2(+r
#n\U^Ts&82be"ZS8i
Y|iS\J
?K YAY4
68NJ 7O>/
c:bEKTFY:
l'%CthM!
^!iqkv]
-\JP`i"
/6QC0.){:q0s,]/0
A?$]6:
8~}O?(jN
c!G q
)b@#0Pfa
:20u%XpB rG/
&{9vqDe
b%X9iMee3|
'_ ilY;cL\
"wZTGn
GY[M)8~)
Ac<6)=f5:8ld=
1lZHH49
};67#q?
?zippw
JJqYRB
olMhh.?k^Dpe
Lyv-NNG
WGay55
YV+(f|XM
O|Pz5c
pCN1ZQn/2>6
=*j/})
i0;+! $
Q-oToy
at8B`Iv\
}! qV}f:l0rn{S
Sc#n{M
uV0p!f
S;y;b{.
'_%bl&5&
ZJ#OgBZ;
aj~}$pxo
guj:fWyc
o6RHKh
>}#?YPiDrj
REy*k~RL
t6B0W$
OG*>w]f
{RSlR>KPz\
KXhVj\R
&-yEbv}U
=cwn*H[
A+9i2aZ
_[+']Mu^
TH<ry4O|rIO@1u:
K?-H`=4v
ELgwd4LB9
%_Zg(pow
WmRD s
2~594k]xX
o!yJI~w
[y\cRjQ
x9(>q(PBx
E+V"J].
^7)q6XR
ST%Jy{
$8BoK/4)v0^
@&ZVoP
*HV1+!<L-#]
),".U\
!hGf!;"dw8O
hzi*{r
IozWwM vYrF(M^p
UqVB4p Q0l9L
7gsY~!D
xQK-}^
R#FKOy0"P
<v;\9r$3
./xA1Pz
A^,AHN-G
KhV)`B(2R
+]s,t/
Mmv@hp
MIg}I?%n%d
T(n@\{
4wmdqK-
Y6#6j9
rE`!Q^v
pWw-B?Koz_
ZS6uY0}
#[0%tY
ic3#)fX
oy%o?X/0
gp$_iG/5
S`j'A]w
N%%Rk{
;%FKr{
h^*?_w
ZT4j3qzjBoSx
zj)pLE2l
.KAa@_U
*aAz|n
e^n@{tO
F'9a%}X&3V-
?Wxnscls8^ L
Z1~ /Kx/z
\o?UA@CI\
0@BVY.0a
il5{|<
SA?L[$d\}
r:e~)Z0
hMYf&3}**
9OPjJdaCLC
--F_J@+1p2
SR- 6x
Z*?Eob
=FXCDk
^I>PjO
DRV'AJv&-
ZuA^%?,Y\$A
y='8|}wQ
e-_{P9
5g"br9z<Uv
p'jOv9U YN
bDV{t\c
Ij6<Sf
$OkBA-P
>48.a>+4nQ
Nn,rZ,
V4<K)*ik
9lG5J}=qAjPiG~A(^7_X
e*E^]6vx
#\G}T|
8wHvl0UP2jL!
'O#$@)nxSJBJL$u
7uLT&XO
{Yoq;'
L.[fIAT
=z^!Oqm
/_/S=H
582>b2#3
ToL:]i
uvEGClo
gsCs][6j
kUI1s^
r)+U/b
Vz3<O|
3zyt 7w,I
XO j%ee2o)AfUL
Fm0~|"r
66OPiKr
e qrZ6
Ipv yP
E|qRWa>/
QZztrI
_*ykD8l
V\? !aTI>
k+JKQGV
XHGba"dr
n?.|96l*vwZj<1
f",AxB6D$C
r y42'u&-
luxP^|v?4kVca.
Aj@_{:
27Pp&9
3":\`a 1orF
mY5]!'B
( Ssj$lC
-fD|W,&@~kwB
O"rBbtg>Nu*`QC
:bX/'V!a
7AQ5 p<
%fwma4T
!c$+NM#)1
\m:7s$
m4!]va
459w*q
~0JJU 0
u0}0{I'$
$%$qe]A
obyKt][SKC
7$:"/jGX]}q
t82Dvd>\
Hz#W2I_Y
^`2;^Z?Y@
:=gZgBi%
!U[zc7r&@
|zFjq'Zgo
tb^jIYgx0IAe`^/pyAp
4%. !j ~xZ
z[R 9b-4
YVMGJ`Y_}Y;
^w`q2nO,
{l5XNoZ
pn'Z)F+
{gZF=xU
G]3=f;%v
%7V;>(
OGD4O)d"(F
~%6m,8_1 T
zk531dV
5n[C*["S5
xND]|,w
c(+@A}
`*)g.Or0{8a
w]`Of
_ 6 CYJYa,uuqWPgR3HuZ
z9*sOQ
;dcA8CE.
;%Gj3k
I7)82DZ
;wx`:;yU`$Oh%
/>@GJ?
)/JP8*8[g%Er
PA;}\Sgh
Z4c_P*NL
m7mm=X3gRe|UK4Y@
XQ7RAn_
S(on/Wt
1spNMF"1+
sPetJ$/E
C?4L!R
8a{p~5
Pf4S*4qA`j
v 4>/;
Voc-'h_hQ
ki1M-BYb(
Ss|15G39Oj
u,uT8Q
ZbmbU;jy
8/TBS}q0
fbGFh=
5eKiw?
I^om#Zs2XA2
N3|]SD@
Q5?!g*,`I\C-&+-guc
x1oj>37[x
n'/vWAkd
t_]0@(
@6_1"i0-
j${Sk`ZBB7|E
{T(5=^$
&"%fcaO
/9!koR
aHD}9~SFr[ H.Q
pYhX.A2Ti
;}]:[M;
r<s R\v
GET0}~]
6cP 88DuEQ%J&
5e6;2|O
$VKJ0?\
0lYU-sZ
6_}Jnt4;
667}$(
c.9"Xuu{
tpa$()4b/
~o3 n.f
]^JfDX
{S1ZQ>
z]Z\q#zKgB[
}5iR}z15
HL}oFg1
i#kb|Of
E"uPQ>oDaz
nRh+/X^
45X2rI,RL`}9plU<"
1BB=H,xB@.
A^ }1pNSowuFL)Nz
U<IO&hU6
K +St2rW $
1-',&M
$10cTX 7
6?jb|D9
e.!],R"
1/@ciF
]ucf:V %Jv
8]8_exVf
nUeMS-f
[WFND^[k(+#t
_09|GTK
@Vp{Aj
cN Pc>}
$~|[`}HK
xq;oa$$~
j7`FLXl91
7'#Z",~'7C
B{Xp jNX
*/)a<H[
/$YR;[
hfe*F]g
SkdXk=C`pM
,@<#f>%_
/[o]=HxN`^PzTo_e}M*4O
dHbkhD
\CiT8l
3B_Sji-
;qs>lDc'
C{Yr>W'
23bQm:-F
991\]oe8UHl9`
5@+Myv
Xa\)Lw
HHMdxo
VKLx@n
nfGW&P24
/)$EkqzOI*
9R^hKI).8{)<Z
x$%U5g{Nt@L
XJFmbEQ!s
atyEbH
CG7oU^H'n
b-wk,}y3
z)PW7pn22mx
#a^3YA
/ZvbdHs~Bd
nrmJ2&
`z[.pc
,l0(>UR
>jYDI['0&l<:696Xq1
eT$A%PRMD
OD;=nEB
[_Az)m
%q3S@K
8La?[/p(
*b|KjS#
ft}r]U
q[5yj,?G
KztRN3
E`$h{/);c>
/@jMT1
M7]J:<g$
K )^"N^9b
PJ`|MD.$E;r
pnD )3[
3Lwl2hG4
XBa<d?6E
;?<32|
z5h3Lx
c5x((p
^E-*Akr2
BbH<G)
<($KHI
x(p<Y}Y>Gu?)ld
ns<q2@E
cifFUy
g@&tT&A
<U9-cO"
B&<A)H
zDVnD2C
kB1$-\"qJUz
LSpVBZ
lt[q$#Ur&[ULhH|q
&v$vdG6/
if()-#Z
q2)=vs@t
Qsd)ghCI
}w[RM<s-\1fA8<Y$#>
4C1tTIQ5crk
}z C/c
Ma5f9F
!),="}
t1KG7K,uN
*LEv\~7J
rM=@FGPB
(ku? |C*,D3n&Ez
Y{>&].
> nQhv
@BG'J'
P-{K'~nh
E XjphS
SV2h7O'26F
++\T9p'Dvj
/#M60m>?mlpv
kD.A)@m9E`oUX
?3.*<xz}
M6jd'q
$G<|b&
[@Ow6fh1F
a0hVpB}K
/(\%l_<?
78 ]`,
i( ~3:A^
!2E>MJ
SH?-$U>
s.^aL%xi
k68=htd%
+t(Rvg\nG&%9M8\
N&Z")u$@rRR|JP%
b'Rm4x
rQ.C0|6\72?{7l
COK^;/M
pV>q8$
M'hYik0fxv>
L6n4.P]Zda#b[
,A 5:1oPg
C+9C]![XR%>D '>X
E]I;|7C6_Ju-0S
:H!PLFC{jb}
XrSfYm
#}A'~B
a*:*x Gl`z
3NVj8.
FZPTV:
/'h/'D)Ov*[p
cS:[~E%J`S
juf^jjUWMl
`2,s%+3M
9:qLS-8
:<r-^rw| l|:(p'Y>7~%[
m]*"{Bl"
,E1eHI+w
qlYs|o
X_KqraP
;u~>IHF
GCDC_&Z5
O)b'O
:A;q<';G=<
z&y!B{LM=
MxK|ZO'^
E~,WP9+
1d&Cn*4
Zf.L/i
J/FC'nw@
S9y4Xq%WSB^X'VPn
P/V,dq$eG
**[1@$
0"z=#%tX+f|
<<>Q&3DoRC(6{k
UMLu6v34:
-UOA,X
#oKdD%
}S|c\6
#Y"u2u
SBFe B!
4f^puE$0
D%ukn6
b{,-I",|<[2G'b
}0xABO
{2VoV">h=
$Z)A#5
#^#Y;4!+
Y(U5a[
2Ha8LVY
L:$<l.w
[qD[s3]8_\
elpv1y
bw0Q}AO:aw
A9(/# AKPey}
oSj| G7"Xa_x;
N!L ~ v{Uq<J*
VlT$F(
foy+Y wLLDC
Jw<$]6`
'tmA$>3
w%aE%X
i}r9} 'w
+"VJz@}_T
%3:m2^q
nt(CoF
#z)9hj
&~[Vp)(
T`@JrM!3
$1Rg*X
y(04==.\
Xy,(^Z
#P)*1JX9<C
"*#j%V
U3sa.yP'~
}d(S'1/x
ylw'Wn>>
hd" atW
;Bec[^
uFaOy9}
+4vUcfJN!TXa
^lu\'2}
=(}0X)
phE-?R
X]sH {
N:L~O/W|w C
`N%]h'
PAUCz7@]
Dt-FyCJ
$OYr`)
k2\WKG
EMwcV#kX
H6?tvH6
n^u>!cF
C*gQtVpNz
wx(H;_Y
gl{n`RC?gI
15#rJb
:2{"Z+ky`8);V
l328(h,>
66-r#Ie
Pa|X+Z;0]*^`ny
mT:PGY
?[jI\'
^PS~mNg
3j]mw`
ta~3'\m.
bA0[4u&
-<UT+q
fpi0"w
H^p+`N
p"j9<$M8LCGih
76a$hk
Cz"fV3@,g1f
e^>y\'-U\P
}z!20O<N
6^,nb(E
g$U+N]!i=H
@Gw!^y8&8
gKP4\.IobNjE
sFbl@(
'u4FH.9N
?XoLk7G
7GB\Ik
=59u3-
>@&RD,
\c0' 5MliSAI
&iG:b+}
?!Z6vKj]
@a{<cJFCEF>oHr
u,wLN7
TC#+7;e:i"
5I:Q@4~C4v
b"CguxoZE#)R~
/vC*$~`$:
)tCi=A$Xs
,[i[2T
;^e:/O
*lnY<C+uA3:iy
(i(vY(Fjr
@J\qAKBH
;'MWT5
)`&_6jSevp'RG0O@
C^mc:]
z/E/>Dm
=z4.Hp@
N]u|o6gb
|#D,"@PD
OQk*^%
.##KeM
;{7B4E
\#t`24G
' Spxk
k*VhPDW [/r
D h,AA2
zADF,g
vsjvk0
1{{"m'7
qrf.>]b)J
VyN(waM}F&
B7.l9r:y
J7@oZQf
5dwTT+
G9 uoao
`B:W;RPeh
2Qvfq7,S
luVC)TG(8 5
%ND?rH9$'
TpA-J<qE
^%q],AO
9IrG/me"
%oF[YO_(a
YBVlT4iq77?
^uGzH,rip
awv7oc!o
|C}rxd0D
E>+,6j/yGUq<
eTgRvI
3|kGu`05
%C!+.S}
Zlqy\N(=
JV}e^UQg
!3K1(]ule
>U~3*2gM-8/xPqkt{Q
x~p]CQ}%
;lW?;N
[3+Q7\G
L;kCcE
!.F\}(6
=Y(uz@
doZh*@1
]7yB~{p
gYJ %~
C8?$>2bv QZ(FUjM6==WsN
XUH,ju
uXx_1rmJ
=~k/y_3
C#+G$+76O~m&/CY
0{=O1x
(sa^Uz
:SP*%v#V,3.
U[ }4v
Vc5AsLJF!G
O~LpO^
qsD:|n'"ps5
$#czqr
q'!PC+
`HuO^^U
InE79z~@
u#&1}rN
DD*6^-_v
;?<$gR
\rv^1}3k~F
H6YwM4
DXI4?pCnGfF
(*ZHh?w
EONku{aS$
9F[#o?-B
kw7_z,
r8(FFp8
Llii9P
1Q0~;|ue
HNwU-5
!^nNF ~`Is[
r8$S\q8Y
(>SQ})6sF8
!7%q>J
\nj33(#W
aaM[79l
/]Hz5X
_l+ZH[~EI
<w6aG'
N9`tYW
XeIcc2(f-DO*qYmV2
Q#3ma}2%Hn(SvPE
;iB2{y!
$qW$@5
d~8Ohw=$3g
3vBq"~TWEg
<fZhZ+0_x
A0pKl^
Ng<WZF
RZ@/Y}ptnf
QJ,?}AP=XfaND
RFy,UmtYW
q1+&X5y
u!SpC+h
z!>1:-
g~<+-WI!
:eWY/ 6cJ
PEkc3y++
Er&^xg;A3g.czi*
#f#v?c
a<u;JY,k
#:7`9\zm,
9@2H2`
7xA}6r
M`,"f$S]=P3
g+U.JGWQ$]med
|!A]+e
;+Xy$)
//o/ _>j
%8k!@>
*E9qz2E#q
5+mHExv
fe_ Dw:`~:Zr
9@p,rciq{SP
>X1DEFS3W7o?)
!Yi4{'sr,mT
>Xp%:l
NSv^3X
>xXk6`Ao
I+=A.\Q<
bq0*:uULw$
W:dq.^?<|@M
/5=`EE
,XLujND=
>0YQr1b
#sQkY8Lb
Q=z"+ih
Io9|M.3`t7
VZEYGjy:!
^ ~r3 ( tcpUbo)P
<OEA2<
,09m-kW
O04]<@`>O
#qJ8f\
(O$88=j`^
?=CnO"
dBp-IM~Y8BiRv?@Bv
\p%VU-PP
X)s]F*
Bv(tH%/d
mz8GGzSk
X.6LEZ'j)u
i4vkRD-5>F
oTKZ v=l
q_nt00C
)BPGY*
-[{_*;/6
|V44:@kV2
?,J/ri
Zv' T5%
&d40t^+_
:wdI!f
1v P^!|]
Q3Cff-N
FW^iF]}#(
W_zqkH
nfbd-:_l<R
wjDXObwK0v8
)XGWopHsv
brLlznC
!U+4y~PFJJ
q>(;jC.}
r:Y2B.H
Qr1^,#Qm
y%1QP'
%SEFfB
N'gZ7q
k]^Dc'e9/{
@Os!RI'I
X)3<\!CR
R@GI+&0
}`^NnuuGKK
EOPs$r/c
/r@yx}
%R/Nq0
3_UU4yz
SEU]+
qX^PN-,>
xJ%R!yu57d O\{j=+3q
~Dv~e##y1;z/
p*ZE<&/E
r|dPM>2<ipl;6k
1'mAS'Bj
`?>~@"SI
Ch+xO+FG
/Od>GNR^oc
W)I2E>|
Mm5P$5
6n{I=,
qpu9{Y
7Vnz2[Pu
j0Fg`Jyz
+\n)hJoS
L5?Doh
g GS&A
6<0(>@`HMP
p7 XgQ6j:&
"<}N?y,`
2XC2.f9m4(
anUCdd
U$R`.A%MJac`e
.eS`mU&^d#(
S:TT0t!iP
??&@8+)x_
=y&VQuLk
R+&/rOv
Iq3FLWBYH
H{"9Sy
DL',8Iv
#{3l%]Ka_"
YP_3Z#u
Hj&E}(
~y"Y]K
t,b<:t0C
T/C_g%,1PH
r7N y"][EZ4B
Q|`uM?
/1AQe}
oU/K/r>
O/U!ezFH^K
"La$bp
*[r%}T
o 8I*msx~hyH5?C
M"h\.Kq
j\8#s!'N,{yHw
^I`*dS
]Y,F;wV2
9(}-pSno
E!M&|X
H[9`AxYM
Jj-6&*l
YbK3u_9
N2}Xe4w8
sn#5i;4vm^
(,Fqop|
=cDU[z
NhQQ?TN>
g3+5NR
JT2`Ih
3^9;!!
+,FbOj
]@d`6h
8N:^l$o
:8=PO+pn
nab,b uSF
'-Ow}Kz
n# M+tP[>K![u
%0fu0]F
8'66sO
=_"(O3>/vYFK
hsHq;6C
UH> (w6
PF$q^])7
.7<8/P!m
}<.OD_=]w
Njx/xn)@6W}01
[8VBU-
>~b8]Bm0
V |_>k;K,o)
`$e@lZW/*
dIH]i+$5
b@E3JuZtdWwj3?
]G2VmSb[
uzXI=|.
EaRtH5Nn6
t?@ LLq
JI$?t\
^?v4t5mk'
(S{S)|
6C.,7Mr.
tu'?S.X
Hd?]:SP4+'>qH]Nl
>wjcuF
a1:sL#
j/sIhe
PH[uhh
YNq{'7y
BGOg O
DW4h_FX
(Wkck::CL
+2G^?:w)
GG\ksl
i&x92gCwA
5$vQVbZ
@riq1,T
/@YkZUER
uFm!@/
Tq'"3Xy
%R`d%O~j4
I-iK^hu[fa|c
`s|K@|
L^Z4b*
[[% T,8
Oy]XaLsQs'
Iux9wZ,
~\jqv>z
ekY)`D<
Cp*n-lE*
->"{?$
:#+z!rw
;L!,TJ6Crm
sL\Vt|3aY5
,-p)@<QiYcFm.B
ko?4=dzmSBg
fg8'cK
vbt/6y^
&X2sT.y
`/Pq]]&
.D"M?xB
tcnh+]wq@#1
OWpNJlkFP
/~?2mY
e#Du JJA
_s5ja{kE
ZZ+2?O
bx>v'{m
RCUK42NX2
x,l_ikeQ8IPDW
i_b^_lu'
ernrNf
=n^{"7
FByNF
k$WSqO
1 0Ma2%
jJiBHT
8&LW)ICug
hZ]<;%I,
\pdYj|S
^6?4;>#`k-W3{Z
dK)rY,e3BJk1
NO*eBq
s;cgUI
Ro C2
0 Sv@rTJus]K+2gj
-cGr!z0z
"E+d%;&!2$7#
P3SQf3tcB
btWTNzY
39'wl1
he5B0|%-m9!0
c.Hq`&
ZONi;,EL
3OUZfpj+kO"v'
}VX9@
'l^jgx+O
.W&G(/mx!{fz
-JUQ3;IA
Ro3@1EW
H(Y"e8h
7uCcbbC65
:sGpf2
[iH&,*V
jaxZU&J8Yz
jG>VN'
J(}%p;zDjQ
PyPt SuO
/!aMSNF
8#|2 J
5JDD#4XZyH&
O-)SK"+xG@SwlHQ
p(SX3Xk
)5B{tPGsc
PWn"5,w
7:4lJuCLbG
a;3n`H_m
rDRltw
Qf$:^#`M 4=
A@T2b8Xe
2_ xrZ1
_mlByj\O
=imtQ_}{&KW
kso%0C
3iZF25
>q|><F,r 3:nQ
-.d7,/m'Bd{m
H`#%@H
f;/H9N
-I38lv
=i|}I9{8
6{,tIVx
FGvi!vJ);NN{~}4x^
{hh/q9#y
}z:%oG !XzJ
o^|J+Z+k,]B6,Waw|
C+j|UC/o/5iF/e>8
p4L^Z=
3i]0wIDI_
p_g;IMG
nJ/\_|w
TnvGY/{
MaO"1c&
(wF6++m[a4x
^W]B f
2 F2,8
)}T6s5
,.IORVK
*LR~vRzp
5gU"6-
S9j:vj:h+
Exz?_\E\x$P0
/oD7P"P*k{}T
/ph|wL
_6';kX7
~w[bJFc
o*N)06
:"D+s)}5
!zOBj$|un
mfX3rt?
hl<Mx1z
b: P&!wBS
S9<F G
^soBV)D^+><
z)C ,0
?zQGMx{
2b.B('
7"1*iKE
CFZwRmqS
Sl&lX2
i =D-{@
MuT):Q
J>%sL}R`h\?'-Ncz(
]2`m&5fGY
t7,43[W
c|hO]$Wl{
?'Kd#B
-+KZk=-
{ZU,7y
G7>AOG
8?c:K"O
`~Nk@P
>5j+wL
&P@'D3
&}\,8zC0|/
w[!W62
?lZ;`a_uXNn'Ex
$7LT<di8_4
u_/NM*P
O:W4.%nG
n<!Pf1i@Q a
Tb9!M7M2`w|
W6{?Jx'
t`2Qqng
]oL],r{pH_8H
M44a.L
VU^i?*
<}WCi^:3
=-~ 96yHJP`[S?
8EIaiRjgSobx
?I%R}/
'gD21X
XwHED.!.KyLVzO
>#rVFU
Rpx=8N
-uA;L.
uKyk<d6
X@/{wG
;;|8YcG
i:^81.Dt
-%Tuql`.
_FN[V`v
G$P8%-8Zd
[p'(XH
K1;7q=A6y
03H\rV
@Q G ]EO
jKK-lTn"]9
nJca_^'0
Vp&X(^
g%G] 7MUt
U$(Kh6
Pc:={]4OH
Af'L}Y
=A8G9%_
ipgQf{6`G{/
bwIEU$}
h0CT5S\z
\"#B=3
rC#*:(9
[z.uIZ
=|cT#Uh7W
5]h-]a
b[E??/?
%f q^zC0U*}
rkYlR$@4
5[<?NsD>
R,z_>BH /
HZ3:4?=mK*0e
@)N@,"LW
5)t%S|'=u)&K6*P
|Ln FsB(&a 7
/#L]{)Z=jt*|r2l
6IT~T 1zBE8E8Ce
..xSJI"By?z0F
Ch`K~Z.Fc
M*gfwAT
}=:!)g
tBQkm=
!I;dN!K5
uR}^/^sW
CL;*()p
!zE(]kgJFj
~Y!)_~]t
ZcO~bS
?G~jLwb_
_%sQMV'
slI/Wr3yw(fG]
WyJwJ+4u
w.8U#(Qnn.` (~t`84EU
"9nZnV?a
v..:QzyyDA
\};[fSkH
~[kD+9EI
[X$Ro}
[:/~YzG
!YKzg^Pa
#s}42R0"
nqb;GQ
d}nPo4%\
E?+F:l
pJn{]Jxo-sPr>Ce#
:e6Gdsw29Y\
!iB3rp
@$(c^q9
wTm6Js
<yP+sZ
qfH-;2|
\!c~=P[w>
SslG@%
WTyTr%>3Sb
wu6:P _&l02/fSX5m
Terywn
^e&7}}
]VuIJk"
~hNB@K
u_64N?
<i(K|9sv
WYv@rqq
`av=S/
<,Evvt
;HK$X>|
UL%m^60hCn
yOAT_[X #
q<*1u)
#U>T::L}
:ROI"D}WN
#|{u~,]
MP6LK]u [blf!96
|J)^m4%U
-jG[SG!:]s
clNl@XLZ|EDA
VGeWb`-iu
]n;FpC
z/:,72m
eku{7?]
E RX;#
Yj=Rtj#
\nhS6\Ff(v,
I +<AXMy
Cx4>Blj
/-}-fn
|Vf1#.ieC
}_|uwB/<
*x[@I!S
*ed QU
sk0`WSO:
K!{>Wm
}*yn6z
w%71&W@1Mi}^
teLJz<(W
|HVX): I7V?+i
=<<(KW
$"CI0J
|LA]38
}z-%.|*b6/
~?5{Dw)A
(RF(''OCtU
"3,OX'
=rj|\/Im'
3lTR"7oMx
:BKA]#RD@g
r]lF(zI/
l@Ogvak
-1{'TIlNz%^S~vJ
7+4adoQ5al7
(P @r4() I
X(S@_oV|@*
-w5Vy7K
+xci:P
'%T^RXt"[
&'/a[TDv~!O
>>~^{TV\%>Cd[M)|zzjx;
Q=K?yMj
aNQH{^C I
BM#C:-
?r/'gPi^
0u]P#S
v%K9YXuQ}>1>
=!HCFL
QoOk{V
K]=` iJ
vrh'ff*@!Fd#
A[jAsTW_
e"~z:>4DdO
M< ?xR. 0a
vgXo*U:%V
dgAw<8KX
]MddRm}z'
{k{/|{6\V
p4lLb+T
4\w.]o
HVTU}bv\t[
>-_+WF
SMUoB>0o;^na
7n91]}DWZl
kDF9 v1-
h72 d%u<vHxBB@B
qch5'i8
`tDA9+Mc
oEY*R[P
>7:"b)c
zfpj"(Dz
:hfV}X
[ua] r%
yCKO)K
~""]t@V
Cwk'w:R$d
lxu=:h2d
eQR*>QEO
yHUWSej
uU@%)dW46A
NeEFRb
B7>0Hm
ef\%Rn(
eNTEgMO
R nQ=u1&X
n(u7(? nk
_YXH0XfJpGH6T&]
A/>.U\
V,e@r%
Q$YSQqpr
JY#6SZ6
~DoTTB,
4A+,"xM5
f$r]Jf
umjX+%pD
:Qp%-Y
]L><6q
n;.`?k;
fK NFOU(kU$LwL
Ic=r TT`
>h2B[N>>%U>T
I0v6Q{
~; -}]NB^`Z4HH
<%t2s%0dUeEj
1CMI=,w^LE
+U%ju;cwR><G
^;9cvq
eQ=(:3.
i8_&|hDuT3TX
uT`YZuF?
(3o%I~
t9hrCQH
'R?79Btox
ix-:YH^*axt&
cGIij/;"
+97FUL
Q]@sai:
rvrv}}}Y
rrrrrr
rrrrrrr
rrrrrrrr
\O\O88
rrrrrrrrrr
4riNiN88
rrrrrrrrrrr
4riNiN88
rrrrrrrrrrrrr
4riNiN88
rrrrrrrrrrrrrr}
4r4r4r4r
rrrrrrrrrrrrrrrr}
4r4r4r4r
rrrrrrrrrrrrrrrr}}
4r4r4r4r
rrrrrrrrrrrrrrr4r4roU
4r4r4r4r4r
rrrrrrrrrrrrrrrroU
4r4r4r4r4r4r4r4r
rvrvrrrrrrrrrrrrrrrq
@@@@@@
rvrvrvrrrrrrrrrrrrrrrr@@@}
rrrrrrrrrrrrrrrPvq
rrrrrrrrrrrrrrrr}}}}}}
rrrrrrrrrrrrrrrr}}}}}}
\OxvxvH
rrrrrrrrrrrrrrr}}}}\O
rrrrrrrrrrrrrrrr}
rrrrrrrrrrrrrrr
xvxvrrrrrrrrrrrrrrrr
xvxvxvxvxvrrrrrrrrrrrrrrr
PvPvPv\Oxvxvrrrrrrrrrrrrrrr
PvPvPv\O\O\O\Orrrrrrrrrrrrrr
PvPv\O\O\O\O\Orrrrrrrrrrrr
\O\O\O\O\O\O\Orrrrrrrrrrr
iiiiiiiiiiiiiiiiiiiiii
TTTTTT hhhh
YiiiiiiiiiiiiiiiiiiiiiiTTTTTT hhhhh
iiiiiiiiiiiiiiiiiiiiTTTTTThhhhh
iiiiiiiiiiiiiiiiiiiTTTTT;6;6;6;6;6;6;6;6
iiiiiiiiiiiiiiiiiTTT;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6
zxzxiiiiiiiiiiiiiiiTT;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6^
zxzxzxiiiiiiiiiiiiiiT;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6^
hzxzxzxzxzxiiiiiiiiiiii;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6^
zxzxzxzxzx
oiiiiiiiii;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6^
zxzxzx
oiiiiiiii;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6^
oiiiiiii;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6;6^
hhhhhhh^
ozxzxiiiiiTTTTT;6;6;6;6;6;6;6;6;6;6;6^
hhhhhhhhh^
ozxzxzxzxiiiiTTTiiiiii;6;6;6;6;6;6hhhhhhhhhh
ozxzxzxzxzxzxzx+iiiiiiiiiiiiiiiihhhhhhhhhh
ozxzxzxzxzxzxzxzxzx+++iiiiiiiiiiiiihhhhhhvvv^
yzxzxzxzxzxzxzxzxzxzxzxzxzx++
Ziiiiiiiiiiihhhh6+vvv+++
yzxzxzxzxzxzxzxzxzxzxzxzxzx^
Ziiiiiiiihh++++vvv+++N
yZZZzxzxzxzxzxzxzxzxzxzxzxzxzx^
Ziiiii++++++vvv
Tzxzxzxzxzxzxzxzxzxzxzxzxzx
iii++++''
0Gj0Gj
yZZZZZZ
TTzxzxzxzxzxzxzxzxzxzxzxzx
y0Gj0Gj0GjN
0Gj0GjTZZQ
!bububuTzxzxzxzxzxzxzxzxzxzxzx
y0Gj0Gj0Gj0GjTTTQ
!bubububuTzxzxzxzxzxzxzxzxzxzxzx
Z;vvvvv.Z;Z;
4444444444444444449
vvvvvyyy}
d44444444444444444444444444444444444
6~h~h~h
bbbbbb
,@K@K@K@K@K@K9
bbbbbbbbb
,@K@K@K@K@Klll9
,bbbbbbbb
,@Kll@K@K@Klll@K9
,bbbbbbbb
,b7b7b7@Klll@K@K@Klll
,bbbbbbbbb
lllb7@K@Klll@K@K@K@K@K
MAFFF9
,bbbbbbb
lll@K@K@Kll@K@K@K@K@K
MAFFFFF9
bbbbbbllll@K@K@K@K@K@K@K@K
MAFFFFFb79
@K@K@K@K@K@K@K@K@K@K
MAFFFFFb7b7b79
l(((((((((
b7b7@V@V@K@K@K@K@K@K@K@K@K
MAFFFFFb7b7b7b7b79
((((((((((yyFb7b7b7b7@V@V@K@K@K@K@K@K@K@K
MAFFFFFFb7b7b7b7b7b79
(((((((((yyFFb7b7b7b7@V@V@K@K@K@K@K
MAFFFFF
sb7b7b7b7b7b7b79
(((((([
b7b7@V@V@V@K@Kpb9pb9pb9b7
sFFFFF
ssb7b7b7b7b7b7b7b79
6yyFhE
t@V@Vpb9pb9pb9pb9pb9b7b7b70q0q
sFFFFF
ssb7b7b7b7b7b7b7b7b7
6yyyhE
tpb9pb9pb9pb9pb9pb9@Vb7b7b7b70qFFFFFF
sssb7b7b7b7b7b7b7b7
66yyhE
tpb9pb9pb9pb9pb9pb9[
t0qFFFFF
ssssb7b7b7b7b7b7b7b7
666yhE
tpb9pb9pb9[
tFFFFF
sssssb7b7b7b7b7b7b7
ty666pb9pb9hE
tFFFFFF
sssssb7b7b7b7b7b7b7
f:0&-n-n-n-n.a8.a8.a8.a8.a8.a8
f-n}}}.a8.a8.a8.a8.a8.a8
f}}}.a8.a8.a8.a8.a8
f}.a8.a8.a8.a8.a8
f.a8.a8.a8.a8
f.a8.a8
yyyyyy-
yyyyyyyy-
yyyyyyyyy-
yyyyyyyyyyy-
yyyyyyyyyyyy-
yyyyyyyyyyyyyy-
yyyyyyyyyyyyyyy-
yyyyyyyyyyyyyyyyy-
yyyyyyyyyyyyyyyyyy}}-
ayyyyyyyyyyyyyyyyyy}}
ayyyyyyyyyyyyyyyyyy}
yyyyyyyyyyyyyyyyy
yyyyyyyyyyyyyyyy
:yyyyyyyyyyyyyy
:A(yyyyyyyyyyyyy
-nA(A(yyyyyyyyyyy
-n-n-nA(yyyyyyyyyy
-n0&0&
gCyyyyyyyy
0&0&0&
gCyyyyyyy
0&0&0&
gCyyyyy
gC.a8.a8yyyy
0&0&.a8.a8.a8.a8.a8.a8.a8yy
0&.a8.a8.a8.a8.a8.a8Or_Or_y
.a8.a8.a8.a8.a8Or_Or_Or_
.a8.a8.a8.a8
gCOr_Or_
.a8Or_Or_
3|3|3|3|
^S^St3|3|3|3|3|
Or_Or_
:3|3|3|3|3|
Or_Or_Or_
:3|3|3|3|3|Or_Or_Or_
tt3|3|3|3|3|Or_Or_
:tt3|3|3|3|Or_3|
::0&Or_Or_Or_3|3|3|3|
0&::0&0&Or_3|3|3|3|3|
0&0&0&0&0&r3|3|3|3|3|3|
0&0&0&0&0&rr3|3|3|3|3|
0&::0&0&rrrr3|3|3|3|3|
0&0&:0&0&rrrr0&3|3|3|3|3|
0&0&0&0&0&rrrr0&0&3|3|3|3|
0&:0&0&rrrrr0&0&0&3|3|
t::trrrr0&0&0&0&0&3|
t::trrrr0&0&0&0&0&0&
ttttrrrr0&0&0&0&0&
ttttrrr0&0&0&0&0&0&
ttttrrr0&0&0&0&0&0&
3|3|3|3|3|3|
e4;NNNNNNNNNNQp
eeNNNNNNNNNN
$$$$$$
eNNNNNNNNNN
$$$$$$$
NNNNNNNNNN
$$$$$$$
NNNNNNNNNN
_$$$$$
NNNNNNNNNN
NNNNNNNNNN
NNNNNNNNNNSS
_!!!$$
NNNNNNNNNNSggg
_!$$$$$
eNNNNNNNNNNgggg
_$$$$$$$
eNNNNNNNNNNgggg
_$$$$$$
eNNNNNNNNNNgggg
eNNNNNNNNNNgggg
eNNNNNNNNNN4;ggg
NN$$NNNNNN4;4;SS
$$$$NNNNN4;4;SS
$$$$$$NNNN4;4;4;S
$$$$$$$NNN4;4;4;4;
$$$$$$$N
+:J4;4;4;
$$$$$$$
+:J+:J4;4;
$$$$$$$$+:J4;4;
!!!eee$$$$$$$$+:J4;
!!!!eee$$$$$$$$+:J
!!!eeee$$$$$$$$
!!!eeee
$$$$$$
!!!eeee
!!!+:J+:Jee
!!!!+:J+:Je
!!!+:J+:J+:J+:J
!!!!+:J+:J+:J+:J
+:J+:J!!!+:J+:J+:J+:J
+:J+:J!!!!+:J+:J
+:J+:J+:J+:J!!!+:J+:J
+:J+:J+:J+:J!!!!e
+:J+:J+:J+:J+:J!!!e
OOGd;d;d;R
GGG!LGGl
GOGGd;d;d;R
GG!LGGGg
CGGd;d;d;R
GG!LGGGg
Crd;d;d;d;OOOR
d;!LGGGg
hj"""X
rrrd;d;d;OOOOO
CGGd;d;!Ld;GGg
hj"""X
UUrrrrrd;rrOOOOT
d;d;!Ld;d;d;Gg
Errrrrmmmmm
Gd;d;!Ld;d;d;d;d;g
rrrrmmmmmmm
d;d;!Ld;d;d;d;d;d;g
rrrmmmmmmmT
0Jd;d;!Ld;d;d;d;d;d;9
P00000
rrrmmmmmmmT
d;d;!Ld;d;d;d;d;d;9
P000000
rrmmmmmmmmT
d;!Ld;d;d;d;d;d;O9
P00000000
rrmmmmmmmmT
d;d;d;d;d;OO9
000000000
rrmmmmmmmmT
d;d;d;O9
OO0000000000
rrrmmmmmmmmT
OO0000000000
GGGGGrrrrrrrmmmmmmmm9
E:!LE:O
P0000000000d;d; :) :) :)" :)" :)
GGGGrrrrrrrrmmmmmmmm9
!LE:E:E:
P0000000000d;d;d;d;+0
GGGGrrrrrrrrmmmmmmmm9
P0000000000d;d;d;d;d;d;""
IGrrrrrrrrrmmmmmmmm!L9
P0000000000d;d;d;d;d;d;d;d;
+I+rrrrrrT
mmmmmmmm!L9
P0000000000d;d;d;d;d;d;d;d;d;O
++IIrrrrT
mmmmmmmm9
P+0000000000d;d;d;d;d;d;d;d;d;d;OO
++++IrrT
mmmmmmmm9
P+0+0000000+0+0+0+0d;d;d;d;d;d;d;d;OOOO"
++++rrIT
mmmmmmmm9
+0+000000+0+0+0+0+0l
d;d;d;d;d;
hjOOOOOO
f||||||||1
||||||
RQRQRQRQRQ$
P888jj
!|||||1
||||||
*{|||W
\RQRQRQ$
8888jj
||||||||
*{||||||$
\hI||||||
9||||||||$
!\mxhI
9|||||$
9||||$
9||||W
ffff\\
9|||*{W
iNiNiNiNjjj
ffff\\\
9|||*{*{W
\\iNiNiNjjjj
DVffff\\\mx
9iN*{|*{*{W
\\iNiNiNjjjj
DVffff\\\iNiN
988*{*{\\W
\\iNiNiNjjjj
DVffffiN
KqiNiNiNjjjjjj
DVjfIIIIII
|iNiNiNiNjjjjjjjKqIIIIIIIIII$
IIIIIIIIIIIIII$
IIIIIIIIIIIIII$
0b0b0b
IIIIIIIIII$
0b0b0b0b
IIIIII$
0b0b0b0b
0b0b0b0b
IIIIIIi8BBB
IIIIIIII88BB
iIIIIIIIIIIII8BB
9:N:NQ
iIIIIIIIIIIIIIIII
90b:N:NQ
ffffc}c}iiiiIIIIIIIIIIII\Ig
90b0b0b:NQ
c}c}ii888IIIIIIIIII\
90b0b0bPvPvPv5555==W
c}88888IIIIII\\
90b0b0b
DV55oUoU==W
888\\\\\\
DV\AoUoUoU=W
DV"3"3AoUoUoU==W
!"3"3oUoUoUoU=W
!:NoUoUoUoU=W
!:N:NoUoUoU=
!:N:N:NoU
DV:N:N
!:N:N:N:N:N
?v^555
9:N:N:N:N:N:N:N
?v^?v^?v^?v^?v^z555
DV"3"3:N:N:N:N:N:N
?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^5555z
DV4"3:N:N:N:N:N
?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^z
DV4"3:N:N:N:N
kO55z?v^?v^?v^?v^?v^?v^?v^?v^0b0b
DV?v^?v^4"3"3:N:N:N:N:N
xkxk\5555zzzz?v^?v^?v^?v^0b
DV0b?v^?v^?v^?v^?v^?v^\\"3
:N:N:N:N:N
xkxkxk555555zz{{{{0b0b0b0b0b?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^:N:N:N:N:N
M5M5M5M555555M5M5{{{{
DV0b0b0bzzz?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^:N
fM5M5M5M55555{M5M5M5M5M5{
DV{0bM5M5M5M5M5z
?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^
M5M5M5M5M5555{{M5M5M5M5M5{{{{zM5M5M5M5M5
M5M5?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^?v^
fM5M5M5M5M54{{{{M5M5M5
zzM5M5M5M5M5M5?v^?v^?v^?v^?v^?v^?v^?v^?v^ffM5M5M5M5M5{{{xkxkM5M5M5
zzzM5M5M5M5M5M5M5:N:N:N:N?v^?v^?v^?v^f\\\\\{{xkxkxkxk{{
DV0b0b
9zzzzM5M5M5M5M5M5M5M5:Nmmmmmmm\\\\\{{{xkxkxkxkxk{
DV0b0b0b
9zzzzM5M5M5M5M5M5M5m:N
\\\\{{{{{xkxkxkxk
DV{0b0b0b
9mmmm3
mmoUoUmm:N
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo></assembly>
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
MTU7MTU=
j j j j j j j j
% % % % %
% % % % % % % % % % % % % %
| % % % % % % % % % % % % % % % % %
% % % % % % % % %
X i p a l e z e l a f o k i s i
G u z i n i m i m u l e r u c u d i n e r i y e f a h a h o w u z o f i
F e m i v i h i t i c o x e d a p e h e j a b u v e s i
C e c i n a x u w i d e c u z a n o x i c o y u k e
L o b a x u f a h i z i
F u p e v o m a h i g o r o m a h o m a z i y u y o f i l e j e r a
B u y e s a c u y o m a g e c e r i
P i c o n o l e g u k u t e v i h u f i p a p u
k e r n e l 3 2 . d l l
K E R N E L 3 2 . D L L
m s c o r e e . d l l
r u n t i m e e r r o r
T L O S S e r r o r
S I N G e r r o r
D O M A I N e r r o r
- A t t e m p t t o u s e M S I L c o d e f r o m t h i s a s s e m b l y d u r i n g n a t i v e c o d e i n i t i a l i z a t i o n
T h i s i n d i c a t e s a b u g i n y o u r a p p l i c a t i o n . I t i s m o s t l i k e l y t h e r e s u l t o f c a l l i n g a n M S I L - c o m p i l e d ( / c l r ) f u n c t i o n f r o m a n a t i v e c o n s t r u c t o r o r f r o m D l l M a i n .
- n o t e n o u g h s p a c e f o r l o c a l e i n f o r m a t i o n
- A t t e m p t t o i n i t i a l i z e t h e C R T m o r e t h a n o n c e .
T h i s i n d i c a t e s a b u g i n y o u r a p p l i c a t i o n .
- C R T n o t i n i t i a l i z e d
- u n a b l e t o i n i t i a l i z e h e a p
- n o t e n o u g h s p a c e f o r l o w i o i n i t i a l i z a t i o n
- n o t e n o u g h s p a c e f o r s t d i o i n i t i a l i z a t i o n
- p u r e v i r t u a l f u n c t i o n c a l l
- n o t e n o u g h s p a c e f o r _ o n e x i t / a t e x i t t a b l e
- u n a b l e t o o p e n c o n s o l e d e v i c e
- u n e x p e c t e d h e a p e r r o r
- u n e x p e c t e d m u l t i t h r e a d l o c k e r r o r
- n o t e n o u g h s p a c e f o r t h r e a d d a t a
- a b o r t ( ) h a s b e e n c a l l e d
- n o t e n o u g h s p a c e f o r e n v i r o n m e n t
- n o t e n o u g h s p a c e f o r a r g u m e n t s
- f l o a t i n g p o i n t s u p p o r t n o t l o a d e d
A M i c r o s o f t V i s u a l C + + R u n t i m e L i b r a r y
< p r o g r a m n a m e u n k n o w n >
R u n t i m e E r r o r !
P r o g r a m :
B p B P B 0 B
H H : m m : s s
d d d d , M M M M d d , y y y y
M M / d d / y y
D e c e m b e r
N o v e m b e r
O c t o b e r
S e p t e m b e r
A u g u s t
F e b r u a r y
J a n u a r y
S a t u r d a y
F r i d a y
T h u r s d a y
W e d n e s d a y
T u e s d a y
M o n d a y
S u n d a y
A D V A P I 3 2 . D L L
W U S E R 3 2 . D L L
( ( ( ( ( H
h ( ( ( ( H
H
B 0 0 0 0 0 0 0 0 0
B 4 4 4 4 4 4 4
$ 6 L X j *
n b X Z H 0
$ 0 @ L h x
$ 6 L X j *
n b X Z H 0
$ 0 @ L h x
V B E N D Y I
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.