Analysis Date2015-07-15 11:38:44
MD55a22e5aee4da2fe363b77f1351265a00
SHA19edecb01897b2984daa29c979701e6df7c75160a

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: e683e1f9fb674f97cf4420d15dc09a2b sha1: 9e73c86c7eee2a1a9b297565305317338540285f size: 20480
Section.rdata md5: 3a92b98a74d7ffb095fe70cf8acacc75 sha1: c868e3d07afbb1c8dc6cfed884362e8122d3cef6 size: 4096
Section.data md5: b5d4f68badfd6e3454f8ad29da54481f sha1: 098d150b7f4aded1a4b321e60976ac0f29cc3154 size: 380928
Section.rsrc md5: 474f9723420a3f2d0512b99932a50ca7 sha1: b8e08bdb7d1257efaddceceee88b1807dc771627 size: 4096
Timestamp2015-07-13 08:11:01
VersionLegalCopyright: Copyright (C) 2009-2010 Trend Micro Incorporated. All rights reserved.
InternalName: VizorHtmlDialog
FileVersion: 3.0.0.1303
CompanyName: Trend Micro Inc.
PrivateBuild: Build 1303 - 8/8/2010
LegalTrademarks: Trend Micro Titanium is a registered trademark of Trend Micro Incorporated.
Comments:
ProductName: Trend Micro Titanium
SpecialBuild: 1303
ProductVersion: 3.0
FileDescription: Trend Titanium
OriginalFilename: VizorHtmlDialog.exe
PackerMicrosoft Visual C++ v6.0
PEhash57e6b26eac0f34714252957d26287bc93ef07db2
IMPhashae984e4ab41d192d631d4f923d9210e4
AVAd-Aware Command-LineNo Virus
AVArcaVir AntivirusNo Virus
AVAvast! AntivirusHrupka-D [Cryp]
AVAVG AntiVirusNo Virus
AVAvira AntivirusTR/Crypt.XPACK.Gen7
AVBitdefender Command-LineNo Virus
AVBullGuard AntivirusNo Virus
AVClamWin AntivirusNo Virus
AVCommand Anti-MalwareNo Virus
AVDr. Web Anti-virusNo Virus
AVEmsisoft Command-Line ScannerNo Virus
AVeScan Anti-VirusNo Virus
AVESET NOD32 AntivirusWin32/Korplug.FW
AVFortinet Command-Line ScannerNo Virus
AVF-PROT AntivirusNo Virus
AVF-Secure Anti-VirusNo Virus
AVIkarus Command-Line ScannerNo Virus
AVK7 Anti-VirusNo Virus
AVKaspersky Anti-VirusNo Virus
AVMalwareBytes Anti-MalwareNo Virus
AVMcAfee Command-Line ScannerNo Virus
AVMicrosoft Security EssentialsNo Virus
AVPadvish AntivirusNo Virus
AVQuick Heal AntiVirusNo Virus
AVRising Command-Line ScannerNo Virus
AVSymantec Command-Line ScannerNo Virus
AVTotal Defense Internet Security SuiteNo Virus
AVTrend Micro System CleanerNo Virus
AVTwister AntivirusNo Virus
AVVirusBlokAda Console ScannerNo Virus
AVZillya! AntivirusNo Virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates ProcessC:\WINDOWS\system32\svchost.exe
Creates Mutexmalware.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Application Data\kzqucedolaoac
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Deletes File\Program Files\Movie Maker\Shared\Sample2.jpg
Deletes File\Program Files\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\desktop_up.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\tyrol.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\praguem.jpg
Deletes File\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg
Deletes File\WINDOWS\system32\oobe\images\wpaflag.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\prague.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\gradient.jpg
Deletes File\Program Files\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg
Deletes File\WINDOWS\system32\oobe\images\mslogo.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\safe_easy_better_big.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img110.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img109.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\window_up.jpg
Deletes File\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Winter.jpg
Deletes File\WINDOWS\system32\oobe\images\skipoff.jpg
Deletes File\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\intro_logo.jpg
Deletes File\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Water lilies.jpg
Deletes File\WINDOWS\system32\oobe\images\newbtm8.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img034.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\best_robust.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\best_road_big.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_wizard_ghost.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_multiple_big.jpg
Deletes File\WINDOWS\Web\Wallpaper\Purple flower.jpg
Deletes File\WINDOWS\Web\Wallpaper\Wind.jpg
Deletes File\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg
Deletes File\WINDOWS\Web\Wallpaper\Azul.jpg
Deletes File\WINDOWS\system32\oobe\images\wpakey.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\best_road_ghost.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\best_secure.jpg
Deletes File\WINDOWS\system32\oobe\images\oemcoa.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\venice.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\unlock_optimized_big.jpg
Deletes File\Program Files\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_wizard.jpg
Deletes File\WINDOWS\Web\Wallpaper\Ripple.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img033.jpg
Deletes File\WINDOWS\system32\oobe\images\wpaback.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\heidelbm.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\unlock_optimized_ghost.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img068.jpg
Deletes File\WINDOWS\Web\Wallpaper\Stonehenge.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\read_icon.jpg
Deletes File\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\security_watermark.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\best_secure_big.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\desktop_screen_shot.jpg
Deletes File\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Sunset.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\unlock_built_big.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img123.jpg
Deletes File\WINDOWS\Web\Wallpaper\Home.jpg
Deletes File\WINDOWS\system32\oobe\images\nextup.jpg
Deletes File\WINDOWS\system32\oobe\images\nextdown.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img033a.jpg
Deletes File\WINDOWS\Web\Wallpaper\Tulips.jpg
Deletes File\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_wizard_big.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\parism.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img004b.jpg
Deletes File\WINDOWS\Web\Wallpaper\Power.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\heidelb.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img014.jpg
Deletes File\WINDOWS\Web\Wallpaper\Vortec space.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\unlock_built.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\taskbar_up.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\bulzano.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\unlock_built_ghost.jpg
Deletes File\Program Files\Movie Maker\Shared\Sample1.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img100.jpg
Deletes File\WINDOWS\Web\Wallpaper\Crystal.jpg
Deletes File\WINDOWS\Web\Wallpaper\Autumn.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_networks_big.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\question_icon.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\best_secure_ghost.jpg
Deletes File\Program Files\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg
Deletes File\WINDOWS\system32\oobe\images\wpatop.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\safe_easy_faster_big.jpg
Deletes File\WINDOWS\system32\oobe\images\skipup.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\tyrolm.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_data.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img040.jpg
Deletes File\WINDOWS\Web\Wallpaper\Ascent.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\logo.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img046.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\pen_icon.jpg
Deletes File\WINDOWS\system32\oobe\images\newtop1.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img089.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img136.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img149.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img116.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\best_road.jpg
Deletes File\WINDOWS\system32\oobe\images\newmark8.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\best_robust_ghost.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_multiple_ghost.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\safe_easy_better_ghost.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\safe_easy_faster.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\verona.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\folder_up.jpg
Deletes File\WINDOWS\Web\Wallpaper\Peace.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img121.jpg
Deletes File\WINDOWS\system32\oobe\images\backdown.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\bulzanom.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\pisa.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\safe_easy_better.jpg
Deletes File\WINDOWS\system32\oobe\images\wpabtm.jpg
Deletes File\WINDOWS\Web\Wallpaper\Follow.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\control_up.jpg
Deletes File\WINDOWS\Web\Wallpaper\Red moon desert.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\ul_logo.jpg
Deletes File\WINDOWS\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img060.jpg
Deletes File\WINDOWS\system32\oobe\images\skipdown.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\end_up.jpg
Deletes File\Program Files\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg
Deletes File\WINDOWS\system32\oobe\images\backoff.jpg
Deletes File\WINDOWS\Web\Wallpaper\Friend.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_networks.jpg
Deletes File\WINDOWS\Web\Wallpaper\Moon flower.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\pisam.jpg
Deletes File\Program Files\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg
Deletes File\WINDOWS\pchealth\helpctr\System\DVDUpgrd\stripe.jpg
Deletes File\WINDOWS\system32\oobe\images\nextoff.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\best_robust_big.jpg
Deletes File\WINDOWS\system32\oobe\images\newbtm1.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img126.jpg
Deletes File\WINDOWS\system32\oobe\images\skipover.jpg
Deletes File\Program Files\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg
Deletes File\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Blue hills.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\safe_easy_easier_big.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\venicem.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\safe_easy_easier.jpg
Deletes File\WINDOWS\Web\Wallpaper\Radiance.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\icon_up.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_multiple.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\start_up.jpg
Deletes File\WINDOWS\system32\oobe\images\backup.jpg
Deletes File\WINDOWS\system32\oobe\images\newtop8.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img074a.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\unlock_optimized.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_data_ghost.jpg
Deletes File\WINDOWS\system32\oobe\images\backover.jpg
Deletes File\WINDOWS\system32\oobe\images\newmark1.jpg
Deletes File\Program Files\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\img072.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\paris.jpg
Deletes File\WINDOWS\system32\oobe\html\mouse\images\veronam.jpg
Deletes File\WINDOWS\Web\Wallpaper\Windows XP.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_data_big.jpg
Deletes File\WINDOWS\Help\Tours\htmlTour\connected_networks_ghost.jpg
Deletes File\WINDOWS\system32\oobe\images\nextover.jpg
Creates MutexGlobal\aklxornnytxrwhmse
Creates MutexGlobal\wabjl
Creates MutexGlobal\gcbuguqtkcoaz
Creates MutexGlobal\mxtia
Creates MutexGlobal\qdokp
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexGlobal\oobscoiawverl
Creates MutexGlobal\ordefamblbyvoxdzw
Creates Mutexc:!documents and settings!administrator!cookies!
Creates MutexGlobal\sxzfpnxmf
Creates MutexGlobal\emchtpytxjzjf
Creates MutexGlobal\agcjwqkmrxjyz
Creates MutexGlobal\sylaygsdttnbrvuzf
Creates MutexZucFCoeHa8KvZcj1FO838HN&*wz4xSdmm1
Creates MutexGlobal\mbdlmpnpzvyvxjgfu
Creates MutexGlobal\altctysew
Creates MutexGlobal\mbyvzhfgd
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates MutexGlobal\undqqwznr
Creates MutexGlobal\ertguthnrgrrbabrt
Creates MutexGlobal\gbote
Winsock DNSamxil.opmuert.org

Network Details:

DNSamxil.OPMUERT.ORG
Type: A
54.169.89.240
HTTP GEThttp://amxil.OPMUERT.ORG:443/D14C891958D2EB24C29762FB
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 2.0.50727; SV1)
Flows TCP192.168.1.1:1031 ➝ 54.169.89.240:443
Flows TCP192.168.1.1:1032 ➝ 54.169.89.240:443

Raw Pcap
0x00000000 (00000)   a840021a 20d917ef cd393017 e86574da   .@.. ....90..et.
0x00000010 (00016)   072d15c4 82405d21 772b13c2 204a4eff   .-...@]!w+.. JN.
0x00000020 (00032)   0e525f56 e58874                       .R_V..t

0x00000000 (00000)   47455420 2f443134 43383931 39353844   GET /D14C891958D
0x00000010 (00016)   32454232 34433239 37363246 42204854   2EB24C29762FB HT
0x00000020 (00032)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000030 (00048)   2a2f2a0d 0a417070 6c654964 3a203758   */*..AppleId: 7X
0x00000040 (00064)   79774b36 306a534e 7533556c 6c556c6e   ywK60jSNu3UllUln
0x00000050 (00080)   63446566 4a394271 6b3d0d0a 55736572   cDefJ9Bqk=..User
0x00000060 (00096)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000070 (00112)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000080 (00128)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x00000090 (00144)   7773204e 5420352e 313b202e 4e455420   ws NT 5.1; .NET 
0x000000a0 (00160)   434c5220 322e302e 35303732 373b2053   CLR 2.0.50727; S
0x000000b0 (00176)   5631290d 0a486f73 743a2061 6d78696c   V1)..Host: amxil
0x000000c0 (00192)   2e4f504d 55455254 2e4f5247 0d0a436f   .OPMUERT.ORG..Co
0x000000d0 (00208)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000e0 (00224)   6c697665 0d0a4361 6368652d 436f6e74   live..Cache-Cont
0x000000f0 (00240)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000100 (00256)   0a                                    .


Strings
\
. 
.u^
.S-...
.
0
...
x6.
..
.Y
W
...
.
040904e4
1303
3.0.0.1303
Build 1303 - 8/8/2010
Comments
CompanyName
Copyright (C) 2009-2010 Trend Micro Incorporated. All rights reserved.
FileDescription
FileVersion
         (((((                  H
InternalName
@jjjj
LegalCopyright
LegalTrademarks
OriginalFilename
PrivateBuild
ProductName
ProductVersion
SpecialBuild
StringFileInfo
Translation
Trend Micro Inc.
Trend Micro Titanium
Trend Micro Titanium is a registered trademark of Trend Micro Incorporated.
Trend Titanium
VarFileInfo
VizorHtmlDialog
VizorHtmlDialog.exe
VS_VERSION_INFO
`="?="
<<<><<
< &*<@$< 
<,<\%<*
<:-=<<@
<[=;[=[=[=[=[=[=[=[=+[=[=[=-=
<$"<`<
>.^(<\
|="">"
-|=&}=
,`@'"/
?	;;+,
.,<);)
'=!#=!
)=#(>#
[~.;):
{/{<|$=<\
}?~$|?
$=},<\
$;<;+<
&|,#>,
01GXTP_V
05pPCG]A>ZcfPfx{u
:0:6hY
0;)87(|H
0|AqR41
;|,0b&^
0C6	'-
0=ct9c
0E9?Qr{qh<-u+
0]/#e^aba12K\>
0#f8IUu2d
&;0#fc
0`?FLY
0GM5='
:[0._gy~
0J>_7$
_0	J8\*p
-0jIXNo7
{<0{<L<<H=\<<$L!
<0L<VE
0 l;`xd
"0M<9NTN
0^MyhCa_y
^0p`F|#
0py/7@L
0Qm80i8Lig8M
0rWG~?
0]rz<j3
0scn`,
0W8/1go
0WF=Xp
0W./^gN
0WQ/1gf
0^&W]s
0Wt/_g
0WY/+gc
0X`F|WL;	
0xG_G9!
0{y/?KL
0y=WL>
1[2'Zp
131+SE
133P:?
]?152a
15D[ z(V
]?188RQ>
18TQPP
1an	7)
1	BA\7
1GH5233ZifPgD[FZ^5C#"G^G
[1GU/h
1,i+[ja"d
|1jvs3
:1l%gw
1|;;lm
*^(1M2
1QaA@33
@1q^`m7
1Ur3YT
1uzU8[JZ]
1w3@g"P%5q2
1W8/:gc
1Wa/_gf
1W{/_g~
1WQ/<g
1Ws/_gy
1WW/;gx
1WY/-g
1xjf p
1y}|`#>VI0'M
1YwGWV3
1YXOSGZ?
1Z\U_'
1Z\U_|W8/_g
1*Zx")MF
2\7|w.
2/	Dhx5X
2;;>Dj
2|dzFg
;2;\;G
2[[_gJ@E6Ny\C3g
2h@6	ya~
2I|:K<[=[=[=[=[={[=[=[=[=[=R=7
2jzpX0
2K\_gj
>2@,(\kt
2;<l;)`
2;l;)`,
2;l;)&`<
2<)#=L
;2Ll0	~k``?
@2;;m7]
2MC@KmF
2[p]9)
2?pu_7
2;q><=<<
2q23FL
2q#2_7
2sS0S 
2/_>T7
2tV$ 6
2:UU^7
2v&o+o>w
2W8/,gl
2W8/+gl
2Ww/_g}
2WY/2gh
2?xDYFZq)
3;;<:)
333:#U
33Pc64
33Pcedu15233
+33PcfP515233
33Pc$`u15233pS&P
33Pff@51
=33UcvP5
3,7:mh
3/<8`%
3|&8q>
3[}8x9
.@3a0m
3]c)[-
3F+{$k
3F!<Pp
3f^VV c-
3fWGf>
3G#_1^
3?ga	-
-3I,>`
3k_6	Nkyk
3L<M M-|
3")M=p
3p1p*q
3Py3p2
3rhX0K
@3s7t$t<PtMtvtzt<_t
3Uy6p7
3W8/2g~
3W8/_gc
3W8/:gc
3W8/_gl
3W[/+gb
3\}?x>
3Y-mnN
3Zy9p8
|41;;mj
%42KtC
48;5233
4bYaaA
4]B:	y$ad
*4EI9[U
4'<<G<
);)4g>>,}8
4G>;\e*
=4Gg=L
4G*HWH<KHHH
4#'g*Sg
4G}W8/_g
4ky/Kg
<4l;) 
4L@-Gia
<4<M=I<;7e
^?>4?@mx
4Pc_N:
4P/_gLt~l
4~!v@}$
4='$>'V7'
4W8/+g
4W8/:gc
4@=W9o_gIAM
4Wj/_g~
4Ws/_gi
4Wv/_gh
4YQZR$
4YT52&2
4yXW@RA)"fP
4	;;<Z<
]4z|jmEF
4Z<m:=:
<@5#=<<
50K9de
51<3tV$&
5185052
51c3tV$0
5233Pc
52[3Psf
:52jj:`
"'52jj
5333'o
&5?5YM
5	accc
5~aT7q
}5F56'
5<|<<h
<|5;;i
5JkyL=
5^jO6_
5j<Wt@
(5,kis
5Oa]H*O
5R[rz]
$5Rs3k
5t1A3tV$5
5T<Nu~
~5t|u<hu
5W8/7ZL
5W8/_gl
5W8/>gw
5|WD/_g
5Wt/_ge
5Wv/_g
5Wv/_g`
5WV/+gh
5Wv/_gy
{5;;y]L
5YL45hpyw
|{6{<\=
6152G'
?61M*S
632cpm
66\;;j
/_>690y=WL;
69)-Ez
6[D,gNhcv
6Eg]u/p
6FY/\~{
&6}<G|<Tm
|6<<$j
6	J8`*
6LF0	O}Dd
6Lj'gJaxP
6n^Wp3
6N<YMeU
6oz'fQ515b
6PI"P4152
<6p>q&q`q<iq
.6Q\:"ugiu
6T\:@-+2
6WM/1gh
6Wu/_gh
6_WXP*
6WY/1gx
6YRV6L8
6yWHn_
6ZF_gR[|q
<:#7(\
=%$7<<
;;<7[<
:#<7(\
:#7($\
:#7(\<
} 7}$?
&<#7(\}
#$%}:7%
##7<(\
>7 0>7,X-q=&(y<7
]70P6{/)d
=7>3UmL
751=Z33H
7#6=dk
=# $#]77#
|_;)>+7]7|
77}}-;#
77L=]#dxl;l,7x8M8y 
=7(=7lL
7<&<7P
<#7(\=>|$8<|
7'}^8,}
: 7+987
+7,9gtL
.7,9vU,g
]7aM]H
< 7d{C
/7&=dpO
!]7~!E
7E$@VQ
/7f=8qA
(7,<<gj
7<<<gj
7H9}[<!8}0t>
7(HCqR<
)7<H'HQHZH?|HsH~H_
7h<u,==
_7iJ*S
7 >j< l
7;)$l=<3
)7L-7R{T7
7#LHgl
7.MUM<
7N<\<<
7n1qb,
$}7]o]pj
7*p?<_
7'}>P}
7P}3t2
7QXCO'-h6@(
7)<}rE
7r_g[Tf
7<'=<{T
-7<<ti
7TJ*8.
|7<tP:
}7W}J6
7Wo/_gh
7<^<*X
^7X=?pb
7=xX(7<
=+&,7+Y<+;
7;y0<9#
]7y1"O
7y<$l;
7YM-8{N
:7;z,#
]"\8=<
8=<^<<
80;Ld]~
=815Z#
&81y)}A
82s7u@~
)84a-8?T8
	"8;5233
8\6{/_
8/6eJaxV
<\8<<7
[<!87>.T'><:l
|87y" 
$=8~$8
<;{8{8{8{8{8{8{8{8
{8{8H8,<<0
?88|@ly
(8/9^@
8>%<+|9=)
$8/_9N
|8A<<,<<
8a0<*f,m
8Cik	\
8<D<<=
8d|9lg;Fg
8E9zG0c
?8/(e^a``
8|]-F9
8Fj<=.<=
8<|FxXT
|8{/_g
&\8:g 
%\_8/_g
%8/_g :
8GM|>y
;8/_gR[oi
8/_gUZS
<8]=hr;\=^]=
8Ifyy@Z
8<i;%y/
<(8<<j
,=8|,k
|_8/+k6
8<<L><
8L`=-9_D
#;<8LG
8$L<\L
8=L$`oxX@
<<8LS\#LIL
8mg;<&
8ml\|@
8<Mzc;a 
'>!!8!n
=]8nY\8
|8<o}8
8o/;eJaxV
8/OgyI
^8)P^q
8qD|#?
8<|Qj|
8<\|RxXt
8:"$>T
-<8T(<8<
8T= <c
\8^Tt=" 	&
8UA6Gne`i
8VB:	yWxw
8!v+m8
8w87w8
8\=W8/_g
|_8(Wg
8=W<+_g
8=W]/_g
~8/wgc
8W]/,gn
8#=Wh	
8Ws/_gi
8=Ww/_g
<8=Wx/_g59M
~8?y,<
8y~$%}$
8?y0oy <
8Y7`]7
$%}:8%`y.d=%
8y$\% j
[8yS-e7
8"zo3<
8=#`z<=|o7
=9<=>=
-<,9+/)<+
9^=(<>
9@;)]#
94\-.%
:$<#98
98/2g~
9~9d}9Xd9
/9=A+ 
=9C]<9
9CuC|Y,n
_9=d:F
-9@DPt
9dr=WL(
9<d?W9 
9e:,h:
:_9/_g
=9g9==
9GE@S_
9G;/iR
9\@(gJaxI
9._gp	
9/_gy6
>9h=9"7$9
9hbbLcs8V
9hbrlcs8F_9hrcLcs(W
9hbZ<cs(?IP
9Hm_3$^
9hrElcs(y_
9hrELcs(y
9hrslcs(G_
9HU^L,
> 9><l>
9<"><l;
9N-z]y
<:9~[o
9O\<<:
&\9!R;
}9r}9Y
9Rd!=R
<9r"rVr[r<ar
9}=]SI
9]S\<x;
9[VF2;2
~9<>!|w
9=W6/_g
9W8/1gc
9W8/_gI
9W8/_gl
=9W$9]7
$9=W(/_g
9=W(/_g-8M
9WJ/-gb
 9 x8<<<y
\9]X_g
9y5/J*
 9YEP@33
=<>(9>$=>Z>$>
9Z_8833Pc4f
`^[=a<
~<a<,<<\<
_#a]#]
#;.;|a
 -|^A<
A>[0Qcf
a0s<=t&t't[t>X,}kt
A42AJ7T
a4m|,&$<^
	A5_3k
a,7a <
a,<7a4
a-=*},=8+
<A<9<<
]#aAFa
AAq]q^
aax`?%Q[6
AbgX'AV
abnormal program termination
abq,6[D>
AC\\T@
AC\\Tg)
AC\\TrPc
'a'Dq.;_p\
a$?dT8
Ae$-\,|$S|
~ah-|W8/
~aj<:;
ALNLqLz
AmfL~'
A;(M(rb
a<'<N<
an#Mp=S]
_A<\=(o
A%ObYu
(Ap}9-
A\q0={<=u|o8
}A:txN#
$A=U<F
_<av- 
a/(@ v
a<W8/_g
AwwR1-(
'AX_#{{k
a"XOF	U*
AYc$X#f
?A}Y>gS@,P
#_AYmb8
A#Y}TV2{
A~!]-,-<=&z
|?%:b|
?B1xW@@1
<}-B5#
b!5AbASAG%
b.5TAt^_\3c
<B7y$?a0
b$9}e |e
<b(?b@
BE|Wnx
BF|'~"
`bF|d=//&
bfP5ljlh
bgmi\!^[>
bgmi\$LN+
b>H0>HF=7H{
b<i<`\<
Bi8/c[
+bk=2p~
BLK65S~cJ
<B|L<K<O=
.b,,mG
b,m\,<P;
bMY68F
b[N8C9#k]
B_O<[=!o_
@\B<<p
bq[=Wud
<B=]Ry
B=<-|`tQ(
bT<ycP
bu15233
:BuAtz
bv,"|W8/?
b/#wPQq\W53
(B=Wq/_g=CM
BX%;7:3h8/_
:BxY%bwE"U5
by0|Yu<
?%:by$8
B@>y;En_
bz*0.YM
bZ3R}:
C\<<+<
C4l=G"&
C4Pc_N:
c~5515233PcfP
:C]7CZ
C:}7gg
c7WL=8
c<_7Yy
c8A<.\
c="<9)
C.%at)
cC\17@1W
"cCASa
c`cr|W),
c`cr/#Y[6
Cea`|W8/
cE_L+l
c'eQCg$
cF%=[%
cfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233Pc.v12A#543Jgdd#%2qlll
cgP5gb
cGsxe6
cg:T}@>
c -!Hl<
c[i8x9
cie5A0
cIKu{0^
&-C)ja
C JW~x
ckB5I7
,C<<=l
c l}=,j
c]L>K?3ml
<<CL<LLpL}L
[c)Ln<]
CloseHandle
C%Lp,]
c l$>T
c>m|<9
C*N8=gm(
cNAqT-
:c&<<<o
c o9}e$+
CP)3 2H`
c "PTp\EZ"
cp]ypB#<E}pYLu
:)Cq_m
CreateEventA
CreateMutexA
CreateThread
c|r<<g
crgfl{
c.r~T5~
/\cS%<<
cs(w?9hrS,cs(g
cs(y?9hrE,cs(y
c=#T<#$<+:#8
Ct\9}D@]|A@l
$ctjlZ
C\-?(>Tl
cTM7H64dt
\cTuk,
|C("+-U}
CU)6 7He
C,u Bk
CUv8R1
cVEs$a"
c```|W
cw1"	%V
C=W[/_g
cWI4@5(gd
c}WNI^gob
cwxw	4L@-Gdpiw
>CXG]]^5
#>CXG]]^5
C`XHm<
CXl=k"&
cX')u,
&<c<y$
Cyas-`
cZ3;LD>
&\CZ\^V>
}>"&d>
d_31Y-
D3"\v#U
D<<<6.
$d==77>
=} d8=
d#9+79
d]9 ]9@]9#
d9=W#/_g}8M
@.data
dbF|d=//&
DC49Kt	1n:+u-.
dFU^3I
dF=W97_guGM
dgmi/2[[6
d<$;)<h>,
Dhy/vc
D@]iJM
d_\iu&
d~iw\1W]
Djjj\/UC1
-&DJTm
djy/qg
dkb8[f
dk$e$ld
Dky/Kg
<DL<\$
dLD=C9
$d==N;
^%=<<Dnx
DOMAIN error
dP8/Sg
dqD|#?
d; QuA
D],>%?Rm
dr=WL(	
dry/{BL
DS2\TT\!
DS@%{8 
@D(S&i
DsnD+}z
D[SQ_5C
><DSSU,
DSUVWh
}D)!*"T~
<DW>\|=\|=
DW5/Ug 
dW8/Gf
DW8/GZL
<d?W;/_g
d$=W?'_gAEM
d,=Wgp=
d`}WJJ^g
D=WS+_g
<D<wT$
Dw|W8/_g
DxssV_
D<$=y\
=-Dz(j$/
= e<,*
=+=e=+
>\e?`>
?]e>|?
\%\e^%
E\2czt~7|
e[4le[
E#5qVW]
>;e7eR88e&[<
e?7I!`
E8VL95e
e915X3
EA{9/_
Eamu|W
$eCZQV@#c
ED<A`d
eEamu=;T@<g
eg7NJ*
EgQY+}8bN_
EgwYe#
eha}l<
<(Ei=,
<eJB7Ru<
@EK?^r
\E?@>,ll
%~-EM=,
Em$}1Dj
 EMFN0
EMHMqMeL"\
)EN0:p
eP51A!
EPUuexo
EP@^Z>
ER3Y[>g
ER%]C0
eR%\N+
-)ESUK
>\E\S_Z*
Et?-&xChz--"M6{m
e\ucS*p
Ev82ZZ8
EW+5#4ge]
E|W8/_g
@E=W}+_gUDM
E=Wj+_g
E|WL#d
E=Ws+_g
ExitProcess
ey/BJ*
e_'YJ8t
~EYk_Yq
e_Z3WO
EZ=g$TJ
$F<?233
f<2;l;)`
;<F5<AS
F5GCZ@>9PcfPg
f+7ATB>xq
f 8<-[
f[8//%L
F9tu<tu
fAkma?"J\0
FBRP5C
FcDH#T
f	cj3\
fD'=but
$fEG[]T#4fPX3fWG{1
ff,JA 
\F,]FmeFrg
F/_gsl
f<IAvJ-
FKGpRTc
]|/fKpI
fL$2Ax-%.&Xr
Fla)36H
- floating point not loaded
[f	-m|2(
FM<GM{MxM
^F=\<(n`
f nh^G
f^O=F<
}'fP@#_
F+'>}P,>
fP3W52)UPcJ651
fp51]23sP	f
fP5152
fP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP5152
{FP545"33k
fP5[7j
`fP5E:
fP7V52%TPcT751yU336
F?<P<7W77P<7
fPIV52
fPoW52CUPc
fPSV52OTPc
fPyW52iUPc
fPYY52
f< q`<
Fq79j{X
&F-<`qS
fRB1y0
FreeEnvironmentStringsA
FreeEnvironmentStringsW
Fr-.K<<M-
fT51@5b
F<t;biw$j|$\~$jw$Z
F$TSYW>9PcfPg
FTV7k6
ftywpgPcfP5152
Fu;#a[
FV&564=fj
-?F}V8
,F=W1;_g!GM
[F\\W3vb!5A|ZVF_5+
FW8/C-L
fW8/{+L
fW8/O|L
FW^9e8
fWJ/Wg
}_FX8-
/FX;XF8
"FXZ\33-c#(\Ee@\P5
f;y>4,
"Fy=7p<7
|![fy9
^:<<|g
<<<<>g
|';/_g
, <<g}
<<;G;<
<>>,G;
[G\@\]=
;][:g0
g^ 0!-b
g0?J*P\q
G1G<:H H-HVH<WHKHHH{H<_H
G1vit	2K[:
_#g2XM?
G3G<=H)H\HEH<IHvHzHbH<
g\3?J>7li
:g3XMO
/_g5NM
/_g61\k?W7
/_g69\k?W7
G6G;<G&H'H[HX<H@HIH}Hz<HaHjH
$,}:g7<;
])g})7>(l
[,g7[M-
g(7Y<<
G7y<4G
g$:\8&g
|G8/_g
G8HcHl,H
/_g}8M
g8w=);
/_g9BM
|G9/_gM
G>)9I,
/_g%9M
(G;a4,
._gA5\4(f`
/_gaLM
;][:GBff`
-_gELxu
GetACP
GetActiveWindow
GetCommandLineA
GetCPInfo
GetCurrentProcess
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileType
GetLastActivePopup
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersion
GetVersionExA
]Ge[(v%.
geW2n"
geZ31Pc
GF51lk
><<gfj<Y,
/_g-Fmv
;/_gg	
`\_g$G
<g")=gdl!
G/<GMHxH
gh/<5LW8/nD^JMK|W	
G<(HDH
<ghM=L<N<;
=gIHF/
/_g)IM
<><<gj
Gj5~mf
gj\8TG
_gJaxC
Gj<\C<
=<<<gjG
{<|G'j<L
-!GKWC
`Gl[]~
=,G?:L
/_g=LM
<GL<nL<:~t<
__GLOBAL_HEAP_SELECTED
+_g];M
/_gM4J57go
gm5!52@
/_gm9M
/_gmad%
g]M>D?,m`
GMgUiY
/_gmHM
/_gmimk
~gmi|W8/
<	GM(l
*gmRI-
_gmt`d
G^!=<<<n|
GN<<{<
g[n,[s
$<;)$g>,o
.GO@H2
go{M5<21:u
G"P_1e
GP-3$2L`
'>g=P$L<<j
<gQ}*G
:._g^R
/_g^R[
gRM1D0,b`
GrplFari
GR^(W/_
>[[_gR[yk
gRZWqv
Gs=TqW
((_gT]
;;<<g^,T8
g&TcEVRs
gU16L78ep
/_gu8M
GUHNHgH<
:<<G;uq
G^VW@@Pc
G-$,%\w
G|W8/_g
G-$,%|W8/_g
~gw8OA
G=W9#_g%FM
G=W<?_g
G=W"?_g
G\-?)>Wl
GXAWcG"c
;]g>y?
Gy<IbI
gyJ /!
/_gyMM
/_gYOM
gZU9t8
>%(>>>;)h%
h>.,]$
,<,<;)H<
{-{-H-
h0$f"%
h27n=Wh=
H2H.\S<uIrI
;:	#h3&
h_4>79Ai
H<4H!I
H+5d_U
h5tp"+
<H8<gj
H<8<<jjj;
H8uQ0^
HA1;Hv
_-Ha9m=+
hAOET?4Pn
hB.8G~
\HD%c$
Hd<IkIjI
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
=heDy>T}>
h><(ee
'+HELx
hex`:>TJ
hex`/.UM0
h/<;;G
hG"PA'
H%gR@L
H/H<I$I<-ISIPIYI<BIvI{I
\<<hhM
HHtYHHtF
hI0ZmX
H[<IAI
hicaR'\M_g
<H_IhI
H I)I<^ICIMIvI<cI`I
H>I+IRI
H<:I.IUIXI<
<,HiL<
H,IUIY<IFImI
,HJ0#+
HJ{JdJi
<H;J;)xg>\,
h\K?g>
hkj"|W8/?
_h<;;l;)`
h;;l;|)`
,{<HL$
<h,LL<HL<tL<piL<|L<xL<dL<`9L<lL<
HL=;)P
HL=Wu/_g]MM
<~hma*
h";n!,
hne^Vz=O
h,P<:z<
hr8<coo
 /H<$%S
;;<hTu,y0
hv+%	>yL<
HW5/Ug 
HW8/	g^
hw+:BZ2
H=WD/_g
HW	/ig
HW	/ig-
hX$$<"
*H,<XJ
=hX,M=
hXP)L<,L<TL<(o
H=xVL$	
 >h,y]
h}y/CML
<[=[=[=[=[=;[=[=[=[=[=[=[=[=;[=[=[=[=[=[=[=[=}'=i
;I`=<>;
\I]}_0^
I>0m8wH>m=
_I3GGS
I40~NJ
I4=6RL:
i=4\74
i4<G0G<H8H$<HmH
i5%cHlw
I6I7J+<J(J
i(7^|[
I73YMv
i7H$H$gH
#I={|7J=5=
;I`=<8;
;I8lh<
@i8vPm8
iA/7F}
Ibt>%;b
i~bzq1ceFq8
ic1bMY
Id*]7io yoV
 i$d#CQj
]*Idt_V
i E((Q>E
iex`+>VK0
^*IF07
<ig8yn
iGUgCyM
i|'h}'.
I/I<<J,J
I;I JtJ<xJmJ
I<IJzJ
#I"IsI\pIaIn
'I@ItlIqI
I)J^J<BJGJhJ
I<=J+JTJYJ
ijuNG4=Op
)]`i`K
I<)K<)
iL7/9k
=il<hL<
iL(Jc=
IM,l(w
In_8S7
i$nm?\
;INp<"
:<>iO<>
;_IOid
i|Ol*D
.<iP-[[
";I=";)p<
iP5=6>@j
(IQI<FI
>IS,1";;MS
iS8/3YL
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
Iu1jmt
'iu#_J2"EvvYF
/iuO@S
i v ,,+
I:vlgV
@iVPmV
iW8/C,L
IW8/Tg
i?W9ZZ
I=We/_gM9M
I=Wf/_g
Ix2gzwB
iXret*
I)yj&a
IyuM6GKC
Iy>(}>Wd>
?i;?yYNctD1T0
i";z7^J
=IZi=I
<(|<<j
=&j}=%
;;<<j;
;;-<j#
}-<<<j
J|><!,,
#J@&0djhj
J0J9s.=
j[38S9
J4J1J<:s+sOs\s<
J+4twx`
j6Mb]u
j]/7{=
J7s!s<TsKsos|s<
=:-j8=
j85!52[3
j8/5de
@j8/ag
J8/_gRZW
	J8\*i
J8,jf#/
j9?ig9
ja=|P2
Ja}WdK^g
J'AXG#{{s>
J++bcef
(Jb?DL\
J+$biad
+@JCU-
#j"d%,;
jgOY_=
jH|-$:
?jH=(t
>,j$;I|< 
"_JIIOe
 j$;j 
j~j]$l;
<jl=<zl
$|<j><mj
}JmS0	U5kZu+	$
j,MU]u
jN^'a$M
Jn"s_%
jo2MKv
Jou)|/
jpx/_g
j[Q-#2
Jq_5_f
JQS0G 
J-^:qy
J<\sEszsns<
Js~sc*}
J=s\%sQsWlFts>
<J+s)sRsC<sAsNsss{<s
JsUAiL5GW
;)jT|_
<JTs]sAsN<s
J	tV8/+^Z
ju^FYn}
JuH#'u
juKdp%:
JW8/_g{
jW8/Rg
j?W9._g
J;.)w#z>}#y
JXsGses
J+$xv~`
|jy/ig
,jy/jg
\jy/pg
jypscl
|jy/tg
`|jy\w<=
,%@#JZ,
jZk}&AR
\$;K<[=[=[=[=[=[=[=
k1;^;<
$][k<7
\]K7g`_T
<,=K8<
<>K8^8
[k|>,bhx`
"KCDL6
KERNEL32.dll
K$H=|8T9~8(
k.,|hk$(7
@]khOO
@kh`|W
}kkRev4.
K;K-}u|
<kl<<<c
K}m5<i0
kP515mmh
kPm\#(
}KQ2yJ
>K<=]Q4
kT17H60dl
k{wXTf
kY1:H;0il
kZ5152a
<<<~l<<
<<l;)`
<;;l;)`
<;l;)`
=);;l;)\`
;;<l;)`
:<<l;&)=
}-l=><|
=,;)L<
>\_>L<
,L><<|$#
{\<L=<
L,|>\,
<l$0l$0;l$$Wl8
L1L<9MbM
L1L$&Md
L%"=;2A-(
L4L8<M%MXMAMu(Mr
L<4mj;
L6<L:M
(L.!@6[xyYd
<>L")'~8
}L<<\]8
l8,7<P
,=l\&9
l<9,6U
L9=W+/_g
L9=W-/_gE8M
L\B<<<
l`,b	6JKxg-Puu
<LB=<Li
LCfnp{
L>	ckx%
LCMapStringA
LCMapStringW
lD<9=:
l<DB!Y
l<DL<XG-l|
l`Ea|W
l-e*q"|
 <|=Lf
"LF0	Aaz`
<L"=fd
lF*<Kr
L:FL<<
lf``[W8/?
;;l<;) \<,G
lG8/_g
lG(?Ow
LG"PB.
Lh!wQL
lH=WW/_gaIM
l-j`h&YeICf^4
;l?JLP6`ud
Ljy/ng
%l}.k2}.
lky/Pg
lky/Rg
L!"Kz7WJ
(;;lL$}
 l=lAI!(
<LL<<D
L<|)L<dL<xL<p
L;;;lj
L	<L=M:MbM
L/L#M M<[MDMBMGM<pMyMmMjM<BNsNwNdN>
LLM<uMyMfM
<L+L<OL\LKLtL<xLeLmL
%LL<pL<zL<l7L<
<:$L<-LQL^L
*<<<L:LSLDL<oL`L
=<=L.LTLvL<|L
lLYyVi~
<LMlNsBL<=M<
l+mnm-+
L,M\PMDMAL
L+MT,"
<L}NhN
lnO#G.
LnP<u0<>
LoadLibraryA
l|Og=Lu
l$oi$<
}L ;)p
lpcw[W8/
lpcw[WXJ7G{aoq
lpom12K\>
$_l'$ql
lq`q08[N3
lq`q\4WA,
lSD<,j}:,
LsS0G7
lT8/_g
LTy3eI<dA
=L"|,-U
LUM<^MBMGM
Lu:uYgaI
%<'l|Vl
>lV<%n<t%
lvrPT>
lvXj1"T[6%tpi
lW8?_g
lW8/Rg
:<lW9.
}lw<<A
LW	/hg
%lwi%?;Y\,GLv~d
L=WK/_g
L=WL/_ge8M
lW(/Og
LW	/og
l]<WPw
l?W=/Wg
L=Ww/_g
lX?W8/_g
lxX+=|k9==<<
-"l<;xXX
lXy ;<=^%t
l(;y0<
|@ly)2
\LY9VJq6a($7
+.$ly}Fu
Ly=WL(	
|l<YX,?
(>m=(>
]=(M%\=
<]m-0,V\:
M1;oaS
<M-[2>zw
M3McN<gN
M3M<;M
M4%{-="QI
M%4Y!-
M-5G7YQ;
m5I59'
M5<M2M[NZN
M6Hh9d=$
<M#7(\
M#7(\.
m7%.7S)7
M=/7>A
:;M\7!dhiG	1^J-
<M7}r<x
M.9~>Z|>;
mAQ; v
Maw&MG
]*	-mb%8
Mb.YM-
<<>mc 
M(<Cl"
McQiaF	
MENKN<
MessageBoxA
mFv_I4\OcBtF
mF|Wav*og
<<[m<}g
Mg}AM5
M Gea+
'M__gJaxP
M;;G;T
_}MgYL
<<<<mh
Microsoft Visual C++ Runtime Library
MiI]|{9!
MI{Ji90kVR
MINi?L;
?MI,WQS
m"jB7:
MJizu_ 
,=<MJX}+
Mk}.:(
_{)Mkp
>_m=l>(l>
M_^/M-
M;M8Nt<NwNkNhN
M	M<N N<-NPNyGmGT
M/M#N <NSN\N@NM<NuN~NbNg<N
)MMw2M#
MMWiL`{
M<>N#N.NON>C
mO6RU&
MOG[M-@
|Mo\`L8
|mp7`<
m?P{E{cK
mp}t66
mp}t86>LC
mp}t86>L:g
mp}t86>LJ
mp}tXPX*,g
m^q_7Y
!mqFs|;+
'>M;#R|1P
mR41C0%b
MRF`l-
M\rNzN_l
MRPBGZ?
 mS>7|
*MsmYQ`\
__MSVCRT_HEAP_SELECT
MT7CM&l
mT91:2Dn
"<>MtM
\m|U8/
MultiByteToWideChar
M-V2azLQ0
MvT{pju-7^
MW5/Ug 
MW8/_g
mW8/w[L
MW	/qg=
MXS@"X&
\M%xXX
,M;y0<u
m;)z+ 
>}:>>n
N==#>=
N0N-HfH
n>16l>
,N1N%lXKG
N2?n2_|
>[N34hgxl
N3N&G<'G[GXG?G<HGvG{GaG<
(N3Z%)
%]N;4yeon;"Y]>	yai
n_5<0=<o|
n59/_g
n5fhY8"_
'n5N/_
n5n{E@;1
n<6n<v|#<
n)$,'(7
<N7}<T
n7YL/!
<N9G"GVG[<G{GdGhG
N<c	o7
ne`i[WX[&
n\e?w>
Nf_0^6
nfP51jlh
N=G!G.G$oH.lUCs@s<ss|s`sms<
N<G\%G)GV
N:/_gQZM
$\N&gZahk
%N@IC;
N< <j8
nJi2jn\,
`n<;;l;)`
N:/_LX
n=]L%y
NmfPla
N%@m&h
NMt69?
 NMY7YM
N(NQN<WNDNANHN<uN
No<GyGbG
- not enough space for arguments
- not enough space for environment
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
npcw\3]\+
npcw\4T@,
npcw\>LJ-
nPI3V2
nQ<)-<
NqCMgLY
Nsf0]C
N$@=U>
nu4C.9YtM
nU5052
nuWCD8
nV0|aX
NW1/^gD
NW5/Ug 
NW6/^g
NW8/_g
|N=Wa/_g
^N\,wi,_5
N@^wIu
N=Wn/_g]8M
|n<xm<r
?nZi"	
NzXW9E
<($|o:
=!o,#!
-<>o<\
O/>(:;
"-o1]T
<O2]_(:*
o2o7psp
O2<WZN;Gh|o`
.O(3\{{qV
`>$|o4<
O5>&:_8
o_5<L=4oh
o5Y@Y*,g
o}^=7=+
O7FugK
o7pApJ<pwp
.<o-<8 
o|=8E_
o|=8G_g
}o8/K"L
-O8&}L=\7
o8<p(p\pYp_|p
o\9?4>@lx
o9S0WS
*O)9ze
OA<B\L
^_./oe
-OE1U)
|>o> i
OI!7z~
O)i<b& bdb
OiJTB'
oL[R^!
o/ofpgp>
OpenMutexA
o"p<\pdpmp
o<p<%p)pVp
OrjaQ OTP
OSTP~Y
(ow&+}&F
\O=W_/_g
O=W@/_gu9M
O=Wm/_g58M
OWM~?L
OwRcWzP
o|@xe~8
oXpA<puprpepn=
*{O;X*sj
<&|oy 
&OY0qX%qe6?7[
[<:&oy4^
oy&j>9
$Oy/Ug
=#p$#=
;][:<P
\P'(<<=
<p0p$q!q
p0pqqUr<Xr_rjr
P%15ad
p17P0G
p`%/1cfM
p2<pRqKq
P;=3=^;
P30rWGv>
&P515233PcfP515233PcfP
P515bW
`"P5D0
]P@5vt
p#^7#W7#(>f]7#]7co6-\76
p8/_g-Gch
p8/_gmad%
p8/_gmimk
p8/_gmrif
P>8UJ_g
P9>@=>
PA3X2 `\
=P_AaGA9
/Paau2oc
P@A\"CfP8;52g
`"PA>cX3
! Pc?	
.:P[c:[
}=Pc=-|=
<Pc3x2
[Pc,851iZ33<
Pcfih)@:
PcfPeU
>PcfPjon
[PcX851
pD=W+'_g
PE3\2$`X
$PeZeZW5 
\]PfJC5c
PF,;uN4
);&PHiu233PcFU
p#HO"a
pI]9%]9`]9
	>pIt2
pi?WDC
~piw?;Y\,"uS
pJ,_.b`T
P;;;j<l
=,;)PL
PL,-\[*
p`L5<'
p=<<)L]<LALNL
@|P]o<
p<OqXqLqIq<
p	p=q"q<DqMqrqdq>m
PP$X:P
,\<,Pq
pQ22I3*aM
Pq_<<F
p&q\Fq
p,|qLq
'&Pquu2
PQ.WZle,
:Pr="<
Program: 
<program name unknown>
PrTAqFA"
<PrZG]GPc4QrTAaGW
?[PsfPeg
PT3	<_n
 "PT52
ptFqn=ol=
Pu151u#8cvP5a
- pure virtual function call
p|vb33nb!5AaG]Pr4
pW8/_[L
P|W8/Sg
pW8/Wg
<Pw\^V}1
pXDYFZG8
p?x/_g
^PX*,g
-PYqvM:
$@PYs__?
P}yz6a
pZ89O85jf
_pZL6g
pZquq<
<q>=<<+
>|=}q~=
[q><><
q|$\<<+
q\^>|,<
!Q]0	`abq/#JF1
Q_1_1bc
q223Pc
q]5>N?.mZ
q#6g+c>
@q6?h}@
q_7)O-
Q8)]w	AI@yR=*ZR=
q/9hbZ
q^/9Q&
Q9]z,(
%QA83ttiR|W8/_g
%QA8"u
q'AM""
{ qaP$	"GV
QB:&~Bei
&[qBI5
QC:7bmbq
QC:.cbcw
Qcf:4n
QcfPA%
\qCGYM-
Q\c<Sgj
qf|@6YM
QgD@(P+O}
q-_gk?
q_Gl_T
qguZ7Y
?q}hMg
QIB8W<_l
qId_3Eu
Qij7_U\0
qJMe4YM
qJrE"X
q_jX)]gy
qkn ZL7
>	>ql*
qLM[76
q@!l& m&N~D
Ql`X,m
<:qLZ/
*q{MhwG
qm&+\#i&
qM[qBZ
qNe/GY9]
q{$N;I'M
~Qnm>A
q@<	o1
qOrFrJr<or
>Q]Ps33
>Q]PVvK3
q$q_7yYV
qq=8E_
	QQMeKS
"qq-QL#
q/q<:r+rOr\r<?rHr|ryr|.{
QQSVWd
q<&r\r
q<"rSrWrDr
QrTAdVA#
&Q=S<]
qSrCr<`r
 qTFFA\)c
Qt<$jG8
Q}TTBaV
Q}TTBpA5
+q~U_M
qur<~rbrgr
qv17Q^
QW]/1gi
qW2/_g
qW2/_g_
qW2/rg-
QW^/6g
QW[/7g
QW[/7g~
~q~`[W8/?
qW8/2g
qW8/_g8
qW8/_>RZW
QWA/:g
QWB/(g
QW[/>g
QW[/-g
QW[/&g
QW]/<g
QW]/,g
QW]/:g
QWH/-g
QWH/+g
QWJ/0g
QWK/:g
QWL/-g
QWL/(g
QWP/1g
qw!P.O
QWQ/,g
QWR/0g
QWS/-g
QWS/%g
QWU/4g
QWu/	g
QWU/<g
QWU/)g
QWU/&g
QWV/0g
QWV/%g
QWW/2g
QWY/:g
QWZ/>g
QWZ/:g
QWZ/&g
qY9:6;
qy/[@L
QyrxSC`$
qyZ8?_gP
Qzn21t
qZ<rKrtrrrw<rdrkrhr
[=|qz:&x
`] R,&@
_<.=":R<"<
r ;1E*
r<4r>{"{'{<
R'7wSE
%R<84wo
>R= 87
>R8/^g^
|:R|9%pE<
r<{9{p{<y{m{j{
RA2<=<: d
RaTG_Z]1
RbC\FVu9
RbXQWp[1
`.rdata
?Re1|0
R]Ehn#
re=I9%<b|
r<{F{<
>Rf52`2
"\_RfJC54fP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP515233PcfP51
r&<{,{F{L{_<{
]RfqSy_5
rGCa	1
r_g^Xq 
Rha-Z+MFrr
rH{<w{k{h{<<\<
RI1D00bh
rI"4=7Oc
Rj89m<
rJ+9M={
rj=@;%>b
rJc@m,
rk=B7%2b
R%K]<g
rk=K9%<b
rKN_7	*
R_kXI-
r<ly<<
RM<8\P
RM-8+q#u_
@(RM9`
*R,MSu@
^$ROP1
r-|*q`^_
rQ<@G1@2
RR$1{0
R`_]S]W<
RtlUnwind
r!{t<{y{
runtime error 
Runtime Error!
RV6v	^"
rV<<<g
r<;}<w
RW8/^g
R#]W+g
RW	/hg9
Rw^J}Q
RW	/kg<
 R<Wxx
rXg)Ul
r{|x=W
 ry//BL
}Rynag
ryO0^L
ry/OAL
<(_<RY\Y
R`}Z(;
:.Rz88-Rz
=RZX=]
<[=[=*=S
>S^[~^|
}S*0_1
{S!081@c|
!#S^0s
S=1306b
~s3I$&P515233PcfP515233z$&P515233Pc
s3PcfP
s<3s<t t-t<PtYtMtJt<}tftjt
S6Pc?	jon
|`s7ua$
s8!8+<\
<S8/C'L
|S8/_g
|S8/+K
:S8/;'L
s8t%<t"t(t`tm=,Z
S8/_>TY
S8/w&L
sBl17@
=SC2	bt}w
ScfP@%
s\>eex
SetHandleCount
SetUnhandledExceptionFilter
sEx?-{jha`$]
 _'S]F~
(sfHF(
s(=<+g
s'GvXm
:S<i8*
SING error
SI;)\Tn>,
sJ#+<4Nd
SkJ+2clmk
SkJ++lwx@
<^|So4>
sO;>|C;~
spNzNnND
S}%q|%
{S{Q<{K{|{
<S<:RE3
$;s'R<R
 :SsPP
->Ss=<S
SS@SSPVSS
s/syp<
/>S^t2
s< tpt
s<'t^tBtGt<pt~t
s<t<%t)tVt
s>t<!tUtRtht<
s.<tWtKtHt
S=<><=u=
sV95048ft
~SVaI$
>Sv'f_
SW[/3g
S|W8?^g
 S<W`y
:SxG_f
S^  xk
sXt<~tmt
,S]y,,
sy/3CL
sy/_BL
sy$^g[Y}
>sY}=I
sZ=988Dj
}S|*ZL|P
<>T\>,
;&;\}T
T0,;;=
:t^12W
t=1A<<
t<1t>u'uou>y
t?29u-
&T3152<
t4t&u<sueu
t4t*<u[uYuFuG<upuduau
]T5@\"<
T523SPcfP515233PcfP515233Pc
T525UPc|651
t_6kI5
+(=T>$,=7$7
<t=7&^=7L8~<^=8+
[=T=|7T+>*=B|
T8/*F4
T(8FrS
T8<<g<j
|T8/+k6
< T<9~ l
t@+ARL
TBAsPG9
tCnY];
tCsOc_
';t]cxL
;Te7`6
TerminateProcess
te< w<]
t!FcL?
T[]FT8C
+t'fy*
t>{/^g
%*t<G $
tgGjQ-
;T/_gR[xm
TG=W4#_giFM
t#Gz	b85
!This program cannot be run in DOS mode.
:(;Ti|
T>j><;
Tjy/`g
tKud0^
\T)><"<L4(
tl<;)8
TL>8=l7
*TL<\9W9\
]T]l/:b
@tl@#(c6
TLOSS error
|"} t<#lv
tly<,<+
$;)Tn<>,
TN$h"8
(t|o=<
\=T<;o
tO0L=- 
TPcn851-Z33x
TP/_gMllS=W
T<#q<`C<<
t#SSUP
tsy/GCL
T-_ t:
t$	tP,
t.;t$$t(
t;t$u<(uUucugu<
t<;t$u(uUu<Wu@utuqu<gu
tTW0Ju
T+)U@<
t*u$OuI
t@u$~u
t:u+uTu<su|u`umu<
t:,\(V
@tVL(	
t$$VSS
t$?vul
tvzho(
)~T!;;.w
tW8/5`
t<W8/_g
tW8/_g
tW8'_o
<t`wex
tX9$\9
_TxGxT.fT#<&Y
tXuEuB<uHu
Tx==WO<
TY7T6 dX
t'y/+@M
ty$o<z$
tY]V[I
\(<t;y z
$\^[tZ_$
[=[=[=U=
u+0/J8DQsze
u0u=v:<v vxvevb,vhv
u15bs3
u1-ts3x%&P	wu2
u1u}s3
u1Uws3
u1Ybs3$3&PIau2
u4u=v!v
u5043F;
U_58nW
u5Z32Pc
u+69M-
U]6X7$ed
!"u 73M
|U8/+"
}U8]nC%
<<u>98
u,98.9
u9v"v<Ovovav
uA5Iun
UA6X7 e\
^<|<<ubt
<+;;;uc$
>U'C}E
~U;,\d
]$UD$]7x
u>DEh(0+tpMZ|8F
U_dfbw
)uDuruy
~U:-]e
`ug5{M
ug6Am*
ug6LJ*P
U<><H&
{uh=_E
uhj9OV
uHlfM-
<.ui<(
?Ui6d7
 uI]#)#f
,	uIKj?
uj_1yH
U|k1g	
U\#,l;
Ul]>	~hmq
u]Lot-@
u]<>;?>ms
umX`X4
u$;"MY
uN/4yvek
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
<>U!nT
>|uP=+
U!|>P>>
u-P2Q3{X
u<*pkp
]Uqg?4P
< UQjg
uqv<zvnv
user32.dll
u_sHK{
Ut?;._g]
u*t,GX
+Uu6p7
(]U^V(
u_v2v<#o'oToKo<toxoeoQp\
u%v<rv
u"vSv<WvDv
u]vToJo<
u&v*vOv<yv
u<,vZv
uW8/_/L
UW8//!L
U!w@l6\
u=WP[I&
Ux{|-OT
:u`XT(
<\<<uy  
U]<Y}*]
UY^33PcfP515233Pc
:>Uz8=<U
}U;+Za
UZR/=9
;V;<>.
v0ILRuh
<v1v>oko
v1w(7X,@
=V2g:V
v32.li
V;4%1bu
v\4"Qh
V]5X4$fd
V7(C\gx
V8/!0g
V8/	1e
V8/_7\
\V8G_FL
v8o*o<Godo
|V8ZYl
}V9.^f
v_9<L=
}V9.Og
v9o<[ouogo
|V:,[b
vbzq1jlh
VC20XC00U
vC8/g$L
VE\DVd9
vepv33
~V:.]f
>V[_g:
Vg kM-
+vg&ScE.:
>VHb@XPJ(Dp
>VHxgmAD
?Vi5d4
v;I->8;I>>
vIorof,
VirtualAlloc
VirtualFree
VirtualProtect
Vj8/tZ
Vj=<F&&
vJooo`,omo
VJRaC?
VK^!`"
vk@%Ag
V;;l;)`,
V"LVL<CLuLyLnL>
(VLWLLLg=
VL`:Y2
vm|<oi,
vnK7YL
v%o*o<
<vPo]oZo@,o
vqod\@f+
v]rL]rDZKr
vs3t'&P)uu2
Vt_7L=L
v}t86>LJ
+Vu5W3
}vVBvOIO\(E
.v?vHv|\
/VvI5e5
v	v+o<)oOo\oEo<Iovo~o
v	v=o:o<zo
V vS,3
vW8/_g
vW8/_g_
vW8/_gI
vW8/_gY
vW8/Rg
VW8/tL
vW8/Xg
vWl/7gd
<#!>VY<7=
 vy/7FL
v#ZcfP
:$w>> 
<<<)W#
#&W-&$<&
|W^ 0ak
|W0/_g
\W^/0g
\W{/0g
\W[/0gc
[?W1+_
w16EI&
|W]/1g
|W]/1g 
|W1/_g
;=W1+_g
}W1+_g
W]/1g-
\W]/1gb
W\/1gh
w1Z32Pc
W]/2gb
W]/2go
|W2/Ug
]W2/Ug]
>=W3/_g
|W3/_ga
\W^/3gb
\W|/3gj
W]/3gt
w3pcfP
w3QcfP
|W4/_g
w\=?4><lp
W521TPcp751
|W5/_g
>W5/^gB
w[5!Pw
|W^/6g 
}W~/6ga
W~/6ga
W_/6gc
W@/6gy
<W6YV^
|W;/_7
|W7/_g
	W_/7g-
<;=W7+_g1:M
(w(7y$
|w8/+{
}w<{8=
W8/1ga
W8/2g~
W8/2gd
/W8/2gf
}W8/39L
|W8/3gy
|W8/4gb
=W8/4gl
W8/4gl
W8/5g[
W8/5gZn
|W8/,6
W8/6gi
|W8/7g
)W8/7g
|W8/7gd
W8/7gd
|W8/7gh
.W8/7gh
w8\7+\l;G
 W8/7Vy5t4
|W8/8ga
=W8/9g
W8/9gb
W8/9hbJ
w[!8<9Hk
==w8c 
<W8.[c	
}w8/C#L
W8/c L
W8/c/L
W8/c*L
|W8/^f
`<W8/_g
~W8_^g
~W8/~g
~W8/_g
~W8/\g
<!<W8/_g
<W8/_g
=W8/_g
=W8/,g
=W8/:g~
|W8-_g
|W8?_g
|W8/^g
|W8/^g	
|W8/>g
|W8/_g
|W8/_g_
|W8/_g-
|W8/_g,*
|W8/_g/
|W8/_g)
|W8/_g]
|W8/,g
|W8/,g`
|W8/,g{
|W8/]g
;|W8_^g
?W8/>g
(W8/_g~
)W8/g?
}W8/^g
}W8/_g
*W8/:g~
&W8/:g~
%W8/>g
+W8/_g
W8/_g`
W8/_g~
W8/_g|
W8/_g}
W8/_g@
W8/:g~
|W8/:ga
%W8/,ga
W8/_ga
|W8/-gb
	W8/:gc
W8/:gc
W8/+gc
|W8/;gd
.W8/)gd
	W8/;gd
W]/8gd
W8/_gd
W8/_gD
|W8/%ge
;W8/%ge
W8/'ge
W8/%ge
|W8/*gf
W8/_gf
W8/_gg
|W8/+gh
W8/,gh
W8/;gh
W8/_gi
W8/_gI
|W8/_g%jyi
|W8/>gk
W8/_gk
&W8/;gl
W8/_gl
W8/_gL
|W8/_gM
|W8/]gM
=W8/_g#;MS
]=W8/_gmYO
W8/_gn
W8/_go
|W8/_gu
|W8/*gw
W8/*gw
|W8/:gx
|W8/.gx
	W8/_gy
W8/_gy
W8//gy
/W8/gZL
|W8/~I
W['8I9"kW
+W8/Ig
<W8/k>L
|W8/{KM
}#]w8l
w8=<<L<
`W8/'[L
~W8/{=L
@W8/#,L
W8/'/L
W8/'+L
W8/[!L
W8/#*L
|W8/ng<
W8/oEL
:|W8o_gA
|W8/oxM
.W8/OZL
|W8/qg#
|W8/qXLRi}
|W8/rg 
=W8/Rg
|W8/Sg
\W8/S*L
W8/uW"4458gq
W8v7n	
|W8/_w
W8/\W14
<W8/W>L
W8/W[L
|W8/w:N
>W8/WZL
}W8[@/x!
|W8/Zg
|W8/Zg}
W8//ZL
&}W8ZM
|W9/2g
|W9/\7|
|W9/_g
[?W9/_g
}W9/^g
\[?W9/^g
[?W9/_gg
|W9/	gl
|W9/[o
;Wa4x5
W-&@Ac
W}A;#de`j
WA/-ga
WA/-gd
WA/_gK
%=WA/_g%$M
\WA/&gt
WaitForSingleObject
WA/rgj
|WB/7g 
WB/_g`
WB/:g-
WB/_gh
WB/>gy
W>B[K>
=Wb/rgN
	WB/rgn
	WB/rgo
W;>;<Cs
w]Cy M
w[E8d9
%w;;G(
~W:/]g
=W!/_g
=W'/_g
=W(/_g
>=W=/_g
>=W>/_g
>=W:/_g
|W^/>g
|W^/>g 
|W^/-g 
|W</_g
|W_/*g 
|W:/_g]
|W./_g
|W[/,g 
|W]/,g 
|W]/*g 
|W{/_g
|W*/_g
|W\/>g 
|W\/:g 
;=W'+_g
;=W"+_g
/W}/_g
[=W:/_g
}W<'_g
}W<'_g]
}W\._g
$W}/_g
\W]/-g
\W\/*g
	W[/+g[
W[/:g-
W]/,g~
W]/;g-
W]/;g#
W]/'g}
W]/+g-
W}/'g>
\Wg/0gc
W_/>ga
W[/+ga
	W[/+gb
\W^/*gc
W]/-gc
	W[/+gC
W]/'gd
W\/_gd
|W(/`ge
W]/_gf
%W}/_gh
W[/+gh
W]/_gh
W]/,gh
|W\/;gi
W]/>gi
W\/:gi
;W}/_gk
W_/-gl
WGl_>T
|W|/:gn
|W~/:go
W\/>gt
>=W?/_gUCM
W_/_gw
/W]//gy
\W\/>gy
W\/_gY
-<<*w&h
|WH/3g 
WH/3gb
WH/3gd
|WH/_g
\WH/*g
WH//ga
}Wh/-gb
#WH/-gb
WH/_gB
WH/>gc
WH/+gd
WH/>gn
WH/:gn
|Whj_gA
/Wh/rgN
WideCharToMultiByte
["wif	%Q[&Y
WI/_gl
Wi&M*WN
~Wiq*6TZ:g
Wi~Ve-<-
WJ/0g`
,WJ/0gi
WJ/1gl
WJ/6ga
WJ/6gj
WJ/8gx
|WJ/*g
|WJ/*g 
WJ/_g}
WJ/_g@
WJ/;g#
WJ/+g-
WJ/-gb
|WJ/*gc
WJ/_gC
WJ/:gh
?Wj/_gk
WJ/_gK
	WJ/;gl
WJ/:gl
WJ/*gl
(Wj/_gx
WJ/>gy
|Wj/ig=
WJ/rg^
WJ/rg~
WJ/rga
WJ/rgD
WJ/rgi
WJ/rgL
WJ/rgn
WJ/rgo
WK/0gk
|WK/2g~
|WK/2gg
|WK/2gl
WK/6gb
|Wk/_g
|Wk/&g~
|WK/-g 
|WK/:g 
|WK/)g 
|WK/&g
\WK/*g}
	WK/+g
WK/*ga
\WK//gl
\WK/:gn
|Wk/>gy
WkJ/gBgx
W$K;;l!H
WK/rg~
WK/rg]
WK/rgc
WK/rgh
WK/rgH
WK/rgI
WK/rgK
WK/rgo
WK/rgO
< W;;l
WL/6g`
WL/6gb
WL/6gl
WL/6gn
WL/6gy
|WL/7g
|WL/7g 
 w$Lb$
|WL/+g
WL/,g-
WL/:g~
WL/:g>
|Wl/*gh
(Wl/_gh
=WL/+gh
WL/_gh
WL/	gh
WL/_gi
;Wl/_gk
\WL/>go
?;W\:/ljhi
WL/rg@
WL/rga
WL/rgA
WL/rgd
WL/rgD
WL/rgN
|WL/ug
WL/wg$
w<L?y0
WlZ:gZah
w 	<:$M
/WM/1gi
\Wm/1gl
\WM/1gl
=WM/8g
WM/8ge
;W	/mg
|WM/-g 
|WM/%g 
(WM/:g
WM/-g~
WM/-g-
WM/%g 
WM/_gk
WM/<gy
wMG\YM
WM/rgd
WM/rge
WM/rgW
W^`"M v
|WN/6g 
\WN/6g
WN/6gn
|W	/ng#
WN/:g-
WN/_gl
WN/rg^
wN'/ (Rx
wO'"{~
}W`O^g
}W(/Og
W`O#Pt"2
WO/rgf
WO/rgF
|W(?Ow
w>ox>H
-wP17j
(WP/6g~
W&P7152#3Pc
wPbfP5
w#;Pcf
|WP/:g 
|WP/*g
|WP/&g 
|WP.^g
%=WP;\g
WP/:g-
WP/+g~
/WP/:ga
WP/>gc
>Wp/_gh
\WP/:gl
wpkphp
WP/rge
WP/rgN
WQ/0g-
WQ/0gc
\WQ/1g-
\WQ/1gd
\WQ/1gi
WQ/1gj
WQ/1gl
WQ/1go
wQ=243<ap
WQ/2gh
:WQ/3gh
WQ/+g?
WQ/+g"
WQ/+gd
.WQ/<ge
/Wq/_gh
.W}/qgH
WQ/)gh
WQ/%gh
WQ/<gl
WQ/;gl
WQ/%gl
|WQ/:gu
WQ/,gy
WQ/rgK
=WR/5g
]WRC]ifP51g
|WR/>g 
}WR+^g
|Wr/*ga
W]/rga
W]/rgA
WR<'gAW
W]/rgd
WriteFile
|WS/0gf
|WS/1g
wS8/SYL
wS	HLA
	WS/rgx
	WS/rgX
\WT/0gn
WT/3gd
WT/3gh
\Wt/6go
WT/6gw
wT!7<6Hd
|WT/)g 
WT/:g~
WT/:g-
WT/:g[
WT/_gc
WT/:gD
|WtN^gUe
}Wtp^g
WT/rg~
WT/rgD
WT/rgH
WT/rgj
\[?WTv
w \u_$
|Wu/0gc
WU/0gi
WU/1g 
|WU/4g
WU/5g 
|Wu/6gn
\Wu/6gn
|Wu/9gn
|WU/-g 
|WU/,g
}WU/_g
WU/>g 
WU/:g-
WU/=ga
WU/>gc
WU/:gc
WU/_gh
WU//gy
w&u}&L.|[w&
WV/0gx
\WV/0gy
|WV/3g
|WV/3g 
WV/6gy
Wv/>g`
WV/_g`
WV/+g~
WV/,ga
WV/_gA
WV/<gb
WV/;gd
*Wv/_ge
WV/_ge
WV/<gh
WV/_gl
WV/+gN
	WV/:gu
	WV/<gy
WV/,gy
WV/qg-
WV/rg`
WV/rgd
WV/rgD
WV/rgj
WV/rgW
WV/rgy
w(w%>#
WW/1g-
WW/2g-
WW/2g}
WW/4g 
WW/6gc
\WW/9g-
WW/9gy
:Ww/_g
?WW/-g}
\WW/-g-
WW/_g~
WW/-g`
WW/-g-
WW/+g-
WW/,gb
WW/(gc
WW/<gf
\WW//gh
WW/_gh
WW/-gh
WW/;gh
WW/*gj
WW/_gk
WW/rg_
WW/rgF
|Wx,_g
|Wx/_g
#W]xgmrew
<WXp^g
Wy/1gd
WY/2gh
	WY/3g-
WY/3gd
WY/3gN
|WY/9g 
|Wyb_g]I
|WY/-g 
|WY/%g 
WY/,g-
WY/+gc
WY/-gd
WY/+gd
Wy_-g@eu
WY/<gh
WY/_gh
WY/+gh
WY/_gl
WY/_gw
WY/_gy
WY/rg~
WY/rga
WY/rgd
WY/rgD
WY/rgH
WZ/0gO
WZ/3gh
Wz/>g~
|WZ/,g 
|WZ/:g
|WZ/:g 
;Wz/_gh
!wZn<],
|Wz/Ng
WZ/rgc
`,>;)x
=,;)x+<
 >,;)x=
 :<=x<
	=,;)x
x |= [
#<<<;X
{X0[5{
|X0"~-I
X0^M*/
X0YMvb
x17P0G
X;)$7)<e
x7)i]7zyjq_F@<Iqw
x_8//d
{X!;8:@h|
x[8/k%L
x#<8;<w
X<8;)x}
 X<	 9X+ |
,X[b|qd
,>;)xC
+',$Xe
<&xei|9<<
X`F|#5y
XFDL<LL<@L<X
{xfex`
x_><f=in$
x'fPcfA
<"<@X.g>
@x_g^axQ
xGhjoj
@x_gNvid
X[[GZ1
>XH8X:H=X=>
xi(>CO>
Xiy/Qc
X|j;8j 
[^  xk
,%@xL]*
X;;l;)
X\L<DL<
}xlj}leY+x
x\lOG;
=x>Ly>`}>cd>w
<XL=|Z
`X mgx;
Xm	%KK>
,`X@mm
@$xmm\a5
x |n|ct
]Xnk9^X8
x<>:o~"=oz$
xO=WU/_g
<xoz$<+
)x&=P)
X./_>P
x>PI%dM%
XPL<XL<\}L<T
XP}#`\}s
XP;<xXT
\&|x^Q
xq1_3e
xqyp	"M/_g#r=7=t
xqyp	"MZ*
<xR,wo
xS<+[c
x	>;SD*
XSD"@e
XT]VqG
XT,>xX(3|
`X(<Ud
X<V<,,
xV23js
XvdH6I
xVFl(,t
x-=w>+
x&'w&|
X%<<w+^
,x=W8/_g
xW8/_g
X?W8[Z
XW)9hbJ
xW</^g
X;=W,+_gm:M
XW</_gY
$x=WL(
x`WL%5f[
x~'WmN
xx#,=:
@?;xX,
XX|$@=
x,X,k9
[;xXt%
xXT<U<;g^,
=x>Xy>P}>Yd>y
X>,<=y,
X*y/+`]
x>@y>H}>f|#y>
=\X<yL
Xz.7mxL>nG
xZ<908
\<$;y$
&<y|>(
`:(;;<y0
y0=<c =c,=z@<
<]y0u>
=?,y0u
;y0uy0
%;y0=y
Y%1#8C
Y?3;%e
-y/+|4
y4<<:\
^';y44
<=y4-i0
y4.l<=
y4]t*x
y~6IJ8D
|'y/7#
<Y;+<<7=
<Y;+<<7=7
\Y7t]7j
Y7Y6*IG
[>Y,>+8
y>85=,
Y8/5WTb
y,8=$\ 7
<<y|8(}8
	y>8}>Cd>
|y$8wo
<Y<9})<
\y9,}9
Y9~JnuYBK8Dun
yac+\-MZt~
ya_g<5=7Me	
Y[:!bvad
>ycEn_
YcYl_f~
Y]DZ?C
|'y/*e
y<>e<>
y,eC<<
Y;EOk>g:-7
<+y/fR1xM
YFv8,a
	}<%y$g
Y=$\<G
yg3IFm
~"YGIu
YgIu$d
y,gjG,
"Y]&gKanw	6JV_g
y$[g#W+Ae
ygYl_b
$YH:%b|[
YHusgY
yIca	;]i6
y\^{iQ
YK(Bm"
yk~v+We.
yk~"|W8/?
yk~"|WXL0
y;;,l;
<<<".yL
|y/#LL
y =lV<
Y-l vr
|<y|<m
yM/a)p
ymbb\3]\+
ymck+W8/
|}y/[ML
}y//ML
Y/moYy
,>_ynb
y[O/EpTM4#0g
)YO\H{
y @oy,
yp	"MZ*
:y}:=|Q
y_Ql_f
\YRh=N
yS50F1
|{y/SKL
y$|TdVT
Yt^QV3Cq
Ytuy4X
ytyq82ZZ84yvek
Yu_Md7
yW8/Rg
y$\Y;[<
_^][YY
<Y\)=Y'9YG7Y
YYh(p@
Y]YUzq
=<z<;#
z<#<%(
<=Z;)@
+Z_0_2Y3
Z0U"/c
z;1_j3
z[@2]lwa+
Z33PcfP
Z4L:x8
z4.o61y,D
Z "4t7^J
z5=>K4
`*z6^i5%
z,78z@,gl
z8 L<<<
z8#L<<<
:;z <;8t
z8v9=$
"z~9^M*
ZA@B33
^ZaIoH
"ZBZTG
)/zc<<<
"ZC8833Pc4f
z Dg,"
 ze_[^
Zeeq|W8/
,*Z"HA
|ZHdM=
z>hL*<
zHl:~c
Z|HS;;
z( =<I
Zi"8]G
ZI9\8(j`
ZIarX0Y
ZI+]^IV~-
ZIt2F@5
<ZIw;^W
ZIX(Q0
Z:=<i<y
<z$-j 
]/z]jumGJ=2q
;Z;;lj<
ZmLM_CG|
ZMsMkM
ZM=<TY
*<z<=n
Z[N8@9
>ZNF%[PW^V
>ZNF%[TMBVP$
zP0&Ul
zP=,ZzX;
zqki.&
zrXAa'-
z~\<s:l
ZT\Rp~+
+Zu9p8|W8
z>uy$<
zV#5?4@fy
<z)vz]
z(|vz\+
=(zW<-
zW"4V5
zW8)_f
ZW8/rY'
ZWp/vg
<Z.>Xf
}>z]x>m=
Z\XS]W
"Z_XW]G
}=z(,?z@?