Please wait ...




RansomwareDetectionUsingStrings Rows: 2397 | Cols: 4 | Reports Used: 3084

Description: This dataset extracts the printable strings from the cuckoo reports which will be used for machine learning for ransomware detection.

Dataset SHA256: b56e760893fbb064d5143346f2ef96c635bbb56af7aa06b6d60f2c7979ae29f8

Features (sample):

category label strings SHA256
0 Ransomware M This program must be run under Win32\n`.itext\n`.data\n.idata\n.didata\n.edata\n.rdata\n@.reloc\nB.rsrc\nBoolean\nSystem\nAnsiChar\nShortInt\nSmallInt\nInteger\nPointer\nCardinal\nUInt64\nNativeInt\nNativeUInt\nSingle\nExtended\nDouble\nCurrency\nShortString\nPAnsiChar0\nPWideCharL\nByteBool\nSystem\nWordBool\nSystem\nLongBool\nSystem\nstring\nWideString\nAnsiString\nVariant\nTClass\nHRESULT\n&op_Equality\n&op_Inequality\nPInterfaceEntry\nTInterfaceEntry\nVTable\nIOffset\nImplGetter\nPInterfaceTable\nTInterfaceTable\nEntryCount\nEntries\nTMethod\n&op_Equality\n&op_Inequality\n&op_GreaterThan\n&op_GreaterThanOrEqual\n&op_LessThan\n&op_LessThanOrEqual\nTObject&\nCreate\nDisposeOf\nInitInstance\nInstance\nCleanupInstance\nClassType\nClassName\nClassNameIs\nClassParent\nClassInfo\nInstanceSize\nInheritsFrom\nAClass\nMethodAddress\nMethodAddress\nMethodName\nAddress\nQualifiedClassName\nFieldAddress\nFieldAddress\nGetInterface\nGetInterfaceEntry\nGetInterfaceTable\nUnitName\nUnitScope\nEquals\nGetHashCode\nToString\nSafeCallException\nExceptObject\nExceptAddr\nAfterConstruction\nBeforeDestruction\nDispatch\nMessage\nDefaultHandler\nMessage\nNewInstance\nFreeInstance\nDestroy\nTObject\nSystem\nTCustomAttribute\nTCustomAttribute|@\nSystem\nWeakAttribute4 @\nWeakAttribute\nSystem\nVolatileAttribute\nVolatileAttribute\nSystem\nIInterface\nSystem\nIEnumerable\nSystem\nIDispatch\nSystem\nFRefCount\nTInterfacedObject1\nAfterConstruction\nBeforeDestruction\nNewInstance\nTInterfacedObject@"@\nSystem\nRefCount\nPShortString\nPAnsiString\nPWideString\nPUnicodeString\nUTF8String\nRawByteString\nPLongInt\nPInt64\nPExtended\nPCurrency\nPVariant\nTDateTime\nTVarArrayBound\nElementCount\nLowBound\nTVarArrayBoundArray\nPVarArray\%@\nTVarArray\nDimCount\nElementSize\nLockCount\nBounds\nTVarRecord\nPRecord\nRecInfo\nTVarData\nReserved1\nReserved2\nReserved3\nVSmallInt\nVInteger\nVSingle\nVDouble\nVCurrency\nVOleStr\nVDispatch\nVError\nVBoolean\nVUnknown\nVShortInt\nVLongWord\nVInt64\nVUInt64\nVString\nVArray\nVPointer\nVUString\nVRecord\nVLongs\nVWords\nVBytes\nRawData\nTTypeKind\ntkUnknown\ntkInteger\ntkChar\ntkEnumeration\ntkFloat\ntkString\ntkClass\ntkMethod\ntkWChar\ntkLString\ntkWString\ntkVariant\ntkArray\ntkRecord\ntkInterface\ntkInt64\ntkDynArray\ntkUString\ntkClassRef\ntkPointer\ntkProcedure\nSystem\nTVarRec\nVInteger\nVBoolean\nVExtended\nVString\nVPointer\nVPChar\nVObject\nVClass\nVWideChar\nVPWideChar\nVAnsiString\nVCurrency\nVVariant\nVInterface\nVWideString\nVInt64\nVUnicodeString\n_Reserved1\nTPtrWrapper\nCreate\nAValue\nCreate\nAValue\nToPointer\nToInteger\n&op_Equality\n&op_Inequality\nTMarshal&\nCreate\nInString\nOutString\nInOutString\nAsAnsi\nAsAnsi\nAllocMem\nReallocMem\nOldPtr\nNewSize\nFreeMem\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nStartIndex\nReadByte\nReadInt16\nReadInt32\nReadInt64\nReadPtr\nWriteByte\nWriteInt16\nWriteInt32\nWriteInt64\nWritePtr\nWriteByte\nWriteInt16\nWriteInt32\nWriteInt64\nWritePtr\nFixString\nUnfixString\nUnsafeFixString\nUnsafeAddrOf\nAllocStringAsAnsi\nAllocStringAsAnsi\nCodePage\nAllocStringAsUnicode\nAllocStringAsAnsi\nAllocStringAsAnsi\nCodePage\nAllocStringAsUtf8\nAllocStringAsUtf8\nReadStringAsAnsi\nReadStringAsAnsi\nCodePage\nReadStringAsUnicode\nReadStringAsUtf8\nReadStringAsAnsiUpTo\nCodePage\nMaxLen\nReadStringAsUnicodeUpTo\nMaxLen\nReadStringAsUtf8UpTo\nMaxLen\nWriteStringAsAnsi\nMaxCharsIncNull\nWriteStringAsAnsi\nMaxCharsIncNull\nCodePage\nWriteStringAsAnsi\nMaxCharsIncNull\nWriteStringAsAnsi\nMaxCharsIncNull\nCodePage\nWriteStringAsUnicode\nMaxCharsIncNull\nWriteStringAsUnicode\nMaxCharsIncNull\nWriteStringAsUtf8\nMaxCharsIncNull\nWriteStringAsUtf8\nMaxCharsIncNull\nTMarshal\nSystem\nTTypeTable\nPTypeTableHD@\nPPackageTypeInfo\nTPackageTypeInfo\nTypeCount\nTypeTable\nUnitCount\nUnitNames\nTArray<System.Byte>\nSystem\nTArray<System.Char>\nSystemL\nTArray<System.Word>\nSystem\nTArray<System.ShortInt>\nSystemd\nTArray<System.SmallInt>\nSystem\nTArray<System.Integer>\nSystem\nTArray<System.Int64>\nSystem\nTArray<System.TPtrWrapper>\nSystemX+@\nPLibModule\nTLibModule\nInstance\nCodeInstance\nDataInstance\nResInstance\nTypeInfo\nReserved\nPResStringRec\nTResStringRec\nModule\nIdentifier\nTFloatSpecial\nfsZero\nfsNZero\nfsDenormal\nfsNDenormal\nfsPositive\nfsNegative\nfsNInf\nSystem\nTExtended80Rec\naExtended80\nExponent\nFraction\nMantissa\nSpecialType\nBuildUp\nSignFlag\nMantissa\nExponent\n&op_Explicit\n&op_Explicit\nPExceptionRecord\nTExceptionRecordP\nExceptionCode\nExceptionFlags\nExceptionRecord\nExceptionAddress\nNumberParameters\nExceptionInformation\nExceptAddr\nExceptObject\nAn unexpected memory leak has occurred. \nThe unexpected small block leaks are:\nThe sizes of unexpected leaked medium and large blocks are: \n bytes: \nUnknown\nAnsiString\nUnicodeString\nUnexpected Memory Leak\n~]x[[)\n_^[YY]\nGetLogicalProcessorInformation\nYZXtm1\nZTUWVSPR\n_^[YY]\n_^[YY]\n;Z]_^[\nSVWRPj\nZ_^[XX\ntWI|TVS\ntdI|aVS\nzh-TW,zh-Hant,zh\nes-ES_tradnl\nnb-NO,nb,no\ntg-Cyrl-TJ\naz-Latn-AZ\nuz-Latn-UZ\nmn-MN,mn-Cyrl,mn\niu-Cans-CA\nha-Latn-NG\nqps-ploc,en\nqps-ploca,ja\nzh-CN,zh-Hans,zh\nnn-NO,nn,no\nsr-Latn-CS\naz-Cyrl-AZ\ndsb-DE,dsb,hsb\nuz-Cyrl-UZ\nmn-Mong-CN\niu-Latn-CA\ntzm-Latn-DZ\nqps-plocm,ar\nzh-HK,zh-Hant,zh\nsr-Cyrl-CS\nzh-SG,zh-Hans,zh\nsmj-NO,smj,se\nzh-MO,zh-Hant,zh\nbs-Latn-BA\nsmj-SE,smj,se\nsr-Latn-BA\nsma-NO,sma,se\nsr-Cyrl-BA\nsma-SE,sma,se\nbs-Cyrl-BA\nsms-FI,sms,se\nsr-Latn-RS\nsmn-FI,smn,se\nsr-Cyrl-RS\nsr-Latn-ME\nsr-Cyrl-ME\nGetThreadPreferredUILanguages\nSetThreadPreferredUILanguages\nGetThreadUILanguage\n,tdBHu\nGetLongPathNameW\n_^[YY]\n$Z]_^[\n$Z]_^[\nYZ]_^[\n_^[YY]\n_^[YY]\nTStringDynArray\nSystem.Types\nTDuplicates\ndupIgnore\ndupAccept\ndupError\nSystem.Types\nTDirection\nFromBeginning\nFromEnd\nSystem.Types\nCreate\nCreate\n&op_Equality\n&op_Inequality\n&op_Addition\n&op_Subtraction\nDistance\nIsZero\nSubtract\nTSmallPoint\nCreate\nCreate\nCreate\n&op_Equality\n&op_Inequality\n&op_Addition\n&op_Subtraction\nDistance\nIsZero\nSubtract\nTPoint\nCreate\nCreate\n&op_Equality\n&op_Inequality\n&op_Addition\n&op_Subtraction\n&op_Implicit\n&op_Explicit\nPointInCircle\nCenter\nRadius\nDistance\nSetLocation\nSetLocation\nOffset\nOffset\nSubtract\nIsZero\nAPoint\nTSplitRectType\nsrLeft\nsrRight\nsrBottom\nSystem.Types\nBottom\nTopLeft\nBottomRight\nCreate\nOrigin\nCreate\nOrigin\nHeight\nCreate\nBottom\nCreate\nNormalize\nCreate\nNormalize\n&op_Equality\n&op_Inequality\n&op_Addition\n&op_Multiply\nNormalizeRect\nIsEmpty\nContains\nContains\nIntersectsWith\nIntersect\nIntersect\nPoints\nOffset\nOffset\nSetLocation\nSetLocation\nInflate\nInflate\nCenterPoint\nSplitRect\nSplitType\nSplitRect\nSplitType\nPercent\nTWaitResult\nwrSignaled\nwrTimeout\nwrAbandoned\nwrError\nwrIOCompletion\nSystem.Types\nTOpenOption\nofReadOnly\nofOverwritePrompt\nofHideReadOnly\nofNoChangeDir\nofShowHelp\nofNoValidate\nofAllowMultiSelect\nofExtensionDifferent\nofPathMustExist\nofFileMustExist\nofCreatePrompt\nofShareAware\nofNoReadOnlyReturn\nofNoTestFileCreate\nofNoNetworkButton\nofNoLongNames\nofOldStyleDialog\nofNoDereferenceLinks\nofEnableIncludeNotify\nofEnableSizing\nofDontAddToRecent\nofForceShowHidden\nSystem.UITypes\nTOpenOptions\nTOpenOptionEx\nofExNoPlacesBar\nSystem.UITypes\nTOpenOptionsEx\nTBorderIcon\nbiSystemMenu\nbiMinimize\nbiMaximize\nbiHelp\nSystem.UITypes\nTBorderIcons\nTWindowState\nwsNormal\nwsMinimized\nwsMaximized\nSystem.UITypes\nTEditCharCase\necNormal\necUpperCase\necLowerCase\nSystem.UITypes\nTFontCharset\nTFontPitch\nfpDefault\nfpVariable\nfpFixed\nSystem.UITypes\nTFontQuality\nfqDefault\nfqDraft\nfqProof\nfqNonAntialiased\nfqAntialiased\nfqClearType\nfqClearTypeNatural\nSystem.UITypes\nTFontStyle\nfsBold\nfsItalic\nfsUnderline\nfsStrikeOut\nSystem.UITypes\nTFontStyles\nTFontName\nTFontDataName|\nTFontStylesBase\nTCloseAction\ncaNone\ncaHide\ncaFree\ncaMinimize\nSystem.UITypes\nTMouseButton\nmbLeft\nmbRight\nmbMiddle\nSystem.UITypes\nTMouseActivate\nmaDefault\nmaActivate\nmaActivateAndEat\nmaNoActivate\nmaNoActivateAndEat\nSystem.UITypes\nTTabOrder\nTModalResult\nTDragMode\ndmManual\ndmAutomatic\nSystem.UITypes\nTDragState\ndsDragEnter\ndsDragLeave\ndsDragMove\nSystem.UITypes\nTDragKind\ndkDrag\ndkDock\nSystem.UITypes\nTAnchorKind\nakLeft\nakRight\nakBottom\nSystem.UITypes\nTAnchors\nTScrollCode\nscLineUp\nscLineDown\nscPageUp\nscPageDown\nscPosition\nscTrack\nscBottom\nscEndScroll\nSystem.UITypes\nTPrinterState\npsNoHandle\npsHandleIC\npsHandleDC\nSystem.UITypes\nTPrinterOrientation\npoPortrait\npoLandscape\nSystem.UITypes\nTPrinterCapability\npcCopies\npcOrientation\npcCollation\nSystem.UITypes\nTPrinterCapabilities\nTCursor\nTColor\nTAlphaColor\nTImageIndex\nTScrollStyle\nssNone\nssHorizontal\nssVertical\nssBoth\nSystem.UITypes\nPListEntry|\n_LIST_ENTRY\nPRTLCriticalSection\nPRTLCriticalSectionDebug\n_RTL_CRITICAL_SECTION_DEBUG \nType_18\nCreatorBackTraceIndex\nCriticalSection\nProcessLocksList\nEntryCount\nContentionCount\n_RTL_CRITICAL_SECTION\nDebugInfo\nLockCount\nRecursionCount\nOwningThread\nLockSemaphore\nReserved\nHACCEL\nHBITMAP\nHBRUSH\nHPALETTE\nPSecurityAttributes\n_SECURITY_ATTRIBUTES\nnLength\nlpSecurityDescriptor\nbInheritHandle\n_FILETIME\ndwLowDateTime\ndwHighDateTime\n_SYSTEMTIME\nwMonth\nwDayOfWeek\nwMinute\nwSecond\nwMilliseconds\n_TIME_ZONE_INFORMATION\nStandardName\nStandardDate\nStandardBias\nDaylightName\nDaylightDate\nDaylightBias\n_WIN32_FIND_DATAWP\ndwFileAttributes\nftCreationTime\nftLastAccessTime\nftLastWriteTime\nnFileSizeHigh\nnFileSizeLow\ndwReserved0\ndwReserved1\ncFileName\ncAlternateFileName\ntagBITMAP\nbmType\nbmWidth\nbmHeight\nbmWidthBytes\nbmPlanes\nbmBitsPixel\nbmBits\ntagBITMAPINFOHEADER(\nbiSize\nbiWidth\nbiHeight\nbiPlanes\nbiBitCount\nbiCompression\nbiSizeImage\nbiXPelsPerMeter\nbiYPelsPerMeter\nbiClrUsed\nbiClrImportant\nPDeviceModeW\\n_devicemodeW\ndmDeviceName\ndmSpecVersion\ndmDriverVersion\ndmSize\ndmDriverExtra\ndmFields\ndmOrientation\ndmPaperSize\ndmPaperLength\ndmPaperWidth\ndmScale\ndmCopies\ndmDefaultSource\ndmPrintQuality\ndmColor\ndmDuplex\ndmYResolution\ndmTTOption\ndmCollate\ndmFormName\ndmLogPixels\ndmBitsPerPel\ndmPelsWidth\ndmPelsHeight\ndmDisplayFlags\ndmDisplayFrequency\ndmICMMethod\ndmICMIntent\ndmMediaType\ndmDitherType\ndmICCManufacturer\ndmICCModel\ndmPanningWidth\ndmPanningHeight\ntagDIBSECTIONT\ndsBmih\ndsBitfields\ndshSection\ndsOffset\ntagMSG\nmessage\nwParam\nlParam\ntagNMHDR\nhwndFrom\nidFrom\nodSelected\nodGrayed\nodDisabled\nodChecked\nodFocused\nodDefault\nodHotLight\nodInactive\nodNoAccel\nodNoFocusRect\nodReserved1\nodReserved2\nodComboBoxEdit\nWinapi.Windows\nTOwnerDrawState\nGESTURECONFIG\ndwWant\ndwBlock\nTDWordFiller\nTMessage\nWParam\nLParam\nResult\nWParamLo\nWParamHi\nWParamFiller\nLParamLo\nLParamHi\nLParamFiller\nResultLo\nResultHi\nResultFiller\nTWMKey\nMsgFiller\nCharCode\nUnused\nCharCodeUnusedFiller\nKeyData\nKeyDataFiller\nResult\nTWMMenuChar\nMsgFiller\nMenuFlag\nUserMenuFlagFiller\nResult\n !"#$%&'(!)*+,-./0'\n56789:\n;<<<<<<<<=========================\n@ABCDEFGHHHIJKLMHNHOHHHHHHHHHHHHHHH\nPQHHHHHHHHHHH\nRHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHSTUVWXYZHHHHHHHHHHHHHHHHHHHHHHHH[\]HHHHHHHHHHHHH\n_HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH\n`HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH\n?333333\n?tE)!XU\n?tE)!XU\nTFileName\nTSearchRecp\nExcludeAttr\nFindHandle\nFindData\nTLangRec\nFLocaleName\nFSysLangs\nTLanguages&\nCreate\nDestroy\nGetLocaleIDFromLocaleName\nLocaleName\nIndexOf\nIndexOf\nLocaleName\nGetName\nGetNameFromLocaleID\nGetNameFromLCID\nGetLocaleName\nGetLocaleID\nGetLocaleIDFromName\nLocaleName\nGetExt\nTLanguages\nSystem.SysUtils\nNameFromLocaleID\nNameFromLCID\nLocaleName\nLocaleID\nLocaleIDFromName\nFMessage\nFHelpContext\nFInnerException\nFStackInfo\nFAcquireInnerException\nException3\nCreate\nCreateFmt\nCreateRes\nCreateRes\nResStringRec\nCreateResFmt\nCreateResFmt\nResStringRec\nCreateHelp\nAHelpContext\nCreateFmtHelp\nAHelpContext\nCreateResHelp\nAHelpContext\nCreateResHelp\nResStringRec\nAHelpContext\nCreateResFmtHelp\nResStringRec\nAHelpContext\nCreateResFmtHelp\nAHelpContext\nDestroy\nGetBaseException\nToString\nRaiseOuterException\nThrowOuterException\nException\nSystem.SysUtils\nBaseException\nHelpContext\nInnerException\nMessage\nStackTrace\nStackInfo\nEArgumentException\nEArgumentException0\nSystem.SysUtils\nEArgumentOutOfRangeException\nEArgumentOutOfRangeException\nSystem.SysUtils\nEPathTooLongException\nEPathTooLongException\nSystem.SysUtils\nENotSupportedException\nENotSupportedExceptionl\nSystem.SysUtils\nEDirectoryNotFoundException\nEDirectoryNotFoundException,\nSystem.SysUtils\nEFileNotFoundException\nEFileNotFoundException\nSystem.SysUtils\nEListError\nEListError\nSystem.SysUtils\nEInvalidOpException\nEInvalidOpException\\nSystem.SysUtils\nEAbort\nEAbort\nSystem.SysUtils\nAllowFree\nEHeapException,\nFreeInstance\nEHeapException\nSystem.SysUtils\nEOutOfMemory\nEOutOfMemory\nSystem.SysUtils\nErrorCode\nEInOutError\nEInOutError\\nSystem.SysUtils\nExceptionRecord\nEExternal\nEExternal \nSystem.SysUtils\nEExternalException\nEExternalException\nSystem.SysUtils\nEIntError\nEIntError\nSystem.SysUtils\nEDivByZero\nEDivByZeroD\nSystem.SysUtils\nERangeError\nERangeError\nSystem.SysUtils\nEIntOverflow\nEIntOverflow\nSystem.SysUtils\nEMathError\nEMathError<\nSystem.SysUtils\nEInvalidOp\nEInvalidOp\nSystem.SysUtils\nEZeroDivide\nEZeroDivide\nSystem.SysUtils\nEOverflowP\nEOverflow4\nSystem.SysUtils\nEUnderflow\nEUnderflow\nSystem.SysUtils\nEInvalidPointer\nEInvalidPointer\nSystem.SysUtils\nEInvalidCast\nEInvalidCast0\nSystem.SysUtils\nEConvertError\nEConvertError\nSystem.SysUtils\nEAccessViolation\nEAccessViolation\nSystem.SysUtils\nEPrivilege\nEPrivilege4\nSystem.SysUtils\nEStackOverflow\nEStackOverflow\nSystem.SysUtils\nEControlC\nEControlC\nSystem.SysUtils\nEVariantErrorP\nEVariantError0\nSystem.SysUtils\nEPropReadOnly\nEPropReadOnly\nSystem.SysUtils\nEPropWriteOnly\nEPropWriteOnly\nSystem.SysUtils\nEAssertionFailed\nEAssertionFailed8\nSystem.SysUtils\nEAbstractError\nEAbstractError\nSystem.SysUtils\nEIntfCastError\nEIntfCastError\nSystem.SysUtils\nErrorCode\nEOSError\nEOSErrorH\nSystem.SysUtils\nESafecallException\nESafecallException\nSystem.SysUtils\nEMonitor\nEMonitor\nSystem.SysUtils\nEMonitorLockException\nEMonitorLockException\\nSystem.SysUtils\nENoMonitorSupportException\nENoMonitorSupportException\nSystem.SysUtils\nENotImplemented\nENotImplemented\nSystem.SysUtils\nEObjectDisposed\nEObjectDisposed\nSystem.SysUtils\n TArray<System.SysUtils.TLangRec>\nSystem\nTFormatSettings.TEraInfo\nEraName\nEraOffset\nEraStart\nEraEnd\n:TFormatSettings.:10\n:TFormatSettings.:20\n:TFormatSettings.:3\n:TFormatSettings.:4\n:TFormatSettings.:5\nSystem.SysUtils,\nTFormatSettings\nCurrencyString\nCurrencyFormat\nCurrencyDecimals\nDateSeparator\nTimeSeparator\nListSeparator\nShortDateFormat\nLongDateFormat\nTimeAMString\nTimePMString\nShortTimeFormat\nLongTimeFormat\nShortMonthNames\nLongMonthNames\nShortDayNames\nLongDayNames\nEraInfo\nThousandSeparator\nDecimalSeparator\nTwoDigitYearCenturyWindow\nNegCurrFormat\nNormalizedLocaleName\nCreate\nCreate\nLocale\nCreate\nLocaleName\nGetEraYearOffset\nSystem.SysUtils\nSystem.SysUtils\nIReadWriteSync\nSystem.SysUtils\nPThreadInfo\nTThreadInfo\nThreadID\nActive\nRecursionCount\nFHashTable\nTThreadLocalCounter'\nDestroy\nThread\nDelete\nThread\nThread\nTThreadLocalCounter\nSystem.SysUtils\nFSentinel\nFReadSignal\nFWriteSignal\nFWaitRecycle\nFWriteRecursionCount\nFWriterID\nFRevisionLevel\n$TMultiReadExclusiveWriteSynchronizer&\nCreate\nDestroy\nBeginRead\nEndRead\nBeginWrite\nEndWrite\n$TMultiReadExclusiveWriteSynchronizer\nSystem.SysUtils\nRevisionLevel\nFLength\nFMaxCapacity\nTStringBuilder&\nCreate\nCreate\naCapacity\nCreate\nCreate\naCapacity\naMaxCapacity\nCreate\naCapacity\nCreate\nStartIndex\nLength\naCapacity\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nAppend\nRepeatCount\nAppend\nStartIndex\nCharCount\nAppend\nStartIndex\nAppendFormat\nFormat\nAppendLine\nAppendLine\nCopyTo\nSourceIndex\nDestination\nDestinationIndex\nEnsureCapacity\naCapacity\nEquals\nStringBuilder\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nInsert\nstartIndex\ncharCount\nRemove\nStartIndex\nRemLength\nReplace\nOldChar\nNewChar\nReplace\nOldValue\nNewValue\nReplace\nOldChar\nNewChar\nStartIndex\nReplace\nOldValue\nNewValue\nStartIndex\nToString\nToString\nStartIndex\nStrLength\nGetChars\nSetChars\nTStringBuilder\nSystem.SysUtils\nCapacity\nLength\nMaxCapacity\nEEncodingError\nEEncodingError\nSystem.SysUtils\nIEnumerable<System.string>0!@\nSystem\nTArray<System.string>\nSystem\nFIsSingleByte\nFMaxCharSize\nTEncoding%\nConvert\nSource\nDestination\nConvert\nSource\nDestination\nConvert\nSource\nDestination\nStartIndex\nConvert\nSource\nDestination\nStartIndex\nFreeEncodings\nIsStandardEncoding\nAEncoding\nGetBufferEncoding\nBuffer\nAEncoding\nGetBufferEncoding\nBuffer\nAEncoding\nADefaultEncoding\nGetByteCount\nGetByteCount\nGetByteCount\nGetByteCount\nCharIndex\nCharCount\nGetByteCount\nCharIndex\nCharCount\nGetByteCount\nGetByteCount\nCharIndex\nCharCount\nGetBytes\nGetBytes\nGetBytes\nGetBytes\nCharIndex\nCharCount\nGetBytes\nCharIndex\nCharCount\nGetBytes\nCharIndex\nCharCount\nByteIndex\nGetBytes\nCharIndex\nCharCount\nByteIndex\nGetBytes\nGetBytes\nCharIndex\nCharCount\nByteIndex\nGetCharCount\nGetCharCount\nGetCharCount\nByteIndex\nByteCount\nGetCharCount\nByteIndex\nByteCount\nGetChars\nGetChars\nGetChars\nByteIndex\nByteCount\nGetChars\nByteIndex\nByteCount\nGetChars\nByteIndex\nByteCount\nCharIndex\nGetChars\nByteIndex\nByteCount\nCharIndex\nGetEncoding\nCodePage\nGetEncoding\nEncodingName\nGetMaxByteCount\nCharCount\nGetMaxCharCount\nByteCount\nGetPreamble\nGetString\nGetString\nByteIndex\nByteCount\nTEncoding$\nSystem.SysUtils\nCodePage\nEncodingName\nIsSingleByte\nFCodePage\nFMBToWCharFlags\nFWCharToMBFlags\nTMBCSEncoding&\nCreate\nCreate\nCodePage\nCreate\nCodePage\nMBToWCharFlags\nWCharToMBFlags\nGetMaxByteCount\nCharCount\nGetMaxCharCount\nByteCount\nGetPreamble\nTMBCSEncoding\nSystem.SysUtils\nTUTF7Encoding&\nCreate\nGetMaxByteCount\nCharCount\nGetMaxCharCount\nByteCount\nTUTF7Encoding\nSystem.SysUtils\nTUTF8Encoding&\nCreate\nGetMaxByteCount\nCharCount\nGetMaxCharCount\nByteCount\nGetPreamble\nTUTF8Encoding\nSystem.SysUtils\nTUnicodeEncoding&\nCreate\nGetMaxByteCount\nCharCount\nGetMaxCharCount\nByteCount\nGetPreamble\nTUnicodeEncoding\nSystem.SysUtils\nTBigEndianUnicodeEncoding%\nGetPreamble\nTBigEndianUnicodeEncoding\nSystem.SysUtils\nTMarshaller.PDisposeRec\nTMarshaller.TDisposeProc\nTMarshaller.TDisposeRec\nTMarshaller.IDisposer\nSystem.SysUtils\nFInline\nFOverflow\nFCount\nTMarshaller.TDisposer'\nDestroy\nTMarshaller.TDisposert\nSystem.SysUtils\nTMarshaller\nFDisposer\nInString\nMaxLen\nOutString\nInOutString\nMaxLen\nAsAnsi\nAsAnsi\nAsAnsi\nCodePage\nAsAnsi\nCodePage\nAsUtf8\nAsUtf8\nAllocMem\nReallocMem\nOldPtr\nNewSize\nFixString\nUnsafeFixString\nAllocStringAsAnsi\nAllocStringAsAnsi\nCodePage\nAllocStringAsUtf8\nAllocStringAsUnicode\n/TArray<System.SysUtils.TMarshaller.TDisposeRec>\nSystem\nSystem.SysUtils\n_^[YY]\nYZ]_^[\nYZ]_^[\nTStrData\nSystem.SysUtilsL\nSystem.SysUtilsL\nQQQQQQQQSV\nYZ]_^[\n$Z]_^[\n_^[YY]\n<@t!QS<$t\n$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)\n_^[YY]\n_^[YY]\n$YZ_^[\nSystem.SysUtilsL\nt,HtYH\n:TInternalEraInfoRecord.:1\nSystem.SysUtils,\nTInternalEraInfoRecord\nEraCount\nEraInfo\n_^[YY]\nSystem.SysUtils\n_^[YY]\n_^[YY]\n_^[YY]\n_^[YY]\n$Z]_^[\n_^[YY]\n$YZ_^[\n$Z]_^[\nPUnitHashEntryD\nTUnitHashEntry\nLibModule\nUnitName\nDupsAllowed\nFullHash\nTModuleInfo\nValidated\nUnitHashArray\n&TArray<System.SysUtils.TUnitHashEntry>\nSystemD\nYZ]_^[\nYZ]_^[\nYZ]_^[\n<pYZ_^[\n_^[YY]\n_^[YY]\nVariantChangeTypeEx\nVarNeg\nVarNot\nVarAdd\nVarSub\nVarMul\nVarDiv\nVarIdiv\nVarMod\nVarAnd\nVarXor\nVarCmp\nVarI4FromStr\nVarR4FromStr\nVarR8FromStr\nVarDateFromStr\nVarCyFromStr\nVarBoolFromStr\nVarBstrFromCy\nVarBstrFromDate\nVarBstrFromBool\nTVarCompareResult\ncrLessThan\ncrEqual\ncrGreaterThan\nSystem.Variants\nFVarType\nTCustomVariantType&\nCreate\nCreate\nRequestedVarType\nDestroy\nIsClear\nSource\nCastTo\nSource\nAVarType\nCastToOle\nSource\nSource\nIndirect\nBinaryOp\nOperator\nUnaryOp\nOperator\nCompareOp\nOperator\nCompare\nRelationship\nTCustomVariantTypep'C\nSystem.Variants\nVarType\nTVarDataArray\nSystem.Variants8&@\nEVariantInvalidOpError\nEVariantInvalidOpError\nSystem.Variants\nEVariantTypeCastError\nEVariantTypeCastError\nSystem.Variants\nEVariantOverflowErrorh.C\nEVariantOverflowError@.C\nSystem.Variants\nEVariantInvalidArgError\nEVariantInvalidArgError\nSystem.Variants\nEVariantBadVarTypeError\nEVariantBadVarTypeError\nSystem.Variants\nEVariantBadIndexError\nEVariantBadIndexError|0C\nSystem.Variants\nEVariantArrayLockedError\nEVariantArrayLockedError81C\nSystem.Variants\nEVariantArrayCreateError\nEVariantArrayCreateError\nSystem.Variants\nEVariantNotImplError\nEVariantNotImplError\nSystem.Variants\nEVariantOutOfMemoryError\nEVariantOutOfMemoryErrorp3C\nSystem.Variants\nEVariantUnexpectedError\nEVariantUnexpectedError04C\nSystem.Variants\nEVariantDispatchError\nEVariantDispatchError\nSystem.Variants\nEVariantInvalidNullOpError\nEVariantInvalidNullOpError\nSystem.Variants\nTStringRef\nUnicode\nFromAnsi\nFromUnicode\n@^[YY]\nQQQQQSV\n_^[YY]\nQQQQSV\nSystem.Variants\n_^[YY]\ntagSTATSTGH\npwcsName\ndwType\ncbSize\ngrfMode\ngrfLocksSupported\ngrfStateBits\nreserved\nISequentialStream\nWinapi.ActiveX\nIStream(\nWinapi.ActiveX\nPExcepInfo\nTFNDeferredFillIn\nExInfo\ntagEXCEPINFO \nwReserved\nbstrSource\nbstrDescription\nbstrHelpFile\ndwHelpContext\npvReserved\npfnDeferredFillIn\nTSingletonImplementation\nTSingletonImplementationt\nSystem.Generics.Defaults\nTStringComparer'\nOrdinal\nTStringComparer8\nSystem.Generics.Defaults\nTOrdinalIStringComparerD\nCompare\nEquals\nGetHashCode\nTOrdinalIStringComparer$\nSystem.Generics.Defaults\n IEqualityComparer<System.string>\nSystem.Generics.Defaults\nIComparer<System.string>\nSystem.Generics.Defaults\nTCustomComparer<System.string>\nTCustomComparer<System.string>D\nSystem.Generics.Defaults\n_^[YY]\nTOrdinalStringComparerD\nCompare\nEquals\nGetHashCode\nTOrdinalStringComparer\nSystem.Generics.Defaults\nTCollectionNotification\ncnAdded\ncnRemoved\ncnExtracted\nSystem.Generics.Collections\ndoOwnsKeys\ndoOwnsValues\nSystem.Generics.Collections\nTDictionaryOwnerships\nEInsufficientRtti@\nEInsufficientRtti\nSystem.Rtti\nEInvocationError\nEInvocationError\nSystem.Rtti\nENonPublicType\nENonPublicTypex\nSystem.Rtti\nIValueData\nSystem.Rtti\nTValueData\nFTypeInfo\nFValueData\nFAsUByte\nFAsUWord\nFAsULong\nFAsObject\nFAsClass\nFAsSByte\nFAsSWord\nFAsSLong\nFAsSingle\nFAsDouble\nFAsExtended\nFAsComp\nFAsCurr\nFAsUInt64\nFAsSInt64\nFAsMethod\nFAsPointer\nTValue\n&op_Implicit\n&op_Implicit\n&op_Implicit\n&op_Implicit\n&op_Implicit\n&op_Implicit\n&op_Implicit\n&op_Implicit\n&op_Implicit\n&op_Implicit\n&op_Implicit\nFromVariant\nFromOrdinal\nATypeInfo\nAValue\nFromArray\nArrayTypeInfo\nValues\nIsObject\nAsObject\nIsInstanceOf\nAClass\nIsClass\nAsClass\nIsOrdinal\nAsOrdinal\nTryAsOrdinal\nAResult\nIsType\nATypeInfo\nATypeInfo\nTryCast\nATypeInfo\nAResult\nAsInteger\nAsBoolean\nAsExtended\nAsInt64\nAsUInt64\nAsInterface\nAsString\nAsVariant\nAsCurrency\nIsArray\nGetArrayLength\nGetArrayElement\nSetArrayElement\nAValue\nABuffer\nATypeInfo\nResult\nAValue\nATypeInfo\nResult\nMakeWithoutCopy\nABuffer\nATypeInfo\nResult\nExtractRawData\nABuffer\nExtractRawDataNoCopy\nABuffer\nGetReferenceToRawData\nGetReferenceToRawArrayElement\nToString\nFHandle\nFRttiDataSize\nFPackage\nFParent\nFAttributeGetter\nTRttiObject'\nDestroy\nGetAttributes\nTRttiObject\nSystem.Rtti\nHandle\nRttiDataSize,\nParentx%D\nPackage\nTRttiNamedObject\nTRttiNamedObject\\nSystem.Rtti\nTRttiType3\nToString\nGetMethods\nGetFields\nGetProperties\nGetIndexedProperties\nGetMethod\nGetMethods\nGetField\nGetProperty\nGetIndexedProperty\nGetDeclaredMethods\nGetDeclaredProperties\nGetDeclaredFields\nGetDeclaredIndexedProperties\nTRttiType4\nSystem.Rtti\nHandle\nQualifiedName\nIsPublicType\nTypeKind\nTypeSize\nIsManaged@\nBaseType8\nAsInstance\nIsInstance\nAsOrdinal\nIsOrdinall\nAsRecord\nIsRecord\nTRttiMember\nTRttiMemberD\nSystem.Rtti\nParent\nVisibility\nTRttiStructuredType\nTRttiStructuredTypeD\nSystem.Rtti\nTRttiFieldE\nGetValue\nInstance\nSetValue\nInstance\nAValue\nToString\nTRttiField8\nSystem.Rtti\nFieldType\nOffset\nTRttiManagedFieldD\nTRttiManagedField \nSystem.Rtti\nFieldType\nFieldOffset\nFMethOfs\nTRttiRecordType<\nGetDeclaredFields\nGetDeclaredMethods\nGetAttributes\nTRttiRecordType(\nSystem.Rtti\nManagedFields\nTRttiPropertyE\nGetValue\nInstance\nSetValue\nInstance\nAValue\nTRttiProperty(\nSystem.Rtti\nPropertyType\nIsReadable\nIsWritable\nTRttiInstanceProperty3\nToString\nTRttiInstanceProperty\nSystem.Rtti\nPropertyType\nDefault\nNameIndex\nPropInfo\nTRttiParameter3\nToString\nTRttiParameter\nSystem.Rtti\nFlags@\nParamType\nTDispatchKind\ndkStatic\ndkVtable\ndkDynamic\ndkMessage\ndkInterface\nSystem.Rtti\nTMethodImplementationCallback\nSystem.Rtti\nTMethodImplementation.TFloatReg\nRegSingle\nRegDouble\nRegExtended\nRegComp\nRegCurr\nUnused1\nUnused2\nUnused3\n):TMethodImplementation.TInterceptFrame.:1\n%TMethodImplementation.TInterceptFrame(\nRegEAX\nRegEDX\nRegECX\nPreviousFrame\nRetAddr\n*TMethodImplementation.TFirstStageIntercept\nPushEBP_55\nMovEBP_ESP_1_89\nMovEBP_ESP_2_E5\nPush_68\nPushVal\nJmpRel_E9\nRelTarget\n%TMethodImplementation.PInterceptFrame\n*TMethodImplementation.PFirstStageIntercept\nTMethodImplementation.TParamLoc\nFTypeInfo\nFByRefParam\nFOffset\nCreate\nAByRef\nGetArgLoc\nAFrame\nGetArg\nAFrame\nSetArg\nAFrame\nFCallerPopsStack\nFResultFP\nFHasSelf\nFStackSize\nFParams\nFResultLoc\nFParamList\nFReturnType\nFCallConv\n!TMethodImplementation.TInvokeInfoK\nCreate\nACallConv\nAHasSelf\nDestroy\nGetParamLocs\nAddParameter\n!TMethodImplementation.TInvokeInfoX\nSystem.Rtti\nReturnType\nFUserData\nFCallback\nFInvokeInfo\nTMethodImplementation&\nCreate\nDestroy\nTMethodImplementation@\nSystem.Rtti\nCodeAddress\nFInvokeInfo\nTRttiMethod'\nDestroy\nInvoke\nInstance\nInvoke\nInstance\nInvoke\nInstance\nCreateImplementation\nAUserData\nACallback\nGetParameters\nToString\nTRttiMethod\nSystem.Rtti\nReturnType\nHasExtendedInfoLnH\nMethodKind\nDispatchKind\nIsConstructor\nIsDestructor\nIsClassMethod\nIsStatic\nVirtualIndex\qH\nCallingConvention\nCodeAddress\nFReadMethod\nFWriteMethod\nTRttiIndexedPropertyS\nGetValue\nInstance\nSetValue\nInstance\nToString\nTRttiIndexedProperty\nSystem.Rtti\nHandle@\nPropertyTypel\nReadMethodl\nWriteMethod\nIsReadable\nIsWritable\nIsDefault\nFProps\nFMeths\nFVirtCount\nFIndexedProps\nFClassTab\nFReadPropData\nFReadMethData\nTRttiInstanceType@\nGetDeclaredProperties\nGetDeclaredMethods\nGetDeclaredFields\nGetDeclaredIndexedProperties\n GetDeclaredImplementedInterfaces\nGetImplementedInterfaces\nGetAttributes\nTRttiInstanceType\nSystem.Rtti\nBaseType\nDeclaringUnitName\nMetaclassType\nVmtSize\nFMethods\nFTotalMethodCount\nTRttiInterfaceType=\nGetDeclaredMethods\nTRttiInterfaceType|\nSystem.Rtti\nBaseType,\nIntfFlags\nDeclaringUnitName\nTRttiOrdinalType\nTRttiOrdinalType\nSystem.Rtti\nOrdType\nMinValue\nMaxValue\nTRttiInt64Type\nTRttiInt64Type \nSystem.Rtti\nMinValue\nMaxValue\nFProcSig\nTRttiInvokableTypeS\nInvoke\nProcOrMeth\nGetParameters\nToString\nTRttiInvokableType`\nSystem.Rtti\nReturnType\qH\nCallingConvention\nTRttiMethodTypeQ\nInvoke\nCallable\nToString\nTRttiMethodType\nSystem.Rtti\nMethodKind 4e0d1edb76747fd945b87dd18299298f0df719edbea946119d91db59a9b6527a
1 Ransomware M !This program cannot be run in DOS mode.\n`.rdata\n@.data\n.mysec\n`.mysec3\n`.mysec2\n`.rcrs\n@.reloc\nPPPPPPP\n0WWWWW\n_VVVVV\n0WWWWW\njXh ?B\nQQSVWd\nHHtXHHt\n>If90t\ntM<it-<ot)<ut%<xt!<Xt\n<dty<itu<otq<utm<xti<Xte\nHIf98t\n0SSSSS\n<at9<rt,<wt\nURPQQh\n>=Yt1j\nQQSVWh\nj@j ^V\nj,hXBB\nHtHu4j\ns[S;7|G;w\ntR99u2\n0A@@Ju\n^SSSSS\nj"^SSSSS\nHHtYHHt\ntGHt.Ht&\n^SSSSS\n8VVVVV\n;t$,v-\nUQPXY]Y[\nHHt*HHt\n<0|<9\ntK<_t<<$t8<<t4<>t0<-t,<a|\n<z~$<A|\n<0|O<9\ntU<A|B<P\ntY<@tO<Zt\nt\<@tXj'\nNtFNt#NuV\nt.<@t5V\nTtUHtKHtAHt\n0t-HHt\nAtIHt0Hu\nj hhFB\n_VVVVV\n_VVVVV\n0SSSSS\n0SSSSS\n0WWWWW\nAAFFf;\nt"SS9]\nC PjPV\nC$PjQV\nC*PjTV\nC+PjUV\nC,PjVV\nC-PjWV\nC.PjRV\nC/PjSV\n.;1s(N\nHHt4HHt\nHt\Ht,\nteHtFHt&Hu\nty<%tA\nPPPPPPPP\ntNh<8B\nt=h88B\nVj@h`5B\nu%h@8B\nPPPPPPPP\n0WWWWW\nu,VVWV\nt VV9u\nt+WWVPV\n^SSSSS\n^SSSSS\n>:u8FV\nVVVVVQRSSj\n^SSSSS\n^SSSSS\n0SSSSS\n^SSSSS\n^WWWWW\n0SSSSS\n8VVVVV\nstring too long\ninvalid string position\ninvalid string argument\nUnknown exception\n(null)\n`h````\nxpxxxx\nUTF-16LE\nUNICODE\nCorExitProcess\nruntime error \nTLOSS error\nSING error\nDOMAIN error\nAn application has made an attempt to load the C runtime library incorrectly.\nPlease contact the application's support team for more information.\n- Attempt to use MSIL code from this assembly during native code initialization\nThis indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.\n- not enough space for locale information\n- Attempt to initialize the CRT more than once.\nThis indicates a bug in your application.\n- CRT not initialized\n- unable to initialize heap\n- not enough space for lowio initialization\n- not enough space for stdio initialization\n- pure virtual function call\n- not enough space for _onexit/atexit table\n- unable to open console device\n- unexpected heap error\n- unexpected multithread lock error\n- not enough space for thread data\nThis application has requested the Runtime to terminate it in an unusual way.\nPlease contact the application's support team for more information.\n- not enough space for environment\n- not enough space for arguments\n- floating point support not loaded\nMicrosoft Visual C++ Runtime Library\n<program name unknown>\nRuntime Error!\nProgram: \nEncodePointer\nDecodePointer\nFlsFree\nFlsSetValue\nFlsGetValue\nFlsAlloc\nbad exception\nLC_TIME\nLC_NUMERIC\nLC_MONETARY\nLC_CTYPE\nLC_COLLATE\nLC_ALL\n !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\n`h`hhh\nxppwpp\n Complete Object Locator'\n Class Hierarchy Descriptor'\n Base Class Array'\n Base Class Descriptor at (\n Type Descriptor'\n`local static thread guard'\n`managed vector copy constructor iterator'\n`vector vbase copy constructor iterator'\n`vector copy constructor iterator'\n`dynamic atexit destructor for '\n`dynamic initializer for '\n`eh vector vbase copy constructor iterator'\n`eh vector copy constructor iterator'\n`managed vector destructor iterator'\n`managed vector constructor iterator'\n`placement delete[] closure'\n`placement delete closure'\n`omni callsig'\n delete[]\n new[]\n`local vftable constructor closure'\n`local vftable'\n`udt returning'\n`copy constructor closure'\n`eh vector vbase constructor iterator'\n`eh vector destructor iterator'\n`eh vector constructor iterator'\n`virtual displacement map'\n`vector vbase constructor iterator'\n`vector destructor iterator'\n`vector constructor iterator'\n`scalar deleting destructor'\n`default constructor closure'\n`vector deleting destructor'\n`vbase destructor'\n`string'\n`local static guard'\n`typeof'\n`vcall'\n`vbtable'\n`vftable'\noperator\n delete\n__unaligned\n__restrict\n__ptr64\n__clrcall\n__fastcall\n__thiscall\n__stdcall\n__pascal\n__cdecl\n__based(\n{flat}\n`non-type-template-parameter\nunsigned \nshort \n<ellipsis>\n,<ellipsis>\n throw(\n`template-parameter\ncli::pin_ptr<\ncli::array<\n`anonymous namespace'\ngeneric-type-\ntemplate-parameter-\n`unknown ecsu'\nunion \nstruct \nclass \ncoclass \ncointerface \nextern "C" \n[thunk]:\npublic: \nprotected: \nprivate: \nvirtual \nstatic \n`template static data member destructor helper'\n`template static data member constructor helper'\n`local static destructor helper'\n`adjustor{\n`vtordisp{\n`vtordispex{\nconst \nvolatile \nvolatile\n volatile\nsigned \ndouble\nUNKNOWN\n__int128\nwchar_t\n__int64\n__int16\n__int32\n__int8\n__w64 \nSystemFunction036\nADVAPI32.DLL\nGetProcessWindowStation\nGetUserObjectInformationA\nGetLastActivePopup\nGetActiveWindow\nMessageBoxA\nUSER32.DLL\n !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\n !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\nHH:mm:ss\ndddd, MMMM dd, yyyy\nMM/dd/yy\nDecember\nNovember\nOctober\nSeptember\nAugust\nFebruary\nJanuary\nSaturday\nFriday\nThursday\nWednesday\nTuesday\nMonday\nSunday\nunited-states\nunited-kingdom\ntrinidad & tobago\nsouth-korea\nsouth-africa\nsouth korea\nsouth africa\nslovak\npuerto-rico\npr-china\npr china\nnew-zealand\nhong-kong\nholland\ngreat britain\nengland\nbritain\namerica\nswedish-finland\nspanish-venezuela\nspanish-uruguay\nspanish-puerto rico\nspanish-peru\nspanish-paraguay\nspanish-panama\nspanish-nicaragua\nspanish-modern\nspanish-mexican\nspanish-honduras\nspanish-guatemala\nspanish-el salvador\nspanish-ecuador\nspanish-dominican republic\nspanish-costa rica\nspanish-colombia\nspanish-chile\nspanish-bolivia\nspanish-argentina\nportuguese-brazilian\nnorwegian-nynorsk\nnorwegian-bokmal\nnorwegian\nitalian-swiss\nirish-english\ngerman-swiss\ngerman-luxembourg\ngerman-lichtenstein\ngerman-austrian\nfrench-swiss\nfrench-luxembourg\nfrench-canadian\nfrench-belgian\nenglish-usa\nenglish-us\nenglish-uk\nenglish-trinidad y tobago\nenglish-south africa\nenglish-nz\nenglish-jamaica\nenglish-ire\nenglish-caribbean\nenglish-can\nenglish-belize\nenglish-aus\nenglish-american\ndutch-belgian\nchinese-traditional\nchinese-singapore\nchinese-simplified\nchinese-hongkong\nchinese\ncanadian\nbelgian\naustralian\namerican-english\namerican english\namerican\nNorwegian-Nynorsk\nCONIN$\nCONOUT$\nSunMonTueWedThuFriSat\nJanFebMarAprMayJunJulAugSepOctNovDec\nbad allocation\npaluci begohicixezufemure wutatodebamaxokikedotezuno\ntelokagikavetitogone\nvukuxekewa %f\nruyejegomu\nLockFile\nGetFileAttributesExA\nGetTickCount\nLoadLibraryW\nlstrlenW\nCreateMailslotW\nGetLastError\nGetProcAddress\nLocalAlloc\nVirtualProtect\nDuplicateHandle\nCloseHandle\nKERNEL32.dll\nSetAclInformation\nOpenSCManagerA\nAreAnyAccessesGranted\nADVAPI32.dll\nGetStartupInfoW\nRaiseException\nRtlUnwind\nTerminateProcess\nGetCurrentProcess\nUnhandledExceptionFilter\nSetUnhandledExceptionFilter\nIsDebuggerPresent\nHeapAlloc\nHeapFree\nWriteFile\nWideCharToMultiByte\nGetConsoleCP\nGetConsoleMode\nFlushFileBuffers\nDeleteCriticalSection\nLeaveCriticalSection\nFatalAppExitA\nEnterCriticalSection\nGetModuleHandleW\nExitProcess\nGetStdHandle\nGetModuleFileNameA\nGetModuleFileNameW\nFreeEnvironmentStringsW\nGetEnvironmentStringsW\nGetCommandLineW\nSetHandleCount\nGetFileType\nGetStartupInfoA\nTlsGetValue\nTlsAlloc\nTlsSetValue\nTlsFree\nInterlockedIncrement\nSetLastError\nGetCurrentThreadId\nInterlockedDecrement\nGetCurrentThread\nHeapCreate\nHeapDestroy\nVirtualFree\nQueryPerformanceCounter\nGetCurrentProcessId\nGetSystemTimeAsFileTime\nSetFilePointer\nGetCPInfo\nGetACP\nGetOEMCP\nIsValidCodePage\nVirtualAlloc\nHeapReAlloc\nWriteConsoleA\nGetConsoleOutputCP\nWriteConsoleW\nMultiByteToWideChar\nSetStdHandle\nInitializeCriticalSectionAndSpinCount\nCreateFileA\nHeapSize\nSetConsoleCtrlHandler\nFreeLibrary\nInterlockedExchange\nLoadLibraryA\nLCMapStringA\nLCMapStringW\nGetStringTypeA\nGetStringTypeW\nGetTimeFormatA\nGetDateFormatA\nGetUserDefaultLCID\nGetLocaleInfoA\nEnumSystemLocalesA\nIsValidLocale\nSetEndOfFile\nGetProcessHeap\nReadFile\nGetLocaleInfoW\nGetTimeZoneInformation\nCompareStringA\nCompareStringW\nSetEnvironmentVariableA\n.?AVlogic_error@std@@\n.?AVinvalid_argument@std@@\n.?AVlength_error@std@@\n.?AVout_of_range@std@@\n.?AVbad_cast@std@@\n.?AVbad_typeid@std@@\n.?AV__non_rtti_object@std@@\n.?AVtype_info@@\n.?AVbad_exception@std@@\n \nabcdefghijklmnopqrstuvwxyz\nABCDEFGHIJKLMNOPQRSTUVWXYZ\n \nabcdefghijklmnopqrstuvwxyz\nABCDEFGHIJKLMNOPQRSTUVWXYZ\n.?AVexception@std@@\n.?AVbad_alloc@std@@\n3/9*"?8\n19-<-,9\n+04?21\n .--,,99\n' !>?=*3\n+042>1\n'<%3#?\n(5"#6((\n4)2052>><\n325"&7\n1663/.1\n&+#+.7\n*--9$%\n702;(!\n4?*<) \n*)*$=80=\n:(&&=$\n-'0'+$".:5\n*#<#-*\n+5$86!;'\n88#5**3"1# %\n":&<!,;\n66458)3\n*+!3(($\n';-(/:\n,')2052>><\n5)%&$8,\n,9<.&\n+0<'!;!\n?20753(69#\n8"(:1>.!\n: , =: \n(-*?1\n#9?;"&\n"0 /2$3\n8(6$$.\n(=)8 ":6\n<<("4.\n.=6-0-'\n899("+\n0',0*2\n);"#3)<\n'9&114.\n*1$//!\n(5=7)*\n/')/'&5\n97 ;8#\n<3$76<4:%\n;3736<:\n*,.,*'99\n*?/:,\n"4759+/9.\n4?&+3\n8 ))<>\n'3);,7$5$\n"'1&,7';\n:,300)<&?.)\n7'7'((.\n&352.:\n-*:>,#\n? -+ %\n/2%9;6\n#71*!#\n-,>$0#+*&<;\n9;+9:/\n176;916\n54>*#6\n)$<24<\n>.0;5!-\n602,.9/\n0>!*6%5\n?!1*"5>2\n)/?>(85\n"42)7$\n *-/2\n8#$>($\n79=&<9?\n/6),+:\n&??.(7\n 140;\n4:4'+<!\n,:*4/>\n8<<*+7\n+7::7:7(? ?\n64.7-0\n($/7<.+$8)77\n<%*;34<\n=* #-6\n9,44#(;.(\n1#0+%2\n>89<5'.$\n<9:0<'\n93(22/\n54?598\n%56;64127,0\n *$6<#8\n.6:182#<#/\n$1=9?8?\n#2%96,\n-)#7*#\n!/2 6: \n9$+757\n<#-+:*\n75:&.?\n042+$<;\n67 ";2\n7.?#:-+:&)\n=%/$+:\n!*023\n.%6".8 4\n990'*\n4(!>$9\n(,=8"28(0":\n!.<%#\n;9"-$$\n/ =55< \n>#6:7&&2\n732#$+--'()+9\n0>"&")\n#9( >#0!"0"\n5%?$)&;\n< ;251&\n:>)111\n>,6<3$4/34\n,$%;)"\n(8(-.#\n.94<);\n$-***2!\n26(4!'+="\n*6 :#*\n>$9? 3\n.5)<!/\n6+/,)/\n5)?1!=\n.-#$*%;\n7;#*\n2:1; *\n07#=(-\n%()>#0;#=1$ )\n$>8?>,\n$+=&.:\n98-=-=\n%?=-8"&*7.\n843,#3\n"!987?,4\n.&7-- ,\n>#, 2&;;2(\n-?5=&*\n:-$#57\n;:835\n%(%0#+\n/$:;'#\n3>*71'\n'!,*"%\n*=$,,)%%53\n-9)>=;&9/7(,\n"24.+9\n!88/5$\n!;9<53\n%&#=+<\n7*#';!4*'9\n&+938!\n)99%/30\n75' $*\n7=7%14\n36!;<3.\n8:49$/\n; 5%>\n85):>71#(\n5=%",#\n4"%<?-3\n&(/,/+8\n"8? #!\n2 #%2'\n9&7-(+\n=5%%>?\n,;7(<;\n7=<-3,?)\n+93#5\n'1-*??\n),*5#\n025'6$1:\n45-- .\n 11-=19\n;4! 3&(5'\n"760(\n(.:=%$\n50&(4??\n2*$$"?"\n29!5$ +7\n"4 <;-\n)+6(837\n?=1= <\n6:**:<2\n*;65=&4\n7%7=)4?\n!/283*<\n> !. ->5\n=,"#?1:,:\n1*)1-8\n5'/&6'\n?-0+-&\n.+2(6?\n/&#3<;\n!+/53(<4'<\n;""50'\n#&4"5\n7 4;-23\n5.923# 9(1\n!266!&9&>\n %<6,=\n--$+50>\n; 2<<\n<'5,(\n4!66\n85 06+\n=(1$1*\n$%728&--<%)\n;1=>08\n<2'6>4"+\n4+)64"1)%-\n3:<;? \n32>,?18\n:1%=9>\n0"/'/)!%\n>?'3*1\n3*2=9 \n8'92*7\n&+$?9\n6-.(;4\n/!:+& 35+4"\n2$$?,)+0\n+ 2( (-7\n#( 4 6%\n(,/7-((\n985 ;\n,&581$\n>63<->\n.-!4$:59/\n$-?30-:2*>\n* +-9328\n$08).)*\n%0394+\n;>)!98\n73,5?-\n>!/8+)*?.)(?33\n>0)1+;\n-;#2="\n%/0&8*\n!)1?/$\n>$)"&>3??\n'<9 '<\n,,>'9#\n,%4?8$899#3="\n?(;#*,\n(,:(%\n2+..73\n7$;1?4\n,;6)65\n8,0=>.\n%56;,3>\n0 5 0->\n.5#66.00*\n,??,$:\n-73=83%0\n%.:0"!\n?+4+#5'\n ($-:(\n-='8)<2\n#>734(?\n,"+#4%\n63$13:,\n/>-73%\n+% )75?-\n)#"=%6\n)6#)'+\n 20?25,0\n!'0%>*\n7'02\n2$>--=\n==!-*'?9\n+"-";!1984\n09>> 3?\n.&>,?+20\n#?-43"\n;;.?(0\n'>: +!\n,/0: 9\n$<%*.\n464,75\n966 #6\n;+?3$49\n,;1&,+:\n?!5&+\n?;4':=\n5&&5 1<\n/92..8 \n&># 710&\n .,$5)\n!!290'&\n'1,68,\n%6;/<=8 \n"*2/4+\n+(?;><\n:/*#,?:\n)"$;,:\n>#%1&=(\n"63" 8\n#339>.\n"?4#616.\n,*7-!5\n-$5(<=!!!;;\n!67>#"\n<7>(#/6\n11-;>-'1\n1!)4)7&\n"1:6'86\n!,7+ .\n#'+"6; \n"'$1.0"\n:48< %'\n>(!%619/\n(476#\n1-2%9>\n039;++\n!939:8.\n.-,276!\n;><83\n11-#474\n7/6:';"\n( 5# -5\n:!+1:?4!,\n0,6=\n*':;.>"*"\n#>/##\n=2226(3*.-"\n!-/--3\n(8!%'2\n8$'5>#\n-.'"$6#\n88$9<=<&9\n!!5'9:\n$#$+7'\n3=*7::\n= #,6>(\n%;4;'5<\n7.#1+:\n?#-8&2\n$%=+80/0\n0?819+<#\n850(9!\n83.(=\n(!33,8'\n%*'8!4\n+31/2\n<'!82!6\n52: 3 !;\n=-& ':%\n;9$&;13\n(50)+:\n>;591)\n$'2:#0\n+?.(=48\n(!-..'\n7'?-(5,+5%2\n#5?:7<\n$1 9(#;/\n<.(%$2?\n-6=)+"\n6$!7/6=<\n!2/','\n!3"&"513\n'9=974\n+7&%&%\n$<-"6\n' =#$$5\n 0*!?+4>)\n00#4?\n%'$%!(8<%,/1\n((*24#5\n$>4+,$\n$.!;&=&\n"$>4/9=\n+ 6'14\n#:0%7$#\n!6*;;.\n5$?4''=6)'\n(72:8!\n543:>+8/\n1$83578\n0&9/ &5\n:(&.0?\n(57+5\n33?7\n7936+!<%=\n"3?)89$%(\n!$32*=\n/(567<\n0=;*$,\n<%' &":2\n ;><=(\n(*?:">&1\n5#&?&,\n=;%!<9\n!%<5(24\n$!2'5!&\n082/7<\n0)4397?\n(?'76-9\n&$34*,\n0"30#&\n80$?)'3\n9(.5 >\n#!&9)\n%7/=?(#\n+/<7$\n5 -2/)\n,!44%)#\n4!;*-4\n?6-++) $\n2;5.5\n):.<6'7\n-1'%!1\n%570#464 \n(74&24\n&:%!9/ ?\n, '),+\n$&,;<%\n! %: ?!"2\n27')*\n"=-'&-\n01=9-/\n!'56=0$6\n05< ')(7.6%\n+/'#<%\n*'63"\n6&+!0.9.\n:6#*$ \n888-7?\n5*?4.!"\n?'&$6%>\n;2&"0"\n2<11-(-\n,"#(682\n:$:?"6 "\n3 9/<=**'3\n+77!$%\n5$!<96\n; (!416\n/:*0#\n-217:7\n:=#'%$0\n%7-,8+\n#;)?%.7\n:#+,#\n?825>-"\n- <-/:\n#+>;6:6-\n$/:6.%?8\n))9)#)(\n"&"!&4\n): ;10=\n#57,=:\n<=<9$-\n" ;,=?7\n2'&<5>\n=80'<*%8\n# :34"7\n2.2#, \n&,:+<=\n/%">""/6\n4'73>"\n&&? $\n("0,&9\n3/:2$=$\n(01.05\n#<>-.-\n#'% =5$9-,\n/&5;4:-2\n-13>?4\n=529<=\n=>=+9.$\n #8&;?(\n9;987$$$\n+ ";!(*:?\n+957&\n'&?883)\n'&19=?\n&&8+8<56"\n#4;(%;\n&181.\n<=7=2=$\n?-4:(.\n,>';%4\n.: 50>:\n!%7))8\n61.>5-\n4.'<:51\n;6(>06\n%+435\n>+( (.\n243=)-+\n$32-?8"\n+-)++;\n)*<>\n..52>$\n7*341,+>\n++#':%\n'%>(*/\n=<=++3?\n"+'306\n*.>!;=\n"+% +:(<\n5&#8?.\n;1&%("\n7)6!,,7\n; 4-=!9\n;,.8")==$\n5/2> \n9+ 80;.7\n< 4= 7--6\n<$3 ))3%38\n1#!9:;\n<,.%-6\n8+/'15>-\n !:!)?\n!&!6758\n!+65$7\n+!-,<$\n"+9/"5,\n9 )-;:3\n;(6/9\n6(.%(+&\n1"5<#<1\n7>8=$2($\n8*$,4-5\n0&<"9.3\n%1=%2#?\n%<"< :!\n<'9 7+\n5:""#\n'"26)1\n&-:0"/\n11,*$(4\n$);7',%1<:\n947>:7\n?<%5'2\n$ *.=()\n+;><'+2\n=4 *(.\n"&6#29,\n5<(?=-\n?/(99-9<(,33#(\n=,.8(9'!\n-+;;*\n8>6 =0%#93\n!2!!!#9\n,)9*91\n7=&.11\n1*/++90(\n266< *=+\n:/*1!5)\n-)=2(7\n;.,<!)\n!=<8#5\n''312"$\n.=%1+?\n&9%*)\n=9.6=62\n)4/27#\n0%->.,<9\n;#=3%<\n%-'<(2\n!>$%>2">\n!(;+8#+*\n85%>"%6.<\n%?*?3*=$\n3=7)-(\n#1#/4\n> %&,'>\n%1(?0+*1\n?,<+(1!\n$&-0<\n/)5*1+&\n55 #4?+=>\n#,*'7&\n#&2"&,\n" ;)?*\n "("%=1\n2".$;3\n;.+"#$0\n<$11'*\n706&<#.\n :4//'\n2/!"==(!-\n1;?/9;3\n$?!*+$$\n& %)6>\n7,*0:'\n,=*?>70&/92($\n 6%4)6\n:%*=7&'\n !1:%(\n;;$< \n4$4+5#=+\n##%%&"(/\n1.-*<19\n0( :"'\n"(?.6)4\n(=)$=#\n!6/2, &4\n-%(18:\n*9?%;9\n>? .;=\n:* $?0\n720)%)\n'!0$-$#\n;*"<&..91\n5$6")7:!\n8(%"* 6\n8-&4=#+\n;*#%&6*\n+?(->?\n%./#90!,&\n203#9 \n66<*750\n$<06,)9 \n/%!<&-\n!...#$:\n-7,2)3\n?3##=%1\n6&-<+/.\n;98%!/) \n>; 1;6\n56' #7\n-3$$?5+\n9..!-.\n!-0)$/\n2'3?02\n97:% "\n.39;,&:"\n4*!(.0% \n%'!=$0;\n33?5376\n<(2;?(\n72#%$9\n0:2)<%\n'7#3<(\n*"&3""\n"%5: 7933\n.2=,9,">00\n7>+*->.=\n'9+4( \n4%0.1<?$\n3!$,*8\n;,331$\n3%5:6"+,\n5-<67<\n*'61,??.\n;#.:=<\n'2& 98:\n92/0<&(\n4:%!878,\n<>%$>=\n-:$7%(-11\n70< 27$>0\n6*'(*(+\n"3/!74\n ;(++<!-0:;!"1\n;!+ :/\n6;:)1/"%\n%"! -0\n=/&,$?\n>9:>,4'%\n)$'%8&=;+\n46$)82\n#905 \n8-<$&>1!*14\n $,!&\n#,"'##\n9/9( .\n'$0%)$\n)! 3=62\n)!61>=\n0/7)62\n/:4-.\n.)#2,"\n:3)7$\n32; %'\n)!>8&6\n74 ./,\n$=;,'5 \n3076<4:%\n;3736<:\n5$5.>\n80995+\n136=20\n=*%9'28\n3,3"76\n62%?-:\n/)26>'2?\n,2/;5+/3\n.54)#8/\n3;65:'!;8.\n"1#&>*\n) 8-959%#>\n:/'9*0/8\n'+0$,?\n;&?>%0>\n9=7>-/\n"((2#+)( \n,+'-:&\n<2.18-7:?&*<-\n8'.%,\n*#+/3\n8,)506\n%6:"(*\n26-&'.\n#0)8:6 \n>09,)$\n-609:\n=$(# 9\n6=%<$'\n6,1*59\n,4$97*4\n6:+.68\n9#<2#=\n.3<30:'/+\n%0>%92'"\n/0*14:\n(09:3/\n:-4<+2)\n#/;,4\n:=4><6\n*&-'6:?\n?&%>0?\n;>$:)-82,\n4./>? 68\n6+7 5=#\n5;*/47\n7&8-25'-\n7!-=*=\n1/2$31\n361,!)- 33+\n7?/05.*0+\n-$;6;14'?'(\n?476#!\n9$448"*\n:>13>$'/#/\n443 )8"('3.\n;.;.=/\n5#2+/,\n!,)(!-\n/#:!;6)\n.#;#+*6\n65#%*+\n!,6=61?\n< /'5*<:<\n7(0?#;\n/!'0&)\n#3107-\n$'8 ;:\n>67!&(>(?,=\n=":=>&.-\n/86,)$\n+="##2=\n/??999<.1\n/?/<3!<\n,2 ;%/5\n/!<*<-\n ,3!8$+\n#/5.;39\n6(01%*\n2=("+2!0#4\n9:?+=9\n!.8$&-6=8\n.)8/7$\n'>!3 ('\n&$7:("\n'/->>4 =\n&"<'7'$\n435"+49\n*5&01=\n$4',<.?\n'/#&#;\n%7+-'1*\n*+>71\n5> ?-#-\n;2"!*&\n#%61/) \n':?7+?\n-!?967(\n)")<9?'?\n1?14#,\n4=964.:\n=32; 8\n8:+%2&\n7%*38&\n)3%56"\n +>*10 \n$>;55\n&;.<>,1\n,+4!$!56\n$>80>,\n-+':4:-\n)>'<8"$$\n'#-38';#\n>##+--\n4?83./!\n(,<+:'5\n##(*?,-2\n!8&%00\n:5?2>"\n!8(;%(\n *+# $5\n=7/:)$!\n67+;:05\n6!<"<4*\n0'&!!%'\n#7>5/\n5=:,3++&\n5'%5)6\n9:*-21/\n;!0jR;#4\n2z;=y6\n&k__k9\n0 0:0I0\n182=2c2h2p2x2\n5:6N6T6Z6`6e6q6w6}6\n7#7(7-737J7S7]7\n8&8.8;8E8\n>">(>.>4>:>@>F>L>R>^>}>\n?M?Z?m?\n0;0L0V0s0\n3:4R4j4\n;?;F;L;^;f;q;\n01X1}1\n3-3S3q3x3|3\n3V4a4|4\n5 5$5(5,505z5\n7*757R7\n9E:M:b:m:\n;'<:<U<\n2I2n2Q4M6Q6U6Y6]6a6e6i6\n:%;7;x;\n<'<^<o<\n==0=S=\n1l253f3|3\n6l6s6}6\n7&797L7p7\n8%8-838M8\8i8u8\n:\;d;|;\n>+?;?h?p?\n2?2X2_2g2l2p2t2\n3N3T3X3\3`3\n4!4K4}4\n9?:T:j:\n; ;M;h;n;w;~;\n;%<a<w<\n=&=6=K=\n??*?N?W?^?g?\n010I0[0q0\n3b3m3w3\n55$5*5\n66@6F6x6\n7!7I7b7\n778=8a8\n9)959J9Q9e9l9\n:!:+:1:=:L:R:g:x:\n;&;;;a;\n=d=t=z=\n>%>+>3>:>?>G>P>\>a>f>l>p>v>{>\n?)?/?K?{?\n0:0G0S0[0c0o0\n4)4.4>4C4I4O4e4l4\n;(;b;o;y;\n?#?+?B?[?w?\n4&4P4\4\n7:8S8d8\n232=2I2R2\n3.373C3z3\n4#4/4H4v5\n:":&:*:0:;:J:\n;0;5;x=\n>%>B>H>S>X>`>f>p>w>\n3.34393H3Q3^3i3{3\n6D7J7q7}7\n8U8(:3:;:V:d:l:y:\n1=1p1z1\n1=2Y2b2w2\n3#3(363\n4-4A4G4>6\n6)7<7X7j7}7\n:+;T;q;|;\n4,4;4S4r4\n9!9&919>9L9Z9h9v9\n=&=6===Y=:>@>Q>W>`>g>n>w>\n1"2C2T2\n6 777<7\n9f:x:~:\n<*<a<e<i<m<q<u<y<}<\n=%=+=7=>=G=L=c=v=\n282C2}2\n333k3u3~3H4S4X4x4\n4 515@5`526O6^6n6\n6*7H7d7\n838A8Q8h8\n>6>F>Y>\n60A0R0l0r0\n1#1b1q1\n393@3G3\n090A0V0p0\n1-1=1z1\n839r9w9\n=9=>=_=k=~=\n00%0+010X0\n2F3T3b3\n44#4'4@4\n7 7H7M7R7W7`7{7\n8$9W9a9g9t9\n:;$;+;0;7;<;\n??7?=?L?R?a?g?u?~?\n4!4,4\4\n0*0<0N0\n9(929]9e9\n192L2{2\n8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d82=\nh>l>p>t>x>|>\n1G2M2q2\n595V5r5\n3#404P4j4\n4X5=6C6y6\n(0O0j0t0{0\n202i2v2U3d3:4s4\n4$5\5b5h5n5\n546=6C6H6`6z6\n77.757B7b7l7\n94:=:a:g:m:y:\n:!;);5;B;I;Q;Y;a;j;s;\n123k6r6\n=*=3=?=I=U=`=\n3:3F3U3a3\n7$7*70767<7B7H7N7T7Z7`7f7l7r7x7~7\n8 8&8,82888>8D8J8P8V8\8b8h8n8t8z8\n979I9S9e9p9t9y9\n2T2X2\2t2x2|2\n2,:0:4:8:L:P:\n2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2\n3 3$3(3,3034383<3\n`5h5p5x5\n6 6(60686@6H6P6X6`6h6p6x6\n7 7(70787@7H7P7X7`7h7p7x7\n: :(:@:P:T:d:h:l:p:x:\n;0;@;D;T;X;h;l;p;x;\n<,<<<@<P<T<\<t<\n= =(=@=\n> >(>4>T>X>\>d>x>\n?4?8?@?D?`?\n0 0@0`0\n1(141P1X1\1t1x1\n2,282@2p2x2|2\n3,303L3P3p3\n4$4@4L4X4x4\n5 5<5@5`5|5\n6 6@6`6\n7 7@7`7\n8 8@8`8\n809@9T9h9t9|9\n0$0H0h0\n3@6P6\6d6l6t6|6\n=(=8=H=X=|=\n> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>\n(null)\nmscoree.dll\nKERNEL32.DLL\n ((((( H\n h(((( H\n H\nkernel32.dll\nAFX_DIALOG_LAYOUT bfb9db791b8250ffa8ebc48295c5dbbca757a5ed3bbb01de12a871b5cd9afd5a
... ... ... ... ...
2395 Ransomware M !This program cannot be run in DOS mode.\n`.rdata\n@.data\n@.reloc\nPj8h0XT\n j8h0XT\n+F(_^[;E\nF(@@;F,v\nF(;^ r\nF(;F0u\n^(_^[]\ntuhP[T\ntdh<[T\ntSh([T\nS\_^[]\nS\_^[]\nt39w u&\n_ 9w$u\nHt;O u\nu=j0^VP\nSVWj(3\nPjmhHjT\n jmhHjT\ntj9~8u@j\n9~8ucj\nF4_^[]\n0WWWWW\n0WWWWW\nQQSVWd\n0WWWWW\n@@BBf;\n@@BBf;\n0WWWWW\nAAFFf;\nuBh{"A\n0SSSSS\nHHtXHHt\n>If90t\n>=Yt1j\nj@j ^V\nHtHu4j\ns[S;7|G;w\ntR99u2\nURPQQh8:A\n_VVVVV\n^WWWWW\n0SSSSS\n0SSSSS\n0A@@Ju\n^SSSSS\nj"^SSSSS\n;t$,v-\nUQPXY]Y[\n0SSSSS\n_VVVVV\nt"SS9]\nPPPPPPPP\nPPPPPPPP\n<+t(<-t$:\n+t HHt\nt+WWVPV\n,L) _\\n(R^g_&\n>SZYw<`\nszl26Z\n8) dMU\nTOB3*q{\nc,[MthW\nlx12O?\nC-}y`X\n-' b}u\nuC,kj\\n}v yKx+B\n8Z;HDO@\nff1ynr+\n!HhJtC\n<O`mN\n^tYL3Y\n<X%LAgP\nJQ9{dj\ncvYYKX\nIUC!R<\nk~:7g}\n;`U~\ "M\ndtQPWD\nm[u$SX\n_EdSE5\nL'+?qs\n(6X9SQg\nx^q]te(T\nd'EppUEV\nin.1Hy\n0taL}M\naJ24)Y\nPjQJEv\n5tI\':5\n.y74pa5\nttam~S\nCe[ET'nR\nCpVSR9\n?JIho~`\nj@j6B2i\nvEd0VB@\nU$VPtd\n#K%WJ>WZ/c"\nfHK1OOs\nVT&t`\n_YfKzG\n(VU_Tj\n>NB.Ub\n)9e?pR\nIIQHxS\nd]6d3W\n,Op<0Ih\nEaEM$HP\nMK~AxL\n3)Iu(_\njPjEPM\n"XIPY(\n`m)=H*\njU^sN*V\nt0bx`M\nk1rfJ"\n5`W>k&\nAx5bsB\n/!NEdk:Fl\nMj!%[a\nlw&4TU\n(!G2?*S\nyq9Q`F,\nkt=W,,\n]QME9p.\nu<c]p3\nctbbvW$\nd0P9EvdW\niZ~2Lm\n"?WtLFFJ5\n7^NjLz<O\n8}|/CW\nf#k(wQ\nvd$<1\\nRdjdX<\nPQCpD'\n=L:>b{3\nO<ZR6:\nxSEP<8\nh4,;3W\n|HCB0Y\nl:gi `\nBvbnCj\n&1$mgQ\n')$PM[1\nlP09x7\nfV`^M]\nWEvJFMEjV~\n%!,/$A\njY*u_/F\nhjfONb\niE%vV@:\n;k,,[iA>\n2$D3| \ncDc#In\nY3_n(CS&\n9KD}R\nUxb{l5.a\n8f `RQ\nz@>gh>okA<\nc9@`g~\n>S{wpg\nWL5=0K#\nRj($.#g\n(,}0m`\nWX$Mfe\nVwSUdk1\nW_MdL]c\nrq{3L&\n}$[LnP\nFtFhS\nO8EE3F\nK1ui*^9\nr.`#QX\n]x<]dM\n>!w_\/m\nF':|gW\nmsJ|@I\n5N3K*%\nLMGy\Y\nY4o6M6\n#_4)|ePU\n7/`4DX\nF]mo4%\n'?\-47\n:W> <J*\n3$p-XXhH\nDYBG-qe\nj$-hh3\nQ]uEWP\n6#d<Eo*\n|*DgDj\n~,X{,}-h6\nHJ(@(q\njPu]Ed\nS>:,*c\n#^jY]D\nEEJttW\nIqAobl\n]KIXxl\nd$c4S5P%\nqBiUkQ\nFoQ9Yn\nT#/+53M\nHrs#||\n=xs#'2\nj]]~EuU\nq_Fr(.\nyN<4~e\nB4S&CXS\na\mHFH\nUUu,3d\nNuSPOoI%\n!yeMG"]9\n\Ng[=g\nGe@1.&\ngy.qC\\n5hGXhQ\n.(pO+AaX\n,u?F3i!\nSp;7Fc\na%UnZw\d\nmsaD,J\n&VF^GO\ndE]jt]\n@4QL?\\nE]abE^E\nPXTdVE\n^uVr*)%\n3Qd8PQ\nM^]EES\nKO}pjC\nE3EE{Ejf\nz<klf}\nEcaUEI\nP3EcdE\n@jE*,%P\nuE4j ;d\nMdM4]}\n]tVjME0\nW^v0]W\nEdCPEV\nPMEWFl`\nhjYh$V\nYuF6E5S\n9IM3d&\n_P@uEM\n>qBlFMd\n0~P^oQS\n]8$ddG\nk]JuP,.\n^@t_>h\nEh_PQd\nP ~8$h\nW\Q5fP\ndPjPPdP\n[} hdE\nGFMWj3\n}UPF~P\nE]E[b:\n0E3_0WE\nWhT@QM\nPtFQX;\n3Nj^gj\n$]aEjO\n3]tLbPE\n^3E5Jv\nM+udc@\n7_8UOc\n0_3MAjF\n]EQVthdj\n~\tF^E\n$]~Y0H\nPdW30]\n]9UMQW\nY]%Mue\n^EWuUJ \n~ cVME\\n[3G$3~\n;QY}M]M\nfu,t3\n3LFuMP\njEZ^PnF\nE`j)5R\nu]hhAhU\n8]QW3W\nPdtT^_\njFV@lN\nPU^xE}\n^SM,3v\nErWdtM\nM[c$\Y\nNWSu],\n]M_E][x\ndHdW]W\nS]uKEnpMEW\n5PQcMF,\nUWlD^5E\n^UY]VQ\nZaEa_MM\nM2MWh^\nXF,@;3\nB_EEVP\nE]thE8(\natP3x]\nWPE~jM\nYEjfMa\nhsEAuE3tE\nkP4_MO\nMEWdcMc\n ?XEhd\nVj4E}\\nEu%QW2*\nuJP~%R\nvEB6^d@\nVtjYtF\nP!2XuG\nWvM)Ut\ncVM8M2uf\nV3UE]~\ntX)Ep^\nppda@(u\nTPEAEvP\nE0Y]PW\nuQ@c~P\n8%uVtd\nME]8'EW\nV_3MMVQ\nE0tthK\nP,MPdE\n3PuXdP\nE^dEEU\nE<3jLP\nud15YW\nSWQUUF\n340FWP\n5}M.0\nY]EcFEx\nPPEE@PW\n^P&hF_P\nUAFY;]\n~tQQ0;M;0\nKFyYutP\nM3^;j`\n0/p u{\nFEapPf\n]jFE'cY\n~dE8]t\ntAeaY0\nPY3W3E\nu_Wvvh\n<AWYC$]]]\nFWW]_P\nHhWEEP\n~^MdW]\nQ3_Jzd\nt_ZPW6\n>@tWhn\nWtVMd:\n~0$du)\n<YEXu;\nEEuvRE\n3`M]^[\n[[G8]$\n_P~=3]\n|NuE`h\nvdj{3W\ntEv@d3\n^_]QS^\nEV'tdj\n0P^j$M\nPE}uE_\nucYE]I_G\nG^c]CU\nd3^]Mu\ntUEdEF\nOGEdU2\n`EEE^e\nEMVU8E\njsdcv]D\nVWcvauE5\n]M_PE0\nHGuFMM_F\n:+S$dd\n%W3jPV\nuhpHcd4\n;WMlF,E\nj]MBMM\njV]EHDh\ncxEjj~\nU@uIEu\nctMW#uZ\n @Qj]T\n]jEd]v\na:VG<t\n0jtP8$\n3VtuEE\nu?$rSd\nWFGbM~\nE^SPPu\nEE3uVs\nEEEd,j\nE~G(/K\nPFhY~V\naDAUeE\nVMUStf\nMt[PdU\nYRu^S~\n@hdM4P[\ncMBdePP\nEfcVMA\n+M[[fu\n^ut^Eh\nVhEthF\nNEwP&E\nEX]sQ]\nMP^EYE$\nkQ*]MEx\njSQ;]Q\n+P'_3O.]\nEAsU]E\nj2F_Vu\nGMrMP]\nuM]tMd\n^G~UcL\nc][\PD\n^-PSP0\nEdMME4\n@EP][Wj\ndPU;_Ed\nDVY]EN\nM3VVsEW]\nVQ0uP&EV\n]tdaMc3\nPjduWU\nhB@E^M\nQuE3EE\n]]AUW?U\nFEHP3R\nTA~pdE\nWu8Jcc#dE\nEP]UPU@\n0EEESj\njS]nE]P\n}uPjPx\n{vJhWK\nhYEt0c;\n3QCMPt\n, ]pdt\nutFt^EdcV\ndY~uH~\nMOV(cuE\n0_PEfE\nW3jMQh\nV}UEt-\nd43~M]\n:B$0UI\n;UEVh3\nPQd]Ph\n32(Eu~\n-EyOh(E\nz^EjWdW\nh~ud3Q\n]WuEWd\n'vG]PW\n YMEMF\nVd,EdF\nE.fVEz\nYMYcH\\nuddEdu\n!OJ4@WE\nM]d2E]\n^QhEV~h\nhcjV@Pl\nWMM~Ww\nPjd]M3\n]0EWdU\nPp>V{b~\nF]dMcE\nts@j,(\nd~LdHE\n,MjMH,F\ne^EWPP\ndB]uXdG\nESME;~\n^e~EUP\njjM_EZ~\nETeP]Y\n/-us.+\nf7uuu@\n%\^Wr,\nk{nnnn\n****////\nm?Bh@(\n{=sy2I\n:B@Ay5N\nNu4X+\n%%O%2~\nt <ruU\nt#<ruJ\nt><ru:\nD$ SVWh\nCObject\nCInvalidArgException\nCNotSupportedException\nCMemoryException\nCSimpleException\nCException\nCOleException\nCMapPtrToPtr\nCArchiveException\nCCmdTarget\nGetMonitorInfoA\nGetMonitorInfoW\nEnumDisplayDevicesW\nEnumDisplayMonitors\nMonitorFromPoint\nMonitorFromRect\nMonitorFromWindow\nGetSystemMetrics\nDISPLAY\nInitCommonControls\nInitCommonControlsEx\nHtmlHelpW\nhhctrl.ocx\nCByteArray\nCGdiObject\nCUserException\nCResourceException\nCPtrArray\nCObArray\nbad allocation\nUnknown exception\nHeapQueryInformation\nCorExitProcess\nruntime error \nTLOSS error\nSING error\nDOMAIN error\nAn application has made an attempt to load the C runtime library incorrectly.\nPlease contact the application's support team for more information.\n- Attempt to use MSIL code from this assembly during native code initialization\nThis indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.\n- not enough space for locale information\n- Attempt to initialize the CRT more than once.\nThis indicates a bug in your application.\n- CRT not initialized\n- unable to initialize heap\n- not enough space for lowio initialization\n- not enough space for stdio initialization\n- pure virtual function call\n- not enough space for _onexit/atexit table\n- unable to open console device\n- unexpected heap error\n- unexpected multithread lock error\n- not enough space for thread data\nThis application has requested the Runtime to terminate it in an unusual way.\nPlease contact the application's support team for more information.\n- not enough space for environment\n- not enough space for arguments\n- floating point support not loaded\nMicrosoft Visual C++ Runtime Library\n<program name unknown>\nRuntime Error!\nProgram: \n(null)\n`h````\nxpxxxx\nEncodePointer\nDecodePointer\nFlsFree\nFlsSetValue\nFlsGetValue\nFlsAlloc\nbad exception\nGAIsProcessorFeaturePresent\nKERNEL32\nSunMonTueWedThuFriSat\nJanFebMarAprMayJunJulAugSepOctNovDec\nGetProcessWindowStation\nGetUserObjectInformationA\nGetLastActivePopup\nGetActiveWindow\nMessageBoxA\nUSER32.DLL\n !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\n`h`hhh\nxppwpp\n Complete Object Locator'\n Class Hierarchy Descriptor'\n Base Class Array'\n Base Class Descriptor at (\n Type Descriptor'\n`local static thread guard'\n`managed vector copy constructor iterator'\n`vector vbase copy constructor iterator'\n`vector copy constructor iterator'\n`dynamic atexit destructor for '\n`dynamic initializer for '\n`eh vector vbase copy constructor iterator'\n`eh vector copy constructor iterator'\n`managed vector destructor iterator'\n`managed vector constructor iterator'\n`placement delete[] closure'\n`placement delete closure'\n`omni callsig'\n delete[]\n new[]\n`local vftable constructor closure'\n`local vftable'\n`udt returning'\n`copy constructor closure'\n`eh vector vbase constructor iterator'\n`eh vector destructor iterator'\n`eh vector constructor iterator'\n`virtual displacement map'\n`vector vbase constructor iterator'\n`vector destructor iterator'\n`vector constructor iterator'\n`scalar deleting destructor'\n`default constructor closure'\n`vector deleting destructor'\n`vbase destructor'\n`string'\n`local static guard'\n`typeof'\n`vcall'\n`vbtable'\n`vftable'\noperator\n delete\n__unaligned\n__restrict\n__ptr64\n__clrcall\n__fastcall\n__thiscall\n__stdcall\n__pascal\n__cdecl\n__based(\n !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~\n !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\nHH:mm:ss\ndddd, MMMM dd, yyyy\nMM/dd/yy\nDecember\nNovember\nOctober\nSeptember\nAugust\nFebruary\nJanuary\nSaturday\nFriday\nThursday\nWednesday\nTuesday\nMonday\nSunday\n1#QNAN\n1#SNAN\nCONOUT$\nstring too long\ninvalid string position\nbad allocation\nY'#v#LN\nLa8ayG\ni0H+i(H\nO0H+O(H\nA_A^A]A\_^][\n4?1n~p\n_x<<8t3[f\nipA-2Y\nwr4zR<4\n|7;Q$}2;A |-;A(}(\nIlAwtS~\nhlshsj\n~k@zrG\n|$ ;|$\nL$ #L$\nT$$#T$\n=lshsu0\n[OFF>*\nyAWH;fv\n_PTFZU\nle9B0IQ\nHuf;HL\nMHXVMM8I|\nBOB->(H\nK!M7-601\nbgba"N\n=Q3if6\n|&l>Os]\nb\^T~{\n0$$H $:\n$6d;+/vE\n.M$$@H\nAt[IPZ\n^tIH[%\nH9IH39s\n;Htu$C-l\nd$HAtP\n0PHuHh\nX$%ILH\n\HQ|S$+W,\nPpHtL<\nAd8Hf1\nQHrMpjB\ndj8^YH\nhdhuHP\nI]:uHH\n$HHH$HT\n+L$%9O\nH$)p j\n NuPPe\nS@0wI$\n0(EfHH\naHrPuh\nLtH8HB\nGMPU;\noE_LHH\nt4&Hu A\n93T$I0\n*9H$VP\n0ukt3;\nE5MHjj\nM$jubuH\n|3$f H$\n_HIHJ<\nP|HiTTf\nHgDd]$\nMH:tj7$\n$DH$TW\nMM8HHH\nW^H$$n\nS@;$$$\n@$$d$6\nDMOQHD\nEDD$E]\nT;DupL\nH8$/x3D\nRGH;P$\n$\Ax$j\nDZUALS\n%d DropHel %s NoCo\nd:\Glass\61\Bad\paragraph\Sat\29\Water\consider\62\Lie\22\27\CatchTire.pdb\nTlsGetValue\nHeapAlloc\nHeapFree\nGetSystemDirectoryW\nHeapCreate\nGetModuleFileNameW\nCreateFileW\nGetCurrentDirectoryW\nVirtualProtectEx\nGetLocalTime\nTlsAlloc\nKERNEL32.dll\nCallWindowProcW\nUnregisterHotKey\nBeginDeferWindowPos\nDeferWindowPos\nGetCursorPos\nAppendMenuW\nRegisterClassExW\nTranslateMessage\nGetClassInfoExW\nSetFocus\nCreateMenu\nUnhookWinEvent\nGetFocus\nRegisterWindowMessageW\nGetWindowTextLengthW\nUSER32.dll\nTextOutW\nEscape\nGDI32.dll\nCoUninitialize\nCoRegisterSurrogate\nCoInitialize\nCoTaskMemFree\nCoTaskMemAlloc\nole32.dll\nImageList_DragShowNolock\n_TrackMouseEvent\nCOMCTL32.dll\nOLEAUT32.dll\nAccessibleObjectFromEvent\nGetOleaccVersionInfo\nOLEACC.dll\nwaveInStart\ntimeEndPeriod\nwaveInOpen\nwaveInPrepareHeader\ntimeBeginPeriod\nwaveInClose\nWINMM.dll\nSetLastError\nGetLastError\nLocalAlloc\nLocalFree\nLeaveCriticalSection\nEnterCriticalSection\nGlobalLock\nGlobalReAlloc\nGlobalUnlock\nGlobalHandle\nGlobalAlloc\nInitializeCriticalSection\nTlsSetValue\nLocalReAlloc\nDeleteCriticalSection\nGlobalFree\nTlsFree\nGetProcAddress\nGetModuleHandleW\nInterlockedDecrement\nSizeofResource\nLockResource\nLoadResource\nFindResourceW\nFreeLibrary\nGetCurrentProcessId\nWideCharToMultiByte\nlstrlenW\nFormatMessageW\nMultiByteToWideChar\nCloseHandle\nGetCurrentThreadId\nInterlockedIncrement\nlstrcmpA\nlstrlenA\nGetVersionExA\nlstrcmpW\nLoadLibraryA\nLoadLibraryW\nGlobalDeleteAtom\nGlobalFindAtomW\nGlobalAddAtomW\nGlobalFlags\nWriteFile\nSetFilePointer\nFlushFileBuffers\nGetCurrentProcess\nGetModuleHandleA\nGetCommandLineA\nGetStartupInfoA\nRtlUnwind\nRaiseException\nHeapReAlloc\nHeapSize\nExitProcess\nTerminateProcess\nUnhandledExceptionFilter\nSetUnhandledExceptionFilter\nIsDebuggerPresent\nVirtualFree\nVirtualAlloc\nGetStdHandle\nGetModuleFileNameA\nFreeEnvironmentStringsA\nGetEnvironmentStrings\nFreeEnvironmentStringsW\nGetEnvironmentStringsW\nSetHandleCount\nGetFileType\nQueryPerformanceCounter\nGetTickCount\nGetSystemTimeAsFileTime\nInitializeCriticalSectionAndSpinCount\nGetCPInfo\nGetACP\nGetOEMCP\nIsValidCodePage\nGetLocaleInfoA\nGetConsoleCP\nGetConsoleMode\nLCMapStringA\nLCMapStringW\nGetStringTypeA\nGetStringTypeW\nSetStdHandle\nWriteConsoleA\nGetConsoleOutputCP\nWriteConsoleW\nCreateFileA\nUnhookWindowsHookEx\nMessageBoxW\nEnableWindow\nIsWindowEnabled\nGetLastActivePopup\nGetWindowLongW\nGetParent\nSendMessageW\nGetWindowThreadProcessId\nGetSubMenu\nGetMenuItemCount\nGetMenuItemID\nGetMenuState\nValidateRect\nPeekMessageW\nGetKeyState\nDispatchMessageW\nCallNextHookEx\nSetWindowsHookExW\nGetSysColorBrush\nGetSysColor\nReleaseDC\nGetSystemMetrics\nLoadCursorW\nGetWindowTextW\nCheckMenuItem\nEnableMenuItem\nModifyMenuW\nLoadBitmapW\nGetMenuCheckMarkDimensions\nSetMenuItemBitmaps\nGetWindow\nGetWindowRect\nGetWindowPlacement\nIsIconic\nSystemParametersInfoA\nSetWindowPos\nSetWindowLongW\nGetMenu\nDefWindowProcW\nGetDlgCtrlID\nPtInRect\nCopyRect\nAdjustWindowRectEx\nRegisterClassW\nGetClassInfoW\nCreateWindowExW\nPostMessageW\nGetClientRect\nSetForegroundWindow\nSetMenu\nMapWindowPoints\nGetMessagePos\nGetMessageTime\nDestroyWindow\nGetTopWindow\nGetDlgItem\nGetForegroundWindow\nIsWindow\nRemovePropW\nGetPropW\nSetPropW\nGetClassNameW\nGetClassLongW\nGetCapture\nWinHelpW\nLoadIconW\nSetWindowTextW\nClientToScreen\nDestroyMenu\nTabbedTextOutW\nDrawTextW\nDrawTextExW\nGrayStringW\nPostQuitMessage\nGetDeviceCaps\nCreateBitmap\nGetClipBox\nSetTextColor\nSetBkColor\nDeleteObject\nExtTextOutW\nSaveDC\nRestoreDC\nSetMapMode\nPtVisible\nRectVisible\nSelectObject\nSetViewportOrgEx\nOffsetViewportOrgEx\nSetViewportExtEx\nScaleViewportExtEx\nSetWindowExtEx\nScaleWindowExtEx\nDeleteDC\nGetStockObject\nClosePrinter\nDocumentPropertiesW\nOpenPrinterW\nWINSPOOL.DRV\nCreateStdAccessibleObject\nLresultFromObject\n.PAVCException@@\n.PAVCMemoryException@@\n.PAVCSimpleException@@\n.PAVCObject@@\n.PAVCNotSupportedException@@\n.PAVCInvalidArgException@@\n.?AVCSimpleException@@\n.?AVCException@@\n.?AVCObject@@\n.?AVCMemoryException@@\n.?AVCNotSupportedException@@\n.?AVCInvalidArgException@@\n.?AUCThreadData@@\n.?AVCNoTrackObject@@\n.?AV_AFX_THREAD_STATE@@\n.?AVAFX_MODULE_THREAD_STATE@@\n.?AVAFX_MODULE_STATE@@\n.?AVCDllIsolationWrapperBase@@\n.?AVCComCtlWrapper@@\n.?AVCCommDlgWrapper@@\n.?AVCShellWrapper@@\n.?AV_AFX_BASE_MODULE_STATE@@\n.?AVCOleException@@\n.PAVCOleException@@\n.?AVCMapPtrToPtr@@\n.?AVCAfxStringMgr@@\n.?AUIAtlStringMgr@ATL@@\n.?AVCCmdTarget@@\n.?AUIUnknown@@\n.PAVCArchiveException@@\n.?AVCArchiveException@@\n.?AVCCmdUI@@\n.?AVCHandleMap@@\n.?AVXAccessible@CWnd@@\n.?AVXAccessibleServer@CWnd@@\n.?AVCWnd@@\n.?AVCTestCmdUI@@\n.?AV_AFX_HTMLHELP_STATE@@\n.?AV?$IAccessibleProxyImpl@VCAccessibleProxy@ATL@@@ATL@@\n.?AUIAccessible@@\n.?AUIDispatch@@\n.?AUIAccessibleProxy@@\n.?AV?$CMFCComObject@VCAccessibleProxy@ATL@@@@\n.?AVCAccessibleProxy@ATL@@\n.?AV?$CComObjectRootEx@VCComSingleThreadModel@ATL@@@ATL@@\n.?AVCComObjectRootBase@ATL@@\n.?AUIOleWindow@@\n.?AVCByteArray@@\n.?AVCGdiObject@@\n.?AVCMenu@@\n.?AVCResourceException@@\n.?AVCUserException@@\n.?AVCDC@@\n.?AV?$CArray@W4LoadArrayObjType@CArchive@@ABW412@@@\n.?AVCPtrArray@@\n.?AVCObArray@@\n.?AVtype_info@@\n.?AVbad_exception@std@@\n \nabcdefghijklmnopqrstuvwxyz\nABCDEFGHIJKLMNOPQRSTUVWXYZ\n \nabcdefghijklmnopqrstuvwxyz\nABCDEFGHIJKLMNOPQRSTUVWXYZ\n.?AVlogic_error@std@@\n.?AVlength_error@std@@\n.?AVout_of_range@std@@\n@A_A^A]A\_\n@SUAVH\n7FOF}|e|\nx=C;)K\n'w?(h(\nwlw?(;(T[PV\nQZQRrMrI\n7p#v[p\nhNn{Q?\n]gUx0d<DH\n]-v,a \n/%ep3cT\nE$`t?Q)\nQtDH<\nUHkTW$\npH$H$H}$\nxHJhW0\n9NemK?\ne{PtF\\niZku@z\nSwS}4%'\n=O0]tK\nwmBdNx\nT,L8H \nrzEclf\nHH`DH$\n\#^'#|\nVxH$TP\n)L& Ykm\ndKy\x5\njWHUEA\nR-C*{{\nq(a Zuh\nBHHHP\nPGHhHMH\n$$LTS$RHcHU\nuM$HBIH\nRI$itS\nD#^$@0L\nEHHHHH\nPj(9C@;\nH$eHHH\nHLHHtL\nOEHj}H\n|W:u\M8\nXDE Q:i\nf2 $9\\nHLOh[h@\nED0HHV$\n}ZHPD}\n;VpHjU\n@u">tu\ntM"L(s\nH8O$$Lt\nH$HZ^@\n0yinh$s\nPDH3H](\n$Dd$TIuP\nd dtNH,I\nG#`/VuT\nAL$P90-\nH8D 52\nDHtH@H\n$MH$\j\n`^$LTM\nDZ$PH D\n;c0\L$\nd>w$A \n%f3$pHH\nHxR Xl\ntDR@^T\nY;<TE(\nz;`HHn0\n.?AVexception@std@@\n.?AVbad_alloc@std@@\n<?xml version='1.0' encoding='UTF-8' standalone='yes'?>\n<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>\n <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">\n <security>\n <requestedPrivileges>\n <requestedExecutionLevel level='asInvoker' uiAccess='false' />\n </requestedPrivileges>\n </security>\n </trustInfo>\n</assembly>\nupM?wrN\njfFAieF\nxsOwrN\nwrNywrN\ngbE|gbE\nxsOUwrN\ngcEWhcE\nwrN6xsO\nwrNqxsO\nfbDtgcE\nxsOLxsO\ngbEOhdE\nwrN&wrN\nwrNbxsO\ngcEegcE\nxsO?xsO\nwrN(wrN\nwrNZwrN\nhdE]hdE\nwrN8xsO\nhdE:hcE\nxsO!xsO\nxsNtwrN\ngcEwgcD\nxsOTxsO\nhdEWhcE\nxsO2xsN\nhdE5hdE\nxsOnxsO\nhdEqgcE\nxsOFxsO\nhdEHhdE\nytO%xsO\nvqM8wrN\nwrNuxsO\ngcEwgcE\nxsONxsO\ngcEPgcE\nwrN.xsO\nwrNjxsO\ngcElhdE\nxsOExsO\nhcEHgbD\nxsO#xsO\nxsO_xsO\nhdEahdE\nwrN<xsO\nxsO|wrN\nxsOTxsO\nhdEWhdE\nxsO1xsO\nxsOrxsO\nhdEthdE\n~W7xsO\nvqN0wrN\nxsOsxsO\nhcEuhcE\nxsOJxsO\nxsO(xsO\nxsOhxsO\nhdEjhcE\nxsO@xsO\nxsO xsO\nxsO]xsO\nhdE`gcD\nxsO7xsO\nxsOzxsO\nhdE|hdE\nxsOSxsO\nxsO.xsO\nwrN0wrN\nwrNowrN\ngcEqgcE\nxsOIxsO\ngcEJgcE\nxsO)wrN\nxsOexsO\nhcEghdE\nwrN@xsO\nxsNxsO\nxsOZxsO\nhdE\gcE\nxsO5xsO\nxsO,wrN\nxsOlxsO\ngcEnhcE\nxsOExsO\nxsO$xsO\nxsObxsO\nhdEchcE\nxsO;xsO\nwrN+wrN\nwrNk}xR\nhcEk^Z?\nwrNDzuP\nwrN#xsO\nfaC)zuQ\ngcDj=;)\n4:45,5O5\5b5t5z5\n7 7W7b7s7~7\n99/9Y:\n=,=V=y=\n>8>F>M>W>h>o>v>|>\n4+5N5q5|5\n9%:X:h:\n=7>K>U>m>\n0)1Q1j1\n5O67Y7\n:=;B;M;_;d;o;\n6#6.6^6v6\n6U7c7v7\n<M<p<z<\n=$=,=;=G=M=S=Y=_=e=k=\n>M>[>s>\n3h4w4{4\n475>5E5v5\n;+<E<M<\n>(>=>X>g>s>\n0A0F0K0-121[1m2v2\n989c9v9\n6B7i7q7x7\n8#83888i8\n:+:E:J:n:v:~:\n2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2\n5$5U5]5\n6"7=7E7\n;E;_;w;\n0-1"252S2^2{2\n2A3P3s3\n9/9L9q9v9{9\n: :E:J:O:\n;-;V;h;\n??&?,?>?F?Q?\n;3;V;i;\n=F=L=X=\n4 4$4(4,4\n5D6I6O6S6Y6]6c6g6m6q6v6|6\n8P9X9^9g9n9z9\n;G;b;h;q;x;\n<<$<4<><E<P<Y<o<z<\n=D=I=T=Y=w=(>5>\n?(?1?<?H?M?]?b?h?n?\n00'0,00040]0\n2=2D2H2L2P2T2X2\2`2\n4$4+4C4r5w5\n6$686>6G6Z6~6\n737A7F7\n:":(:-:6:S:Y:d:i:q:w:\n;"?.?a?\n6%6,6;6G6T6x6\n77(7L7{7\n9,:J:p:\n6!6(6,6064686<6@6D6\n7,73787<7@7a7\n7*8084888<8\n:@;M;V;\n;:<E<O<`<k<\n>/>7>=>B>H>\n090?0q0\n10262Y2^2\n2$3*353A3V3]3q3x3\n444C4J4W4z4\n4%5+5G5_5\n5"6,6d6l6\n7!7*767;7@7F7J7P7U7[7`7o7\n8%8G8j8w8\n7=7F7R7\n5?5e5M7{9\n1<1b1J3q5u5y5}5\n2(2o2t2\n2E3N3T3\n7"71767@7N7\n70979=9d9\n?7?A?T?x?\n2 2(2?2X2t2}2\n<m<!=A=1>Z>\n>G?Y?f?r?|?\n203:3R3Y3c3k3x3\n7"747F7X7j7|7b:i:\n; <1<l<\n=*=9=G=O=\=z=\n4)56'6\n060o0|0[1j1\n677D7W7\n9'909C9P9b9n9s9\n:":0:C:O:a:}:\n;";2;8;@;];i;z;\n<$<,<=<E<O<c<j<y<\n=$=F=e=k=t=~=\n>@>M>Y>a>n>t>\n?!?1?6?Y?a?o?\n0'02080A0K0V0]0l0s0y0\n1;1D1J1T1^1e1s1z1\n2!2*212;2@2G2l2w2\n3$3*3;3F3M3V3^3d3l3r3{3\n4#4/464=4F4L4R4W4b4i4\n5!5(51585?5a5|5\n6&6-6M6Z6c6n6z6\n3#3<3C3T3i3y3D>I>O>U>[>a>f>k>q>w>}>\n?#?)?.?3?9???E?K?P?U?[?a?g?m?r?w?}?\n0!0'0+0R0Y0d0o0\n1"161=1M1]1h1s1\n292E2P2_2i2\n3$353>3O3\3e3q3x3\n4(4J4U4^4h4\n535D5K5_5\n6 6'6/666C6K6Q6o6\n7%7,737@7G7T7o7u7\n868N8[8`8x8\n9/9R9Z9`9p9~9\n:":R:Y:h:q:|:\n;0;7;>;M;S;Z;`;t;~;\n<#<)<3<@<N<W<r<\n=='=-=3=D=O=b={=\n>'>J>Q>X>f>r>\n?%?=?P?[?n?t?z?\n0!0(030;0E0K0_0p0\n1 1%1G1O1^1x1\n2/262j2y2\n323?3K3]3c3\n4'4.4R4`4h4t4\n5 5<5X5c5o5|5\n6#6.6A6J6T6\6{6\n6&7-747V7e7s7|7\n8,838=8V8\8m8\n9+9@9N9T9Z9c9z9\n:/:>:H:O:\:r:}:\n;*;A;K;Q;b;m;\n<<-<F<T<[<f<l<v<}<\n=#=3=F=L=X=e=m=\n>&>->4>F>W>^>k>q>y>\n??%?+?0?7?D?K?Q?W?a?i?q?v?\n0 010B0H0X0`0k0s0y0\n1*12191C1I1[1f1\n2-3X3~3\n7/7R7\7h7t7\n8"8'8,818=8I8O8S8Y8]8c8g8m8v8{8\n9 9&9*90949:9>9D9M9R9W9\9a9f9k9p9u9\n:":&:-:1:8:<:B:L:V:`:j:t:~:\n4 4$4(44484<4@4D4P4T4\n6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6\n7,7<7H7L7P7T7X7\7`7t7\n9 9P9T9X9l9|9\n> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>\n? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?|?\n0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0|0\n0L1P1l1\n2,2D2\2t2\n343L3d3|3\n4T8X8\8`8d8h8l8p8t8x8\n9 9$9(9,90989<9D9H9L9P9X9\9`9h9l9p9t9x9|9\n: :$:(:,:0:4:8:<:@:\n; ;,;0;<;H;L;X;\;`;d;h;l;p;t;x;|;\n<(<,<0<4<D<T<`<d<h<l<|<\n< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<\n= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=\n<7@7D7H7L7P7T7X7\7`7d7h7\n8 8(8@8D8\8l8p8t8|8\n9$9(9,90949<9T9d9h9x9|9\n: :$:8:<:L:P:T:\:t:\n; ;0;4;8;@;X;h;l;|;\n< <$<(<0<H<X<\<l<p<t<x<\n=4=D=H=X=\=`=h=\n>0>4>D>H>L>P>X>p>\n?$?(?0?H?X?\?l?p?x?\n0,0<0@0P0T0X0`0x0\n1(1,10181P1T1l1|1\n24282P2`2d2h2l2p2t2x2|2\n34383P3`3d3h3p3\n4(4,4<4@4D4L4d4t4x4\n5(5,5054585@5X5h5l5|5\n6$6<6@6X6h6l6p6\n707@7D7T7X7\7d7|7\n8,808@8D8H8P8h8x8|8\n:8:T:x:\n;$;0;8;P;X;|;\n<4<@<`<h<|<\n< =0=8=<=@=D=L=h=p=\n>0><>d>l>x>\n?0?<?D?p?\n0$000P0\0\n1<1H1h1p1\n20282L2\2p2x2\n3(3H3P3t3\n4,444H4P4l4t4\n505P5p5\n686X6x6\n7$7@7L7h7p7t7\n8,808L8P8X8`8h8l8t8\n9(9H9T9p9\n:0:P:p:\n; ;4;<;D;L;P;T;\;p;x;\n; <0<D<X<d<l<\n0 0@0`0x0\n1(1H1p1\n606L6h6\n848\8p8\n:\:h:l:t:x:\n?$?,?4?<?D?L?T?\?d?l?t?|?\n 2$202\n: :$:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:\n; ;$;(;,;8;p?t?\ntDelete\nNoRemove\nForceRemove\n@comctl32.dll\n@comdlg32.dll\n@shell32.dll\n@%s (%s:%d)\n%s (%s:%d)\nException thrown in destructor\nf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp\nAfxWnd90su\nAfxControlBar90su\nAfxMDIFrame90su\nAfxFrameOrView90su\nAfxOleControl90su\nAfxOldWndProc423\nUSER32\nYaccParent\naccChildCount\naccChild\naccName\naccValue\naccDescription\naccRole\naccState\naccHelp\naccHelpTopic\naccKeyboardShortcut\naccFocus\naccSelection\naccDefaultAction\naccSelect\naccLocation\naccNavigate\naccHitTest\naccDoDefaultAction\n#32768\nf:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl\ncommctrl_DragListMsg\n%2\CLSID\n%2\Insertable\n%2\protocol\StdFileEditing\verb\0\n%2\protocol\StdFileEditing\server\nCLSID\%1\nCLSID\%1\ProgID\nCLSID\%1\InprocHandler32\nole32.dll\nCLSID\%1\LocalServer32\nCLSID\%1\Verb\0\n&Edit,0,2\nCLSID\%1\Verb\1\n&Open,0,2\nCLSID\%1\Insertable\nCLSID\%1\AuxUserType\2\nCLSID\%1\AuxUserType\3\nCLSID\%1\DefaultIcon\nCLSID\%1\MiscStatus\nCLSID\%1\InProcServer32\nCLSID\%1\DocObject\n%2\DocObject\nCLSID\%1\Printable\nCLSID\%1\DefaultExtension\n%9, %8\nf:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin1.inl\n@kernel32.dll\nmscoree.dll\n(null)\nKERNEL32.DLL\n ((((( H\n h(((( H\n H\nInvalid DateTime\nInvalid DateTimeSpan\nForceRemove\nNoRemove\nDelete\nComponent Categories\nFileType\nInterface\nHardware\nSECURITY\nSYSTEM\nSoftware\nTypeLib\nApartment\nVS_VERSION_INFO\nStringFileInfo\n0c0904b0\nCompanyName\nTheretire Great Quickown\nFileDescription\nTwenty Guide\nFileVersion\n2.3.78.74\nInternalName\nTwenty Guide\nLegalCopyright\nLicensed under the GNU GPL, v3.\nOriginalFilename\nTwenty Guide.exe\nProductName\nTwenty Guide\nProductVersion\n2.3.78.74\nVarFileInfo\nTranslation\nstrange\n&suggest 7d809e8c9b98c16647bbfac49854c28ecc3fe6d4345410deeaa79445cc50cf51
2396 Ransomware M This program must be run under Win32\n`.itext\n`.data\n.idata\n.rdata\n@.reloc\nB.rsrc\nCardinal\nstringX\nWideString\nTObject\nTObject\nSystem\nIInterface\nSystem\nTInterfacedObject\nFastMM Borland Edition \n 2004, 2005 Pierre le Riche / Professional Software Development\nAn unexpected memory leak has occurred. \nThe unexpected small block leaks are:\n bytes: \nUnknown\nString\nThe sizes of unexpected leaked medium and large blocks are: \nUnexpected Memory Leak\n~KxI[)\nSOFTWARE\Borland\Delphi\RTL\nFPUMaskValue\n_^[YY]\nVWUUh|@@\nZTUWVSPRTj\nYZ]_^[\ntChp^@\nkernel32.dll\nGetLongPathNameA\nSoftware\Borland\Locales\nSoftware\Borland\Delphi\Locales\n_^[YY]\nTStream|n@\nTHandleStream\nTFileStreamho@\nTCustomMemoryStream\nTMemoryStream\nException\nEHeapException\nEOutOfMemory\nEInOutError\nEExternal\nEExternalException\nEIntError\nEDivByZero\nERangeError\nEIntOverflow\nEMathError\nEInvalidOp\nEZeroDivide$~@\nEOverflow\nEUnderflow\nEInvalidPointer0\nEInvalidCast\nEConvertError\nEAccessViolation\nEPrivilege\nEStackOverflow\nEControlC\nEVariantError\nEAssertionFailed\nEAbstractError\nEIntfCastError\nEOSError\nESafecallException\nSysUtils\nSysUtils\nTThreadLocalCounter\n$TMultiReadExclusiveWriteSynchronizer\n-{{{{1\n-ffff!\n-{{{{1\n-ffff!\n-[[[[1\n-ffff!\n-[[[[1\n-ffff!\n_^[YY]\n_^[YY]\n<*t"<0r=<9w9i\nINFNAN\n$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)\n_^[YY]\nt%HtIHtm\n$Z]_^[\nQQQQQQSVW3\nQQQQQSVW\n_^[YY]\nTErrorRec\nTExceptRec\n$YZ_^[\nYZ]_^[\nm/d/yy\nmmmm d, yyyy\n:mm:ss\nTUnitHashArray\nSysUtils\nTModuleInfo\nkernel32.dll\nGetDiskFreeSpaceExA\n(Z]_^[\nYZ]_^[\nTFileName\nTSearchRecp\ntUI|RVS\nkernel32.dll\nCreateToolhelp32Snapshot\nHeap32ListFirst\nHeap32ListNext\nHeap32First\nHeap32Next\nToolhelp32ReadProcessMemory\nProcess32First\nProcess32Next\nProcess32FirstW\nProcess32NextW\nThread32First\nThread32Next\nModule32First\nModule32Next\nModule32FirstW\nModule32NextW\nQkkbal\n-Portions Copyright (c) 1999 by Hagen Reddmann\nQQQQSV\nQQQQQQQSVW\nQQQQQS\nYZ]_^[\n_^[YY]\n_^[YY]\nTByteArray\n_^[YY]\nR50qQ+\nR`}_ M]\n[;dMt>(\nTFGInt\n_^[YY]\n0_^[YY]\n_^[YY]\nYZ]_^[\nTDigits\nDigits4bA\nTInteger\nTInteger4bA\nDigits\nDigits\nYZ]_^[\n$Z]_^[\n_^[YY]\nYZ]_^[\n_^[YY]\nTKeyObj\nTZeppelinU\noleaut32.dll\nVariantChangeTypeEx\nVarNeg\nVarNot\nVarAdd\nVarSub\nVarMul\nVarDiv\nVarIdiv\nVarMod\nVarAnd\nVarXor\nVarCmp\nVarI4FromStr\nVarR4FromStr\nVarR8FromStr\nVarDateFromStr\nVarCyFromStr\nVarBoolFromStr\nVarBstrFromCy\nVarBstrFromDate\nVarBstrFromBool\nTCustomVariantType\nTCustomVariantTypeP\nVariants\nEVariantInvalidOpError\nEVariantTypeCastError\nEVariantOverflowError\nEVariantInvalidArgError\nEVariantBadVarTypeError\nEVariantBadIndexError\nEVariantArrayLockedError\nEVariantArrayCreateError\nEVariantNotImplError\nEVariantOutOfMemoryError\nEVariantUnexpectedErrort\nEVariantDispatchError\nQQQQSV\nSmallint\nInteger\nSingle\nDouble\nCurrency\nOleStr\nDispatch\nBoolean\nVariant\nUnknown\nDecimal\nShortInt\nLongWord\nString\nArray \nByRef \nVariants\n_^[YY]\nt~hDzC\nEStreamError\nEFileStreamError\nEFCreateError\nEFOpenError\nEFilerError \nEReadError\nEWriteError\nEListError\nEStringListError\nTThreadListD\nTPersistent\nTPersistentD\nClasses\nIStringsAdapter\nClasses\nTStrings\nTStrings\nClasses\nTStringItem\nTStringList\nTStringListP\nClasses\nTStream\nTHandleStream\nTFileStream\nTCustomMemoryStreamT\nTMemoryStream\nTStringStreamX\nEThread\nTThread\nTRegGroup\nTRegGroups\nStrings\nS$_^[Y]\n_^[YY]\nSd]_^[\n$Z]_^[\n_^[YY]\ntEh|zC\nIWideStringsAdapter\nWideStrings\nTWideStrings\nTWideStrings,&B\nWideStrings\nTWideStringItem\nTWideStringList((B\nTWideStringListx'B\nWideStrings\nQQQQQQSVW\nStrings\n_^[YY]\nS$_^[Y]\nSh]_^[\n$Z]_^[\nC ;C$u\n0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ_\nTRegExpr\nERegExpr\n^$.[()|?+*\{]}\nNo errors\nTRegExpr(comp): Null Argument\nTRegExpr(comp): Regexp Too Big\nTRegExpr(comp): ParseReg Too Many ()\nTRegExpr(comp): ParseReg Unmatched ()\nTRegExpr(comp): ParseReg Junk On End\nTRegExpr(comp): *+ Operand Could Be Empty\nTRegExpr(comp): Nested *?+\nTRegExpr(comp): Bad Hex Digit\nTRegExpr(comp): Invalid [] Range\nTRegExpr(comp): Parse Atom Trailing \\nTRegExpr(comp): No Hex Code After \x\nTRegExpr(comp): Hex Code After \x Is Too Big\nTRegExpr(comp): Unmatched []\nTRegExpr(comp): Internal Urp\nTRegExpr(comp): ?+*{ Follows Nothing\nTRegExpr(comp): Trailing \\nTRegExpr(comp): RarseAtom Internal Disaster\nTRegExpr(comp): BRACES Argument Too Big\nTRegExpr(comp): BRACE Min Param Greater then Max\nTRegExpr(comp): Unclosed (?#Comment)\nTRegExpr(comp): If you want take part in beta-testing BRACES '{min,max}' and non-greedy ops '*?', '+?', '??' for complex cases - remove '.' from {.$DEFINE ComplexBraces}\nTRegExpr(comp): Urecognized Modifier\nTRegExpr(comp): LinePairedSeparator must countain two different chars or no chars at all\nTRegExpr(exec): RegRepeat Called Inappropriately\nTRegExpr(exec): MatchPrim Memory Corruption\nTRegExpr(exec): MatchPrim Corrupted Pointers\nTRegExpr(exec): Not Assigned Expression Property\nTRegExpr(exec): Corrupted Program\nTRegExpr(exec): No Input String Specified\nTRegExpr(exec): Offset Must Be Greater Then 0\nTRegExpr(exec): ExecNext Without Exec[Pos]\nTRegExpr(exec): GetInputString Without InputString\nTRegExpr(dump): Corrupted Opcode\nTRegExpr(exec): Loop Stack Exceeded\nTRegExpr(exec): Loop Without LoopEntry !\nTRegExpr(misc): Bad p-code imported\nUnknown error\n0123456789\n0123456789\nQQQQSVW\n (pos \n+85GT`\n[_(OGb\nQQQQQS\n_^[YY]\nTPresenceU\nTExcludeFiles\nTExcludeFoldersU\nQQQQQQQSVW\nTDrivesAndShares\nQQQQQQQS3\nTReadme\nQQQQQQSVW\nTUnlockAndEncryptU\nTSearcherU\nTTaskKillerU\nQQQQQQQQSVW\n{Q.X6>\nQQQQQSVW3\nkernel32.dll\nQQQQSVW\nQQQQQQQQ3\n'FM52b\nQQQQQQ3\nZC.7D>8\n!!! D !!!\n!!! LOCALPUBKEY !!!\n!!! ENCLOCALPRIVKEY !!!\n"w{.y}|\n`"k[H6\n+K+v;w\nmm\Nc(9\n1(j.w_\nRuntime error at 00000000\n0123456789ABCDEF\nABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\n?456789:;<=\n !"#$%&'()*+,-./0123\nL&&jl66Z~??A\nOh44\Q\nsb11S*\nuB!!c \nD""fT**~;\n;d22Vt::N\nJ%%o\..r8\n0123456789ABCDEFW\n^$.[()|?+*\{\noleaut32.dll\nSysFreeString\nSysReAllocStringLen\nSysAllocStringLen\nadvapi32.dll\nRegQueryValueExA\nRegOpenKeyExA\nRegCloseKey\nuser32.dll\nGetKeyboardType\nDestroyWindow\nLoadStringA\nMessageBoxA\nCharNextA\nkernel32.dll\nGetACP\nVirtualFree\nVirtualAlloc\nGetTickCount\nQueryPerformanceCounter\nGetCurrentThreadId\nInterlockedDecrement\nInterlockedIncrement\nVirtualQuery\nWideCharToMultiByte\nMultiByteToWideChar\nlstrlenA\nlstrcpynA\nLoadLibraryExA\nGetThreadLocale\nGetStartupInfoA\nGetProcAddress\nGetModuleHandleA\nGetModuleFileNameA\nGetLocaleInfoA\nGetCommandLineA\nFreeLibrary\nFindFirstFileA\nFindClose\nExitProcess\nExitThread\nCreateThread\nWriteFile\nUnhandledExceptionFilter\nRtlUnwind\nRaiseException\nGetStdHandle\nkernel32.dll\nTlsSetValue\nTlsGetValue\nLocalAlloc\nGetModuleHandleA\nuser32.dll\nTranslateMessage\nPeekMessageA\nMsgWaitForMultipleObjects\nMessageBoxA\nLoadStringA\nGetSystemMetrics\nDispatchMessageA\nCharNextW\nCharLowerBuffW\nCharNextA\nCharLowerBuffA\nCharLowerA\nCharUpperA\nCharToOemA\nmpr.dll\nWNetOpenEnumW\nWNetEnumResourceW\nWNetCloseEnum\nkernel32.dll\nWriteProcessMemory\nWriteFile\nWaitForSingleObject\nVirtualQuery\nVirtualAllocEx\nTerminateThread\nTerminateProcess\nSetLastError\nSetFileTime\nSetFilePointer\nSetFileAttributesW\nSetEvent\nSetEndOfFile\nResumeThread\nResetEvent\nReadFile\nOpenProcess\nMoveFileW\nLoadLibraryA\nLeaveCriticalSection\nInitializeCriticalSection\nGlobalUnlock\nGlobalReAlloc\nGlobalHandle\nGlobalLock\nGlobalFree\nGlobalAlloc\nGetVersionExA\nGetUserDefaultLangID\nGetTickCount\nGetThreadLocale\nGetStdHandle\nGetProcAddress\nGetModuleHandleA\nGetModuleFileNameW\nGetModuleFileNameA\nGetLocaleInfoA\nGetLocalTime\nGetLastError\nGetFullPathNameA\nGetFileAttributesW\nGetFileAttributesA\nGetExitCodeThread\nGetEnvironmentVariableW\nGetEnvironmentVariableA\nGetDriveTypeA\nGetDiskFreeSpaceA\nGetDateFormatA\nGetCurrentThreadId\nGetCurrentProcess\nGetCommandLineW\nGetCPInfo\nInterlockedIncrement\nInterlockedExchange\nInterlockedDecrement\nFreeLibrary\nFormatMessageA\nFindNextFileW\nFindFirstFileW\nFindClose\nFileTimeToLocalFileTime\nFileTimeToDosDateTime\nExitThread\nExitProcess\nEnumCalendarInfoA\nEnterCriticalSection\nDuplicateHandle\nDeleteFileW\nDeleteCriticalSection\nCreateThread\nCreateRemoteThread\nCreateProcessW\nCreateProcessA\nCreatePipe\nCreateFileW\nCreateFileA\nCreateEventA\nCreateDirectoryW\nCopyFileW\nCompareStringW\nCompareStringA\nCloseHandle\nadvapi32.dll\nRegSetValueExW\nRegSetValueExA\nRegQueryValueExW\nRegQueryValueExA\nRegOpenKeyExW\nRegOpenKeyExA\nRegEnumKeyExA\nRegDeleteValueA\nRegDeleteKeyA\nRegCreateKeyExW\nRegCreateKeyExA\nRegCloseKey\nOpenProcessToken\nLookupPrivilegeValueA\nAdjustTokenPrivileges\nkernel32.dll\nwininet.dll\nInternetReadFile\nInternetOpenUrlA\nInternetOpenA\nInternetConnectA\nInternetCloseHandle\nHttpSendRequestA\nHttpOpenRequestA\nHttpAddRequestHeadersA\nshell32.dll\nShellExecuteW\nshell32.dll\nSHGetSpecialFolderLocation\nshell32.dll\nSHGetPathFromIDListW\nSHGetMalloc\noleaut32.dll\nSafeArrayPtrOfIndex\nSafeArrayGetUBound\nSafeArrayGetLBound\nSafeArrayCreate\nVariantChangeType\nVariantCopy\nVariantClear\nVariantInit\n0,0H0T0d0\n0)1-111I1X1\1x1\n2"2*222:2B2J2R2Z2b2j2r2z2\n3&3*5@5Q5t5\n6E6M6R6w6\n6 7&7,777\n7F9U9\9\n: :*:A:V:i:v:\n;*;e;o;\n< <5<A<^<g<\n0_1o1"2+2=2I2T2\n5)5<5W5]5u5\n7-898x8\n=!=%=5=:=_=\n>2>N>o>\n>&?;?H?h?\n-0T0X0\0`0d0h0l0p0t0#2\2\n263?3p3w3\n>,>:>n>\n>$?-?_?h?\n3/393D3U3\n5!5+53595G5b5w5\n6M6V6[6}6\n717<7y8\n0R4[4b5k5o<\n1,1<1C1\n2&22292Z5\n6b7o7{7\n848B8G8`8p8\n9 9*949>9H9R9\9f9p9z9\n:&:.:6:>:F:N:V:^:f:n:v:~:\n;&;.;6;>;F;N;V;^;f;n;v;~;\n<&<.<6<><F<N<V<^<f<n<v<~<\n> >$>0>P>X>\>`>d>h>l>p>t>x>|>\n?<?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?\n5d6l6t6|6\n7$7,747<7D7L7T7\7d7l7t7|7\n8$8,848<8D8L8T8\8d8l8t8|8\n9$9,949<9H9\9d9h9l9p9t9x9|9\n: :(:,:0:4:8:<:@:D:H:\:|:\n;,;4;8;<;@;D;H;L;P;T;l;\n<<<D<H<L<P<T<X<\<`<d<t<\n=(=H=P=T=X=\=`=d=h=l=p=\n> >0>P>X>\>`>d>h>l>p>t>x>\n? ?$?(?,?@?`?h?l?p?t?x?|?\n0$0(0,0004080<0@0D0T0t0|0\n1(1014181<1@1D1H1L1P1d1\n2 2@2H2L2P2T2X2\2`2d2h2|2\n343A3I3X3e3m3\n3(4,4044484<4@4X4d4h4\n>+?<?R?\n3155595=5A5E5I5M5Q5U5Y5]5a5e5i5m5q5u5A6H6\n:6<K<V=\n96:]:q:\n=+=^=q=\n>->=>P>\>|>\n20353C3g3\n465N5`5x5\n7.7E7W7\n:?:D:^:\n:;;;Z;l;\n=9=R=b={=\n?F?W?`?\n33+3k3\n5E6W6k6\n7%747P7~7\n88%8-868B8G8P8Y8b8k8t8\n8%9C9l9\n>R>W>e>n>\n>?-?H?Q?l?\n060?0S0a0u0\n1&161>1S1[1x1\n3/464E4L4j4\n: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:\n; ;(;,;4;8;@;D;L;P;X;\;d;h;p;t;|;\n<$<(<0<4<<<@<H<L<T<X<`<d<l<p<x<|<\n=!=+=5=?=I=S=]=g=q=|=\n>$>.>9>K>\>l>\n>0F0N0V0^0f0n0v0~0\n1*1/1<1A1N1S1`1e1r1w1\n3;3[3j3r3\n;@;~;Z<\n2(3B3T3\n7"7X7d7R9\n;.<V<h<\n>C>K>~>\n2!3-3:3B3O3V3j3v3\n8P8@9^9,:d:\n<<5<S<X<\n000<0P0\n7p7N8w8\n314?4M4[4h4\n3 3.3<3J3W3e3\n5$525?5M5\n8(8c8r8~8\n:9:V:w<\n4$434B4\n6/6@6z6\n7T7e7v7\n7.8?8P8a8\n9*9;9u9\n:O:`:q:\n:);:;K;\;\n<%<6<p<\n=J=[=l=}=\n=$>5>F>W>\n? ?1?k?|?\n0E0V0g0x0\n0101A1R1\n2/2l2}2\n3L3]3n3\n3,4=4N4_4\n5.5?5|5\n66\6m6~6\n6<7M7^7o7\n8-8>8O8\n9/9l9}9\n:L:]:n:\n:,;=;N;_;\n<.<?<|<\n==\=m=~=\n2 2$2(2,202>2P2^2b2t2\n2"3-343D3O3^3j3{3\n4!474R4a4f4l4\n5.5E5p5\n:K:S:d:\n8A9N9V9\n: ;T;];n;\n4$4(4,4044484<4@4D4R4\n4=5M5[5i5\n8W8k8y8\n:&:P:[:c:p:\n;8<V<t<*===Q=\n(050d0\n2.262>2F2}2\n33%3*353;3@3K3Q3V3a3g3l3w3}3\n4'4-424=4C4H4S4Y4^4i4\n6$6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6\n747T7\7`7d7h7l7p7t7x7|7\n8$8(8,8084888<8@8D8`8\n9(9H9P9T9X9\9`9d9h9l9p9\n: :$:(:,:0:4:8:<:@:\:|:\n;(;H;P;T;X;\;`;d;h;l;p;\n;7<F<]<\n<'=6=M=u=\n?%?4?K?Z?n?}?\n]0k0z0\n:$:<:F<J<N<R<V<Z<^<b<f<j<n<r<v<z<~<\n1!1%1)1-111C1[1X3\3`3d3h3l3p3t3x3|3\n9)9>9C9P9p9\n<&<G<]<u<z<\n= =(=0=8=@=H=P=X=`=h=p=x=\n>,>4>8><>@>D>H>L>P>T>h>\n?$?D?L?P?T?X?\?`?d?h?l?|?\n0,0L0T0X0\0`0d0h0l0p0t0\n1 1$1<1\1d1h1l1p1t1x1|1\n2 2$2(2,2024282<2@2D2H2L2V2Z2l2}2\n3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3\n4$4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4\n5<5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5\n6$6,6064686<6@6D6H6L6P6T6X6\6`6d6h6v6\n7(7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7\n8,84888<8@8D8H8L8P8T8`8\n949<9@9D9H9L9P9T9X9\9\n<$<1<C<H<\n5!6>6|6\n<;<c<u<\n=F>Q>[>\n1P2U2|2\n77#7'7+7/73777;7?7C7G7K7O7S7W7[7_7c7g7k7o7|8\n:+;e;o;\n<*<1<W<d<s<\n0+101\1\n2,222;2H2i2n2\n3&4+4=4[4g4n4x4\n6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6\n7!7,7<7L7T7X7\7`7d7h7l7p7t7x7|7\n8$898=8e8o8t8z8\n<=.=O=n==>d>\n)0V0m0\n1$2^2y2E3\n898X8h8\n=8>P><?u?\n4,44484<4@4D4H4L4P4T4\n55#5'5\n6#616?6M6[6i6w6\n77-7;7I7W7e7s7\n0'0:0M0e0v0\n2"3J3r3\n55#5'5+5\n3;4B4^4b4f4j4n4r4v4z4]6B8U9\n<(<5<`<y<\n99#9A9E9I9M9Q9U9Y9]9a9e9\n4L5P5T5X5\5`5d5h5l5p5t5x5|5\n>#>:>Y>\n?6?D?k?\nL0^0l0\n1"242H2\n40484<4@4D4H4L4P4T4X4\n9$9,9094989<9@9D9H9L9x9\n0N0\0i0y0\n5(555[5\n7!8/8c8\n;&;4;R;~;\n;Y<g<u<\n> >$>(>,>0>4>8>F>\n?%?H?n?\n171L1e1p1\n60686<6@6D6H6L6P6T6X6\6`6n6\n6(7H7P7T7X7\7`7d7h7l7p7t7x7\n1&161G1W1u1\n737F7\7o7\n7>8o8S9\n<%<@<Q<\n?#?1?X?\n"0T0a0}0\n3/3G3_3w3\n4%456\6x6\n8(8N8[9k9\n:/:9:>:J:`:\n: ;2;h;\n<%</<4<@<J<O<[<e<j<x<\n=+=8=G=T=c=p=\n>.>J>T>Y>c>m>|>\n?(?2?7?A?T?c?z?\n00090T0]0\n192@2F2O2Z2e2l2x2\n6+6>6P6\6`6l6p6\n00%0)0/060:0T0]0f0r0|0\n1 1%1/141>1C1M1R1\1a1k1p1z1\n64@4O4[4c4m4x4\n5#545?5U5f5{5\n6"6/6;6H6T6g6s6}6\n1(1H1,7074787<7@7D8L8P8t8x8\n9 9$9(9,909l9t9|9\n044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4\n5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5\n6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6\n7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7\njjjjjjjj\njjjjjjjj\njjjjjjjj eb920e0fc0c360abb901e04dce172459b63bbda3ab8152350885db4b44d63ce5

2397 rows × 4 columns

Created by: Avinash
Downloaded 2 times
Comments Enabled: True
Comments: 0


Version: 1
Date: Dec. 26, 2022, 4:53 p.m.
Created by: Avinash
Description: Only ransomware strings
Categories: Ransomware(2512)
Rows: 1826 | Cols: 4 | Reports Used: 2512   Download Version 1 (31.1 MB)

Comments

No comments to display