Sample details: 35320119bdf9b8953c68ffd5fd55a986 --

Hashes
MD5: 35320119bdf9b8953c68ffd5fd55a986
SHA1: 832af2ba23d8c3dd725a9e6ad542e6118ed29dc6
SHA256: e4a62b2f18d22b58a104c2976e2e5104606e470a064bdf7d0bb2b0e9aba84bf9
SSDEEP: 6144:IkgmBi2yls2Yt8QFRpRaoI5/HJ1W97A4ck7g1Ok3rswn2fexNtqoWGDgE62W4oNf:IkgmBi2yls2YtInFTqoWGDgE62ucv25Z
Details
File Type: PE32
Yara Hits
YRP/IsPE32 | YRP/IsNET_EXE | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/anti_dbg | YRP/TEAN | YRP/Str_Win32_Http_API |
Source
http://mosoli.com/hfUJRMDK64HDF/file/sato.exe
http://mosoli.com/hfUJRMDK64HDF/file/sato.exe
Strings
          	            !This program cannot be run in DOS mode.
Rich)p
`.data
bad allocation
bad allocation
W"Vof\93
junubolu sedumitu tajeleworezenoyuwizukobagipete bukuwopiregofokokoci
pafitafehifeluzefovubibemire
juxozigeme
duviforipeceyukepoxodejaporusi
zofenodokigi giyodo jiwici
vector<T> too long
v2.0.50727
#Strings
<Module>
_GET_FILEEX_INFO_LEVELS
LanguageSupport
<CrtImplementationDetails>
gcroot<System::String ^>
HINSTANCE__
tagMSG
HWND__
$ArrayType$$$BY00Q6MPBXXZ
<CppImplementationDetails>
tagRECT
Progress
$ArrayType$$$BY0A@P6AXXZ
_SECURITY_ATTRIBUTES
$ArrayType$$$BY0A@P6AHXZ
__enative_startup_state
TriBool
_EXCEPTION_POINTERS
$ArrayType$$$BY0P@$$CBD
bad_alloc
_Aux_cont
_Container_base_aux
logic_error
basic_string<char,std::char_traits<char>,std::allocator<char> >
length_error
_Fac_node
_s__RTTICompleteObjectLocator
$_s__RTTIBaseClassArray$_extraBytes_12
$_TypeDescriptor$_extraBytes_23
_s__ThrowInfo
_s__RTTIClassHierarchyDescriptor
$ArrayType$$$BY01Q6AXXZ
_s__RTTIBaseClassDescriptor2
$ArrayType$$$BY02Q6AXXZ
$_s__RTTIBaseClassArray$_extraBytes_8
$_s__RTTIBaseClassArray$_extraBytes_4
$_TypeDescriptor$_extraBytes_22
_s__CatchableType
$_TypeDescriptor$_extraBytes_20
$_s__CatchableTypeArray$_extraBytes_8
$_s__CatchableTypeArray$_extraBytes_12
exception
ThisModule
$ArrayType$$$BY0BP@$$CBD
$ArrayType$$$BY0EG@$$CBD
$ArrayType$$$BY0BN@$$CBD
$ArrayType$$$BY0L@$$CBD
$ArrayType$$$BY0BL@$$CBD
$ArrayType$$$BY0BN@$$CB_W
$ArrayType$$$BY0BF@$$CB_W
$ArrayType$$$BY0CG@$$CB_W
$ArrayType$$$BY0CP@$$CB_W
$ArrayType$$$BY0BD@$$CB_W
$ArrayType$$$BY0BL@$$CB_W
$ArrayType$$$BY0DJ@$$CB_W
$ArrayType$$$BY0N@$$CB_W
$ArrayType$$$BY0BD@$$CBD
_Nonscalar_ptr_iterator_tag
list<unsigned int,std::allocator<unsigned int> >
vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >
allocator<unsigned int>
_List_val<unsigned int,std::allocator<unsigned int> >
allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > >
_Vector_val<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >
_List_ptr<unsigned int,std::allocator<unsigned int> >
_List_nod<unsigned int,std::allocator<unsigned int> >
_Container_base_aux_alloc_real<std::allocator<unsigned int> >
_Container_base_aux_alloc_real<std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >
allocator<std::_Aux_cont>
allocator<std::_List_nod<unsigned int,std::allocator<unsigned int> >::_Node>
allocator<std::_List_nod<unsigned int,std::allocator<unsigned int> >::_Node *>
HRGN__
HKEY__
HDROP__
tagPOINT
_SYSTEMTIME
HBRUSH__
$ArrayType$$$BY0MI@_W
_STARTUPINFOA
_devicemodeW
$ArrayType$$$BY01K
$ArrayType$$$BY0EAA@D
_STARTUPINFOW
_PROCESS_INFORMATION
HRSRC__
mscorlib
Microsoft.VisualC
CallConvStdcall
System.Runtime.CompilerServices
CallConvCdecl
CallConvThiscall
IsVolatile
DebugInfoInPDBAttribute
MiscellaneousBitsAttribute
NativeCppClassAttribute
System
IsConst
UnsafeValueTypeAttribute
ValueType
Exception
Object
DecoratedNameAttribute
IsImplicitlyDereferenced
IsLong
DebuggerStepThroughAttribute
System.Diagnostics
ReliabilityContractAttribute
System.Runtime.ConstrainedExecution
Consistency
EventArgs
PrePrepareMethodAttribute
EventHandler
FixedAddressValueTypeAttribute
CLSCompliantAttribute
GCHandle
System.Runtime.InteropServices
IntPtr
AppDomain
RuntimeHelpers
Interlocked
System.Threading
SecurityAction
System.Security.Permissions
SecurityPermissionAttribute
AssemblyAttributesGoHereSM
Marshal
IsSignUnspecifiedByte
OutOfMemoryException
IsBoxed
ModuleHandle
RuntimeMethodHandle
RuntimeTypeHandle
Module
System.Reflection
IsCopyConstructed
SuppressUnmanagedCodeSecurityAttribute
System.Security
<CrtImplementationDetails>.NativeDll.IsSafeForManagedCode
<CrtImplementationDetails>.DefaultDomain.DoNothing
cookie
<CrtImplementationDetails>.DefaultDomain.HasPerProcess
<CrtImplementationDetails>.DefaultDomain.HasNative
<CrtImplementationDetails>.DefaultDomain.NeedsInitialization
<CrtImplementationDetails>.DefaultDomain.Initialize
?A0x250abb45.??__E?Initialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA@@YMXXZ
?A0x250abb45.??__E?Uninitialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA@@YMXXZ
?A0x250abb45.??__E?IsDefaultDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2_NA@@YMXXZ
?A0x250abb45.??__E?InitializedVtables@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A@@YMXXZ
?A0x250abb45.??__E?InitializedNative@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A@@YMXXZ
?A0x250abb45.??__E?InitializedPerProcess@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A@@YMXXZ
?A0x250abb45.??__E?InitializedPerAppDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A@@YMXXZ
<CrtImplementationDetails>.LanguageSupport.InitializeVtables
<CrtImplementationDetails>.LanguageSupport.InitializeDefaultAppDomain
<CrtImplementationDetails>.LanguageSupport.InitializeNative
<CrtImplementationDetails>.LanguageSupport.InitializePerProcess
<CrtImplementationDetails>.LanguageSupport.InitializePerAppDomain
<CrtImplementationDetails>.LanguageSupport.InitializeUninitializer
<CrtImplementationDetails>.LanguageSupport._Initialize
<CrtImplementationDetails>.LanguageSupport.UninitializeAppDomain
<CrtImplementationDetails>.LanguageSupport._UninitializeDefaultDomain
<CrtImplementationDetails>.LanguageSupport.UninitializeDefaultDomain
<CrtImplementationDetails>.LanguageSupport.DomainUnload
source
arguments
<CrtImplementationDetails>.LanguageSupport.Cleanup
innerException
<CrtImplementationDetails>.LanguageSupport.Initialize
.cctor
<CrtImplementationDetails>.LanguageSupport.{ctor}
<CrtImplementationDetails>.LanguageSupport.{dtor}
gcroot<System::String ^>.{ctor}
gcroot<System::String ^>.{dtor}
gcroot<System::String ^>.=
gcroot<System::String ^>..P$AAVString@System@@
__ehvec_dtor
?A0x644ad69d.ArrayUnwindFilter
pExPtrs
__ArrayUnwind
std.bad_alloc.{dtor}
std.bad_alloc.__vecDelDtor
std.logic_error.{dtor}
std.logic_error.what
std.logic_error.__vecDelDtor
std.logic_error.{ctor}
std.bad_alloc.{ctor}
<CrtImplementationDetails>.AtExitLock._handle
<CrtImplementationDetails>.AtExitLock._lock_Set
<CrtImplementationDetails>.AtExitLock._lock_Get
<CrtImplementationDetails>.AtExitLock._lock_Destruct
<CrtImplementationDetails>.AtExitLock.IsInitialized
<CrtImplementationDetails>.AtExitLock.AddRef
?A0x11773762.__alloc_global_lock
?A0x11773762.__dealloc_global_lock
_exit_callback
_initatexit_m
_initatexit_app_domain
_app_exit_callback
_initterm_e
pfbegin
_initterm
<CrtImplementationDetails>.ThisModule.Handle
_initterm_m
<CrtImplementationDetails>.ThisModule.ResolveMethod<void const * __clrcall(void)>
methodToken
___CxxCallUnwindDtor
std._Aux_cont.{ctor}
_Pcont
std._Container_base_aux.{ctor}
std._Container_base_aux.{dtor}
_Message
__unnamed000
_Where
delete
std.length_error.{ctor}
std.length_error.{dtor}
std.length_error.__vecDelDtor
tea_decrypt_sdojfnhoiasd
tea_decryptBlock_oasnfoasdfm
dummy_sojfngaosdf
mytcslen_gfnjsdaof
mytcscpy_sojngosd
mytcsstr_sdfgsdfgh
foobar
runWithLoader_asojdnfoasd
payloadBuf
DandR_jngoaisnfosdak
std.list<unsigned int,std::allocator<unsigned int> >.{ctor}
std.list<unsigned int,std::allocator<unsigned int> >.{dtor}
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.{ctor}
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.{dtor}
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.pop_back
std._List_val<unsigned int,std::allocator<unsigned int> >.{dtor}
std._Vector_val<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.{dtor}
std._List_ptr<unsigned int,std::allocator<unsigned int> >.{dtor}
std._List_nod<unsigned int,std::allocator<unsigned int> >.{dtor}
std.list<unsigned int,std::allocator<unsigned int> >._Buynode
std.list<unsigned int,std::allocator<unsigned int> >._Tidy
std._List_val<unsigned int,std::allocator<unsigned int> >.{ctor}
std._Container_base_aux_alloc_real<std::allocator<unsigned int> >.{dtor}
std.allocator<unsigned int>.{ctor}
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.empty
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >._Buy
_Capacity
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >._Destroy
_First
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >._Tidy
std._Vector_val<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.{ctor}
std._Container_base_aux_alloc_real<std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.{dtor}
std.allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > >.{ctor}
std.list<unsigned int,std::allocator<unsigned int> >._Nextnode
_Pnode
std.list<unsigned int,std::allocator<unsigned int> >._Prevnode
std.list<unsigned int,std::allocator<unsigned int> >.clear
std._List_ptr<unsigned int,std::allocator<unsigned int> >.{ctor}
std.allocator<std::_Aux_cont>.deallocate
__unnamed001
std.allocator<std::_List_nod<unsigned int,std::allocator<unsigned int> >::_Node>.deallocate
std.allocator<std::_List_nod<unsigned int,std::allocator<unsigned int> >::_Node>.allocate
_Count
std.allocator<std::_List_nod<unsigned int,std::allocator<unsigned int> >::_Node *>.construct
std.allocator<std::_List_nod<unsigned int,std::allocator<unsigned int> >::_Node *>.destroy
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.size
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.max_size
std.vector<std::basic_string<char,std::char_traits<char>,std::allocator<char> >,std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >._Xlen
std._Container_base_aux_alloc_real<std::allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > > >.{ctor}
std.allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > >.deallocate
std.allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > >.allocate
std._List_nod<unsigned int,std::allocator<unsigned int> >.{ctor}
std.allocator<std::_Aux_cont>.allocate
std.allocator<std::_List_nod<unsigned int,std::allocator<unsigned int> >::_Node>.destroy
std.allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > >.max_size
std._Container_base_aux_alloc_real<std::allocator<unsigned int> >.{ctor}
std._Destroy_range<class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >
std.allocator<std::_List_nod<unsigned int,std::allocator<unsigned int> >::_Node *>.{ctor}<unsigned int>
std._Allocate<struct std::_List_nod<unsigned int,class std::allocator<unsigned int> >::_Node>
std._Construct<struct std::_List_nod<unsigned int,class std::allocator<unsigned int> >::_Node *,struct std::_List_nod<unsigned int,class std::allocator<unsigned int> >::_Node *>
std._Destroy<struct std::_List_nod<unsigned int,class std::allocator<unsigned int> >::_Node *>
std.allocator<std::_Aux_cont>.{ctor}<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >
std._Allocate<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >
std.allocator<std::_List_nod<unsigned int,std::allocator<unsigned int> >::_Node>.{ctor}<unsigned int>
std._Allocate<class std::_Aux_cont>
std._Destroy<struct std::_List_nod<unsigned int,class std::allocator<unsigned int> >::_Node>
std.allocator<std::_Aux_cont>.{ctor}<unsigned int>
std._Ptr_cat<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > *,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > *>
__unnamed003
std.allocator<std::basic_string<char,std::char_traits<char>,std::allocator<char> > >.destroy
std._Destroy<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > >
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.__delDtor
_getFiberPtrId
_amsg_exit
__security_init_cookie
<CrtImplementationDetails>.ThrowModuleLoadException
<CrtImplementationDetails>.DoDllLanguageSupportValidation
<CrtImplementationDetails>.ThrowNestedModuleLoadException
<CrtImplementationDetails>.RegisterModuleUninitializer
<CrtImplementationDetails>.DoCallBackInDefaultDomain
_cexit
terminate
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.{ctor}
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.{dtor}
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.c_str
delete[]
std.exception.{ctor}
std.exception.{dtor}
_encode_pointer
_decode_pointer
_encoded_null
__FrameUnwindFilter
CloseFigure
lstrcpyA
CreateEllipticRgn
WinHttpAddRequestHeaders
RegSetValueExW
__CxxQueryExceptionSize
__CxxDetectRethrow
SetProcessShutdownParameters
DragQueryPoint
VirtualProtect
CreateDIBPatternBrush
GetPrivateProfileSectionNamesA
_CxxThrowException
AbortPath
GetProcessVersion
WinHttpOpenRequest
WinHttpOpen
__CxxUnregisterExceptionObject
GetStartupInfoA
AnyPopup
CreateDCW
__CxxExceptionFilter
SetWindowContextHelpId
lstrcatA
CreateFileW
printf
GetFileAttributesW
CombineRgn
FatalAppExitW
LoadLibraryW
GetFirmwareEnvironmentVariableA
EndPath
GlobalAlloc
ExpandEnvironmentStringsA
__CxxRegisterExceptionObject
GetTickCount
OutputDebugStringW
malloc
FillPath
CreateProcessW
FindResourceExW
AdjustWindowRect
std.exception.what
GetFileSize
?A0x250abb45.__xc_mp_z
?Uninitialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA
?A0x250abb45.?Uninitialized$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?A0x250abb45.__xi_vt_a
?InitializedPerAppDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A
?A0x250abb45.?InitializedPerAppDomain$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?IsDefaultDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2_NA
?A0x250abb45.?IsDefaultDomain$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?A0x250abb45.__xc_ma_a
?InitializedNative@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A
?A0x250abb45.?InitializedNative$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?Initialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA
?A0x250abb45.?Initialized$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?A0x250abb45.__xc_ma_z
?InitializedVtables@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A
?A0x250abb45.?InitializedVtables$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?A0x250abb45.__xi_vt_z
?InitializedPerProcess@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A
?A0x250abb45.?InitializedPerProcess$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?InitializedPerProcess@DefaultDomain@<CrtImplementationDetails>@@2_NA
?Entered@DefaultDomain@<CrtImplementationDetails>@@2_NA
?InitializedNative@DefaultDomain@<CrtImplementationDetails>@@2_NA
?Count@AllDomains@<CrtImplementationDetails>@@2HA
?hasNative@DefaultDomain@<CrtImplementationDetails>@@0W4State@TriBool@2@A
?hasPerProcess@DefaultDomain@<CrtImplementationDetails>@@0W4State@TriBool@2@A
?InitializedNativeFromCCTOR@DefaultDomain@<CrtImplementationDetails>@@2_NA
?A0x250abb45.__xc_mp_a
__unep@?DoNothing@DefaultDomain@<CrtImplementationDetails>@@$$FCGJPAX@Z
__unep@?_UninitializeDefaultDomain@LanguageSupport@<CrtImplementationDetails>@@$$FCGJPAX@Z
??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
??_7bad_alloc@std@@6B@
??_R1A@?0A@EA@exception@std@@8
??_R1A@?0A@EA@logic_error@std@@8
??_R0?AVexception@std@@@8
??_R2bad_alloc@std@@8
??_R1A@?0A@EA@bad_alloc@std@@8
??_7logic_error@std@@6B@
??_R3bad_alloc@std@@8
??_R0?AVbad_alloc@std@@@8
??_R4logic_error@std@@6B@
??_R2exception@std@@8
??_R3exception@std@@8
??_R2logic_error@std@@8
??_R3logic_error@std@@8
??_R0?AVlogic_error@std@@@8
??_R4bad_alloc@std@@6B@
std.?A0x9e79dd2a._bad_alloc_Message
std.?A0x9e79dd2a._Fac_head
__exit_list_size_app_domain
__onexitbegin_app_domain
?A0x11773762.__exit_list_size
__onexitend_app_domain
?A0x11773762.__onexitbegin_m
?A0x11773762.__onexitend_m
?_lock@AtExitLock@<CrtImplementationDetails>@@$$Q0PAXA
?_ref_count@AtExitLock@<CrtImplementationDetails>@@$$Q0HA
?A0x662d8675.unnamed-global-0
?A0x662d8675.unnamed-global-1
?A0x662d8675.unnamed-global-2
?A0x662d8675.unnamed-global-3
?A0x662d8675.unnamed-global-4
?A0x662d8675.unnamed-global-5
?A0x662d8675.unnamed-global-6
?A0x662d8675.unnamed-global-7
?A0x662d8675.unnamed-global-8
?A0x662d8675.unnamed-global-9
?A0x662d8675.unnamed-global-10
?A0x662d8675.unnamed-global-11
?A0x662d8675.unnamed-global-12
?A0x662d8675.unnamed-global-13
?A0x662d8675.unnamed-global-14
?A0x662d8675.unnamed-global-15
?A0x662d8675.unnamed-global-16
?A0x662d8675.unnamed-global-17
??_C@_0BD@OLBABOEK@vector?$DMT?$DO?5too?5long?$AA@
_TI3?AVlength_error@std@@
wndCnt
??_R2length_error@std@@8
_CT??_R0?AVlength_error@std@@@8??0length_error@std@@$$FQAE@ABV01@@Z40
_CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@$$FQAE@ABV01@@Z40
??_R4length_error@std@@6B@
??_7length_error@std@@6B@
??_R0?AVlength_error@std@@@8
_CTA2?AVbad_alloc@std@@
_CTA3?AVlength_error@std@@
??_R3length_error@std@@8
_TI2?AVbad_alloc@std@@
_CT??_R0?AVexception@std@@@8??0exception@std@@$$FQAE@ABV01@@Z12
??_R1A@?0A@EA@length_error@std@@8
std.?A0x662d8675._bad_alloc_Message
_CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@$$FQAE@ABV01@@Z12
payloadSize
__xc_z
__native_vcclrit_reason
__xc_a
__xi_a
__native_startup_state
__xi_z
__native_startup_lock
__native_dllmain_reason
??_7type_info@@6B@
value__
<MarshalCopy>
op_Explicit
ToPointer
KeepAlive
IsDefaultAppDomain
get_CurrentDomain
PrepareConstrainedRegions
get_Target
set_Target
Increment
Decrement
Exchange
CompareExchange
GetExceptionPointers
FromIntPtr
ToIntPtr
AllocHGlobal
FreeHGlobal
GetTypeFromHandle
get_Module
GetFunctionPointer
ResolveMethodHandle
get_ModuleHandle
GetExceptionCode
_stub.exe
 E	 E	
 E	 E	
 E	 E	
 E	 E	
 E	 E	 
 E	 E	
8 E	 E	
	 E	 E	 E	 E	 E	 E	 E	 E	 E		
 E	 E	
 E	 E	 E	
 E	 E		
SkipVerification
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
JJ csm
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
MSVCR90.dll
??3@YAXPAX@Z
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
KERNEL32.dll
GetFileSize
FindResourceExW
CreateProcessW
OutputDebugStringW
GetTickCount
ExpandEnvironmentStringsA
GlobalAlloc
GetFirmwareEnvironmentVariableA
LoadLibraryW
FatalAppExitW
GetFileAttributesW
CreateFileW
lstrcatA
GetStartupInfoA
GetProcessVersion
GetPrivateProfileSectionNamesA
VirtualProtect
SetProcessShutdownParameters
lstrcpyA
AdjustWindowRect
SetWindowContextHelpId
AnyPopup
USER32.dll
FillPath
EndPath
CombineRgn
CreateDCW
AbortPath
CreateDIBPatternBrush
CreateEllipticRgn
CloseFigure
GDI32.dll
RegSetValueExW
ADVAPI32.dll
DragQueryPoint
SHELL32.dll
WinHttpOpen
WinHttpOpenRequest
WinHttpAddRequestHeaders
WINHTTP.dll
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
MSVCP90.dll
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
malloc
__CxxRegisterExceptionObject
printf
??_V@YAXPAX@Z
__CxxExceptionFilter
__CxxUnregisterExceptionObject
_CxxThrowException
__CxxDetectRethrow
__CxxQueryExceptionSize
??2@YAPAXI@Z
_cexit
_amsg_exit
_encode_pointer
_decode_pointer
_encoded_null
__FrameUnwindFilter
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
msvcm90.dll
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
_CorExeMain
mscoree.dll
.?AVtype_info@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVbad_alloc@std@@
jagGZZC
_WqbhN
G,0=/8
TI2S+rx
j5IlWn|K
:~"BGy
5Is3zg
0,U0-/Q
&f06SQ}x%
[u,rLKx\
<TO9@7
fu{St=	y
&RpuQ&	
&RC{xn
cfgh<;K
~D4q3HN
KD+AFw
6p'VlB
:iznE"
-kU}6(
ON M2 
L{n%353
`-DO.:
|`B.An
?o&=#>"%
OT6erD
a6'w7c
1quv 0.g 
Y2iK])kd
	?aE**X
ZYR+'e
`Y?6Jj
\,2z8!{
9F =TK/AE
8&L~HM+]
nx_Z)N
7!fkW)r
7!fkW)r
7!fkW)r
7!fkW)r
7!fkW)r
s<N+3|
]0!yd_
aUIM3qM
?gMP?A
c@)32z
vFIw_:
T]m rr
X4v*V 
EJL$T1[
J)hqsA
)6&k\o
+[y))5hf@
Gv9fF5
U0mBT+
L@$H"_H
/S8	]j
`/`*HN
e!$:z9
J+:^`${-Im
ZwP}E7
@LA"3h
[(vx(|`I
=_o.`X
OD>[Uq7
Pz)lfs~)
P~(*`k
PX(*`k
+<TEQ^
Kkp!TO6*
Z(8RC~oX
$e=hj}
ab_z-Y
(:6|L:2$
#[S0[/G
,[.S-F
kA,&C5
A}<2053
?W<.Hp
dKW	#v
DoeydY
Aq>Y-`
y~YHuF
_ttqyr
(8cI#,+
E@<IK]/
2!`,lf
f>v&gN
@A6I9T
Y.G<?v
=q3(ObM'9
qr;G#f
\;bsi| 
;2DTj%
pYQOAxN,
YzBDnz
@we`sG
3iY_pY
4G^;#}l
a fp|RCW
]k7qn0b
#W[nL[
o G!Wf
e3?XJ2
Y}	L$<
6|.fk+
`k\c%"
4aQ<\"
.>9m4Cd
F@+n	'9
oiiDk(d
E/f hv
rq@H+.
RhxjyF
"6Lxr!
_cINoY
y nK4V
SRxhSTf
K#adPE
MH=4OR
xW}jZAI
w8CHPMPt
2!kJn%
NA[LZ"`
pof|k~
g+zus+
%p|RCW
w^0[d}|
JwR]=7
]&nEW	n6
_,x[|P
Ae=Rzdt
[uJA=~(
dPL#.>
?vc8|e
-BWu4D
ycn`~#
Fk,k8PY
9hn|8k
_&<gmS
6>yzq&b
8`z*Pp
*TZUP`
s?cgd2
s|?Qe8 G
<Uu	g&
y>DJ,O
s]Jq#d
9hn|8k
S#:]m<f=
uM5j|I
fVC~Kh0N
5G%o0F8
$(0bsh
KgvV,3
,Hg:duW
vus6z~
+tvbR?
^zA:R/lH
#o<;nrL@
@^	VVB<
C%uniW
I(=429
Gl=A)E1
6tU`KP
&t>3hYI
Qk!(OW
fjRD`hJD
WEI]G$h
~-J!Hp"
8%He$Rj
uLo<XK
m<OK_c+
lKxcMC
><pLql
rn}E9U
(@klnd,?*
t9rrzu\^
ND;>6`
u"bR:Y
.Xc9Or
hznbc?
spf<,R
5+vDJ[
	#:=M@
[a{]aK
e	-'h;
v]Uc`#
0blv*U
i|@LdT@
)Yn`beQQ
H(c9E 
^4T('=
EM;c	,
dpYroj7
!=/:Wp
|F	R&\
 AGRD:
i\q_HI
U:@6=s
^I,"=1
E [;VU
<`A5ZaB4
W{=]Nc
`A5ZaB4
mo#6VM
JJs4?\H
b=/TSN
hzMsb=tx
%gS|ik
I'n*{&
1M$S#	
VC5%hXa
gxx`>Xt
*dHGXL%)
-03p@w
u4<aOS
yAz;<\oe
qfAo-B
cqmb09{?
#9F^7YJ
t{MZr3
v"_x&D
\cB+Gd
=p/HnO
GJQ{}-
h- nIE	e
55P+I)
_Q?qL`
wzFb>	
b?46'pi
]4i]!a
p"yYSZz
,'j%7,
TYvi{-
Mhza6|
C{Sh+7
UOc0:<z
q"O_ rp
sONdZ"
@%^k5y9
0Y+'q-AxKk]
H~x(4T
I7QC6Wl
cdD.JT
3d,T>;e
]kI$Oyn
cN=~zw
l#SUl)
3d,T>P
})rOq5
})rOq5
]Oq2ST
r6EBv,r
0kp|\v
Ohk>f=
^TXMb<m.
xK!rB!
gSL#Y~!
n[d2mu
w$FLjJk
P c7iLr
\QdOFK-
yBEcyj
	3/Rt&
'9ML-y
s?]&vc
'9ML-y
[h02xi
Ny.Y>#
'9ML-y
T{[dRC
.fNS]v
JFZ!$P
K'\fkc
D a}}o/
	?~^s{
"|"WE&
Y>&.b]s
7xFf]"
UPn"\]
55G@"D
55G@"D
h`nSzRiu
/_sR4+
i;HP+G
5BnOq	
\{Q[)\
3<|T%Pa
YYZ!kD#w
"x8%SwCo
8,{r%k
LYk'3V
8,{r%k
|^H|~'
Gm?P^s
>^l>e2
V~Yr%B8-y
e4pS~-
2=hm#O+u
#9	|[]
q9R\!SJ
oWQyXu
Gn^wn+Rj
nZIYT 
--`\?-
	:4iV{
tiN2|ZO
{ $:Wl
f(5r	8
.=~vk=
l@Vb'B
[UUB^bV
:SG/(.U?
r+gC32]
TR.pa4g
sxu3oNt
%:/4RM#
Nr!7n;\
bV|XW\
	:4iV{
_1%_Hpb
]m<	<4g
.7b;Xd
pL46m$f
pL46m$f
,*S"6,
)?\Z%V
m#9|(KZG
BRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRB
R	:::::::::::::::::::::::::::::::::::::	R
NNNNNNNNNNNNNNNNNNNNNNNNNNN
NFNFNFFFNFFFFFFFF
R:NNFNFNFNFFFFNFFFFFF
R:NNFNFNFNFNFFFFFFFFFFF
NFNFNFNFFNFNFFNFFFFFF
R:NNNFNFNFNFFFFNFFFFFFFFF
NNNNNFNFNNFNFFFNFFFFFFFF
NFNFNNFNFNFFFNFFFFFFFFFFFF
NNNNFNNFNFNFNFNFNFNFFFF
NNNFNNFNNFNNFNFFFFFFFFFFFFF
NNNNNNNFNNFNFNFNFNFFFFFFFFFF
NNNNNFNNFNFNFNFNFFFNFNFFFFFFF
NNNNNNNNNNFNFNFNFNFFFFFFFF
NNNNNNFNFNNFNFNFFFNFNFFNFFFFF
NNNNNNNNNFNNFNFNFNFFFN
FFFFFFFF
NNNNNNNNNFNFNFNFFNFFFNFFFFFFFF
NNNNNFNNNNNFNFNFNFNFFFFFFFFFFFN:R
NNNNNNFNFNNFNFNFFFNFNFNFFFF
NNNNNNNNNFNNNFNNFFFFFFFFFFFF
NNNNNNNNNFNFNFNFNFNFFNFFFFFN:R
NNNNNNFNNFNNFNFNFNFNFFFFFF
NNNNNNNNNFNFNFNFFNFFFNFFF
NNNNNFNNNNFNFNFFNFNFFFF
NNNNNNFNFNNFNNFFNFFNFF
NNNNNNNNFNNFNFNFFNFFF
$$$$$$$$
bbbb<<<<
4444444444
yyyyyoyoyooooooooooooooy
yoooooo
yooooooo
yyooooooooo
yyyooooo
yyyyyoooooo
yyyyyooooo
yyyyyyyooooo
yyyyyyyooooooo
GGGGGG
%%%%%%%%%Q
%%%%%%%%Q
%%%%%%%Q
333333333333333333333333333333333333333333333333333uuuuuuuuuuuuuuuuuu33333uvvvvvvJvJJJJJJJJJJu3333uvvvJJJJ
Ju3333uvvvJJJJJJ
u3333uvvvvJJJJ
Ju3333u
vvvvJJJJJ
Ju3333u
vvvvJJJJJ
Ju3333u
vvvvvJJJJJ
Ju3333u
vvvvJJJJJJ
vu3333u
vvvvJJJJ
JJu3333u
vvvvvJJJJJ
Ju3333u
vvvJJJJJJJu3333u
vvvJJJJ
vu3333u
eh3333
mz------.3333.
m------
333333333333333333333333333333333333333333333333333333333333333333333333333
000000000000000000
555555555555
000000000000000000
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app"></assemblyIdentity><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.VC90.CRT" version="9.0.21022.8" processorArchitecture="x86" publicKeyToken="1fc8b3b9a1e18e3b"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo></assembly>